Bug#298824: raidtools2: raidreconf broken for disks with different size

2005-03-10 Thread rwoogxi7
Package: raidtools2
Version: 1.00.3-17
Severity: critical
Justification: causes serious data loss

Running raidreconf to add another disk to a RAID-5 aborts when almost being done
 with error message:

raid5_map_global_to_local: disk 4 block out of range: 488098 (487840) gblock =
1464296

This happens if the disks are not 100% the same size. Due to differences in disk
geometry even drives of the same size have different amounts of blocks.

The array being modified with all data on it is lost.


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-1-686
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (ignored: LC_ALL set to de_DE.UTF
-8)

Versions of packages raidtools2 depends on:
ii  debconf 1.4.30.10Debian configuration management sy
ii  libc6   2.3.2.ds1-18 GNU C Library: Shared libraries an
ii  makedev 2.3.1-75 Creates device files in /dev

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298688: CAN-2005-0683: Disclosure of installation path

2005-03-10 Thread Alban browaeys
For the record:

 ; Print out errors (as a part of the output).  For production web sites,
 ; you're strongly encouraged to turn this feature off, and use error logging
 ; instead (see below).  Keeping display_errors enabled on a production web 
 site
 ; may reveal security information to end users, such as file paths on your Web
 ; server, your database schema or other information.
 display_errors = On

So it does, what is your personal view about this ? 
As a php developper i would say that default should not be the debug
mode, would you reassign it to php ?

Regards
Alban



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298257: marked as done (tetex-bin: [ARM] FTBFS on experimental?)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 09:50:39 +0100
with message-id [EMAIL PROTECTED]
and subject line Processed: Fixed in upload of tetex-bin 3.0-1 to experimental
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 6 Mar 2005 03:20:14 +
From [EMAIL PROTECTED] Sat Mar 05 19:20:13 2005
Return-path: [EMAIL PROTECTED]
Received: from orochi.topstudio.co.jp (mail.topstudio.co.jp) [202.224.239.193] 
(postfix)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D7mJR-000842-00; Sat, 05 Mar 2005 19:20:13 -0800
Received: from localhost (localhost [127.0.0.1])
by mail.topstudio.co.jp (Postfix) with ESMTP id 62248223041
for [EMAIL PROTECTED]; Sun,  6 Mar 2005 12:20:12 +0900 (JST)
Received: from mail.topstudio.co.jp ([127.0.0.1])
by localhost (hydra [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 15706-04 for [EMAIL PROTECTED];
Sun, 6 Mar 2005 12:20:12 +0900 (JST)
Received: from localhost.localdomain (unicorn.kmuto.org [192.168.0.15])
by mail.topstudio.co.jp (Postfix) with ESMTP id D08F322303F
for [EMAIL PROTECTED]; Sun,  6 Mar 2005 12:20:11 +0900 (JST)
Received: by localhost.localdomain (Postfix, from userid 1000)
id A83672AF1FC; Sun,  6 Mar 2005 12:20:11 +0900 (JST)
From: Kenshi Muto [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: tetex-bin: [ARM] FTBFS on experimental?
X-Debbugs-CC: Kenshi Muto [EMAIL PROTECTED]
User-Agent: SEMI/1.14.6 (Maruoka) FLIM/1.14.6 (Marutamachi) APEL/10.6 MULE 
XEmacs/21.4 (patch 17) (Jumbo Shrimp) (i386-debian-linux)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - Maruoka)
Content-Type: text/plain; charset=US-ASCII
Message-Id: [EMAIL PROTECTED]
Date: Sun,  6 Mar 2005 12:20:11 +0900 (JST)
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at topstudio.co.jp
X-BadReturnPath: [EMAIL PROTECTED] rewritten as [EMAIL PROTECTED]
  using From header
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: tetex-bin
Version: 2.99.12.20050203-beta-1
Severity: serious
Tags: experimental

I put tetex-bin 2.99.12.20050203-beta-1 to my arm buildd queue.
As you mentioned ago, I installed tetex-base 2.99.9.20050111-beta-2.

