Bug#773327: debian-efi mailing list

2014-12-22 Thread Raphael Hertzog
Hi,

On Tue, 16 Dec 2014, Steve McIntyre wrote:
 OK, I think we have enough to get started. I've opened #773327 to ask
 for the new list - please follow up there too?

I believe such a list would be useful as EFI support is important
and hard to get right. I have been working on bring UEFI support to
live-build and I would have appreciated having this list to seek feedback
and help while trying to implement this (and this is not over yet,
we know that the current implementation does not work everywhere).

+1 from me.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#751498: closed by Laszlo Boszormenyi (GCS) g...@debian.org (Bug#751498: fixed in python-greenlet 0.4.5-1)

2014-12-22 Thread GCS
Hi Bálint,

On Fri, Dec 19, 2014 at 10:21 PM, Balint Reczey bal...@balintreczey.hu wrote:
 On Sat, 15 Nov 2014 13:49:10 +0100 Ivo De Decker iv...@debian.org wrote:
 The arm* build failure is fixed by this patch from ubuntu (tested on abel):

 http://patches.ubuntu.com/p/python-greenlet/python-greenlet_0.4.2-1ubuntu1.patch

 T-p-u sounds a bit better, do you plan going this way?
 If you don't have time now I would happily fix this in an NMU.
 I've updated the package[1]. Can someone test it on any ARM
architecture to see if it builds correctly? Will ask the Release Team
for a t-p-u upload.

Thanks,
Laszlo/GCS
[1] dget -x http://www.barcikacomp.hu/gcs/python-greenlet_0.4.2-2.dsc


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#611141: Error: /undefined in ff

2014-12-22 Thread Yuriy M. Kaminskiy
Problem was lack of proper handling for EXTRASAMPLE_UNASSOCALPHA in tiff2ps.
Attached patch should fix this and related issues (should be applicable to
3.9.latest and 4.0.latest)
Warning: only minimal testing passed, likely should be forwarded to and handled
by upstream.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
NotDashEscaped: You need GnuPG to verify this message

From: Yuriy M. Kaminskiy yum...@gmail.com
Subject: [PATCH] tiff2ps: fix unassociated alpha and other extrasamples != 0

See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611141

Index: tiff-3.9.4/tools/tiff2ps.c
===
--- tiff-3.9.4.orig/tools/tiff2ps.c	2014-12-22 08:55:32.344597548 +0300
+++ tiff-3.9.4/tools/tiff2ps.c	2014-12-22 10:49:54.632097174 +0300
@@ -1553,7 +1553,15 @@ PS_Lvl2page(FILE* fd, TIFF* tif, uint32 
 		break;
 }
 			}
-			byte_count -= j;
+			byte_count = j;
+		} else if (extrasamples != 0) {
+			int i, j = 0;
+			int ncomps = samplesperpixel - extrasamples;
+			for (i = 0; i  byte_count; i+=samplesperpixel) {
+memmove(buf_data + j, buf_data + i, ncomps);
+j += ncomps;
+			}
+			byte_count = j;
 		}
 
 		if (ascii85) {
@@ -1881,6 +1889,8 @@ PSDataBW(FILE* fd, TIFF* tif, uint32 w, 
 	unsigned char* cp;
 	tsize_t stripsize = TIFFStripSize(tif);
 	tstrip_t s;
+	int sp = planarconfiguration == PLANARCONFIG_SEPARATE ? 1 : samplesperpixel;
+	int nc = samplesperpixel - extrasamples;
 
 #if defined( EXP_ASCII85ENCODER )
 	int	ascii85_l;		/* Length, in bytes, of ascii85_p[] data */
@@ -1932,6 +1942,10 @@ PSDataBW(FILE* fd, TIFF* tif, uint32 w, 
 *cp = ~*cp;
 			cp++;
 		}
+		if(planarconfiguration == PLANARCONFIG_SEPARATE) {
+		cc /= samplesperpixel;
+		nc = cc * (samplesperpixel - extrasamples);
+		}
 		/*
 		 * for 16 bits, the two bytes must be most significant
 		 * byte first
@@ -1942,12 +1956,18 @@ PSDataBW(FILE* fd, TIFF* tif, uint32 w, 
 		if (ascii85) {
 #if defined( EXP_ASCII85ENCODER )
 			if (alpha) {
-int adjust, i;
-for (i = 0; i  cc; i+=2) {
-	adjust = 255 - cp[i + 1];
-cp[i / 2] = cp[i] + adjust;
+int adjust, i, j = 0;
+for (i = 0; i  cc; i += sp) {
+	adjust = 255 - cp[i + nc];
+cp[j++] = cp[i] + adjust;
 }
-cc /= 2;
+cc = j;
+			} else if (sp != 1) {
+int i, j = 0;
+for (i = 0; i  cc; i += sp) {
+cp[j++] = cp[i];
+}
+cc = j;
 			}
 
 			ascii85_l = Ascii85EncodeBlock( ascii85_p, 1, cp, cc );
@@ -1955,15 +1975,15 @@ PSDataBW(FILE* fd, TIFF* tif, uint32 w, 
 			if ( ascii85_l  0 )
 			fwrite( ascii85_p, ascii85_l, 1, fd );
 #else
-			while (cc--  0)
-Ascii85Put(*cp++, fd);
+			for (; cc  0; cc -= sp, cp += sp)
+Ascii85Put(*cp, fd);
 #endif /* EXP_ASCII85_ENCODER */
 		} else {
 			unsigned char c;
 
 			if (alpha) {
 int adjust;
-while (cc--  0) {
+for ( ; cc = sp; cc -= sp, cp += sp) {
 	DOBREAK(breaklen, 1, fd);
 	/*
 	 * For images with alpha, matte against
@@ -1971,13 +1991,12 @@ PSDataBW(FILE* fd, TIFF* tif, uint32 w, 
 	 *Cback * (1 - Aimage)
 	 * where Cback = 1.
 	 */
-	adjust = 255 - cp[1];
-	c = *cp++ + adjust; PUTHEX(c,fd);
-	cp++, cc--;
+	adjust = 255 - cp[nc];
+	c = *cp + adjust; PUTHEX(c,fd);
 }
 			} else {
-while (cc--  0) {
-	c = *cp++;
+for (; cc = sp; cc -= sp, cp += sp) {
+	c = *cp;
 	DOBREAK(breaklen, 1, fd);
 	PUTHEX(c, fd);
 }
-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iF4EAREIAAYFAlSX0T8ACgkQKZn9iF16KMOOrAD+OF914uqGQSFAtgZvlud5MnXX
ZMmlThUokSBRsr2tZvwBAIx5VJmrvhWMKf0JWePZLBv6uyH/C7Kzr7VAKYG+Eur2
=zt2i
-END PGP SIGNATURE-


Bug#773697: network-manager: Wi-Fi not connected after computer restart if the Lan cable is disconnected

2014-12-22 Thread otas.pe
Package: network-manager
Version: 0.9.10.0-4
Severity: important

Dear Maintainer,

So far the problem with network-manager is not solved. Every time if I restart
my laptop with disconnected Lan cable then Wi-Fi is connected to favorite
network but internet connection does not work. If during computer restart Lan
cable is connected then after Lan cable disconnecting Wi-Fi works well and
internet connection as well.

My laptop is Lenovo Ideapad B560

03:00.0 Ethernet controller: Qualcomm Atheros AR8131 Gigabit Ethernet (rev c0)
04:00.0 Network controller: Broadcom Corporation BCM4313 802.11bgn Wireless
Network Adapter (rev 01)

Broadcom firmware firmware-brcm80211 is installed. Used kernel version does not
have any effect for this issue.

Thanks

Ota



-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (980, 'unstable'), (200, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.18.0-trunk-686-pae (SMP w/2 CPU cores)
Locale: LANG=cs_CZ.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager depends on:
ii  adduser3.113+nmu3
ii  dbus   1.8.12-1
ii  init-system-helpers1.22
ii  isc-dhcp-client4.3.1-5
ii  libc6  2.19-13
ii  libdbus-1-31.8.12-1
ii  libdbus-glib-1-2   0.102-1
ii  libgcrypt201.6.2-4+b1
ii  libglib2.0-0   2.42.1-1
ii  libgnutls-deb0-28  3.3.8-5
ii  libgudev-1.0-0 215-8
ii  libmm-glib01.4.0-1
ii  libndp01.4-2
ii  libnewt0.520.52.17-1+b1
ii  libnl-3-2003.2.24-2
ii  libnl-genl-3-200   3.2.24-2
ii  libnl-route-3-200  3.2.24-2
ii  libnm-glib40.9.10.0-4
ii  libnm-util20.9.10.0-4
ii  libpam-systemd 215-8
ii  libpolkit-gobject-1-0  0.105-8
ii  libreadline6   6.3-8+b2
ii  libsoup2.4-1   2.48.0-1
ii  libsystemd0215-8
ii  libteamdctl0   1.12-1
ii  libuuid1   2.25.2-4
ii  lsb-base   4.1+Debian13+nmu1
ii  policykit-10.105-8
ii  udev   215-8
ii  wpasupplicant  2.3-1

Versions of packages network-manager recommends:
ii  crda3.13-1
ii  dnsmasq-base2.72-2
ii  iptables1.4.21-2+b1
ii  iputils-arping  3:20121221-5+b2
ii  modemmanager1.4.0-1
ii  ppp 2.4.6-3

Versions of packages network-manager suggests:
ii  avahi-autoipd  0.6.31-4+b2
pn  libteam-utils  none

-- Configuration Files:
/etc/NetworkManager/NetworkManager.conf changed:
[main]
plugins=ifupdown,keyfile
[ifupdown]
managed=true


-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#765109: fglrx-driver: Black screen after xorg startup

2014-12-22 Thread Mathieu Pourcel
I thought the blacklist of radeon was done in /etc/modprobe.d/ by fglrx 
driver installation .. I will retry and check ;)
Maybe my problem is also that I don't success in disabling hybrid 
graphic (it's unchecked in BIOS, but ... ), so the i915 intel vga 
driver is also used. :(


--
---
Mathieu POURCEL
Technicien systèmes et réseaux
LEGOS - UMR 5566
Bureau 41 / D033
Observatoire Midi-Pyrénées
14, avenue Edouard Belin 31400 Toulouse
tel : : +33 (0)5 61 33 29 41
fax : : +33 (0)5 61 25 32 05


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771154: plink: New major upstream version of plink

2014-12-22 Thread Dylan
Hi Andreas,

2014-12-16 15:35 GMT+01:00 Andreas Tille andr...@an3as.eu:

 For this actual case I wonder whether plink2 would be a drop in
 replacement we can provide instead of the old pling (which means the
 interface is compatible and the test suite if there is any creates the
 same results) or whether you think plink and plink2 should be provided
 in parallel.


I recommend to provide both versions of plink for the moment as the first
version is always widely used and the interface is not completely
compatible, some flags are not supported by the new version. The upstream
recommends to use the old plink for these flags. Moreover, the new version
is a major update (i.e. many algorithms changes) which could be problematic
for replicate some previous results for those using old plink.

I will push the new plink on git.debian.


Best regards,
Dylan


Bug#715892: [Mayhem] Bug report on libtiff-tools: fax2tiff crashes with exit status 139

2014-12-22 Thread Yuriy M. Kaminskiy
Attached patch fixes issue (improper getopt invocation, -r option requires 
argument)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
NotDashEscaped: You need GnuPG to verify this message

From: Yuriy M. Kaminskiy yum...@gmail.com
Subject: fax2tiff: option -r requires argument

Fixes SIGSEGV, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715892

Index: tiff-4.0.x-20141215/tools/fax2tiff.c
===
--- tiff-4.0.x-20141215.orig/tools/fax2tiff.c	2014-12-22 11:45:45.744096012 +0300
+++ tiff-4.0.x-20141215/tools/fax2tiff.c	2014-12-22 11:46:15.472596500 +0300
@@ -99,7 +99,7 @@ main(int argc, char* argv[])
 	extern char* optarg;
 
 
-	while ((c = getopt(argc, argv, R:X:o:1234ABLMPUW5678abcflmprsuvwz?)) != -1)
+	while ((c = getopt(argc, argv, R:X:o:r:1234ABLMPUW5678abcflmpsuvwz?)) != -1)
 		switch (c) {
 			/* input-related options */
 		case '3':		/* input is g3-encoded */
-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iF4EAREIAAYFAlSX21EACgkQKZn9iF16KMM2jQD+K/bz529ghh9r51nd1f8aGNgb
KZ7T3ELyj99ZFrR2EUMA/2xZjurDz8Ac9ByszIBbL0+2wzB1vDJO1w4L2zVr/Hhp
=C2BG
-END PGP SIGNATURE-


Bug#772740: xserver-xorg-video-nvidia-legacy-304xx: No glXSwapIntervalSGI despite reported GLX_SGI_swap_control in socket-based connections

2014-12-22 Thread Ilya Anfimov
On Fri, Dec 19, 2014 at 12:33:34PM +0100, Andreas Beckmann wrote:

[skipped]

  connecting to the nvidia-driven X-server from machine  with  mesa
  or ATI libGL drivers.
 
 Can you run the X-server machine with the supported configuration from
 update-alternatives  --set  glx /usr/lib/nvidia
 
 also /usr/lib/xorg/modules/extensions/libglx.so, libnvglx.so are manual
 symlinks, get rid of them, too
 reinstall xserver-xorg-core to get back the xorg libglx.so
 
 and maybe try a minimal xorg.conf as describd in the README.Debian

 OK, tested on fresh Debian/testing install from DVD

 After fresh install of base system:

2) apt-get install nvidia-legacy-304xx-driver
 (rebooted, as recommended due to nouveau driver)

root@glt2:~# apt-cache policy nvidia-legacy-304xx-driver
nvidia-legacy-304xx-driver:
  Installed: 304.123-4
  Candidate: 304.123-4
  Version table:
 *** 304.123-4 0
500 http://cdn.debian.net/debian/ jessie/non-free amd64 Packages
100 /var/lib/dpkg/status

apt-get install xinit twm

Created minimal working xorg.conf:

Section Device
Identifier  My GPU
Driver  nvidia
Option  NoPowerConnectorCheck True
EndSection

(yes,  I know, that I've forgotten power connector.  All I needed
from this fanless videoadapter works fine without it, even games,
and  it  hardly will break support of setting of buffer swap con-
trol frquency)

ssh -X to wheezy virtual machine with glx
alternative set to libgl1-mesa:

root@trzbase:~# /tmp/swabsgi
X Error of failed request:  GLXUnsupportedPrivateRequest
  Major opcode of failed request:  156 (GLX)
  Minor opcode of failed request:  16 (X_GLXVendorPrivate)
  Serial number of failed request:  40
  Current serial number in output stream:  41
root@trzbase:~# echo $?
1
root@trzbase:~#

ssh -X to wheezy host with fglrx:

root@trzbase:~# /tmp/swabsgi
X Error of failed request:  GLXUnsupportedPrivateRequest
  Major opcode of failed request:  156 (GLX)
  Minor opcode of failed request:  16 (X_GLXVendorPrivate)
  Serial number of failed request:  34
  Current serial number in output stream:  35
root@trzbase:~# echo $?
1

ssh -X to wheezy host with nvidia-glx, 304.117 (it works mostly as expected):
root@trzbase:~# /tmp/swabsgi
ERROR: could not insert 'nvidia': No such device
NVIDIA: failed to load the NVIDIA kernel module.
root@trzbase:~# echo $?
0

ssh -X to wheezy host with nvidia-glx-legacy71xx (works
good, the same as 304.117):

root@trzbase:~# /tmp/swabsgi
ERROR: could not insert 'nvidia': No such device
NVIDIA: failed to load the NVIDIA kernel module.
root@trzbase:~# echo $?
0

local test with glx set to nvidia, which is
nvidia-legacy-304xx driver -- all is fine,
no error messages, in both indirect (__GL_FORCE_INDIRECT=1 )
and direct modes.


Tryed installation of 304.125 drivers:
sudo dpkg -i libgl1-nvidia-legacy-304xx-glx_304.125-1_amd64.deb \
libgl1-nvidia-legacy-304xx-glx_304.125-1_i386.deb \
libgl1-nvidia-legacy-304xx-glx-i386_304.125-1_i386.deb  \
nvidia-legacy-304xx-alternative_304.125-1_amd64.deb \
nvidia-legacy-304xx-alternative_304.125-1_i386.deb \
nvidia-legacy-304xx-driver_304.125-1_amd64.deb   \
xserver-xorg-video-nvidia-legacy-304xx_304.125-1_amd64.deb  \
nvidia-legacy-304xx-kernel-dkms_304.125-1_amd64.deb

The nvidia-legacy-304xx-alternative:i386 caused some dependency error,
just removed it immediately.

All attempt to use glx fail, in any app, even with nvidia libs:

root@glt2:~# __GL_FORCE_INDIRECT=1 glxinfo
name of display: :0.0
X Error of failed request:  BadValue (integer parameter out of range for 
operation)
  Major opcode of failed request:  156 (GLX)
  Minor opcode of failed request:  24 (X_GLXCreateNewContext)
  Value in failed request:  0x0
  Serial number of failed request:  33
  Current serial number in output stream:  34
root@glt2:~#

(it is working nvidia libs with the same version, as direct rendering works 
fine)

I'm not sure, wheter should I post new bug about this
or it is OK to continue with that here. However, it is definitely
a different bug.

Taken tcpdump with direct and indirect glxinfo at 304.125, nvidia glx
(all indirect ones -- failed on X_GLXCreateNewContext),
and glxinfo and swabsgi at 304.123  -- with
nvidia glx -- glxinfo worked, swabsgi worked in both direct and indirect
modes, swabsgi failed with mesa (indirect) glx.

Example of Mesa glx drivers output:

root@glt2:~# ./swabsgi
libGL error: No matching fbConfigs or visuals found
libGL error: failed to load driver: swrast
X Error of failed request:  GLXUnsupportedPrivateRequest
  Major opcode of failed request:  156 (GLX)
  Minor opcode of failed request:  16 (X_GLXVendorPrivate)
  Serial number of failed request:  48
  Current serial number in output stream:  49

I'm not sure I should fill debian bug tracker with this
dumps, so putting it separately:

304.125 X Server driver:

glxinfo, working, glx 304.125 direct mode:
http://tzirechnoy.com/dl/dumps/304.125-glx.dump


Bug#773698: chef-server-api: Error 500 returned by Chef Server

2014-12-22 Thread Piotr Pańczyk
Package: chef-server-api
Version: 10.12.0-1
Severity: normal

Dear Maintainer,
I'm getting error 500 (Net::HTTPFatalError: 500 Internal Server Error) from
Chef Server when running the client, probably due to big amount of data returned
by Ohai. I tried connecting the same node to newer version of Chef Server (Open
Source Chef Server 11.1.6-1 downloaded from Chef's website) and it returned
Net::HTTPServerException: 413 Request Entity Too Large. The workaround is to
disable passwd plugin in Ohai, but I'd prefer to store all data on the server.
Please consider extending the data limit.


-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32.bsd54h0 (SMP w/24 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages chef-server-api depends on:
ii  adduser   3.113+nmu3
ii  chef  10.12.0-3
ii  chef-solr 10.12.0+dfsg-2
ii  couchdb   1.2.0-5
ii  merb-core 1.1.3+dfsg-2
ii  rabbitmq-server   3.4.2-1
ii  ruby  1:1.9.3
ii  ruby-dep-selector 0.0.8-1
ii  ruby-json 1.7.3-3
ii  ruby-merb-assets  1.1.3-1
ii  ruby-merb-core [merb-core]1.1.3+dfsg-2
ii  ruby-merb-haml1.1.3-2
ii  ruby-merb-helpers 1.1.3-1
ii  ruby-merb-param-protection1.1.3-1
ii  ruby-mixlib-authentication1.1.4-2
ii  ruby-treetop  1.4.10-5
ii  ruby-uuidtools2.1.2-2
ii  ruby1.9.1 [ruby-interpreter]  1.9.3.194-8.1+deb7u2
ii  thin  1.3.1-3
ii  ucf   3.0025+nmu3

chef-server-api recommends no packages.

chef-server-api suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771154: plink: New major upstream version of plink

2014-12-22 Thread Andreas Tille
Hi Dylan,

On Mon, Dec 22, 2014 at 09:51:06AM +0100, Dylan wrote:
 
 I recommend to provide both versions of plink for the moment as the first
 version is always widely used and the interface is not completely
 compatible, some flags are not supported by the new version. The upstream
 recommends to use the old plink for these flags. Moreover, the new version
 is a major update (i.e. many algorithms changes) which could be problematic
 for replicate some previous results for those using old plink.
 
 I will push the new plink on git.debian.

Fine.  Just post on the list once it is ready for sponsering.

Please keep on with your good work to package software for Debian Med

Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771154: [Debian-med-packaging] Bug#771154: plink: New major upstream version of plink

2014-12-22 Thread Steffen Möller

  
  Much in support of Dylan, please also think about the binary filename of the executable. We had the unfortunate p-link for Version 1 to avoid a clash with one of the putty tools. This was a mistake at the time imho. Shall we correct for that? Or is upstream already defaulting to plink2? This would then give us p-link and plink2 as executables. Hurts.
Cheers,
Steffen
-- 
Sent from my Android phone with GMX Mail. Please excuse my brevity.Dylan bob.dyb...@gmail.com wrote:


  

  Hi Andreas,
  

  


  
2014-12-16 15:35 GMT+01:00 Andreas Tille andr...@an3as.eu:

  For this actual case I wonder whether plink2 would be a drop in
  replacement we can provide instead of the old pling (which means the
  interface is compatible and the test suite if there is any creates the
  same results) or whether you think plink and plink2 should be provided
  in parallel.
  

  
  


  I recommend to provide both versions of plink for the moment as the first version is always widely used and the interface is not completely compatible, some flags are not supported by the new version. The upstream recommends to use the old plink for these flags. Moreover, the new version is a major update (i.e. many algorithms changes) which could be problematic for replicate some previous results for those using old plink.
  


  I will push the new plink on git.debian.


  
  
  
Best regards,
  
  Dylan
  

  

  

___ Debian-med-packaging mailing list debian-med-packag...@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-med-packaging
  



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#773182: Problem solved

2014-12-22 Thread Friedhelm Mehnert
O.K. I know now what the problem is.

But since the maintainers obviously are not interested at all, I can't
be bothered either.

