Bug#284188: linux-wlan-ng-modules: unresolved symbols
On 04.12.04 Shawn K. Quinn ([EMAIL PROTECTED]) wrote: Hi, Package: linux-wlan-ng-modules-2.4.27-1-k7 Version: 2.4.27-2+0.2.0+0.2.1pre21-1 That package does not exist any more. It has been superseded by linux-wlan-ng-modules-2.4.27-2-k7 to reflect the abi-change in the kernel: linux-wlan-ng (0.2.0+0.2.1pre21-1.1) unstable; urgency=HIGH * NMU snip * Built binary modules packages against the new -2 abinamed version of the 2.4.27 kernel. Closes: #286305 -- Joey Hess [EMAIL PROTECTED] Tue, 18 Jan 2005 15:18:15 -0500 Architecture: i386 (i686) Kernel: Linux 2.4.27-1-k7 snip Versions of packages linux-wlan-ng-modules-2.4.27-1-k7 depends on: ii kernel-image-2.4.27-1 2.4.27-6 Linux kernel image for version 2.4 However I wonder, that it doesn't work with the old kernel installed. I guess this is http://bugs.debian.org/284356 . You should try to update to the new kernel kernel-image-2.4.27-2 and the new linux-wlan-ng-modules-2.4.27-2-k7 and close that bug it it helps or reassign if it doesn't. H. -- sigmentation fault -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291254: Doesn't work with the latest kernel-source-2.6.8
On Wed, Jan 19, 2005 at 10:53:16AM +0100, Aurelien Jarno wrote: It seems that kernel-patch-2.6.8-hppa doesn't work with kernel-source-2.6.8 (ie version 2.6.8-12), so it is simply unuseable: Thanks, I've already fixed this in my working tree, but I've been working fairly heavily with Bdale and others to make sure the next upload works well for everyone, so I've not yet uploaded it yet. I expect to have fixed things up in a short while. If you're really desperate for punishment, you can fetch the latest debs from http://parisc-linux.org/~kyle/debian-kernel/2005-01-18/. Cheers, Kyle -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289856: mdnsresponder: Wrong license
Marco d'Itri [EMAIL PROTECTED] - Fri, Jan 21, 2005: Do you suggest removing from the archive all packages whose licenses impose uncommon restrictions or just this one? In this software the problem is two folds, some parts of the software are clearly free, and some other parts are a fork of some code under APSL 2. Which leaves two options: rewriting the non-free part, or splitting in two packages, one for contrib and one for non-free. I think some software was already built on the libs provided by this package[1], so it is not trivial at all (indirect dependencies make some packages depend on it via the shlibs mecanism). Which makes me wonder whether APSL 2 is acceptable for non-free? Regards, [1] bee% grep-available -FDepends libhowl -sPackage Package: gnome-terminal Package: gnome-gv Package: nautilus-cd-burner Package: libgnomeui-0 Package: galeon Package: libhowl-dev Package: howl-utils Package: libgnomevfs2-common Package: gnome-games Package: epiphany-browser Package: gnome-pilot Package: gnome-session Package: libgnomevfs2-0 Package: libgnomevfs2-dev Package: totem-xine -- Loïc Minier [EMAIL PROTECTED] Neutral President: I have no strong feelings one way or the other.
Bug#288666: marked as done (plone: Depends: zope-cmfplone (= 2.0.4-1))
Your message dated Fri, 21 Jan 2005 10:48:49 +0100 with message-id [EMAIL PROTECTED] and subject line Finally plone 2.x is entering in sarge.. has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 4 Jan 2005 23:32:02 + From [EMAIL PROTECTED] Tue Jan 04 15:32:02 2005 Return-path: [EMAIL PROTECTED] Received: from enchanter.real-time.com [208.20.202.11] ([GlHKxMuoSgG5KLFNDFVEOlQH7oxINp+R]) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cly9h-g0-00; Tue, 04 Jan 2005 15:32:01 -0800 Received: from adviser.real-time.com (adviser.real-time.com [65.193.17.238]) by enchanter.real-time.com (8.12.10/8.12.10) with SMTP id j04NVjhx027559; Tue, 4 Jan 2005 17:31:45 -0600 Received: (nullmailer pid 30008 invoked by uid 1000); Tue, 04 Jan 2005 23:16:22 - Content-Type: text/plain; charset=us-ascii MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Bob Tanner [EMAIL PROTECTED] To: Debian Bug Tracking System [EMAIL PROTECTED] Subject: plone: Depends: zope-cmfplone (= 2.0.4-1) X-Mailer: reportbug 3.5 Date: Tue, 04 Jan 2005 17:16:22 -0600 Message-Id: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: plone Version: 2.0.4-1 Severity: grave Justification: renders package unusable # apt-get install plone The following packages have unmet dependencies: snip plone: Depends: zope-cmfplone (= 2.0.4-1) but it is not going to be installed Similar problem on i386 plone: Depends: zope-cmfplone (= 2.0.4-2) but it is not going to be installed Similar problem on powerpc plone: Depends: zope-cmfplone (= 2.0.4-2) but it is not going to be installed -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: sparc Kernel: Linux 2.4.25smp Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages plone depends on: pn zope-cmfploneNot found. --- Received: (at 288666-done) by bugs.debian.org; 21 Jan 2005 09:49:15 + From [EMAIL PROTECTED] Fri Jan 21 01:49:14 2005 Return-path: [EMAIL PROTECTED] Received: from ip-93-131.sn1.eutelia.it (diana.kobold.it) [62.94.93.131] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CrvPm-xx-00; Fri, 21 Jan 2005 01:49:14 -0800 Received: from kobold by diana.kobold.it with local, id 1CrvPN-0005di-00; Fri, 21 Jan 2005 10:48:49 +0100 Date: Fri, 21 Jan 2005 10:48:49 +0100 From: Fabio Tranchitella [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Finally plone 2.x is entering in sarge.. Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol=application/pgp-signature; boundary=bg08WKrSYDhXBjb5 Content-Disposition: inline X-Operating-System: Debian GNU/Linux 3.0 X-URL: http://www.kobold.it X-Organization: Kobold.it, Torino (Italia) X-GPG-Keyserver: http://keyserver.linux.it X-GPG-Keynumber: 0x7F961564 X-GPG-Fingerprint: 5465 6E69 E559 6466 BF3D 9F01 2BF8 EE2B 7F96 1564 User-Agent: Mutt/1.5.6+20040722i X-Scanner: exiscan *1CrvPN-0005di-00*wnzlWHGoAck* Kobold, www.kobold.it (Torino, Italia) Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_01 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 3 --bg08WKrSYDhXBjb5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Plone 2.x is entering in sarge today, I'm closing this bugs to let it go. Thanks, --=20 Fabio Tranchitella http://www.kobold.it Studio Tranchitella Assoc. Professionale http://www.tranchitella.it _ 1024D/7F961564, fpr 5465 6E69 E559 6466 BF3D 9F01 2BF8 EE2B 7F96 1564 --bg08WKrSYDhXBjb5 Content-Type: application/pgp-signature; name=signature.asc Content-Description: Digital signature Content-Disposition: inline -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4
Bug#248878: marked as done (incompatiblity between plone 1.0.5 and zope 2.6.4 as packaged by debian)
Your message dated Fri, 21 Jan 2005 10:48:49 +0100 with message-id [EMAIL PROTECTED] and subject line Finally plone 2.x is entering in sarge.. has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 13 May 2004 14:56:34 + From [EMAIL PROTECTED] Thu May 13 07:56:34 2004 Return-path: [EMAIL PROTECTED] Received: from ad-port53-2.unice.fr (port50-2.unice.fr) [134.59.53.249] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1BOHdS-0002hF-00; Thu, 13 May 2004 07:56:34 -0700 Received: by port50-2.unice.fr (Postfix, from userid 500) id 0D8D92FCBD; Thu, 13 May 2004 16:56:30 +0200 (CEST) Content-Type: text/plain; charset=us-ascii MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Jerome Alet [EMAIL PROTECTED] To: Debian Bug Tracking System [EMAIL PROTECTED] Subject: incompatiblity between plone 1.0.5 and zope 2.6.4 as packaged by debian X-Mailer: reportbug 2.58 Date: Thu, 13 May 2004 16:56:30 +0200 Message-Id: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-5.5 required=4.0 tests=BAYES_00,HAS_PACKAGE, HTML_MESSAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: X-CrossAssassin-Score: 1 Package: plone Version: 1.0.5.20030909-3 Severity: grave Justification: renders package unusable clicking on the portal workflow then contents tab and then on transitions tab of any workflow, and then clicking on any transition's name, like hide for example raises an unauthorized exception and the message is You are not allowed to access getPermissionsText in this context traceback is as follows : Traceback (innermost last): Module ZPublisher.Publish, line 89, in publish Module ZPublisher.BaseRequest, line 438, in traverse Module ZPublisher.HTTPResponse, line 663, in unauthorized Unauthorized: strongYou are not authorized to access this resource./strong on #plone on freenode I was referred to http://plone.org/documentation/errata/1.0.5 so perhaps debian should provide a clean upgrade path to the new plone upstream release or something like that bye Jerome Alet -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.4.26-1-686 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] Versions of packages plone depends on: ii zope-cmfplone 1.0.5.20030909-3 A zope/cmf-based content managemen -- no debconf information --- Received: (at 248878-done) by bugs.debian.org; 21 Jan 2005 09:49:15 + From [EMAIL PROTECTED] Fri Jan 21 01:49:15 2005 Return-path: [EMAIL PROTECTED] Received: from ip-93-131.sn1.eutelia.it (diana.kobold.it) [62.94.93.131] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CrvPm-xx-00; Fri, 21 Jan 2005 01:49:14 -0800 Received: from kobold by diana.kobold.it with local, id 1CrvPN-0005di-00; Fri, 21 Jan 2005 10:48:49 +0100 Date: Fri, 21 Jan 2005 10:48:49 +0100 From: Fabio Tranchitella [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Finally plone 2.x is entering in sarge.. Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol=application/pgp-signature; boundary=bg08WKrSYDhXBjb5 Content-Disposition: inline X-Operating-System: Debian GNU/Linux 3.0 X-URL: http://www.kobold.it X-Organization: Kobold.it, Torino (Italia) X-GPG-Keyserver: http://keyserver.linux.it X-GPG-Keynumber: 0x7F961564 X-GPG-Fingerprint: 5465 6E69 E559 6466 BF3D 9F01 2BF8 EE2B 7F96 1564 User-Agent: Mutt/1.5.6+20040722i X-Scanner: exiscan *1CrvPN-0005di-00*wnzlWHGoAck* Kobold, www.kobold.it (Torino, Italia) Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_01 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: --bg08WKrSYDhXBjb5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Plone 2.x is entering in sarge today, I'm closing this bugs to let it go. Thanks, --=20 Fabio Tranchitella http://www.kobold.it Studio Tranchitella Assoc. Professionale
Bug#289236: wvdial - patch for RC bug
NMU patch attached. Gruesse, -- Frank Lichtenheld [EMAIL PROTECTED] www: http://www.djpig.de/ diff -Naur wvdial-1.54.0.bak/debian/changelog wvdial-1.54.0/debian/changelog --- wvdial-1.54.0.bak/debian/changelog 2005-01-21 09:42:24.0 +0100 +++ wvdial-1.54.0/debian/changelog 2005-01-21 10:13:31.0 +0100 @@ -1,3 +1,14 @@ +wvdial (1.54.0-1.1) unstable; urgency=high + + * Non-maintainer upload. + * Recompile with latest libwvstreams-dev (Closes: #291506) + * Use pkg-config to get the right compiler flags +(Closes: #289236) + * While I'm on it, remove .. and ../wvstreams from include paths, +since these should probably never be used in a Debian package + + -- Frank Lichtenheld [EMAIL PROTECTED] Fri, 21 Jan 2005 09:42:37 +0100 + wvdial (1.54.0-1) unstable; urgency=low * New upstream release. diff -Naur wvdial-1.54.0.bak/debian/control wvdial-1.54.0/debian/control --- wvdial-1.54.0.bak/debian/control2005-01-21 09:42:24.0 +0100 +++ wvdial-1.54.0/debian/control2005-01-21 09:47:45.0 +0100 @@ -3,7 +3,7 @@ Priority: optional Maintainer: Patrick Patterson [EMAIL PROTECTED] Uploaders: Baruch Even [EMAIL PROTECTED], James Morrison [EMAIL PROTECTED] -Build-Depends: debhelper ( 3.0.0), libwvstreams-dev (= 3.75) +Build-Depends: debhelper ( 3.0.0), libwvstreams-dev (= 4.0.1-1.2), pkg-config Standards-Version: 3.5.9.0 Package: wvdial diff -Naur wvdial-1.54.0.bak/Makefile wvdial-1.54.0/Makefile --- wvdial-1.54.0.bak/Makefile 2003-11-14 20:46:13.0 +0100 +++ wvdial-1.54.0/Makefile 2005-01-21 10:28:16.0 +0100 @@ -1,6 +1,6 @@ ifeq ($(TOPDIR),) TOPDIR=. - PKGINC=/usr/include/wvstreams /usr/local/include/wvstreams + PKGINC=$(shell pkg-config --cflags libwvstreams) LIBS := $(LIBS) \ $(shell $(CC) -lsupc++ 21 | grep -q undefined reference \ echo -lsupc++) @@ -13,7 +13,7 @@ include $(TOPDIR)/wvrules.mk -XPATH=.. ../wvstreams/include $(PKGINC) +XPATH=$(PKGINC) default: all papchaptest all: wvdial.a wvdial wvdialconf pppmon @@ -21,7 +21,7 @@ wvdial.a: wvdialer.o wvdialtext.o wvmodemscan.o wvpapchap.o wvdialbrain.o \ wvdialmon.o -LIBS += -L../wvstreams -lwvutils -lwvstreams +LIBS += -lwvutils -lwvstreams wvdial wvdialconf papchaptest pppmon: wvdial.a diff -Naur wvdial-1.54.0.bak/wvrules.mk wvdial-1.54.0/wvrules.mk --- wvdial-1.54.0.bak/wvrules.mk2003-11-14 20:46:13.0 +0100 +++ wvdial-1.54.0/wvrules.mk2005-01-21 10:08:06.0 +0100 @@ -115,7 +115,7 @@ ALLDIRS = $(XPATH) #VPATH = $(shell echo $(ALLDIRS) | sed 's/[][ ]*/:/g') -INCFLAGS = $(addprefix -I,$(ALLDIRS)) +INCFLAGS = $(addprefix -I,$(patsubst -I%,%,$(ALLDIRS))) # # Typical compilation rules.