Unfortunatelly build process looked go infinite loop.

test -e ../../tetex-common/common.variables  \
  test ../../tetex-common/common.variables -nt debian/common.variables  \
  touch -t `ls -l --time-style=+%Y%m%d%H%M.%S 
../../tetex-common/common.variables | \
sed -e '[EMAIL PROTECTED]:alpha:]]*[[:space:]]*[[:digit:]] 
\([[:digit:].]*\) \.\./[EMAIL PROTECTED]@'` debian/common.variables_newer || 
true
test -e ../../tetex-common/common.functions.in  \
  test ../../tetex-common/common.functions.in -nt debian/common.functions.in  
\
  touch -t `ls -l --time-style=+%Y%m%d%H%M.%S 
../../tetex-common/common.functions.in | \
sed -e '[EMAIL PROTECTED]:alpha:]]*[[:space:]]*[[:digit:]] 
\([[:digit:].]*\) \.\./[EMAIL PROTECTED]@'` debian/common.functions_newer || 
true
eperl -P -o debian/rules debian/rules.in
test -e ../../tetex-common/common.variables  \
  test ../../tetex-common/common.variables -nt debian/common.variables  \
  touch -t `ls -l --time-style=+%Y%m%d%H%M.%S 
../../tetex-common/common.variables | \
sed -e '[EMAIL PROTECTED]:alpha:]]*[[:space:]]*[[:digit:]] 
\([[:digit:].]*\) \.\./[EMAIL PROTECTED]@'` debian/common.variables_newer || 
true
test -e ../../tetex-common/common.functions.in  \
  test ../../tetex-common/common.functions.in -nt debian/common.functions.in  
\
  touch -t `ls -l --time-style=+%Y%m%d%H%M.%S 
../../tetex-common/common.functions.in | \
sed -e '[EMAIL PROTECTED]:alpha:]]*[[:space:]]*[[:digit:]] 
\([[:digit:].]*\) \.\./[EMAIL PROTECTED]@'` debian/common.functions_newer || 
true
eperl -P -o debian/rules debian/rules.in
 ...

Full log (before I killed) is:
http://experimental.ftbfs.de/fetch.php?pkg=tetex-binver=2.99.12.20050203-beta-1arch=armstamp=1110038196file=logas=raw

Hmm, Is this buildd's time problem? buildd is working with UTC clock.

Thanks,
-- 
Kenshi Muto
[EMAIL PROTECTED]

---
Received: (at 298257-done) by bugs.debian.org; 10 Mar 2005 08:50:43 +
From [EMAIL PROTECTED] Thu Mar 10 

Bug#298771: marked as done (buffer overflow in dissect_a11_radius() (CAN-2005-0699))

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 05:02:12 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298771: fixed in ethereal 0.10.9-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 9 Mar 2005 21:48:03 +
From [EMAIL PROTECTED] Wed Mar 09 13:48:03 2005
Return-path: [EMAIL PROTECTED]
Received: from kitenet.net [64.62.161.42] (postfix)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D992B-0002dF-00; Wed, 09 Mar 2005 13:48:03 -0800
Received: from dragon.kitenet.net (unknown [66.168.94.177])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(Client CN Joey Hess, Issuer Joey Hess (verified OK))
by kitenet.net (Postfix) with ESMTP id 92A4918064
for [EMAIL PROTECTED]; Wed,  9 Mar 2005 21:48:02 + (GMT)
Received: by dragon.kitenet.net (Postfix, from userid 1000)
id A576A6E352; Wed,  9 Mar 2005 16:50:58 -0500 (EST)
Date: Wed, 9 Mar 2005 16:50:57 -0500
From: Joey Hess [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: buffer overflow in dissect_a11_radius() (CAN-2005-0699)
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=LQksG6bCIzRHxTLp
Content-Disposition: inline
X-Reportbug-Version: 3.8
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--LQksG6bCIzRHxTLp
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: ethereal
Version: 0.10.9-1
Severity: grave
Tags: security

  There is remote buffer overflow vulnerability in Ethereal dissector for=
=20
  CDMA2000 A11 packets. Vulnerability is located in dissect_a11_radius() fu=
nction=20
  in packet-3g-a11.c used for RADIUS authentication dissection. Number of b=
ytes=20
  that will be copied from packet to buffer in stack is taken from packet i=
tself.=20
  16 bytes are reserved for that buffer, and string length can be up to 256=
 bytes=20
  (unsigned char), so is possible to overflow local variables and return ad=
dress.=20

http://www.securityfocus.com/archive/1/392659

A fixed version should be released upstream on March 10th. I think a fix
is already available in upstream svn, based on this page:

http://www.securityfocus.com/bid/12759/solution/

--=20
see shy jo

--LQksG6bCIzRHxTLp
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Digital signature
Content-Disposition: inline