HAVE A NICHE DAY
Friedhelm


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773515: unblock: mono/3.2.8+dfsg-9

2014-12-22 Thread Philipp Kern
On Fri, Dec 19, 2014 at 11:55:00AM +, Jo Shields wrote:
 Please unblock package mono

This doesn't seem to have hit sid yet.

Kind regards
Philipp Kern


signature.asc
Description: Digital signature


Bug#773416: fixed in ettercap 1:0.8.1-3

2014-12-22 Thread Raphael Hertzog
Hello Barak,

On Thu, 18 Dec 2014, Barak A. Pearlmutter wrote:
  ettercap (1:0.8.1-3) unstable; urgency=high
  .
* Patch a bunch of security vulnerabilities (closes: #773416)

Thanks for the prompt reaction. ettercap is also in Squeeze
and thus covered by our LTS initiative.

Do you feel like providing a fixed package for Squeeze?

If yes, please have a look at http://wiki.debian.org/LTS/Development
but note that if you provide the fixed package and send a mail
to debian-...@lists.debian.org, someone will gladly do the administrative
part of the work for you.

Thanks!
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771154: [Debian-med-packaging] Bug#771154: plink: New major upstream version of plink

2014-12-22 Thread Dylan
Hi Steffen,

2014-12-22 10:22 GMT+01:00 Steffen Möller steffen_moel...@gmx.de:

 Much in support of Dylan, please also think about the binary filename of
 the executable. We had the unfortunate p-link for Version 1 to avoid a
 clash with one of the putty tools. This was a mistake at the time imho.
 Shall we correct for that? Or is upstream already defaulting to plink2?
 This would then give us p-link and plink2 as executables. Hurts.



The upstream devs always name the new binary plink but they recommend to
rename it to plink2 and the old plink to plink1 to avoid the name
conflict. So, I rename the binary plink2 for the new version and maybe we
can also rename the first plink from p-link to plink1 with a symbolic
link to p-link to avoid problem for our users which already use the name
p-link. What do you think?

Best regards,
Dylan


Bug#771154: Plink2 (Was: Bug#771154: plink: New major upstream version of plink)

2014-12-22 Thread Andreas Tille
Hi,

On Mon, Dec 22, 2014 at 10:45:12AM +0100, Dylan wrote:
 Hi Steffen,
 
 2014-12-22 10:22 GMT+01:00 Steffen Möller steffen_moel...@gmx.de:
 
  Much in support of Dylan, please also think about the binary filename of
  the executable. We had the unfortunate p-link for Version 1 to avoid a
  clash with one of the putty tools. This was a mistake at the time imho.
  Shall we correct for that? Or is upstream already defaulting to plink2?
  This would then give us p-link and plink2 as executables. Hurts.
 
 
 
 The upstream devs always name the new binary plink but they recommend to
 rename it to plink2 and the old plink to plink1 to avoid the name
 conflict. So, I rename the binary plink2 for the new version and maybe we
 can also rename the first plink from p-link to plink1 with a symbolic
 link to p-link to avoid problem for our users which already use the name
 p-link. What do you think?

Sounds good.

In addition I would recommend to teach upstream again about the name
clash with putty tools.

Kind regards

  Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#725284: hdparm + systemd: Patch to restore configuration after resume

2014-12-22 Thread Jonathan Michalon
On Wed, 25 Dec 2013 17:33:04 +0100 Ralf Jung p...@ralfj.de wrote:
 adding the attached systemd unit fixes restoring the hdparm
 configuration when systemd is used. I'd appreciate if you could add this
 (or a similar solution) to the package.


I second this (works for me), although I suppose it would be even better with
  Type=oneshot
since it is not starting a daemon (works for me too).

BTW even if the udev-based solution looks smarter, adding this unit would at
least restore the exepected behaviour.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#751498: closed by Laszlo Boszormenyi (GCS) g...@debian.org (Bug#751498: fixed in python-greenlet 0.4.5-1)

2014-12-22 Thread Bálint Réczey
Hi Laszlo,

2014-12-22 9:11 GMT+01:00 László Böszörményi (GCS) g...@debian.org:
 Hi Bálint,

 On Fri, Dec 19, 2014 at 10:21 PM, Balint Reczey bal...@balintreczey.hu 
 wrote:
 On Sat, 15 Nov 2014 13:49:10 +0100 Ivo De Decker iv...@debian.org wrote:
 The arm* build failure is fixed by this patch from ubuntu (tested on abel):

 http://patches.ubuntu.com/p/python-greenlet/python-greenlet_0.4.2-1ubuntu1.patch

 T-p-u sounds a bit better, do you plan going this way?
 If you don't have time now I would happily fix this in an NMU.
  I've updated the package[1]. Can someone test it on any ARM
 architecture to see if it builds correctly? Will ask the Release Team
 for a t-p-u upload.
It built fine on armel.

Cheers,
Balint


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773512: crash in jpc_dec_decodecblks() in Nautilus thumbnailer

2014-12-22 Thread Mathieu Malaterre
Control: affects -1 src:nautilus

On Fri, Dec 19, 2014 at 6:31 PM, Simon McVittie s...@debian.org wrote:
[...]
 On 19/12/14 15:17, Mathieu Malaterre wrote:
 Just for reference, chromium crashed:

 [86573.137553] chromium[2233]: segfault at 0 ip 7fce4aeeb785 sp
 7fff21991b20 error 6 in libjasper.so.1.0.0[7fce4aebc000+4f000]
 ...
 dmesg actually shows two types of crashes [for Nautilus]:

 [69727.744833] nautilus[11822]: segfault at 7ff85cb2d510 ip
 7ffb50d17d87 sp 7ffb26eaa6a8 error 4 in
 libgdk_pixbuf-2.0.so.0.3100.1[7ffb50d03000+2]
 [71582.118170] nautilus[13187]: segfault at 0 ip 7f60f1f56785
 sp 7f610c0c55b0 error 6 in libjasper.so.1.0.0[7f60f1f27000+4f000]

 Based on this, and on libjasper.so being implicated in your backtrace,
 I think this is at least one bug and one feature request, and possibly
 a second bug:

 * bug A: libjasper should not crash when presented with a malformed or
   truncated .jp2 file

Just for clarification. The file attached 'white.jp2' is a valid JP2
file. It is enormous but still a valid file. For those reading this,
`white.jp2` does contains *lots* of resolution levels therefore
generating a thumbnail out of this file should be trivial (requires
proper implementation though).

 * feature request B: nautilus should run thumbnailers in a subprocess
   so that a crashing thumbnailer does not bring down all of nautilus

Sorry, I thought that was the case already, when I saw the `clone`
function. But reading the backtrace again it seems to be run in
another thread.

 * bug C: libgdk_pixbuf's JP2 loader might also have a separate crash
   bug (or it might be dying from memory corruption caused by bug A,
   in which case this is not its fault)

I haven't been able to reproduce this one. I /think/ this may be
caused by the openjpeg thumbnailer mecanism, but I would need more
nautilus knowledge to check that.

 I'm somewhat sceptical about the feature request, and it might end up
 tagged wontfix with no, we should fix the decoding libraries instead
 if people agree with my point of view, but I'll give you the benefit
 of the doubt and clone the bug.

If the source code for nautilus contains code to check for file magic
number it may also be possible to discard JP2 completely
(post-jessie?), or simply discard JP2 with enormous canvas size.

2cts


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#772956: indeed fixed

2014-12-22 Thread Holger Levsen
Hi,

tlsdate 0.12-2 has been built on mips and mipsel with kernel 3.16 now, so this 
bug is indeed fixed.

https://buildd.debian.org/status/fetch.php?pkg=tlsdatearch=mipselver=0.0.12-2stamp=1419203607
 
has Kernel: Linux 3.16.0-0.bpo.4-loongson-3 mipsel (mips64)

https://buildd.debian.org/status/fetch.php?pkg=tlsdatearch=mipsver=0.0.12-2stamp=1419205324
 
has Kernel: Linux 3.16.0-0.bpo.4-octeon mips (mips64)


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#773656: ITP: daps -- DocBook Authoring and Publishing Suite

2014-12-22 Thread Andrei POPESCU
Control: reassign -1 wnpp

On Du, 21 dec 14, 17:35:39, Sascha Manns wrote:
 Package: daps
 Severity: wishlist
 
 URL: http://daps.sourceforge.net/
 SVN: http://sourceforge.net/p/daps/svn/HEAD/tree/
 
 The DocBook Authoring and Publishing Suite (DAPS) fills this gap by
 providing a tool set for easy creation and publication of DocBook sources on
 Linux. DAPS lets you create HTML (incl. webhelp), PDF, EPUB, man pages, and
 other formats with a single command.
 
 It automatically takes care of validating and filtering (profiling) your
 sources and automatically converts images into a format best suited for the
 output format. Furthermore one can easily create profiled source tarballs
 for translation or review.
 
 DAPS supports authors by providing linkchecker, validator, spellchecker, and
 editor macros. It is perfectly suited to manage large documentation projects
 with multiple authors using the DAPS docmanager.
 
 -- 
 Yours sincerly
 Sascha Manns
 
 Maifeldstraße 10
 56727 Mayen
 Phone: +49-1573-9242730
 Email: sascha.ma...@bdvb.de
 Web: http://saigkill.ddns.net/wordpress

-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Bug#773515: unblock: mono/3.2.8+dfsg-9

2014-12-22 Thread Jo Shields
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



On 22/12/14 09:35, Philipp Kern wrote:
 On Fri, Dec 19, 2014 at 11:55:00AM +, Jo Shields wrote:
 Please unblock package mono
 
 This doesn't seem to have hit sid yet.

I was scolded for asking the release team should I upload this, will
it be accepted for Jessie? and told to file an unblock bug.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQEcBAEBAgAGBQJUl+5nAAoJEMkPnLkOH60M/NQH/1KVcbDzHlxPwp8y+ZQiNiZ4
ZrVK/xjpjBFn9pzWn+pNf3PjFur/J1QmNuMLvaulbV0agmDtnfZ4hJgIfMUck/HG
7bxDpNBNsFolonzSLSM+SbKFdfin+E2qpTTPLkfqL1QxQYrdDfqkVJoeKA9Z2B6t
cm0Eh4gSqI5YYb5JWw0WLGY9pZeTDEvkhf24oLPgaG8L9MNv8bfOGYEgoAoh7RuC
fLityWotvCRr5qku6d3yNFKyoo8HOXSdBuL3hfV/UEI2ChQM7419HbNV8n3VVPua
dSSNwrUt+lv6DDFMjJ6Tz/8QwDpLdkFTFBhXW31fwQbPLKj8lPeDHjg5zZtrgNU=
=VrlN
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773416: fixed in ettercap 1:0.8.1-3

2014-12-22 Thread Gianfranco Costamagna
Hi dear Raphael,

fortunately oldstable is almost unaffected by this kind of CVEs, because almost 
all of them
refers to code written after the squeeze release, anyway here we go, this 
should be the only
patch useful for squeeze folks


--- ettercap-0.7.3.orig/src/dissectors/ec_cvs.c
+++ ettercap-0.7.3/src/dissectors/ec_cvs.c
@@ -70,7 +70,7 @@
{
DECLARE_DISP_PTR_END(ptr, end);
char tmp[MAX_ASCII_ADDR_LEN];
-   char *p;
+   u_char *p;
size_t i;

/* don't complain about unused var */
@@ -92,6 +92,8 @@

/* move over the cvsroot path */
ptr += strlen(CVS_LOGIN) + 1;
+   if (ptr = end)
+   return NULL;

/* go until \n */
while(*ptr != '\n'  ptr != end) ptr++;



cheers,

Gianfranco




Il Lunedì 22 Dicembre 2014 10:45, Raphael Hertzog hert...@debian.org ha 
scritto:
Hello Barak,

On Thu, 18 Dec 2014, Barak A. Pearlmutter wrote:
  ettercap (1:0.8.1-3) unstable; urgency=high
  .
* Patch a bunch of security vulnerabilities (closes: #773416)

Thanks for the prompt reaction. ettercap is also in Squeeze
and thus covered by our LTS initiative.

Do you feel like providing a fixed package for Squeeze?

If yes, please have a look at http://wiki.debian.org/LTS/Development
but note that if you provide the fixed package and send a mail
to debian-...@lists.debian.org, someone will gladly do the administrative
part of the work for you.

Thanks!
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773660: dsa-3108 returns 404, I think that explains...

2014-12-22 Thread Andrei POPESCU
On Du, 21 dec 14, 19:05:37, Holger Levsen wrote:
 http://www.debian.org/security/2014/dsa-3108 returns a page not found error, 
 I 
 guess that explains... now why is this DSA missing?

Could it be...
http://www.debian.org/security/faq#missing
?

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Bug#773699: python-zodb wrongly installs headers for persistent

2014-12-22 Thread Kirill Smelkov
Package: python-zodb
Version: 1:3.9.7-4
Severity: normal
Tags: patch

Dear Maintainer,

Starting from python-zodb_3.9.7-4 persistent module was completely
split to python-persistent. However some persistent headers were
still left installed in ZODB package:

$ dpkg -L python-zodb
...
/usr/include
/usr/include/python2.7
/usr/include/python2.7/ZODB3
/usr/include/python2.7/ZODB3/cPersistence.h
/usr/include/python2.7/ZODB3/py24compat.h
/usr/include/python2.7/ZODB3/ring.h


That's because besides shipping persistent, ZODB also used to provide
persistent headers in ZODB namespace.

Please find patch to zodb-3.9 debian packaging to fix it.

Thanks,
Kirill

 8 
diff --git a/debian/patches/persistent-module-4.x-no-headers.patch 
b/debian/patches/persistent-module-4.x-no-headers.patch
new file mode 100644
index 000..ee9ebe7
--- /dev/null
+++ b/debian/patches/persistent-module-4.x-no-headers.patch
@@ -0,0 +1,25 @@
+Description: Don't provide persistent headers in python-zodb
+ python-zodb now depends on separate python-persistent and to be compatible
+ with that in python-zodb, after building the package, we remove installed
+ persistent completely. However ZODB also used to install persistent headers in
+ ZODB namespace which were left and now correspond to nothing provided in
+ python-zodb and duplicate persistent headers in python-persistent.
+After splitting persistent into separate package, upstream already removed
+ that 'headers install' in zodb package:
+- 57dca750 (Fixed: An unneeded left-over setting in setup.py caused
+  installation with pip to fail).
+- f5b98e96 (ZODB w/ externally-distributed 'persistent'.)
+ so do it here too.
+
+--- zodb-3.9.7.orig/setup.py
 zodb-3.9.7/setup.py
+@@ -188,9 +188,6 @@ setup(name=ZODB3,
+   packages = find_packages('src'),
+   package_dir = {'': 'src'},
+   ext_modules = exts,
+-  headers = ['src/persistent/cPersistence.h',
+- 'src/persistent/py24compat.h',
+- 'src/persistent/ring.h'],
+   license = ZPL 2.1,
+   platforms = [any],
+   description = doclines[0],
diff --git a/debian/patches/series b/debian/patches/series
index 66b6283..a65e2ed 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,5 +1,6 @@
 lp_135108.patch
 persistent-module-4.x-compat.patch
+persistent-module-4.x-no-headers.patch
 test-spurious-failure-under-python27.patch
 testUtils.patch
 new-transaction.patch
 8 

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages python-zodb depends on:
ii  libc6  2.19-13
ii  python 2.7.8-2
ii  python-persistent  4.0.8-3
ii  python-transaction 1.4.3-3
ii  python-zc.lockfile 1.0.0-6
ii  python-zconfig 2.8.0-1
ii  python-zdaemon 2.0.7-1
ii  python-zope.event  4.0.3-2
ii  python-zope.interface  4.1.1-3
ii  python-zope.proxy  4.1.4-2

python-zodb recommends no packages.

Versions of packages python-zodb suggests:
ii  python-zope.testing  4.1.3-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#710434: mail-notification: Popups work but tooltips does not

2014-12-22 Thread Jonathan Michalon
On Tue, 23 Jul 2013 10:41:06 +0200 Daniele Ricci daniele.ath...@gmail.com
wrote:
 I can confirm what KeyofBlueS says: tooltip appears only if pointer is
 over the very top edge of the notification icon.
 Tried every other edge or location inside the icon, nothing works
 except the top edge (no more than 4 pixels).


Still true with uptodate testing running gnome-flashback. 
BTW thanks for the trick (top edge), didn't find it myself. However I see the
popup very brievly when hovering anywhere else, but just blinking quickly.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773515: unblock: mono/3.2.8+dfsg-9

2014-12-22 Thread Philipp Kern
retitle 773515 pre-approval: mono/3.2.8+dfsg-9
thanks

On Mon, Dec 22, 2014 at 10:11:51AM +, Jo Shields wrote:
 On 22/12/14 09:35, Philipp Kern wrote:
  On Fri, Dec 19, 2014 at 11:55:00AM +, Jo Shields wrote:
  Please unblock package mono
  
  This doesn't seem to have hit sid yet.
 I was scolded for asking the release team should I upload this, will
 it be accepted for Jessie? and told to file an unblock bug.

So it's a pre-approval. Re-titling appropriately.

Kind regards and thanks
Philipp Kern


signature.asc
Description: Digital signature


Bug#773700: unblock: otrs2/3.3.9-3

2014-12-22 Thread Patrick Matthäi
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package otrs2. -security also ACKed this upload.


diff -Naur '--exclude=.svn' 3.3.9-2/debian/changelog 3.3.9-3/debian/changelog
--- 3.3.9-2/debian/changelog2014-10-29 09:32:47.224286362 +0100
+++ 3.3.9-3/debian/changelog2014-12-18 19:57:30.862192259 +0100
@@ -1,3 +1,13 @@
+otrs2 (3.3.9-3) unstable; urgency=medium
+
+  * Add patch 16-CVE-2014-9324.diff which fixes CVE-2014-9324, also known as
+OSA-2014-06:
+An attacker with valid OTRS credentials could access and manipulate ticket
+data of other users via the GenericInterface, if a ticket webservice is
+configured and not additionally secured.
+
+ -- Patrick Matthäi pmatth...@debian.org  Thu, 18 Dec 2014 19:02:56 +0100
+
 otrs2 (3.3.9-2) unstable; urgency=low

   * Drop libjs-jquery dependency and use the emebedded version again to avoid
diff -Naur '--exclude=.svn' 3.3.9-2/debian/patches/16-CVE-2014-9324.diff 
3.3.9-3/debian/patches/16-CVE-2014-9324.diff
--- 3.3.9-2/debian/patches/16-CVE-2014-9324.diff1970-01-01 
01:00:00.0 +0100
+++ 3.3.9-3/debian/patches/16-CVE-2014-9324.diff2014-12-18 
19:57:30.874192201 +0100
@@ -0,0 +1,1528 @@
+# Upstream patch to fix CVE-2014-9324, also known as OSA-2014-06:
+# An attacker with valid OTRS credentials could access and manipulate ticket
+# data of other users via the GenericInterface, if a ticket webservice is
+# configured and not additionally secured.
+# URL:
+# https://www.otrs.com/security-advisory-2014-06-incomplete-access-control/
+
+diff -Naur otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/Common.pm 
otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/Common.pm
+--- otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/Common.pm
2014-09-03 15:15:41.0 +0200
 otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/Common.pm 
2014-12-18 18:54:26.386869907 +0100
+@@ -1369,6 +1369,17 @@
+
+ =item CheckCreatePermissions ()
+
++Tests if the user have the permissions to create a ticket on a determined 
queue
++
++my $Result = $CommonObject-CheckCreatePermissions(
++Ticket = $TicketHashReference,
++UserID = 123,  # or 'CustomerLogin'
++UserType   = 'Agent',  # or 'Customer'
++);
++
++returns:
++$Success = 1# if everything is OK
++
+ =cut
+
+ sub CheckCreatePermissions {
+@@ -1413,6 +1424,45 @@
+ return 1;
+ }
+
++=item CheckAccessPermissions()
++
++Tests if the user have access permissions over a ticket
++
++my $Result = $CommonObject-CheckAccessPermissions(
++TicketID   = 123,
++UserID = 123,  # or 'CustomerLogin'
++UserType   = 'Agent',  # or 'Customer'
++);
++
++returns:
++$Success = 1# if everything is OK
++
++=cut
++
++sub CheckAccessPermissions {
++my ( $Self, %Param ) = @_;
++
++# check needed stuff
++for my $Needed (qw(TicketID UserID UserType)) {
++if ( !$Param{$Needed} ) {
++return;
++}
++}
++
++my $TicketPermissionFunction = 'TicketPermission';
++if ( $Param{UserType} eq 'Customer' ) {
++$TicketPermissionFunction = 'TicketCustomerPermission';
++}
++
++my $Access = $Self-{TicketObject}-$TicketPermissionFunction(
++Type = 'ro',
++TicketID = $Param{TicketID},
++UserID   = $Param{UserID},
++);
++
++return $Access;
++}
++
+ =begin Internal:
+
+ =item _ValidateUser()
+diff -Naur 
otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/TicketCreate.pm 
otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/TicketCreate.pm
+--- otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/TicketCreate.pm  
2014-09-03 15:15:41.0 +0200
 otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/TicketCreate.pm   
2014-12-18 18:54:26.390869876 +0100
+@@ -238,6 +238,7 @@
+ );
+ }
+
++my $PermissionUserID = $UserID;
+ if ( $UserType eq 'Customer' ) {
+ $UserID = $Self-{ConfigObject}-Get('CustomerPanelUserID')
+ }
+@@ -304,7 +305,7 @@
+ # check create permissions
+ my $Permission = $Self-{TicketCommonObject}-CheckCreatePermissions(
+ Ticket   = $Ticket,
+-UserID   = $UserID,
++UserID   = $PermissionUserID,
+ UserType = $UserType,
+ );
+
+diff -Naur 
otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/TicketGet.pm 
otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/TicketGet.pm
+--- otrs2-3.3.9.orig/Kernel/GenericInterface/Operation/Ticket/TicketGet.pm 
2014-09-03 15:15:41.0 +0200
 otrs2-3.3.9/Kernel/GenericInterface/Operation/Ticket/TicketGet.pm  
2014-12-18 18:54:26.390869876 +0100
+@@ -271,6 +271,24 @@
+ ErrorMessage = TicketGet: Structure for TicketID is not 
correct!,
+

Bug#773660: dsa-3108 returns 404, I think that explains...

2014-12-22 Thread Holger Levsen
Hi Andrei,

On Montag, 22. Dezember 2014, Andrei POPESCU wrote:
 On Du, 21 dec 14, 19:05:37, Holger Levsen wrote:
  http://www.debian.org/security/2014/dsa-3108 returns a page not found
  error, I guess that explains... now why is this DSA missing?
 Could it be...
 http://www.debian.org/security/faq#missing

no, it was released. this is a case of the DSA not being commited to the 
website...