Bug#289856: mdnsresponder: Wrong license
Marco wrote: [EMAIL PROTECTED] wrote: [...] the APSL 2.0 is not, in the opinion of many (and AFAICT, according to the consensus of the debian-legal mailing list), a free license under the Where many in this context should be read as an handful of people on the debian-legal mailing list who invented new rules which are not part of the DFSG. Regardless of what you think about the other points, requiring non-defence of your own patents seems not to follow DFSG 9. Although I condemn software patents, I know they do exist in some places. I suspect it really is many and not just debian-legal contributors. Do you really want to argue that software under licences which try to affect other pieces of unrelated software meets the DFSG? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Fixed in NMU of wvdial 1.54.0-1.1
Processing commands for [EMAIL PROTECTED]: tag 289236 + fixed Bug#289236: wvdial: FTBFS with libwvstreams 4.0.1-1.1 Tags were: patch Tags added: fixed tag 291506 + fixed Bug#291506: wvdial: unsatisfiable depends on libwvstreams3-base in unstable There were no tags set. Tags added: fixed quit Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: only affects version in sid
Processing commands for [EMAIL PROTECTED]: tags 291501 sid Bug#291501: policycoreutils_1.20-2(ia64/unstable): FTBFS: missing build-depend There were no tags set. Tags added: sid thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: fixed package has reached testing
Processing commands for [EMAIL PROTECTED]: tags 291064 + sid fixed Bug#291064: Arbitrary command execution Tags were: patch sarge security Bug#291306: awstats: possible remote command execution vulnerability (iDEFENSE) Tags added: sid, fixed thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291538: G_FILENAME_ENCODING of @local not work anymore
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: libglib2.0-0 Version: 2.6.1-2 Severity: critical The @local in G_FILENAME_ENCODING which is the only way to not coredump any glib application if the filesystem is not utf-8 do not work anymore in the newest version of the glib. As this makes all glib depending applications broken I set the severity to critical. - -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (800, 'unstable'), (700, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.28 Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to de_DE) Versions of packages libglib2.0-0 depends on: ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an - -- no debconf information - -- Klaus Ethgenhttp://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen [EMAIL PROTECTED] Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) iQEVAwUBQfDqW5+OKpjRpO3lAQIIKAf9F+LnkarchSGDPjEDAvFisfha9tT4EGiU rjKO30LXgf9FSIT6h0qB8fKUIkytt+U/UxRfTI4NOjIeg4ylnkCoeAfgfXHGWeVP y26ef4rriVk/PSToCvs+Fv7bQZEtT77QLVJ9Xw3FPcuGPWV/GEMKD7RShL0ovlMR yA8dF9FGlW3AyKsXbTwlwIbFzh7wAz9KACPdYoI6W5KzF7oQcu9HuNQ141ee4UP2 CQ4JmA+d0vBylYt4noR2UgheQHIt5asStwfBLngtEsWPrXCx2FptaTf+GsnpsZxv vjk8CPsxShdkd+TvCHSfb9sCtW/WgHRQwJGFnkXtg/H3aYZkvHX5vg== =uF90 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291408: [debian-openldap] Bug#291408: slapd: Index and Data corruption with openldap2 2.1.30
Stephen Frost wrote: * Matthijs Mohlmann ([EMAIL PROTECTED]) wrote: We are running debian sarge on some of our servers now and are getting data and index corruption (every few weeks). On different servers (configured the same) we experience those problems. I think it is openldap that causes this problem because openldap 2.2 doesn't have this problems with the same bdb backend. (db4.2) Can you try setting LD_ASSUME_KERNEL=2.4.1 in the startup scripts and see if that helps? Thanks, Stephen Ok, This doesn't help, we could also reproduce it with a backport of 2.1.30 on woody systems, reproduced on sarge with the same version. And got the same results, index and data corruption. Look also at this bug: #278329 (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278329) Matthijs Mohlmann -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Re: Bug#291537: exim4: upgrade from 4.34-10 to 4.43-4 bounces all my mails!
Processing commands for [EMAIL PROTECTED]: severity #291537 important Bug#291537: exim4: upgrade from 4.34-10 to 4.43-4 bounces all my mails! Severity set to `important'. # this doesn't render the package completly unuseable to everyone thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291355: Fwd: Re: Bug#291355: gaim-gnome: installation fails, depends on uninstalable libpanel-applet0
the user replied only to me, I'm not sure what's up with this. luke - Forwarded message from julian [EMAIL PROTECTED] - Date: Fri, 21 Jan 2005 11:42:51 +0100 From: julian [EMAIL PROTECTED] To: Luke Schierer [EMAIL PROTECTED] Subject: Re: Bug#291355: gaim-gnome: installation fails, depends on uninstalable libpanel-applet0 gaim-gnome was discontinuted starting with the 0.60 release, we (upstream) removed the gnome code from gaim. as a result, it would only be installable on a woody system at this point. Shouldn't then gaim-gnome be removed from list of avalaible packages for sid? regards, julian. - End forwarded message - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291513: marked as done (xsok: the program doesn't start)
Your message dated Fri, 21 Jan 2005 07:02:18 -0500 with message-id [EMAIL PROTECTED] and subject line Bug#291513: fixed in xsok 1.02-14 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 21 Jan 2005 08:54:32 + From [EMAIL PROTECTED] Fri Jan 21 00:54:32 2005 Return-path: [EMAIL PROTECTED] Received: from fidel.freesurf.fr [212.43.206.16] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CruYq-gj-00; Fri, 21 Jan 2005 00:54:32 -0800 Received: from harris (62-240-243-39.adsl.claranet.fr [62.240.243.39]) by fidel.freesurf.fr (Postfix) with ESMTP id E59E82A4E40; Fri, 21 Jan 2005 09:54:00 +0100 (CET) Received: from fabien by harris with local (Exim 4.34) id 1CruYR-vL-9i; Fri, 21 Jan 2005 09:54:07 +0100 Content-Type: text/plain; charset=us-ascii MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Fabien COUTANT [EMAIL PROTECTED] To: Debian Bug Tracking System [EMAIL PROTECTED] Subject: xsok: the program doesn't start X-Mailer: reportbug 3.2 Date: Fri, 21 Jan 2005 09:54:07 +0100 Message-Id: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: xsok Version: 1.02-13 Severity: grave Justification: renders package unusable When run from the command line, here's the output: gunzip: /usr/share/games/xsok/floor.xpm.gz.gz: No such file or directory Invalid File: /usr/share/games/xsok/floor.xpm -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.27-1-k7-smp Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages xsok depends on: ii libc62.3.2.ds1-20GNU C Library: Shared libraries an ii libice6 4.3.0.dfsg.1-10 Inter-Client Exchange library ii libsm6 4.3.0.dfsg.1-10 X Window System Session Management ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li ii libxaw7 4.3.0.dfsg.1-10 X Athena widget set library ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte ii libxmu6 4.3.0.dfsg.1-10 X Window System miscellaneous util ii libxpm4 4.3.0.dfsg.1-10 X pixmap library ii libxt6 4.3.0.dfsg.1-10 X Toolkit Intrinsics ii xlibs4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu -- no debconf information --- Received: (at 291513-close) by bugs.debian.org; 21 Jan 2005 12:05:38 + From [EMAIL PROTECTED] Fri Jan 21 04:05:37 2005 Return-path: [EMAIL PROTECTED] Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CrxXl-0007Sq-00; Fri, 21 Jan 2005 04:05:37 -0800 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1CrxUY-0006QL-00; Fri, 21 Jan 2005 07:02:18 -0500 From: Emanuele Rocca [EMAIL PROTECTED] To: [EMAIL PROTECTED] X-Katie: $Revision: 1.55 $ Subject: Bug#291513: fixed in xsok 1.02-14 Message-Id: [EMAIL PROTECTED] Sender: Archive Administrator [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 07:02:18 -0500 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Source: xsok Source-Version: 1.02-14 We believe that the bug you reported is fixed in the latest version of xsok, which is due to be installed in the Debian FTP archive: xsok_1.02-14.diff.gz to pool/main/x/xsok/xsok_1.02-14.diff.gz xsok_1.02-14.dsc to pool/main/x/xsok/xsok_1.02-14.dsc xsok_1.02-14_i386.deb to pool/main/x/xsok/xsok_1.02-14_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emanuele Rocca [EMAIL
Processed: Re: Bug#289466: Identification of problem
Processing commands for [EMAIL PROTECTED]: tags 289466 patch Bug#289466: viewcvs: breaks config file on upgrade There were no tags set. Tags added: patch thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289466: Identification of problem
tags 289466 patch thanks On Mon, Jan 10, 2005 at 01:42:18AM +0100, Frank Lichtenheld wrote: The viewcvs bug is clearly caused by the use of vhosts in the configuration file. The script just isn't capable of dealing with this at all. I think the maintainer script should at least detect if the configuration file is too complex for them to handle and not touch it in this case (I wouldn't mind if the whole debconf stuff would disappear, but that's not up to me to decide). Of course one could also try to support vhosts via debconf but IMHO the effort isn't worth it. Attached is a proposed patch which should fix this issue. (I included some other simple changes, too) Gruesse, -- Frank Lichtenheld [EMAIL PROTECTED] www: http://www.djpig.de/ diff -Naur viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/changelog viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/changelog --- viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/changelog 2005-01-21 11:16:43.0 +0100 +++ viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/changelog 2005-01-21 12:46:54.0 +0100 @@ -1,3 +1,18 @@ +viewcvs (0.9.2+cvs.1.0.dev.2004.07.28-1.4) unstable; urgency=high + + * NMU. + * Don't try to change the config file if there are vhosts configured. +This will most probably mess it up (Closes: #289466) + * Bug fix: viewcvs: Updated Japanese po-debconf template translation +(ja.po), thanks to Hideki Yamane (Closes: #241832). + * Bug fix: Update of the french debconf translation, thanks to Michel +Grentzinger (Closes: #244514). + * Bug fix: [INTL:nl] New po-debconf translation in Dutch for viewcvs., +thanks to Tim Dijkstra (Closes: #289639). + * Copyright holder has changed, correct copyright file + + -- Frank Lichtenheld [EMAIL PROTECTED] Fri, 21 Jan 2005 12:33:29 +0100 + viewcvs (0.9.2+cvs.1.0.dev.2004.07.28-1.3) unstable; urgency=HIGH * NMU. diff -Naur viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/config viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/config --- viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/config 2005-01-21 11:16:43.0 +0100 +++ viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/config 2005-01-21 13:02:34.0 +0100 @@ -15,6 +15,10 @@ fi if [ -x /usr/lib/viewcvs/viewcvs-config -a -f /etc/viewcvs/viewcvs.conf ]; then +if [ -n `/usr/lib/viewcvs/viewcvs-config --all --section vhosts 2/dev/null` ]; then + exit 0 + fi + cvs_roots=`/usr/lib/viewcvs/viewcvs-config --get cvs_roots` svn_roots=`/usr/lib/viewcvs/viewcvs-config --get svn_roots` # svn_parent_path=`/usr/lib/viewcvs/viewcvs-config --get svn_parent_path` diff -Naur viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/copyright viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/copyright --- viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/copyright 2005-01-21 11:16:43.0 +0100 +++ viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/copyright 2005-01-21 12:46:21.0 +0100 @@ -3,13 +3,13 @@ It was downloaded from http://viewcvs.sourceforge.net/ -Upstream Author(s): Greg Stein [EMAIL PROTECTED] +Upstream Authors: Greg Stein [EMAIL PROTECTED] Copyright: -# Copyright (C) 1999-2000 Greg Stein. All Rights Reserved. +# Copyright (C) 1999-2002 The ViewCVS Group. All Rights Reserved. # -# By using this file, you agree to the terms and conditions set forth below: +# By using ViewCVS, you agree to the terms and conditions set forth below: # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions diff -Naur viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/po/fr.po viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/po/fr.po --- viewcvs-0.9.2+cvs.1.0.dev.2004.07.28.bak/debian/po/fr.po2005-01-21 11:16:43.0 +0100 +++ viewcvs-0.9.2+cvs.1.0.dev.2004.07.28/debian/po/fr.po2005-01-21 12:25:49.0 +0100 @@ -11,10 +11,10 @@ # msgid msgstr -Project-Id-Version: viewcvs_0.9.2+cvs.1.0.dev.2003.05.05-2\n +Project-Id-Version: viewcvs_0.9.2+cvs.1.0.dev.2004.07-2\n Report-Msgid-Bugs-To: \n POT-Creation-Date: 2004-03-24 15:48+0900\n -PO-Revision-Date: 2003-07-09 23:05+0200\n +PO-Revision-Date: 2004-08-31 09:48+0200\n Last-Translator: Michel Grentzinger [EMAIL PROTECTED]\n Language-Team: French debian-l10n-french@lists.debian.org\n MIME-Version: 1.0\n @@ -25,7 +25,7 @@ #. Description #: ../templates:4 msgid Where are your cvs roots? -msgstr O sont situs vos entrepts CVS? +msgstr Emplacement de vos entrepts CVS: #. Type: string #. Description @@ -43,30 +43,28 @@ #. Type: string #. Description #: ../templates:12 -#, fuzzy msgid Where are your svn roots? -msgstr O sont situs vos entrepts CVS? +msgstr Emplacement de vos entrepts svn: #. Type: string #. Description #: ../templates:12 -#, fuzzy msgid This setting specifies each of the Subversion roots (repositories) on your system and assigns names to them. Each root should be given by a \name: path \
