Bug#749949: backtrace
Rebuilding jasper without HAVE_VLA defined leads to: $ valgrind nautilus . [...] ==26485== Warning: set address range perms: large range [0x221fe040, 0x363105a0) (undefined) ==26485== ==26485== Process terminating with default action of signal 11 (SIGSEGV) ==26485== Bad permissions for mapped region at address 0x1DBE2698 ==26485==at 0x20A14CCB: jpc_qmfb_join_colgrp (jpc_qmfb.c:753) ==26485==by 0x20A16674: jpc_ft_synthesize (jpc_qmfb.c:1622) ==26485==by 0x20ACA63D: jpc_tsfb_synthesize2 (jpc_tsfb.c:170) ==26485==by 0x20ACA5FF: jpc_tsfb_synthesize2 (jpc_tsfb.c:161) ==26485==by 0x20ACA5FF: jpc_tsfb_synthesize2 (jpc_tsfb.c:161) ==26485==by 0x20ACA5FF: jpc_tsfb_synthesize2 (jpc_tsfb.c:161) ==26485==by 0x20ACA5FF: jpc_tsfb_synthesize2 (jpc_tsfb.c:161) ==26485==by 0x20ACA565: jpc_tsfb_synthesize (jpc_tsfb.c:154) ==26485==by 0x20A03D82: jpc_dec_tiledecode (jpc_dec.c:1065) ==26485==by 0x20A025BD: jpc_dec_process_sod (jpc_dec.c:620) ==26485==by 0x20A01DEA: jpc_dec_decode (jpc_dec.c:390) ==26485==by 0x20A01A7E: jpc_decode (jpc_dec.c:254) Which does not make much sense to me, since line 753 is the jpc_qmfb_join_colgrp funtion call. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774762: try harder to find reasons for failed `lvchange -an` by looking at /proc/*/mountinfo
Package: lvm2 Version: 2.02.111-2 Severity: wishlist when an `lvchange -an ...` fails, lvm tries to give a better reason than is currently in use by looking at /sys/dev/block/.../holders and /proc/self/mountinfo when --verbose is given. it was pointed out to me that i could look at /proc/*/mountinfo as well, and indeed i found `/sbin/cgmanager --daemon-mname=systemd`. given cgroups are in wide use today, lvm should take its helpfulness a little further and look at /proc/*/mountinfo as well for possible mount locations, and display which processes are involved so the user has a realistic chance to find the holder of the mount. note that lvm is not the only program that should do that, but the only program that does *something* like this at all. (before i tried `lvchange -an`, i originally wanted to fsck the block device or to mount it somewhere different, and those programs didn't even try to tell me where the device is mounted). ideally, in my opinion, it should not be lvm2 to drill down to the reasons of the device being unavailable, but a generic `who-uses` tool that would then be used or suggested by lvm, mount or fsck in case of a failure. -- System Information: Debian Release: 8.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages lvm2 depends on: ii dmeventd 2:1.02.90-2 ii dmsetup 2:1.02.90-2 ii init-system-helpers 1.22 ii initscripts 2.88dsf-58 ii libc6 2.19-13 ii libdevmapper-event1.02.1 2:1.02.90-2 ii libdevmapper1.02.12:1.02.90-2 ii libreadline5 5.2+dfsg-2 ii libudev1 215-8 ii lsb-base 4.1+Debian13+nmu1 lvm2 recommends no packages. Versions of packages lvm2 suggests: pn thin-provisioning-tools none -- no debconf information -- To use raw power is to make yourself infinitely vulnerable to greater powers. -- Bene Gesserit axiom signature.asc Description: Digital signature
Bug#586416: ITA: vnc-java -- VNC java applet and command line program
I will be happy to adopt vnc-java. Ola please help me to adopt this package -- Michał
Bug#774178: Acknowledgement (bind9: No SOA nor NS in samba_dlz zones)
The bug persists with 1:9.9.5.dfsg-8. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#759822: functionality included in dh_stripnondeterminism
Hi, the functionality of this package has been included in dh_stripnondeterminism, so for the Debian reproducible builds project it's not needed to have this packaged anymore. It mighth still make sense for other use cases though. cheers, Holger signature.asc Description: This is a digitally signed message part.
Bug#774763: clamav-unofficial-sigs: Updating the databases timeouts on a regular basis
Package: clamav-unofficial-sigs Version: 3.7.2-2 Severity: normal Dear Maintainer, The clamav-unofficial-sigs cron jobs regularly reports: Subject: Cron clamav@amboise [ -x /usr/sbin/clamav-unofficial-sigs ] /usr/sbin/clamav-unofficial-sigs curl: (56) Recv failure: Connexion ré-initialisée par le correspondant curl: (56) Recv failure: Connexion ré-initialisée par le correspondant curl: (28) Connection timed out after 15001 milliseconds curl: (28) Connection timed out after 15001 milliseconds curl: (56) Recv failure: Connexion ré-initialisée par le correspondant curl: (28) Connection timed out after 15000 milliseconds curl: (28) Connection timed out after 15000 milliseconds Meanwhile I have a Munin plugin that checks connectivity to a server on the Internet which shows no connection trouble. So it seems the unofficial servers are pretty unreliable. Unfortunately the script also makes it hard to know exactly which server is proving troublesome. Fortunately inspecting the script shows there's a log, /var/log/clamav-unofficial-sigs.log, and inspecting the log shows that bad server seems to be clamav.securiteinfo.com: janv. 07 05:53:04 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo honeynet.hdb update janv. 07 05:53:15 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfo.hdb update janv. 07 05:53:30 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfobat.hdb update janv. 07 05:53:45 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfodos.hdb update janv. 07 05:54:09 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfohtml.hdb update janv. 07 05:54:24 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfooffice.hdb update janv. 07 05:54:39 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfopdf.hdb update janv. 07 09:49:29 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfobat.hdb update janv. 07 09:50:05 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfooffice.hdb update janv. 07 09:50:30 WARNING - Failed curl connection to clamav.securiteinfo.com - SKIPPED SecuriteInfo securiteinfosh.hdb update This year I got similar errors on the 1st at 5:49 and 9:47, 3rd at 13:50 and 17:48, then 5th at 5:48 and 9:52 and finally on the 6th at 5:51 and 9:49. -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (990, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages clamav-unofficial-sigs depends on: ii bind9-host [host] 1:9.9.5.dfsg-7 ii clamav 0.98.5+dfsg-3 ii curl 7.38.0-3 ii dnsutils 1:9.9.5.dfsg-7 ii gnupg 1.4.18-6 ii rsync 3.1.1-2+b1 clamav-unofficial-sigs recommends no packages. Versions of packages clamav-unofficial-sigs suggests: ii clamav-daemon 0.98.5+dfsg-3 -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#742603: Using jessie + nautilus
Control: found -1 1:3.10.0-4 Another way to reproduce it: $ mkdir /tmp/bla $ cd /tmp/bla $ valgrind --tool=exp-sgcheck nautilus ==17681== exp-sgcheck, a stack and global array overrun detector ==17681== NOTE: This is an Experimental-Class Valgrind Tool ==17681== Copyright (C) 2003-2013, and GNU GPL'd, by OpenWorks Ltd et al. ==17681== Using Valgrind-3.10.0 and LibVEX; rerun with -h for copyright info ==17681== Command: nautilus ==17681== --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 --17681-- warning: evaluate_Dwarf3_Expr: unhandled DW_OP_ 0x93 exp-sgcheck: sg_main.c:560 (add_blocks_to_StackTree): Assertion '!already_present' failed. host stacktrace: ==17681==at 0x3807BD8F: show_sched_status_wrk (m_libcassert.c:319) ==17681==by 0x3807BE84: report_and_quit (m_libcassert.c:390) ==17681==by 0x3807C006: vgPlain_assert_fail (m_libcassert.c:455) ==17681==by 0x3807225B: add_blocks_to_StackTree (sg_main.c:560) ==17681==by 0x380735BE: shadowStack_new_frame.isra.22 (sg_main.c:1875) ==17681==by 0x806A20AC9: ??? ==17681==by 0x803A62EEF: ??? ==17681==by 0x3806FE6F: ??? (h_main.c:141) ==17681==by 0x8DE4ABA: __nscd_get_mapping (nscd_helper.c:286) sched status: running_tid=1 Thread 1: status = VgTs_Runnable ==17681==at 0x8DE4AF8: __nscd_get_mapping (nscd_helper.c:293) ==17681==by 0x8DE4EDB: __nscd_get_map_ref (nscd_helper.c:443) ==17681==by 0x8DE2E40: __nscd_getai (nscd_getai.c:63) ==17681==by 0x8D9E2C9: gaih_inet (getaddrinfo.c:686) ==17681==by 0x8DA003C: getaddrinfo (getaddrinfo.c:2406) ==17681==by 0xCDFD3FA: ??? (in /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0) ==17681==by 0xCDFD84C: xcb_connect_to_display_with_auth_info (in /usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0) ==17681==by 0x6DFC0B9: _XConnectXCB (in /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0) ==17681==by 0x6DECDC1: XOpenDisplay (in /usr/lib/x86_64-linux-gnu/libX11.so.6.3.0) ==17681==by 0xE214CCC: ??? (in /usr/lib/x86_64-linux-gnu/libatspi.so.0.0.1) ==17681==by 0xE214FCC: atspi_get_a11y_bus (in /usr/lib/x86_64-linux-gnu/libatspi.so.0.0.1) ==17681==by 0xA75ED05: atk_bridge_adaptor_init (in /usr/lib/x86_64-linux-gnu/libatk-bridge-2.0.so.0.0.0) ==17681==by 0x5727B89: ??? (in /usr/lib/x86_64-linux-gnu/libgtk-3.so.0.1400.5) ==17681==by 0x5892AB0: ??? (in /usr/lib/x86_64-linux-gnu/libgtk-3.so.0.1400.5) ==17681==by 0x7D4B1C8: g_option_context_parse (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4200.1) ==17681==by 0x7D4C0C3: g_option_context_parse_strv (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4200.1) ==17681==by 0x77CFA81: ??? (in /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0.4200.1) ==17681==by 0x77D0176: g_application_run (in /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0.4200.1) ==17681==by 0x429E40: main (nautilus-main.c:103) Note: see also the FAQ in the source distribution. It contains workarounds to several common problems. In particular, if Valgrind aborted or crashed after identifying problems in your program, there's a good chance that fixing those problems will prevent Valgrind aborting or crashing, especially if it happened in m_mallocfree.c. If that doesn't help, please report this bug to: www.valgrind.org In the bug report, send all the above text, the valgrind version, and what OS and version you are using. Thanks. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774756: gdm3: No display on laptop screen at startup when using 2 screens
On 07/01/15 07:53, Rémi Verchère wrote: When the OS starts, I cannot see GDM prompt on my laptop screen (I can see the gray background on the external screen), the laptop screen is completely black. When switching ttys (tty7 - tty1, then tty1 - tty7), I can see the login screen and log in my Gnome environment. I think this is the combination of https://bugs.debian.org/774617 and https://bugs.debian.org/762676. S -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#768314: [pkg-cryptsetup-devel] Bug#768314: cryptsetup: Passphrase prompt rolls by without stopping (fwd)
On Wednesday 7. January 2015 08.23.32 Tomas Pospisek wrote: Kjetil and Christian is it possible for you to test this? As of now, I only have my laptop to test Jessie, which is something I use every day, and so I'm anxious about putting such an important thing as systemd from experimental on it. I've had the ambition to be able to easily set up virtual hosts for these occasions for a long time, but alas, ENOTIME. Cheers, Kjetil
Bug#774761: baobab: Icon files missing in package
Package: baobab Version: 3.14.1-1 Severity: normal Dear Maintainer, I am using XFCE desktop and installed baobab. When starting from console, it complains about: $ baobab (baobab:7156): Gtk-WARNING **: Symbolic icon view-ringschart-symbolic-ltr is not in an icon theme directory (baobab:7156): Gtk-WARNING **: Symbolic icon view-treemap-symbolic-ltr is not in an icon theme directory Indeed, the package seems to be missing some files: $ dpkg -L baobab | grep icons /usr/share/icons /usr/share/icons/HighContrast /usr/share/icons/HighContrast/32x32 /usr/share/icons/HighContrast/32x32/apps /usr/share/icons/HighContrast/32x32/apps/baobab.png /usr/share/icons/HighContrast/48x48 /usr/share/icons/HighContrast/48x48/apps /usr/share/icons/HighContrast/48x48/apps/baobab.png /usr/share/icons/HighContrast/256x256 /usr/share/icons/HighContrast/256x256/apps /usr/share/icons/HighContrast/256x256/apps/baobab.png /usr/share/icons/HighContrast/24x24 /usr/share/icons/HighContrast/24x24/apps /usr/share/icons/HighContrast/24x24/apps/baobab.png /usr/share/icons/HighContrast/22x22 /usr/share/icons/HighContrast/22x22/apps /usr/share/icons/HighContrast/22x22/apps/baobab.png /usr/share/icons/HighContrast/16x16 /usr/share/icons/HighContrast/16x16/apps /usr/share/icons/HighContrast/16x16/apps/baobab.png /usr/share/icons/hicolor /usr/share/icons/hicolor/32x32 /usr/share/icons/hicolor/32x32/apps /usr/share/icons/hicolor/32x32/apps/baobab.png /usr/share/icons/hicolor/48x48 /usr/share/icons/hicolor/48x48/apps /usr/share/icons/hicolor/48x48/apps/baobab.png /usr/share/icons/hicolor/256x256 /usr/share/icons/hicolor/256x256/apps /usr/share/icons/hicolor/256x256/apps/baobab.png /usr/share/icons/hicolor/24x24 /usr/share/icons/hicolor/24x24/apps /usr/share/icons/hicolor/24x24/apps/baobab.png /usr/share/icons/hicolor/22x22 /usr/share/icons/hicolor/22x22/apps /usr/share/icons/hicolor/22x22/apps/baobab.png /usr/share/icons/hicolor/16x16 /usr/share/icons/hicolor/16x16/apps /usr/share/icons/hicolor/16x16/apps/baobab.png I'd expected to see /usr/share/icons/hicolor/scalable/actions/view-ringschart-symbolic.svg as well as the *-treemap-* file in the list: https://packages.debian.org/search?searchon=contentskeywords=view-ringschart- symbolicmode=filenamesuite=testingarch=any Can you please update the package with the missing files? Thank you! Regards, Holger -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (990, 'testing'), (900, 'testing-updates'), (10, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.17.0-trunk-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages baobab depends on: ii dconf-gsettings-backend [gsettings-backend] 0.22.0-1 ii libatk1.0-0 2.14.0-1 ii libc62.19-13 ii libcairo-gobject21.14.0-2.1 ii libcairo21.14.0-2.1 ii libgdk-pixbuf2.0-0 2.31.1-2+b1 ii libglib2.0-0 2.42.1-1 ii libgtk-3-0 3.14.5-1 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 Versions of packages baobab recommends: ii yelp 3.14.1-1 baobab suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774251: openscad import() sometimes hates some filenames (!)
On Tue, Jan 06, 2015 at 11:15:58PM +0100, John Paul Adrian Glaubitz wrote: What exactly do you mean with rendering tricks? I'm not such an expert on OpenSCAD yet. Just recently discovered it thanks to Torsten :). openscad utilizes libopencsg, which does geometry differences by flipping around the semantics of the z buffer. (eg to render a spherical hole in a cube, it renders the cube first, then inverts the z-buffer semantics from only rendering pixels in front of already painted pixels to only rendering pixels behind already painted pixels, and then paints the backfaces of the sphere). thus, boolan operations on solids are possible without calculating intersection points of faces, and do things fast on the graphics card ... provided there is one. situations without proper graphics cards are now ok-ish-ly dealt with by software rendering for regression tests, but the emulated graphics card of virtualbox still fails (as it did with the wheezy released openscad), so that's the things i'd need testing from real wheezies. basically, if example001 shows the same after pressing f5 and f6, the graphics card tricks at least basically work. there is a regression testing mechanism in the `openscad-testrun` binary, but i wouldn't rely on that yet for it has to deal with off-screen rendering buffer allocations the real openscad doesn't have to deal with. best regards chrysn signature.asc Description: Digital signature
Bug#774650: claws-mail-pgpinline: fails to unlock private PGP key
Control: tags -1 moreinfo Hi Michael, On Mon, Jan 05, 2015 at 08:35:53PM +0100, Michael Below wrote: Package: claws-mail-pgpinline Version: 3.11.1-3 Severity: normal Dear Maintainer, when I receive a PGP-inline encrypted mail, claws-mail-pgpinline fails to unlock my private PGP key. It doesn't ask me to input my passphrase, instead it shows Entschlüsseln schlug fehl: Falsche Passphrase (encrpytion failed: wrong passphrase). When I use e.g. Evolution to decrypt the mail, it unlocks my PGP key using seahorse. The key stays unlocked for some time. While the key is unlocked in seahorse, I can re-open the mail in claws-mail and it is decrypted alright. claws-mail-pgpinline should know a way to ask for your passphrase to decrypt encrypted messages, either via seahorse/GNOME system dialogs or locally. Do you have “Use gpg-agent to manage passwords” checked in Plugins/GPG panel of your Configuration/Preferences dialog? regards, -- Ricardo Mones ~ You have the capacity to learn from mistakes. You'll learn a lot today. /usr/games/fortune signature.asc Description: Digital signature
Bug#738199: Fixing OVAL generation
I will give it a try later this week, when I have some spare time. Cheers, --Seb -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773512: Patch
Control: tags -1 patch
Attached.
Description: crash in jpc_dec_decodecblks() in Nautilus thumbnailer
This patch fixes the symptom of a debian bug.
Someone with better understanding of the jasper internals will need to
provide a better patch as to why the allocation failed.
This patch make jasper gracefully exit upon reading valid JP2 file.
