Bug#1066874: miniupnpd-nftables: nft_init.sh clobbers all other FORWARD table rules by changing policy to deny
Package: miniupnpd-nftables Version: 2.3.4-1 Severity: important Dear Maintainer, I've changed my system to use nftables for firewall rules and found out that miniupnpd-nftables clobbered everything else on FORWARD. (specifically, docker containers) Looking at all the rules and nft_init.sh, it seems like creating the forward table for miniupnpd and setting the default policy to deny breaks everything. Changing the default policy to accept makes everything work again. -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-9-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages miniupnpd-nftables depends on: ii libc6 2.37-15.1 ii libmnl0 1.0.5-2 ii libnftnl11 1.2.6-2 ii miniupnpd 2.3.4-1 miniupnpd-nftables recommends no packages. miniupnpd-nftables suggests no packages. -- Configuration Files: /etc/miniupnpd/nft_init.sh changed: . "$(dirname "$0")/miniupnpd_functions.sh" $NFT --check list table inet $TABLE > /dev/null 2>&1 if [ $? -eq "0" ] then echo "Table $TABLE already exists" exit 0 fi echo "Creating nftables structure" cat > /tmp/miniupnpd.nft <> /tmp/miniupnpd.nft <> /tmp/miniupnpd.nft <
Bug#1054515: graphdefanglib.pl cannot parse current /var/log/mail.log timestamps
Package: graphdefang Version: 3.3-1 Severity: important Dear Maintainer, Looked back at my mail server configurations and "dashboard" stuff and found out that graphdefang has not been working for awhile now. Running graphdefang.pl manually results in these error messages: Use of uninitialized value $host in hash element at /usr/share/graphdefang/graphdefanglib.pl line 271. Use of uninitialized value $host in hash element at /usr/share/graphdefang/graphdefanglib.pl line 282. Use of uninitialized value $unixtime in numeric lt (<) at /usr/share/graphdefang/graphdefanglib.pl line 283. Use of uninitialized value $program in hash element at /usr/share/graphdefang/graphdefanglib.pl line 295. Looking at graphdefanglib.pl those lines have to do with perl regex matching each individual syslog line and it's specifically having an issue with the timestamp. Looking at my mail.log, it appears that the timestamps have changed to be more complex and the regex is now unsuited. 2023-10-24T15:04:16.649054-05:00 servername dovecot: text 2023-10-24T15:04:20.350047-05:00 servername dovecot: text 2023-10-24T15:07:23.122066-05:00 servername postfix/smtpd[2863219]: text I was going to play with the m/^(\S+\s+\d+\s+\d+:\d+:\d+)\s # datestring -- 1 regex within graphdefanglib.pl much as I have in the past with graphdefang and mimedefang (and submitted patches for) but looking further down some other stuff does things with it so I wasn't sure how deeply I wanted to delve. Thanks for your attention! -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages graphdefang depends on: ii libfile-readbackwards-perl 1.06-2 ii libgd-graph-perl1.56~ds-1 ii libgd-text-perl 0.86-10 ii libmldbm-perl 2.05-4 ii libtimedate-perl2.3300-2 ii perl [libstorable-perl] 5.36.0-9 Versions of packages graphdefang recommends: ii php 2:8.2+93 ii php8.2 [php] 8.2.10-2 Versions of packages graphdefang suggests: ii mimedefang 3.3-1 -- Configuration Files: /etc/graphdefang/graphdefang-config changed [not included] -- no debconf information
Bug#1014741: libgd-perl: GD and GD2 image formats are disabled in libgd3 package
Package: libgd-perl Version: 2.76-2+b1 Severity: grave Justification: renders package unusable Graph.pm contains code that specifies file formats "gd" and "gd2" which are currently disabled in Debian's libgd3 package (these are actually obsolete formats, apparently, and only used in testing scenarios according to cursory googling). Attempting to use libgd-perl will always result in an error at line 515 in Graph.pm and likely elsewhere. Removing gd and gd2 as options from line 515 (and elsewhere as needed) renders client uses of this library functional again. Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or ineffective)? * What was the outcome of this action? * What outcome did you expect instead? *** End of the template - remove these template lines *** -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-6-amd64 (SMP w/4 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libgd-perl depends on: ii libc6 2.33-8 ii libgd3 2.3.3-3 ii perl5.34.0-5 ii perl-base [perlapi-5.34.0] 5.34.0-5 libgd-perl recommends no packages. libgd-perl suggests no packages. -- no debconf information
Bug#946552: graphdefang: mimedefang.pl regex filter assumes sendmail, does not work with, for example, postfix
Package: graphdefang
Version: 2.84-3+b2
Severity: normal
Tags: newcomer patch
Dear Maintainer,
I use mimedefang to filter mail for postfix as my MTS, and the packaged event
filter in
/usr/share/graphdefang/event/mimedefang.pl/general assumes that the system MTS
is sendmail.