Bug#291545: tetex-bin: initex fails to generate some etmf files
Package: tetex-bin Version: 2.0.2-25 Severity: grave Justification: renders package unusable Hi! After upgrading tetex-bin, it stopped working. On reinstalling, this is what I get: [EMAIL PROTECTED]:~$ LANG=en_US sudo apt-get install --reinstall tetex-bin Reading Package Lists... Done Building Dependency Tree... Done 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 293 not upgraded. 2 not fully installed or removed. Need to get 0B of archives. After unpacking 0B of additional disk space will be used. Do you want to continue? [Y/n] Setting up tetex-base (2.0.2c-3) ... Running initex. This may take some time. ... Error: `tex -ini -jobname=latex -progname=latex latex.ini' failed Error: `etex -ini -jobname=latex -progname=latex *latex.ini' failed Error: `etex -ini -jobname=elatex -progname=elatex *elatex.ini' failed Error: `pdftex -ini -jobname=pdflatex -progname=pdflatex pdflatex.ini' failed Error: `pdfetex -ini -jobname=pdflatex -progname=pdflatex *pdflatex.ini' failed Error: `pdfetex -ini -jobname=pdfelatex -progname=pdfelatex *pdfelatex.ini' failed (...) If I run these commands manually, this is what I get: [EMAIL PROTECTED]:~$ sudo tex -ini -jobname=latex -progname=latex latex.ini This is TeXk, Version 3.14159 (Web2C 7.4.5) (INITEX) %-line parsing enabled. (...) (/usr/share/texmf/tex/generic/hyphen/icehyph.tex ! TeX capacity exceeded, sorry [pattern memory=64000]. l.3280 4skal No pages of output. Transcript written on latex.log. And this is what I find in latex.log: (...) (/usr/share/texmf/tex/generic/hyphen/icehyph.tex ! TeX capacity exceeded, sorry [pattern memory=64000]. l.3280 4skal If you really absolutely need more capacity, you can ask a wizard to enlarge me. Here is how much of TeX's memory you used: 3024 strings out of 13683 33421 string characters out of 101705 44435 words of memory out of 263001 3063 multiletter control sequences out of 1+0 3640 words of font info for 14 fonts, out of 40 for 1000 135 hyphenation exceptions out of 1000 20i,0n,20p,219b,340s stack positions out of 300i,100n,500p,5b,4000s No pages of output. I don't know which wizard to ask. dpkg-reconfigure is not working, because the package is not fully installed. And I don't know which file to edit, or if I actually have to edit a file to fix this. This renders the package completely unusable, and I can't find a fix for it. -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (600, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-1-k7 Locale: LANG=es_AR, LC_CTYPE=es_AR (charmap=ISO-8859-1) Versions of packages tetex-bin depends on: ii debconf 1.4.30.11 Debian configuration management sy ii debianutils 2.8.4 Miscellaneous utilities specific t ii dpkg 1.10.25 Package maintenance system for Deb ii ed 0.2-20 The classic unix line editor ii libc62.3.2.ds1-20GNU C Library: Shared libraries an ii libgcc1 1:3.4.3-6 GCC support library ii libice6 4.3.0.dfsg.1-8 Inter-Client Exchange library ii libkpathsea3 2.0.2-25path search library for teTeX (run ii libpaper11.1.14-3Library for handling paper charact ii libpng12-0 1.2.8rel-1 PNG library - runtime ii libsm6 4.3.0.dfsg.1-8 X Window System Session Management ii libstdc++5 1:3.3.4-13 The GNU Standard C++ Library v3 ii libt1-5 5.0.2-3 Type 1 font rasterizer library - r ii libwww0 5.4.0-9 The W3C WWW library ii libx11-6 4.3.0.dfsg.1-8 X Window System protocol client li ii libxaw7 4.3.0.dfsg.1-8 X Athena widget set library ii libxext6 4.3.0.dfsg.1-8 X Window System miscellaneous exte ii libxmu6 4.3.0.dfsg.1-8 X Window System miscellaneous util ii libxt6 4.3.0.dfsg.1-8 X Toolkit Intrinsics ii mime-support 3.28-1 MIME files 'mime.types' 'mailcap ii perl 5.8.4-3 Larry Wall's Practical Extraction ii sed 4.1.2-8 The GNU sed stream editor pn tetex-base Not found. ii ucf 1.13Update Configuration File: preserv ii xlibs4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu ii zlib1g 1:1.2.2-3 compression library - runtime -- debconf information: * tetex-bin/upd_map: true *
Processed: severity of 288274 is grave, merging 288274 288297
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 severity 288274 grave Bug#288274: ftp.debian.org: remove astats package, better package replace it Severity set to `grave'. merge 288274 288297 Bug#288274: ftp.debian.org: remove astats package, better package replace it Bug#288297: RM: astats -- Security issues, obsolete Merged 288274 288297. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 270481 to RM: i2c-old -- RoM
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 retitle 270481 RM: i2c-old -- RoM Bug#270481: RM: i2c-old [!i386] -- Rom: NBS (ANAIS), i386 kernel modules Changed Bug title. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 270481 to RM: i2c-old -- RoM; obsolete source package
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 retitle 270481 RM: i2c-old -- RoM; obsolete source package Bug#270481: RM: i2c-old -- RoM Changed Bug title. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289856: mdnsresponder: Wrong license
On Fri, Jan 21, 2005 at 09:58:21AM +0100, Loïc Minier wrote: Marco d'Itri [EMAIL PROTECTED] - Fri, Jan 21, 2005: Do you suggest removing from the archive all packages whose licenses impose uncommon restrictions or just this one? In this software the problem is two folds, some parts of the software are clearly free, and some other parts are a fork of some code under APSL 2. Which leaves two options: rewriting the non-free part, or splitting in two packages, one for contrib and one for non-free. I don't really think it's acceptable to move half of gnome into contrib. Fortunately, if the package dependencies of libhowl0 are accurate, this shouldn't be required; mdnsresponder isn't a dependency of libhowl0, only a recommends: which could in theory be weakened to a suggests:. You indicated on IRC that the library functionality isn't very useful without the mdnsresponder package. I think it isn't very useful to a lot of users even *with* the mdnsresponder package, so I don't think we'd be lying to ourselves by weakening this to a suggests:. I think some software was already built on the libs provided by this package[1], so it is not trivial at all (indirect dependencies make some packages depend on it via the shlibs mecanism). Which makes me wonder whether APSL 2 is acceptable for non-free? The APSL 2.0 allows free redistribution, and allows us to make the modifications necessary to maintain the package as long as we publish our source (which we obviously will). This license would be fine in non-free. Because the lib would need to stay in main instead of contrib, however, the source package would still have to be split to allow this. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#290999: depends on wvstreams3, not wvstreams4
On Friday 21 January 2005 08:09, Frank Lichtenheld wrote: On Tue, Jan 18, 2005 at 01:00:47AM -0500, Joe Mason wrote: libwvstreams3 seems to have disappeared from Debian unstable, but retchmail still depends on it instead of libwvstreams4: Just a quick note: I investigated if this would be a simple recompile, but apparently the program uses WvStreamList which disappeared in WvStreams 4.0. This issue seems to be fixed in the upstream CVS but the patch was too invasive to be considered for a NMU. I will remove retchmail from testing for now so that the new wvstreams can enter it. Frank: As I am still waiting for keyring-maint to get my key in shape to do a proper upload, if you want to do an upload of retchmail with what is in CVS instead of as an NMU, then I'm cool with that... alternatively, let me know, and I'll have the WvStreams maintainer (sfllaw) do the upload, since he broke it in the first place :) -- Patrick Patterson Technical Ambassador Net Integration Technologies Inc. http://open.nit.ca -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#290999: depends on wvstreams3, not wvstreams4
On Fri, Jan 21, 2005 at 08:43:41AM -0500, Patrick Patterson wrote: On Friday 21 January 2005 08:09, Frank Lichtenheld wrote: On Tue, Jan 18, 2005 at 01:00:47AM -0500, Joe Mason wrote: libwvstreams3 seems to have disappeared from Debian unstable, but retchmail still depends on it instead of libwvstreams4: Just a quick note: I investigated if this would be a simple recompile, but apparently the program uses WvStreamList which disappeared in WvStreams 4.0. This issue seems to be fixed in the upstream CVS but the patch was too invasive to be considered for a NMU. I will remove retchmail from testing for now so that the new wvstreams can enter it. Frank: As I am still waiting for keyring-maint to get my key in shape to do a proper upload, if you want to do an upload of retchmail with what is in CVS instead of as an NMU, then I'm cool with that... alternatively, let me know, and I'll have the WvStreams maintainer (sfllaw) do the upload, since he broke it in the first place :) Odd. I didn't ask for libwvstreams3 to get yoinked. Simon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 291033, tagging 291033
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 tags 291033 fixed Bug#291033: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability Tags were: sarge security patch Bug#291118: vulnerable to CAN-2005-0005, buffer overflow in PSD decoder Tags added: fixed # fixed version reached testing tags 291033 - sarge Bug#291033: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability Tags were: fixed sarge security patch Bug#291118: vulnerable to CAN-2005-0005, buffer overflow in PSD decoder Tags removed: sarge End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#290999: depends on wvstreams3, not wvstreams4
On Fri, Jan 21, 2005 at 09:18:40AM -0500, Simon Law wrote: Odd. I didn't ask for libwvstreams3 to get yoinked. You don't need to. If you upload a new version of a source package that builds different binary packages than the one before the old ones will be removed semi-automatically (next time a ftp-master runs the rene script that detects such issues). Gruesse, -- Frank Lichtenheld [EMAIL PROTECTED] www: http://www.djpig.de/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 290974
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 tags 290974 - sid Bug#290974: apache: Temporary usage bugs that can be used in symlink attacks Tags were: sarge security sid Tags removed: sid End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#283896: libdbd-sqlite-perl: version mismatch with sqlite package.
Hi Krzysztof, On Mon, Jan 10, 2005 at 09:33:16AM +0100, Krzysztof Krzyzaniak wrote: Take look at http://lists.debian.org/debian-perl/2004/12/msg00030.html, http://lists.debian.org/debian-perl/2004/12/msg00039.html (and below). Question is in upstream changes and very confusing schema names. I'll try to work out this issue as soon as possible. any word on this? I'm getting a bit tickled but this. I've got the feeling that everytime I write a perl script using DBD::SQLite it's going to break without warning... Marcelo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#283896: libdbd-sqlite-perl: version mismatch with sqlite package.