Author: Mathieu Malaterre ma...@debian.org
Bug-Debian: https://bugs.debian.org/773512
--- jasper-1.900.1-debian1.orig/src/libjasper/jpc/jpc_t1dec.c
+++ jasper-1.900.1-debian1/src/libjasper/jpc/jpc_t1dec.c
@@ -817,6 +817,11 @@ static int dec_clnpass(jpc_dec_t *dec, r
fstripestart = jas_matrix_getref(flags, 1, 1);
dstripestart = jas_matrix_getref(data, 0, 0);
+ if( !fstripestart || !dstripestart )
+{
+jas_eprintf(error: failed allocation\n);
+return -1;
+}
for (i = 0; i height; i += 4, fstripestart += fstripestep,
dstripestart += dstripestep) {
fvscanstart = fstripestart;
Bug#774760: quagga: Support linux kernel 3.14 (CVE-2014-0181 netlink fix)
Package: quagga Version: 0.99.22.4-1+wheezy1 Severity: wishlist Dear Maintainer, Quagga 0.9.22 no longer works with recent kernels due to security fix for CVE-2014-0181: http://www.spinics.net/lists/netdev/msg280198.html zebra can't insert routing entries with the following error: zebra[2726]: netlink-cmd error: Operation not permitted, type=RTM_NEWROUTE(24), seq=82, pid=0 This shouldn't be a issue if using Debian's 3.2 kernel, but still it'd be nice if we could enjoy latest kernel's improvements. Fix seems trivial as per: https://github.com/opensourcerouting/quagga/commit/8e998b1eb5fea53f2a2eddd9f7f2b8ab004406f3 Best regards, Teodor -- System Information: Debian Release: 7.7 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (x86_64) Kernel: Linux 3.2.65-grsec (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages quagga depends on: ii adduser3.113+nmu3 ii debconf [debconf-2.0] 1.5.49 ii iproute20120521-3+b3 ii libc6 2.13-38+deb7u6 ii libcap21:2.22-1.2 ii libpam0g 1.1.3-7.1 ii libreadline6 6.2+dfsg-0.1 ii libtinfo5 5.9-10 ii logrotate 3.8.1-4 quagga recommends no packages. Versions of packages quagga suggests: ii snmpd 5.4.3~dfsg-2.8+deb7u1 -- Configuration Files: /etc/quagga/daemons changed [not included] -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773507: [Pkg-gnupg-maint] Bug#773507: explicit buffer overrun
On Wed, 7 Jan 2015 06:54, gni...@fsij.org said:
- if (argc = sizeof argv -1)
+ if (argc = DIM (argv) - 1)
{
Ooops. That was probably my fault when I rewrite that function 10 years
ago.
Salam-Shalom,
Werner
--
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774688: unblock: pbbuttonsd/0.7.9-3
On Tue, Jan 6, 2015 at 8:01 PM, Sven Joachim svenj...@gmx.de wrote: On 2015-01-06 10:24 +0100, Mathieu Malaterre wrote: diff -Nru pbbuttonsd-0.7.9/debian/changelog pbbuttonsd-0.7.9/debian/changelog --- pbbuttonsd-0.7.9/debian/changelog 2014-01-22 13:08:34.0 +0100 +++ pbbuttonsd-0.7.9/debian/changelog 2015-01-06 10:12:42.0 +0100 @@ -1,3 +1,10 @@ +pbbuttonsd (0.7.9-4) unstable; urgency=low + + * Adopt package. Closes: #422162 + * Fix for linux kernel 3.x. Closes: #711685 How about future 4.x kernels? It seems quite possible that those will be released during jessie's lifetime. In which case, someone will need to report a bug that pbbuttonsd does or does not work for kernel 4.x when this happens. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773507: [Pkg-gnupg-maint] Bug#773507: explicit buffer overrun
On 01/07/2015 02:54 PM, NIIBE Yutaka wrote:
Here's my fix. I'm going to apply this change since it's obvious
simple fix and there will be no conflict.
diff --git a/dirmngr/ldap.c b/dirmngr/ldap.c
index 478fdfd..00df167 100644
--- a/dirmngr/ldap.c
+++ b/dirmngr/ldap.c
@@ -588,7 +588,7 @@ start_cert_fetch_ldap (ctrl_t ctrl, cert_fetch_context_t
*context,
strlist_t sl;
char *url;
- if (argc = sizeof argv -1)
+ if (argc = DIM (argv) - 1)
{
/* Too many patterns. It does not make sense to allow an
arbitrary number of patters because the length of the
Pushed.
--
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773474: [PATCH] * scd/app-openpgp.c: (get_public_key) correctly close 'fp' upon use.
On Wed, 7 Jan 2015 01:20, gni...@fsij.org said: On 12/20/2014 09:38 AM, Joshua Rogers wrote: Inside the get_public_key function, 'fp' was opened using popen, but incorrectly closed using fclose. Thank you for your patch. Good catch. Yeah. After 9 years or so :-). But there is a portability problem. From libgcrypt's rndunix.c: /* Under SunOS popen() doesn't record the pid of the child process. When * pclose() is called, instead of calling waitpid() for the correct child, it * calls wait() repeatedly until the right child is reaped. The problem is * that this reaps any other children that happen to have died at that * moment, and when their pclose() comes along, the process hangs forever. * The fix is to use a wrapper for popen()/pclose() which saves the pid in * the dataSources structure (code adapted from GNU-libc's popen() call). * * Aut viam inveniam aut faciam */ scdaemon may also start other processes (status scripts) and there is a chance that the above described bug would be triggered. However, I do not know up to which SunOS version the problem exists and whether anyone is using the really old 1.0 card on SunOS. Thus the fix is better than keeping it as it is. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#743494: linphone: Does not work with TLS
Package: linphone Version: 3.5.2-10 Followup-For: Bug #743494 same bug in current stable version -- System Information: Debian Release: 7.8 APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/4 CPU cores) Locale: LANG=ru_RU.utf8, LC_CTYPE=ru_RU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages linphone depends on: ii libasound2 1.0.25-4 ii libatk1.0-0 2.4.0-2 ii libavcodec536:0.8.16-1 ii libavutil51 6:0.8.16-1 ii libc6 2.13-38+deb7u6 ii libcairo2 1.12.2-3 ii libfontconfig1 2.9.0-7.1 ii libfreetype62.4.9-1.1 ii libgdk-pixbuf2.0-0 2.26.1-1 ii libglib2.0-02.33.12+really2.32.4-5 ii libgsm1 1.0.13-4 ii libgtk2.0-0 2.24.10-2 ii liblinphone43.5.2-10 ii libmediastreamer1 3.5.2-10 ii libnotify4 0.7.5-1 ii libogg0 1.3.0-4 ii libortp83.5.2-10 ii libpango1.0-0 1.30.0-1 ii libspeex1 1.2~rc1-7 ii libspeexdsp11.2~rc1-7 ii libswscale2 6:0.8.16-1 ii libtheora0 1.1.1+dfsg.1-3.1 ii libvpx1 1.1.0-1 ii libx11-62:1.5.0-1+deb7u1 ii libxv1 2:1.0.7-1+deb7u1 ii linphone-nogtk 3.5.2-10 linphone recommends no packages. Versions of packages linphone suggests: ii yelp 3.4.2-1+b1 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774758: pycarddav: Fails to sync with Error No module named sync / query
Package: pycarddav Version: 0.7.0-1 Severity: important Hi, I installed pycarddav on two diffrent machines with similiar packages installed. One is upgrade from Wheezy, one is a direct installation of jessie. pycarddav normaly connects with similar configurations to an instance of owncloud. The upgraded machine let pycardsyncer come fail. The fresh installed machine works without any problems, so this couldn't be a case of a wrong installation of owncloud or problems with the secure connection. A Test with curl, wget gives me the desired File from owncloud. For the pycardsyncer I only get a No module named sync and a pc_query -a SOMENAME give me a No module named query Purging, reinstallation and completly reconfiguration does not bring the desired result. It looks like, there are missed dependencies on one machine. I am using python version 2.7.8-2 Greetings and a happy new year Christian M. Grube -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages pycarddav depends on: ii python2.7.8-2 ii python-pycarddav 0.7.0-1 pycarddav recommends no packages. pycarddav suggests no packages. -- no debconf information signature.asc Description: Digital signature
Bug#774745: Upgrade to maven 3.1.1/3.2.5
Hi Chris, FYI the packaging of the new version has started but is blocked by nasty build issues. The work in progress is available in Git on the maven-3.1.1 branch [1]. Any help would be welcome. Emmanuel Bourg [1] http://anonscm.debian.org/cgit/pkg-java/maven.git/log/?h=maven-3.1.1 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774688: unblock: pbbuttonsd/0.7.9-3
On Tue, Jan 6, 2015 at 7:31 PM, Jonathan Wiltshire j...@debian.org wrote: Control: tag -1 moreinfo On Tue, Jan 06, 2015 at 10:24:40AM +0100, Mathieu Malaterre wrote: +pbbuttonsd (0.7.9-4) unstable; urgency=low + + * Adopt package. Closes: #422162 I'll happily trade the adoption for an unblock, but you don't appear to have updated the maintainer field: Sorry I skrew-up. Do I need another source-upload ? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774759: [pre-approval] unblock: ghostscript/9.06~dfsg-2
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
Dear RT,
I'd like to get the patch for #732440 included in Jessie. The bug was
reported three independent times and is a premature abort in Ghostscript
processing. The patch that fixes that bug was included in upstream's
9.14 version and can be directly cherry-picked on top of 9.06~dfsg-1 as
currently in jessie.
Here goes the proposed changelog:
ghostscript (9.06~dfsg-2) unstable; urgency=medium
* Add patch cherry-picked upstream to fix /typecheck error in /findfont
(Closes: #732440)
The cherry-picked patch as well as the full debdiff are attached.
TIA, cheers,
OdyX
diff -Nru ghostscript-9.06~dfsg/debian/changelog ghostscript-9.06~dfsg/debian/changelog
--- ghostscript-9.06~dfsg/debian/changelog 2014-08-27 04:08:44.0 +0200
+++ ghostscript-9.06~dfsg/debian/changelog 2015-01-07 08:28:03.0 +0100
@@ -1,3 +1,10 @@
+ghostscript (9.06~dfsg-2) unstable; urgency=medium
+
+ * Add patch cherry-picked upstream to fix /typecheck error in /findfont
+(Closes: #732440)
+
+ -- Didier Raboud o...@debian.org Wed, 07 Jan 2015 08:27:52 +0100
+
ghostscript (9.06~dfsg-1) unstable; urgency=medium
* Team upload
diff -Nru ghostscript-9.06~dfsg/debian/patches/020140211~f4584b0.patch ghostscript-9.06~dfsg/debian/patches/020140211~f4584b0.patch
--- ghostscript-9.06~dfsg/debian/patches/020140211~f4584b0.patch 1970-01-01 01:00:00.0 +0100
+++ ghostscript-9.06~dfsg/debian/patches/020140211~f4584b0.patch 2015-01-07 08:26:20.0 +0100
@@ -0,0 +1,48 @@
+From: Chris Liddell chris.lidd...@artifex.com
+Date: Tue, 11 Feb 2014 15:15:56 + (+)
+Subject: Bug 695031: don't assume we can read a font file
+X-Git-Tag: ghostpdl-9.12rc1~50
+X-Git-Url: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff_plain;h=f4584b0e162a96ec143f0057de63c116e649e02b
+Bug-Debian: https://bugs.debian.org/732440
+
+Bug 695031: don't assume we can read a font file
+
+When we scan system fonts, we were assuming fonts found would be in a format
+Ghostscript understands. This is not necessarily the case.
+
+So put the minimal parsing call to get the font's name in a stopped context,
+so we can skip the file it's not an understandable format. And clean up the
+stack in the event we try such a file.
+
+No cluster differences.
+---
+
+--- a/Resource/Init/gs_fonts.ps
b/Resource/Init/gs_fonts.ps
+@@ -385,12 +385,20 @@
+ pop pop pop
+ }{
+ % we could open the font file
+-.findfontname
+-not { dup 0 get } if % stack: (newname) [ (name) (path) ]
+-% DEBUG { ( found ) print dup print (\n) print flush } if
+-% add entry to the fontmap
+-1 index exch 0 exch dup type /nametype ne {cvn} if put
+-aload pop .definefontmap
++mark 2 1 roll
++{.findfontname} stopped
++{
++ cleartomark
++ pop pop
++}
++{
++ 3 -1 roll pop
++ not { dup 0 get } if % stack: (newname) [ (name) (path) ]
++ % DEBUG { ( found ) print dup print (\n) print flush } if
++ % add entry to the fontmap
++ 1 index exch 0 exch dup type /nametype ne {cvn} if put
++ aload pop .definefontmap
++} ifelse
+ } ifelse
+ } forall
+ } if
diff -Nru ghostscript-9.06~dfsg/debian/patches/series ghostscript-9.06~dfsg/debian/patches/series
--- ghostscript-9.06~dfsg/debian/patches/series 2014-08-27 03:59:17.0 +0200
+++ ghostscript-9.06~dfsg/debian/patches/series 2015-01-07 08:25:44.0 +0100
@@ -3,6 +3,7 @@
020121130~a3d00da.patch
020130619~1b87b82.patch
020130619~daceba6.patch
+020140211~f4584b0.patch
1001_document_inkcov_device.patch
2001_docdir_fix_for_debian.patch
2002_gs_man_fix_debian.patch
From: Chris Liddell chris.lidd...@artifex.com
Date: Tue, 11 Feb 2014 15:15:56 + (+)
Subject: Bug 695031: don't assume we can read a font file
X-Git-Tag: ghostpdl-9.12rc1~50
X-Git-Url: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff_plain;h=f4584b0e162a96ec143f0057de63c116e649e02b
Bug-Debian: https://bugs.debian.org/732440
Bug 695031: don't assume we can read a font file
When we scan system fonts, we were assuming fonts found would be in a format
Ghostscript understands. This is not necessarily the case.
So put the minimal parsing call to get the font's name in a stopped context,
so we can skip the file it's not an understandable format. And clean up the
stack in the event we try such a file.
No cluster differences.