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCL2/Bd8HHehbQuO8RAjb+AJ9GMaxXOOCNclJnQKJDxhN8qZHoWACeO5tf
y4cJyiVDbMXLoDli2KCplsI=
=jmnb
-END PGP SIGNATURE-

--LQksG6bCIzRHxTLp--

---
Received: (at 298771-close) by bugs.debian.org; 10 Mar 2005 10:08:03 +
From [EMAIL PROTECTED] Thu Mar 10 02:08:03 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9KaJ-0005IR-00; Thu, 10 Mar 2005 02:08:03 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9KUe-0003Kd-00; Thu, 10 Mar 2005 05:02:12 -0500
From: Frederic Peters [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298771: fixed in ethereal 0.10.9-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 05:02:12 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: ethereal
Source-Version: 0.10.9-2

We believe that the bug you reported is fixed in the latest version of
ethereal, which is due to be installed in the Debian FTP archive:

ethereal-common_0.10.9-2_i386.deb
  to pool/main/e/ethereal/ethereal-common_0.10.9-2_i386.deb
ethereal-dev_0.10.9-2_i386.deb
  to pool/main/e/ethereal/ethereal-dev_0.10.9-2_i386.deb
ethereal_0.10.9-2.diff.gz
  to 

Bug#298844: path to the kernel not passed to configure

2005-03-10 Thread Eduard Bloch
Package: fuse-source
Version: 2.2-2
Severity: grave
Tags: patch

Hello,

the configure call for the modules build is missing an important option.
Please add:

  --with-kernel=$(KSRC) \

If you cannot reproduce it, move your kernel to a non-standard location
and you will see what I mean.

Regards,
Eduard.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-rc5
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages fuse-source depends on:
ii  bzip2 1.0.2-5high-quality block-sorting file co
ii  gcc [c-compiler]  4:3.3.5-1  The GNU C compiler
ii  gcc-3.3 [c-compiler]  1:3.3.5-10 The GNU C compiler
ii  gcc-3.4 [c-compiler]  3.4.3-11   The GNU C compiler
ii  make  3.80-9 The GNU version of the make util

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#295554: marked as done (can't remove the package)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 06:17:16 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#295554: fixed in xinetd 1:2.3.13-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 16 Feb 2005 17:28:23 +
From [EMAIL PROTECTED] Wed Feb 16 09:28:23 2005
Return-path: [EMAIL PROTECTED]
Received: from 137.red-62-57-138.user.auna.net (khazad.dyndns.org) 
[62.57.138.137] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D1SyN-0005n1-00; Wed, 16 Feb 2005 09:28:23 -0800
Received: from rmh by khazad.dyndns.org with local (Exim 4.34)
id 1D1SsM-0004Mu-5g; Wed, 16 Feb 2005 18:22:10 +0100
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Robert Millan [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: can't remove the package
X-Mailer: reportbug 3.7.1
Date: Wed, 16 Feb 2005 18:22:10 +0100
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: xinetd
Version: 1:2.3.13-2+cfg
Severity: serious

When purging xinetd:


Removing xinetd ...
Note: all inetd services have been terminated.

WARNING: you don't have an init script for the original
inetd anymore! You may need to reinstall the netkit-inetd
package to get it back.

Removing `diversion of /etc/init.d/inetd to /etc/init.d/inetd.real by xinetd'
/var/lib/dpkg/info/xinetd.postrm: line 16: /etc/init.d/inetd: No such file or 
directory
dpkg: error processing xinetd (--purge):
 subprocess post-removal script returned error exit status 1


line 16 attempts to run /etc/init.d/inetd, but as the warning indicates we're
not sure if that file exists.  postrm should only attempt to run this script
if it exists.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: kfreebsd-i386 (i686)
Kernel: GNU/kFreeBSD 5.3-3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages xinetd depends on:
ii  libc0.1 2.3-1+kbsd.8 GNU C Library: Shared libraries an
ii  libwrap07.6.dbs-6Wietse Venema's TCP wrappers libra
ii  netbase 4.20 Basic TCP/IP networking system