Hi Steve, On Sat, Jan 08, 2005 at 04:44:22AM -0800, Steve Langasek wrote: - First, this bug is not critical: it does not break unrelated packages or the whole system. It is at most grave (if it makes the package unusable), or serious (if it's your opinion that this bug makes the package unsuitable for release for other reasons). It depends on how you understand unrelated packages. It breaks existing scripts because the backend is changed from SQLite 2 to 3. SQLite 3 can't read files written by SQLite 2 and the error message that DBD outputs is rather confusing (much more generic than can't read files in SQLite 2 format). The package itself is usable, one must only pay attention to what one is doing. It's unsuitable for release with sarge because we don't know what upstream's plan is (maybe Krzysztof has already figured out something with upstream, but there's no record of that on the BTS). I would very much prefer _not_ to release these packages with sarge unless this is fixed and an upgrade path is provided. SQLite provides such path, only the Perl DBD is a mess. Marcelo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 291006 to installation-reports: LVM install failed due to missing dmsetup
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 retitle 291006 installation-reports: LVM install failed due to missing dmsetup Bug#291006: Package: installation-reports Changed Bug title. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289856: mdnsresponder: Wrong license
Steve Langasek [EMAIL PROTECTED] - Fri, Jan 21, 2005: I don't really think it's acceptable to move half of gnome into contrib. Fortunately, if the package dependencies of libhowl0 are accurate, this shouldn't be required; mdnsresponder isn't a dependency of libhowl0, only a recommends: which could in theory be weakened to a suggests:. Err of course GNOME would have to rebuild gnomevfs and packages built with the howl enabled gnomevfs. I never meant to move GNOME in contrib! You indicated on IRC that the library functionality isn't very useful without the mdnsresponder package. I think it isn't very useful to a lot of users even *with* the mdnsresponder package, so I don't think we'd be lying to ourselves by weakening this to a suggests:. I think howl is great and would really do some good to usability in some programs. But sure, we lived without it in the past. Bye, -- Loïc Minier [EMAIL PROTECTED]
Bug#291566: libavcodec-dev: Multiple integer overflows, some of them may lead to arbitrary code execution
Package: libavcodec-dev
Version: 0.cvs20050106-1
Severity: grave
Tags: security
Justification: user security hole
[Cc'ing security@, as at least xine-lib embeds libavcodec, there may be
more, I haven't investigated whether they are affected, but I assume it's
the case]
The most recent ffmpeg-cvs-log message from ffmpeg maintainer Michael
Niedermayer mentions
| integer overflows, heap corruption
| possible arbitrary code execution cannot be ruled out in some cases
| precautionary checks
Feel free to downgrade severity if it turns out not to be exploitable.
I've attached the complete commit message, which includes the fixes.
Cheers,
Moritz
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-1-386
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
Versions of packages libavcodec-dev depends on:
ii liba52-0.7.4-dev [liba52-dev 0.7.4-1 Development library and headers fo
ii libdts-dev 0.0.2-svn-1 development files for libdts
ii libvorbis-dev1.0.1-1 The Vorbis General Audio Compressi
ii zlib1g-dev 1:1.2.2-4 compression library - development
-- no debconf information
Update of /cvsroot/ffmpeg/ffmpeg/libavformat
In directory mail:/var2/tmp/cvs-serv27074
Modified Files:
4xm.c allformats.c avidec.c aviobuf.c gifdec.c grab.c http.c
img.c img2.c matroska.c mov.c nsvdec.c nut.c ogg.c segafilm.c
sgi.c utils.c wc3movie.c avformat.h
Log Message:
integer overflows, heap corruption
possible arbitrary code execution cannot be ruled out in some cases
precautionary checks
Index: 4xm.c
===
RCS file: /cvsroot/ffmpeg/ffmpeg/libavformat/4xm.c,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -d -r1.13 -r1.14
--- 4xm.c 19 Jun 2004 03:59:33 - 1.13
+++ 4xm.c 8 Jan 2005 14:21:32 - 1.14
@@ -185,6 +185,8 @@
current_track = LE_32(header[i + 8]);
if (current_track + 1 fourxm-track_count) {
fourxm-track_count = current_track + 1;
+if((unsigned)fourxm-track_count = UINT_MAX / sizeof(AudioTrack))
+return -1;
fourxm-tracks = av_realloc(fourxm-tracks,
fourxm-track_count * sizeof(AudioTrack));
if (!fourxm-tracks) {
Index: allformats.c
===
RCS file: /cvsroot/ffmpeg/ffmpeg/libavformat/allformats.c,v
retrieving revision 1.42
retrieving revision 1.43
diff -u -d -r1.42 -r1.43
--- allformats.c 4 Jan 2005 14:38:52 - 1.42
+++ allformats.c 8 Jan 2005 14:21:32 - 1.43
@@ -125,8 +125,8 @@
#endif
av_register_image_format(jpeg_image_format);
#endif
-av_register_image_format(gif_image_format);
-av_register_image_format(sgi_image_format);
+av_register_image_format(gif_image_format);
+//av_register_image_format(sgi_image_format); heap corruption, dont enable
#endif //CONFIG_ENCODERS
/* file protocols */
Index: avidec.c
===
RCS file: /cvsroot/ffmpeg/ffmpeg/libavformat/avidec.c,v
retrieving revision 1.58
retrieving revision 1.59
diff -u -d -r1.58 -r1.59
--- avidec.c 19 Dec 2004 02:55:40 - 1.58
+++ avidec.c 8 Jan 2005 14:21:32 - 1.59
@@ -302,9 +302,11 @@
get_le32(pb); /* ClrUsed */
get_le32(pb); /* ClrImportant */
+ if(size 10*4 size(130)){
st-codec.extradata_size= size - 10*4;
st-codec.extradata= av_malloc(st-codec.extradata_size + FF_INPUT_BUFFER_PADDING_SIZE);
get_buffer(pb, st-codec.extradata, st-codec.extradata_size);
+ }
if(st-codec.extradata_size 1) //FIXME check if the encoder really did this correctly
get_byte(pb);
@@ -549,6 +551,8 @@
nb_index_entries = size / 16;
if (nb_index_entries = 0)
return -1;
+if(nb_index_entries + 1 = UINT_MAX / sizeof(AVIIndexEntry))
+return -1;
/* read the entries and sort them in each stream component */
for(i = 0; i nb_index_entries; i++) {
Index: aviobuf.c
===
RCS file: /cvsroot/ffmpeg/ffmpeg/libavformat/aviobuf.c,v
retrieving revision 1.22
retrieving revision 1.23
diff -u -d -r1.22 -r1.23
--- aviobuf.c 8 Oct 2004 20:09:52 - 1.22
+++ aviobuf.c 8 Jan 2005 14:21:32 - 1.23
@@ -629,11 +629,13 @@
/* reallocate buffer if needed */
new_size = d-pos + buf_size;
new_allocated_size = d-allocated_size;
+if(new_size d-pos || new_size INT_MAX/2)
+return -1;
while (new_size new_allocated_size) {
if (!new_allocated_size)
new_allocated_size = new_size;
else
-
Bug#280186: marked as done (ml-yacc: FTBFS: File missing)
Your message dated Fri, 21 Jan 2005 16:55:12 +0100 with message-id [EMAIL PROTECTED] and subject line Source package gone has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 7 Nov 2004 21:46:14 + From [EMAIL PROTECTED] Sun Nov 07 13:46:13 2004 Return-path: [EMAIL PROTECTED] Received: from pd9e7fea0.dip.t-dialin.net (stigge.org) [217.231.254.160] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CQurV-0001XL-00; Sun, 07 Nov 2004 13:46:13 -0800 Received: (qmail 13812 invoked from network); 7 Nov 2004 21:46:10 - Received: from unknown (HELO atari.stigge.org) (192.168.1.99) by sbo.stigge.org with SMTP; 7 Nov 2004 21:46:10 - Received: from [192.168.1.99] (localhost [127.0.0.1]) by atari.stigge.org (Postfix) with ESMTP id E1D531004432E; Sun, 7 Nov 2004 22:46:09 +0100 (CET) From: Roland Stigge [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: ml-yacc: FTBFS: File missing Message-Id: [EMAIL PROTECTED] Date: Sun, 7 Nov 2004 22:46:09 +0100 (CET) Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: Package: ml-yacc Version: 110.42-1 Severity: serious Hi, building the package ml-yacc in a clean build environment (with pbuilder) on i386 results in: = [...] Standard ML of New Jersey v110.49 [FLINT v1.5], September 13, 2004 [scanning ml-yacc.cm] [scanning $/ml-yacc-lib.cm] ml-yacc.cm:7.3-7.19 Error: Io: openIn failed on /home/he/Projects/Debian/Sponsoring/Aaron_Read/smlnj-110.49/sml.boot.x86-unix/ml-yacc-lib.cm/ml-yacc-lib.cm, No such file or directory [parsing (ml-yacc.cm):sigs.sml] [creating directory .cm/SKEL] [parsing (ml-yacc.cm):utils.sig] [parsing (ml-yacc.cm):hdr.sml] [parsing (ml-yacc.cm):yacc.grm.sig] [parsing (ml-yacc.cm):yacc.grm.sml] [parsing (ml-yacc.cm):yacc.lex.sml] [parsing (ml-yacc.cm):parse.sml] [parsing (ml-yacc.cm):utils.sml] [parsing (ml-yacc.cm):grammar.sml] [parsing (ml-yacc.cm):core.sml] [parsing (ml-yacc.cm):coreutils.sml] [parsing (ml-yacc.cm):graph.sml] [parsing (ml-yacc.cm):look.sml] [parsing (ml-yacc.cm):lalr.sml] [parsing (ml-yacc.cm):mklrtable.sml] [parsing (ml-yacc.cm):mkprstruct.sml] [parsing (ml-yacc.cm):shrink.sml] [parsing (ml-yacc.cm):verbose.sml] [parsing (ml-yacc.cm):absyn.sig] [parsing (ml-yacc.cm):absyn.sml] [parsing (ml-yacc.cm):yacc.sml] [parsing (ml-yacc.cm):link.sml] [parsing (ml-yacc.cm):export-yacc.sml] Compilation failed. make: *** [ml-yacc.] Error 1 = Thanks for considering. --- Received: (at 280186-done) by bugs.debian.org; 21 Jan 2005 15:57:46 + From [EMAIL PROTECTED] Fri Jan 21 07:57:46 2005 Return-path: [EMAIL PROTECTED] Received: from higgs.djpig.de [213.133.98.126] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cs1AQ-0004Lw-00; Fri, 21 Jan 2005 07:57:46 -0800 Received: from djpig by higgs.djpig.de with local (Exim 4.34) id 1Cs17w-0001LH-MN for [EMAIL PROTECTED]; Fri, 21 Jan 2005 16:55:12 +0100 Date: Fri, 21 Jan 2005 16:55:12 +0100 From: Frank Lichtenheld [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Source package gone Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.6+20040907i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: There is no ml-yacc source package anymore. Gruesse, -- Frank Lichtenheld [EMAIL PROTECTED] www: http://www.djpig.de/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#290966: Uploaded to delayed+3days
On Tue, 18 Jan 2005 00:15:00 +0100 Kurt Roeckx wrote: Your package is failing to build with the following error: g++ -O2 -g -c `wx-config --cflags` -o sffview.o sffview.cpp In file included from sffview.cpp:36: common.h:36:37: boost/filesystem/path.hpp: No such file or directory sffview.cpp: In member function `void SffView::CalcScale()': sffview.cpp:123: warning: passing `double' for converting 4 of `virtual void wxScrolledWindow::SetScrollbars(int, int, int, int, int, int, bool)' sffview.cpp:128: warning: passing `double' for converting 3 of `virtual void wxScrolledWindow::SetScrollbars(int, int, int, int, int, int, bool)' make[1]: *** [sffview.o] Error 1 This looks like a missing build dependency on libboost-filesystem-dev. When adding it it builds fine. I have confirmed this problem and that the simple fix works inside my pbuilder chroot. I have uploaded a corrected package to DELAYED+3 days. If the maintainer would rather fix this themselves they have some time to upload their own corrected package. Stephen Quinney signature.asc Description: Digital signature
Bug#291501: marked as done (policycoreutils_1.20-2(ia64/unstable): FTBFS: missing build-depend)
