Bug#1028001: closing 1028001
Hi On Thu, Jan 5, 2023 at 4:27 PM Salvatore Bonaccorso wrote: > Hi, > > On Thu, Jan 05, 2023 at 04:15:16PM -0500, Raouf M. Bencheraiet wrote: > > is 2.5.4-1~exp1 available for debian stable?! > > No, it will be in the next upcoming stable release Debian bookworm, as > we finally catched up following upstream releases more closely now > (Debian bookworm will likely have a 2.6.2 based version). > > The Debian BTS can handle version tracking, so it will show the stable > version still as affected. If backporting fixes to the 1.3.4 version > is feasible then we might pick those up as well via a bullseye point > release for the older version. > > My guess is that it will though be unfortunately too risky to actually > do that for 1:1.3.4-6. > > I'll see if I can try that (backporting) on my own. Although, building 2.6.2 for bullseye seems the easy way out (I do have 2.6.x running on other clients albeit on a different distro -- gentoo --). I guess we'll see what panes out! Great thanks for the quick replies! > Regards, > Salvatore > -- - Unix is fundamentally a simple system, but you have to be a genius to understand its simplicity. - Do not seek death, death will ultimately find you. Seek the road that makes death a fulfilment.
Bug#890630: a workaround
Hi, A workaround for this problem would be setting "Encryption Required" in client.conf (or environment variable CUPS_ENCRYPTION tp "required") -- - Unix is fundamentally a simple system, but you have to be a genius to understand its simplicity. - Do not seek death, death will ultimately find you. Seek the road that makes death a fulfilment.
Bug#890630: libgtk-3-0: When using cups's client.conf and SSL need to submit twice for it to work
Package: libgtk-3-0 Version: 3.22.11-1 Severity: important Dear Maintainer, When printing for any GTK application, printing the first time right after the programe is opened doesn't work. The second time and all susequent times it work just fine until the application is closed and opened again. Sniffing and running test with evince (with GTK_DEBUG=printing set) makes me think that things go south when the server asks for an ungraded connection (STATUS 426). canceling the job and printing again at that point, works just fine! -- System Information: Debian Release: 9.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-5-amd64 (SMP w/8 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libgtk-3-0 depends on: ii adwaita-icon-theme 3.22.0-1+deb9u1 ii hicolor-icon-theme 0.15-1 ii libatk-bridge2.0-0 2.22.0-2 ii libatk1.0-0 2.22.0-1 ii libc6 2.24-11+deb9u1 ii libcairo-gobject2 1.14.8-1 ii libcairo2 1.14.8-1 ii libcolord2 1.3.3-2 ii libcups22.2.1-8 ii libepoxy0 1.3.1-2 ii libfontconfig1 2.11.0-6.7+b1 ii libfreetype62.6.3-3.2 ii libgdk-pixbuf2.0-0 2.36.5-2+deb9u2 ii libglib2.0-02.50.3-2 ii libgtk-3-common 3.22.11-1 ii libjson-glib-1.0-0 1.2.6-1 ii libpango-1.0-0 1.40.5-1 ii libpangocairo-1.0-0 1.40.5-1 ii libpangoft2-1.0-0 1.40.5-1 ii librest-0.7-0 0.8.0-2 ii libsoup2.4-12.56.0-2+deb9u1 ii libwayland-client0 1.12.0-1 ii libwayland-cursor0 1.12.0-1 ii libwayland-egl1-mesa [libwayland-egl1] 13.0.6-1+b2 ii libx11-62:1.6.4-3 ii libxcomposite1 1:0.4.4-2 ii libxcursor1 1:1.1.14-1+deb9u1 ii libxdamage1 1:1.1.4-2+b3 ii libxext62:1.3.3-1+b2 ii libxfixes3 1:5.0.3-1 ii libxi6 2:1.7.9-1 ii libxinerama12:1.1.3-1+b3 ii libxkbcommon0 0.7.1-2~deb9u1 ii libxml2 2.9.4+dfsg1-2.2+deb9u2 ii libxrandr2 2:1.5.1-1 ii shared-mime-info1.8-1 Versions of packages libgtk-3-0 recommends: ii libgtk-3-bin 3.22.11-1 Versions of packages libgtk-3-0 suggests: ii gvfs 1.30.4-1 ii librsvg2-common 2.40.16-1+b1 -- no debconf information -- - Unix is fundamentally a simple system, but you have to be a genius to understand its simplicity. - Do not seek death, death will ultimately find you. Seek the road that makes death a fulfilment.