Sendmail uses 14-character mail ID strings and postfix uses 9-character ID
strings.
Attached is a patch that changes the mimedefang.pl/general file to accept both
sendmail
and postfix strings logged by mimedefang.pl
I don't know what other MTS/mimedefang combinations exist so
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages graphdefang depends on:
ii libfile-readbackwards-perl 1.05-2
ii libgd-graph-perl1.54~ds-2
ii libgd-text-perl 0.86-9
ii libmldbm-perl 2.05-2
ii libtimedate-perl2.3000-2
ii perl [libstorable-perl] 5.30.0-9
Versions of packages graphdefang recommends:
ii php 2:7.3+69
ii php7.0 [php] 7.0.31-1
ii php7.2 [php] 7.2.11-3
ii php7.3 [php] 7.3.12-1
Versions of packages graphdefang suggests:
ii mimedefang 2.84-3+b2
-- Configuration Files:
/etc/graphdefang/graphdefang-config changed [not included]
-- no debconf information
*** general.dpkg-dist 2019-12-10 13:07:53.707823878 -0600
--- general 2019-12-10 13:23:07.296896371 -0600
***
*** 10,16
$event{'mimedefang.pl'}{'general'} =
sub {
! if ($text =~
m/^[A-Za-z0-9]{14}:\s*MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
# get values from regular expression
--- 10,16
$event{'mimedefang.pl'}{'general'} =
sub {
! if ($text =~
m/(?:^[A-Za-z0-9]{9}|^[A-Za-z0-9]{14}):\s*MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/
) {
# get values from regular expression
Bug#946550: graphdefang: no longer works with PHP 7.0.0 due to ereg() function removal
Package: graphdefang
Version: 2.84-3+b2
Severity: important
Tags: patch newcomer
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
I realized that my graphdefang output hasn't worked in ages so I decided to
track down the reason(s)
why.
After checking web server logs I realized it was because PHP 7.x removed ereg()
function and
therefore its usage needed to be replaced with preg_match() so I replaced the
ereg() call with a
preg_match() call, putting / and / around the pattern string. Maybe strpos is
more appropriate
but this was the quick fix.
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages graphdefang depends on:
ii libfile-readbackwards-perl 1.05-2
ii libgd-graph-perl1.54~ds-2
ii libgd-text-perl 0.86-9
ii libmldbm-perl 2.05-2
ii libtimedate-perl2.3000-2
ii perl [libstorable-perl] 5.30.0-9
Versions of packages graphdefang recommends:
ii php 2:7.3+69
ii php7.0 [php] 7.0.31-1
ii php7.2 [php] 7.2.11-3
ii php7.3 [php] 7.3.12-1
Versions of packages graphdefang suggests:
ii mimedefang 2.84-3+b2
-- Configuration Files:
/etc/graphdefang/graphdefang-config changed:
$DATAFILE = '/var/log/mail.log';
$OUTPUT_DIR = '/var/lib/graphdefang';
my %GraphSettings;
%GraphSettings = ();
%GraphSettings = (
'data_types'=> ['spam', 'probable_spam', 'virus', 'mail_in'],
'graph_type'=> 'line',
'grouping' => 'summary',
'grouping_times'=> ['hourly','daily','monthly'],
);
push @GRAPHS, { %GraphSettings };
%GraphSettings = ();
%GraphSettings = (
'data_types'=> ['virus'],
'graph_type'=> 'stacked_bar',
'grouping' => 'value1',
'value1_title' => 'VirusName',
'grouping_times'=> ['hourly','daily','monthly'],
#'filter' => '^(?:(?!klez).)*$',
#'filter_name' => 'Not Klez',
);
push @GRAPHS, { %GraphSettings };
%GraphSettings = ();
%GraphSettings = (
'data_types'=> ['spam', 'virus'],
'graph_type'=> 'stacked_bar',
'grouping' => 'recipient',
'top_n' => '9',
'grouping_times'=> ['hourly','daily','monthly'],
);
push @GRAPHS, { %GraphSettings };
%GraphSettings = ();
%GraphSettings = (
'data_types'=> ['spam'],
'graph_type'=> 'stacked_bar',
'grouping' => 'value2',
'value2_title' => 'Relay Address',
'top_n' => '9',
'grouping_times'=> ['hourly','daily','monthly'],
'filter'=> '^(?:(?!127.0.0.1).)*$',
'filter_name' => 'localhost',
);
push @GRAPHS, { %GraphSettings };
%GraphSettings = ();
%GraphSettings = (
'data_types'=> ['virus'],
'graph_type'=> 'stacked_bar',
'grouping' => 'value2',
'value2_title' => 'Relay Address',
'top_n' => '9',
'grouping_times'=> ['hourly','daily','monthly'],
'filter'=> '^(?:(?!127.0.0.1).)*$',
'filter_name' => 'localhost',
);
push @GRAPHS, { %GraphSettings };
-- no debconf information
*** index.php.dpkg-dist 2019-12-10 13:30:49.517395992 -0600
--- index.php 2019-12-10 11:13:50.179334072 -0600