-- no debconf information

---
Received: (at 295554-close) by bugs.debian.org; 10 Mar 2005 11:23:10 +
From [EMAIL PROTECTED] Thu Mar 10 03:23:10 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Lkz-00016Q-00; Thu, 10 Mar 2005 03:23:09 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9LfI-9w-00; Thu, 10 Mar 2005 06:17:16 -0500
From: Thomas Seyrat [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#295554: fixed in xinetd 1:2.3.13-3
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 06:17:16 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 6

Source: xinetd
Source-Version: 1:2.3.13-3

We believe that the bug you reported is fixed in the latest version of
xinetd, which is due to be installed in the Debian FTP archive:

xinetd_2.3.13-3.diff.gz
  to pool/main/x/xinetd/xinetd_2.3.13-3.diff.gz
xinetd_2.3.13-3.dsc
  to pool/main/x/xinetd/xinetd_2.3.13-3.dsc
xinetd_2.3.13-3_powerpc.deb
  to pool/main/x/xinetd/xinetd_2.3.13-3_powerpc.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Seyrat [EMAIL PROTECTED] (supplier of updated xinetd package)

(This message was generated 

Bug#298846: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gdesklets
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gdesklets without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298847: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gnome-gv
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnome-gv without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298815: libsem-dev: trying to overwrite `/usr/include/semaphore.h', which is also in package libc6-dev

2005-03-10 Thread Robert Millan
On Thu, Mar 10, 2005 at 04:39:22AM +0100, Andreas Mueller wrote:
 Package: libsem-dev
 Version: error processing libsem-dev
 Severity: grave
 Justification: renders package unusable
 
 FYI, installed a fresh chroot and got the following
 error: 
 
 (Reading database ... 18003 files and directories currently installed.)
 Unpacking libsem-dev (from .../libsem-dev_0.0.1-2_powerpc.deb) ...
 dpkg: error processing
 /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb (--unpack):
 trying to overwrite `/usr/include/semaphore.h', which is also in
 package libc6-dev
 Errors were encountered while processing:
 /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb
 E: Sub-process /usr/bin/dpkg returned an error code (1)

libsem-dev doesn't support linux-gnu.  Who built this package?  I can't find 
the changes file in
merkel's queue/accepted.

-- 
 .''`.   Proudly running Debian GNU/kFreeBSD unstable/unreleased (on UFS2+S)
: :' :
`. `'http://www.debian.org/ports/kfreebsd-gnu
  `-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298854: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gtodo-applet
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild gtodo-applet without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298851: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gnotime
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnotime without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298850: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gnome-terminal
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnome-terminal without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298852: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: goobox
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild goobox without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298853: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: gswitchit
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild gswitchit without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298847: rebuild without libhowl0 dep

2005-03-10 Thread Christian Hammers
Hello Erinn

On 2005-03-10 Erinn Clark wrote:
 (on behalf on RM Steve Langasek)
 
 Please rebuild gnome-gv without the libhowl0 dependency since it's
 moving to non-free. Only a recompile is required, but it's required on 
 multiple architectures, so there should be a sourceful upload.

Ok, I'll do it in the next days.

bye,

-christian-


pgpTK7la4lZRu.pgp
Description: PGP signature


Bug#298861: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: libgnomesu
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild libgnomesu without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#292243: marked as done (manpage looks not distributeable, as license not adhered)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 13:44:51 +0100
with message-id [EMAIL PROTECTED]
and subject line Acknowledgement
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at maintonly) by bugs.debian.org; 25 Jan 2005 20:49:19 +
From [EMAIL PROTECTED] Tue Jan 25 12:49:19 2005
Return-path: [EMAIL PROTECTED]
Received: from pcpool00.mathematik.uni-freiburg.de [132.230.30.150] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CtXck-0002g6-00; Tue, 25 Jan 2005 12:49:19 -0800
Received: from pcpool08.mathematik.uni-freiburg.de ([132.230.30.158])
by pcpool00.mathematik.uni-freiburg.de with asmtp (Exim 3.35 #1 
(Debian))
id 1CtXcm-00023G-00
for [EMAIL PROTECTED]; Tue, 25 Jan 2005 21:49:20 +0100
Received: from brl by pcpool08.mathematik.uni-freiburg.de with local (Exim 3.35 
#1 (Debian))
id 1CtXcm-8v-00
for [EMAIL PROTECTED]; Tue, 25 Jan 2005 21:49:20 +0100
Date: Tue, 25 Jan 2005 21:49:20 +0100
From: Bernhard R. Link [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: manpage looks not distributeable, as license not adhered
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
Sender: Bernhard R. Link [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: xbvl
Version: 2.2-4
Severity: serious