Bug#827429: openssh in jessie might leak info regarding validity of usernames
Package: opernssh-server
Version: 6.7p1-5+deb8u2
When trying to connect to a host with an invalid username and that and the
"too many authentication failures" is hit, the hosts leaks whether the
username is valid or not.
for ex:
ssh badusr@X.X.X.X
Received disconnect from X.X.X.X port 22:2: Too many authentication
failures for invalid user badusr from Y.Y.Y.Y port 47706 ssh2
Connection to X.X.X.X closed by remote host.
Connection to X.X.X.Xclosed.
the probleme is in auth_maxtries_exceeded (auth.c:331) :
auth_maxtries_exceeded(Authctxt *authctxt)
{
packet_disconnect("Too many authentication failures for "
"%s%.100s from %.200s port %d %s",
authctxt->valid ? "" : "invalid user ",
authctxt->user,
get_remote_ipaddr(),
get_remote_port(),
compat20 ? "ssh2" : "ssh1");
/* NOTREACHED */
}
it seems to have been fixed in a later release of openssh
https://github.com/openssh/openssh-portable/commit/6f621603f9cff2a5d6016a404c96cb2f8ac2dec0
--
- Unix is fundamentally a simple system, but you have to be a genius to
understand its simplicity.
- Do not seek death, death will ultimately find you. Seek the road that
makes death a fulfilment.
Bug#762601: [qtcreator] QTcreator depends on virtual qtbase-abi-5-3-1 which is no longer provided by any package
Thanks And sorry :) -- - Unix is fundamentally a simple system, but you have to be a genius to understand its simplicity. - Do not seek death, death will ultimately find you. Seek the road that makes death a fulfilment. On Sep 23, 2014 2:27 PM, "Lisandro Damián Nicanor Pérez Meyer" < perezme...@gmail.com> wrote: > On Tuesday 23 September 2014 12:17:34 Raouf M. Bencheraiet wrote: > > Package: qtcreator > [snip] > > Hi, > > > > All is said in the subject > > Indeed: this is an invalid bug ;) > > Qtcreator is involved in the current qtbase-abi-5-3-2 transition [0]. A new > version will get uploaded soon. > > Please check transitions before filling this kind of bugs, specially if you > are using sid :) > > [0] <https://release.debian.org/transitions/html/qtbase-abi-5-3-2.html> > > -- > Una vez que hemos eliminado lo imposible, lo que queda, por improbable que > parezca, es la verdad. > Sherlock Holmes > > Lisandro Damián Nicanor Pérez Meyer > http://perezmeyer.com.ar/ > http://perezmeyer.blogspot.com/ >
Bug#762601: [qtcreator] QTcreator depends on virtual qtbase-abi-5-3-1 which is no longer provided by any package
Package: qtcreator Version: 3.2.0+dfsg-2 Severity: normal --- Please enter the report below this line. --- Hi, All is said in the subject thanks $aptitude show qtcreator Package: qtcreator State: not installed Version: 3.2.0+dfsg-2 Priority: optional Section: devel Maintainer: Debian Qt/KDE Maintainers Architecture: amd64 Uncompressed Size: 47.7 M Depends: libqt5sql5-sqlite, qml-module-qtquick-controls (>= 5.2.1-4~), qml-module-qtquick2 (>= 5.2.1-5~), qtchooser, qtcreator-data (= 3.2.0+dfsg-2), libbotan-1.10-0, libc6 (>= 2.15), libgcc1 (>= 1:4.1.1), libqt5concurrent5 (>= 5.0.2), libqt5core5a (>= 5.3.0), libqt5declarative5 (>= 5.0.2), libqt5designer5 (>= 5.0.2), libqt5designercomponents5 (>= 5.0.2), libqt5gui5 (>= 5.3.0), libqt5help5 (>= 5.0.2), libqt5network5 (>= 5.0.2), libqt5printsupport5 (>= 5.0.2), libqt5qml5 (>= 5.2.0~beta1), libqt5quick5 (>= 5.1.0), libqt5script5 (>= 5.0.2), libqt5sql5 (>= 5.0.2), libqt5webkit5 (>= 5.2.0), libqt5widgets5 (>= 5.2.0), libqt5x11extras5 (>= 5.1.0), libqt5xml5 (>= 5.1.0), libstdc++6 (>= 4.9), libx11-6, qtbase-abi-5-3-1, qtdeclarative-abi-5-3-0, qtquick1-abi-5-2-1 Recommends: gdb, make, qt5-doc, qtbase5-dev-tools, qtcreator-doc, qtdeclarative5-dev-tools, qtquick1-5-dev-tools, qttools5-dev-tools, qttranslations5-l10n, qtxmlpatterns5-dev-tools, xterm | x-terminal-emulator Suggests: cmake, g++, git, kdelibs5-data, subversion Conflicts: qtcreator $aptitude show qtbase-abi-5-3-1 No current or candidate version found for qtbase-abi-5-3-1 Package: qtbase-abi-5-3-1 State: not a real package $aptitude show qtbase-abi-5-3-2 No current or candidate version found for qtbase-abi-5-3-2 Package: qtbase-abi-5-3-2 State: not a real package Provided by: libqt5core5a --- System information. --- Architecture: amd64 Kernel: Linux 3.16-1-amd64 Debian Release: jessie/sid 500 unstable grenier.iro.umontreal.ca --- Package information. --- Depends (Version) | Installed -+-= libqt5sql5-sqlite | 5.3.2+dfsg-2 qml-module-qtquick-controls (>= 5.2.1-4~) | qml-module-qtquick2 (>= 5.2.1-5~) | 5.3.2-3 qtchooser | 47-gd2b7997-2 qtcreator-data (= 3.1.2+dfsg-2) | 3.2.0+dfsg-2 libbotan-1.10-0 | 1.10.8-2 libc6 (>= 2.15) | libgcc1 (>= 1:4.1.1) | libqt5concurrent5 (>= 5.0.2) | libqt5core5a (>= 5.3.0) | libqt5declarative5 (>= 5.0.2) | libqt5designer5 (>= 5.0.2) | libqt5designercomponents5 (>= 5.0.2) | libqt5gui5 (>= 5.3.0) | libqt5help5 (>= 5.0.2) | libqt5network5 (>= 5.0.2) | libqt5printsupport5 (>= 5.0.2) | libqt5qml5 (>= 5.2.0~beta1) | libqt5quick5 (>= 5.1.0) | libqt5script5 (>= 5.0.2) | libqt5sql5 (>= 5.0.2) | libqt5webkit5 (>= 5.2.0) | libqt5widgets5 (>= 5.2.0) | libqt5x11extras5 (>= 5.1.0) | libqt5xml5 (>= 5.1.0) | libstdc++6 (>= 4.9) | libx11-6 | qtbase-abi-5-3-1 | qtdeclarative-abi-5-3-0 | qtquick1-abi-5-2-1 | Recommends (Version) | Installed ===-+-=== gdb | 7.7.1+dfsg-3 make | 4.0-8 qt5-doc | 5.3.0-2 qtbase5-dev-tools | 5.3.2+dfsg-2 qtcreator-doc | 3.2.0+dfsg-2 qtdeclarative5-dev-tools | 5.3.2-3 qtquick1-5-dev-tools | qttools5-dev-tools | qtxmlpatterns5-dev-tools | 5.3.2-2 xterm | 311-1 OR x-terminal-emulator | Suggests (Version) | Installed -+-=== cmake | 3.0.2-1 g++ | 4:4.9.1-4 git | 1:2.1.1-1 kdelibs5-data | 4:4.14.1-1 subversion | 1.8.10-1+b1 -- - Unix is fundamentally a simple system, but you have to be a genius to understand its simplicity. - Do not seek death, death will ultimately find you. Seek the road that makes death a fulfilment.