Your message dated Fri, 21 Jan 2005 12:02:14 -0500 with message-id [EMAIL PROTECTED] and subject line Bug#291501: fixed in policycoreutils 1.20-3 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 21 Jan 2005 06:48:50 + From [EMAIL PROTECTED] Thu Jan 20 22:48:50 2005 Return-path: [EMAIL PROTECTED] Received: from mmjgroup.com [192.34.35.33] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Crsb6-0001CY-00; Thu, 20 Jan 2005 22:48:44 -0800 Received: from mix.mmjgroup.com (mix.mmjgroup.com [192.34.35.16]) by mmjgroup.com (Postfix) with ESMTP id CB29216E4F for [EMAIL PROTECTED]; Thu, 20 Jan 2005 23:48:43 -0700 (MST) Received: by mix.mmjgroup.com (Postfix, from userid 1000) id F08748F30B; Thu, 20 Jan 2005 23:48:44 -0700 (MST) Date: Thu, 20 Jan 2005 23:48:44 -0700 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: policycoreutils_1.20-2(ia64/unstable): FTBFS: missing build-depend Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.6+20040907i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.4 required=4.0 tests=BAYES_00,HAS_PACKAGE, NO_REAL_NAME autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: policycoreutils Version: 1.20-2 Severity: serious There was an error while trying to autobuild your package: Automatic build of policycoreutils_1.20-2 on caballero by sbuild/ia64 1.170.5 Build started at 20050121-0631 [...] ** Using build dependencies supplied by package: Build-Depends: libselinux1-dev (= 1.14-1), libpam0g-dev, libsepol1-dev, file [...] make[2]: Entering directory `/build/buildd/policycoreutils-1.20/audit2allow' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/build/buildd/policycoreutils-1.20/audit2allow' make[2]: Entering directory `/build/buildd/policycoreutils-1.20/scripts' make[2]: Nothing to be done for `all'. make[2]: Leaving directory `/build/buildd/policycoreutils-1.20/scripts' make[2]: Entering directory `/build/buildd/policycoreutils-1.20/po' file=./`echo da | sed 's,.*/,,'`.gmo \ rm -f $file PATH=$PATH /usr/bin/msgfmt -o $file da.po /bin/sh: /usr/bin/msgfmt: No such file or directory make[2]: *** [da.gmo] Error 127 make[2]: Leaving directory `/build/buildd/policycoreutils-1.20/po' make[1]: *** [all] Error 1 make[1]: Leaving directory `/build/buildd/policycoreutils-1.20' make: *** [build/policycoreutils] Error 2 A full build log can be found at: http://buildd.debian.org/build.php?arch=ia64pkg=policycoreutilsver=1.20-2 --- Received: (at 291501-close) by bugs.debian.org; 21 Jan 2005 17:06:06 + From [EMAIL PROTECTED] Fri Jan 21 09:06:06 2005 Return-path: [EMAIL PROTECTED] Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cs2EY-Yr-00; Fri, 21 Jan 2005 09:06:06 -0800 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1Cs2Ao-0005dZ-00; Fri, 21 Jan 2005 12:02:14 -0500 From: Manoj Srivastava [EMAIL PROTECTED] To: [EMAIL PROTECTED] X-Katie: $Revision: 1.55 $ Subject: Bug#291501: fixed in policycoreutils 1.20-3 Message-Id: [EMAIL PROTECTED] Sender: Archive Administrator [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 12:02:14 -0500 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Source: policycoreutils Source-Version: 1.20-3 We believe that the bug you reported is fixed in the latest version of policycoreutils, which is due to be installed in the Debian FTP archive: policycoreutils_1.20-3.diff.gz to pool/main/p/policycoreutils/policycoreutils_1.20-3.diff.gz policycoreutils_1.20-3.dsc to pool/main/p/policycoreutils/policycoreutils_1.20-3.dsc policycoreutils_1.20-3_i386.deb to pool/main/p/policycoreutils/policycoreutils_1.20-3_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please
Bug#289950: hydrogen: please rebuild against latest libflac-dev
On Wed, 12 Jan 2005 01:16:28 +0100 Adeodato =?iso-8859-1?Q?Sim=F3?= [EMAIL PROTECTED] wrote: hydrogen needs to be rebuilt against the latest libflac-dev in order to link to libflac6 instead of libflac4 and become functional again. See: http://lists.debian.org/debian-devel/2005/01/msg00434.html Please don't forget to version the build-dependency on libflac-dev to (= 1.1.1-3). I have now done the package rebuild according to the instructions and uploaded to DELAYED+3 days to give the maintainer a chance to verify my changes and upload there own package if they would prefer to do it that way. Stephen Quinney signature.asc Description: Digital signature
Bug#291585: downgrade and move setserial
Package: ftp.debian.org Severity: serious The 'setserial' package remains problematic on many systems. In the worst cases, having the package installed with the default debconf choice taken will cause a hard system crash on boot. There seems to be general agreement that this package, while still useful on some systems in some cases, is no longer an appropriate package to have as part of Debian's 'base' install. Please downgrade the priority of setserial from 'important' to 'extra'. I would accept 'optional', but the it can crash your system if you don't know what you're doing aspect makes me suggest 'extra' as more appropriate. A change to a priority lower than 'standard' is release-critical for sarge. As supporting evidence for this request, I offer the changelog of debootstrap version 0.2.41, and the message thread it references attached to bug #212646. The change in debootstrap was necessary but not sufficient to solve the problem, as 'important' priority causes tasksel, et al, to install setserial. We *must* fix this for sarge release! Please also move the setserial package from 'base' to 'comm'. This is not absolutely required, but once the priority is lowered it would be less confusing to our users if setserial were no longer part of the 'base' section. Bdale -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: severity of 261873 is serious, merging 261873 291585
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 severity 261873 serious Bug#261873: Move setserial out of base (?) Severity set to `serious'. merge 261873 291585 Bug#261873: Move setserial out of base (?) Bug#291585: downgrade and move setserial Merged 261873 291585. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291595: hwtools_0.8-4_i386.deb: fails to install
Package: hwtools_0.8-4_i386.deb Version: hwtools Severity: grave Justification: renders package unusable This is what I get when trying to install it: Preparing to replace hwtools 0.8-3 (using .../hwtools_0.8-4_i386.deb) ... Unpacking replacement hwtools ... dpkg: error processing /var/cache/apt/archives/hwtools_0.8-4_i386.deb (--unpack): trying to overwrite `/usr/share/man/man1/buffer.1.gz', which is also in package buffer dpkg-deb: subprocess paste killed by signal (Broken pipe) Errors were encountered while processing: /var/cache/apt/archives/hwtools_0.8-4_i386.deb E: Sub-process /usr/bin/dpkg returned an error code (1) Ack! Something bad happened while installing packages. Trying to recover: -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.7.13122004 Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291592: kbugbuster: Please rebuild against libkcal2a
Package: kbugbuster Version: 4:3.3.1-2 Severity: grave Justification: renders package unusable (uninstallable) kbugbuster still depends on libkcal2, which has recently been superseded by the binary-incompatible (sigh) libkcal2a. Could you please rebuild it against libkcal2-dev (= 4:3.3.2)? Thanks. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.4.27 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages kbugbuster depends on: ii kdelibs4 4:3.3.2-1 KDE core libraries ii ktnef4:3.3.2-1 KDE TNEF viewer ii libart-2.0-2 2.3.16-6Library of functions for 2D graphi ii libc62.3.2.ds1-20GNU C Library: Shared libraries an ii libgamin0 [libfam0c102] 0.0.12-1Library for the gamin file and dir ii libgcc1 1:3.4.3-7 GCC support library ii libice6 4.3.0.dfsg.1-10 Inter-Client Exchange library ii libidn11 0.5.2-3 GNU libidn library, implementation ii libjpeg626b-9The Independent JPEG Group's JPEG ii libkcal2 4:3.3.1-3 KDE calendaring library ii libpcre3 4.5-1.1 Perl 5 Compatible Regular Expressi ii libpng12-0 1.2.8rel-1 PNG library - runtime ii libqt3c102-mt3:3.3.3-8 Qt GUI Library (Threaded runtime v ii libsm6 4.3.0.dfsg.1-10 X Window System Session Management ii libstdc++5 1:3.3.5-6 The GNU Standard C++ Library v3 ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte ii libxrender1 0.8.3-7 X Rendering Extension client libra ii xlibs4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu ii zlib1g 1:1.2.2-4 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#284096: openoffice.org: writer crash in 'modify style' when selecting another tab
On Friday 03 Dec 2004 16:10, Pontus Lidman wrote: Package: openoffice.org Version: 1.1.3-3 Severity: grave Justification: renders package unusable Writer crashes in the style edit dialog. How to reproduce: 1) start oowriter 2) select any style in the stylist, right-click, select 'modify' from drop-down menu 3) Use left mouse button to click on any tab in the dialog. writer crashes. I still can't reproduce this problem on my system, so I need your help. Please download this file: http://people.debian.org/~halls/openoffice/test/libsvt645li.so.bz2 It is a version of the library that crashes with debugging symbols included. bunzip the file and copy into /usr/lib/openoffice/program, replacing the file that is there from the package. Then, reproduce the crash. When the crash dialog comes up, do not click it away but instead execute this from the command line (make sure you have gdb installed) echo thread apply all bt gdb.script gdb -p $(pgrep -u $USER soffice.bin| head -1) gdb.script | tee oo.log Please send oo.log to the bug report. Thanks Chris -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 288274 to Please remove obsolete astats package
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 retitle 288274 Please remove obsolete astats package Bug#288274: ftp.debian.org: remove astats package, better package replace it Changed Bug title. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 266707
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 tags 266707 security Bug#266707: provides no security Tags were: patch Tags added: security End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291599: zvbi: FTBFS: wss.c:44:21: libzvbi.h: No such file or directory
Package: zvbi Version: 0.2.12-1 Severity: serious Hi, Your package is failing to build on all arches with the following error: gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -Wall -Wunused -Wmissing-prototypes -Wmissing-declarations -D_REENTRANT -D_GNU_SOURCE -I/usr/include/libpng10 -Wall -g -O2 -c `test -f 'wss.c' || echo './'`wss.c wss.c:44:21: libzvbi.h: No such file or directory Kurt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291600: FTBFS: Attempts to use 'apt-get source'
Package: gibraltar-bootcd Severity: serious I was just attempting to build gibraltar-bootcd version 0.40 from the source using pbuilder and it failed horribly. Upon investigation I found that debian/rules is calling two scripts: build-discover (which attempts to download the source for curl, expat and discover) and build-paste (which attempts to grab the source for coreutils). This is total and utter madness, I've never come across anything so odd before in my experience of Debian packaging. You must not assume even the existence of a network connection from a buildd never mind the ability to run apt-get. It must be possible to build a package inside a self-contained chroot. You should also note that there is a high chance that the apt source urls will not be listed in typical chroots. I am absolutely certain that you really do not need to download the source code for each of these packages and then build them. There must be a better way to achieve what you are trying to do here. Stephen Quinney -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.9 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: bug 291599 is forwarded to Michael Schimek mschimek@users.sourceforge.net
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.10 forwarded 291599 Michael Schimek [EMAIL PROTECTED] Bug#291599: zvbi: FTBFS: wss.c:44:21: libzvbi.h: No such file or directory Noted your statement that Bug has been forwarded to Michael Schimek [EMAIL PROTECTED]. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#286756: udev tmpfs test
Couldn't we just use a dummy mount? Bind mount /bin/ as /tmp/`mktemp -d`/, then test retval=diropen(/tmp/`mktemp`)? (Or fopen(/tmp/`mktemp`/ls) or sth similar). (I didn't say it was clean ... :) But this test is probably better than nothing, as it prevents /dev/ from being unusable. Just abstract the test to some bashscript or a few lines of C, stick it in /usr/lib/udev/ until some point when the kernel tells the truth. Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
Processing commands for [EMAIL PROTECTED]: tags 291380 + pending Bug#291380: [EMAIL PROTECTED]: iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities] Tags were: sarge security Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 288672 to Causes scripts to fail in undebugable ways
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 retitle 288672 Causes scripts to fail in undebugable ways Bug#288672: php4 4.3.10-2 cuases scripts to fail in undebugable ways Changed Bug title. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291599: zvbi: FTBFS: wss.c:44:21: libzvbi.h: No such file or directory
Kurt Roeckx [EMAIL PROTECTED] writes: Package: zvbi Version: 0.2.12-1 Severity: serious Hi, Hi, Your package is failing to build on all arches with the following error: gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -Wall -Wunused -Wmissing-prototypes -Wmissing-declarations -D_REENTRANT -D_GNU_SOURCE -I/usr/include/libpng10 -Wall -g -O2 -c `test -f 'wss.c' || echo './'`wss.c wss.c:44:21: libzvbi.h: No such file or directory Michael, I did the patch below. Coul you apply, if this is the right fix ? Christian --- test/wss.c.orig 2005-01-21 20:05:20.0 +0100 +++ test/wss.c 2005-01-21 20:05:45.0 +0100 @@ -41,7 +41,7 @@ #include getopt.h #endif -#include libzvbi.h +#include src/libzvbi.h #include asm/types.h /* for videodev2.h */ #include src/videodev2k.h -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291603: zapping: FTBFS: Using static non fPIC lib to make a shared lib.
