Bug#765739: courier-imap-ssl: POODLE workaround breaks startup
Package: courier-imap-ssl
Version: 4.15-1.5
Severity: normal
Dear Maintainer,
When trying to implement workaround for POODLE[1], which means setting
IMAPDSSLSTART to NO, courier-imap-ssl won't start.
The fix is easy to implement: add
case $IMAPDSTARTTLS in
[yY]*)START=yes;;
esac
in /etc/init.d/courier-imap-ssl (right after the identical section for
IMAPDSSLSTART).
[1]
http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (900, 'testing'), (50, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages courier-imap-ssl depends on:
ii courier-imap 4.15-1.5
ii courier-ssl 0.73.1-1.5
ii debconf 1.5.53
ii openssl 1.0.1j-1
courier-imap-ssl recommends no packages.
Versions of packages courier-imap-ssl suggests:
pn courier-doc none
ii mutt [imap-client] 1.5.23-1.1
-- Configuration Files:
/etc/courier/imapd-ssl changed:
SSLPORT=993
SSLADDRESS=0
SSLPIDFILE=/var/run/courier/imapd-ssl.pid
MAXDAEMONS=40
MAXPERIP=40
SSLLOGGEROPTS=-name=imapd-ssl
IMAPDSSLSTART=NO
IMAPDSTARTTLS=YES
IMAP_TLS_REQUIRED=1
COURIERTLS=/usr/bin/couriertls
TLS_PROTOCOL=TLS1
TLS_STARTTLS_PROTOCOL=TLS1
TLS_CIPHER_LIST=TLSv1:HIGH:!SSLv3:!SSLv2:!LOW:!MEDIUM:!EXP:!NULL:!aNULL@STRENGTH
TLS_KX_LIST=ALL
TLS_COMPRESSION=ALL
TLS_CERTS=X509
TLS_CERTFILE=/etc/courier/imapd.pem
TLS_TRUSTCERTS=/etc/ssl/certs
TLS_VERIFYPEER=NONE
TLS_CACHEFILE=/var/lib/courier/couriersslcache
TLS_CACHESIZE=524288
MAILDIRPATH=Maildir
/etc/courier/imapd.cnf [Errno 2] No such file or directory:
u'/etc/courier/imapd.cnf'
/etc/init.d/courier-imap-ssl changed:
prefix=/usr
exec_prefix=${prefix}
sysconfdir=/etc/courier
bindir=${exec_prefix}/bin
sbindir=${exec_prefix}/sbin
libexecdir=${prefix}/lib/courier
TCPD=${sbindir}/couriertcpd
DAEMONPROG=${sbindir}/imapd
DAEMON=imapd-ssl
PROGRAM=Courier IMAP-SSL server
if ! [ -x ${bindir}/imapd ]; then
exit 0
fi
. /lib/lsb/init-functions
if ! [ -x $TCPD ]; then
log_action_msg $PROGRAM: ERROR - $TCPD missing
exit 1
fi
if ! [ -f ${sysconfdir}/imapd ]; then
log_action_msg $PROGRAM: ERROR - imapd configuration file missing
exit 1
fi
if ! [ -f ${sysconfdir}/imapd-ssl ]; then
log_action_msg $PROGRAM: ERROR - imapd-ssl configuration file missing
exit 1
fi
if [ -z $MAILDIRPATH ]; then
MAILDIRPATH=Maildir
fi
. ${sysconfdir}/imapd
. ${sysconfdir}/imapd-ssl
if [ -z $IMAP_UMASK ]; then
IMAP_UMASK=022
fi
if ! [ -x $COURIERTLS ]; then
log_action_msg $PROGRAM: ERROR - $COURIERTLS missing
exit 1
fi
START=no
case $IMAPDSSLSTART in
[yY]*)START=yes;;
esac
case $IMAPDSTARTTLS in
[yY]*)START=yes;;
esac
case $1 in
start)
if [ $START = yes ]; then
log_daemon_msg Starting $PROGRAM $DAEMON
umask $IMAP_UMASK
ulimit -v $IMAP_ULIMITD
/usr/bin/env - /bin/sh -c . ${sysconfdir}/imapd ; \
. ${sysconfdir}/imapd-ssl ; \
IMAP_TLS=1 ; export IMAP_TLS ; \
`sed -n '/^#/d;/=/p' ${sysconfdir}/imapd | \
sed 's/=.*//;s/^/export /;s/$/;/'`
`sed -n '/^#/d;/=/p' ${sysconfdir}/imapd-ssl | \
sed 's/=.*//;s/^/export /;s/$/;/'`
PROXY_HOSTNAME=$PROXY_HOSTNAME ; \
/usr/sbin/courierlogger -pid=$SSLPIDFILE -start $SSLLOGGEROPTS \
$TCPD -address=$SSLADDRESS \
-maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP \
$TCPDOPTS \
$SSLPORT $COURIERTLS -server -tcpd \
${libexecdir}/courier/imaplogin \
${bindir}/imapd $MAILDIRPATH
log_end_msg 0
fi
;;
stop)
log_daemon_msg Stopping $PROGRAM $DAEMON
/usr/sbin/courierlogger -pid=$SSLPIDFILE -stop
log_end_msg 0
;;
restart | force-reload)
$0 stop
$0 start
;;
status)
status_of_proc -p $SSLPIDFILE $DAEMON $PROGRAM exit 0 || exit $?