---
--- a/Resource/Init/gs_fonts.ps
+++ b/Resource/Init/gs_fonts.ps
@@ -385,12 +385,20 @@
pop pop pop
}{
% we could open the font file
-.findfontname
-not { dup 0 get } if % stack: (newname) [ (name) (path) ]
-% DEBUG { ( found ) print dup print (\n) print flush } if
-% add entry to the fontmap
-1 index exch 0 exch dup type /nametype ne {cvn} if put
-
Bug#774764: reportbug: Add a way to send kudos to a developer directly
Package: reportbug Version: 6.6.3 Severity: wishlist Dear Maintainer, the --kudos option seems to require a package name, but sometimes we want to send kudos to developers for their general work not only for one package. Maybe a way to send kudos to an @debian.org address can be added? Thanks, Antonio -- Package-specific info: ** Environment settings: EDITOR=vi DEBEMAIL=a...@ao2.it EMAIL=a...@ao2.it DEBFULLNAME=Antonio Ospite INTERFACE=text ** /home/ao2/.reportbugrc: reportbug_version 3.39 mode standard ui text smtphost out.alice.it -- System Information: Debian Release: 8.0 APT prefers unstable APT policy: (900, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.19.0-rc3-ao2 (SMP w/2 CPU cores) Locale: LANG=it_IT.utf8, LC_CTYPE=it_IT.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Init: systemd (via /run/systemd/system) Versions of packages reportbug depends on: ii apt 1.0.9.5 ii python2.7.8-2 ii python-reportbug 6.6.3 pn python:anynone reportbug recommends no packages. Versions of packages reportbug suggests: pn claws-mail none ii debconf-utils 1.5.55 ii debsums2.0.52+nmu2 pn dlocatenone ii emacs24-bin-common 24.4+1-4.1 ii exim4 4.84-6 ii exim4-daemon-light [mail-transport-agent] 4.84-6 ii file 1:5.22+2-1 ii gnupg 1.4.18-6 ii python-gtk22.24.0-4 pn python-gtkspellnone pn python-urwid none ii python-vte 1:0.28.2-5 ii xdg-utils 1.1.0~rc1+git20111210-7.2 Versions of packages python-reportbug depends on: ii apt 1.0.9.5 ii python-debian 0.1.25 ii python-debianbts 1.12 pn python:anynone python-reportbug suggests no packages. -- no debconf information -- Antonio Ospite http://ao2.it A: Because it messes up the order in which people normally read text. See http://en.wikipedia.org/wiki/Posting_style Q: Why is top-posting such a bad thing? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773763: Acknowledgement (task-mate-desktop: Should install libreoffice-gnome)
Control: tag -1 patch On Di 06 Jan 2015 21:07:10 CET, MENGUAL Jean-Philippe wrote: Just a precision: actually libreoffice-gnome installs libreoffice-gtk, it's a dependency. And it's libreoffice-gtk which is responsible for accessibility it LO. It can be installed without libreoffice-gnome, it works. A .debdiff is attached to this mail. The MATE packaging team will highly appreciate it if one of the tasksel maintainers fixes this accessibility issue in tasksel-mate-desktop on our behalf. THANKS in advance!!! Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb diff -Nru tasksel-3.29/debian/changelog tasksel-3.29+nmu1/debian/changelog --- tasksel-3.29/debian/changelog 2014-10-21 17:21:08.0 +0200 +++ tasksel-3.29+nmu1/debian/changelog 2015-01-07 11:35:18.0 +0100 @@ -1,3 +1,12 @@ +tasksel (3.29+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + + * task-mate-desktop: Provide out-of-the box libreoffice accessibility +with orca by installing libreoffice-gtk. (Closes: #773763). + + -- Mike Gabriel sunwea...@debian.org Wed, 07 Jan 2015 11:34:03 +0100 + tasksel (3.29) unstable; urgency=high * Gnome only works on i386 and amd64, so default to xfce on other arches. diff -Nru tasksel-3.29/debian/control tasksel-3.29+nmu1/debian/control --- tasksel-3.29/debian/control 2014-09-24 22:19:56.0 +0200 +++ tasksel-3.29+nmu1/debian/control 2015-01-07 11:33:49.0 +0100 @@ -281,6 +281,8 @@ network-manager-gnome, # orca works with mate, adding accessability gnome-orca, +# make libreoffice accessible with orca + provide a GTK'ish design in libreoffice + libreoffice-gtk, Package: task-laptop Architecture: all pgpv5khyQc74I.pgp Description: Digitale PGP-Signatur
Bug#774710: ruby2.1: FTBFS on Wheezy
Control: severity -1 wishlist Hello Faheem, On Tue, Jan 06, 2015 at 09:36:23PM +0530, Faheem Mitha wrote: Package: ruby2.1 Version: 2.1.5-1 Severity: normal Ruby 2.1 fails to build on Wheezy, even though the build dependencies are all satisfied. See the attached file ruby2.1_2.1.5-1_amd64.build. This build log ends with: make[2]: Leaving directory `/usr/local/src/ruby2.1/ruby2.1-2.1.5' # remove RPATH from tcltklib bindings chrpath --delete /usr/local/src/ruby2.1/ruby2.1-2.1.5/debian/tmp/usr/lib/x86_64-linux-gnu/ruby/2.1.0/tcltklib.so open: No such file or directory elf_open: Invalid argument Thanks for getting in touch, but note that ruby2.1 was never meant for wheezy anyway, I won't look into this, but if you can come up with a patch to make the build work on both wheezy and jessie, I would be happy to consider it. Hint: you want to look at debian/rules. The problem is due to the build not finding the Tk stuff, because the paths to the tcl/tk libaries changed between wheezy and jessie: Specified Tcl/Tk version is [8.5, 8.5] Use ActiveTcl libraries (if available). Search tclConfig.sh (in /usr/lib/x86_64-linux-gnu/tcl8.5/tclConfig.sh) and tkConfig.sh (in /usr/lib/x86_64-linux-gnu/tk8.5/tkConfig.sh).. Fail to find [tclConfig.sh, tkConfig.sh] Use X11 libraries (or use TK_XINCLUDES/TK_XLIBSW information on tkConfig.sh). Search tcl.h. Search tk.h.Search Tcl library.Search Tk library. Warning:: cannot find Tk library. tcltklib will not be compiled (tcltklib is disabled on your Ruby. That is, Ruby/Tk will not work). Please check configure options. Can't find proper Tcl/Tk libraries. So, can't make tcltklib.so which is required by Ruby/Tk. If you have Tcl/Tk libraries on your environment, you may be able to use them with configure options (see ext/tk/README.tcltklib). At present, Tcl/Tk8.6 is not supported. Although you can try to use Tcl/Tk8.6 with configure options, it will not work correctly. I recommend you to use Tcl/Tk8.5 or 8.4. Failed to configure tk. It will not be installed. ../../.././ext/tk/tkutil/extconf.rb Failed to configure tk/tkutil. It will not be installed. ../.././ext/win32/extconf.rb -- Antonio Terceiro terce...@debian.org signature.asc Description: Digital signature
Bug#774762: try harder to find reasons for failed `lvchange -an` by looking at /proc/*/mountinfo
I'd say the best who-uses tool in this case is lsblk - it's directly a part of util-linux which is everywhere and it shows quickly the block device tree as well as mount status (it just looks at sysfs info and provides it in nice human readable form, machine readable form is also possible though for use in scripts). LVM itself already uses this tool within helper blkdeactivate script that deactivates tree of DM/LVM devices. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774764: reportbug: Add a way to send kudos to a developer directly
control: tags -1 + moreinfo Hello, On Wed, Jan 7, 2015 at 10:42 AM, Antonio Ospite a...@ao2.it wrote: the --kudos option seems to require a package name, but sometimes we want to send kudos to developers for their general work not only for one package. Maybe a way to send kudos to an @debian.org address can be added? Many activities are performed by non-DDs (ie without a debian.org mail address) so that's not a viable solution. --kudos is there just to easy the user from look up the package maintainer mail address, if you already know the mail address of the person to contact, you can just open your mail client and send a mail from there? Regards, -- Sandro Tosi (aka morph, morpheus, matrixhasu) My website: http://matrixhasu.altervista.org/ Me at Debian: http://wiki.debian.org/SandroTosi -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#738199: Fixing OVAL generation
I can give some help. I try to understand the scripts. One problem I noticed is that since the update of the DSA format (DSA-2134), we loose the part where the corrected packages are listed : --extract-- Fixed in: Debian GNU/Linux 5.0 (lenny) Source: http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.dsc Size/MD5 checksum: 1742 7eb809863e35c70e5da831ef83e5935b http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2.orig.tar.gz Size/MD5 checksum: 1220408 dbffe35a2d19840e86253c7052485ff0 http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.diff.gz Size/MD5 checksum: 38096 6e0579c82d00a84da53d06eba261a157 Architecture-independent component: http://security.debian.org/pool/updates/main/c/collectd/collectd-dev_4.4.2-3+lenny1_all.deb Size/MD5 checksum: 58100 6ab2decfb0f6d4822bd399f83acde4bf Alpha: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_alpha.deb Size/MD5 checksum: 476094 3ba6081a7bda823e51deb57e670681a6 http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_alpha.deb Size/MD5 checksum: 465310 512bcae97e48588f6f8e3c06b71b4a05 --extract-- But the script is looking for this part to build a correct OVLA definition (line 110 of the /parser/dsa.py script) With the new format this information is no longer explicitly present, and will be more difficult to extract : --extract-- More information: Yang Dingning discovered a double free in libxml's Xpath processing, which might allow the execution of arbitrary code. For the stable distribution (lenny), this problem has been fixed in version 2.6.32.dfsg-5+lenny3. For the upcoming stable distribution (squeeze) and the unstable distribution (sid), this problem has been fixed in version 2.7.8.dfsg-2. --extract-- So I see two ways : -No change to DSA format, but complex evolution to dsa.py parser that must rebuild the package name. With the following constraints : -we loose the arch part of the package that fixed the problem (what happens if a DSA impact only some arch and not others ?) - the sentence format : For the stable distribution (lenny), this problem has been fixed in version 2.6.32.dfsg-5+lenny3 must not evolve to be corrected parsed. -Evolution of the DSA format, to re-integrate somewhere (even in hidden fields) the list of the packages that fixed the problem (without MD5SUM because it was the goal of the DSA format evolution), and Minor adaptation of the parser/dsa.py script. What do you think ? Cheers, --Pierre
Bug#774765: ITP: php5-oci8 -- Extension for Oracle Database
Package: wnpp Severity: wishlist Owner: Mathieu Parent math.par...@gmail.com Package name: oci8 Version : 2.0.8 Upstream Author : Christopher Jones, Antony Dovgal, Wez Furlong, Andi Gutmans URL : http://extension/ License : PHP Programming Lang: PHP Description : Extension for Oracle Database Use the OCI8 extension to access Oracle Database. The extension can be linked with Oracle client libraries from Oracle Database 10.2, 11, or 12.1. These libraries are found in the database installation, or in the free Oracle Instant Client available from Oracle. Oracle's standard cross-version connectivity applies. For example, PHP OCI8 linked with Instant Client 11.2 can connect to Oracle Database 9.2 onward. See Oracle's note Oracle Client / Server Interoperability Support (ID 207303.1) for details. PHP OCI8 2.0 can be built with PHP 5.2 onward. Use the older PHP OCI8 1.4.10 when using PHP 4.3.9 through to PHP 5.1.x, or when only Oracle Database 9.2 client libraries are available. I'm packaging this as part of Horde5 packaging. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#755359: [kdm] systemd seem to fail to start display-manager.service
On 01/06/2015 11:58 PM, Francesco Muzio wrote: Ok, next days I try to test your solution on a most recent installation of Debian For the records: I just did a clean installation of Jessie and choose KDE as the default desktop without any other desktops or display managers installed and kdm works just as expected: root@vs76:~# systemctl status kdm.service ● kdm.service - LSB: X display manager for KDE Loaded: loaded (/etc/init.d/kdm) Drop-In: /run/systemd/generator/kdm.service.d └─50-kdm-$x-display-manager.conf Active: active (running) since Wed 2015-01-07 12:04:52 CET; 2min 16s ago Process: 544 ExecStart=/etc/init.d/kdm start (code=exited, status=0/SUCCESS) CGroup: /system.slice/kdm.service ├─777 /usr/bin/kdm -config /var/run/kdm/kdmrc └─781 /usr/bin/X :0 vt7 -br -nolisten tcp -auth /var/run/xauth/A:0-rOMLPb Jan 07 12:04:52 vs76 kdm[544]: Starting K Display Manager: kdm. Jan 07 12:04:56 vs76 kdm_greet[874]: Cannot load /usr/share/kde4/apps/kdm/faces/.default.face: No such file or directory Jan 07 12:05:13 vs76 kdm[873]: :0[873]: pam_unix(kdm:session): session opened for user glaubitz by (uid=0) root@vs76:~# Adrian -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `-GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774759: [pre-approval] unblock: ghostscript/9.06~dfsg-2
Quoting Didier 'OdyX' Raboud (2015-01-07 09:20:05) I'd like to get the patch for #732440 included in Jessie. The bug was reported three independent times and is a premature abort in Ghostscript processing. The patch that fixes that bug was included in upstream's 9.14 version and can be directly cherry-picked on top of 9.06~dfsg-1 as currently in jessie. Here goes the proposed changelog: ghostscript (9.06~dfsg-2) unstable; urgency=medium * Add patch cherry-picked upstream to fix /typecheck error in /findfont (Closes: #732440) The cherry-picked patch as well as the full debdiff are attached. Newer Ghostscript is licensed AGPL. Is that patch compatible with the more relaxed licensing of older Ghostscript? - Jonas -- * Jonas Smedegaard - idealist Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#732440: Patch is obviously not in updates.
Quoting Didier 'OdyX' Raboud (2015-01-07 08:49:03) Control: tags -1 fixed-upstream Le jeudi, 3 avril 2014, 06.52:54 Miroslav Scaldov a écrit : Patch is obviously not in updates. Sid ghostscript still crashes. Sid Evince shows a blank page. This is fixed in upstream's 9.14. I'll see with the release team if we can backport this into Jessie. Great. But what about its licensing? I guess upstream treat it as AGPL, so we may risk disagreeing with them if we choose to ignore that - e.g. by treating it as too small to be copyright-protected. - Jonas -- * Jonas Smedegaard - idealist Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#738199: 738199
Per https://lists.debian.org/debian-www/2011/10/msg00064.html, the proper way is apparently to parse DSA/list. I've only had a cursory look so far, so I'm not sure yet how much effort that requires. Cheers, --Seb -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774726: libmspack: CHM decompression: pointer arithmetic overflow
* Jakub Wilk | 2015-01-06 21:18:30 [+0100]: Two sample CHM files that trigger segfaults, which are caused by the overflows, are also attached. This bug does affect ClamAV. How do you trigger this? I tried both files with cabextract -t, clamdscan, clamscan and chmd_md5. None of those segfaulted, I saw however the message from clamscan --debug: |Scanning /home/bigeasy/crash449.chm |LibClamAV debug: in cli_magic_scandesc (reclevel: 0/16) |LibClamAV debug: Recognized MS CHM file |LibClamAV debug: cache_check: 18e5f920cca46633a9d21539c00603d2 is negative |LibClamAV debug: mspack_fmap_message() WARNING; PMGL quickref area is too large |LibClamAV debug: mspack_fmap_message() WARNING; contents are corrupt |LibClamAV debug: CDBNAME:CL_TYPE_MSCHM:0:/#IDXHDR:0:4096:0:0:0:(nil) |LibClamAV debug: cli_scanmschm() failed to extract 8 |LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0 |LibClamAV debug: cli_magic_scandesc: returning 8 at line 2327 |/home/bigeasy/crash449.chm: Can't open file or directory ERROR which seems that it noticed the invalid structure and aborted. I had however no problem reproduce the previous bug. I tried amd64 stable + unstable. Any hints? Sebastian -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774772: policyd-weight: rhsbl.ahbl.org flags all domains
Package: policyd-weight Version: 0.1.15.2-9 Severity: critical Justification: causes serious data loss Control: found -1 0.1.15.2-5+wheezy1 Hi, Per http://ahbl.org/content/last-notice-wildcarding-services-jan-1st the default policyd-weight configuration needs to change ASAP to stop including rhsbl.ahbl.org. Cheers, Julien -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774774: live image doesnt boot, kernel panic
package: live-build
severity: important
Hi,
in a jessie chroot I'm trying to build live images using the following script:
$ cat bin/live-build.sh
#!/bin/bash
# Copyright 2014-2015 Holger Levsen hol...@layer-acht.org
# released under the GPLv=2
DEBUG=false
. /srv/jenkins/bin/common-functions.sh
common_init $@
cleanup_all() {
sudo rm -rf --one-file-system $TMPDIR
}
TMPDIR=$(mktemp --tmpdir=/srv/live-build -d)
cd $TMPDIR
trap cleanup_all INT TERM EXIT
# $1 is used for the hostname and username
# $2 is used for the suite
# $3 is choosing the flavor
lb config --distribution $2 --bootappend-live boot=live config hostname=$1
username=$1
case $3 in
standalone) echo education-standalone
config/package-lists/live.list.chroot
;;
gnome) echo gnome config/package-lists/live.list.chroot
;;
xfce) echo xfce4 config/package-lists/live.list.chroot
;;
*) ;;
esac
sudo lb build
mkdir -p /srv/live-build/results
cp -v live-image-amd64.hybrid.iso
/srv/live-build/results/$1_$2_$3_live_amd64.iso
cleanup_all
trap - INT TERM EXIT
This script has successfully run, see (the non-stable url (the zzzZz will
change...)
https://jenkins.debian.net/view/zzzZz/job/live_build_debian_sid_xfce/1/consoleFull
That invocation of the script has been called using debian sid xfce as
arguments.
When I boot this image, I get a kernel panic as shown in
https://jenkins.debian.net/view/lvc/job/lvc_debian-live_debian_sid_xfce_apt/1/artifact/apt-2015-01-07T12:38:21+00:00.png
I could reproduce this kernel panic like this on a local test system too.
This .iso is temporily available at
https://jenkins.debian.net/userContent/debian_sid_xfce_live_amd64.iso (its
322mb in size)
The same happens with jessie builds...
Any help / hints welcome! I'll be glad to give more info on what I did - but
I hope I have covered everything.
Thanks for Debian live!
cheers,
Holger
signature.asc
Description: This is a digitally signed message part.
Bug#774775: libsnmp-dev: Cannot install i386 package due to conflict with perl-base
Package: libsnmp-dev Severity: important Dear Maintainer, * What led up to the situation? I tried to install the package libsnmp-dev for i386 architecture on my amd64 jessie installation. * What exactly did you do (or not do) that was effective (or ineffective)? I reinstall a version of wheezy in a virtual machine, and upgraded it to a jessie, and tried to install libsnmp-dev:i386 without installing any other packages, in order to confirm that the situation wasn't due to an other installed package, and it hadn't any effect. * What was the outcome of this action? Installation of this package failed because it requires the installation of perl-base:i386 that conflicts with perl-base. Perl base couldn't be uninstalled due to many dependencies. * What outcome did you expect instead? I was expecting developpment libraries for libsnmp and headers files to install. -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#768189: should not automatically change MAC (w/o user consent)
[Hans-Christoph Steiner] The freeze exception I put in was rejected until there are some translations of the strings. So help with getting the translations in, if you want this to happen sooner rather than later. I've never handled translations or debconf questions in a package before. Perhaps the podebconf-report-po tool from the po-debconf package can help you? It can send out requests to all translators to update the po files. -- Happy hacking Petter Reinholdtsen -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774777: unblock: designate/2014.1-16
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package designate. It contains the below changes: Minor fix: - Fixed homepage: stackforge - openstack. Debian SSLv3 removal fix: - Added a no-SSLv3.patch to remove the use of ssl.PROTOCOL_SSLv3 which is not available in Debian anymore. Init script fix: - Rebuilt against openstack-pkg-tools = 21~ (after unblocking openstack-pkg-tools version 21). - Fixed PROJECT_NAME instead of SERVICE_NAME for the init script of designate-api. Thanks to Gaudenz Steinlin. (Closes: #774383). Debdiff attached. Please unblock designate/2014.1-16. Cheers, Thomas Goirand (zigo) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#768189: should not automatically change MAC (w/o user consent)
The freeze exception I put in was rejected until there are some translations of the strings. So help with getting the translations in, if you want this to happen sooner rather than later. I've never handled translations or debconf questions in a package before. .hc signature.asc Description: OpenPGP digital signature
Bug#774598: maildrop: Maildrop package is not build with authlib support.