The following manpages say they are only distributeable under
the GFDL, but do not include the license text required by this
license:

xbvl.1.gz

This mass-filing of bugs was announced 2005-01-09 in my mail to 
debian-devel and debian-legal:
http://lists.debian.org/debian-devel/2005/01/msg00499.html
http://lists.debian.org/debian-legal/2005/01/msg00262.html

Hochachtungsvoll,
Bernhard R. Link

---
Received: (at 292243-done) by bugs.debian.org; 10 Mar 2005 12:44:09 +
From [EMAIL PROTECTED] Thu Mar 10 04:44:09 2005
Return-path: [EMAIL PROTECTED]
Received: from maileuz.sivit.org [194.146.224.64] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9N1N-0005S0-00; Thu, 10 Mar 2005 04:44:09 -0800
Received: from localhost (localhost [127.0.0.1])
by maileuz.sivit.org (Postfix) with ESMTP id 7656D4010
for [EMAIL PROTECTED]; Thu, 10 Mar 2005 13:44:44 +0100 (CET)
Received: from maileuz.sivit.org ([127.0.0.1])
by localhost (maileuz.sivit.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 28254-64 for [EMAIL PROTECTED];
Thu, 10 Mar 2005 13:44:39 +0100 (CET)
Received: from hebus.dyndns.org (ATuileries-151-1-28-65.w82-123.abo.wanadoo.fr 
[82.123.206.65])
by maileuz.sivit.org (Postfix) with ESMTP id 235C53FF7
for [EMAIL PROTECTED]; Thu, 10 Mar 2005 13:44:38 +0100 (CET)
Received: from benj by hebus.dyndns.org with local (Exim 3.36 #1 (Debian))
id 1D9N26-0001d2-00
for [EMAIL PROTECTED]; Thu, 10 Mar 2005 13:44:54 +0100
From: Benjamin Drieu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Acknowledgement
Organization: Debian - http://www.debian.org/
X-Face: [EMAIL PROTECTED]|NZ\/;)nH`Ie?W,[EMAIL PROTECTED];d,3]Qa'qt3[`_D@
 BZgsuv|[EMAIL PROTECTED]Rn')V7mG\?E,ejoiLT)$(pFml1'[EMAIL 
PROTECTED]Bn`('jHOpTl7618jRM'plV%e
 Sl6q
Date: Thu, 10 Mar 2005 13:44:51 +0100
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/signed; boundary==-=-=;
micalg=pgp-sha1; protocol=application/pgp-signature
Sender: Benjamin Drieu [EMAIL PROTECTED]
X-Virus-Scanned: by amavis at maileuz.sivit.org
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=1.4 required=4.0 tests=BAYES_01,ONEWORD,OPT_HEADER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: *

--=-=-=


Thanks for this NMU, I acknowledge it.

Cheers,
Benjamin

-- 
  .''`.
 ; ;' ;  Debian GNU/Linux |   Benjamin Drieu
 `. `'http://www.debian.org/  |  [EMAIL PROTECTED]
   `-

--=-=-=
Content-Type: application/pgp-signature

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCMEFGnDLqtZBL50ERAha7AJ9UNZyVB8nVgvzyg3eJmB3OlhGapQCglRdn

Bug#298870: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: rhythmbox
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild rhythmbox without the libhowl0 dependency since it's 
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298869: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: planner
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild planner without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298868: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: nautilus-cd-burner
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild nautilus-cd-burner without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298867: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: mozilla-bonobo
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild mozilla-bonobo without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298872: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
Package: totem
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild totem without the libhowl0 dependency since it's 
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298809: rebuild without libhowl0 dep

2005-03-10 Thread Erinn Clark
I forgot to add:

Only a recompile is required, but it's required on multiple architectures,
so there should be a sourceful upload.