Package: zapping Version: 0.8.0-2 Severity: serious Hi, your package is failing to build because it's using a static non fPIC lib to make a shared lib. Here is an extract from the build log: /bin/sh ../../libtool --mode=link x86_64-linux-gcc -Wall -g -O2 -o libteletext.zapping.la -rpath /usr/lib/zapping/plugins bookmark.lo export.lo main.lo preferences.lo search.lo toolbar.lo view.lo window.lo ../../libvbi/libvbi.a -lpng -lz -lm -lpthread *** Warning: Linking the shared library libteletext.zapping.la against the *** static library ../../libvbi/libvbi.a is not portable! x86_64-linux-gcc -shared .libs/bookmark.o .libs/export.o .libs/main.o .libs/preferences.o .libs/search.o .libs/toolbar.o .libs/view.o .libs/window.o ../../libvbi/libvbi.a -lpng -lz -lm -lpthread -Wl,-soname -Wl,libteletext.zapping.so.0 -o .libs/libteletext.zapping.so.0.0.0 /usr/bin/ld: ../../libvbi/libvbi.a(cache.o): relocation R_X86_64_32 can not be used when making a shared object; recompile with -fPIC ../../libvbi/libvbi.a: could not read symbols: Bad value collect2: ld returned 1 exit status make[4]: *** [libteletext.zapping.la] Error 1 The previous version (0.8.0-1) build without problems and the changelog doesn't seem to indicate why this would now fail. It seems that previously it didn't try to make the libteletext.zapping.so but does now. A static library should be build without -fPIC and a shared library should be build using -fPIC. If you need the static library too you will have to build all those files twice, once using -fPIC, once not using it. From the build log it looks like the libvbi.a isn't used for anything other than linking the libteletext.zapping.so so I suggest you just build those files once using -fPIC. Note: this is a build log from amd64, it should fail on some other arches (like hppa) too but they failed for an other reason so far. If it happens to only affect amd64 please lower the severity. Kurt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 291595
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.5 tags 291595 sid Bug#291595: hwtools_0.8-4_i386.deb: fails to install There were no tags set. Tags added: sid End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: retitle 290650 to xserver-xfree86: [ati/atimisc] server won't start on Mach64 LN rev 100 [monitor sync ranges misconfigured] ...
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.8.6 retitle 290650 xserver-xfree86: [ati/atimisc] server won't start on Mach64 LN rev 100 [monitor sync ranges misconfigured] Bug#290650: xserver-xfree86: Startup fails for clamshell iBook after jan15 woody update: no valid Screen config Changed Bug title. # HorizSync 28-33 and VertRefresh 43-72 on an LCD? Looks like the culprit to me. severity 290650 normal Bug#290650: xserver-xfree86: [ati/atimisc] server won't start on Mach64 LN rev 100 [monitor sync ranges misconfigured] Severity set to `normal'. End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291503: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation
On Friday 21 January 2005 02:09 am, Martin Schulze wrote: These problems have been discovered by Wouter Coekaerts in the konversation IRC client. Affected are version 0.15, CVS until 18-19/01/2005, and some older versions too. They are fixed in 0.15.1. Fixed in 0.15-3, which needs to be uploaded by a DD. I mailed Riku Voipio (who usually sponsors my konversation uploads) about it a couple days ago. For now, the fixed package can be found at my repository: deb http://debian.houseofnate.net/ unstable main deb-src http://debian.houseofnate.net/ unstable main -- Nathaniel W. Turner Web Coordinator Cancer Detection and Prevention http://www.cancerprev.org/ pgpZ5VQXeEKsR.pgp Description: PGP signature
Bug#291503: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation
I'll sponsor this upload to get the security fix in quickly. -- see shy jo signature.asc Description: Digital signature
Bug#291585: downgrade and move setserial
As the maintainer of this package, I can say that I agree that it should have lowered priority to optional or extra. Regards, // Ola On Fri, Jan 21, 2005 at 10:02:27AM -0700, Bdale Garbee wrote: Package: ftp.debian.org Severity: serious The 'setserial' package remains problematic on many systems. In the worst cases, having the package installed with the default debconf choice taken will cause a hard system crash on boot. There seems to be general agreement that this package, while still useful on some systems in some cases, is no longer an appropriate package to have as part of Debian's 'base' install. Please downgrade the priority of setserial from 'important' to 'extra'. I would accept 'optional', but the it can crash your system if you don't know what you're doing aspect makes me suggest 'extra' as more appropriate. A change to a priority lower than 'standard' is release-critical for sarge. As supporting evidence for this request, I offer the changelog of debootstrap version 0.2.41, and the message thread it references attached to bug #212646. The change in debootstrap was necessary but not sufficient to solve the problem, as 'important' priority causes tasksel, et al, to install setserial. We *must* fix this for sarge release! Please also move the setserial package from 'base' to 'comm'. This is not absolutely required, but once the priority is lowered it would be less confusing to our users if setserial were no longer part of the 'base' section. Bdale -- --- Ola Lundqvist systemkonsult --- M Sc in IT Engineering / [EMAIL PROTECTED] Annebergsslingan 37\ | [EMAIL PROTECTED] 654 65 KARLSTAD| | http://www.opal.dhs.org Mobile: +46 (0)70-332 1551 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Re: Bug#289715: Same already fixed bugs are back rendering Impress almost unusable
Processing commands for [EMAIL PROTECTED]: merge 289715 284096 Bug#284096: openoffice.org: writer crash in 'modify style' when selecting another tab Bug#289715: openoffice.org-bin: Impress single Word color modification is broken again Mismatch - only Bugs in same state can be merged: Values for `package' don't match: #284096 has `openoffice.org'; #289715 has `openoffice.org-bin' tags 289715 + moreinfo unreproducible Bug#289715: openoffice.org-bin: Impress single Word color modification is broken again Tags were: moreinfo unreproducible Tags added: moreinfo, unreproducible thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289715: Same already fixed bugs are back rendering Impress almost unusable
merge 289715 284096 tags 289715 + moreinfo unreproducible thanks On Monday 10 Jan 2005 18:07, Eric Valette wrote: Well done guys. Could you backup your erroneous patches once again... I'm afraid that backing up will only delay things since these changes are backported from 2.0 so any bugs are likely to show up again then. http://lists.debian.org/debian-openoffice/2004/09/msg00167.html Looking at the stack trace, this is the same crash as reported in 289715 so I'm merging the bug. Looking at the code, OOo is dealing with font lists which are likely to be different on your machine to mine, which may be why I can't reproduce this here. Please can you do the same as I asked the submitter of #284096 to do: --- Please download this file: http://people.debian.org/~halls/openoffice/test/libsvt645li.so.bz2 It is a version of the library that crashes with debugging symbols included. bunzip the file and copy into /usr/lib/openoffice/program, replacing the file that is there from the package. Then, reproduce the crash. When the crash dialog comes up, do not click it away but instead execute this from the command line (make sure you have gdb installed) echo thread apply all bt gdb.script gdb -p $(pgrep -u $USER soffice.bin| head -1) gdb.script | tee oo.log Please send oo.log to the bug report. Thanks for your help Chris
Bug#267040: security
Showing a warning before running each applet is a good idea. Using debconf to display a warning is a bad idea, because only the administrator will see it (debconf is/was never mean for such things). Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291503: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation
Nathaniel W. Turner wrote: On Friday 21 January 2005 02:09 am, Martin Schulze wrote: These problems have been discovered by Wouter Coekaerts in the konversation IRC client. Affected are version 0.15, CVS until 18-19/01/2005, and some older versions too. They are fixed in 0.15.1. Fixed in 0.15-3, which needs to be uploaded by a DD. I mailed Riku Voipio (who usually sponsors my konversation uploads) about it a couple days ago. For now, the fixed package can be found at my repository: deb http://debian.houseofnate.net/ unstable main deb-src http://debian.houseofnate.net/ unstable main Great. In case the new upload auto-closes this bug, please reopen it for the release team as a note to take care of the package. Regards, Joey -- Have you ever noticed that General Public Licence contains the word Pub? Please always Cc to me when replying to me on the lists. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#284188: marked as done (linux-wlan-ng-modules: unresolved symbols)
Your message dated Fri, 21 Jan 2005 16:22:00 -0500 with message-id [EMAIL PROTECTED] and subject line closing has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 4 Dec 2004 12:15:32 + From [EMAIL PROTECTED] Sat Dec 04 04:15:31 2004 Return-path: [EMAIL PROTECTED] Received: from mail2.speakeasy.net [216.254.0.202] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CaYp1-0006cq-00; Sat, 04 Dec 2004 04:15:31 -0800 Received: (qmail 28215 invoked from network); 4 Dec 2004 12:15:31 - Received: from dsl093-026-112.hou1.dsl.speakeasy.net (HELO [10.119.75.19]) ([EMAIL PROTECTED]) (envelope-sender [EMAIL PROTECTED]) by mail2.speakeasy.net (qmail-ldap-1.03) with SMTP for [EMAIL PROTECTED]; 4 Dec 2004 12:15:31 - From: Shawn K. Quinn [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: linux-wlan-ng-modules: unresolved symbols Date: Sat, 4 Dec 2004 05:23:43 -0600 User-Agent: KMail/1.7 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-5.0 required=4.0 tests=BAYES_00,DRUGSPAM,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: Package: linux-wlan-ng-modules-2.4.27-1-k7 Version: 2.4.27-2+0.2.0+0.2.1pre21-1 Severity: grave Justification: renders package unusable File: linux-wlan-ng-modules *** Please type your report below this line *** I think this speaks for itself quite nicely: $ sudo modprobe prism2_usb /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol sock_release_Ra249e9db /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol netif_rx_R64e6643d /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol netlink_broadcast_R486fa5b1 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol skb_under_panic_R29ac25f0 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol ___pskb_trim_R40f13589 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol proc_net_R4019308b /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol __kfree_skb_R16bf76ae /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol softnet_data_Rf03b2cdb /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol proc_mkdir_Re1d5ec83 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol eth_type_trans_Ref618fc5 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol create_proc_entry_Ra185990c /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol remove_proc_entry_R4a81d799 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: unresolved symbol netlink_kernel_create_R2cc6f096 /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: insmod /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o failed /lib/modules/2.4.27-1-k7/linux-wlan-ng/p80211.o: insmod prism2_usb failed -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.27-1-k7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages linux-wlan-ng-modules-2.4.27-1-k7 depends on: ii kernel-image-2.4.27-1 2.4.27-6 Linux kernel image for version 2.4 ii linux-wlan-ng 0.2.0+0.2.1pre21-1 utilities for wireless prism2 card -- no debconf information --- Received: (at 284188-done) by bugs.debian.org; 21 Jan 2005 21:19:59 + From [EMAIL PROTECTED] Fri Jan 21 13:19:59 2005 Return-path: [EMAIL PROTECTED] Received: from kitenet.net [64.62.161.42] (postfix) by spohr.debian.org with
Bug#291245: marked as done (CAN-2005-0064: Arbitrary code execution in koffice)
Your message dated Fri, 21 Jan 2005 16:17:14 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#291245: fixed in koffice 1:1.3.5-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--
Received: (at submit) by bugs.debian.org; 19 Jan 2005 16:47:23 +
From [EMAIL PROTECTED] Wed Jan 19 08:47:22 2005
Return-path: [EMAIL PROTECTED]
Received: from luonnotar.infodrom.org [195.124.48.78]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CrIzK-0006ZT-00; Wed, 19 Jan 2005 08:47:22 -0800
Received: by luonnotar.infodrom.org (Postfix, from userid 10)
id 20332366B9F; Wed, 19 Jan 2005 17:47:25 +0100 (CET)
Received: at Infodrom Oldenburg (/\##/\ Smail-3.2.0.102 1998-Aug-2 #2)
from infodrom.org by finlandia.Infodrom.North.DE
via smail from stdin
id [EMAIL PROTECTED]
for [EMAIL PROTECTED]; Wed, 19 Jan 2005 17:46:39 +0100 (CET)
Date: Wed, 19 Jan 2005 17:46:39 +0100
From: Martin Schulze [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: CAN-2005-0064: Arbitrary code execution in gpdf
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=H1U3RZHujIvZE2R4
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--H1U3RZHujIvZE2R4
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Package: koffice
Tags: security sarge sid
This problem also affects koffice:
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0064
Reference: IDEFENSE:20050118 Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack
Overflow
Reference:
URL:http://www.idefense.com/application/poi/display?id=186type=vulnerabilities
Reference: CONFIRM:ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc
for xpdf 3.00 and earlier allows remote attackers to execute arbitrary
code via a PDF file with a large /Encrypt /Length keyLength value.
You'll find the patch in the source of xpdf 3.00-12 which I'm attaching.
Regards,
Joey
--
Ten years and still binary compatible. -- XFree86
Please always Cc to me when replying to me on the lists.