Hi, Reflecting our private discussion... What I mean is that the configure script that runs while building maildrop can detect if courier-authlib is install. See file maildrop-2.7.1/libs/maildrop/configure lines 16451 to 16481 OK. The build-dep line is missing courier-authlib-dev. So I was not expecting to pick it up by the build script. Can you verify this theory of bug fix after installing pbuilder configuring it: $ cd tmp $ mkdir maildrop $ cd maildrop $ apt-get source maildrop $ sudo apt-get build-dep maildrop $ cd maildrop-2.7.1 $ pdebuild $ cd /var/lib/pbuilder/results or cd .. depending on your config Do you get an unfunctioning package or working one? If you change debian/control's Build-dep to contain courier-authlib-dev Do you get working program under pbuilder? I mean to change from Build-Depends: autoconf, automake, autotools-dev, debhelper (= 9), dh-autoreconf, libgdbm-dev, libpcre3-dev, libtool, pkg-config to Build-Depends: autoconf, automake, autotools-dev, courier-authlib-dev, debhelper (= 9), dh-autoreconf, libgdbm-dev, libpcre3-dev, libtool, pkg-config If you have question on pbuilder setup, please install debmake and look into /usr/share/doc/debmake/maint-guide.html#pbuilder-setup https://people.debian.org/~osamu/maint-guide.html#pbuilder-setup Osamu -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774771: Better error handling + cleanups
Package: gdk-pixbuf
Version: 2.31.1-2
Tags: upstream patch
See patch for details. Thanks
Description: better error handling for jas_init and cleanup memory
Author: Mathieu Malaterre ma...@debian.org
--- gdk-pixbuf-2.31.1.orig/gdk-pixbuf/io-jasper.c
+++ gdk-pixbuf-2.31.1/gdk-pixbuf/io-jasper.c
@@ -52,6 +52,7 @@ free_jasper_context (struct jasper_conte
jas_stream_close (context-stream);
context-stream = NULL;
}
+ jas_image_clearfmts();
g_free (context);
}
@@ -65,7 +66,8 @@ jasper_image_begin_load (GdkPixbufModule
struct jasper_context *context;
jas_stream_t *stream;
- jas_init ();
+ if(jas_init ())
+return NULL;
stream = jas_stream_memopen (NULL, -1);
if (!stream) {
Bug#586644: Unnecessary dbus warnings
Package: printer-driver-hpcups Version: 3.12.6-3.1+deb7u1 Followup-For: Bug #586644 Dear Maintainer, I have to reraise the problem with the dbus dependency of these packages. I use a system without dbus and I am getting these errors at printing to a HP LaserJet 3055 via CUPS. This happens at every print job: Jan 7 12:17:56 flinx hpcups[21664]: prnt/hpcups/HPCupsFilter.cpp 536: cupsRasterOpen failed, fd = 0 Jan 7 12:18:07 flinx hpcups[21670]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:18:07 flinx hpcups[21670]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:18:07 flinx hpcups[21670]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:11 flinx hpcups[21670]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:11 flinx hpcups[21670]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:20 flinx hpcups[21699]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:18:20 flinx hpcups[21699]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:18:20 flinx hpcups[21699]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:23 flinx hpcups[21699]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:24 flinx hpcups[21699]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:32 flinx hpcups[21708]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:18:32 flinx hpcups[21708]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:18:32 flinx hpcups[21708]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:36 flinx hpcups[21708]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:36 flinx hpcups[21708]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:45 flinx hpcups[21718]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:18:45 flinx hpcups[21718]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:18:45 flinx hpcups[21718]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:48 flinx hpcups[21718]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:49 flinx hpcups[21718]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:18:57 flinx hpcups[21728]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:18:57 flinx hpcups[21728]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:18:57 flinx hpcups[21728]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:19:01 flinx hpcups[21728]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:19:02 flinx hpcups[21728]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:19:11 flinx hpcups[21746]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:19:11 flinx hpcups[21746]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:19:11 flinx hpcups[21746]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:19:15 flinx hpcups[21746]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:19:15 flinx hpcups[21746]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:31:31 flinx hpcups[22091]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:31:31 flinx hpcups[22091]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:31:31 flinx hpcups[22091]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Jan 7 12:33:22 flinx hpcups[22180]: prnt/hpcups/dbuscomm.cpp 66: Error: dBus Connection Error (Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory)! Jan 7 12:33:22 flinx hpcups[22180]: prnt/hpcups/dbuscomm.cpp 72: Error: dBus Connection Error ((null))! Jan 7 12:33:22 flinx hpcups[22180]: prnt/hpcups/HPCupsFilter.cpp 697: First raster data plane.. Kind Regards -- Package-specific info: /usr/share/bug/printer-driver-hpcups/script: line 6: /usr/bin/hp-check: No such file or directory -- System Information: Debian Release: 7.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable')
Bug#774710: ruby2.1: FTBFS on Wheezy
Hi Antonion, See at bottom. On Wed, 7 Jan 2015, Antonio Terceiro wrote: Control: severity -1 wishlist Hello Faheem, On Tue, Jan 06, 2015 at 09:36:23PM +0530, Faheem Mitha wrote: Package: ruby2.1 Version: 2.1.5-1 Severity: normal Ruby 2.1 fails to build on Wheezy, even though the build dependencies are all satisfied. See the attached file ruby2.1_2.1.5-1_amd64.build. This build log ends with: make[2]: Leaving directory `/usr/local/src/ruby2.1/ruby2.1-2.1.5' # remove RPATH from tcltklib bindings chrpath --delete /usr/local/src/ruby2.1/ruby2.1-2.1.5/debian/tmp/usr/lib/x86_64-linux-gnu/ruby/2.1.0/tcltklib.so open: No such file or directory elf_open: Invalid argument Thanks for getting in touch, but note that ruby2.1 was never meant for wheezy anyway, I won't look into this, but if you can come up with a patch to make the build work on both wheezy and jessie, I would be happy to consider it. Hint: you want to look at debian/rules. The problem is due to the build not finding the Tk stuff, because the paths to the tcl/tk libaries changed between wheezy and jessie: Specified Tcl/Tk version is [8.5, 8.5] Use ActiveTcl libraries (if available). Search tclConfig.sh (in /usr/lib/x86_64-linux-gnu/tcl8.5/tclConfig.sh) and tkConfig.sh (in /usr/lib/x86_64-linux-gnu/tk8.5/tkConfig.sh).. Fail to find [tclConfig.sh, tkConfig.sh] Use X11 libraries (or use TK_XINCLUDES/TK_XLIBSW information on tkConfig.sh). Search tcl.h. Search tk.h.Search Tcl library.Search Tk library. Warning:: cannot find Tk library. tcltklib will not be compiled (tcltklib is disabled on your Ruby. That is, Ruby/Tk will not work). Please check configure options. Can't find proper Tcl/Tk libraries. So, can't make tcltklib.so which is required by Ruby/Tk. If you have Tcl/Tk libraries on your environment, you may be able to use them with configure options (see ext/tk/README.tcltklib). At present, Tcl/Tk8.6 is not supported. Although you can try to use Tcl/Tk8.6 with configure options, it will not work correctly. I recommend you to use Tcl/Tk8.5 or 8.4. Failed to configure tk. It will not be installed. ../../.././ext/tk/tkutil/extconf.rb Failed to configure tk/tkutil. It will not be installed. ../.././ext/win32/extconf.rb I might take a look at this bug later. I don't have time right now. If so, I'll follow up here. I'm sort of interested in learning more about autorools, and it looks like an autotools issue. But maybe I'm mistaken. As it happens, I'm not a Ruby user. :-) I happened across this build failure when trying to answer a SE (unix.stackexchange.com) question. Thanks for the fast reply. Regards, Faheem -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774773: wheezy-pu: package policyd-weight/policyd-weight/0.1.15.2-5+wheezy2
On Wed, Jan 7, 2015 at 14:20:44 +0100, Werner Detter wrote: Package: release.debian.org Severity: important Tags: wheezy User: release.debian@packages.debian.org Usertags: pu Dear Maintainer, policyd-weight uses the abusive hosts blocking list which has been shutdown on january 1st, more information can be found on the website of the dnsbl: http://www.ahbl.org/content/last-notice-wildcarding-services-jan-1st The list now replies which a positive response which may lead to false positives. I hereby ask someone to upload/confirm the package. The package for unstable has already been uploaded. I've recreated the package for stable with the patch applied and uploaded the package also to mentors.debian.net - debdiff is found under [1] Thanks for the quick reaction. diff -Nru policyd-weight-0.1.15.2/debian/changelog policyd-weight-0.1.15.2/debian/changelog --- policyd-weight-0.1.15.2/debian/changelog 2014-03-15 13:24:45.0 +0100 +++ policyd-weight-0.1.15.2/debian/changelog 2015-01-07 07:56:59.0 +0100 @@ -1,3 +1,11 @@ +policyd-weight (0.1.15.2-5+wheezy2) unstable; urgency=low s/unstable/wheezy/ + + * Add 10_del_rhsbl.ahbl.org.patch which removes rhsbl.ahbl.org list due +to service shutdown + + -- Werner Detter wer...@aloah-from-hell.de Wed, 7 Jan 2015 07:30:14 +0100 + + policyd-weight (0.1.15.2-5+wheezy1) wheezy; urgency=low * Add 09_fix_net_dns_usage.patch which fixes infinite loop when dns resolver diff -Nru policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch --- policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch 1970-01-01 01:00:00.0 +0100 +++ policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch 2015-01-07 07:55:16.0 +0100 @@ -0,0 +1,15 @@ +Description: removes RHSBL rhsbl.ahbl.org from policyd-weight source +Author: Werner Detter wer...@aloah-from-hell.de +DEP: 3 +--- a/policyd-weight b/policyd-weight +@@ -389,8 +389,7 @@ + + ## RHSBL settings + my @rhsbl_score = ( +-'multi.surbl.org', 4,0,'SURBL', +-'rhsbl.ahbl.org', 4,0,'AHBL' ++'multi.surbl.org', 4,0,'SURBL' + ); + + my $BL_ERROR_SKIP = 2; # skip a RBL if this RBL had this many continuous diff -Nru policyd-weight-0.1.15.2/debian/patches/series policyd-weight-0.1.15.2/debian/patches/series --- policyd-weight-0.1.15.2/debian/patches/series 2014-03-15 13:26:31.0 +0100 +++ policyd-weight-0.1.15.2/debian/patches/series 2015-01-07 07:54:13.0 +0100 @@ -7,3 +7,4 @@ 07_del_rfc-ignorant.org.patch 08_del_dnsbl.njabl.org.patch 09_fix_net_dns_usage.patch +10_del_rhsbl.ahbl.org.patch You might also want to update the manpage? Cheers, Julien -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774769: [lftp] saves unknown host's fingerprint in known_hosts without any prompt
Package: lftp
Version: 4.6.0-1
Severity: normal
Tags: security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org
From the src/SSH_Access.cc file:
47: const char *y=(yes/no)?;
73: if(s=y_len !strncasecmp(b+s-y_len,y,y_len))
74: {
75: pty_recv_buf-Put(yes\n);
76: pty_send_buf-Put(yes\n);
77: return m;
78: }
Not only does it make a particular SFTP file transfer insecure, but also
any future connection via any SSH client.
After enabling debug (the yes answer generated automatically):
#v+
$ lftp sftp://mszewczyk@localhost:22203
Password:
lftp mszewczyk@localhost:~ debug
lftp mszewczyk@localhost:~ ls
Running connect program (ssh -a -x -s -l mszewczyk -p 22203 localhost sftp)
--- sending a packet, length=5, type=1(INIT), id=0
--- The authenticity of host '[localhost]:22203 ([::1]:22203)' can't be
established.
--- RSA key fingerprint is 84:a2:ec:3d:98:1e:95:e6:e4:68:d9:a4:31:92:f7:8d.
--- Are you sure you want to continue connecting (yes/no)? yes
---
--- Warning: Permanently added '[localhost]:22203' (RSA) to the list of known
hosts.
#v-
--- System information. ---
Architecture: amd64
Kernel: Linux 3.16.0-4-amd64
Debian Release: 8.0
500 testing security.debian.org
500 testing ftp.pl.debian.org
500 stable security.debian.org
500 stable ftp.pl.debian.org
--- Package information. ---
Depends (Version) | Installed
===-+-==
libc6 (= 2.17) |
libgcc1(= 1:4.1.1) |
libgnutls-deb0-28 (= 3.2.10-0) |
libreadline6 (= 6.0) |
libstdc++6 (= 4.1.1) |
libtinfo5 |
zlib1g (= 1:1.1.4) |
netbase |
Package's Recommends field is empty.
Package's Suggests field is empty.
--
Marcin Szewczyk http://wodny.org
mailto:marcin.szewc...@wodny.borg - remove b / usuń b
xmpp:wo...@ubuntu.pl xmpp:wo...@jabster.pl
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#742048: systemd-remount-fs.service fails for split-usr
control: tags -1 + patch
Am 06.01.2015 um 10:37 schrieb Michael Biebl:
Am 06.01.2015 um 08:23 schrieb Martin Pitt:
Also, I think there is a simpler way to check if a dir is a
mountpoint: s1 = stat(dir), s2 = stat(parent(dir))
(i. e. dir + /..), and check
is_mount = (st.st_dev != st2.st_dev) ||
(st.st_dev == st2.st_dev st.st_ino == st2.st_ino);
.. this seems simpler indeed. So let's just use that. Thanks for the hint!
That's the approach that /bin/mountpoint uses, and it avoids relying
on having /etc/mtab, /proc mounted, and doing the iteration.
Updated patch attached (tested with a split-usr setup and with both
initramfs-tools 0.116 and 0.118)
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
diff --git a/src/remount-fs/remount-fs.c b/src/remount-fs/remount-fs.c
index 847637a..82a1596 100644
--- a/src/remount-fs/remount-fs.c
+++ b/src/remount-fs/remount-fs.c
@@ -34,6 +34,32 @@
#include mount-setup.h
#include exit-status.h
+static bool is_mounted(const char *dev_path) {
+_cleanup_free_ char *parent_path = NULL;
+struct stat st, pst;
+int r;
+
+parent_path = strjoin(dev_path, /.., NULL);
+
+r = stat(dev_path, st);
+if (r 0)
+return false;
+
+r = stat(parent_path, pst);
+if (r 0)
+return false;
+
+/*
+ * This code to check if a given path is a mountpoint is
+ * borrowed from util-linux' mountpoint tool.
+ */
+if ((st.st_dev != pst.st_dev) ||
+(st.st_dev == pst.st_dev st.st_ino == pst.st_ino))
+return true;
+
+return false;
+}
+
/* Goes through /etc/fstab and remounts all API file systems, applying
* options that are in /etc/fstab that systemd might not have
* respected */
@@ -83,6 +109,11 @@ int main(int argc, char *argv[]) {
!path_equal(me-mnt_dir, /usr))
continue;
+/* Skip /usr if it hasn't been mounted by the initrd */
+if (path_equal(me-mnt_dir, /usr)
+!is_mounted(/usr))
+continue;
+
log_debug(Remounting %s, me-mnt_dir);
pid = fork();
signature.asc
Description: OpenPGP digital signature
Bug#718175: license issues
There are annoying license issues with using the docs from developer.google.com. They are under a CC-BY 2.5 license, which is not DFSG-compatible: https://wiki.debian.org/DFSGLicenses So those docs would have to be distrubuted in non-free, not main, so therefore they'll have to be in a separate package. .hc signature.asc Description: OpenPGP digital signature
Bug#774770: python-gnupg: 0.3.7 is out, please package the new version so openpgpkey (src:hash-slinger) starts to work
Package: python-gnupg Version: 0.3.6-1 Severity: wishlist -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, please package python-gnupg, so src:hash-slinger openpgpkey finally starts to work. Thanks, Ondrej - -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (990, 'testing'), (700, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages python-gnupg depends on: ii gnupg 1.4.18-6 ii python 2.7.8-2 python-gnupg recommends no packages. python-gnupg suggests no packages. - -- no debconf information -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQJ8BAEBCgBmBQJUrR7DXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzMEI5MzNEODBGQ0UzRDk4MUEyRDM4RkIw Qzk5QjcwRUY0RkNCQjA3AAoJEAyZtw70/LsHHi4P/3qd8eo2WS29RfDhjQ5HCfGm jKwQLNTx7/Gfc4YYyWaOQ4x90tic/suA+pEUdq30krjgn7NGOHskPexyODyf9vrr ssKJCJnejhpnUPYDfzjbsOo9WPYr+1MO8APjYKAwJV3AIUpEQ+ewKyRxxO6otMZv J51qiaoRlpb+fW7Jq+Ll1nk8XRX5pYenY/XqUXKK7QVIRwHp/yUXrm2HOcsKOLGj nAUswt0Jz/YuVZQ6wZH+PIkc8hXX4AfVIf7lWhYCTcuTv8GFye4Hm01CUfX/a/Oo hDskaRQXuLvHUvBBr5T9SGLXaYWrDKYM5uoGM9sn/GrpZha3R2TK6m605kAxWLXK 5Yf5yb69wWMRQ6ZK9ow7TMa/EVFgANvVVsmoZEaMFI+Bif0W/fTUOdxXh4RwkWkq 3P9A0BPxtqYJWyrqaBWiwz8rFOBOHqv/dsgu4AjrP+6jFayGhnrJ6opb4EXtqO5v bII/APwogzhF30uAV7ugOC+Sa1435H3DwhS+5TJnN8jHrmFsUF69HsRUkHn49017 uYYb6hBo3RO3JayBf7haKWvVb1n2713c4uh8HbvRGNbzVfR4oZKfJJUbNZAmMlv+ aprET8vY/QQBMTYLIdYd73TO4GZQG5TOuqJz7hr4ASTbwJRX6RcFjH0iahmn39cZ +rhFYKOhfv6o33GauOLq =2YDv -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774770: python-gnupg: 0.3.7 is out, please package the new version so openpgpkey (src:hash-slinger) starts to work
On 2015-01-07 at 12:55:51 +0100, Ondřej Surý wrote: please package python-gnupg, so src:hash-slinger openpgpkey finally starts to work. I know about the new release Would an upload to experimental help? I'm not touching the version in unstable during the freeze (in case it needs to be done for RC bugs), so I was wondering whether to prepare an updated package for experimental or just wait for the release so that the update can go directly to sid. -- Elena ``of Valhalla'' -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774753: sponsorship-requests: RFS - pu policyd-weight/0.1.15.2-5+wheezy2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Sebastian, Let's start with the upload to unstable. Could you please close #774772 in the changelog? I'd prefer closing this report by hand as I've created the packages already this morning. Has the stable upload been coordinated with the release team? I'll take care. Thanks, Werner -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJUrS/rAAoJECrSoAS/sh/hpckH/0058O27QgSlDOE3ni9+tydH 9iU8aULqYpVqEuJIyKidjOG7+LJnUmWPKzSFr4dRHAEvmSAKezfd0u2mnJ4ER+A8 qzUQlMJowimOsUVP1s+1fvJ0uwTLfF7+NU+0zKkBk55ytrcLbNa1eo4RDUXW46ii M3R5xxV4p4Eu6cSscGc0IUp80qe0APoT08JsKG3i74v4aHwX1PfODzHyUOaqDzRb 2G/MdTsuxdyUNrAPnwZPzZr4eSY++4PQiRTCGUHSLHuKnaaTLfQhIFwMQOj3sjQf eEubBwzb8u1u8KZt/9lXeVnZarKXHjbJkFDZdqpyZ+JNhkMLRTmmczjzypL8tK8= =swt4 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774773: wheezy-pu: package policyd-weight/policyd-weight/0.1.15.2-5+wheezy2