-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298815: libsem-dev: trying to overwrite `/usr/include/semaphore.h', which is also in package libc6-dev

2005-03-10 Thread Andreas Mueller
On Thursday, 10. March 2005 12:25, Robert Millan wrote:

 On Thu, Mar 10, 2005 at 04:39:22AM +0100, Andreas Mueller wrote:
  Package: libsem-dev
  Version: error processing libsem-dev
  Severity: grave
  Justification: renders package unusable
 
  FYI, installed a fresh chroot and got the following
  error:
 
  (Reading database ... 18003 files and directories currently installed.)
  Unpacking libsem-dev (from .../libsem-dev_0.0.1-2_powerpc.deb) ...
  dpkg: error processing
  /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb (--unpack):
  trying to overwrite `/usr/include/semaphore.h', which is also in
  package libc6-dev
  Errors were encountered while processing:
  /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb
  E: Sub-process /usr/bin/dpkg returned an error code (1)

 libsem-dev doesn't support linux-gnu.  Who built this package?  I can't
 find the changes file in merkel's queue/accepted.

probably buildd builded it, if you didnt.

Cheers,
amu  


pgpN2sU9Cb84e.pgp
Description: PGP signature


Bug#298805: forgot to add...

2005-03-10 Thread Erinn Clark
Only a recompile is required, but it's required on multiple architectures,
so there should be a sourceful upload.

-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298804: forgot to add..

2005-03-10 Thread Erinn Clark
Only a recompile is required, but it's required on multiple architectures,
so there should be a sourceful upload.

-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298806: forgot to add

2005-03-10 Thread Erinn Clark
Only a recompile is required, but it's required on multiple architectures,
so there should be a sourceful upload.

-- 
off the chain like a rebellious guanine nucleotide


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#297855: marked as done (drip: FTBFS: .../config.guess and .../config.guess are the same file)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 08:17:24 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#297855: fixed in cdbs 0.4.27-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 3 Mar 2005 09:31:31 +
From [EMAIL PROTECTED] Thu Mar 03 01:31:31 2005
Return-path: [EMAIL PROTECTED]
Received: from blount.mail.mindspring.net [207.69.200.226] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D6mg7-0005RN-00; Thu, 03 Mar 2005 01:31:31 -0800
Received: from user-119bq03.biz.mindspring.com ([66.149.232.3] 
helo=frobnitz.homelinux.net)
by blount.mail.mindspring.net with esmtp (Exim 3.33 #1)
id 1D6mg6-0008Fu-00
for [EMAIL PROTECTED]; Thu, 03 Mar 2005 04:31:31 -0500
Received: from daniel by frobnitz.homelinux.net with local (Exim 4.50)
id 1D6mg6-0003U4-01
for [EMAIL PROTECTED]; Thu, 03 Mar 2005 01:31:30 -0800
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: drip: FTBFS: .../config.guess and .../config.guess are the same
 file
From: Daniel Schepler [EMAIL PROTECTED]
Date: Thu, 03 Mar 2005 01:31:29 -0800
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: drip
Severity: serious
Version: 0.8.3.2+0.9.0-rc3-5

From my build log, using pbuilder in an i386 chroot:

...
tar -C build-tree  -xzf drip-0.9.0rc3.tar.gz
touch debian/stamp-drip-0.9.0rc3.tar.gz
if test -e /usr/share/misc/config.guess ; then \
for i in drip-0.9.0rc3/config.guess ; do \
cp -f /usr/share/misc/config.guess \
build-tree/$i ; \
done ; \
fi
cp: `/usr/share/misc/config.guess' and `build-tree/drip-0.9.0rc3/config.guess' 
are the same file
make: *** [pre-build] Error 1

-- System Information:
Debian Release: 3.1
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.9-9-amd64-k8
Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)

-- 
Daniel Schepler  Please don't disillusion me.  I
[EMAIL PROTECTED]haven't had breakfast yet.
 -- Orson Scott Card

---
Received: (at 297855-close) by bugs.debian.org; 10 Mar 2005 13:23:11 +
From [EMAIL PROTECTED] Thu Mar 10 05:23:11 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Nd9-000895-00; Thu, 10 Mar 2005 05:23:11 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9NXY-0007j1-00; Thu, 10 Mar 2005 08:17:24 -0500
From: Robert Millan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#297855: fixed in cdbs 0.4.27-3
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 08:17:24 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: cdbs
Source-Version: 0.4.27-3