--H1U3RZHujIvZE2R4
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: attachment; filename=patch.CAN-2005-0064.xpdf_3.00
diff -u xpdf-3.00/debian/changelog xpdf-3.00/debian/changelog
--- xpdf-3.00/debian/changelog
+++ xpdf-3.00/debian/changelog
@@ -1,3 +1,12 @@
+xpdf (3.00-12) unstable; urgency=high
+
+ * SECURITY UPDATE: Fixed buffer overflow that could overwrite the stack
+and hence cause the execution of arbitrary code as reported by
+iDEFENSE (xpdf/Decrypt.cc)
+ * References: CAN-2005-0064
+
+ -- Hamish Moffatt [EMAIL PROTECTED] Wed, 19 Jan 2005 23:48:56 +1100
+
xpdf (3.00-11) unstable; urgency=high
* SECURITY UPDATE: fix potential buffer overflow
only in patch2:
--- xpdf-3.00.orig/xpdf/Decrypt.cc
+++ xpdf-3.00/xpdf/Decrypt.cc
@@ -73,6 +73,11 @@
Guchar fx, fy;
int len, i, j;
+ // check whether we have non-zero keyLength
+ if ( !keyLength ) {
+return gFalse;
+ }
+
// try using the supplied owner password to generate the user password
*ownerPasswordOk = gFalse;
if (ownerPassword) {
@@ -98,7 +103,7 @@
} else {
memcpy(test2, ownerKey-getCString(), 32);
for (i = 19; i = 0; --i) {
- for (j = 0; j keyLength; ++j) {
+ for (j = 0; j keyLength j 16; ++j) {
tmpKey[j] = test[j] ^ i;
}
rc4InitKey(tmpKey, keyLength, fState);
@@ -135,6 +140,11 @@
int len, i, j;
GBool ok;
+ // check whether we have non-zero keyLength
+ if ( !keyLength ) {
+return gFalse;
+ }
+
// generate file key
buf = (Guchar *)gmalloc(68 + fileID-getLength());
if (userPassword) {
@@ -172,7 +182,7 @@
} else if (encRevision == 3) {
memcpy(test, userKey-getCString(), 32);
for (i = 19; i = 0; --i) {
- for (j = 0; j keyLength; ++j) {
+ for (j = 0; j keyLength j 16; ++j) {
tmpKey[j] = fileKey[j] ^ i;
}
rc4InitKey(tmpKey, keyLength, fState);
--H1U3RZHujIvZE2R4--
---
Received: (at 291245-close) by bugs.debian.org; 21 Jan 2005 21:24:31 +
From [EMAIL
Bug#291618: ldaptor: FTBFS in sarge: dh_python: Python is not installed, aborting. (Probably forgot to Build-Depend on python.)
Package: ldaptor Version: 0.0.30 Severity: serious Tags: sarge Hi, Your package if failing to build in sarge with the following error: dh_python -p'python-ldaptor' -P'debian/install/python-ldaptor' dh_python: Python is not installed, aborting. (Probably forgot to Build-Depend on python.) make: *** [binary-indep-dummy] Error 1 There is only a python2.3 and no python. Kurt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: dhcp3-server: tags 254785 patch
Processing commands for [EMAIL PROTECTED]: tags 254785 patch Bug#254785: dhcp3-server: purging fails on woody Tags were: woody Tags added: patch thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#289466: Identification of problem
Attached is a proposed patch which should fix this issue.
(I included some other simple changes, too)
While preparing what was supposed to be a l10n NMU, I went on a few
other simple to fix issues:
* Lintian fixes (the obvious ones):
- Remove dh-make boilerplate in copyright
- Remove initial capitals in packages description synopsis
and improve English slightly
The packages descriptions follow (with fixes in the packages descriptions):
Source: viewcvs
Section: devel
Priority: optional
Maintainer: Takuo KITAME [EMAIL PROTECTED]
Build-Depends: debhelper (= 4.1.16), sharutils, python-dev (= 2.3),
python-dev ( 2.4), docbook-to-man, python2.3-subversion
Standards-Version: 3.6.1
Package: viewcvs
Architecture: all
Depends: ${python:Depends}, cvs | subversion, rcs, mime-support, debconf (=
1.0)
Recommends: enscript, httpd
Suggests: cvsgraph, viewcvs-query, python2.3-subversion
Description: view CVS Repositories via HTTP
The ViewCVS software was inspired by cvsweb (by Henner Zeller).
ViewCVS can browse directories, commit-logs, and specific revisions of files.
It can display diffs between versions and show selections of files based on
tags or branches.
.
This version support also subversion repository.
Package: viewcvs-query
Architecture: all
Depends: viewcvs (= ${Source-Version}), python-mysqldb, python-egenix-mxdatetime
Replaces: viewcvs ( 0.9.2-6)
Description: view CVS (viewcvs-query.cgi)
The ViewCVS software was inspired by cvsweb (by Henner Zeller).
ViewCVS can browse directories, commit-logs, and specific revisions of files.
It can display diffs between versions and show selections of files based on
tags or branches.
.
This package includes viewcvs-query.cgi
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291503: marked as done (CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation)
Your message dated Fri, 21 Jan 2005 16:47:04 -0500 with message-id [EMAIL PROTECTED] and subject line Bug#291503: fixed in konversation 0.15-3 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 21 Jan 2005 07:17:13 + From [EMAIL PROTECTED] Thu Jan 20 23:17:13 2005 Return-path: [EMAIL PROTECTED] Received: from luonnotar.infodrom.org [195.124.48.78] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Crt2f-0007RC-00; Thu, 20 Jan 2005 23:17:13 -0800 Received: by luonnotar.infodrom.org (Postfix, from userid 10) id 0C0A8366BB0; Fri, 21 Jan 2005 08:17:16 +0100 (CET) Received: at Infodrom Oldenburg (/\##/\ Smail-3.2.0.102 1998-Aug-2 #2) from infodrom.org by finlandia.Infodrom.North.DE via smail from stdin id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Fri, 21 Jan 2005 08:09:04 +0100 (CET) Date: Fri, 21 Jan 2005 08:09:03 +0100 From: Martin Schulze [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline X-Debbugs-Cc: [EMAIL PROTECTED] User-Agent: Mutt/1.5.6+20040907i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE, X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: konversation Version: 0.15-2 Severity: grave Tags: security sarge sid These problems have been discovered by Wouter Coekaerts in the konversation IRC client. Affected are version 0.15, CVS until 18-19/01/2005, and some older versions too. They are fixed in 0.15.1. When you fix these problems, please mention the corresponding CVE id in the changelog. URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0129 Reference: FULLDISC:20050119 Multiple vulnerabilities in Konversation Reference: URL:http://lists.netsys.com/pipermail/full-disclosure/2005-January/031033.html The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing % variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected. URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0130 Reference: FULLDISC:20050119 Multiple vulnerabilities in Konversation Reference: URL:http://lists.netsys.com/pipermail/full-disclosure/2005-January/031033.html Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC sripts. URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0131 Reference: FULLDISC:20050119 Multiple vulnerabilities in Konversation Reference: URL:http://lists.netsys.com/pipermail/full-disclosure/2005-January/031033.html The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users. Regards, Joey -- Have you ever noticed that General Public Licence contains the word Pub? Please always Cc to me when replying to me on the lists. --- Received: (at 291503-close) by bugs.debian.org; 21 Jan 2005 21:54:05 + From [EMAIL PROTECTED] Fri Jan 21 13:54:05 2005 Return-path: [EMAIL PROTECTED] Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cs6jF-0002Gr-00; Fri, 21 Jan 2005 13:54:05 -0800 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1Cs6cS-la-00; Fri, 21 Jan 2005 16:47:04 -0500 From: [EMAIL PROTECTED] (Nathaniel W. Turner) To: [EMAIL PROTECTED] X-Katie: $Revision: 1.55 $ Subject: Bug#291503: fixed in konversation 0.15-3 Message-Id: [EMAIL PROTECTED] Sender: Archive Administrator [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 16:47:04 -0500 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
Bug#291619: systraq: FTBFS: Tries to download sources outside the debian archive.
On Fri, Jan 21, 2005 at 10:54:21PM +0100, Kurt Roeckx wrote: Package: systraq Version: 0.0.20041118-2 Severity: serious Hi, Your package is failing to build because it's trying to connect to the internet. A package should be completly build from the source and should not need anything outside the archive to build. An extraction from the log: /usr/bin/openjade -t sgml -D ../doc -d ./html.dsl /usr/share/sgml/declaration/xml.dcl manual.dbx /usr/bin/openjade:manual.dbx:6:0:E: error connecting to www.oasis-open.org (Connection timed out) /usr/bin/openjade:manual.dbx:6:0:E: DTD did not contain element declaration for document type name [...] Its good to provide a makefile rule that downloads the sources, but nothing should ever depend on that rule. It should only be called manually. Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291136: marked as done (capi4hylafax: FTBFS: Missing build dependencies.)
Your message dated Fri, 21 Jan 2005 17:02:25 -0500 with message-id [EMAIL PROTECTED] and subject line Bug#291136: fixed in tiff 3.7.1-2 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 18 Jan 2005 23:11:00 + From [EMAIL PROTECTED] Tue Jan 18 15:11:00 2005 Return-path: [EMAIL PROTECTED] Received: from adicia.telenet-ops.be [195.130.132.56] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cr2V1-0005RF-00; Tue, 18 Jan 2005 15:10:59 -0800 Received: from localhost (localhost.localdomain [127.0.0.1]) by adicia.telenet-ops.be (Postfix) with SMTP id 1EC8144550 for [EMAIL PROTECTED]; Wed, 19 Jan 2005 00:10:59 +0100 (MET) Received: from Q.roeckx.be (dD5775FD9.access.telenet.be [213.119.95.217]) by adicia.telenet-ops.be (Postfix) with ESMTP id 0B5BE440FF for [EMAIL PROTECTED]; Wed, 19 Jan 2005 00:10:59 +0100 (MET) Received: by Q.roeckx.be (Postfix, from userid 501) id DF1DE26136; Wed, 19 Jan 2005 00:10:58 +0100 (CET) Date: Wed, 19 Jan 2005 00:10:58 +0100 From: Kurt Roeckx [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: capi4hylafax: FTBFS: Missing build dependencies. Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: capi4hylafax Version: 1:01.02.03-8 Severity: serious Hi, Your package fails to build with the following error: libtool: link: cannot find the library `/usr/lib/libjpeg.la' This is fix if adding libjpeg62-dev to the build dependencies. I think however that this is a bug in the libtiff4 package and that libtiff4-dev should depend on libjpeg62-dev. Please clone and reassign if you think this is the case. Then it also fails with the following error: g++ -Wall -W -O2 -DC_PLATFORM_64 -D_GNU_SOURCE -DDONT_USE_PROTECT_FEATURE -DNDEBUG -o c2faxrecv faxrecv.o recvdev.o recvmain.o ../capi/libcapi.a ../convert/libconvert.a ../linuxdep/liblinuxdep.a ../standard/libstandard.a -lpthread /usr/lib/libtiff.so /usr/lib/libcapi20.so -lz This gets fixed by adding zlib1g-dev to the build dependencies. PS: I think something is wrong in your rules file as it's using C_PLATFORM_64 on all arches. Kurt --- Received: (at 291136-close) by bugs.debian.org; 21 Jan 2005 22:05:45 + From [EMAIL PROTECTED] Fri Jan 21 14:05:44 2005 Return-path: [EMAIL PROTECTED] Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cs6uW-0003vl-00; Fri, 21 Jan 2005 14:05:44 -0800 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1Cs6rJ-00017B-00; Fri, 21 Jan 2005 17:02:25 -0500 From: Jay Berkenbilt [EMAIL PROTECTED] To: [EMAIL PROTECTED] X-Katie: $Revision: 1.55 $ Subject: Bug#291136: fixed in tiff 3.7.1-2 Message-Id: [EMAIL PROTECTED] Sender: Archive Administrator [EMAIL PROTECTED] Date: Fri, 21 Jan 2005 17:02:25 -0500 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 2 Source: tiff Source-Version: 3.7.1-2 We believe that the bug you reported is fixed in the latest version of tiff, which is due to be installed in the Debian FTP archive: libtiff-opengl_3.7.1-2_i386.deb to pool/main/t/tiff/libtiff-opengl_3.7.1-2_i386.deb libtiff-tools_3.7.1-2_i386.deb to pool/main/t/tiff/libtiff-tools_3.7.1-2_i386.deb libtiff4-dev_3.7.1-2_i386.deb to pool/main/t/tiff/libtiff4-dev_3.7.1-2_i386.deb libtiff4_3.7.1-2_i386.deb to pool/main/t/tiff/libtiff4_3.7.1-2_i386.deb tiff_3.7.1-2.diff.gz to pool/main/t/tiff/tiff_3.7.1-2.diff.gz tiff_3.7.1-2.dsc to pool/main/t/tiff/tiff_3.7.1-2.dsc A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen
Bug#291362: installation-reports: LVM install failed due to missing dmsetup
On Thu, Jan 20, 2005 at 04:17:25PM -0500, Joey Hess wrote: Great, so something like this? (Untested) Worked for me. -- Wesley W. Terpstra -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: reopening - still affects sarge
Processing commands for [EMAIL PROTECTED]: package konversation Ignoring bugs not assigned to: konversation reopen 291503 Bug#291503: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation Bug reopened, originator not changed. tags 291503 - sid Bug#291503: CAN-2005-0129/130/131: Multiple vulnerabilities in Konversation Tags were: patch sarge security sid Tags removed: sid thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Fixed in NMU of gpdf 2.8.2-1.1
Processing commands for [EMAIL PROTECTED]: tag 291244 + fixed Bug#291244: CAN-2005-0064: Arbitrary code execution in gpdf Tags were: patch sarge security sid Tags added: fixed quit Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291632: Destroys backup files by default with little sanity checking