Package: release.debian.org Severity: important Tags: wheezy User: release.debian@packages.debian.org Usertags: pu Dear Maintainer, policyd-weight uses the abusive hosts blocking list which has been shutdown on january 1st, more information can be found on the website of the dnsbl: http://www.ahbl.org/content/last-notice-wildcarding-services-jan-1st The list now replies which a positive response which may lead to false positives. I hereby ask someone to upload/confirm the package. The package for unstable has already been uploaded. I've recreated the package for stable with the patch applied and uploaded the package also to mentors.debian.net - debdiff is found under [1] * Package name: policyd-weight Version : policyd-weight/0.1.15.2-5+wheezy2 Upstream Author : Robert Felber * URL : www.policyd-weight.org * License : GPL-2+ Section : mail The URL of your package is: http://mentors.debian.net/package/policyd-weight The respective dsc file can be found at: http://mentors.debian.net/debian/pool/main/p/policyd-weight/policyd-weight_0.1.15.2-5+wheezy2.dsc Thanks, Werner Detter [1] debdiff diff -Nru policyd-weight-0.1.15.2/debian/changelog policyd-weight-0.1.15.2/debian/changelog --- policyd-weight-0.1.15.2/debian/changelog2014-03-15 13:24:45.0 +0100 +++ policyd-weight-0.1.15.2/debian/changelog2015-01-07 07:56:59.0 +0100 @@ -1,3 +1,11 @@ +policyd-weight (0.1.15.2-5+wheezy2) unstable; urgency=low + + * Add 10_del_rhsbl.ahbl.org.patch which removes rhsbl.ahbl.org list due +to service shutdown + + -- Werner Detter wer...@aloah-from-hell.de Wed, 7 Jan 2015 07:30:14 +0100 + + policyd-weight (0.1.15.2-5+wheezy1) wheezy; urgency=low * Add 09_fix_net_dns_usage.patch which fixes infinite loop when dns resolver diff -Nru policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch --- policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch 1970-01-01 01:00:00.0 +0100 +++ policyd-weight-0.1.15.2/debian/patches/10_del_rhsbl.ahbl.org.patch 2015-01-07 07:55:16.0 +0100 @@ -0,0 +1,15 @@ +Description: removes RHSBL rhsbl.ahbl.org from policyd-weight source +Author: Werner Detter wer...@aloah-from-hell.de +DEP: 3 +--- a/policyd-weight b/policyd-weight +@@ -389,8 +389,7 @@ + + ## RHSBL settings + my @rhsbl_score = ( +-'multi.surbl.org', 4,0,'SURBL', +-'rhsbl.ahbl.org', 4,0,'AHBL' ++'multi.surbl.org', 4,0,'SURBL' + ); + + my $BL_ERROR_SKIP = 2; # skip a RBL if this RBL had this many continuous diff -Nru policyd-weight-0.1.15.2/debian/patches/series policyd-weight-0.1.15.2/debian/patches/series --- policyd-weight-0.1.15.2/debian/patches/series 2014-03-15 13:26:31.0 +0100 +++ policyd-weight-0.1.15.2/debian/patches/series 2015-01-07 07:54:13.0 +0100 @@ -7,3 +7,4 @@ 07_del_rfc-ignorant.org.patch 08_del_dnsbl.njabl.org.patch 09_fix_net_dns_usage.patch +10_del_rhsbl.ahbl.org.patch -- System Information: Debian Release: 8.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#675788: [buildd-tools-devel] Bug#675788: Additional info
On Tue, Jan 06, 2015 at 05:44:34PM +, Martín Ferrari wrote: The problem now is that schroot does not seem to have any way to tell it to mount directories based on environment variables.. I don't know the code to suggest a workaround, but maybe one option would be to add a configuration value that enables automatic mounting of the user's XDG_* directories? Such logic isn't built in to schroot. But it's easy to add support using a custom setup script. It can look at the environment and ensure that XDG_XXX_DIR is bind mounted into the chroot. This should probably be done by default for the desktop profile if it's set. However, this type of thing is going to be fraught with problems due to the way systemd deletes the directory when the session ends, since a schroot session can persist for much longer. XDG_XXX_DIR is quite poorly-specified and it's likely we won't be able to do a good job of supporting it. That said, any improvements, even if imperfect, would be welcome. Regards, Roger -- .''`. Roger Leigh : :' : Debian GNU/Linuxhttp://people.debian.org/~rleigh/ `. `' schroot and sbuild http://alioth.debian.org/projects/buildd-tools `-GPG Public Key F33D 281D 470A B443 6756 147C 07B3 C8BC 4083 E800 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774760: quagga: Support linux kernel 3.14 (CVE-2014-0181 netlink fix)
Hallo Teodor As I'm no big fan of backporting individual patches except for important security fixes so I would upload a 0.99.23 backport to wheezy-backports at most. Given that Debian 8.0 jessie with Quagga 0.99.23 and Linux 3.16 will release in about a month (or so *g*) I'm not sure if it's worth the work to release a backport for Wheezy . Best regards, -christian- Am Wed, 07 Jan 2015 10:57:53 +0200 schrieb Teodor Milkov zim...@icdsoft.com: Package: quagga Version: 0.99.22.4-1+wheezy1 Severity: wishlist Dear Maintainer, Quagga 0.9.22 no longer works with recent kernels due to security fix for CVE-2014-0181: http://www.spinics.net/lists/netdev/msg280198.html zebra can't insert routing entries with the following error: zebra[2726]: netlink-cmd error: Operation not permitted, type=RTM_NEWROUTE(24), seq=82, pid=0 This shouldn't be a issue if using Debian's 3.2 kernel, but still it'd be nice if we could enjoy latest kernel's improvements. Fix seems trivial as per: https://github.com/opensourcerouting/quagga/commit/8e998b1eb5fea53f2a2eddd9f7f2b8ab004406f3 Best regards, Teodor -- System Information: Debian Release: 7.7 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (x86_64) Kernel: Linux 3.2.65-grsec (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages quagga depends on: ii adduser3.113+nmu3 ii debconf [debconf-2.0] 1.5.49 ii iproute20120521-3+b3 ii libc6 2.13-38+deb7u6 ii libcap21:2.22-1.2 ii libpam0g 1.1.3-7.1 ii libreadline6 6.2+dfsg-0.1 ii libtinfo5 5.9-10 ii logrotate 3.8.1-4 quagga recommends no packages. Versions of packages quagga suggests: ii snmpd 5.4.3~dfsg-2.8+deb7u1 -- Configuration Files: /etc/quagga/daemons changed [not included] -- debconf information excluded -- Content Delivery Server Dienste _ NETCOLOGNE Gesellschaft für Telekommunikation mbH Am Coloneum 9 | 50829 Köln Tel: 0221 -8711 | Fax: 0221 -78711 www.netcologne.de Geschäftsführer: Jost Hermanns Mario Wilhelm Vorsitzender des Aufsichtsrates: Dr. Andreas Cerbe HRB 25580, AG Köln Diese Nachricht (inklusive aller Anhänge) ist vertraulich. Sollten Sie diese Nachricht versehentlich erhalten haben, bitten wir, den Absender (durch Antwort-E-Mail) hiervon unverzüglich zu informieren und die Nachricht zu löschen. Die E-Mail darf in diesem Fall weder vervielfältigt noch in anderer Weise verwendet werden. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774753: sponsorship-requests: RFS - pu policyd-weight/0.1.15.2-5+wheezy2
Hi Werner On 2015-01-07 08:13:48, Werner Detter wrote: Package: sponsorship-requests Severity: important Dear Maintainer, policyd-weight uses the abusive hosts blocking list which has been shutdown on january 1st, more information can be found on the website of the dnsbl: http://www.ahbl.org/content/last-notice-wildcarding-services-jan-1st The list now replies which a positive response which may lead to false positives. I hereby ask for someone to upload this package to stable? I've already recreated the package for unstable and uploaded it to mentors. Meanwhile I've backported the patch for stable. A debdiff can be found here [1] Let's start with the upload to unstable. Could you please close #774772 in the changelog? Has the stable upload been coordinated with the release team? Cheers -- Sebastian Ramacher signature.asc Description: Digital signature
Bug#774776: unblock: nova/2014.1.3-8, neutron/2014.1.3-9, glance/2014.1.3-7
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi, This is a follow-up after unblocking openstack-pkg-tools version 21. I have rebuilt all OpenStack packages, and nova, neutron and glance only contains the build-depends change (debdiff attached for all of them 3). I'm sending separate unblock requests for designate, heat, keystone and openstack-trove as they contain other changes, as per the recommendation of Ivo De Decker. Please unblock: - nova/2014.1.3-8 - neutron/2014.1.3-9 - glance/2014.1.3-7 Cheers, Thomas Goirand (zigo) diff -Nru neutron-2014.1.3/debian/changelog neutron-2014.1.3/debian/changelog --- neutron-2014.1.3/debian/changelog 2014-12-18 12:39:54.0 + +++ neutron-2014.1.3/debian/changelog 2015-01-06 21:40:25.0 + @@ -1,3 +1,10 @@ +neutron (2014.1.3-9) unstable; urgency=medium + + * Build-depends on openstack-pkg-tools (= 21~) to ensure we have the sysv-rc +fixes. + + -- Thomas Goirand z...@debian.org Tue, 06 Jan 2015 21:39:14 + + neutron (2014.1.3-8) unstable; urgency=medium * Only use dbconfig-common and change the connection directive if the user diff -Nru neutron-2014.1.3/debian/control neutron-2014.1.3/debian/control --- neutron-2014.1.3/debian/control 2014-12-18 12:39:54.0 + +++ neutron-2014.1.3/debian/control 2015-01-06 21:40:25.0 + @@ -7,7 +7,7 @@ Mehdi Abaakouk sil...@sileht.net Build-Depends: debhelper (= 9), dh-systemd, - openstack-pkg-tools (= 20~), + openstack-pkg-tools (= 21~), po-debconf, python-all (= 2.6), python-pbr (= 0.6), diff -Nru glance-2014.1.3/debian/changelog glance-2014.1.3/debian/changelog --- glance-2014.1.3/debian/changelog 2014-12-25 09:29:14.0 + +++ glance-2014.1.3/debian/changelog 2015-01-05 21:57:57.0 + @@ -1,3 +1,10 @@ +glance (2014.1.3-7) unstable; urgency=medium + + * Build-depends on openstack-pkg-tools (= 21~) to ensure we have the +sysv-rc fixes. + + -- Thomas Goirand z...@debian.org Mon, 05 Jan 2015 21:57:15 + + glance (2014.1.3-6) unstable; urgency=high * Added restrict_client_download_and_delete_files_in_glance-api_juno.patch diff -Nru glance-2014.1.3/debian/control glance-2014.1.3/debian/control --- glance-2014.1.3/debian/control 2014-12-25 09:29:14.0 + +++ glance-2014.1.3/debian/control 2015-01-05 21:57:57.0 + @@ -5,7 +5,7 @@ Uploaders: Thomas Goirand z...@debian.org Build-Depends: debhelper (= 9), dh-systemd, - openstack-pkg-tools (= 20~), + openstack-pkg-tools (= 21~), po-debconf, python-all (= 2.6.6-3~), python-pbr (= 0.6), diff -Nru nova-2014.1.3/debian/changelog nova-2014.1.3/debian/changelog --- nova-2014.1.3/debian/changelog 2014-12-30 22:45:51.0 + +++ nova-2014.1.3/debian/changelog 2015-01-06 22:09:56.0 + @@ -1,3 +1,9 @@ +nova (2014.1.3-8) unstable; urgency=medium + + * Rebuilt with openstack-pkg-tools (= 21~). + + -- Thomas Goirand z...@debian.org Tue, 06 Jan 2015 22:09:21 + + nova (2014.1.3-7.1) unstable; urgency=medium * Non-maintainer upload. diff -Nru nova-2014.1.3/debian/control nova-2014.1.3/debian/control --- nova-2014.1.3/debian/control 2014-12-30 22:36:11.0 + +++ nova-2014.1.3/debian/control 2015-01-06 22:09:56.0 + @@ -9,7 +9,7 @@ gustavo panizzo g...@zumbi.com.ar Build-Depends: debhelper (= 9), dh-systemd, - openstack-pkg-tools (= 20~), + openstack-pkg-tools (= 21~), po-debconf, python-all (= 2.6.6-3~), python-pbr (= 0.6),
Bug#774645: libevent: CVE-2014-6272: potential heap overflow in buffer/bufferevent APIs
Control: tags -1 + patch
Hi Anibal,
Please find attached debdiff for unstable. I have *not* uploaded it to
any delayed queue so far. Are you working on th update yourself?
Regards,
Salvatore
diff -Nru libevent-2.0.21-stable/debian/changelog
libevent-2.0.21-stable/debian/changelog
--- libevent-2.0.21-stable/debian/changelog 2014-08-25 18:04:19.0
+0200
+++ libevent-2.0.21-stable/debian/changelog 2015-01-07 13:03:24.0
+0100
@@ -1,3 +1,12 @@
+libevent (2.0.21-stable-1.2) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Add 0001-Fix-CVE-2014-6272-in-Libevent-2.0.patch.
+CVE-2014-6272: potential heap overflow in buffer/bufferevent APIs
+(Closes: #774645)
+
+ -- Salvatore Bonaccorso car...@debian.org Wed, 07 Jan 2015 12:43:40 +0100
+
libevent (2.0.21-stable-1.1) unstable; urgency=low
* Non-maintainer upload.
diff -Nru
libevent-2.0.21-stable/debian/patches/0001-Fix-CVE-2014-6272-in-Libevent-2.0.patch
libevent-2.0.21-stable/debian/patches/0001-Fix-CVE-2014-6272-in-Libevent-2.0.patch
---
libevent-2.0.21-stable/debian/patches/0001-Fix-CVE-2014-6272-in-Libevent-2.0.patch
1970-01-01 01:00:00.0 +0100
+++
libevent-2.0.21-stable/debian/patches/0001-Fix-CVE-2014-6272-in-Libevent-2.0.patch
2015-01-07 13:03:24.0 +0100
@@ -0,0 +1,265 @@
+From 20d6d4458bee5d88bda1511c225c25b2d3198d6c Mon Sep 17 00:00:00 2001
+From: Nick Mathewson ni...@torproject.org
+Date: Mon, 5 Jan 2015 08:42:32 -0500
+Subject: [PATCH] Fix CVE-2014-6272 in Libevent 2.0
+
+For this fix, we need to make sure that passing too-large inputs to
+the evbuffer functions can't make us do bad things with the heap.
+
+Also, lower the maximum chunk size to the lower of off_t, size_t maximum.
+
+This is necessary since otherwise we could get into an infinite loop
+if we make a chunk that 'misalign' cannot index into.
+---
+
+--- a/buffer.c
b/buffer.c
+@@ -157,12 +157,20 @@ evbuffer_chain_new(size_t size)
+ struct evbuffer_chain *chain;
+ size_t to_alloc;
+
++ if (size EVBUFFER_CHAIN_MAX - EVBUFFER_CHAIN_SIZE)
++ return (NULL);
++
+ size += EVBUFFER_CHAIN_SIZE;
+
+ /* get the next largest memory that can hold the buffer */
+- to_alloc = MIN_BUFFER_SIZE;
+- while (to_alloc size)
+- to_alloc = 1;
++ if (size EVBUFFER_CHAIN_MAX / 2) {
++ to_alloc = MIN_BUFFER_SIZE;
++ while (to_alloc size) {
++ to_alloc = 1;
++ }
++ } else {
++ to_alloc = size;
++ }
+
+ /* we get everything in one chunk */
+ if ((chain = mm_malloc(to_alloc)) == NULL)
+@@ -1002,6 +1010,7 @@ evbuffer_drain(struct evbuffer *buf, size_t len)
+
+ buf-first = chain;
+ if (chain) {
++ EVUTIL_ASSERT(remaining = chain-off);
+ chain-misalign += remaining;
+ chain-off -= remaining;
+ }
+@@ -1068,6 +1077,7 @@ evbuffer_copyout(struct evbuffer *buf, void *data_out,
size_t datlen)
+
+ if (datlen) {
+ EVUTIL_ASSERT(chain);
++ EVUTIL_ASSERT(datlen = chain-off);
+ memcpy(data, chain-buffer + chain-misalign, datlen);
+ }
+
+@@ -1543,6 +1553,10 @@ evbuffer_add(struct evbuffer *buf, const void *data_in,
size_t datlen)
+ if (buf-freeze_end) {
+ goto done;
+ }
++ /* Prevent buf-total_len overflow */
++ if (datlen EV_SIZE_MAX - buf-total_len) {
++ goto done;
++ }
+
+ chain = buf-last;
+
+@@ -1556,7 +1570,10 @@ evbuffer_add(struct evbuffer *buf, const void *data_in,
size_t datlen)
+ }
+
+ if ((chain-flags EVBUFFER_IMMUTABLE) == 0) {
+- remain = (size_t)(chain-buffer_len - chain-misalign -
chain-off);
++ /* Always true for mutable buffers */
++ EVUTIL_ASSERT(chain-misalign = 0
++ (ev_uint64_t)chain-misalign = EVBUFFER_CHAIN_MAX);
++ remain = chain-buffer_len - (size_t)chain-misalign -
chain-off;
+ if (remain = datlen) {
+ /* there's enough space to hold all the data in the
+* current last chain */
+@@ -1627,6 +1644,9 @@ evbuffer_prepend(struct evbuffer *buf, const void *data,
size_t datlen)
+ if (buf-freeze_start) {
+ goto done;
+ }
++ if (datlen EV_SIZE_MAX - buf-total_len) {
++ goto done;
++ }
+
+ chain = buf-first;
+
+@@ -1639,6 +1659,10 @@ evbuffer_prepend(struct evbuffer *buf, const void
*data, size_t datlen)
+
+ /* we cannot touch immutable buffers */
+ if ((chain-flags EVBUFFER_IMMUTABLE) == 0) {
++ /* Always true for mutable buffers */
++ EVUTIL_ASSERT(chain-misalign = 0
++ (ev_uint64_t)chain-misalign = EVBUFFER_CHAIN_MAX);
++
+ /* If this chain is empty,
Bug#774645: libevent: CVE-2014-6272: potential heap overflow in buffer/bufferevent APIs
Hi Anibal, On Wed, Jan 07, 2015 at 11:18:15PM +1100, Aníbal Monsalve Salazar wrote: On Wed, 2015-01-07 13:10:51 +0100, Salvatore Bonaccorso wrote: Please find attached debdiff for unstable. I have *not* uploaded it to any delayed queue so far. Are you working on the update yourself? Hello Salvatore, I'm about to upload a package with the fix. Before the upload, I'll compare my debdiff with yours. Ok, that is great, thank you! Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774778: unblock: keystone/2014.1.3-5
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package keystone. It contains the below fixes: * Fix cron job to not error after package removal (Closes: #773494), by checking if keystone-manage is available in /usr/bin and executable. * Rebuild against openstack-pkg-tools = 21~ to fix sysv-rc script. Please unblock keystone/2014.1.3-5. Cheers, Thomas Goirand (zigo) diff -Nru keystone-2014.1.3/debian/changelog keystone-2014.1.3/debian/changelog --- keystone-2014.1.3/debian/changelog 2014-12-18 11:07:23.0 + +++ keystone-2014.1.3/debian/changelog 2015-01-06 20:27:39.0 + @@ -1,3 +1,10 @@ +keystone (2014.1.3-5) unstable; urgency=medium + + * Fix cron job to not error after package removal (Closes: #773494). + * Rebuild against openstack-pkg-tools = 21~ to fix sysv-rc script. + + -- Thomas Goirand z...@debian.org Tue, 06 Jan 2015 20:23:24 + + keystone (2014.1.3-4) unstable; urgency=medium * Manually activates keystone.service since we're not using #DEBHELPER#. diff -Nru keystone-2014.1.3/debian/control keystone-2014.1.3/debian/control --- keystone-2014.1.3/debian/control 2014-12-18 11:07:23.0 + +++ keystone-2014.1.3/debian/control 2015-01-06 20:27:39.0 + @@ -7,7 +7,7 @@ Mehdi Abaakouk sil...@sileht.net Build-Depends: debhelper (= 9), dh-systemd, - openstack-pkg-tools (= 20~), + openstack-pkg-tools (= 21~), po-debconf, python-all (= 2.6.6-3~), python-pbr (= 0.6), diff -Nru keystone-2014.1.3/debian/keystone.cron.hourly keystone-2014.1.3/debian/keystone.cron.hourly --- keystone-2014.1.3/debian/keystone.cron.hourly 2014-12-18 11:07:23.0 + +++ keystone-2014.1.3/debian/keystone.cron.hourly 2015-01-06 20:27:39.0 + @@ -2,4 +2,6 @@ set -e -su -c '/usr/bin/keystone-manage token_flush /var/log/keystone/keystone-tokenflush.log 21' keystone +if [ -x /usr/bin/keystone-manage ] ; then + su -c '/usr/bin/keystone-manage token_flush /var/log/keystone/keystone-tokenflush.log 21' keystone +fi