We believe that the bug you reported is fixed in the latest version of
cdbs, which is due to be installed in the Debian FTP archive:

cdbs_0.4.27-3.dsc
  to pool/main/c/cdbs/cdbs_0.4.27-3.dsc
cdbs_0.4.27-3.tar.gz
  to pool/main/c/cdbs/cdbs_0.4.27-3.tar.gz
cdbs_0.4.27-3_all.deb
  to pool/main/c/cdbs/cdbs_0.4.27-3_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Robert Millan [EMAIL PROTECTED] (supplier of updated cdbs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 

Bug#298688: CAN-2005-0683: Disclosure of installation path

2005-03-10 Thread Justin Pryzby
On Thu, Mar 10, 2005 at 09:33:19AM +0100, Alban browaeys wrote:
 For the record:
 
  ; Print out errors (as a part of the output).  For production web sites,
  ; you're strongly encouraged to turn this feature off, and use error logging
  ; instead (see below).  Keeping display_errors enabled on a production web 
  site
  ; may reveal security information to end users, such as file paths on your 
  Web
  ; server, your database schema or other information.
  display_errors = On
 
 So it does, what is your personal view about this ? 
I accept that someone else has made the decision to set

  display_errors = On

by default.  I imagine that this has been discussed, but I'm not sure
where (there's no php list that I can see).  

 As a php developper i would say that default should not be the debug
 mode, would you reassign it to php ?
Presumably, over the course of developing a PHP application on Debian,
a developer would get at least one error, which would alert them to
the fact that this is set as such.

I think it is fair to assume that php developers and webserver admins
should both be aware of the existence of this option.

However, one could argue that J. User is neither of the above, and may
well install one of Debian's php applications (say, phpbb2) without
being aware of it.

Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#294717: gpsbabel build problems: at least partly due to rounding errors

2005-03-10 Thread John Goerzen
On Thu, Mar 10, 2005 at 06:06:13AM +0200, Lars Wirzenius wrote:
 Since the errors seem to be rounding errors, and as such almost
 inevitable unless extreme care is taken, it might be worthwhile to punt
 on the issue and just disable the make check in debian/rules. This

Sound advice.  Actually, I think I'll just mark that line so that a
failure is not an error, so we still get logs of it in the buildd logs
in case a discrepancy is eventually reported.

Thank you for your assistance.

-- John


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298234: marked as done (grisbi: FTBFS on mipsel)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 09:17:13 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298234: fixed in grisbi 0.5.5-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 5 Mar 2005 22:03:55 +
From [EMAIL PROTECTED] Sat Mar 05 14:03:55 2005
Return-path: [EMAIL PROTECTED]
Received: from vp085189.reshsg.uci.edu (becket.becket.net) [128.195.85.189] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D7hNL-0007kX-00; Sat, 05 Mar 2005 14:03:55 -0800
Received: from tb by becket.becket.net with local (Exim 4.44)
id 1D7hNL-00042z-7b
for [EMAIL PROTECTED]; Sat, 05 Mar 2005 14:03:55 -0800
To: [EMAIL PROTECTED]
Subject: grisbi: FTBFS on mipsel
X-Reply-Permission: Posted or emailed replies to this message constitute
 permission for an emailed response.
X-PGP-Fingerprint: 1F0A1E51  63 28 EB DA E6 44 E5 5E  EC F3 04 26 4E BF 1A 92
X-Windows: Complex nonsolutions to simple nonproblems.
From: Thomas Bushnell BSG [EMAIL PROTECTED]
Date: 05 Mar 2005 14:03:55 -0800
Message-ID: [EMAIL PROTECTED]
Lines: 48
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


Package: grisbi
Severity: serious

As can be seen from
http://buildd.debian.org/fetch.php?pkg=grisbiver=0.5.5-1arch=mipselstamp=1107431070file=logas=raw,
 grisbi builds are now failing on mipsel.