See
https://wiki.debian.org/DebianSecurity/AdvisoryCreation/SecFull#Creating_website_pages


cheers,
Holger




signature.asc
Description: This is a digitally signed message part.


Bug#768188: Jessie Installer hangs after processing DHCPv6 stateful addressing

2014-12-22 Thread Philipp Kern
On Thu, Dec 18, 2014 at 03:04:38PM +0100, Peter Valdemar Mørch wrote:
 This occurs in in our work environment in VMware Workstation and
 Proxmox when using bridged eth0, but not when using NAT. In my home
 network, the exact same procedure goes through without any hangs for
 both bridged and NAT.

VMware Workstation's IPv6 support is full of sadness. Which
virtualization do you use with Proxmox?

But please tell me: Why is there no Router Advertisement in the packet
dump? I see Router Solicitations and DHCPv6 interactions, but no RA.

Kind regards
Philipp Kern


signature.asc
Description: Digital signature


Bug#768188: Jessie Installer hangs after processing DHCPv6 stateful addressing

2014-12-22 Thread Peter Valdemar Mørch
On Mon, Dec 22, 2014 at 11:52 AM, Philipp Kern pk...@debian.org wrote:
 But please tell me: Why is there no Router Advertisement in the packet
 dump? I see Router Solicitations and DHCPv6 interactions, but no RA.

I have absolutely no idea. Perhaps that is the reason for the hang?

All I know is that it hangs with Jessie Beta 2 -
debian-jessie-DI-b2-amd64-netinst.iso and not with any previous debian
installer as far back as sarge. And it doesn't hang when booting in
the newly created/installed image.

If it adds value, I can try booting the image on e.g. a laptop to see
if it is VMware specific. But I'm pretty sure it will experience the
same symptoms. That is only possible from January 5th onwards, since
I'm on vacation until then.

Peter


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771537: freeplane: should relax to depend on default-jre | java-runtime

2014-12-22 Thread Felix Natter
hi,

@Tony:

Concerning your commit for the freeplane package:
  
http://anonscm.debian.org/cgit/pkg-java/freeplane.git/commit/?id=4e8d491742ab19f8ebad83a99cd1c8c09ea93df8

= I'd like to change this to java7-runtime because I'm not 100% sure
that freeplane 1.3.x (or 1.4.x) works with java6 and because the
jmapviewer-1.04 dependency (in experimental) requires java7:
  
http://anonscm.debian.org/cgit/pkg-grass/jmapviewer.git/commit/?id=d2d0b136fb174de943a6569e4c5360684243b582

If you agree then we do the freeplane-1.3.12-2 upload after jessie is
released.

Cheers and Great Holidays,
-- 
Felix Natter


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#731583: sudo FQDN issue: upstream fixed it

2014-12-22 Thread Christian Kastner
On 2014-12-21 20:49, Michael Gilbert wrote:
 On Sun, Dec 14, 2014 at 11:02 AM, Christian Kastner wrote:
 I just noticed that I never uploaded the debdiffs to the BTS, so here
 they are for 1.8.11p2 in unstable and 1.8.10p3 in testing.

 I reviewed and sponsored your upload to unstable.  Let me know how the
 unblock negotiation goes with the release team now that they have a
 package in unstable to review.
 
 If they reject that, please let me know, and I will look at sponsoring the 
 tpu.

I actually already had asked the RT, although when following up on this,
I forgot to CC this bug.

You can find my RT plea here:

https://bugs.debian.org/773319

I'll report back once I have received an answer.

Thanks!
Christian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#766330: tracker.debian.org: add link to ci.debian.net

2014-12-22 Thread Antonio Terceiro
On Wed, Oct 22, 2014 at 02:56:50PM +0200, Raphael Hertzog wrote:
 Hi Arturo,
 
 On Wed, 22 Oct 2014, Arturo Borrero Gonzalez wrote:
  Package: tracker.debian.org
  Severity: wishlist
  
  Hi there!
  
  It would be nice if you add a link to ci.debian.net in each package page at 
  tracker.debian.org.
  
  I think they are both good idea:
   * a link in the links section 
 
 We only display such links when they do work.
 
 Ok. Would you like to try to provide a patch? It's really easy.
 
   * a warning in the action needed section if the package's tests fail
 
 This is already implemented. I wanted to show you a sample
 but right now
 http://ci.debian.net/data/status/unstable/amd64/packages.json
 doesn't contain any failure not even the one showed
 on the main page (namely libcache-cache-perl) so I can't
 show you how it appears on tracker.d.o and this looks like a
 bug on ci.debian.net's side (so ccing Antonio Terceiro
 terce...@debian.org for this).
 
 In fact that file only contains the same entry in many copies...

this was a bug at the time and have been fixed for a while.

-- 
Antonio Terceiro terce...@debian.org


signature.asc
Description: Digital signature


Bug#773701: libreoffice: will not open files on a gvfs share

2014-12-22 Thread Andrew Gallagher
Package: libreoffice
Version: 1:4.3.3-2
Severity: important

Dear Maintainer,

Opening files on gvfs no longer appears to work in jessie. When double-clicking
on a network file in nautilus, libreoffice starts, throws the splash but does
not open the file. It quits a few seconds later. When using the file-open
dialog, the directory /run/user/1000/gvfs contains the same number of entries
as there are mounted shares, but they all appear as zero-size, zero-timestamp
nameless plain files. (see attached screenshot)

Andrew Gallagher.



-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libreoffice depends on:
ii  fonts-dejavu   2.34-1
ii  fonts-sil-gentium-basic1.1-7
ii  libreoffice-avmedia-backend-gstreamer  1:4.3.3-2
ii  libreoffice-base   1:4.3.3-2
ii  libreoffice-calc   1:4.3.3-2
ii  libreoffice-core   1:4.3.3-2
ii  libreoffice-draw   1:4.3.3-2
ii  libreoffice-impress1:4.3.3-2
ii  libreoffice-java-common1:4.3.3-2
ii  libreoffice-math   1:4.3.3-2
ii  libreoffice-report-builder-bin 1:4.3.3-2
ii  libreoffice-writer 1:4.3.3-2
ii  python-uno 1:4.3.3-2

Versions of packages libreoffice recommends:
ii  fonts-liberation   1.07.4-1
ii  libpaper-utils 1.1.24+nmu4
ii  ttf-mscorefonts-installer  3.6

Versions of packages libreoffice suggests:
pn  cups-bsd  none
pn  gstreamer1.0-ffmpeg   none
ii  gstreamer1.0-plugins-bad  1.4.4-2
ii  gstreamer1.0-plugins-base 1.4.4-2
ii  gstreamer1.0-plugins-good 1.4.4-2
ii  gstreamer1.0-plugins-ugly 1.4.4-2
ii  hunspell-en-us [hunspell-dictionary]  20070829-6
pn  hyphen-hyphenation-patterns   none
ii  icedove   31.3.0-1
ii  iceweasel 31.3.0esr-1
ii  imagemagick   8:6.8.9.9-3
ii  libgl1-mesa-glx [libgl1]  10.3.2-1
pn  libreoffice-gnome | libreoffice-kde   none
pn  libreoffice-grammarcheck  none
pn  libreoffice-help-4.3  none
pn  libreoffice-l10n-4.3  none
pn  libreoffice-officebeannone
ii  libsane   1.0.24-4
ii  libxrender1   1:0.9.8-1+b1
pn  myspell-dictionarynone
pn  mythes-thesaurus  none
pn  openclipart-libreoffice   none
ii  openjdk-6-jre [java5-runtime] 6b33-1.13.5-2~deb7u1
ii  openjdk-7-jre [java5-runtime] 7u71-2.5.3-2
ii  pstoedit  3.62-2+b1
ii  sun-java6-jre [java5-runtime] 6.26-0squeeze1
ii  unixodbc  2.3.1-3

Versions of packages libreoffice-core depends on:
ii  fontconfig2.11.0-6.3
ii  fonts-opensymbol  2:102.6+LibO4.3.3-2
ii  libatk1.0-0   2.14.0-1
ii  libboost-date-time1.55.0  1.55.0+dfsg-3
ii  libc6 2.19-13
ii  libcairo2 1.14.0-2.1
ii  libclucene-contribs1  2.3.3.4-4
ii  libclucene-core1  2.3.3.4-4
ii  libcmis-0.4-4 0.4.1-7
ii  libcups2  1.7.5-9
ii  libcurl3-gnutls   7.38.0-3
ii  libdbus-1-3   1.8.12-1
ii  libdbus-glib-1-2  0.102-1
ii  libeot0   0.01-3
ii  libexpat1 2.1.0-6+b3
ii  libexttextcat-2.0-0   3.4.4-1
ii  libfontconfig12.11.0-6.3
ii  libfreetype6  2.5.2-2
ii  libgcc1   1:4.9.1-19
ii  libgdk-pixbuf2.0-02.31.1-2+b1
ii  libgl1-mesa-glx [libgl1]  10.3.2-1
ii  libglew1.10   1.10.0-3
ii  libglib2.0-0  2.42.1-1
ii  libgltf-0.0-0 0.0.2-2
ii  libglu1-mesa [libglu1]9.0.0-2
ii  libgraphite2-31.2.4-3
ii  libgtk2.0-0   2.24.25-1
ii  libharfbuzz-icu0  0.9.35-2
ii  libharfbuzz0b 0.9.35-2
ii  libhunspell-1.3-0 1.3.3-3
ii  libhyphen02.8.8-1
ii  libice6   2:1.0.9-1+b1
ii  libicu52  52.1-6
ii  libjpeg62-turbo   1:1.3.1-11
ii  liblangtag1   0.5.1-3
ii  liblcms2-22.6-3+b3
ii  libldap-2.4-2 2.4.40-3
ii  libmythes-1.2-0   2:1.2.4-1
ii  libneon27-gnutls  0.30.1-1
ii  libnspr4  2:4.10.7-1
ii  libnspr4-0d   2:4.10.7-1
ii  libnss3   2:3.17.2-1
ii  libnss3-1d2:3.17.2-1
ii  libodfgen-0.1-1   0.1.1-2
ii  libpango-1.0-01.36.8-3
ii  

Bug#773416: fixed in ettercap 1:0.8.1-3

2014-12-22 Thread Raphael Hertzog
On Mon, 22 Dec 2014, Gianfranco Costamagna wrote:
 Hi dear Raphael,
 
 fortunately oldstable is almost unaffected by this kind of CVEs, because 
 almost all of them
 refers to code written after the squeeze release, anyway here we go, this 
 should be the only
 patch useful for squeeze folks

Thanks for the info! So the only remaining CVE would be
https://security-tracker.debian.org/tracker/CVE-2014-9380 and
https://security-tracker.debian.org/tracker/CVE-2014-9381 for the CVS
dissector.

BTW, https://security-tracker.debian.org/tracker/CVE-2014-9376 mentions
also ec_dhcp.c which is present in the squeeze version. Do you confirm
that it is also unaffected?

And also https://security-tracker.debian.org/tracker/CVE-2014-9378
mentions ec_imap.c which is present in the squeeze version. Do you also
confirm that it is unaffected?

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773702: gpsusi does not recognize USI (sub-)commands 'movestogo' and 'winc'/'binc'

2014-12-22 Thread H.G. Muller

Package: gpsshogi
Version: 0.6.0-3+nmu1

When running the USI version of GPS Shogi (gpsusi) under XBoard at 
classical or incremental time control, GPS Shogi hangs until it forfeits 
on time. The xboard.debug log file lists


Command: xboard -fcp shokidoki -scp uci2wb debug -s gpsusi -tc 5 -mps 
40 -debug


relevant part of the produced xboard.debug log:

53002 second: # start search
53002 second: # position startpos moves 3g3f
53002 second: # go btime 298460 wtime 30 movestogo 40
53002 second: # engine said: unknown option in go movestogo
53002 second: # engine said: terminate called after throwing an 
instance of 'std::runtime_error'

53002 second: # engine said: what(): unknown option in go movestogo

or after:  xboard -fcp shokidoki -scp uci2wb debug -s gpsusi -tc 5 
-inc 1 -debug


37710 second: # start search
37710 second: # position startpos moves 2g2f
37710 second: # go btime 297520 wtime 30 winc 1000 binc 1000
37710 second: # engine said: unknown option in go winc
37710 second: # engine said: terminate called after throwing an 
instance of 'std::runtime_error'

37710 second: # engine said: what(): unknown option in go winc

These are standard USI commands, and other USI engines (e.g. 
Blunder_USI) have no trouble understanding them.

It seems gpsusi is not USI compliant!


Bug#773523: [PATCH] * dirmngr/ldapserver.c (ldapserver_parse_one) return NULL on 'fail'.

2014-12-22 Thread Werner Koch
On Sat, 20 Dec 2014 18:35, g...@internot.info said:

 If something inside the ldapserver_parse_one function failed, 'server' would 
 be freed, then returned, leading to a use-after-free.

 This code is likely copied from sm/gpgsm.c, which was also susceptible to 
 this bug.

Ooops.  Both fixed will push that soon. Thanks.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773222: [RFR] po-debconf://grub2

2014-12-22 Thread Ian Campbell
Hi Manuel,

On Mon, 2014-12-15 at 20:10 +0100, Manuel Venturi Porras Peralta wrote:
 Reenvío por la corrección que han hecho desde arriba.
 
 Sent with the suggested changes of the fuzzy removable path and done 
 the propper translation according to these changes.

I'm just applying this update, but debconf-updatepo is reporting one of
the new translations as fuzzy (the longer one, Some EFI-based systems
are buggy ...).

I think that the differences to the English text don't affect the
translation so I plan to go ahead (probably uploading later today), but
I've attached the current es.po in case you have a chance to check it.
If it is OK to just unfuzzy just let me know and I'll make the change.

Thanks,
Ian.
# grub2 po-debconf translation to Spanish
# Copyright (C) 2007, 2009, 2010, 2011 Software in the Public Interest
# This file is distributed under the same license as the grub2 package.
#
# Changes:
#   - Initial translation
#   Maria Germana Oliveira Blazeticgermanaolivei...@gmail.com, 2007
#
#   - Updates
#   Gary Ariel Sandi Vigabriel gary@gmail.com, 2009
#   Francisco Javier Cuadrado fcocuadr...@gmail.com, 2009, 2010, 2011
# 	Manuel Venturi Porras Peralta vent...@openmailbox.org, 2014.
#
#   - Revisions
#   Innocent De Marchi tangram.pe...@gmail.com, 2010
#
# Traductores, si no conocen el formato PO, merece la pena leer la
# documentación de gettext, especialmente las secciones dedicadas a este
# formato, por ejemplo ejecutando:
#   info -n '(gettext)PO Files'
#   info -n '(gettext)Header Entry'
#
# Equipo de traducción al español, por favor lean antes de traducir
# los siguientes documentos:
#
#   - El proyecto de traducción de Debian al español
# http://www.debian.org/intl/spanish/
# especialmente las notas y normas de traducción en
# http://www.debian.org/intl/spanish/notas
#
#   - La guía de traducción de po's de debconf:
# /usr/share/doc/po-debconf/README-trans
# o http://www.debian.org/intl/l10n/po-debconf/README-trans
#
msgid 
msgstr 
Project-Id-Version: grub2 1.99-5\n
Report-Msgid-Bugs-To: gr...@packages.debian.org\n
POT-Creation-Date: 2014-12-13 20:23+\n
PO-Revision-Date: 2014-12-11 23:57+0100\n
Last-Translator: Manuel \Venturi\ Porras Peralta venturi@openmailbox.
org\n
Language-Team: Español; Castellano debian-l10n-span...@lists.debian.org\n
Language: es\n
MIME-Version: 1.0\n
Content-Type: text/plain; charset=UTF-8\n
Content-Transfer-Encoding: 8bit\n
Plural-Forms: nplurals=2; plural=(n != 1);\n
X-Generator: Gtranslator 2.91.6\n

#. Type: boolean
#. Description
#: ../grub-pc.templates.in:2001
msgid Chainload from menu.lst?
msgstr ¿Desea cargar secuencialmente desde el fichero «menu.lst»?

#. Type: boolean
#. Description
#: ../grub-pc.templates.in:2001
msgid GRUB upgrade scripts have detected a GRUB Legacy setup in /boot/grub.
msgstr 
Los ficheros de órdenes han detectado durante la actualización una 
configuración heredada de una versión anterior de GRUB en «/boot/grub».

#. Type: boolean
#. Description
#: ../grub-pc.templates.in:2001
msgid 
In order to replace the Legacy version of GRUB in your system, it is 
recommended that /boot/grub/menu.lst is adjusted to load a GRUB 2 boot image 
from your existing GRUB Legacy setup. This step can be automatically 
performed now.
msgstr 
Con el fin de reemplazar la versión anterior de GRUB en el sistema, se 
recomienda configurar «/boot/grub/menu.lst» para que cargue GRUB 2 a partir 
de la configuración heredada de GRUB. Este paso se puede hacer de forma 
automática.

#. Type: boolean
#. Description
#: ../grub-pc.templates.in:2001
msgid 
It's recommended that you accept chainloading GRUB 2 from menu.lst, and 
verify that the new GRUB 2 setup works before it is written to the MBR 
(Master Boot Record).
msgstr 
Se recomienda que acepte cargarlo secuencialmente desde el fichero «menu.
lst» y que compruebe el buen funcionamiento del nuevo GRUB 2, antes de 
instalarlo en el MBR («Master Boot Record»).

#. Type: boolean
#. Description
#: ../grub-pc.templates.in:2001
msgid 
Whatever your decision, you can replace the old MBR image with GRUB 2 later 
by issuing the following command as root:
msgstr 
Sea cual sea su decisión, puede reemplazar más tarde la imagen del MBR 
anterior con GRUB 2 ejecutando como administrador («root») la orden 
siguiente:

#. Type: multiselect
#. Description
#. Type: multiselect
#. Description
#: ../grub-pc.templates.in:3001 ../grub-pc.templates.in:4001
msgid GRUB install devices:
msgstr Dispositivos donde puede instalar GRUB:

#. Type: multiselect
#. Description
#: ../grub-pc.templates.in:3001
msgid 
The grub-pc package is being upgraded. This menu allows you to select which 
devices you'd like grub-install to be automatically run for, if any.
msgstr 
Se está actualizando el paquete grub-pc. Si lo desea, este menú le permite 
escoger en qué dispositivos quiere ejecutar automáticamente grub-install.

#. Type: multiselect
#. Description
#: 

Bug#773704: libsys-hostname-long-perl: additional output of su command not filtered

2014-12-22 Thread Christian Vieser
Package: libsys-hostname-long-perl
Version: 1.4-2
Severity: normal

Dear Maintainer,

in case the home directory of user nobody doesn't exist, su creates
it and reports this action on stdout, like this:

# su -s /bin/sh nobody -c hostname
Creating directory '/nonexistent'.
myserver.example.com

The perl function hostname_long() concatenates these two lines in
reverse order, so the returned string value is

myserver.example.comCreating directory '/nonexistent'.

I suggest to ignore all possible additional output of su and only
return the last line. Of course it would be preferable to prevent
su from creating the directory at all, but I couldn't find a solution
for this.

Thank you very much,
Christian

-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773703: Add -dbg package

2014-12-22 Thread Mathieu Malaterre
Package: jasper
Version: 1.900.1-13
Severity: wishlist
Tags: patch

It would be nice to have a -dbg package. See proposed patch:

$ cat debian/rules
[...]
override_dh_strip:
dh_strip --dbg-package=libjasper-dbg

$ cat debian/control
[...]
Package: libjasper-dbg
Section: debug
Architecture: any
Depends: libjasper1 (= ${binary:Version}), ${misc:Depends}
Description: Debug files for the JasPer JPEG-2000 library
 JasPer is a collection of software (i.e., a library and application programs)
 for the coding and manipulation of images.  This software can handle image
 data in a variety of formats.  One such format supported by JasPer is the
 JPEG-2000 format defined in ISO/IEC 15444-1:2000.
 .
 This package contains the debug symbols for libjasper.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773512: Some infos

2014-12-22 Thread Mathieu Malaterre
The invalid write access occurs here:

$ valgrind jasper --input white.jp2 --output white.ppm
==15473== Memcheck, a memory error detector
==15473== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==15473== Using Valgrind-3.10.0 and LibVEX; rerun with -h for copyright info
==15473== Command: jasper --input white.jp2 --output white.ppm
==15473==
==15473== Invalid write of size 8
==15473==at 0x4F1C3AA: dec_clnpass (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4F19212: jpc_dec_decodecblk (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4F18B30: jpc_dec_decodecblks (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E5BBC5: jpc_dec_tiledecode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E5A5CC: jpc_dec_process_sod (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E59DF9: jpc_dec_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E59A8D: jpc_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E53D11: jp2_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E450F8: jas_image_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x401531: main (in /usr/bin/jasper)
==15473==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==15473==
==15473==
==15473== Process terminating with default action of signal 11 (SIGSEGV)
==15473==  Access not within mapped region at address 0x0
==15473==at 0x4F1C3AA: dec_clnpass (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4F19212: jpc_dec_decodecblk (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4F18B30: jpc_dec_decodecblks (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E5BBC5: jpc_dec_tiledecode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E5A5CC: jpc_dec_process_sod (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E59DF9: jpc_dec_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E59A8D: jpc_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E53D11: jp2_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x4E450F8: jas_image_decode (in
/usr/lib/x86_64-linux-gnu/libjasper.so.1.0.0)
==15473==by 0x401531: main (in /usr/bin/jasper)
==15473==  If you believe this happened as a result of a stack
==15473==  overflow in your program's main thread (unlikely but
==15473==  possible), you can try to increase the size of the
==15473==  main thread stack using the --main-stacksize= flag.
==15473==  The main thread stack size used in this run was 8388608.
==15473==
==15473== HEAP SUMMARY:
==15473== in use at exit: 1,428,880,523 bytes in 3,817,584 blocks
==15473==   total heap usage: 3,817,670 allocs, 86 frees,
1,428,978,051 bytes allocated
==15473==
==15473== LEAK SUMMARY:
==15473==definitely lost: 0 bytes in 0 blocks
==15473==indirectly lost: 0 bytes in 0 blocks
==15473==  possibly lost: 0 bytes in 0 blocks
==15473==still reachable: 1,428,880,523 bytes in 3,817,584 blocks
==15473== suppressed: 0 bytes in 0 blocks
==15473== Rerun with --leak-check=full to see details of leaked memory
==15473==
==15473== For counts of detected and suppressed errors, rerun with: -v
==15473== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)
[1]15473 segmentation fault  valgrind jasper --input white.jp2
--output white.ppm


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773705: gnupg: gpg(1) documents --list-options show-usage, but gpg says unknown option `show-usage'

2014-12-22 Thread Axel Beckert
Package: gnupg
Version: 1.4.18-6

Dear GnuPG Maintainers,

gpg(1) contains:

   --list-options parameters
  This is a space or comma delimited string that gives
  options used when listing keys and signatures (that is,
  --list-keys, --list-sigs, --list-public-keys,
  --list-secret-keys, and the --edit-key functions).
  Options can be prepended with a no- (after the two dashes)
  to give the opposite meaning.  The options are:

   […]

   show-usage
 Show usage information for keys and subkeys in the
 standard key listing.  This is a list of letters
 indicating the allowed usage for a key
 (E=encryption, S=signing, C=certification,
 A=authentication).  Defaults to no.