Bug#773805: liblucene4-java: Incomplete poms installed in /usr/share/maven-repo
On 12/23/2014 08:55 PM, Hilko Bengen wrote: * Emmanuel Bourg: Package: liblucene4-java Version: 1:4.6.1+dfsg-2 Severity: serious The liblucene4-java package installs dummy pom.xml files in /usr/share/maven-repo which are missing important information to be usable by other packages. Emmanuel, thank you for finding and reporting the problem. I cannot fix and upload this at the moment. So, I'd be grateful if you (or anyone else) could make an upload to fix this, Hello Hilko, Emmanuel, I'm taking a look at this, but in the interest of the jessie release, I wanted to ask Emmanuel whether it would be okay to decrease the severity. We have a number of other packages with missing or incomplete poms, and propose that we discuss maven metadata for all Java library packages as a release goal for jessie + 1. Otherwise, the package will be removed soonish (February 5th). https://tracker.debian.org/pkg/lucene4 Thanks, tony signature.asc Description: OpenPGP digital signature
Bug#704125: parallel: stdout of commands is not deterministic
#define _GNU_SOURCE
#include errno.h
#include error.h
#include stdio.h
#include stdlib.h
#include unistd.h
#include sys/types.h
#include sys/wait.h
void fork_child(unsigned nr)
{
char *s;
pid_t pid;
off_t pos[2];
int len, r;
pid = fork();
if (pid 0)
error(EXIT_FAILURE, errno, fork);
if (pid)
return;
len = asprintf(s, This is fork %u\n, nr);
pos[0] = lseek(1, 0, SEEK_CUR);
r = write(1, s, len);
pos[1] = lseek(1, 0, SEEK_CUR);
if (r != len)
error(0, errno, write: fork %u, nr);
fprintf(stderr, pos %-6zd - %-6zd (fork %u)\n,
pos[0], pos[1], nr);
exit(0);
}
int main(int argc, char **argv)
{
unsigned forks;
unsigned i;
int running = 0;
unsigned burst;
if (argc 2)
error(EXIT_FAILURE, 0, Missing number of requested forks);
if (argc 4)
error(EXIT_FAILURE, 0, To many arguments);
if (sscanf(argv[1], %u, forks) != 1)
error(EXIT_FAILURE, errno, Unable to convert '%s' to a
positive number, argv[1]);
if ((argc 3) || (sscanf(argv[2], %u, burst) != 1))
burst = 0;
for (i = 0; i forks; i++) {
int status;
fork_child(i);
running++;
if (burst i !(i % burst)) {
siginfo_t infop;
infop.si_pid = 0;
fprintf(stderr, Burst wait: i=%d, burst=%d; running=%d - ,
i, burst, running);
while (1) {
if ((waitpid(-1, status, WNOHANG) = 0) ||
!WIFEXITED(status))
break;
running--;
}
fprintf(stderr, %d\n, running);
} else {
if ((waitpid(-1, status, WNOHANG) 0)
WIFEXITED(status))
running--;
}
}
while (!waitid(P_ALL, 0, NULL, WEXITED))
;
error(0, 0, exit);
}
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773627: drag-and-drop from automounted media seems to work currently
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Drag-and-drop from automounted USB-media seems to work currently, but it seems to work only. The files are not accessible to applications, so the severity of this was upgraded. -BEGIN PGP SIGNATURE- Version: GnuPG v2 iEYEARECAAYFAlSuKrgACgkQ5+rBHyUt5wtD/wCeJwsdeWIm4UffW+I9Jz+WfhaI YKUAnjzFcZOIwotdKbDIXPCNi0ob1zII =WRsW -END PGP SIGNATURE-
Bug#748834: Quite some more Symfony2 Components needed in Debian for SIlex
For the record: All needed Symfony components are now found in Debian and I just found out that the 2.3 series is recent enough for Silex (originally I wrongly looked at Silex's master branch were at least Symonfy 2.4 is required). Thus I'm currently working on an initial packaging of Silex. signature.asc Description: This is a digitally signed message part
Bug#774830: simple-scan: pixma 04A9173B 'Access to resource has been denied' over remote desktop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: simple-scan Version: 3.4.2-1 Severity: minor Dear Maintainer, simple-scan does not work over x2go-remote-desktop session. See there: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761398 It is most probably a problem with user-rights and and with the sane-backend. When trying to scan, it looks like this on the terminal: andreas@md-ho:~$ simple-scan p11-kit: invalid config filename, will be ignored in the future: /etc/pkcs11/modules/gnome-keyring-module ** (simple-scan:23088): WARNING **: scanner.vala:801: Unable to get open device: Access to resource has been denied xsane says: 'Failed to open device 'pixma:04A9172B': Access to resource has been dnied. But scanning works, when there is a local session running on the machine (i.e. the remote-desktop server) from the same user. Normally this is no problem at all for thin-clients, because they do not have a scanner connected to the desktop-server. But in my case it is a problem. I also do acknowledge that not many people do have this problem, so it is severity 3 only. Please let me know, if I should rather report this against the sane-backend. I also report this to x2go. - -- System Information: Debian Release: 7.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.65cags (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages simple-scan depends on: ii dconf-gsettings-backend [gsettings-backend] 0.12.1-3 ii gnome-icon-theme 3.4.0-2 ii libc62.13-38+deb7u6 ii libcairo21.12.2-3 ii libcolord1 0.1.21-1 ii libgdk-pixbuf2.0-0 2.26.1-1 ii libglib2.0-0 2.33.12+really2.32.4-5 ii libgtk-3-0 3.4.2-7 ii libgudev-1.0-0 204-14~bpo70+1 ii libjpeg8 8d-1+deb7u1 ii libsane 1.0.22-7.4 ii xdg-utils1.1.0~rc1+git20111210-6+deb7u1 ii zlib1g 1:1.2.7.dfsg-13 simple-scan recommends no packages. simple-scan suggests no packages. - -- no debconf information -BEGIN PGP SIGNATURE- Version: GnuPG v2 iEYEARECAAYFAlSuNqsACgkQ5+rBHyUt5wv8wQCgwPoz1+9lw0p1Z08I7+V3oirf h8oAnRrtX8ncOYirI9/4OwM9fwhONjr7 =xaIE -END PGP SIGNATURE-
Bug#773805: liblucene4-java: Incomplete poms installed in /usr/share/maven-repo
Le 08/01/2015 07:41, Niels Thykier a écrit : If the bug only prevents new packages from being build (i.e. packages not already in Jessie/sid), it /sounds/ like it might not be RC after all (maybe important). However, please keep in mind that my answer is solely based on the above mail. You are right, let's decrease the severity. Emmanuel -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#732440: ghostscript: Error: /typecheck in /findfont
On 07/01/15 21:06, Didier 'OdyX' Raboud wrote: Le mercredi, 7 janvier 2015, 12.17:43 Jonas Smedegaard a écrit : This is fixed in upstream's 9.14. I'll see with the release team if we can backport this into Jessie. Great. But what about its licensing? I guess upstream treat it as AGPL, so we may risk disagreeing with them if we choose to ignore that - e.g. by treating it as too small to be copyright-protected. Best is to ask I guess. Let's try to see what the upstream author of the patch says. Hereby CC'ing him. Chris: We (Debian) want to include your patch for the Ghostscript bug 695031 don't assume we can read a font file, but we are wondering about its licensing situation. Debian is shipping ghostscript 9.06, licensed under GPL-3, but you included this patch in ghostscript 9.14, which is licensed under AGPL. We have three options: a) consider your patch as too small to be copyright-protected. This would allow us to include is in GPL'd ghostscript 9.06. It'd be nice to have your confirmation on this though. b) get your patch also GPL-licensed, allowing us to include it in GPL'd ghostscript 9.06. It'd be mandatory to have an explicit statement from you (as author of the patch) on that. c) None of the above, leaving the bug open for Debian Jessie, thereby leaving our users with a bug in our next stable release. Needless to say we'd prefer any of the two above solutions. Cheers, and thanks in advance, So, for clarity, that will be this commit: http://git.ghostscript.com/?p=ghostpdl.git;a=blobdiff;f=gs/Resource/Init/gs_fonts.ps;h=8ab6872e (or, for convenience: http://tinyurl.com/pvr4acp ) We'd have no problem with you patching an older, non-AGPL release with that - we'd regard it as being covered by your a case above. It's also a sufficiently obvious solution that any competent Postscript programmer would almost certainly come up with the same solution, which would make copyright enforcement decidedly questionable, too. So go ahead and use that patch. In the interests of the usual legal disclaimers, though, this only applies to the particular patch linked above, so any other patches in the future will need to be considered on a case-by-case basis. All the best, Chris -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#710551: tiarra-conf-el: provide 'tiarra-conf
Hideki Yamane henr...@debian.or.jp writes: M-: (require 'tiarra-conf) = (error Required feature `tiarra-conf' was not provided) This package provides tiarra-conf-mode, not tiarra-conf, so this behavior is not a bug, IMO. Feature names are file names, normally. So (require 'tiarra-conf) loads tiarra-conf.el and it would normally have (provide 'tiarra-conf) at the end to allow that. (Such a `provide' is one of the various conventional things M-x checkdoc reports on, for example.) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773085: Regression in escaped url handling with patch applied for #773085
Control: tags -1 + patch
❦ 3 janvier 2015 23:22 +0100, Vincent Bernat ber...@debian.org :
However, the whole stuff is quite fragile. I can't say for sure if
spaces would do something good or bad, but a star would not work. Here
is an improved version which is easier to understand.
I have found a way to be even more concise and don't rely on any magic
(other that $@ being the only array in a POSIX shell). Here is a
patch.
The first change is to let the shell do the splitting of the command in
the .desktop file (set -- $(sed ...)).
The second change is to use $@ behaving like an array. We cannot
modify this array but we can append to it (with set -- $@
$newarg). Basically, we take $command_exec and then shift. Then, we
iterate on each argument using a counter and if the argument needs to be
modified (because this is the place holder), we append the modified
version, otherwise, we append it unmodified. At the end, $@ is the
array of arguments to be passed to $command_exec. If no replacement
has happened, we also append the target file.
No magic quoting is done, no evaluation. I think this is a safe
alternative to the current script. I can also push it upstream.
Per, I see that you committed to git yesterday. Would you take the patch
as is or do you want me to do an NMU?
--- /usr/bin/xdg-open 2015-01-03 22:22:18.513474060 +0100
+++ ./xdg-open 2015-01-08 08:42:47.513093876 +0100
@@ -526,6 +526,7 @@
open_generic_xdg_mime()
{
+target=$1
filetype=$2
default=`xdg-mime query default $filetype`
if [ -n $default ] ; then
@@ -546,17 +547,34 @@
fi
if [ -r $file ] ; then
-command=`grep -E ^Exec(\[[^]=]*])?= $file | cut -d= -f 2- | first_word`
-command_exec=`which $command 2/dev/null`
-arguments=`grep -E ^Exec(\[[^]=]*])?= $file | cut -d= -f 2- | last_word`
-local sed_escaped_url=$(echo $1 | sed -e 's/[\\]/\\/g')
-arguments_exec=$(echo $arguments | sed -e 's*%[fFuU]*'$sed_escaped_url'*g')
+set -- $(sed -n 's/^Exec\(\[[^]]*\]\)\{0,1\}=//p' $file)
+command_exec=$(which $1 2 /dev/null)
if [ -x $command_exec ] ; then
-if echo $arguments | grep -iq '%[fFuU]' ; then
-eval '$command_exec' '$arguments_exec'
-else
-eval '$command_exec' '$arguments_exec' '$1'
-fi
+shift
+# We need to replace any occurrence of %f, %F and
+# the like by the target file. We examine each
+# argument and append the modified argument to the
+# end then shift.
+args=$#
+replaced=0
+while [ $args -gt 0 ]; do
+case $1 in
+%[fFuU])
+replaced=1
+arg=$target
+shift
+set -- $@ $arg
+;;
+*)
+arg=$1
+shift
+set -- $@ $arg
+;;
+esac
+args=$(( $args - 1 ))
+done
+[ $replaced -eq 1 ] || set -- $@ $target
+$command_exec $@
if [ $? -eq 0 ]; then
exit_success
--
Make sure all variables are initialised before use.
- The Elements of Programming Style (Kernighan Plauger)
signature.asc
Description: PGP signature
Bug#538067: deadline coming soon for OpenCPN
Hi... I'm an upstream developer and managing the PPA on Launchpad. It certainly is more messy than needs to be, but it serves it's purpose, which is to get the packages to the user in a way he can digest... With the upcoming 4.0 release I have modularized the packages to certain extent, separating the docs, tide data and GSHHS shorelines as they are logical components. I currently do no effort to clean the .orig sources off stuff not needed on Linux, but it is on my list past the release. We've put some effort into clarifying the license info etc. over time to make packaging for Debian possible, but without further feedback from you, finishing it in an acceptable way will keep having low priority - we simply lack manpower to study the requirements in-depth. Thanks for trying to clean up our mess Pavel -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774826: freetype: Please update Freetype to 2.5.5
Source: freetype Severity: normal Dear Maintainer, What exactly is the reason for Freetype lagging and not being updated in a timely manner? Is there a freeze on it? If so, I understand and just want to push for 2.5.5 to be updated available in Sid ASAP. - Marc J. Driftmeyer -- System Information: Debian Release: 8.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#754248: python-virtualenv: Error when attempting to create a python2.6 virtualenv
On 19/11/14 08:17, Stefano Rivera wrote:
Hi Renat (2014.08.06_05:27:47_-0700)
I tried to replace {} with % operator and now I'm having following errors:
ImportError: cannot import name CertificateError
That is being tracked in #755106 and #763389, and I intend to fix it
soon.
SR
With #755106 and #763389 resolved the attached patch now fixes this
issue for me.
Index: python-virtualenv-1.11.6+ds-1/debian/patches/use-wheels.patch
===
--- python-virtualenv-1.11.6+ds-1/debian/patches/use-wheels.patch
+++ python-virtualenv-1.11.6+ds-1/debian/patches/use-wheels.patch
@@ -89,9 +89,9 @@
+if error.errno != errno.EEXIST:
+raise
+for project in DEBIAN_WHEEL_DEPS:
+wheel_names = glob.glob(
++'/usr/share/python-wheels/{0}-*.whl'.format(project))
-+'/usr/share/python-wheels/{}-*.whl'.format(project))
+if len(wheel_names) == 0:
+raise RuntimeError('missing dependency wheel %s' % project)
+assert len(wheel_names) == 1, wheel_names
+wheel_name = os.path.basename(wheel_names[0])
Bug#773805: liblucene4-java: Incomplete poms installed in /usr/share/maven-repo
On 2015-01-08 05:17, tony mancill wrote: [...] Hello Hilko, Emmanuel, I'm taking a look at this, but in the interest of the jessie release, I wanted to ask Emmanuel whether it would be okay to decrease the severity. We have a number of other packages with missing or incomplete poms, and propose that we discuss maven metadata for all Java library packages as a release goal for jessie + 1. Otherwise, the package will be removed soonish (February 5th). https://tracker.debian.org/pkg/lucene4 Thanks, tony [...] Hi, If the bug is RC on its own, but you believe it is irrelevant for the Jessie release, the correct option would be to have it ignored (please file a bug against release.debian.org for that). Mind you, the assumption is that the bug is in fact RC. If not, the release team will probably recommend downgrading it instead. If the bug only prevents new packages from being build (i.e. packages not already in Jessie/sid), it /sounds/ like it might not be RC after all (maybe important). However, please keep in mind that my answer is solely based on the above mail. Thanks, ~Niels -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#773861: Signify - OpenBSD's cryptographic signing tool
Greetings, debian-security! OpenBSD has recently developed a tool called signify for cryptographic signing and verifying. It is extremely lightweight, and produces extremely small signatures. For an idea of how small, note that this is a complete signature: RWSRtYZ5JArIEj7Q2Q5qTHD1c2JCvWAu7z0s0ARhlA4s/ac3lc1T5PLplmq1x/LTRZxl9J27Re/QVnUkU9wp14vN/+3Wnb2Tyw4= It is currently being used to sign not only the releases of OpenBSD (and its forks, Bitrig and LibertyBSD), but also LibreSSL, OpenBSD's fork of the OpenSSL library created after heartbleed. I've packaged signify for Debian, and I'm currently looking for a sponsor. You can download the package with this command: dget -x http://mentors.debian.net/debian/pool/main/s/signify-openbsd /signify-openbsd_8-1.dsc The mentors summary page is here: http://mentors.debian.net/package/signify-openbsd More information about signify can be obtained from http://www.tedunangst.com/flak/post/signify Yours sincerely, Riley Baird -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#718225: live-build should authenticate files it downloads
Small additional patch attached.
I'm relatively new to unix shell scripting, and towards the end of
development I was having some issues with error return codes and set -e
in one or two places. I thought I had addressed the issue properly, but
running into the issue again now in other code, I've gained a better
understanding of it and realised that a small fix is in order here.