***
*** 65,71
foreach($filename_array as $value) {
! if (ereg($view,$value)) {
$subvalue=explode($view,$value);
#print "$subvalue[1]";
print "";
--- 65,72
foreach($filename_array as $value) {
! $view_pattern = '/' . $view . '/';
! if (preg_match($view_pattern,$value)) {
$subvalue=explode($view,$value);
#print "$subvalue[1]";
print "";
Bug#687344: mimedefang: major configuration change in mimedefang, I suppose
Package: mimedefang Version: 2.73-1 Followup-For: Bug #687344 This passage from /etc/init.d/mimedefang should be placed in /etc/default/mimedefang, I was not even questioned about this file when upgrading to 2.73-1. Perhaps with an additional explanation line, something about enabling functionality such as virus scanners (clamav), etc. It seems ridiculous that this is not handled automatically when features are enabled for virus scanners in config files such as /etc/mail/mimedefang.pl.conf # Set to yes if you want the milter and multiplexor sockets to # be group-writable and files created by mimedefang group-readable. MD_ALLOW_GROUP_ACCESS=no -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages mimedefang depends on: ii adduser 3.113+nmu3 ii debconf [debconf-2.0] 1.5.46 ii libc6 2.13-35 ii libio-stringy-perl 2.110-5 ii libmailtools-perl 2.09-1 ii libmilter1.0.1 8.14.4-2.1 ii libmime-tools-perl 5.503-1 ii libperl5.14 5.14.2-13 ii libunix-syslog-perl 1.1-2+b2 ii perl [libmime-base64-perl] 5.14.2-13 ii psmisc 22.19-1 mimedefang recommends no packages. Versions of packages mimedefang suggests: ii clamav0.97.5+dfsg-6 ii graphdefang 2.73-1 pn libarchive-zip-perl pn libfile-scan-perl ii libhtml-parser-perl 3.69-2 pn sanitizer ii sendmail 8.14.4-2.1 ii spamassassin [libmail-spamassassin-perl] 3.3.2-4 ii tk8.4 [wish] 8.4.19-5 pn wv -- Configuration Files: /etc/default/mimedefang changed [not included] /etc/mail/mimedefang-filter changed [not included] /etc/mail/mimedefang.pl.conf changed [not included] /etc/mail/sa-mimedefang.cf changed [not included] -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#687344: mimedefang work directory files not created with g+w, breaks, for example, clamav-daemon usage
Package: mimedefang Version: 2.73-1 Severity: important Per this mailing list thread on mimedefang gmane: http://comments.gmane.org/gmane.mail.mimedefang/17076 Files are being created with 0700 permissions in the work directory /var/spool/MIMEDEFANG/mdefang-XX/ for scanning each message by a misapplication of a umask() call. This is preventing the use of clamav-daemon to scan these messages, even though the user clamav is in the group defang. Backing down to wheezy's 2.71 version of mimedefang, clamav works again, otherwise it logs a lstat() permission denied error and mail delivery quite obviously breaks. Thanks. -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages mimedefang depends on: ii adduser 3.113+nmu3 ii debconf [debconf-2.0] 1.5.46 ii libc6 2.13-35 ii libio-stringy-perl 2.110-5 ii libmailtools-perl 2.09-1 ii libmilter1.0.1 8.14.4-2.1 ii libmime-tools-perl 5.503-1 ii libperl5.14 5.14.2-13 ii libunix-syslog-perl 1.1-2+b2 ii perl [libmime-base64-perl] 5.14.2-13 ii psmisc 22.19-1 mimedefang recommends no packages. Versions of packages mimedefang suggests: ii clamav0.97.5+dfsg-6 ii graphdefang 2.73-1 pn libarchive-zip-perl pn libfile-scan-perl ii libhtml-parser-perl 3.69-2 pn sanitizer ii sendmail 8.14.4-2.1 ii spamassassin [libmail-spamassassin-perl] 3.3.2-4 ii tk8.4 [wish] 8.4.19-5 pn wv -- Configuration Files: /etc/default/mimedefang changed [not included] /etc/mail/mimedefang-filter changed [not included] /etc/mail/mimedefang.pl.conf changed [not included] /etc/mail/sa-mimedefang.cf changed [not included] -- debconf information: mimedefang/embedperl: true -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#444083: monopd: when I try to create a game on the server it goes into infinite loop