But if I try to use it, gpg bails out:

→ gpg --list-options show-usage --list-keys
gpg: unknown option `show-usage'
gpg: invalid list options
→

gpg2 actually understands that option, so I suspect this is a mixup of
gpg/gpg2 in gpg's man page. But it doesn't seem to have happened
upstream -- it came in via debian/patches/sync-docs-with-upstream.patch.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (110, 'experimental'), (109, 
'buildd-unstable'), (109, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.18.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg depends on:
ii  gpgv  1.4.18-6
ii  libbz2-1.01.0.6-7+b2
ii  libc6 2.19-13
ii  libreadline6  6.3-8+b2
ii  libusb-0.1-4  2:0.1.12-25
ii  zlib1g1:1.2.8.dfsg-2+b1

Versions of packages gnupg recommends:
ii  gnupg-curl 1.4.18-6
ii  libldap-2.4-2  2.4.40-3

Versions of packages gnupg suggests:
pn  gnupg-doc none
ii  imagemagick   8:6.8.9.9-3
ii  libpcsclite1  1.8.13-1
ii  parcimonie0.8.4-1

-- no debconf information


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773415: [PATCH] gpgkey2ssh: clean up varargs

2014-12-22 Thread Werner Koch
On Fri, 19 Dec 2014 23:12, d...@fifthhorseman.net said:
 * tools/gpgkey2ssh.c (key_to_blob) : ensure that va_end is called.

Ah, this strange tool ;-).  Thanks.


Salam-Shalom,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773416: fixed in ettercap 1:0.8.1-3

2014-12-22 Thread Gianfranco Costamagna
Hi Raphael,

Thanks for the info! So the only remaining CVE would be
https://security-tracker.debian.org/tracker/CVE-2014-9380 and
https://security-tracker.debian.org/tracker/CVE-2014-9381 for the CVS
dissector.


yes, I think yes.

BTW, https://security-tracker.debian.org/tracker/CVE-2014-9376 mentions
also ec_dhcp.c which is present in the squeeze version. Do you confirm
that it is also unaffected?

I don't see the 
(opt = get_dhcp_option(DHCP_OPT_FQDN, options, end)) != NULL)
in the 0.7.3, so I presume the code wasn't yet implemented
(0.7.3 doesn't look for option 81 in dhcp answer)


https://github.com/Ettercap/ettercap/commit/8cda3a8cf00b9d40c50c8b3408782b43d3bea062

(introduced support on 0.7.6, may 2013)
And also https://security-tracker.debian.org/tracker/CVE-2014-9378
mentions ec_imap.c which is present in the squeeze version. Do you also
confirm that it is unaffected?

it shouldn't be, since the 

if (!strcmp(s-data, PLAIN)) {
method seems to be not implemented yet in 0.7.3


https://github.com/Ettercap/ettercap/commit/35289f8789e6c31644954cbdfbe1bdda101e97b3introduced
 around 29 Sep 2011

and v0.7.5

 introduced around 
29 Sep 2011



HTH

cheers,

Gianfranco


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773222: [RFR] po-debconf://grub2

2014-12-22 Thread Ian Campbell
On Mon, 2014-12-22 at 12:47 +0100, Manuel Venturi Porras Peralta wrote:
 first of all, thanks for your email. It is ok to submit this es.po
 because the fuzzy thing was EFI removable media. It hadn't the media
 word so it resulted in a wrong translation, but now it is fixed and
 media has been translated to medio, as it is in spanish.

Thanks for confirming, I'll mark the translation as non-fuzzy before
uploading.

 Just to be sure, the es.po file was in UTF-8, right?

I believe so, at least that is what the headers claim.

Ian.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773706: libvirt-daemon: Unable to use virtlockd as /usr/lib/libvirt/lock-driver/lockd.so

2014-12-22 Thread Gavin Pidgley
Package: libvirt-daemon
Version: 1.2.9-6~bpo70+1
Severity: important

Dear Maintainer,

It is not possible to use the libvirtd locking debain with libvirt, as libvirt
is unable to start when setting lock_manager = lockd in
/etc/libvirt/qemu.conf

Libvirt is unable to start and the error below is show in the libvirtd.log

Initialization of QEMU state driver failed: Plugin /usr/lib/libvirt/lock-
driver/lockd.so not accessible: No such file or directory

A quick search of the filesystem for lockd.so show that it is not present.

Architecture: amd64
Source: libvirt
Version: 1.2.9-6~bpo70+1

Could you advise?

Kind regards,
Gavin



-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i686
i386

Kernel: Linux 3.12-0.bpo.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libvirt-daemon depends on:
ii  libapparmor12.7.103-4
ii  libaudit0   1:1.7.18-1.1
ii  libavahi-client30.6.31-2
ii  libavahi-common30.6.31-2
ii  libblkid1   2.20.1-5.3
ii  libc6   2.13-38+deb7u4
ii  libcap-ng0  0.6.6-2
ii  libdbus-1-3 1.6.8-1+deb7u4
ii  libdevmapper1.02.1  2:1.02.74-8
ii  libfuse22.9.0-2+deb7u1
ii  libgcrypt11 1.5.0-5+deb7u1
ii  libgnutls26 2.12.20-8+deb7u2
ii  libnetcf1   0.1.9-2
ii  libnl1  1.1-7
ii  libnuma12.0.8~rc4-1
ii  libparted0debian1   2.3-12
ii  libpcap0.8  1.3.0-1
ii  libpciaccess0   0.13.1-2
ii  libsasl2-2  2.1.25.dfsg1-6+deb7u1
ii  libselinux1 2.1.9-5
ii  libssh2-1   1.4.2-1.1
ii  libsystemd-daemon0  44-11+deb7u4
ii  libudev0175-7.2
ii  libvirt01.2.9-6~bpo70+1
ii  libxenstore3.0  4.1.4-3+deb7u2
ii  libxml2 2.8.0+dfsg1-7+wheezy1
ii  libyajl22.0.4-2

Versions of packages libvirt-daemon recommends:
ii  libxml2-utils   2.8.0+dfsg1-7+wheezy1
ii  netcat-openbsd  1.105-7
ii  qemu1.1.2+dfsg-6a+deb7u3
ii  qemu-kvm1.1.2+dfsg-6+deb7u3

Versions of packages libvirt-daemon suggests:
ii  libvirt-daemon-system  1.2.9-6~bpo70+1

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773707: gvfs not very usable with non-gnome applications

2014-12-22 Thread Andrew Gallagher
Package: gvfs
Version: 1.22.2-1
Severity: important

Dear Maintainer,

When upgrading from wheezy to jessie, the entire path structure of gvfs has
changed. I understand it is more compliant to place transient mount points
under /run rather than ~, but it has made working with non-gnome applications
even more difficult.

The path now contains both usernames and userids. This is a major usability
flaw, as different users see different paths to the same resource. Identifiers
should not contain credential information.

Andrew.



-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages gvfs depends on:
ii  gvfs-common   1.22.2-1
ii  gvfs-daemons  1.22.2-1
ii  gvfs-libs 1.22.2-1
ii  libc6 2.19-13
ii  libglib2.0-0  2.42.1-1
ii  libudev1  215-7

gvfs recommends no packages.

Versions of packages gvfs suggests:
ii  gvfs-backends  1.22.2-1

-- no debconf information

The information in this email and any attachments contain confidential 
information and is intended only for the individual named. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail, the 
attachments or any part thereof. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Unless expressly stated, this email is not intended to 
create any contractual relationship. If this email is not sent in the course of 
the senders employment or fulfilment of his/her duties to Ward Solutions, Ward 
Solutions accepts no liability whatsoever for the content of this message or 
any attachment(s). Ward Solutions Ltd. Registered in Republic of Ireland at 
2054 Castle Drive, CityWest Business Campus, Dublin 24 Reg. No. 316165. 


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767471: [initramfs-tools] / formatted as ext3 but mounted as ext4 not fsck-able

2014-12-22 Thread Richard Kettlewell
I ran into the inverse situation: my /etc/fstab said ext3, but at 
runtime the initramfs looked for /sbin/fsck.ext4, and couldn't find it.


Perhaps instead of special-casing ext3/ext4, it might be better to make 
it use 'fsck -N' (or equivalent) to discover which fsck backend will be 
used at runtime?


In the event my system booted successfully anyway, apparently due to 
other things being broken:


[1.849317] sr0: scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
[1.851592] cdrom: Uniform CD-ROM driver Revision: 3.20
[1.860545] sr 1:0:0:0: Attached scsi generic sg0 type 5
Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... Begin: Running /scripts/local-top 
... [2.406902] device-mapper: uevent: version 1.0.3
[2.408440] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) 
initialised: dm-de...@redhat.com

done.
Begin: Running /scripts/local-premount ... done.
Begin: Checking root file system ... fsck from util-linux 2.25.2
fsck: error 2 (No such file or directory) while executing fsck.ext4 for 
/dev/mapper/deodand2-droot2

fsck exited with status code 8
done.
Failure: An automatic file system check (fsck) of the root filesystem 
failed.

A manual fsck must be performed, then the system restarted.
The fsck should be performed in maintenance mode with the
root filesystem mounted in read-only mode.
Warning: The root filesystem is currently mounted in read-only mode.
A maintenance shell will now be started.
After performing system maintenance, press CONTROL-D
to terminate the maintenance shell and restart the system.
sulogin: cannot open password database!
[4.700827] sulogin[132]: segfault at 4 ip 080491f6 sp bfcec4b0 error 
4 in sulogin[8048000+3000]

Segmentation fault
Failure: Attempt to start maintenance shell failed.
Will restart in 5 seconds.
[9.730265] EXT4-fs (dm-0): mounted filesystem with ordered data 
mode. Opts: (null)

done.
Begin: Running /scripts/local-bottom ... done.
Begin: Running /scripts/init-bottom ... done.
[9.970645] systemd[1]: systemd 215 running in system mode. (+PAM 
+AUDIT +SELINUX +IMA +SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ -SECCOMP 
-APPARMOR)

[9.975644] systemd[1]: Detected virtualization 'kvm'.
[9.977548] systemd[1]: Detected architecture 'x86'.

Welcome to Debian GNU/Linux 8 (jessie)!

[   10.054678] systemd[1]: Inserted module 'autofs4'
[   10.059954] systemd[1]: Set hostname to deodand.
[   10.142457] systemd-default-display-manager-generator[158]: No 
default display manager unit service enabled, setup is manual or a 
sysvinit file
[   10.384669] systemd[1]: Cannot add dependency job for unit 
display-manager.service, ignoring: Unit display-manager.service failed 
to load: No such file or directory.

[   10.391105] systemd[1]: Expecting device dev-ttyS0.device...
 Expecting device dev-ttyS0.device...

ttfn/rjk


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773708: reportbug: scrollbar operation is crude

2014-12-22 Thread Andrew Gallagher
Package: reportbug
Version: 6.6.1
Severity: minor

Dear Maintainer,

The scrollbars in the python-gtk UI do not exhibit expected behaviour. Clicking
inside the scrollbar track either above or below the bar should page up and
down by one page - this has been standard UI practice for years.

Andrew.



-- Package-specific info:
** Environment settings:
INTERFACE=gtk2

** /home/agallagher/.reportbugrc:
reportbug_version 4.12.6
mode standard
ui gtk2
realname Andrew Gallagher
email andr...@andrewg.com
smtphost localhost:1025
smtpuser agallagher

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages reportbug depends on:
ii  apt   1.0.9.4
ii  python2.7.8-2
ii  python-reportbug  6.6.1
pn  python:anynone

reportbug recommends no packages.

Versions of packages reportbug suggests:
pn  claws-mail none
pn  debconf-utils  none
pn  debsumsnone
ii  dlocate1.02+nmu3
pn  emacs23-bin-common | emacs24-bin-commonnone
ii  exim4  4.84-3
ii  exim4-daemon-light [mail-transport-agent]  4.84-3
ii  file   1:5.20-2
ii  gnupg  1.4.18-6
ii  python-gtk22.24.0-4
pn  python-gtkspellnone
pn  python-urwid   none
ii  python-vte 1:0.28.2-5
ii  xdg-utils  1.1.0~rc1+git20111210-7.1

Versions of packages python-reportbug depends on:
ii  apt   1.0.9.4
ii  python-debian 0.1.25
ii  python-debianbts  1.12
pn  python:anynone

python-reportbug suggests no packages.

The information in this email and any attachments contain confidential 
information and is intended only for the individual named. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail, the 
attachments or any part thereof. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Unless expressly stated, this email is not intended to 
create any contractual relationship. If this email is not sent in the course of 
the senders employment or fulfilment of his/her duties to Ward Solutions, Ward 
Solutions accepts no liability whatsoever for the content of this message or 
any attachment(s). Ward Solutions Ltd. Registered in Republic of Ireland at 
2054 Castle Drive, CityWest Business Campus, Dublin 24 Reg. No. 316165. 


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773423: [PATCH] avoid double-close in unusual dotlock situations

2014-12-22 Thread Werner Koch
On Fri, 19 Dec 2014 23:12, d...@fifthhorseman.net said:

  close() should not be retried after an EINTR since this  may
cause a reused descriptor from another thread to be closed.

Actually that is a pretty unusal behaviour for an interrupted system
call.  But close is special anyway.  I was not aware of that and Jim
didn't mentioned that in

 https://www.gnu.org/ghm/2011/paris/slides/jim-meyering-goodbye-world.pdf

but okay, that was just about stdio.

Anyway, fix pushed and I will also backport it to the other branches.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773673: reportbug: I cannot change window size when nano is running inside reportbug

2014-12-22 Thread Sandro Tosi
 Steps to reproduce: I run reportbug, answer questions, then at some point the 
 reportbug run editor (nano), this editor is started in my
 terminal (konsole), then I try to change window (i. e. konsole's) size. The 
 size changes, but nano becomes corrupted.

do you experience the same behavior when running nano by itself (i.e.
not spawn by reportbug) in konsole?

Regards,
-- 
Sandro Tosi (aka morph, morpheus, matrixhasu)
My website: http://matrixhasu.altervista.org/
Me at Debian: http://wiki.debian.org/SandroTosi


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773660: dsa-3108 returns 404, I think that explains...

2014-12-22 Thread Holger Levsen
many thanks, Andreas!


signature.asc
Description: This is a digitally signed message part.


Bug#768095: openvswitch-datapath-dkms fails to build on Debian 7.7 3.2.0-4-amd64 (3.2.63-2+deb7u1)

2014-12-22 Thread Jonathan Dupart
Hi,

* Thomas Goirand z...@debian.org [141125 14:15]:
 On 11/25/2014 12:32 AM, Jonathan Dupart wrote:
  Hi,
  
  I am looking for a sponsor for the package openvswitch to correct bug
  #768095.
  
  This bug prevents building the openvswitch kernel module with the last
  stable kernel.
  
  As openvswitch maintainer requested an NMU, i built a package [1] with
  the patch already used by Ubuntu to fix the same bug [2] (i use this fix
  since 10 days on live servers).
  
  I attached a full debdiff of the changes.
  
[1]: http://mentors.debian.net/package/openvswitch
 
  http://mentors.debian.net/debian/pool/main/o/openvswitch/openvswitch_1.4.2+git20120612-9.1~deb7u1.1.dsc
[2]: https://bugs.launchpad.net/ubuntu/+source/openvswitch/+bug/1379201
  
[...]
 When the release team has approved your change, then I can sponsor it.

The patch has been accepted, see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770955#24

Regards,

-- 
Jonathan Dupart


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773255: Add TI OMAP5 uEVM board support db

2014-12-22 Thread Ian Campbell
Control: tag -1 +pending

On Sat, 2014-12-20 at 15:39 +0800, Chen Baozi wrote:
  On Dec 19, 2014, at 16:15, Ian Campbell i...@debian.org wrote:
  
  On Fri, 2014-12-19 at 13:38 +0800, Chen Baozi wrote:
  I’ve only booted the system by ‘bootz’ without initrd. If I load the raw
  initrd image (rather than ‘uInitrd”), when I use bootz, it would output:
  
  Wrong Ramdisk Image Format
  Ramdisk image is corrupt or invalid
  
  This is the reason that I’m still using bootm when initrd is needed.
  
  bootz requires you to give the filesize for the raw initrd. e.g.
  load $kernel_addr_r kernel
  load $fdt_addr_r
  load $ramdisk_addr_r
  bootz ${kernel_addr_r} ${ramdisk_addr_r}:${filesize} ${fdt_addr_r}
  
  The :${filesize} is what I mean, it is implicitly set by load (and
  similar commands) which is why initrd is loaded last in the above, so it
  doesn't get clobbered.
 
 Aha, the CONFIG_SUPPORT_RAW_INITRD is not defined by default when building
 u-boot with omap5_uevm_defconfig. That is why I used to fail booting with
 ‘bootz’.
 
 With the latest u-boot enabling CONFIG_SUPPORT_RAW_INITRD, the following
 db description works:
 
 Machine: TI OMAP5 uEVM board
 Method: generic
 U-Boot-Script-Name: bootscr.uboot-generic
 Boot-Script-Path: /boot/boot.scr
 Required-Packages: u-boot-tools
 DTB-Id: omap5-uevm.dtb

Thanks. I think this platform supports LPAE, so I added Kernel-Flavors:
armmp armmp-lpae, and Method defaults to generic so I omitted it,
resulting in:
Machine: TI OMAP5 uEVM board
Kernel-Flavors: armmp armmp-lpae
DTB-Id: omap5-uevm.dtb
U-Boot-Script-Name: bootscr.uboot-generic
Boot-Script-Path: /boot/boot.scr
Required-Packages: u-boot-tools

I've committed this to flash-kernel.git, and I'll upload around the time
the kernel side is uploaded.

Ian.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771414: ITP: bbbike -- route planner for cyclists

2014-12-22 Thread Andreas Tille
Hi Slaven,

On Sat, Nov 29, 2014 at 10:56:38AM +, Slaven Rezic wrote:
 Package: wnpp
 Severity: wishlist
 Owner: Slaven Rezic sla...@rezic.de
 
 * Package name: bbbike
   Version : 3.18
   Upstream Author : Slaven Rezic sla...@rezic.de
 * URL : http://bbbike.sourceforge.net
 * License : Artistic  GPL
   Programming Lang: Perl
   Description : route planner for cyclists
 
 BBBike is an information system for cyclists in Berlin and 
 Brandenburg (Germany), and, using OpenStreetMap and the
 BBBike @ World project, for more than 200 cities around the
 world. It has the following features:
 
 * Displays a map with streets, railways, rivers, parks, altitude, and 
   other features 
 * Finds and shows routes between two points
 * Route-finder can be customized to match the cyclist's preferences: 
   fastest/nicest route, take wind directions and hills into account, etc.
 * Bike power calculator 
 * Automatically fetches the current weather data

Sounds like a neat project.  Since it is using OpenStreetMap it vaguely
touches the scope of Debian GIS project.  At least I would consider to
package this in the Debian GIS team.

Is there any specific reason why the area is restricted to Berlin and
Brandenburg.  In other words:  Can I use this program also in the Harz
region (and if not why not)?

Kind regards

   Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773110: ITP: openorienteering-mapper -- orienteering mapmaking program

2014-12-22 Thread Andreas Tille
Hi Gaudenz,

On Sun, Dec 14, 2014 at 02:32:42PM +0100, Gaudenz Steinlin wrote:
 Package: wnpp
 Severity: wishlist
 Owner: Gaudenz Steinlin gaud...@debian.org
 
 * Package name: openorienteering-mapper
   Version : 0.5.96
   Upstream Author : Kai Pastor dg...@darc.de and Thomas Schoeps 
 tom.scho...@gmail.com
 * URL : http://oorienteering.sourceforge.net/
 * License : GPLv3
   Programming Lang: C++
   Description : orienteering mapmaking program
 
  OpenOrienteering Mapper is an orienteering mapmaking program and provides a
  free alternative to the existing proprietary OCAD solution. Its main 
 advantages
  compared to it are:
  .
  * Open Source: the program is completely free, every programmer can improve 
 it.
  * Cross-platform: the program works on Android, Windows, Mac OS X and Linux.
  .
  While it is under continuous development and considered in beta state, it has
  been used to produce maps for classical orienteering, MTBO and radio
  orienteering races. All required functions for drawing maps are implemented 
 and
  the program works very stable. So it can be considered ready for productive 
 use,
  although it is like always a good idea to keep backups of your files.

Thanks for this ITP.  This program might vaguely scratch the scope of
Debian GIS.  If you did not found some other team you might consider
maintaining it in Debian GIS.

Kind regards

   Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773041: Bug#773318: clamav dies/hangs

2014-12-22 Thread Sebastian Andrzej Siewior
* Marc Dequènes (duck) | 2014-12-22 02:52:02 [+0100]:

Coin,

On 2014-12-21 22:16, Sebastian Andrzej Siewior wrote:
On 2014-12-20 12:12:13 [+0100], Andreas Cadhalpun wrote:
As it shows that clamd hangs in libmspack, I think this is bug #773041
[1].
A possible fix is mentioned in [2].

I can upload this simple fix quickly, nevertheless i did not have time to
proofread it. Any comment?

It would be nice if we could keep this in sync. I will look at this in
tonight at the latest and give more feedback.

Is the security team aware of the various in-tree copy of this library?
#67 tries / tried to track them.

Joss filled #675560 tagged security.

Yes. Atleast clamav can be triggered via remote. Not sure about the
others.

Regards.