Testing this has also highlighted another issue, which I will provide as
a follow up once I've fully resolved it.
commit 326428b4bc4896ef98ef98efa2132bbe7fb2df97
Author: jnqnfe jnq...@gmail.com
Date: Thu Jan 8 03:46:33 2015 +
[Wget Security (#718225)] Fix handling of return codes
diff --git a/functions/cache.sh b/functions/cache.sh
index 4b3face..acf529f 100755
--- a/functions/cache.sh
+++ b/functions/cache.sh
@@ -196,6 +196,7 @@ Copy_file () {
local DEST_DIR
local ALLOW_HARDLINK
local CP_OPTIONS
+ local RET
if [ ${1} = --allow-hardlink ]
then
@@ -220,7 +221,7 @@ Copy_file () {
CP_OPTIONS=${CP_OPTIONS} -l
fi
- cp -f ${CP_OPTIONS} -- ${SOURCE} ${DEST}
+ cp -f ${CP_OPTIONS} -- ${SOURCE} ${DEST} RET=0 || RET=${?}
- return ${?}
+ return ${RET}
}
diff --git a/functions/security.sh b/functions/security.sh
index ee04e17..60d384d 100644
--- a/functions/security.sh
+++ b/functions/security.sh
@@ -19,6 +19,7 @@ GPG_sig_is_valid ()
local KEYRINGS
local GPG_TOOL
local GPG_TOOL_SELECTED
+ local RET
FILE=${1}
DETACHED_SIG=${2}
@@ -39,9 +40,9 @@ GPG_sig_is_valid ()
exit 1
fi
- ${GPG_TOOL_SELECTED} --quiet ${KEYRINGS} ${DETACHED_SIG} ${FILE}
+ ${GPG_TOOL_SELECTED} --quiet ${KEYRINGS} ${DETACHED_SIG} ${FILE}
RET=0 || RET=${?}
- return ${?}
+ return ${RET}
}
# Check hash entry in basic hash sums file
@@ -66,9 +67,11 @@ Hashsum_check_hashsumfile ()
REGEX_PATTERN=^${HASH}[[:space:]]+\./${REL_URL}\$
Echo_debug Searching for pattern ${REGEX_PATTERN} in file ${HASH_FILE}
- grep -q -i -m 1 -E ${REGEX_PATTERN} ${HASH_FILE}
-
- return ${?}
+ if grep -q -i -m 1 -E ${REGEX_PATTERN} ${HASH_FILE}
+ then
+ return 0
+ fi
+ return 1
}
# Check hash entry in archive dist-info Release file (Primary dist Release
file only?)
@@ -93,9 +96,11 @@ Hashsum_check_Releasefile ()
REGEX_PATTERN=^[[:space:]]${HASH}[[:space:]]+[[:digit:]]+[[:space:]]${REL_URL}\$
Echo_debug Searching for pattern ${REGEX_PATTERN} in file ${HASH_FILE}
- grep -q -i -m 1 -E ${REGEX_PATTERN} ${HASH_FILE}
-
- return ${?}
+ if grep -q -i -m 1 -E ${REGEX_PATTERN} ${HASH_FILE}
+ then
+ return 0
+ fi
+ return 1
}
# Check hash entry in archive dist-info Packages file
diff --git a/functions/wget.sh b/functions/wget.sh
index 7b731d4..bc1cc30 100644
--- a/functions/wget.sh
+++ b/functions/wget.sh
@@ -678,8 +678,7 @@ Main_dist_release_file_is_valid ()
Wget_copy_apt_keyring
fi
- GPG_sig_is_valid ${SAVE_PATH} ${SAVE_PATH_SIG} --keyring
${WGET_GPG_KEYRING}
- GPGV_RVAL=${?}
+ GPG_sig_is_valid ${SAVE_PATH} ${SAVE_PATH_SIG} --keyring
${WGET_GPG_KEYRING} GPGV_RVAL=0 || GPGV_RVAL=${?}
if [ ${GPGV_RVAL} = 0 ]
then
@@ -1211,6 +1210,7 @@ Wget ()
local URL
local SAVE_TO
local WGET_OPTIONS
+ local RET
if [ ${1} = --quiet ]
then
@@ -1237,9 +1237,9 @@ Wget ()
exit 1
fi
- wget ${WGET_OPTIONS} -O ${SAVE_TO} ${URL}
+ wget ${WGET_OPTIONS} -O ${SAVE_TO} ${URL} RET=0 || RET=${?}
- return ${?}
+ return ${RET}
}
Wget_copy_apt_keyring ()
@@ -1336,6 +1336,7 @@ Wget_recently_verified ()
local ACTION
local FILE
+ local FOUND
#local WGET_RECENTLY_VERIFIED_FILES #See note above!
ACTION=${1}
@@ -1367,8 +1368,8 @@ Wget_recently_verified ()
Echo_error Only one recently verified item can
be checked for at a time. Too many arguments supplied!
exit 1
fi
- In_list ${1} ${WGET_RECENTLY_VERIFIED_FILES}
- return ${?}
+ In_list ${1} ${WGET_RECENTLY_VERIFIED_FILES}
FOUND=0 || FOUND=${?}
+ return ${FOUND}
;;
list)
Bug#742048: systemd-remount-fs.service fails for split-usr
Hey Michael, Michael Biebl [2015-01-07 13:17 +0100]: Updated patch attached (tested with a split-usr setup and with both initramfs-tools 0.116 and 0.118) Looks great to me, thanks! Will you commit yourself? (I figure there's no point trying to send that upstream, even with #ifdef HAVE_SPLIT_USR) Martin -- Martin Pitt| http://www.piware.de Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org) signature.asc Description: Digital signature
Bug#718225: live-build should authenticate files it downloads
Updated archive of full set of commits attached, including two new ones. Overview: - Commits #01-08 : A copy of the original set build against LB 5.x - Commit #09: Fix handling of return codes (previously submitted earlier today) - Commit #10: Fix incorrect usage tracking logic (new) - Commit #11: Fix broken file purge ability (new) - Commit #12: Fix wrong usage string in new file (previously submitted) - Commit #13: Promote gpgv dependency (previously submitted) Aside from the patch tweaking error return code handling submitted earlier today, when testing that new patch, I tried the code against a set of cached files, including a few random ones which I deliberately corrupted. Previously I had tried one corrupt file, which must have only been the file targeted for download, which it had corrected perfectly, but I must have not tested with other cached but corrupted files in the verification chain, because doing so now it didn't work as expected. They were picked up as invalid, it attempted to purge files used from the cache, performing a second chance routine, but unfortunately there was a bug in the purge code preventing file deletion, and a flaw in the usage tracking logic, so it redownloaded the target file, but failed to replace other files in the verification chain, reusing the corrupt copies, failing the second chance verification, and thus halting the build process. All of that is fixed now though with the few small additional commits added to the attached set :) 718225_lb5.tar.gz Description: GNU Zip compressed data
Bug#773474: [PATCH] * scd/app-openpgp.c: (get_public_key) correctly close 'fp' upon use.
On 01/07/2015 05:22 PM, Werner Koch wrote: But there is a portability problem. From libgcrypt's rndunix.c: Thanks for your information, I see. I also checked gnulib and found there are other issues for popen/pclose. In future, in case we want to improve OpenPGPcard v1.0 support, we should think about these portability issues. Well, the fix is basically for correctness of the code. I applied it to all branches (STABLE-BRANCH-1-4, STABLE-BRANCH-2-0, and master). I know the code is not used for gpg 1.4, but it's better to have code in sync. IIRC, in natural language, SunOS usually referred version 4 or earlier (uname returned SunOS on the machine of Solaris 2 or later). If the bug existed in version 5 or later, it would also exist in other SVR4 based Operating System. And... I don't think version 4 had USB support. USB 1.0 was in 1996. -- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#741196: License incompatibility below RC threshold
Russ Allbery r...@debian.org writes: The only specific claim that Francesco has made that I was able to find is that the choice of venue clause in CeCILL-C makes it incompatible. However, CeCILL also contains a choice of venue clause, and the FSF state that it is GPL-compatible. Given that they base those determinations on the advice of lawyers, I'm dubious of this argument. Ah! I'm sorry -- I missed a subtlety here. The CeCILL license can be explicitly converted to the GPL v2, hence shedding its choice of venue clause. The CeCILL-C license doesn't have an explicit conversion clause, which is why I believe Francesco feels it is a problem. Okay, this is actually a somewhat reasonable concern, in my opinion. The FSF does declare other licenses as being GPL-incompatible for having choice of venue clauses. See, for example: https://www.gnu.org/licenses/license-list.html#lucent102 I agree that this may actually be a problem. I don't think it's a particularly *large* problem -- historically, we've not treated choice of venue clauses with a great deal of urgency. This is also relying on the assumption that a library linked with a GPL v2 library requires every other library linked with it to be relicensble under the GPL v2, something that I think we believe in principle, but which we have not always enforced elsewhere in the archive. But I was wrong to dismiss this -- the choice of venue clause is usually something the FSF considers problematic. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774538: linux-image-3.16.0-4-amd64: No Sound (partial solution pulseaudio)
*Hello Sir* *Kindly update; the virtualbox runs the sound through the pulse audio. But the rest is the same.* *Thank you and oblige.* *Kind Regards,* *(Khurram Mahmood)* On 4 January 2015 at 08:57, Khurram Mahmood makh...@gmail.com wrote: Package: src:linux Version: 3.16.7-ckt2-1 Severity: normal Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? Fresh Install. * What exactly did you do (or not do) that was effective (or ineffective)? I installed pulse audio, but some apps still have no audio like quodlibet, virtualbox and chroot environment, etc. But vlc and some other apps have working sound after installation of pulse audio. * What was the outcome of this action? * What outcome did you expect instead? *** End of the template - remove these template lines *** -- Package-specific info: ** Version: Linux version 3.16.0-4-amd64 (debian-ker...@lists.debian.org) (gcc version 4.8.3 (Debian 4.8.3-16) ) #1 SMP Debian 3.16.7-ckt2-1 (2014-12-08) ** Command line: BOOT_IMAGE=/boot/vmlinuz-3.16.0-4-amd64 root=UUID=b635f48f-40fe-4a54-8fac-f5953137b67e ro quiet ** Tainted: O (4096) * Out-of-tree module has been loaded. ** Kernel log: [ 10.337315] input: HDA Intel PCH Headphone as /devices/pci:00/:00:1b.0/sound/card1/input8 [ 10.394325] tpm_tis 00:05: TPM is disabled/deactivated (0x7) [ 10.444129] cfg80211: Calling CRDA to update world regulatory domain [ 10.560045] input: PC Speaker as /devices/platform/pcspkr/input/input12 [ 10.566786] ACPI: Battery Slot [BAT0] (battery present) [ 10.566882] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input13 [ 10.566887] ACPI: Sleep Button [SLPB] [ 10.566936] input: Lid Switch as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0D:00/input/input14 [ 10.566965] ACPI: Lid Switch [LID] [ 10.567011] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input15 [ 10.567014] ACPI: Power Button [PWRF] [ 10.642488] iTCO_vendor_support: vendor-support=0 [ 10.865802] [drm] Memory usable by graphics device = 2048M [ 10.865805] [drm] Replacing VGA console driver [ 10.867013] Console: switching to colour dummy device 80x25 [ 10.867534] [drm] ACPI BIOS requests an excessive sleep of 5000 ms, using 1500 ms instead [ 10.974318] AVX2 version of gcm_enc/dec engaged. [ 10.976002] alg: No test for __gcm-aes-aesni (__driver-gcm-aes-aesni) [ 11.040611] alg: No test for crc32 (crc32-pclmul) [ 11.040837] input: HP WMI hotkeys as /devices/virtual/input/input16 [ 11.046143] i915 :00:02.0: irq 66 for MSI/MSI-X [ 11.046153] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013). [ 11.046154] [drm] Driver supports precise vblank timestamp query. [ 11.120261] iTCO_wdt: Intel TCO WatchDog Timer Driver v1.11 [ 11.120298] iTCO_wdt: Found a Lynx Point_LP TCO device (Version=2, TCOBASE=0x1860) [ 11.120425] iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0) [ 11.174158] vgaarb: device changed decodes: PCI::00:02.0,olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 11.194926] [drm] VBT doesn't support DRRS [ 11.227245] fbcon: inteldrmfb (fb0) is primary device [ 11.351582] psmouse serio3: synaptics: Touchpad model: 1, fw: 7.5, id: 0x1e0b1, caps: 0xf00173/0x64/0xa2400, board id: 2653, fw id: 1481159 [ 11.387503] input: SynPS/2 Synaptics TouchPad as /devices/platform/i8042/serio3/input/input11 [ 11.784652] Using firmware rtlwifi/rtl8723befw.bin [ 11.789205] media: Linux media interface: v0.10 [ 11.797912] input: ST LIS3LV02DL Accelerometer as /devices/platform/lis3lv02d/input/input18 [ 11.811584] Linux video capture interface: v2.00 [ 11.955652] rtl8723be :09:00.0: firmware: failed to load rtlwifi/rtl8723befw.bin (-2) [ 11.955653] rtl8723be :09:00.0: Direct firmware load failed with error -2 [ 11.955654] rtl8723be :09:00.0: Falling back to user helper [ 11.985365] uvcvideo: Found UVC 1.00 device HP HD Webcam (04f2:b3c8) [ 11.986510] input: HP HD Webcam as /devices/pci:00/:00:14.0/usb1/1-7/1-7:1.0/input/input19 [ 11.986562] usbcore: registered new interface driver uvcvideo [ 11.986562] USB Video Class driver (1.1.1) [ 12.176277] Firmware rtlwifi/rtl8723befw.bin not available [ 12.176653] ieee80211 phy0: Selected rate control algorithm 'rtl_rc' [ 12.176929] rtlwifi: wireless switch is on [ 12.281698] Console: switching to colour frame buffer device 170x48 [ 12.286424] i915 :00:02.0: fb0: inteldrmfb frame buffer device [ 12.286426] i915 :00:02.0: registered panic notifier [ 12.357333] ACPI: Video Device [GFX0] (multi-head: yes rom: no post: no) [ 12.357450] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input20 [ 12.357536] [drm] Initialized i915 1.6.0 20080730 for
Bug#772990: /usr/sbin/ntpdate-debian: does not synchronize time
On Fri, 2014-12-12 at 21:01 +0100, Michal Suchanek wrote: ~# cat /etc/default/ntpdate # The settings in this file are used by the program ntpdate-debian, but not # by the upstream program ntpdate. # Set to yes to take the server list from /etc/ntp.conf, from package ntp, # so you only have to keep it in one place. NTPDATE_USE_NTP_CONF=no # List of NTP servers to use (Separate multiple servers with spaces.) # Not used if NTPDATE_USE_NTP_CONF is yes. NTPSERVERS=tik.cesnet.cz # Additional options to pass to ntpdate NTPOPTIONS= ~# ntpdate tik.cesnet.cz 12 Dec 19:46:32 ntpdate[1236]: adjust time server 195.113.144.201 offset 0.001415 sec ~# ntpdate-debian 12 Dec 19:46:45 ntpdate[1237]: no server suitable for synchronization found This works as expected for me. Please run ntpdate-debian under sh -x to see why it does not pick up your server. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774825: xorg: VT turns black at random times when switching to X or exiting from X
Package: xorg Version: 1:7.7+7 Severity: normal Hi, When switching to VT from X using Ctrl+Alt+Num or X11 or exiting from X, in a random attempt, instead of returning a visible virtual console with text, it returns a working virtual console but with no visible text, black screen on all virtual consoles, even that virtual console is set with white background. I can type on and and interact blindly with it. Some other times, it works, returns a visible virtual console and everything is fine. Returning to X from VT after switching to VT has no problems in all cases. What makes it really annoying for me is that it happens randomly. At random times of the day, I exit from X or switch to VT, and get a black screen. I tried switching to other virtual consoles but always got no luck. So I had to startx again hoping that next time I exit it would came out correctly. In the case of VT switching, switch back to X and do the switch again and again until it works. In a failing attempt to locate the bug, my guess is that the bug could sit between these 2 lines in Xorg.0.log : ... [ 21489.236] (II) AIGLX: Suspending AIGLX clients for VT switch [ 21491.372] (II) AIGLX: Resuming AIGLX clients after VT switch ... However, with `verbose' and `logverbose' startx options set to 10, i still cannot get anything more than that between those 2 lines. I have attached the output with these options in case it needs to be read. The last VT switch in all outputs is VT switches to be investigated. If not so then it could be a driver issue, which is Intel. Even so I have no clue to tell. Just to note that this problem didn't exist on my previous Squeeze install on this computer. My building from source attempt using build.sh came out nowhere due to the error laylex.c not found in source dir lib/libXaw3d. Thank you, Khang. -- Package-specific info: X server symlink status: lrwxrwxrwx 1 root root 13 Nov 7 00:43 /etc/X11/X - /usr/bin/Xorg -rwxr-xr-x 1 root root 2569072 Dec 10 05:13 /usr/bin/Xorg VGA-compatible devices on PCI bus: -- 00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile GM965/GL960 Integrated Graphics Controller (primary) [8086:2a02] (rev 0c) /etc/X11/xorg.conf does not exist. /etc/X11/xorg.conf.d does not exist. /etc/modprobe.d contains no KMS configuration files. Kernel version (/proc/version): --- Linux version 3.16-3-686-pae (debian-ker...@lists.debian.org) (gcc version 4.8.3 (Debian 4.8.3-12) ) #1 SMP Debian 3.16.5-1 (2014-10-10) Xorg X server log files on system: -- -rw-r--r-- 1 root root 30708 Jan 8 01:50 /var/log/Xorg.0.log Contents of most recent Xorg X server log file (/var/log/Xorg.0.log): - [ 21470.818] X.Org X Server 1.16.2.901 (1.16.3 RC 1) Release Date: 2014-12-09 [ 21470.828] X Protocol Version 11, Revision 0 [ 21470.831] Build Operating System: Linux 3.2.0-4-amd64 i686 Debian [ 21470.837] Current Operating System: Linux debian 3.16-3-686-pae #1 SMP Debian 3.16.5-1 (2014-10-10) i686 [ 21470.837] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-3.16-3-686-pae root=UUID=c727c6e8-b8ec-480f-96d4-2c0ccb8d2081 ro quiet [ 21470.846] Build Date: 09 December 2014 10:10:21PM [ 21470.849] xorg-server 2:1.16.2.901-1 (http://www.debian.org/support) [ 21470.852] Current version of pixman: 0.32.6 [ 21470.859]Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. [ 21470.859] Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. [ 21470.871] (==) Log file: /var/log/Xorg.0.log, Time: Wed Jan 7 22:53:42 2015 [ 21470.875] (==) Using system config directory /usr/share/X11/xorg.conf.d [ 21470.875] (==) No Layout section. Using the first Screen section. [ 21470.875] (==) No screen section available. Using defaults. [ 21470.875] (**) |--Screen Default Screen Section (0) [ 21470.875] (**) | |--Monitor default monitor [ 21470.875] (==) No monitor specified for screen Default Screen Section. Using a default monitor configuration. [ 21470.875] (==) Automatically adding devices [ 21470.875] (==) Automatically enabling devices [ 21470.875] (==) Automatically adding GPU devices [ 21470.875] (WW) The directory /usr/share/fonts/X11/cyrillic does not exist. [ 21470.875]Entry deleted from font path. [ 21470.875] (==) FontPath set to: /usr/share/fonts/X11/misc, /usr/share/fonts/X11/100dpi/:unscaled, /usr/share/fonts/X11/75dpi/:unscaled, /usr/share/fonts/X11/Type1, /usr/share/fonts/X11/100dpi, /usr/share/fonts/X11/75dpi, built-ins [ 21470.875] (==) ModulePath set to /usr/lib/xorg/modules [ 21470.875] (II) The server relies on udev to provide
Bug#774824: apt-transport-s3: Fails when package name has + characters in package
Package: apt-transport-s3 Version: 1.1.0-2 Severity: important Tags: patch When a package has a filename that includes a + character in it the attempt to fetch it from S3 fails. This is a known issue with S3 and has been fixed in the apt source. A patch for this issue has been submitted upstream and can be examined at https://github.com/BashtonLtd/apt-transport-s3/pull/6 I believe this bug is very important because it effectively makes this package unusable with many widely used packages (for me, specifically, the package produced by java-package from the Oracle JDK 1.6 distribution). It is not clear to me if upstream and the package maintainers are the same organization, so I am also submitting this report to the BTS. -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-transport-s3 depends on: ii apt 1.0.9.5 ii python2.7.8-2 ii python-configobj 5.0.6-1 apt-transport-s3 recommends no packages. apt-transport-s3 suggests no packages. -- no debconf information
Bug#773520: [Pkg-gnupg-maint] Bug#773520: use-after-free
On 01/07/2015 01:58 PM, NIIBE Yutaka wrote:
Here is my fix along with other fixes in map_host function.