Package: gnucash Version: 1.8.9-4 Severity: grave I'm sitting here watching a (likely futile) attempt to restore two months' worth of lost information for a user. While it's likely that nothing can get the data back, I finally think I figured out what happened and how the data was lost. I think the sequence of events is quite likely to occur in the hands of a user. (in fact, I myself would probably only have avoided it by accident) Here's the deal: when you save a gnucash file, it creates a backup file that's indexed by the date on which it was saved. This backup is very useful in the event that you have a program crash or make a serious blunder with the interface. In early November, the user in question did just this: she loaded a backup of her Accounts file due to some sort of problem with the program. However, this resulted in the *backup* file being used as the new default save file and as gnucash's default file to load on startup. Accounts remained frozen in a state from about November 3. All was well until she asked me for help with importing some old Quicken data, earlier today. After importing the data into a separate file, I (not knowing that she was using the backup file) innocently opened the file Accounts. Apparently, either this or saving the file Accounts (not sure which) triggered GNUCash's helpful backup-purger, which immediately wiped out both her main accounts file and all of her recent backups. We were left only with Accounts (the November 3rd edition, remember); two months' worth of data entry went down the drain without my knowing. Now, I understand why this functionality might be useful, but it seems far too easy to destroy data with it at the moment. I suggest that, at the very least, several more sanity checks be incorporated. For instance, only delete a file if: (A) there are at least X newer backups *by mtime* of the main file, AND (B) the file in question is at least Y days old *by mtime*, AND (C) the current sanity checks (that it looks like a GNUcash backup file with timestamp Y days ago) apply, where the timestamp takes the LAST date in the filename when multiple dates are available. (A) makes sure that some backups are always available if you screw up; (B) makes sure that GNUcash isn't mislead by confusing filenames (such as Accounts.200411060911.xac.200501201015.xac). At the very least, the modification of (C) should be made so that the ill effects of filenames like the one above are limited. Without some tightening of the criteria, I think the backup-purging should be disabled by default, as it's way too easy to unexpectedly lose data right now. Daniel -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.9-2-686 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) (ignored: LC_ALL set to en_US) Versions of packages gnucash depends on: ii bonobo 1.0.22-2.2 The GNOME Bonobo System. ii gdk-imlib1 1.9.14-16.2 imaging library for use with gtk ( ii gnucash-common 1.8.9-4 A personal finance tracking progra ii guile-1.6-libs 1.6.7-1 Main Guile libraries ii guile-1.6-slib 1.6.7-1 Guile SLIB support ii libart2 1.4.2-19The GNOME canvas widget - runtime ii libaudiofile00.2.6-5 Open-source version of SGI's audio ii libbonobo2 1.0.22-2.2 The GNOME Bonobo library. ii libc62.3.2.ds1-20GNU C Library: Shared libraries an ii libdate-manip-perl 5.42a-2 a perl library for manipulating da ii libdb3 3.2.9-20Berkeley v3 Database Libraries [ru ii libesd0 0.2.35-2Enlightened Sound Daemon - Shared ii libfinance-quote-perl1.08-1 Perl module for retrieving stock q ii libfreetype6 2.1.7-2.3 FreeType 2 font engine, shared lib ii libgal23 0.24-1.4G App Libs (run time library) ii libgdk-pixbuf-gnome2 0.22.0-7The GNOME1 Canvas pixbuf library ii libgdk-pixbuf2 0.22.0-7The GdkPixBuf image library, gtk+ ii libghttp11.0.9-15original GNOME HTTP client library ii libglade-gnome0 1:0.17-3Library to load .glade files at ru ii libglade01:0.17-3Library to load .glade files at ru ii libglib1.2 1.2.10-9The GLib library of C routines ii libgnome32 1.4.2-19The GNOME libraries ii libgnomeprint15 0.37-5 The GNOME Print architecture - run ii libgnomesupport0 1.4.2-19The GNOME libraries (Support libra ii libgnomeui32 1.4.2-19The GNOME libraries (User Interfac ii libgtk1.21.2.10-17 The GIMP
Bug#291623: mysql-admin: FTBFS in sarge: Versioned build dependency on virtual libmysqlclient-dev.
tag 291623 + sarge thanks Kurt Roeckx wrote: Package: mysql-admin Version: 1.0.14-1 Severity: serious Hi, Your package is failing to build in sarge because it still build depends on libmysqlclient-dev (4.0.20) and libmysqlclient-dev is a virtual package. You seem to have changed it to use libmysqlclient14-dev in more recent versions but mysql-dfsg-4.1 failed to build on arm (#285071). The fixed version never was attempted to be build and the current still seems to be in the needs build state. Looks like there hasn't been a build attempt since the fixed version. So what do you want me to do about it? I provided the patch that should fix #285071. All new MySQL based packages should use libmysqlclient14-dev and not 12 or 10 because these old clients are not compatible with the new way MySQL stores passwords. This bug will fix itself soon enough. - Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: Re: Bug#291623: mysql-admin: FTBFS in sarge: Versioned build dependency on virtual libmysqlclient-dev.
Processing commands for [EMAIL PROTECTED]: tags 291623 + sarge Bug#291623: mysql-admin: FTBFS in sarge: Versioned build dependency on virtual libmysqlclient-dev. Tags were: sarge Tags added: sarge thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291623: mysql-admin: FTBFS in sarge: Versioned build dependency on virtual libmysqlclient-dev.
tags 291623 + sarge thanks On Fri, Jan 21, 2005 at 06:04:22PM -0600, Adam Majer wrote: So what do you want me to do about it? I provided the patch that should fix #285071. All new MySQL based packages should use libmysqlclient14-dev and not 12 or 10 because these old clients are not compatible with the new way MySQL stores passwords. This bug will get closed when your package moves to testing. This is just so we know it has a problem. (I forgot to set the tag, you forgot to CC [EMAIL PROTECTED]) Kurt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#290597: fails to configure because gs-common is not configured
On Fri, Jan 21, 2005 at 04:31:55PM +0100, Frank Lichtenheld wrote: On Fri, Jan 14, 2005 at 02:16:45PM -0800, Matt Kraai wrote: The Desktop task failed to install while installing Debian because gs-gpl failed to configure because gs-common was not configured: dpkg: dependency problems prevent configuration of gs-gpl: gs-gpl depends on gs-common (= 0.2); however: Package gs-common is not configured yet. dpkg: error processing gs-gpl (--configure): dependency problems - leaving unconfigured I don't quite understand how this would be gs-gpl's fault, it's either gs-common (because of an error during the configuration) or apt/dpkg, isn't it? Do you have a complete log of the install, I suspect there was an error during configuring gs-common. I reported it against gs-gpl because that was what failed to compile. There appears to be a dependency loop between gs-gpl, gs-common, and gs. -- Matt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291632: Destroys backup files by default with little sanity checking
So it sounds like you did: Create file named foo.xac Do lots of edits on foo.xac [set 1] Then open file named foo.2004xx.xac (a backup of foo). Do lots of edits on foo.2004xx.xac [set 2] Then open foo.xac again. Do lots of edits on foo.xac [set 3], which triggers the backup purger and deletes foo.2004xx.xac, and all of the set 2 edits are now gone. Except, set 2 of the edits created backup files themselves, which should be named, say foo.2004xx.2005xx.xac. So even when foo.2004xx.xac gets deleted by the backup purger on foo.xac, you should have lots of backups named foo.2004xx.2005xx.xac. But from my read of the functions in question, there is a bug here, and the 2004xx.2005xx.xac backups will get deleted erroneously. I will make a fix and submit it upstream. As for the idea that the way backups are done should be improved, that's certainly true, but the solution (which is in the works upstream) is actually to replace the whole backend with a database system that will avoid these kinds of problems entirely. If you set the file retention days in preferences to 0, that has the effect of turning of the backup-pruning function entirely. Thomas -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#290605: marked as done (CAN-2005-0012: Arbitrary code execution in dillo)
Your message dated Fri, 21 Jan 2005 18:01:34 -0800 with message-id [EMAIL PROTECTED] and subject line CAN-2005-0012: Arbitrary code execution in dillo has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 15 Jan 2005 08:07:29 + From [EMAIL PROTECTED] Sat Jan 15 00:07:28 2005 Return-path: [EMAIL PROTECTED] Received: from luonnotar.infodrom.org [195.124.48.78] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1Cpiy0-0005zC-00; Sat, 15 Jan 2005 00:07:28 -0800 Received: by luonnotar.infodrom.org (Postfix, from userid 10) id A4076366B71; Sat, 15 Jan 2005 09:07:31 +0100 (CET) Received: at Infodrom Oldenburg (/\##/\ Smail-3.2.0.102 1998-Aug-2 #2) from infodrom.org by finlandia.Infodrom.North.DE via smail from stdin id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Sat, 15 Jan 2005 09:03:10 +0100 (CET) Date: Sat, 15 Jan 2005 09:03:10 +0100 From: Martin Schulze [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: CAN-2005-0012: Arbitrary code execution in dillo Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline User-Agent: Mutt/1.5.6+20040907i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: dillo Version: 0.8.1-1 Severity: grave Tags: pending security sarge The problem below seems to be fixed in the version in sid (0.8.3-1) but not yet in the version in sarge), hence this bug report. This bug report is meant to track this issue. Please close it when the fixed pacakge enters sarge. == Candidate: CAN-2005-0012 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0012 Final-Decision: Interim-Decision: Modified: Proposed: Assigned: 20050104 Category: SF Reference: GENTOO:GLSA-200501-11 Reference: URL:http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml Reference: BID:12203 Reference: URL:http://www.securityfocus.com/bid/12203 Reference: SECUNIA:13760 Reference: URL:http://secunia.com/advisories/13760/ Reference: XF:dillo-capi-format-string(18807) Reference: URL:http://xforce.iss.net/xforce/xfdb/18807 Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page. Regards, Joey -- There are lies, statistics and benchmarks. Please always Cc to me when replying to me on the lists. --- Received: (at 290605-done) by bugs.debian.org; 22 Jan 2005 02:01:35 + From [EMAIL PROTECTED] Fri Jan 21 18:01:35 2005 Return-path: [EMAIL PROTECTED] Received: from dsl093-039-086.pdx1.dsl.speakeasy.net (localhost.localdomain) [66.93.39.86] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1CsAal-000156-00; Fri, 21 Jan 2005 18:01:35 -0800 Received: by localhost.localdomain (Postfix, from userid 1000) id 91830171D23; Fri, 21 Jan 2005 18:01:34 -0800 (PST) Date: Fri, 21 Jan 2005 18:01:34 -0800 From: Steve Langasek [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: CAN-2005-0012: Arbitrary code execution in dillo Message-ID: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol=application/pgp-signature; boundary=76DTJ5CE0DCVQemd Content-Disposition: inline User-Agent: Mutt/1.5.6+20040907i Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: --76DTJ5CE0DCVQemd Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable The fixed version of dillo has reached sarge, so I think this bug can be closed. --=20 Steve Langasek postmodern programmer --76DTJ5CE0DCVQemd Content-Type: application/pgp-signature; name=signature.asc Content-Description: Digital signature Content-Disposition: inline -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFB8bP7KN6ufymYLloRAo8yAKC6mBCo9Q1kH/Egsr7YX5Jx3RFbWACgokdQ
Processed: forwarded the bug
Processing commands for [EMAIL PROTECTED]: forwarded 291632 http://bugzilla.gnome.org/show_bug.cgi?id=164875 Bug#291632: Destroys backup files by default with little sanity checking Noted your statement that Bug has been forwarded to http://bugzilla.gnome.org/show_bug.cgi?id=164875. tags 291632 +upstream +pending +confirmed Unknown tag/s: +pending, +confirmed. Recognized are: patch wontfix moreinfo unreproducible fixed potato woody sid help security upstream pending sarge sarge-ignore experimental d-i confirmed ipv6 lfs fixed-in-experimental fixed-upstream l10n. Bug#291632: Destroys backup files by default with little sanity checking There were no tags set. Tags added: upstream thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#291658: nessus-plugins: non-free
Package: nessus-plugins Severity: serious Justification: Policy 2.2.1 Upstream claims that large parts of nessus-plugins has never been licensed under the GPL. The copyright status of many NASL scripts is indeed very unclear. The new upstream license does not give permission to redistribute, so it's not suitable for non-free either. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (800, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.11-rc1fw Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