Sebastian


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773709: xserver-xorg: X crashes when displaying a very large jpeg file with certain viewers

2014-12-22 Thread eingousef
Package: xserver-xorg
Version: 1:7.7+7
Severity: normal

Dear Maintainer,

When I try to diplay this 19 857 × 3 038, 24.85 Mio jpeg picture
http://upload.wikimedia.org/wikipedia/commons/3/31/78_-_Qu%C3%A9bec_-
_Juin_2009.jpg
in iceweasel, not only iceweasel crashes, but the whole desktop too, leaving
me on the login screen. The crash happens immediately, I don't think
iceweasel has the time to download the whole picture. When I download the
picture and display it with eog, the same thing happens.
ristretto, feh and imagemagick can display it just fine.

The graphic card is a Radeon R9 280X, and I use the free radeon driver on a
debian testing install. When I use the non-free fglrx driver, the crash
doesn't occur.

Regards,



-- Package-specific info:
X server symlink status:

lrwxrwxrwx 1 root root 13 Oct  3 10:52 /etc/X11/X - /usr/bin/Xorg
-rwxr-xr-x 1 root root 2401376 Dec  9 23:24 /usr/bin/Xorg

VGA-compatible devices on PCI bus:
--
01:00.0 VGA compatible controller [0300]: Advanced Micro Devices, Inc. 
[AMD/ATI] Tahiti XT [Radeon HD 7970/8970 OEM / R9 280X] [1002:6798]

/etc/X11/xorg.conf does not exist.

/etc/X11/xorg.conf.d does not exist.

/etc/modprobe.d contains no KMS configuration files.

Kernel version (/proc/version):
---
Linux version 3.16.0-4-amd64 (debian-ker...@lists.debian.org) (gcc version 
4.8.3 (Debian 4.8.3-16) ) #1 SMP Debian 3.16.7-ckt2-1 (2014-12-08)

Xorg X server log files on system:
--
-rw-r--r-- 1 root root 43548 Dec 22 13:25 /var/log/Xorg.0.log

Contents of most recent Xorg X server log file (/var/log/Xorg.0.log):
-
[  2310.576] 
X.Org X Server 1.16.2.901 (1.16.3 RC 1)
Release Date: 2014-12-09
[  2310.577] X Protocol Version 11, Revision 0
[  2310.577] Build Operating System: Linux 3.2.0-4-amd64 x86_64 Debian
[  2310.577] Current Operating System: Linux desktop 3.16.0-4-amd64 #1 SMP 
Debian 3.16.7-ckt2-1 (2014-12-08) x86_64
[  2310.577] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1
[  2310.577] Build Date: 09 December 2014  10:15:28PM
[  2310.577] xorg-server 2:1.16.2.901-1 (http://www.debian.org/support) 
[  2310.577] Current version of pixman: 0.32.6
[  2310.577]Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[  2310.577] Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[  2310.577] (==) Log file: /var/log/Xorg.0.log, Time: Mon Dec 22 13:25:43 
2014
[  2310.577] (==) Using system config directory /usr/share/X11/xorg.conf.d
[  2310.577] (==) No Layout section.  Using the first Screen section.
[  2310.577] (==) No screen section available. Using defaults.
[  2310.577] (**) |--Screen Default Screen Section (0)
[  2310.577] (**) |   |--Monitor default monitor
[  2310.577] (==) No monitor specified for screen Default Screen Section.
Using a default monitor configuration.
[  2310.577] (==) Automatically adding devices
[  2310.577] (==) Automatically enabling devices
[  2310.577] (==) Automatically adding GPU devices
[  2310.577] (WW) The directory /usr/share/fonts/X11/cyrillic does not exist.
[  2310.577]Entry deleted from font path.
[  2310.577] (==) FontPath set to:
/usr/share/fonts/X11/misc,
/usr/share/fonts/X11/100dpi/:unscaled,
/usr/share/fonts/X11/75dpi/:unscaled,
/usr/share/fonts/X11/Type1,
/usr/share/fonts/X11/100dpi,
/usr/share/fonts/X11/75dpi,
built-ins
[  2310.577] (==) ModulePath set to /usr/lib/xorg/modules
[  2310.577] (II) The server relies on udev to provide the list of input 
devices.
If no devices become available, reconfigure udev or disable 
AutoAddDevices.
[  2310.577] (II) Loader magic: 0x7f524c345d80
[  2310.577] (II) Module ABI versions:
[  2310.577]X.Org ANSI C Emulation: 0.4
[  2310.577]X.Org Video Driver: 18.0
[  2310.577]X.Org XInput driver : 21.0
[  2310.577]X.Org Server Extension : 8.0
[  2310.578] (II) xfree86: Adding drm device (/dev/dri/card0)
[  2310.580] (--) PCI:*(0:1:0:0) 1002:6798:1462:2775 rev 0, Mem @ 
0xd000/268435456, 0xfe8c/262144, I/O @ 0xb000/256, BIOS @ 
0x/131072
[  2310.580] (II) LoadModule: glx
[  2310.580] (II) Loading /usr/lib/xorg/modules/extensions/libglx.so
[  2310.581] (II) Module glx: vendor=X.Org Foundation
[  2310.581]compiled for 1.16.2.901, module version = 1.0.0
[  2310.581]ABI class: X.Org Server Extension, version 8.0
[  2310.581] (==) AIGLX enabled
[  2310.581] (==) Matched ati as autoconfigured driver 0
[  2310.581] (==) Matched ati as autoconfigured driver 1
[  2310.581] (==) Matched modesetting as autoconfigured driver 2
[  2310.581] (==) Matched fbdev as autoconfigured driver 3
[  2310.581] 

Bug#773656: ITP: daps -- DocBook Authoring and Publishing Suite

2014-12-22 Thread Raphael Hertzog
Hello,

On Mon, 22 Dec 2014, Andrei POPESCU wrote:
 On Du, 21 dec 14, 17:35:39, Sascha Manns wrote:
  Package: daps
  Severity: wishlist
  
  URL: http://daps.sourceforge.net/
  SVN: http://sourceforge.net/p/daps/svn/HEAD/tree/

The bug is title ITP. Does that mean that you want to package this
software? If you want someone else to package it, then it should be a RFP
(Request for Package).

In any case, I wanted to point out that Debian already contains publican
which is RedHat's version of a similar tool. It also supports translation
with PO files. I'm its Debian maintainer.

It might be interesting for your needs.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#772457: [Pkg-fonts-devel] Bug#772457: Bug#772457: fonts-droid: Possibly typo in debian/maintscript

2014-12-22 Thread Vasudev Kamath
Michael Gilbert mgilb...@debian.org writes:

 On Sun, Dec 14, 2014 at 6:55 AM, Vasudev Kamath wrote:
 You are right, its a typo. We never built a binary called
 fonts-android. I've fixed this in git, I've kept it in unreleased state
 so some one can push it to the archive and file a unblock request. (I
 hope its valid candidate for unblock request.).

 Hi, I reviewed and sponsored your changes.  An unblock request isn't
 necessarily required when the only changes are for RC bug fixes.

Hi Mike,

Thanks for the upload. I think an unblock request is already applied by
ivodd, as seen on PTS page. May be its as you said automatic.

Cheers,
-- 
Vasudev Kamath
http://copyninja.info
Connect on ~friendica: copyni...@samsargika.copyninja.info
IRC nick: copyninja | vasudev {irc.oftc.net | irc.freenode.net}
GPG Key: C517 C25D E408 759D 98A4  C96B 6C8F 74AE 8770 0B7E


signature.asc
Description: PGP signature


Bug#773473: [Pkg-gnupg-maint] Bug#773473: [PATCH] * sm/gpgsm.c: (parse_keyserver_line) return false on 'fail'.

2014-12-22 Thread Werner Koch
On Sat, 20 Dec 2014 17:03, d...@fifthhorseman.net said:

 (alternately, you could just set

  server = NULL;

 and let the final line of the function return it)

That is what I did with abd5f67.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773680: mpv: wrong version number in --version

2014-12-22 Thread Alessandro Ghedini
On lun, dic 22, 2014 at 12:42:04 +0100, Ayke van Laethem wrote:
 Package: mpv
 Version: 0.6.2-2
 Severity: normal
 
 Dear Maintainer,
 
 MPV will give the wrong version number when running without arguments, or when
 running mpv --version.

Looks good here:

  $ mpv --version
  mpv 0.6.2 (C) 2000-2014 mpv/MPlayer/mplayer2 projects
   built on 2014-10-25T13:21:01
  libav library versions:
 libavutil   54.3.0
 libavcodec  56.1.0
 libavformat 56.1.0
 libswscale  3.0.0
 libavfilter 5.0.0
 libavresample   2.1.0

 Example:
 
 ~$ mpv --version
 mpv 0.5.0-git-88f247c (C) 2000-2014 mpv/MPlayer/mplayer2 projects
  built on 2014-08-15T12:38:45

This is not the Debian package... on 2014-08-15 0.6.2 wasn't even released yet
and the 88f247cf git commit is the one that created the 0.5.0 release. Also, the
Debian package isn't built directly from git so it doesn't get the -git-xxx
suffix in the version number.

Maybe the mpv executable you are using isn't the one from the Debian package
(e.g. if you rebuilt mpv from the upstream git repository and changed $PATH to
point to it, then forgot about it). What does the which mpv command say?

Cheers


signature.asc
Description: Digital signature


Bug#773656: ITP: daps -- DocBook Authoring and Publishing Suite

2014-12-22 Thread Sascha Manns

Hello Raphael,

Am 22.12.2014 13:50, schrieb Raphael Hertzog:

Hello,

On Mon, 22 Dec 2014, Andrei POPESCU wrote:

On Du, 21 dec 14, 17:35:39, Sascha Manns wrote:
 Package: daps
 Severity: wishlist

 URL: http://daps.sourceforge.net/
 SVN: http://sourceforge.net/p/daps/svn/HEAD/tree/


The bug is title ITP. Does that mean that you want to package this
software? If you want someone else to package it, then it should be a 
RFP

(Request for Package).
Yes i want to package it by myself. I also have prepared the stuff for 
Debian.


In any case, I wanted to point out that Debian already contains 
publican
which is RedHat's version of a similar tool. It also supports 
translation

with PO files. I'm its Debian maintainer.

Oh it's a cool tool. Maybe we can make daps available too. :-)

--
Yours sincerly

Sascha Manns


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773710: libindicator3-dev: please drop dependency on libindicator-dev

2014-12-22 Thread Vlad Orlov
Package: libindicator3-dev
Version: 0.5.0-2
Severity: normal


Hi,

This dependency has been introduced as a solution for a bug [1]. Actually,
all that was needed is to correct the path in the Cflags field in a .pc file.
But now it seems that the mentioned path has been corrected in [2] already,
so there's no need to keep this dependency anymore.

Can you please drop it?

Thanks in advance.


[1] https://bugs.launchpad.net/bugs/803136
[2] 
http://sources.debian.net/src/libindicator/0.5.0-2/libindicator/indicator3-0.4.pc.in.in/

Bug#635180: [ftpd-ssl] Configuration file /etc/ftpd-ssl/ftpd.pem not found.

2014-12-22 Thread Mats Erik Andersson
It is in my opinion far better not to generate a default
certificate at first install time, than to produce something
prone to be an attack vector. Therefore the next packaging of
ftpd-ssl will include some informational messages to inform
about the missing certificate, and will also contribute an
elementary discription for manual remedy of this fact.

The bug will remain present for documental purposes.

Regards,
  Mats Erik Andersson, the next maintainer of this package.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#541269: mpd: Hang after 2min43sec on BBC Radio feed

2014-12-22 Thread Florian Schlichting
tags 541269 + moreinfo
thanks

On 2009/08/12 23:40, Toby Speight t.m.speight...@cantab.net wrote:
 When I try any of the BBC radio feeds listed, it plays fine for 163
 seconds then mpd hangs.  Clients cannot connect, the daemon process
 appears idle (1% CPU), and no sound is heard until the daemon is
 restarted, when play resumes, again for 163 seconds.

 |  1) http://www.bbc.co.uk/radio/listen/live/r4.ram
 |  2) http://www.bbc.co.uk/radio/listen/live/r2.ram

I just wanted to try and reproduce the issue, but those URLs are no
longer valid (in fact BBC is about to switch away from what they
replaced real audio with, it seems) and I'm having trouble finding other
radio streams in that format that still work. Pretty much obsolete, it
seems.

So unless someone speaks up confirming that the issue is still valid on
current versions of mpd and supporting libraries, I'd be inclined to
archive this bug.

Florian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773625: nss: diff for NMU version 2:3.17.2-1.1

2014-12-22 Thread Matt Kraai
Control: tags 773625 + patch
Control: tags 773625 + pending

Hi,

I've prepared an NMU for nss (versioned as 2:3.17.2-1.1) and uploaded
it to DELAYED/5. Please feel free to tell me if I should cancel it or
delay it longer.

-- 
Matt
diff -Nru nss-3.17.2/debian/changelog nss-3.17.2/debian/changelog
--- nss-3.17.2/debian/changelog	2014-10-17 21:22:21.0 -0700
+++ nss-3.17.2/debian/changelog	2014-12-21 19:46:52.0 -0800
@@ -1,3 +1,10 @@
+nss (2:3.17.2-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix CVE-2014-1569. Closes: #773625.
+
+ -- Matt Kraai kr...@debian.org  Sun, 21 Dec 2014 19:46:52 -0800
+
 nss (2:3.17.2-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru nss-3.17.2/debian/patches/98_CVE-2014-1569.patch nss-3.17.2/debian/patches/98_CVE-2014-1569.patch
--- nss-3.17.2/debian/patches/98_CVE-2014-1569.patch	1969-12-31 16:00:00.0 -0800
+++ nss-3.17.2/debian/patches/98_CVE-2014-1569.patch	2014-12-21 20:02:10.0 -0800
@@ -0,0 +1,155 @@
+Description: Be more strict on DER length decoding in quickder.c
+Origin: https://hg.mozilla.org/projects/nss/rev/a163e09dc4d5
+Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1064670
+Last-Update: 2014-12-21
+
+# HG changeset patch
+# User J.C. Jones jjo...@mozilla.com
+# Date 1415421927 28800
+# Node ID a163e09dc4d5e90f609f25cf63fae46711b55f73
+# Parent  b6db7a6d2e2c35609450ea8569cc179feffe45e0
+Bug 1064670 - (CVE-2014-1569) ASN.1 DER decoding of lengths is too permissive, allowing undetected smuggling of arbitrary data (r=wtc)
+
+diff --git a/lib/util/quickder.c b/lib/util/quickder.c
+--- nss.orig/nss/lib/util/quickder.c
 nss/nss/lib/util/quickder.c
+@@ -11,65 +11,120 @@
+ #include secasn1.h /* for SEC_ASN1GetSubtemplate */
+ #include secitem.h
+ 
+ /*
+  * simple definite-length ASN.1 decoder
+  */
+ 
+ static unsigned char* definite_length_decoder(const unsigned char *buf,
+-  const unsigned int length,
+-  unsigned int *data_length,
++  const unsigned int buf_length,
++  unsigned int *out_data_length,
+   PRBool includeTag)
+ {
+ unsigned char tag;
+-unsigned int used_length= 0;
+-unsigned int data_len;
++unsigned int used_length = 0;
++unsigned int data_length = 0;
++unsigned char length_field_len = 0;
++unsigned char byte;
++unsigned int i;
+ 
+-if (used_length = length)
++if (used_length = buf_length)
+ {
++/* Tag field was not found! */
+ return NULL;
+ }
+ tag = buf[used_length++];
+ 
+-/* blow out when we come to the end */
+ if (tag == 0)
+ {
++/* End-of-contents octects should not be present in DER because
++   DER doesn't use the indefinite length form. */
+ return NULL;
+ }
+ 
+-if (used_length = length)
++if ((tag  0x1F) == 0x1F)
+ {
++/* High tag number (a tag number  30) is not supported */
+ return NULL;
+ }
+-data_len = buf[used_length++];
+ 
+-if (data_len0x80)
++if (used_length = buf_length)
+ {
+-int  len_count = data_len  0x7f;
++/* Length field was not found! */
++return NULL;
++}
++byte = buf[used_length++];
+ 
+-data_len = 0;
++if (!(byte  0x80))
++{
++/* Short form: The high bit is not set. */
++data_length = byte; /* clarity; we're returning a 32-bit int. */
++}
++else
++{
++/* Long form. Extract the field length */
++length_field_len = byte  0x7F;
++if (length_field_len == 0)
++{
++/* DER doesn't use the indefinite length form. */
++return NULL;
++}
+ 
+-while (len_count--  0)
++if (length_field_len  sizeof(data_length))
+ {
+-if (used_length = length)
++/* We don't support an extended length field  longer than
++   4 bytes (2^32) */
++return NULL;
++}
++
++if (length_field_len  (buf_length - used_length))
++{
++/* Extended length field was not found */
++return NULL;
++}
++
++/* Iterate across the extended length field */
++for (i = 0; i  length_field_len; i++)
++{
++byte = buf[used_length++];
++data_length = (data_length  8) | byte;
++
++if (i == 0)
+ {
+-return NULL;
++PRBool too_long = PR_FALSE;
++if (length_field_len == 1)
++{
++too_long = ((byte  0x80) == 0); /* Short form suffices */
++}
++else
++{
++too_long = (byte == 0); /* This zero byte can be omitted */
++}
++if (too_long)
++

Bug#753776: squishyball: X/X/Y test is broken

2014-12-22 Thread Thibaut Girka
On Mon, Oct 20, 2014 at 09:51:28PM +0100, Jonathan Dowland wrote:
 Dear Thibaut Girka,
 
 On Fri, Jul 04, 2014 at 11:44:28PM +0200, Thibaut Girka wrote:
  The X/X/Y test method of squishyball is completely broken.
  The attached patch fixes it and shouldn't break any of the
  other modes.
 
 Thanks for this, sorry for not replying sooner. I haven't yet wrapped my head
 around your change -- but I've passed it on to upstream for comment, and I 
 have
 a test -4 .deb build with it applied. I'm going to hope to consider this
 properly prior to the freeze and get that package uploaded if all seems well.

Sorry for the late reply!

So, let me explain the bug more properly:
Quoting the manpage, “X/X/Y testing is a form of A/B/X testing in which the
order of all samples is randomized and the position of the 'X' sample is not
known ahead of time to be in  the  third position.  In each trial, the user
selects which of sample 1, 2 or 3 is believed to be the sample that is
different from the other two.”

So, in X/X/Y mode, when presented with the three samples, one has to find
the “odd one out” and is not expected to know to which file the sample
corresponds to.

Now, if you try this mode using two completely different sound files, it will
become evident that the results are sometimes off:
$ squishyball --xxy --score-display 
/usr/share/games/wesnoth/1.10/data/core/music/heroes_rite.ogg 
/usr/share/games/wesnoth/1.10/data/core/music/main_menu.ogg

Unfortunately, my proposed patch was wrong too, as it broke A/B trial.

In the portion of code I modified, “flip_to” indicates the sample singled out
by the user: 1 if he typed “!”, 2 if he typed @, 3 if he typed “#”.
“randomize” and “cchoice” are set by randomize_samples:
* In the case of A/B trial, randomize[0] has a random value and randomize[1]
  is equal to “1 - randomize[0]”. “cchoice” is always 1.
  This is the case my patch broke, as the new condition “flip_to == choice”
  would not depend on the randomization anymore.
* In the case of A/B/X trial, randomize[0] = 0, randomize[1] = 1 and
  cchoice is whatever randomize[2] is.
  In this particular case, randomize[x] == x, for x ∈ [0, 1] so both my patch
  and the original code had the same behaviour.
* In the case of X/X/Y trial, “randomize” contains a random selection of 0
  and 1s (with one of the value different from the two others). “cchoice” is
  set to the index of the “randomize” element that is different from the
  others. In this case, “randomize[flip_to] == cchoice” is obviously wrong,
  since in the case cchoice is 2, there is no way to select the correct answer.
  The fix is then to set “cchoice” to the value of the different element (see
  attached patch).

Best regards,
Thibaut Girka.
--- a/main.c
+++ b/main.c
@@ -222,7 +222,7 @@
   r[1] = 1-r[1];
   r[2] = 1-r[2];
 }
-*cchoice = (r[0]==r[1] ? 2 : (r[1]==r[2] ? 0 : 1));
+*cchoice = r[(r[0]==r[1] ? 2 : (r[1]==r[2] ? 0 : 1))];
 break;
   }
 }


signature.asc
Description: Digital signature


Bug#773009: Just an update, in case someone else reaches here

2014-12-22 Thread Ronoaldo José de Lana Pereira
I had to remove the qt5 development libraries that were installed on
my system in order to build kde-workspace from sources. I don't know
if there is such thing as a build conflict stanza to put in
debian/control.

Thanks!