[...]
@@ -504,9 +506,11 @@ map_host (ctrl_t ctrl, const char *name, int
force_reselect,
hi-pool = xtryrealloc (reftbl, (refidx+1) * sizeof *reftbl);
if (!hi-pool)
{
+ err = gpg_error_from_syserror ();
log_error (shrinking index table in map_host failed: %s\n,
strerror (errno));
xfree (reftbl);
+ return err;
}
Changing the call of strerror (errno) above into gpg_strerror (err), I
committed the change into master.
--
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#746946: wheezy-pu: package distro-info-data/0.23~deb7u1
Hi Adam (2015.01.06_22:11:55_+0200) To summarise discussions from IRC, Julien pointed out that there are a number of other places where we still refer to Wheezy as 7.0, including the Release Notes and debian-installer-netboot-images. Combined with the fact that this would be a change in stable, I think we should leave the Wheezy package as-is in terms of referring to Wheezy as 7.0. Does that apply to only Wheezy, or Jessie too? SR -- Stefano Rivera http://tumbleweed.org.za/ +1 415 683 3272 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#754248: python-virtualenv: Error when attempting to create a python2.6 virtualenv
Hi John (2015.01.08_05:24:06_+0200)
++'/usr/share/python-wheels/{0}-*.whl'.format(project))
-+'/usr/share/python-wheels/{}-*.whl'.format(project))
That's simple enough that it is reasonable to apply. However we've
probably missed the boat for Debian Jessie.
SR
--
Stefano Rivera
http://tumbleweed.org.za/
+1 415 683 3272
signature.asc
Description: Digital signature
Bug#705303: Continue bitfighter work
Hi, I am attempting to continue the work that Bryan started for packaging bitfighter. Wish me good fortune! David -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774827: apt-transport-s3: Misleading error messages
Package: apt-transport-s3 Version: 1.1.0-2 Tags: patch If a source cannot be processed for any reason the error message reported back to apt is misleading. For example, the following source line deb s3://github.com.s3.amazonaws.com/fubar/ trivial_repo/ we see the following ~$ sudo apt-get update Ign s3://github.com.s3.amazonaws.com trivial_repo/ InRelease Ign s3://github.com.s3.amazonaws.com trivial_repo/ Release.gpg Ign s3://github.com.s3.amazonaws.com trivial_repo/ Release Err s3://github.com.s3.amazonaws.com trivial_repo/ Packages AttributeError: 'NoneType' object has no attribute 'code' Ign s3://github.com.s3.amazonaws.com trivial_repo/ Translation-en_US Ign s3://github.com.s3.amazonaws.com trivial_repo/ Translation-en W: Failed to fetch s3://github.com.s3.amazonaws.com/fubar/trivial_repo/Packages AttributeError: 'NoneType' object has no attribute 'code' E: Some index files failed to download. They have been ignored, or old ones used instead. It would be nice if the message listed the HTTP 404 root cause instead of a Python exception for an unknown attribute. A patch has been submitted upstream and is available at https://github.com/BashtonLtd/apt-transport-s3/pull/5 -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-transport-s3 depends on: ii apt 1.0.9.5 ii python2.7.8-2 ii python-configobj 5.0.6-1 apt-transport-s3 recommends no packages. apt-transport-s3 suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#764546: ntp: Init script returns 5 if the daemon is not executable
On 10/8/14 6:50 PM, Felipe Sateler wrote: Package: ntp Version: 1:4.2.6.p5+dfsg-3.1 Severity: normal The ntp init script has this check: test -x $DAEMON || exit 5 That is the LSB exit code, but I guess that practice never really caught on. Which means that if ntp has been removed but not purged, the ntp script will fail at boot. With systemd actually checking the return code of init scripts, this results in the system being flagged as not correctly booted. Hmm, is that something that should be fixed in jessie then? (Other packages might be affected.) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#704125: parallel: stdout of commands is not deterministic
Dear Thomas, thanks for your detailed description. I could reproduce the behaviour on a 48 core machine. Even when running a dummy program (attached) that forks a lot and lets each fork simply output a line to stderr, I can reproduce the loss of output lines. For analysis I let the child processes also output the offset of stdout before and after the actual write() call to stderr; thus, calling the program via ( ./dummy 1000 100 /tmp/list ) 21 | cat /tmp/offets shows that the lost lines get overwritten by other forks that have inherited the stdout file descriptor with the _same offset_. When the dummy program (or multiple parallel running md5sum instances) is outputting to a pipe, there is no file position available (and small write() calls are guaranteed to be atomic). Thus, the described behaviour is actually not a problem caused by parallel; but though I think I will have to add a note about this problem to the manpage and I probably will add an option that lets parallel create an output pipe for stdout and stderr internally in order to simply get rid of this problem. Is this explanation acceptable for you? Kind regards, Nicolas signature.asc Description: Digital signature
Bug#710553: tiarra-conf-el: auto-mode-alist regexp \\'
reopen 710553 thanks Running emacs -q foo.tiarra-conf = File mode specification error: (invalid-regexp Trailing backslash) Where /etc/emacs/site-start.d/50tiarra-conf-el.el has \\.tiarra-conf\\ I believe it should be \\.tiarra-conf\\' -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#769941: libgstreamer-plugins-base1.0-0: No iceweasel crashes on my i386 testing
Package: libgstreamer-plugins-base1.0-0 Version: 1.4.4-2 Followup-For: Bug #769941 I was upgrading my i386 testing box, which included upgrading libgstreamer-plugins-base1.0-0 from 1.4.3-1 to 1.4.4-2. Before and after the upgrade, I had no crashes when using Iceweasel to login GMail. Everything went normally. In about:config, the media.gstreamer.enabled option is true (default). -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.16-3-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages libgstreamer-plugins-base1.0-0 depends on: ii iso-codes 3.57-1 ii libc6 2.19-13 ii libglib2.0-0 2.42.1-1 ii libgstreamer1.0-0 1.4.4-2 ii liborc-0.4-0 1:0.4.22-1 ii multiarch-support 2.19-13 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages libgstreamer-plugins-base1.0-0 recommends: ii gstreamer1.0-plugins-base 1.4.4-2 Versions of packages libgstreamer-plugins-base1.0-0 suggests: pn gstreamer-codec-install | gnome-codec-install none ii libvisual-0.4-plugins 0.4.0.dfsg.1-7 -- debconf-show failed -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774676: [Pkg-utopia-maintainers] Bug#774676: policykit-1: systemd-shim does not eliminate hard dependency on libpam-systemd - systemd
As much as anything it was misunderstanding that systemd-shim doesn't eliminate the installation of systemd on the system; it just allows you to not use systvinit as your init system. Regards, Daniel On 06/01/15 04:26 AM, Michael Biebl wrote: control: forcemerge 774664 -1 Am 06.01.2015 um 05:00 schrieb Daniel Dickinson: Package: policykit-1 Version: 0.105-8 Severity: normal policykit has a hard dependency on libpam-systemd which has a hard dependency on systemd AND the dependency is NOT eliminated through the use of systemd-shim. It is probably intended that systemd-shim OUGHT to eliminate the depency on systemd HOWEVER THIS IS NOT THE CASE. I believe there is a packaging error in which libpam-systemd has been incorrectly specified in such a way that the dependency is not resolved through the use of systemd-shim. policykit-1 requires the org.freedesktop.login1 interface and the proper registration of a logind session upon login. This is provided by libpam-systemd. Therefor this dependency is correct, You might not like that, but this is not a bug. smime.p7s Description: S/MIME Cryptographic Signature
Bug#676168: debhelper: dh_makeshlibs ignores $package.shlibs
On 2015-01-08 01:23, Ryan Tandy wrote: Hi Niels, On Wed, Jan 07, 2015 at 09:55:36PM +0100, Niels Thykier wrote: I am considering to apply the attached patch as a solution to this bug. Comments / review / tests welcome. Thanks for working on this! From the openldap side, I'm happy with the concept. You are welcome. :) The dh_makeshlibs changes are not limited to a particular compat level, so at compat 9 both dh_makeshlibs and dh_installdeb are installing the provided shlibs file. That's probably harmless, but I wondered whether the behaviour change for existing levels was intentional. That was to fix the bug without causing regressions (there might have been people that have skipped the call to dh_makeshlibs). I'd suggest clarifying that Only in compat level 9 and earlier in dh_installdeb only applies to shlibs, not triggers. thanks, Ryan Thanks, amended. ~Niels -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774829: ITP: ruby-rails-assets-jquery-idletimer -- provide jquery-idletimer via asset pipeline for rails apps
Package: wnpp Severity: wishlist Owner: Pirate Praveen prav...@debian.org * Package name: ruby-rails-assets-jquery-idletimer Version : 1.0.1 Upstream Author : Paul Irish * URL : http://mths.be/placeholder * License : Expat Programming Lang: ruby Description : provide jquery-idletimer via asset pipeline for rails apps signature.asc Description: OpenPGP digital signature
Bug#774828: Impossible to install grub
Package: debian-installer Version: Jessie Beta 2 Tags: d-i I try to install Debian Jessie side by side Debian Wheezy and Windows 7 in an ext4 partition. See below the partition table: (parted) print Model: ATA ST31000524AS (scsi) Disk /dev/sda: 1000GB Sector size (logical/physical): 512B/512B Partition Table: msdos Number Start End SizeType File system Flags 1 1049kB 211MB 210MB primary ntfsboot 2 211MB 105GB 105GB primary ntfs Windows C: 3 105GB 973GB 868GB extended 5 105GB 126GB 21,0GB logical ext4 Wheezy / 6 126GB 545GB 419GB logical ext4 Wheezy /home 8 545GB 598GB 52,4GB logical ext4 Partition where I want to install Jessie 9 598GB 971GB 373GB logical ntfs Datas Windows partition 7 971GB 973GB 2097MB logical linux-swap(v1) 4 973GB 1000GB 26,9GB primary ntfsdiag Partition réinstallation Windows My computer is detected like an UEFI. I install Debian Jessie with a manual partitioning and put / on /dev/sda8. During the installation the installer say to me that I do not have EFI partition. I continue the installation whithout it. At the end I choose to install grub on /dev/sda the default option. The installer say to me that's impossible to install grub. This is the real message in french: This is a free translation: Impossible d'installer Grub dans dummy Unable to install GRUB into dummy l'exécution de grub-install dummy a échoué executing grub-install dummy failed Cette erreur est fatale. This error is fatal. To solve this problem I have 3 solutions. The first: - Go in the new system with the rescue-mode installer. - Remove and purge grub-efi-amd64 - install grub-pc - install grub on /dev/sda - update-grub reboot and it's ok The second: Install Jessie with the i386 installer. Install ok The fird: Remove with fdisk the EFI partition on the USB-stick. The installation begin like with legacy bios Install OK Note: there is no Secure-boot and others to enable or desable in the bios menus. Computer: Lenovo H520s Machine type: 2561 Best regards -- Cordialement, DENIS BERNARD 9BIS RUE RENÉ LANDES VILLA22 31140 MONTBERON France -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774792: [PKG-Openstack-devel] Bug#774792: neutron-common fails upgrade, neutron-manage-db
On 01/07/2015 06:37 PM, Benedikt Trefzer wrote:
run:
# export DEBIAN_FRONTEND=noninteractive; # Important !!
# apt-get install neutron-common=2014.1.3-7 python-neutron=2014.1.3-7
remove in /etc/neutron/neutron.conf section [database] the line startin
with connection.
Why would you do this?
remark: The database configuration is only necessary for package
neutron-server, all
other neutron agents/services do not need a DB connection.
Well, this may be somehow related, but read on...
In the neutron-common.postinst, I can read (re-indented, so that it read
better through a mail client):
db_get neutron/configure_db
if [ $RET = true ] ; then
# Set the sql_connection directive
pkgos_dbc_postinst --suite neutron ${N_CONF} database \
connection neutron $@
# Migrating to latest release of the db
neutron-db-manage --config-file /etc/neutron/neutron.conf \
upgrade head
fi
By default, neutron/configure_db is set to false. So if you use the
non-interactive mode, and don't preseed the neutron/configure_db value,
nothing will happen. But that's not what happened in your installation.
Here, you've asked though debconf for handling of the database bits of
Neutron. Then you removed the database directive from the config file,
then performed an upgrade. It then obviously fails to connect to the db
when attempting to handle the db and its upgrade.
To sum-up: do stupid things, then shit happens. Probably this would be a
better title for this bug? :)
Your thoughts?
Cheers,
Thomas Goirand (zigo)
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#650077: dpkg: The Installed-Size estimate can be wrong by a factor of 8 or a difference of 100MB
Guillem Jover guil...@debian.org writes: On Wed, 2015-01-07 at 12:22:47 +0100, Johannes Schauer wrote: It is also worth asking what functionality the Installed-Size field is supposed to have when looking for a solution. It's primary purpose is probably to give apt a clue of whether or not there is enough free space to install a certain package. Personally I've always taken it as a small hint of the approx. size of the package, but the most interesting case which is always accurate is to spot size differences between the previous and next package version, for example from aptitude TUI. I consider the primary purpose to be to give a *human* a hint as to how large the package is. At least, that's how I've always used it. For that purpose, it really only needs to be accurate within a few hundred KB, and overstating the package size is probably better than understating it for packages with, say, large sparse files. It helps avoid problems like oh, this game looks interesting -- ack, where did all of my disk space go? If it can also provide information to apt about whether a package will fit on the disk, that's great, but I don't think we should put too much weight on that. Operating package managers very close to a full disk is a problematic action anyway, since there are a bunch of intermediate steps involved in installing a package, other files that get created dynamically, and so forth, and it's very hard to predict how much space will be required to successfully complete the installation. Certainly, Installed-Size doesn't do that. So, from a Policy perspective, I'd be happy with language that says this is an approximation of the size of the package on disk and leave it at that. It's tempting to generate it by just summing the sizes of the files in the Debian package after rounding them up to some common file system block size and not try to get too fancy. Of course, if people want to work on making the number more accurate, I won't stand in their way, but I don't think the reasonable uses for the field require that. Take into account that usually other disk usage is not accounted, like files generated at run-time, caches, logs and similar. There's the Extra-Size substvar just for that but I don't think any package is actually making use of it (at least according to codesearch.d.o), so… Yeah. Because knowing that to put in that field is a rather hard problem. Also apt (and cupt) only use that information to print the size deltas, apt only actually checks for available disk size for downloaded data, which is the only thing that actually makes sense doing. Yup. Given that (at least apt and cupt) are not actually comparing the available disk space with the accumulated packages Installed-Size, there will be no warning anyway, and to me just making dpkg fail gracefully on ENOSPC is the best option, anything else will just be wrong somewhere. +1. I think preventing package installation through Installed-Size would be a bad idea and quite annoying because it could disallow possible installations which would be even more confusing. +1. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#774553: exim4: Do not scan outgoing mail for spam
Hi Andreas,
On Sunday 04 January 2015 12:39:46 Andreas Metzler wrote:
On 2015-01-04 Rainer Dorsch m...@bokomoko.de wrote:
Package: exim4
Version: 4.84-6
Severity: wishlist
Tags: patch
Dear Maintainer,
I am running exim since a few years and scanned incoming and
outgoing mails for spam, where outgoing does not make a lot of sense
or even hurts.
[...]
I tend to disagree here. - Scanning outgoing mails to avoid spreading
viruses sent by infectected users makes sense.
Scanning does not hurt, but having the X-Spam-Report line
X-Spam_report: $spam_report
in outgoing mails made the Debian mailserver classifying my mail to a Debian
mailing
list as spam:
Jan 3 21:34:21 s_local@bendel amavis[17115]: (17115-41) Passed BAD-HEADER-4
{RelayedInbound,Quarantined}, pb_en-ht [79.209.215.172] m...@bokomoko.de[1] -
lists-debian-...@bendel.debian.org[2], quarantine: m/badh-m89awh4uBlcw,
Message-ID: 2158424.WclWlOo0ND@blackbox, mail_id: m89awh4uBlcw, Hits: -7.1,
size: 3331, queued_as: 0567AD2, Subject: outbox disappeared, From:
Rainer_Dorsch_m...@bokomoko.de[1], User-Agent:
KMail/4.14.1_(Linux/3.16.0-4-686-pae;_KDE/4.14.2;_i686;_;_), helo=, Tests:
[BAYES_00=-2,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,LDO_WHITE
LIST=-5],
autolearn=ham, autolearnscore=-5.1, languages=en, 6518 ms
X-Amavis-Alert: BAD HEADER SECTION, Improper folded header field made up
entirely of whitespace (char 20 hex): X-Spam-Report: ...that system
for details.\n \n Content previ[...]
From postmas...@debian.org: Because its header is broken. X-Spam-Report really
does not belong into outgoing mails.
Thanks,
Rainer
--
Rainer Dorsch
http://bokomoko.de/
[1] mailto:m...@bokomoko.de
[2] mailto:lists-debian-...@bendel.debian.org