Package: monopd Version: 0.9.3-3 Severity: important As the subject says, when I connect to the server and try to create a game, the server goes into an infinite loop. I've tried the below clients: 0.4.2 gtkatlantic (amd64 linux, current package version) 0.4.1 gtkatlantic (win32) 0.7.5 atlantik (amd64 linux, current package version) This may be platform specific, I haven't another available machine to test monopd for other archs at the moment. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.18-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages monopd depends on: ii libc6 2.6.1-5GNU C Library: Shared libraries ii libcapsinetwork0c2a 0.3.0-3C++ network server library ii libgcc1 1:4.2.1-5 GCC support library ii libmath++0c2a 0.0.4-3C++ Math Type Library ii libstdc++64.2.1-5The GNU Standard C++ Library v3 monopd recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#426388: libupnp2: I also have this problem
Package: libupnp2 Version: 1.4.3-2 Followup-For: Bug #426388 I as well am experiencing this problem. There is a new upstream source for libupnp (fork from original Intel sources, I don't know where Debian upstream for this package comes from) that resolves this issue. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.18-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages libupnp2 depends on: ii libc6 2.6.1-1GNU C Library: Shared libraries libupnp2 recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#299153: psmisc: spurious error messages from fuser
Package: psmisc Version: 21.6-1 Severity: normal [EMAIL PROTECTED]:~/utils/searchfor$ fuser searchlog /proc/bus/usb: Permission denied searchlog: 29816 /proc/bus on this system is not world-readable. Why is fuser even needing to be looking in that directory with what I asked it to do? This started happening today probably as a result of the wishlist bugfix for #178972, I am now being bombarded in email by error output of crontabs. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.11-grsec-despayre-despayre Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages psmisc depends on: ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libncurses5 5.4-4Shared libraries for terminal hand -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#290386: gallery: package should change depends to include php5
Package: gallery Version: 1.4.4-pl4-7 Severity: normal I'm using dexter's php5 packages at this moment and gallery apparently works fine with what's there so far, except for having to do a --force-depends and then dealing with apt telling me to -f install every time. Please update the package depends to OR the php5 versions of the packages. Thanks! -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.10-grsec-despayre Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages gallery depends on: ii apache2-mpm-prefork [apache2] 2.0.52-3 Traditional model for Apache2 ii debconf 1.4.41 Debian configuration management sy ii netpbm2:10.0-8 Graphics conversion tools pn php4 | php4-cgi | libapache2-Not found. -- debconf information: * gallery/configure_warning: * gallery/restart: true * gallery/webserver: apache, apache-ssl, apache-perl, apache2 * gallery/album_warning: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#290367: please OR the depends on gallery to include php5 packages
Package: gallery Version: 1.4.4-pl4-7 Severity: normal php4 | php4-cgi | libapache2-mod-php4 | php5 | php5-cgi | libapache2-mod-php5 I tried p.d.o/~dexter's php5 packages on sid, and aside from forcing the install due to dependencies (only gallery at this point) gallery worked fine with php5. Please update the depends line in the control file. Thanks! -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.10-grsec-despayre Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages gallery depends on: ii apache2-mpm-prefork [apache2] 2.0.52-3 Traditional model for Apache2 ii debconf 1.4.41 Debian configuration management sy ii libapache2-mod-php5 5.0.3-0.3 HTML-embedded scripting language ( ii netpbm2:10.0-8 Graphics conversion tools ii php5 5.0.3-0.3 server-side, HTML-embedded scripti ii php5-cgi 5.0.3-0.3 HTML-embedded scripting language ( -- debconf information: * gallery/configure_warning: * gallery/restart: true * gallery/webserver: apache, apache-ssl, apache-perl, apache2 * gallery/album_warning: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