-- 
Ronoaldo Pereira
http://www.ronoaldo.net/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#766028: wine32 segfault

2014-12-22 Thread Jochen Kemnade
The behavior is somewhat different since the latest nvidia-driver update
(340.65-2) hit testing. The segfault is gone and replaced by:

Unhandled exception: page fault on write access to 0x7bf02fe8 in 32-bit
code (0x7df1a21a).
Register dump:
 CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
 EIP:7df1a21a ESP:0032ccb0 EBP:0014 EFLAGS:00010202(  R- --  I   - - - )
 EAX:7efe1d20 EBX:7bf02fe8 ECX:7efe1d20 EDX:
 ESI:7df93ab0 EDI:7bf008a8
Stack dump:
0x0032ccb0:  f772f930 7bf00b10 0158 f7517420
0x0032ccc0:  7c8daa98  f772f930 0012
0x0032ccd0:  0016 7c893f90 7bf00a88 7df1b45c
0x0032cce0:  7bf00b10 0014 7df939a0 7c893f90
0x0032ccf0:   0001 f772f930 00f6
0x0032cd00:  f772f504 fffe 7df175c0 0074
Backtrace:
=0 0x7df1a21a in libgl.so.1 (+0x9d21a) (0x0014)
  1 0x7df1b45c in libgl.so.1 (+0x9e45b) (0x7bf00a88)
  2 0x7df23d65 in libgl.so.1 (+0xa6d64) (0x7df20540)
  3 0x7defba55 in libgl.so.1 (+0x7ea54) (0x0002)
  4 0xf771d82a in ld-linux.so.2 (+0xe829) (0x0002)
  5 0xf771d964 in ld-linux.so.2 (+0xe963) (0x)
  6 0xf77219ae in ld-linux.so.2 (+0x129ad) (0x0032d028)
  7 0xf771d716 in ld-linux.so.2 (+0xe715) (0x0032d178)
  8 0xf77211a4 in ld-linux.so.2 (+0x121a3) (0x0032d178)
  9 0xf736bcbc GLIBC_2+0xcbb() in libdl.so.2 (0x0032d1c8)
  10 0xf771d716 in ld-linux.so.2 (+0xe715) (0x0032d2d8)
  11 0xf736c37c in libdl.so.2 (+0x137b) (0x0032d2d8)
  12 0xf736bd71 GLIBC_2+0xd70() in libdl.so.2 (0x0032d348)
  13 0xf755e99f wine_dlopen+0x2e() in libwine.so.1 (0x0032d348)
  14 0x7e63d6cf in winex11 (+0x2d6ce) (0x0032d548)
  15 0x7e641435 in winex11 (+0x31434) (0x0032d558)
  16 0x7e631700 in winex11 (+0x216ff) (0x0032d578)
  17 0x7ea62182 __wine_get_wgl_driver+0x51() in gdi32 (0x0032d5a8)
  18 0x7e1ff738 in wined3d (+0x4f737) (0x0032da48)
  19 0x7e20617f in wined3d (+0x5617e) (0x0032da68)
  20 0x7e28118a wined3d_create+0x59() in wined3d (0x0032daa8)
  21 0x7e388baf in d3d9 (+0x18bae) (0x0032dae8)
  22 0x7e37d9da Direct3DCreate9+0x59() in d3d9 (0x0032db18)
  23 0x7e3b9a7f in dxdiagn (+0x9a7e) (0x0032ea48)
  24 0x7e3baad1 in dxdiagn (+0xaad0) (0x0032ea58)
  25 0x7e3b96ad in dxdiagn (+0x96ac) (0x0032eaa8)
  26 0x7eff6f35 collect_dxdiag_information+0x84() in dxdiag (0x0032eb08)
  27 0x7eff72da wWinMain+0xe9() in dxdiag (0x0032fd68)
  28 0x7eff812c wmain+0xdb() in dxdiag (0x0032fe08)
  29 0x7eff8034 in dxdiag (+0x8033) (0x0032fe48)
  30 0x7b85a9bc call_process_entry+0xb() in kernel32 (0x0032fe68)
  31 0x7b85b9ca in kernel32 (+0x4b9c9) (0x0032fe98)
  32 0x7bc74810 call_thread_func_wrapper+0xb() in ntdll (0x0032feb8)
  33 0x7bc7762f call_thread_func+0xce() in ntdll (0x0032ffa8)
  34 0x7bc747ee RtlRaiseException+0x21() in ntdll (0x0032ffc8)
  35 0x7bc4acf7 call_dll_entry_point+0x776() in ntdll (0x0032ffe8)
  36 0xf75613ad wine_call_on_stack+0x1c() in libwine.so.1 (0x)
  37 0xf7561510 wine_switch_to_stack+0x1f() in libwine.so.1 (0xffb16638)
  38 0x7bc5020a LdrInitializeThunk+0x339() in ntdll (0xffb16698)
  39 0x7b861613 __wine_kernel_init+0x872() in kernel32 (0xffb177f8)
  40 0x7bc50783 __wine_process_init+0x162() in ntdll (0xffb17868)
  41 0xf755eff3 wine_init+0x2b2() in libwine.so.1 (0xffb178b8)
  42 0x7bf00d52 main+0x81() in wine-loader (0xffb17d08)
  43 0xf7389a63 __libc_start_main+0xf2() in libc.so.6 (0x)
0x7df1a21a: movl%eax,0x0(%ebx)
Modules:
Module  Address Debug info  Name (73 modules)
ELF 7926c000-7b80   Deferredlibnvidia-glcore.so.340.65
ELF 7b80-7ba55000   Dwarf   kernel32elf
  \-PE  7b81-7ba55000   \   kernel32
ELF 7bc0-7bcd7000   Dwarf   ntdllelf
  \-PE  7bc1-7bcd7000   \   ntdll
ELF 7bf0-7bf04000   Dwarf   wine-loader
ELF 7de7d000-7df94000   Dwarf   libgl.so.1
ELF 7df94000-7dfbb000   Deferreddxgielf
  \-PE  7dfa-7dfbb000   \   dxgi
ELF 7dfbb000-7dfd2000   Deferredlibresolv.so.2
ELF 7dff2000-7e017000   Deferrediphlpapielf
  \-PE  7e00-7e017000   \   iphlpapi
ELF 7e017000-7e089000   Deferredddrawelf
  \-PE  7e02-7e089000   \   ddraw
ELF 7e089000-7e1a5000   Deferredopengl32elf
  \-PE  7e0b-7e1a5000   \   opengl32
ELF 7e1a5000-7e2d5000   Dwarf   wined3delf
  \-PE  7e1b-7e2d5000   \   wined3d
ELF 7e337000-7e369000   Deferredwbemproxelf
  \-PE  7e34-7e369000   \   wbemprox
ELF 7e369000-7e3a6000   Dwarf   d3d9elf
  \-PE  7e37-7e3a6000   \   d3d9
ELF 7e3a6000-7e3cc000   Dwarf   dxdiagnelf
  \-PE  7e3b-7e3cc000   \   dxdiagn
ELF 7e3cc000-7e3f   Deferredimm32elf
  \-PE  7e3d-7e3f   \   imm32
ELF 7e436000-7e43d000   Deferred

Bug#773711: installation-report: successful install of wheezy - minor suggestion and problems

2014-12-22 Thread Antos Andras

Package: installation-reports
Version: 2.49
Severity: minor
Tags: d-i

-- Package-specific info:

Boot method: USB stick
Image version: 
http://cdimage.debian.org/debian-cd/7.1.0/amd64/iso-cd/debian-7.1.0-amd64-netinst.iso
 (or 7.0, or similar) 
Date: Aug 20, 2013


Machine: Dell Inspiron 3521-5932 laptop
Partitions:
Filesystem Type 1K-blocks  
Used Available Use% Mounted on
rootfs rootfs 4482128   
3923516307888  93% /
udev   devtmpfs 10240   
  0 10240   0% /dev
tmpfs  tmpfs   599940   
704599236   1% /run
/dev/disk/by-uuid/bd995a5a-0045-439b-8fdc-3da541597b91 ext4   4482128   
3923516307888  93% /
tmpfs  tmpfs 5120   
  0  5120   0% /run/lock
tmpfs  tmpfs  1590220   
 80   1590140   1% /run/shm
/dev/sda7  ext4 449888976 
177566100 249446716  42% /home
/dev/sda8  ext4   9770628 
22092   9229164   1% /home2
/dev/sda3  ext4  10729244   
3300472   6860632  33% /ubuntu

Disk /dev/sda: 500.1 GB, 500107862016 bytes
255 heads, 63 sectors/track, 60801 cylinders, total 976773168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk identifier: 0x33a1de46

   Device Boot  Start End  Blocks   Id  System
/dev/sda12048  616447  307200   de  Dell Utility
/dev/sda2  616448 6907903 3145728c  W95 FAT32 (LBA)
/dev/sda3   * 69079042897821611035156+  83  Linux
/dev/sda428979198   976771071   4738959375  Extended
Partition 4 does not start on physical sector boundary.
/dev/sda54909875258472447 4686848   83  Linux
/dev/sda65847449662377983 1951744   82  Linux swap / Solaris
/dev/sda762380032   976771071   457195520   83  Linux
/dev/sda8289792004909875110059776   83  Linux

Partition table entries are not in disk order

Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:   [O]
Detect network card:[O]
Configure network:  [O]
Detect CD:  [O]
Load installer modules: [O]
Clock/timezone setup:   [O]
User/password setup:[O]
Detect hard drives: [O]
Partition hard drives:  [O]
Install base system:[O]
Install tasks:  [O]
Install boot loader:[O]
Overall install:[O]

Comments/Problems:

After selecting the tasks to install, I suggest to have some possibility 
to further refine the list of packages before actual install.


# cfdisk /dev/sda
gives
 FATAL ERROR: Bad logical partition 8: enlarged logical partitions overlap
Press any key to exit cfdisk

Connenting a certain printer on USB causes writing infinite many error 
logs filling the root partition.


--

Please make sure that the hardware-summary log file, and any other
installation logs that you think would be useful are attached to this
report. Please compress large files using gzip.

Once you have filled out this report, mail it to sub...@bugs.debian.org.

==
Installer lsb-release:
==
DISTRIB_ID=Debian
DISTRIB_DESCRIPTION=Debian GNU/Linux installer
DISTRIB_RELEASE=7.0 (wheezy) - installer build 20120930+b1
X_INSTALLATION_MEDIUM=netboot

==
Installer hardware-summary:
==
uname -a: Linux excalibur 3.16.0-0.bpo.4-amd64 #1 SMP Debian 
3.16.7-ckt2-1~bpo70+1 (2014-12-08) x86_64 GNU/Linux
lspci -knn: 00:00.0 Host bridge [0600]: Intel Corporation 3rd Gen Core 
processor DRAM Controller [8086:0154] (rev 09)
lspci -knn: Subsystem: Dell Device [1028:0597]
lspci -knn: Kernel driver in use: ivb_uncore
lspci -knn: 00:02.0 VGA compatible controller [0300]: Intel Corporation 3rd Gen 
Core processor Graphics Controller [8086:0166] (rev 09)
lspci -knn: Subsystem: Dell Device [1028:0597]
lspci -knn: Kernel driver in use: i915
lspci -knn: 00:14.0 USB controller [0c03]: Intel Corporation 7 Series/C210 
Series Chipset Family USB xHCI Host Controller [8086:1e31] (rev 04)
lspci -knn: Subsystem: Dell Device [1028:0597]
lspci -knn: Kernel driver in use: xhci_hcd
lspci -knn: 00:16.0 Communication controller [0780]: Intel Corporation 7 
Series/C210 Series Chipset Family MEI Controller #1 [8086:1e3a] (rev 04)
lspci -knn: Subsystem: Dell Device [1028:0597]
lspci -knn: Kernel driver in use: mei_me
lspci -knn: 00:1a.0 USB controller 

Bug#773319: pre-approval: unblock: sudo/1.8.10p3-1.1; possibly sudo/1.8.11p2-1.1?

2014-12-22 Thread Christian Kastner
Hi,

On 2014-12-16 22:02, Christian Kastner wrote:
 If allowing 1.8.11p2 to migrate is something you'd consider discussing,
 please let me know how I can help in your deliberations. If this change
 is simply too big, please let me know if you are OK with the t-p-u
 upload of the attached debdiff for 1.8.10p3, and I will then contact the
 maintainer / look for NMU sponsorship.

quick followup: 1.8.11p2-1.1 has been uploaded to unstable, including
(only) the fix found in the above-mentioned debdiff.

If unblocking 1.8.11p2-1.1 is a no-go, the sponsor of the aforementioned
upload said he would be available for a 1.8.10p3-1.1 upload (that's the
debdiff I posted here) to t-p-u.

Regards,
Christian77


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773673: Re[2]: Bug#773673: reportbug: I cannot change window size when nano is running inside reportbug

2014-12-22 Thread Askar Safin
 do you experience the same behavior when running nano by itself (i.e.
 not spawn by reportbug) in konsole?
No

Bug#772790: [pkg-ntp-maintainers] Bug#772790: ntp: cron job tries to delete .nfs files

2014-12-22 Thread Paul Wise
On Thu, 2014-12-11 at 10:55 +0100, Kurt Roeckx wrote:

 I assume that one of the log files that's still open but removed?
 It sounds like some kind of race condition?

I expect what happens is that the cron job is deleting log files that
the ntp server hasn't yet released, which creates the .nfs files and
then the next cron job trips over them. However, reading the comments,
ntp should be rotating to new ones daily so hmm. 

The error hasn't recurred since I fixed it on 2014-12-10 though, so I'm
not sure what to make of that either.

Anyway, I don't think that the cron job should clean up files in that
dir that weren't created by ntp itself.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



signature.asc
Description: This is a digitally signed message part


Bug#773431: Wrapper already exists

2014-12-22 Thread Matt Kraai
Hi,

mate-terminal already contains a mate-terminal.wrapper program that
provides the options required for x-terminal-emulator, but
update-alternatives is called with mate-terminal instead of
mate-terminal.wrapper.

I think it's just necessary to use update-alternatives in the
maintainer scripts to remove the mate-terminal alternative and add a
mate-terminal.wrapper one, but I'm not sure how to do so.

-- 
Matt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773319: pre-approval: unblock: sudo/1.8.10p3-1.1; possibly sudo/1.8.11p2-1.1?

2014-12-22 Thread Christian Kastner
On 2014-12-22 15:15, Christian Kastner wrote:
 On 2014-12-16 22:02, Christian Kastner wrote:
 If allowing 1.8.11p2 to migrate is something you'd consider discussing,
 please let me know how I can help in your deliberations. If this change
 is simply too big, please let me know if you are OK with the t-p-u
 upload of the attached debdiff for 1.8.10p3, and I will then contact the
 maintainer / look for NMU sponsorship.
 
 quick followup: 1.8.11p2-1.1 has been uploaded to unstable, including
 (only) the fix found in the above-mentioned debdiff.

...adapted to 1.8.11p2-1.1, of course.

The debdiff I initially attached, and keep referring to, is against the
version in testing.

Sorry for the confusion.

 If unblocking 1.8.11p2-1.1 is a no-go, the sponsor of the aforementioned
 upload said he would be available for a 1.8.10p3-1.1 upload (that's the
 debdiff I posted here) to t-p-u.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#741573: Two menu systems

2014-12-22 Thread Ian Jackson
Keith Packard writes (Bug#741573: Two menu systems):
 Yeah, there are a lot of inappropriate entries in my /usr/share/menu
 directory. Can we fix policy to weed these out? The current
 wording in §9.6:
 
   All packages that provide applications that need not be passed any
   special command line arguments for normal operations should
   register a menu entry for those applications.
 
 seems problematic to me -- it seems to require menu entries for things
 as diverse as a web browser and a python interpreter. Coming up with
 wording that encourages only programs which are conventionally used in
 interactive mode to be included seems like a good fix here.

I think this is the heart of the disagreement.

The traditional Debian menu system (mostly done by Bill Alombert) has
been providing menu entries for bc and dc and everything for years.
That is what its users expect.  It is what users like Matthew Vernon
want:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741573#20

What you are suggesting above is that the Debian menu will simply be
abolished.  No-one will be allowed[1] to provide a comprehensive menu
in Debian.

The present dispute has arisen because, although the traditional
Debian menu maintainers do almost all of the work of providing all the
needed patches to enable packages to provide menu entries, some
package maintainers have decided to block that work by refusing the
patches.

It does appear that the users and developers of the .desktop-style
menus are in a majority.  But there are users who want to use the
comprehensive traditional Debian menu, and there are developers who
want to continue to do the work to keep it up to date.

We don't allow maintainers to block translation updates; we don't
expect them to block the provision of manpages (even though some
people think manpages are obsoluete); we shouldn't allow them to block
the trad menu system updates.

And we should certainly not tolerate this deliberate dismantling of a
working and maintained system, simply because some of its opponents
consider it obsolete.  A facility should be declared obsolete when it
no longer has maintainers who can (or want to) keep it working.

At the very least if we declare the trad menu system protocol
obsolete, there should be a clear plan for how to provide _the same
menus_ via .desktop files.  That *doesn't* mean `the menus that the
.desktop file proponents think everyone should want'.  It means `the
menus that the trad menu system users and developers currently have,
and actually want to keep'.

Ian.

[1]

I say `no-one will be allowed' because in the absence of support
from policy, attempts by menu developers to provide entries for
non-desktop programs, will be thwarted by the individual package
maintainers.

If I may extend the transation analogy: if we were to remove the
material about translations from Debian's normative documents, and
declare translations obsolete (in favour of English, I suppose),
no-one would be allowed to make a comperehensive translation of
Debian.  That is because there would be some maintainers who would
simply refuse to take translations on the grounds that translations
are obsolete and it's not worth the small effort to integrate
translation patches.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773712: unblock: jenkins-job-builder/0.9.0-0.1

2014-12-22 Thread Michael Prokop
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

The version of jenkins-job-builder as available in current jessie is
totally broken with regards to its feature to delete Jenkins jobs.
There's a fix available from upstream which I included in
version 0.9.0-0.2. I've also verified that the fix works as needed.

Please unblock package jenkins-job-builder:

  unblock jenkins-job-builder/0.9.0-0.2

Debdiff of the package versions as in jessie vs. what I just
uploaded to Debian/unstable (not yet accepted there
though/disclaimer):

diff -Nru jenkins-job-builder-0.9.0/debian/changelog 
jenkins-job-builder-0.9.0/debian/changelog
--- jenkins-job-builder-0.9.0/debian/changelog  2014-10-08 08:54:37.0 
+0200
+++ jenkins-job-builder-0.9.0/debian/changelog  2014-12-22 14:42:20.0 
+0100
@@ -1,3 +1,10 @@
+jenkins-job-builder (0.9.0-0.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix deletion of jobs. (Closes: #773642)
+
+ -- Michael Prokop m...@debian.org  Mon, 22 Dec 2014 13:42:13 +0100
+
 jenkins-job-builder (0.9.0-0.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru 
jenkins-job-builder-0.9.0/debian/patches/0006-fix-delete-job-command-and-add-tests.patch
 
jenkins-job-builder-0.9.0/debian/patches/0006-fix-delete-job-command-and-add-tests.patch
--- 
jenkins-job-builder-0.9.0/debian/patches/0006-fix-delete-job-command-and-add-tests.patch
1970-01-01 01:00:00.0 +0100
+++ 
jenkins-job-builder-0.9.0/debian/patches/0006-fix-delete-job-command-and-add-tests.patch
2014-12-22 13:41:19.0 +0100
@@ -0,0 +1,80 @@
+From b7ff37ca5dfa1e7387c636b8b0108404a0bf Mon Sep 17 00:00:00 2001
+From: Khai Do zaro0...@gmail.com
+Date: Thu, 9 Oct 2014 15:08:18 -0700
+Subject: [PATCH] fix delete job command and add tests
+
+change I126751e3 introduced recursive file definition feature however it broke
+the ability to delete jobs.  This changes fixes it and adds a few tests for it.
+
+This was the error when trying to delete a job:
+
+(py27)~/jenkins-job-builder$ jenkins-jobs --conf jenkins_jobs.ini delete myjob
+INFO:root:Deleting jobs in [myjob]
+Traceback (most recent call last):
+  File /jenkins-job-builder/.tox/py27/bin/jenkins-jobs, line 10, in module
+sys.exit(main())
+  File /jenkins-job-builder/jenkins_jobs/cmd.py, line 122, in main
+execute(options, config)
+  File /jenkins-job-builder/jenkins_jobs/cmd.py, line 207, in execute
+builder.delete_job(job, options.path)
+  File /jenkins-job-builder/jenkins_jobs/builder.py, line 611, in delete_job
+self.load_files(fn)
+  File /jenkins-job-builder/jenkins_jobs/builder.py, line 576, in load_files
+if os.path.isdir(path):
+  File /jenkins-job-builder/.tox/py27/lib/python2.7/genericpath.py, line 41,
+in isdir st = os.stat(s)
+TypeError: coercing to Unicode: need string or buffer, NoneType found
+
+Closes-Bug: #1349634
+Change-Id: Ib87fa497d80ba33470c049f875658a3878afb664
+---
+ jenkins_jobs/cmd.py   |  2 +-
+ tests/cmd/test_cmd.py | 22 ++
+ 2 files changed, 23 insertions(+), 1 deletion(-)
+
+diff --git a/jenkins_jobs/cmd.py b/jenkins_jobs/cmd.py
+index 224ee49..3d9a62a 100755
+--- a/jenkins_jobs/cmd.py
 b/jenkins_jobs/cmd.py
+@@ -193,7 +193,7 @@ def execute(options, config):
+   ignore_cache=ignore_cache,
+   flush_cache=options.flush_cache)
+ 
+-if hasattr(options, 'path'):
++if getattr(options, 'path', None):
+ if options.path == sys.stdin:
+ logger.debug(Input file is stdin)
+ if options.path.isatty():
+diff --git a/tests/cmd/test_cmd.py b/tests/cmd/test_cmd.py
+index 792b5f3..61bdc6c 100644
+--- a/tests/cmd/test_cmd.py
 b/tests/cmd/test_cmd.py
+@@ -208,3 +208,25 @@ class CmdTests(testtools.TestCase):
+ cmd.execute(args, config)   # probably better to fail here
+ 
+ update_job_mock.assert_called_with(paths, [], output=args.output_dir)
++
++@mock.patch('jenkins_jobs.cmd.Builder.delete_job')
++def test_delete_single_job(self, delete_job_mock):
++
++Test handling the deletion of a single Jenkins job.
++
++
++args = self.parser.parse_args(['delete', 'test_job'])
++config = configparser.ConfigParser()
++config.readfp(StringIO(cmd.DEFAULT_CONF))
++cmd.execute(args, config)  # passes if executed without error
++
++@mock.patch('jenkins_jobs.cmd.Builder.delete_job')
++def test_delete_multiple_jobs(self, delete_job_mock):
++
++Test handling the deletion of multiple Jenkins jobs.
++
++
++args = self.parser.parse_args(['delete', 'test_job1', 'test_job2'])
++config = configparser.ConfigParser()
++config.readfp(StringIO(cmd.DEFAULT_CONF))
++cmd.execute(args, config)  # passes if executed without error
+-- 
+2.1.3
+
diff -Nru jenkins-job-builder-0.9.0/debian/patches/series 

Bug#773686: lintian falsely considers qt5-default a metapackage

2014-12-22 Thread Bastien ROUCARIES
Le 22 déc. 2014 07:51, Niels Thykier ni...@thykier.net a écrit :

 Control: tags -1 moreinfo

 On 2014-12-22 03:46, Craig Small wrote:
  Package: lintian
  Version: 2.5.30+deb8u3
  Severity: normal
 
  When trying to build a package using qt5, lintian complained
  E: build-depends-on-metapackage qt5-default
 
  The problem is that qt5-default is NOT a metapackage and
  packages that do not depend on this package will fail to
  build in systems such as pbuilder.
 
  The error you get without it is:
  qmake: could not find a Qt installation of ''
 
  Leaving aside the awesomeness of that error message, it basically
  means qmake isn't sure what version of qt it should be. The
  package qt5-default removes qmake's confusion.
 