;;
*)
echo Usage: $0 {start|stop|restart|force-reload} 2
exit 2
;;
esac
exit 0
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#725007: libpq-dev: pg_config improperly includes -L../../../src/common in LDFLAGS
Package: libpq-dev Version: 9.3.0-2 Severity: normal Dear Maintainer, While investigating a build issue with FreeSwitch on Debian/testing[1], it was found that pg_config outputs: LDFLAGS = -L../../../src/common -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -L/usr/lib/mit-krb5 -L/usr/lib/x86_64-linux-gnu/mit-krb5 -Wl,--as-needed This cause build issues in the FreeSwitch package, since libtool will check whether the ../../../src/common directory exists and fail if it doesn't. [1] http://jira.freeswitch.org/browse/FS-5821 -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (900, 'testing'), (50, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.9-1-amd64 (SMP w/2 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libpq-dev depends on: ii comerr-dev 2.1-1.42.8-1 ii krb5-multidev 1.11.3+dfsg-3 ii libc6 2.17-92+b1 ii libpq5 9.3.0-2 ii libssl-dev 1.0.1e-3 libpq-dev recommends no packages. Versions of packages libpq-dev suggests: pn postgresql-doc-9.3 none -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#666986: ruby-vte: missing vte/deprecated dependency
Package: ruby-vte Version: 1.0.3-1+b1 Severity: important Dear Maintainer, In ruby-vte, /usr/lib/ruby/vendor_ruby/vte.rb requires vte/deprecated which is not present: $ echo 'require vte' | ruby /usr/lib/ruby/vendor_ruby/1.8/vte.rb:3:in `require': no such file to load -- vte/deprecated (LoadError) from /usr/lib/ruby/vendor_ruby/1.8/vte.rb:3 from -:1:in `require' from -:1 FWIW commenting out line 3 of vte.rb made the package useable by the application I was testing (vimmate, which is not a Debian package). -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (900, 'testing'), (99, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.1.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ruby-vte depends on: ii libatk1.0-0 2.2.0-2 ii libc6 2.13-27 ii libcairo2 1.10.2-7 ii libfontconfig1 2.8.0-3.1 ii libfreetype62.4.8-1 ii libgdk-pixbuf2.0-0 2.24.1-1 ii libglib2.0-02.30.2-6 ii libgtk2.0-0 2.24.10-1 ii libpango1.0-0 1.29.4-3+b1 ii libruby1.8 1.8.7.352-2 ii libruby1.9.11.9.3.0-2 ii libvte9 1:0.28.2-4 ii libx11-62:1.4.4-4 ruby-vte recommends no packages. ruby-vte suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#193106: Keep your girlfriend by your side when you have this.
Amaze her with your new length! http://zekpka.lednose.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#405860: ITP: enlightenment-0.17 -- The Enlightenment Window Manager, release 0.17
Package: wnpp Severity: wishlist Owner: Debian Enlightenment Packaging Team [EMAIL PROTECTED] * Package name: enlightenment-0.17 Version : 0.17 Upstream Author : Carsten Haitzler and the e17 devel team enlightenment-devel@lists.sourceforge.net * URL : http://www.enlightenment.org * License : BSD Description : The Enlightenment Window Manager, release 0.17 -- System Information: Debian Release: 3.1 Architecture: amd64 (x86_64) Kernel: Linux 2.6.18-1-xen-amd64 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