  It tested this by trying to build my package in a  pbuilder, it
  failed. I then logged into the pbuilder and installed qt5-default.
  qmake was then able to work.
 
  I'll put a lintian override in the meantime.
 
  [...]

 Hi,

 The error message from qmake and lintian indeed leaves much to be
 wanted.  However, the correct solution is to:

 
 qt5-default

 Instead of Build-Depending on qt5-default, replace it with qtbase5-dev.

 You need to export QT_SELECT=qt5 in debian/rules.

 If you build it manually and if your build system is qmake, please
 invoke qmake with the -qt5 first argument. If you use CMake, it should
 be picked up without further changes.
 
 (source: https://wiki.debian.org/Lintian/Tags/depends-on-metapackage)

Next lintian version will redirect to this wiki page (another bug report)

Feel free to close or merge.

 ~Niels



Bug#773713: broadcom-sta: Please support kernel 3.18

2014-12-22 Thread Eduard Bloch
Source: broadcom-sta
Version: 6.30.223.248-3
Severity: wishlist
Tags: patch

Hello Cyril,

I added the Gentoo patch for kernel 3.18 and fixed m-a support. I also
added versions to Breaks/Replaces because that didn't make sense IMHO,
the current versions can coexist. See attachment.

Regards,
Eduard.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18.1+ (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
diff -Nurd broadcom-sta-6.30.223.248_debian/debian/changelog broadcom-sta-6.30.223.248/debian/changelog
--- broadcom-sta-6.30.223.248_debian/debian/changelog	2014-12-07 15:07:56.0 +0100
+++ broadcom-sta-6.30.223.248/debian/changelog	2014-12-22 15:08:37.914183038 +0100
@@ -1,3 +1,13 @@
+broadcom-sta (6.30.223.248-3.1) experimental; urgency=low
+
+  * Non-maintainer upload.
+  * Added patch for kernel 3.18 support (from Gentoo, with little
+modifications)
+  * Set some variables right for kernel-package/module-assistant usage, 
+to build correctly against headers without instaling the kernel first
+
+ -- Eduard Bloch ed@idefix  Mon, 22 Dec 2014 14:59:25 +0100
+
 broadcom-sta (6.30.223.248-3) unstable; urgency=medium
 
   * Synced supported chipsets list with README.txt file (Closes: #762954).
diff -Nurd broadcom-sta-6.30.223.248_debian/debian/control broadcom-sta-6.30.223.248/debian/control
--- broadcom-sta-6.30.223.248_debian/debian/control	2014-10-28 08:15:47.0 +0100
+++ broadcom-sta-6.30.223.248/debian/control	2014-12-22 15:34:42.480182036 +0100
@@ -22,8 +22,8 @@
 Architecture: all
 Depends: ${misc:Depends}
 Recommends: wireless-tools
-Breaks: broadcom-sta-common, broadcom-sta-modules ( 5.100.82.112-6~), broadcom-sta-source
-Replaces: broadcom-sta-common, broadcom-sta-modules ( 5.100.82.112-6~), broadcom-sta-source
+Breaks: broadcom-sta-common ( 6.30.223.248-1), broadcom-sta-modules ( 5.100.82.112-6~), broadcom-sta-source ( 6.30.223.248-1)
+Replaces: broadcom-sta-common ( 6.30.223.248-1), broadcom-sta-modules ( 5.100.82.112-6~), broadcom-sta-source ( 6.30.223.248-1)
 Provides: broadcom-sta-modules
 Description: dkms source for the Broadcom STA Wireless driver
  Broadcom STA is a binary-only device driver to support the following IEEE
diff -Nurd broadcom-sta-6.30.223.248_debian/debian/patches/10-broadcom-sta-6.30.223.248-linux-3.18.patch broadcom-sta-6.30.223.248/debian/patches/10-broadcom-sta-6.30.223.248-linux-3.18.patch
--- broadcom-sta-6.30.223.248_debian/debian/patches/10-broadcom-sta-6.30.223.248-linux-3.18.patch	1970-01-01 01:00:00.0 +0100
+++ broadcom-sta-6.30.223.248/debian/patches/10-broadcom-sta-6.30.223.248-linux-3.18.patch	2014-12-22 15:06:58.698183381 +0100
@@ -0,0 +1,30 @@
+From 5aae9ccfda6dfc680403b4a5ff9a36dcd5331dfd Mon Sep 17 00:00:00 2001
+From: Michael Marineau m...@marineau.org
+Date: Tue, 11 Nov 2014 15:17:46 -0800
+Subject: [PATCH] linux 3.18
+
+http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5bc8c1f2b070bab82ed738f98ecfac725e33c57f
+---
+ src/wl/sys/wl_cfg80211_hybrid.c | 6 +-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+diff --git a/src/wl/sys/wl_cfg80211_hybrid.c b/src/wl/sys/wl_cfg80211_hybrid.c
+index 514a892..e3ebef2 100644
+--- a/amd64/src/wl/sys/wl_cfg80211_hybrid.c
 b/amd64/src/wl/sys/wl_cfg80211_hybrid.c
+@@ -2010,7 +2010,11 @@ static s32 wl_inform_single_bss(struct wl_cfg80211_priv *wl, struct wl_bss_info
+ 
+ 	notify_ie = (u8 *)bi + le16_to_cpu(bi-ie_offset);
+ 	notify_ielen = le32_to_cpu(bi-ie_length);
+-	cbss = cfg80211_inform_bss(wiphy, channel, (const u8 *)(bi-BSSID.octet),
++	cbss = cfg80211_inform_bss(wiphy, channel,
++#if LINUX_VERSION_CODE = KERNEL_VERSION(3, 18, 0)
++		CFG80211_BSS_FTYPE_UNKNOWN,
++#endif
++		(const u8 *)(bi-BSSID.octet),
+ 		0, beacon_proberesp-capab_info, beacon_proberesp-beacon_int,
+ 		(const u8 *)notify_ie, notify_ielen, signal, GFP_KERNEL);
+ 
+-- 
+2.0.4
+
diff -Nurd broadcom-sta-6.30.223.248_debian/debian/patches/series broadcom-sta-6.30.223.248/debian/patches/series
--- broadcom-sta-6.30.223.248_debian/debian/patches/series	2014-12-07 14:18:59.0 +0100
+++ broadcom-sta-6.30.223.248/debian/patches/series	2014-12-22 15:00:40.434184690 +0100
@@ -8,3 +8,5 @@
 07-fix_procfs_handling.patch
 08-enable_error_traces.patch
 09-fix_system_hang_when_deleting_monitor.patch
+10-broadcom-sta-6.30.223.248-linux-3.18.patch
+
diff -Nurd broadcom-sta-6.30.223.248_debian/debian/rules.modules broadcom-sta-6.30.223.248/debian/rules.modules
--- broadcom-sta-6.30.223.248_debian/debian/rules.modules	2014-10-20 17:50:25.0 +0200
+++ broadcom-sta-6.30.223.248/debian/rules.modules	2014-12-22 15:16:26.274181417 +0100
@@ -8,7 +8,7 @@
 
 kdist_clean: prep-deb-files
 	dh_clean
-	$(MAKE) clean 

Bug#773714: unblock: grub2/2.02~beta2-19

2014-12-22 Thread Ian Campbell
Package: release.debian.org
Severity: normal
Tags: d-i
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package grub2

Version -18 added a fix for #767037 (workaround for buggy EFI implementations)
which included a new debconf template. -19 adds translations for the new
template (including a wording fix to the English) and fixes two issues with
that new funcitionality (one, #773092, is important, the other, #773004, is
fairly minor but quite irritating in practice).

I also added a README.source.

Note that this upload does not include the upstream translation updates
discussed in preapproval bug #773224, since there wasn't an obvious yes to that
question.

I've filtered the actual debian/po templates from the debdiff below
(filterdiff -p1 -x debian/po/\*).

diff -Nru grub2-2.02~beta2/debian/changelog grub2-2.02~beta2/debian/changelog
--- grub2-2.02~beta2/debian/changelog   2014-12-08 08:38:41.0 +
+++ grub2-2.02~beta2/debian/changelog   2014-12-22 11:55:53.0 +
@@ -1,3 +1,45 @@
+grub2 (2.02~beta2-19) unstable; urgency=medium
+
+  [ Steve McIntyre ]
+  * Handle case insensitivity of VFAT filesystem on /boot/EFI when installing
+extra cpoy of grub-efi to the removable media path
+/boot/efi/EFI/BOOT/BOOT$ARCH.EFI (Closes: #773092)
+  * Make the force_efi_extra_removable debconf prompt only show up when
+configuring grub-*efi*. Closes: #773004
+
+  [ Ian Campbell ]
+  * Improvements to English wording of new debconf template from Justin B Rye.
+  * Add debian/README.source.
+
+  [ Debconf translations ]
+  * [eu] Basque (Iñaki Larrañaga Murgoitio, Closes: #772946)
+  * [be] Belarusian (Viktar Siarheichyk, Closes: #773054)
+  * [pt_BR] Brazilian Portuguese (Adriano Rafael Gomes, Closes: #773682)
+  * [bg] Bulgarian (Damyan Ivanov, Closes: #772878)
+  * [cs] Czech (Miroslav Kure, Closes: #772924)
+  * [nl] Dutch (Frans Spiesschaert, Closes: 773637)
+  * [eo] Esperanto (Felipe Castro, Closes: #773096)
+  * [fi] Finish (Timo Jyrinki, Closes: #772921)
+  * [fr] French (Christian PERRIER, Closes: #772771)
+  * [de] German (Martin Eberhard Schauer, Closes: #773664)
+  * [el] Greek (Panagiotis Georgakopoulos, Closes: #773068)
+  * [he] Hebrew (Omer Zak, Closes: #773377)
+  * [is] Icelandic (Sveinn í Felli, Closes: #772922)
+  * [it] Italian (Luca Monducci, Closes: #773553)
+  * [kk] Kazakh (Baurzhan Muftakhidinov, Closes: #772916)
+  * [lt] Lithuanian (Rimas Kudelis, Closes: #773060)
+  * [pl] Polish (Łukasz Dulny, Closes: #772930)
+  * [ro] Romanian (Andrei POPESCU, Closes: #773349)
+  * [ru] Russian (Yuri Kozlov, Closes: #773211)
+  * [sl] Slovenian (Vanja Cvelbar, Closes: #773508)
+  * [es] Spanish (Manuel Venturi Porras Peralta, Closes: #773222)
+  * [sv] Swedish (Martin Bagge  Anders Jonsson, Closes: 773208)
+  * [th] Thai (Theppitak Karoonboonyanan, Closes: #773160)
+  * [zh_TW] Traditional Chinese (Vincent W. Chen, Closes: #773418)
+  * [tr] Turkish (Mert Dirik, Closes: #773666)
+
+ -- Ian Campbell i...@debian.org  Mon, 22 Dec 2014 11:55:33 +
+
 grub2 (2.02~beta2-18) unstable; urgency=medium
 
   [ Steve McIntyre ]
diff -Nru grub2-2.02~beta2/debian/config.in grub2-2.02~beta2/debian/config.in
--- grub2-2.02~beta2/debian/config.in   2014-12-07 16:41:50.0 +
+++ grub2-2.02~beta2/debian/config.in   2014-12-22 11:55:53.0 +
@@ -73,5 +73,9 @@
 
 db_input ${priority} grub2/linux_cmdline || true
 db_input medium grub2/linux_cmdline_default || true
-db_input low grub2/force_efi_extra_removable || true
+case @PACKAGE@ in
+  grub-*efi*)
+db_input low grub2/force_efi_extra_removable || true
+  ;;
+esac
 db_go
diff -Nru grub2-2.02~beta2/debian/.git-dpm grub2-2.02~beta2/debian/.git-dpm
--- grub2-2.02~beta2/debian/.git-dpm2014-12-08 08:38:08.0 +
+++ grub2-2.02~beta2/debian/.git-dpm2014-12-22 11:55:53.0 +
@@ -1,6 +1,6 @@
 # see git-dpm(1) from git-dpm package
-dfcbcb60e5428bcb87ba96011c7b7ab1b7891fa1
-dfcbcb60e5428bcb87ba96011c7b7ab1b7891fa1
+617a691e4a95e67967ca8b0c77c59d347df182d6
+617a691e4a95e67967ca8b0c77c59d347df182d6
 e8f07821cce1bd0ab6d5622c2a42440f15f4fd71
 e8f07821cce1bd0ab6d5622c2a42440f15f4fd71
 grub2_2.02~beta2.orig.tar.xz
diff -Nru grub2-2.02~beta2/debian/patches/grub-install-extra-removable.patch 
grub2-2.02~beta2/debian/patches/grub-install-extra-removable.patch
--- grub2-2.02~beta2/debian/patches/grub-install-extra-removable.patch  
2014-12-08 08:38:08.0 +
+++ grub2-2.02~beta2/debian/patches/grub-install-extra-removable.patch  
2014-12-22 11:55:53.0 +
@@ -1,4 +1,4 @@
-From dfcbcb60e5428bcb87ba96011c7b7ab1b7891fa1 Mon Sep 17 00:00:00 2001
+From 617a691e4a95e67967ca8b0c77c59d347df182d6 Mon Sep 17 00:00:00 2001
 From: Steve McIntyre 93...@debian.org
 Date: Wed, 3 Dec 2014 01:25:12 +
 Subject: Add support for forcing EFI installation to the removable media path
@@ -12,17 +12,17 @@
 
 Signed-off-by: Steve McIntyre 93...@debian.org
 
-Bug-Debian: 

Bug#771199: Ping

2014-12-22 Thread Rodrigo Campos
On Fri, Dec 12, 2014 at 12:21:54PM -0300, Rodrigo Campos wrote:
 On Fri, Dec 12, 2014 at 03:42:26PM +0100, Stefan Fritsch wrote:
  tags 771199 wheezy
  thanks
  
  On Friday 12 December 2014 11:29:49, Rodrigo Campos wrote:
   On Thu, Dec 04, 2014 at 10:01:51PM +, Rodrigo Campos wrote:
Ping ? :)
   
   Re-ping ?
  
  This is a fix that we can and should include in wheezy. However I 
  don't know when the next stable point release is planned. If it is 
  soon, I am not 100% sure that I will have time to upload the fix in 
  time. So maybe you will have to wait for the point release after that.
 
 Can't this be uploaded to wheezy/updates, in time or not for the next stable
 point release ?
 
 I mean, this way I can install the update anyways now, and I don't really care
 in which stable point release is included :-)

Sorry to bother again, but any news on this front ?





Thanks,
Rodrigo


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773715: aptitude: let's configure you to install untrusted packages, but always becomes interactive with no default answer otherwise

2014-12-22 Thread Axel Beckert
Package: aptitude
Version: 0.6.11-1
Severity: important
Affects: aptitude-robot

Citing from src/cmdline/cmdline_prompt.cc:

524   if(!untrusted.empty())
525 {
526   printf(_(WARNING: untrusted versions of the following packages 
will be installed!\n\n
527Untrusted packages could compromise your system's 
security.\n
528You should only proceed with the installation if you 
are certain that\n
529this is what you want to do.\n\n));
530 
531   cmdline_show_pkglist(untrusted, term_metrics);
532 
533   printf(\n);
534 
535 
536   if(aptcfg-FindB(PACKAGE ::CmdLine::Ignore-Trust-Violations, 
false))
537 {
538   printf(_(*** WARNING ***   Ignoring these trust violations 
because\n
539  
%s::CmdLine::Ignore-Trust-Violations is 'true'!\n),
540  PACKAGE);
541   return true;
542 }
543 
544   if(aptcfg-FindB(Apt::Get::AllowUnauthenticated, false))
545 {
546   printf(%s,
547  _(*** WARNING ***   Ignoring these trust violations 
because\n
548  Apt::Get::AllowUnauthenticated is 
'true'!\n));
549   return true;
550 }
[…]
573   while(1)
574 {
575   printf(_(Do you want to ignore this warning and proceed 
anyway?\n));
576   printf(_(To continue, enter \%s\; to abort, enter \%s\: 
), okstr.c_str(), abortstr.c_str());
577   char buf[1024];
578   cin.getline(buf, 1023);
579   buf[1023]='\0';
580 
581   if(cin.eof())
582 throw StdinEOFException();
583 
584 
585   const bool is_ok = strncasecmp(okstr.c_str(), 
buf, okstr.size()) == 0;
586   const bool is_fallback_ok =
strncasecmp(fallback_okstr.c_str(), buf, fallback_okstr.size()) == 0;
587   const bool is_abort =  strncasecmp(abortstr.c_str(), 
buf, abortstr.size()) == 0;
588   const bool is_fallback_abort = 
strncasecmp(fallback_abortstr.c_str(), buf, fallback_abortstr.size()) == 0;
589 
590   const bool rval = is_ok || (is_fallback_ok  !is_abort);
591 
592   if(!is_ok  !is_abort  !is_fallback_ok  
!is_fallback_abort)
593 printf(_(Unrecognized input.  Enter either \%s\ or 
\%s\.\n), okstr.c_str(), abortstr.c_str());
594   else
595 return rval;
596 }
597 }

Lines 536 and 544 check for configuration settings allowing untrusted
packages to be installed anyways, but there's no way to preconfigure
that you want packages to be _not_ installed in such a case.

Which leads to the fact that aptitude _always_ requires input in the
case that you got untrusted packages (e.g. in case of an BADSIG error)
and want them to be skipped.

There's not even a default answer upon pressing enter as it's the case
with AFAIK all interactive dpkg and apt-get question, i.e. using yes ''
| aptitude to get a sane default (as aptitude-robot does) isn't
possible and currently leads to aptitude filling the logs quickly with
the following lines:

 WARNING: untrusted versions of the following packages will be installed!

 Untrusted packages could compromise your system's security.
 You should only proceed with the installation if you are certain that
 this is what you want to do.

   package list

 Do you want to ignore this warning and proceed anyway?
 To continue, enter Yes; to abort, enter No: Unrecognized input.  Enter 
 either Yes or No.
 Do you want to ignore this warning and proceed anyway?
 To continue, enter Yes; to abort, enter No: Unrecognized input.  Enter 
 either Yes or No.
 Do you want to ignore this warning and proceed anyway?
 To continue, enter Yes; to abort, enter No: Unrecognized input.  Enter 
 either Yes or No.
 […]

And no, using yes 'No' | aptitude is no option since No is not
always the default answer.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (110, 'experimental'), (109, 
'buildd-unstable'), (109, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.18.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common   0.6.11-1
ii  libapt-pkg4.121.0.9.4
ii  libboost-iostreams1.55.0  1.55.0+dfsg-3
ii  libc6 2.19-13
ii  libcwidget3   0.5.17-2
ii  libgcc1   1:4.9.2-9
ii  libncursesw5  5.9+20140913-1+b1
ii  libsigc++-2.0-0c2a2.4.0-1
ii  libsqlite3-0  3.8.7.2-1
ii  libstdc++64.9.2-9
ii  libtinfo5 

Bug#773656: R: Bug#773656: ITP: daps -- DocBook Authoring and Publishing Suite

2014-12-22 Thread Gianfranco Costamagna


Hi Raphael,


--
Il lun 22 dic 2014 14:05 CET, Sascha Manns ha scritto:

Hello Raphael,

Am 22.12.2014 13:50, schrieb Raphael Hertzog:
 Hello,
 
 On Mon, 22 Dec 2014, Andrei POPESCU wrote:
 On Du, 21 dec 14, 17:35:39, Sascha Manns wrote:
  Package: daps
  Severity: wishlist
 
  URL: http://daps.sourceforge.net/
  SVN: http://sourceforge.net/p/daps/svn/HEAD/tree/
 
 The bug is title ITP. Does that mean that you want to package this
 software? If you want someone else to package it, then it should be a RFP
 (Request for Package).
Yes i want to package it by myself. I also have prepared the stuff for Debian.

 In any case, I wanted to point out that Debian already contains publican
 which is RedHat's version of a similar tool. It also supports translation
 with PO files. I'm its Debian maintainer.


is this package a duplicate then?

I'm trying to mentor Sascha into the debian guidelines, if you think the 
package is not useful please let me know, I just told him that using the 
package in debian might be useful for the community, but if a similar tool 
makes daps useless we can think about not packaging it at all

(Sascha, do you have an opinion about the topic? Debian tends to avoid 
duplicated effort of similar tools :-) )

cheers,

Gianfranco
Oh it's a cool tool. Maybe we can make daps available too. :-)

-- Yours sincerly

Sascha Manns

-- To unsubscribe, send mail to 773656-unsubscr...@bugs.debian.org.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773224: (preapproval) unblock: grub2/2.02~beta2-19

2014-12-22 Thread Ian Campbell
On Wed, 2014-12-17 at 20:15 +, Jonathan Wiltshire wrote:
 Control: tag -1 moreinfo
 
 On Mon, Dec 15, 2014 at 08:02:33PM +, Ian Campbell wrote:
  The main reason for asking for preapproval is I am trying to decide whether 
  to
  also include a fix for #771249 which is an update to the upstream 
  translations.
  Would that be acceptable or not?
 
 Tricky... how bad *are* the upstream translations? Is this just polish or
 are there some problems with them?

FYI, I've uploaded -19 without this set of changes (see #773714).

I'm still prepared to fix #771249 in another upload if it is deemed
acceptable, so not closing this bug myself.

Cheers,
Ian.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773716: Should show requesting process PID/command as part of the pinentry text

2014-12-22 Thread Yuri D'Elia
Package: gnupg-agent
Version: 2.1.1-1
Severity: normal

I'm using gnupg-agent for both GPG and SSH key management. As a result, I'm
often prompted for unlocking a secret key.

The problem however is that I sometimes have *no* idea which process is
prompting me, never mind understanding why.

To give you a bad example, imagine using sshfs to mount some paths over the
network. A GUI application tries to readdir() a network path, typically due to
the recent open/save dialog handling, or worse yet during the population of
the Recent menu items. This results in a prompt out of the blue, which is
often worsened by the delay involved (due to connection latencies) in respect
to the action that you're performing.

As an improvement, the agent should collect the PID/program of the requesting
process and show it along with the requested key as an additional cue to the
user.

AFAIK, when a requesting process is using a unix socket, so we could use
getpeerid(3) to find the PID of the connected endpoint. Once the PID is
available, reading /proc/ would be an option to find the command line of the
requesting process to collect some more information to display to the user, to
answer the _REAL_ question why my key is being used and who is requesting
it?. Too bad why is still missing.

This method shouldn't require cooperation on the requesting process.

I consider this a bug of normal priority for a key agent, not just a
whishlist. My reasoning is that it's currently impossible for a user to
determine which process is requesting permission.

I was previously unsuccessful in getting an usability patch accepted into
pinentry, so I'm trying to get more traction using Debian's BTS.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (900, 'unstable'), (800, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg-agent depends on:
ii  libassuan02.1.2-2
ii  libc6 2.19-13
ii  libgcrypt20   1.6.2-4+b1
ii  libgpg-error0 1.17-3
ii  libnpth0  1.0-1
ii  libreadline6  6.3-8+b2
ii  pinentry-gtk2 [pinentry]  0.8.3-2

Versions of packages gnupg-agent recommends:
ii  gnupg   1.4.18-6
ii  gnupg2  2.1.1-1

gnupg-agent suggests no packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773712: unblock: jenkins-job-builder/0.9.0-0.1

2014-12-22 Thread Holger Levsen
Thanks, Michael, for handling this issue! Much appreciated! :-)


signature.asc
Description: This is a digitally signed message part.


Bug#773717: [xa65] New version 2.3.6 available

2014-12-22 Thread A.H.

Package: xa65
Version: 2.3.5-1
Severity: minor

--- Please enter the report below this line. ---

As since July 2014 there is version 2.3.6 released which seems to fix 
some serious bugs, update to this version is recommended


Yours
Andreas Hausmann


--- System information. ---
Architecture: amd64
Kernel: Linux 3.17-2.towo-siduction-amd64

Debian Release: 8.0
500 unstable http.debian.net
500 unstable ftp.uni-stuttgart.de
500 unstable cdn.debian.net
500 trusty ppa.launchpad.net
100 wheezy-backports ftp.debian.org
1 experimental cdn.debian.net

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773416: fixed in ettercap 1:0.8.1-3

2014-12-22 Thread Barak A. Pearlmutter
 Thanks for the prompt reaction.

My pleasure.

 ettercap is also in Squeeze and thus covered by our LTS initiative.

 Do you feel like providing a fixed package for Squeeze?

 If yes, please have a look at http://wiki.debian.org/LTS/Development
 but note that if you provide the fixed package and send a mail
 to debian-...@lists.debian.org, someone will gladly do the administrative
 part of the work for you.

The expert here is Gianfranco Costamagna, so I'd trust his determination
as the which patches need to be back-ported.

If he wants to prepare the updates, that would be best.  My direct
involvement wouldn't, I think, add any value.

Cheers,

--Barak.


signature.asc
Description: PGP signature


Bug#773689: Actually useful debdiff

2014-12-22 Thread D. Jared Dominguez

Let me try sending a proper debdiff this time. :)


diff -Nru efivar-0.15/debian/changelog efivar-0.15/debian/changelog
--- efivar-0.15/debian/changelog2014-11-03 10:26:48.0 -0600
+++ efivar-0.15/debian/changelog2014-12-17 22:28:23.0 -0600
@@ -1,3 +1,10 @@
+efivar (0.15-3) unstable; urgency=medium
+
+  * Partially fix #773007 by defining DataSize based on whether our kernel is
+32/64-bit.
+
+ -- Daniel Jared Dominguez jared_doming...@dell.com  Wed, 17 Dec 2014 
22:26:58 -0600
+
 efivar (0.15-2) unstable; urgency=medium
 
   * Apply upstream patches (Closes: #764386)

diff -Nru efivar-0.15/debian/patches/06-efi_variable_t.patch 
efivar-0.15/debian/patches/06-efi_variable_t.patch
--- efivar-0.15/debian/patches/06-efi_variable_t.patch  1969-12-31 
18:00:00.0 -0600
+++ efivar-0.15/debian/patches/06-efi_variable_t.patch  2014-12-17 
22:20:45.0 -0600
@@ -0,0 +1,72 @@
+commit 55837047290031fb3c66bfba0438b874f5cbf3b9
+Author: Peter Jones pjo...@redhat.com
+Date:   Tue Nov 11 16:13:49 2014 -0500
+
+Don't name anything efi_variable_t; we're going to export that elsewhere.
+
+Signed-off-by: Peter Jones pjo...@redhat.com

+
+diff --git a/src/efivarfs.c b/src/efivarfs.c
+index c456401..e85599f 100644
+--- a/src/efivarfs.c
 b/src/efivarfs.c
+@@ -39,11 +39,6 @@
+ #  define EFIVARFS_MAGIC 0xde5e81e4
+ #endif
+ 
+-typedef struct efi_variable_t {

+-  uint32_tAttributes;
+-  uint8_t Data[];
+-} __attribute__((packed)) efi_variable_t;
+-
+ static int
+ efivarfs_probe(void)
+ {
+diff --git a/src/vars.c b/src/vars.c
+index ff00860..97487f0 100644
+--- a/src/vars.c
 b/src/vars.c
+@@ -31,14 +31,14 @@
+ 
+ #define VARS_PATH /sys/firmware/efi/vars/
+ 
+-typedef struct efi_variable_t {

++typedef struct efi_kernel_variable_t {
+   uint16_tVariableName[1024/sizeof(uint16_t)];
+   efi_guid_t  VendorGuid;
+   uint64_tDataSize;
+   uint8_t Data[1024];
+   efi_status_tStatus;
+   uint32_tAttributes;
+-} __attribute__((packed)) efi_variable_t;
++} __attribute__((packed)) efi_kernel_variable_t;
+ 
+ static int

+ get_size_from_file(const char *filename, size_t *retsize)
+@@ -160,7 +160,7 @@ vars_get_variable(efi_guid_t guid, const char *name, 
uint8_t **data,
+   if (rc  0)
+   goto err;
+ 
+-	efi_variable_t *var = (void *)buf;

++  efi_kernel_variable_t *var = (void *)buf;
+ 
+ 	*data = malloc(var-DataSize);

+   if (!*data)
+@@ -207,7 +207,7 @@ vars_del_variable(efi_guid_t guid, const char *name)
+   goto err;
+ 
+ 	rc = read_file(fd, buf, buf_size);

+-  if (rc  0 || buf_size != sizeof(efi_variable_t))
++  if (rc  0 || buf_size != sizeof(efi_kernel_variable_t))
+   goto err;
+ 
+ 	close(fd);

+@@ -327,7 +327,7 @@ vars_set_variable(efi_guid_t guid, const char *name, 
uint8_t *data,
+   goto err;
+   }
+ 
+-	efi_variable_t var = {

++  efi_kernel_variable_t var = {
+   .VendorGuid = guid,
+   .DataSize = data_size,
+   .Status = 0,
diff -Nru efivar-0.15/debian/patches/07-num_bits.patch 
efivar-0.15/debian/patches/07-num_bits.patch
--- efivar-0.15/debian/patches/07-num_bits.patch1969-12-31 
18:00:00.0 -0600
+++ efivar-0.15/debian/patches/07-num_bits.patch2014-12-17 
22:30:24.0 -0600
@@ -0,0 +1,203 @@
+Based on commit d774e3699db4d04c72cf92e53c8161e9ac7ce2e2 (HEAD, 
refs/remotes/upstream/master, refs/heads/upstream)
+(Slightly modified to pretend that the erroneous 487a9ea0 doesn't exist. :)
+
+Author: Peter Jones pjo...@redhat.com
+Date:   Tue Dec 16 14:31:19 2014 -0500
+
+Make efivar's vars.c interface choose between 32 and 64 bit at runtime.
+
+We don't actually know what size the /kernel/ interface will use until

+we're executed, because it's defined as unsigned long, and we don't
+know if a 32-bit build will be run on a 32-bit or 64-bit kernel.  So in
+this case, we figure it out from uname.
+
+This makes the assumption that all the 64-bit arches we might care about

+(ia64, x86_64, and aarch64) have 64 in uname -m somewhere, and that
+none of the 32-bit architectures do.
+
+This should resolve the conflict between 487a9ea and a01d106, and

+resolve issue #12 .
+
+Signed-off-by: Peter Jones pjo...@redhat.com

+
+--- a/src/vars.c
 b/src/vars.c
+@@ -15,15 +15,15 @@
+  * You should have received a copy of the GNU Lesser General Public License
+  * along with this library.  If not, see http://www.gnu.org/licenses/.
+  */
+-
+ #include errno.h
+ #include fcntl.h
+ #include limits.h
+ #include stdio.h
+ #include stdlib.h
+ #include string.h
+-#include sys/types.h
+ #include sys/stat.h
++#include sys/types.h
++#include sys/utsname.h
+ 
+ #include lib.h

+ #include generics.h
+@@ -31,14 +31,49 @@
+ 
+ #define VARS_PATH /sys/firmware/efi/vars/
+ 
+-typedef struct 

Bug#773719: iec16022: Broken EDIFACT implementation causes broken codes depending on data contents

2014-12-22 Thread Bernd Herd
Package: iec16022
Version: 0.2.4-1
Severity: important
Tags: upstream patch

Dear Maintainer,
iec16022 produces broken datamatrix images when the data to encodes
causes it
to enable EDIFACT encoding, which is broken.

Steps to reproduce:
iec16022 --format=png -o out.png AA/A000AAA5A/1;-00-00-000;
  - Creates broken data in out.png

Verify with:

pngtopnm out.png | pnmscale 4.0 | pnmtopng /tmp/b.png ;
dmtxread /tmp/b.png

-- System Information:
Debian Release: 7.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iec16022 depends on:
ii  libc6  2.13-38+deb7u6
ii  libiec16022-0  0.2.4-1
ii  libpopt0   1.16-7
ii  zlib1g 1:1.2.7.dfsg-13

iec16022 recommends no packages.

iec16022 suggests no packages.

-- no debconf information
diff -c -r y/iec16022-0.2.4/iec16022ecc200.c fixedifact/iec16022-0.2.4/iec16022ecc200.c
*** y/iec16022-0.2.4/iec16022ecc200.c	2008-11-30 01:22:32.0 +0100
--- fixedifact/iec16022-0.2.4/iec16022ecc200.c	2014-12-22 15:09:05.0 +0100
***
*** 357,364 
  			{
  unsigned char out[4], p = 0;
  if (enc != newenc) {	// can only be from C40/Text/X12
! 	t[tp++] = 254;
! 	enc = 'a';
  }
  while (sp  sl  tolower(encoding[sp]) == 'e'
  p  4)
--- 357,364 
  			{
  unsigned char out[4], p = 0;
  if (enc != newenc) {	// can only be from C40/Text/X12
!   t[tp++] = 240;
! 	enc = 'e';
  }
  while (sp  sl  tolower(encoding[sp]) == 'e'
  p  4)
***
*** 367,381 
  	out[p++] = 0x1F;
  	enc = 'a';
  }	// termination
! t[tp] = ((s[0]  0x3F)  2);
! t[tp++] |= ((s[1]  0x30)  4);
! t[tp] = ((s[1]  0x0F)  4);
  if (p == 2)
  	tp++;
  else {
! 	t[tp++] |= ((s[2]  0x3C)  2);
! 	t[tp] = ((s[2]  0x03)  6);
! 	t[tp++] |= (s[3]  0x3F);
  }
  			}
  			break;
--- 367,381 
  	out[p++] = 0x1F;
  	enc = 'a';
  }	// termination
! t[tp] = ((out[0]  0x3F)  2);
! t[tp++] |= ((out[1]  0x30)  4);
! t[tp] = ((out[1]  0x0F)  4);
  if (p == 2)
  	tp++;
  else {
! 	t[tp++] |= ((out[2]  0x3C)  2);
! 	t[tp] = ((out[2]  0x03)  6);
! 	t[tp++] |= (out[3]  0x3F);
  }
  			}
  			break;


Bug#773405: systemd: Systemd cannot restart apache2.service because of SSL certificate with password

2014-12-22 Thread Stefan Fritsch
reassign 773405 apache2
found 773405 2.4.10-8
thanks

On Thursday 18 December 2014 13:34:45, Michael Biebl wrote:
 @apache maintainers: Are you ok if we re-assign this to the apache
 package and handle it there? You can keep the
 pkg-systemd-maintainers in CC if there are further questions.

makes sense.

Cheers,
Stefan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773720: sox: CVE-2014-8145

2014-12-22 Thread Salvatore Bonaccorso
Source: sox
Version: 14.3.1-1
Severity: grave
Tags: security upstream

Hi,

the following vulnerability was published for sox.

CVE-2014-8145[0]:
two heap-based buffer overflows

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities  Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-8145
[1] http://www.ocert.org/advisories/ocert-2014-010.html

Patches are not yet attached/referenced in the advisory, but should be
referenced in upstream git repository soon.

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#771877: original symlink target is not an absolute path on libdb5.3-java_5.3.28-7~deb8u1

2014-12-22 Thread Jan Dohl
I have the same problem. Is there any way this can be fixed given that 
the buggy version has already been installed?


Regards,
Jan

On Sun, 21 Dec 2014 14:00:11 +0100 Tangui Morlier tan...@tangui.eu.org 
wrote:

 The post-removal script fails during the upgrade of libdb5.3-java from
 version 5.3.28-6 to 5.3.28-7~deb8u1.

 dpkg-maintscript-helper says « error: original symlink target is not an
 absolute path ».

 I assume this is linked to the symlink_to_dir that has been solved but
 my apt stays blocked on this error, probably because I've installed the
 buggous version of the package.

 Is there a way to solve it ?

 Tangui




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773720: sox: CVE-2014-8145

2014-12-22 Thread Pascal Giard
On Mon, Dec 22, 2014 at 10:55 AM, Salvatore Bonaccorso
car...@debian.org wrote:
 Source: sox
 Version: 14.3.1-1
 Severity: grave
 Tags: security upstream

 Hi,

 the following vulnerability was published for sox.

 CVE-2014-8145[0]:
 two heap-based buffer overflows

 If you fix the vulnerability please also make sure to include the
 CVE (Common Vulnerabilities  Exposures) id in your changelog entry.

 For further information see:

 [0] https://security-tracker.debian.org/tracker/CVE-2014-8145
 [1] http://www.ocert.org/advisories/ocert-2014-010.html

 Patches are not yet attached/referenced in the advisory, but should be
 referenced in upstream git repository soon.

Hi,
 I've a package ready for wheezy-security and I've notified the security team.

However, before uploading it I've been waiting for their permission as
the documentation says. I have yet to hear from the team.

Note that I have not prepared a package for oldstable, I am suppose to
do that as well?

-Pascal
-- 
Homepage (http://organact.mine.nu)
Debian GNU/Linux (http://www.debian.org)
COMunité/LACIME: École de technologie supérieure (http://www.comunite.ca)
ISIP Laboratory: McGill (http://www.isip.ece.mcgill.ca)


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773721: dovecot-imapd: segmentation fault on tls/ssl client connect

2014-12-22 Thread Sebastian Reichel
Package: dovecot-imapd
Version: 1:2.2.13-11
Severity: important

Hi,

dovecot-imapd 1:2.2.13-11 (jessie) segfaults when an old openssl release
(at least a client based on 0.9.8n [yes, I should update...]) tries to
connect to it. Connecting with newer openssl versions does not result in
a segfault.

Here is a backtrace:

(gdb) bt
#0  0x7fdfa63694f3 in SSL_accept () from 
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
#1  0x7fdfa6c22f40 in ssl_handshake (proxy=0x7fdfa8546550) at 
ssl-proxy-openssl.c:480
#2  ssl_step (proxy=0x7fdfa8546550) at ssl-proxy-openssl.c:544
#3  0x7fdfa6c228fa in ssl_proxy_flush (proxy=0x7fdfa8546550) at 
ssl-proxy-openssl.c:815
#4  ssl_proxy_destroy (proxy=0x7fdfa8546550) at ssl-proxy-openssl.c:823
#5  0x7fdfa6c22a54 in ssl_handle_error (proxy=0x7fdfa8546550, ret=-1, 
func_name=0x7fdfa6c25a79 SSL_accept()) at ssl-proxy-openssl.c:464
#6  0x7fdfa6c23011 in ssl_handshake (proxy=0x7fdfa8546550) at 
ssl-proxy-openssl.c:482
#7  ssl_step (proxy=0x7fdfa8546550) at ssl-proxy-openssl.c:544
#8  0x7fdfa6c1f9ca in client_connected_finish (conn=0x7fffed9b7eb0) at 
main.c:147
#9  0x7fdfa695e7a3 in master_service_listen (l=0x7fdfa8540290) at 
master-service.c:834
#10 0x7fdfa69b2d0f in io_loop_call_io (io=0x7fdfa85403d0) at ioloop.c:441
#11 0x7fdfa69b3d09 in io_loop_handler_run_internal 
(ioloop=ioloop@entry=0x7fdfa85147b0) at ioloop-epoll.c:220
#12 0x7fdfa69b2d79 in io_loop_handler_run 
(ioloop=ioloop@entry=0x7fdfa85147b0) at ioloop.c:488
#13 0x7fdfa69b2df8 in io_loop_run (ioloop=0x7fdfa85147b0) at ioloop.c:465
#14 0x7fdfa695ddc3 in master_service_run (service=0x7fdfa8514640, 
callback=callback@entry=0x7fdfa6c1fb20 client_connected)
at master-service.c:566
#15 0x7fdfa6c2012b in login_binary_run (binary=optimized out, argc=2, 
argv=0x7fdfa8514390) at main.c:421
#16 0x7fdfa65aeb45 in __libc_start_main () from 
/lib/x86_64-linux-gnu/libc.so.6
#17 0x7fdfa7051dea in _start ()

-- Sebastian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773624: [Pkg-bitcoin-devel] Bug#773624: cgminer: CVE-2014-6251

2014-12-22 Thread Shawn L. Djernes
The CVE specifically says CPUminer which is not used for Bitcoin anymore
(or shouldn't be), not CGminer.  Can someone who has the ability to change
CVE Bug Reports fix this?

On Sat, Dec 20, 2014 at 9:22 PM, Michael Gilbert mgilb...@debian.org
wrote:

 Package: cgminer
 Severity: important
 Tags: security

 Hi,

 the following vulnerability was published for cgminer.

 CVE-2014-6251[0]:
 | Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote
 | attackers to have an unspecified impact by sending a mining.subscribe
 | response with a large nonce2 length, then triggering the overflow with
 | a mining.notify request.

 Details are sparse, and note that the report is about cpuminer rather
 than cgminer, but since the two share a lot of code, I couldn't easily
 rule out cgminer being affected, so some research needs to be done.

 If you fix the vulnerability please also make sure to include the
 CVE (Common Vulnerabilities  Exposures) id in your changelog entry.

 For further information see:

 [0] https://security-tracker.debian.org/tracker/CVE-2014-6251

 Please adjust the affected versions in the BTS as needed.

 ___
 Pkg-bitcoin-devel mailing list
 pkg-bitcoin-de...@lists.alioth.debian.org
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-bitcoin-devel




-- 

Shawn L. Djernes
SD Consulting LLC
sdjer...@gmail.com
402.345.7734 | 402.350.6973 Cell
Fax: 888.297.6310

Apple Certified Consultant
Special Deals:
iPad with Retina Display. From $499.
http://www.anrdoezrs.net/click-6259053-11031064


Bug#773561: Installing xen-linux-system-amd64 on jessie fails

2014-12-22 Thread Ian Campbell
On Sat, 2014-12-20 at 20:46 +0100, Sydney Meyer wrote:
 Hello Ian,
 
 systemctl status xen.service gives:

Thanks. Sadly these logs weren't as informative a I had hoped they would
be :-/ (In case it's not clear: this is not your fault)

 root@jessie:/home/sydney# systemctl status xen.service
 ● xen.service - LSB: Xen daemons
Loaded: loaded (/etc/init.d/xen)
Active: failed (Result: exit-code) since Sat 2014-12-20 20:42:30 CET; 11s 
 ago
   Process: 4796 ExecStart=/etc/init.d/xen start (code=exited, status=255)
 
 Dec 20 20:42:30 jessie xen[4796]: Starting Xen daemons: xenfs (warning).
 Dec 20 20:42:30 jessie systemd[1]: xen.service: control process exited, 
 code=exited status=255
 Dec 20 20:42:30 jessie systemd[1]: Failed to start LSB: Xen daemons.
 Dec 20 20:42:30 jessie systemd[1]: Unit xen.service entered failed state.

This basically says it failed, which isn't terribly helpful!

I think it is complaining because it couldn't mount xenfs, but it
doesn't say why.

If you run /etc/init.d/xen start from the root command line does it
say something more informative/useful?

Could you also try running /usr/lib/xen-common/bin/xen-dir
and /usr/lib/xen-common/bin/xen-toolstack by hand (also as root).

 journalctl -xn gives:
 
 root@jessie:/home/sydney# journalctl -xn
 -- Logs begin at Sat 2014-12-20 20:40:10 CET, end at Sat 2014-12-20 20:42:30 
 CET. --
 Dec 20 20:42:27 jessie kernel: hfsplus: unable to find HFS+ superblock
 Dec 20 20:42:27 jessie kernel: qnx4: no qnx4 filesystem (no root dir).
 Dec 20 20:42:27 jessie kernel: You didn't specify the type of your ufs 
 filesystem

mount -t ufs -o 
 ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...

WARNING Wrong ufstype may corrupt your 
 filesystem, default is ufstype=old
 Dec 20 20:42:27 jessie kernel: hfs: can't find a HFS filesystem on dev xvda2
 Dec 20 20:42:27 jessie os-prober[4747]: debug: /dev/xvda5: is active swap

This made me wonder -- are you doing/installing this in a Xen guest
(domU)? From other evidence I don't think you are but I should check.

Assuming you are running this on the dom0/host, have you booted into the
hypervisor at this point or are you running bare-metal/native? (I
suspect the latter).

Thanks,
Ian.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#773722: unzip: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141

2014-12-22 Thread Salvatore Bonaccorso
Source: unzip
Version: 6.0-4
Severity: grave
Tags: security upstream

Hi,

the following vulnerabilities were published for unzip.

(disclaimer I was not yet able to verify any of those, but oCert
advisory claims to affect all unzip = 6.0).

CVE-2014-8139[0]:
CRC32 heap overflow

CVE-2014-8140[1]:
heap overflow in test_compr_eb

CVE-2014-8141[2]:
heap overflow in getZip64Data

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities  Exposures) ids in your changelog entry.

More information are found in the corresponding Red Hat bugzilla
entries.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-8139
[1] https://security-tracker.debian.org/tracker/CVE-2014-8140
[2] https://security-tracker.debian.org/tracker/CVE-2014-8141
[3] http://www.ocert.org/advisories/ocert-2014-011.html

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



  1   2   3   >