The fix should be trivial, as indicated in the build log itself:



checking build system type... ./config.guess: unable to guess system type

This script, last modified 2001-09-04, has failed to recognize
the operating system you are using. It is advised that you
download the most up to date version of the config scripts from

ftp://ftp.gnu.org/pub/gnu/config/

If the version you run (./config.guess) is already up to date, please
send the following data and any information you think might be
pertinent to [EMAIL PROTECTED] in order to provide the needed
information to handle your system.

config.guess timestamp = 2001-09-04

uname -m = mips
uname -r = 2.4.27-sb1-swarm-bn
uname -s = Linux
uname -v = #2 SMP Sun Aug 29 22:17:57 BST 2004

/usr/bin/uname -p = 
/bin/uname -X = 

hostinfo   = 
/bin/universe  = 
/usr/bin/arch -k   = 
/bin/arch  = mips
/usr/bin/oslevel   = 
/usr/convex/getsysinfo = 

UNAME_MACHINE = mips
UNAME_RELEASE = 2.4.27-sb1-swarm-bn
UNAME_SYSTEM  = Linux
UNAME_VERSION = #2 SMP Sun Aug 29 22:17:57 BST 2004
configure: error: cannot guess build type; you must specify one
make: *** [configure-stamp] Error 1


---
Received: (at 298234-close) by bugs.debian.org; 10 Mar 2005 14:23:03 +
From [EMAIL PROTECTED] Thu Mar 10 06:23:03 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9OZ5-00039F-00; Thu, 10 Mar 2005 06:23:03 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9OTR-0002XF-00; Thu, 10 Mar 2005 09:17:13 -0500
From: Benjamin Drieu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298234: fixed in grisbi 0.5.5-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 09:17:13 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: grisbi
Source-Version: 0.5.5-2

We believe that the bug you reported is fixed in the latest version of
grisbi, which is due to be installed in the Debian FTP archive:

grisbi_0.5.5-2.diff.gz
  to pool/main/g/grisbi/grisbi_0.5.5-2.diff.gz
grisbi_0.5.5-2.dsc
  to pool/main/g/grisbi/grisbi_0.5.5-2.dsc
grisbi_0.5.5-2_i386.deb
  to pool/main/g/grisbi/grisbi_0.5.5-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  

Bug#298054: Test: (   134559456 3326 % )

2005-03-10 Thread Michelle Konzack
Am 2005-03-10 14:10:59, schrieb Michelle Konzack:
 This message will test the Subject for
 
 ( %c %i %o %t )

So we have:

  (   134559456 3326 % )

Which mean:
%c  is droped
%i  134559456serialdate ?   (1974-04-07 10:37:36)
%o  3326 ???
%t  is mangled

 I check the sending of the file with strace and will 
 put the output into
 
 http://michelle.konzack.home.tamay-dogan.homelinux.net/ssmtp/

Unfortunatly 'strace' crashs while ssmtp do autenticates-smtp

 Greetings
 Michelle

Greetings
Michelle

-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/ 
Michelle Konzack   Apt. 917  ICQ #328449886
   50, rue de Soultz MSM LinuxMichi
0033/3/8845235667100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Bug#298847: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 11:32:17 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298847: fixed in gnome-gv 1:2.8.2-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 11:42:18 +
From [EMAIL PROTECTED] Thu Mar 10 03:42:18 2005
Return-path: [EMAIL PROTECTED]
Received: from imf22aec.mail.bellsouth.net [205.152.59.70] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9M3W-0003X3-00; Thu, 10 Mar 2005 03:42:18 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf22aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 06:41:48 -0500
Received: by anemone (Postfix, from userid 1001)
id 6B281C6AD; Thu, 10 Mar 2005 06:39:23 -0500 (EST)
Date: Thu, 10 Mar 2005 06:39:23 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gnome-gv
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnome-gv without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298847-close) by bugs.debian.org; 10 Mar 2005 16:38:02 +
From [EMAIL PROTECTED] Thu Mar 10 08:38:02 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Qfi-00042z-00; Thu, 10 Mar 2005 08:38:02 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9Qa9-0001BQ-00; Thu, 10 Mar 2005 11:32:17 -0500
From: Christian Hammers [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298847: fixed in gnome-gv 1:2.8.2-3
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 11:32:17 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: gnome-gv
Source-Version: 1:2.8.2-3

We believe that the bug you reported is fixed in the latest version of
gnome-gv, which is due to be installed in the Debian FTP archive:

gnome-gv_2.8.2-3.diff.gz
  to pool/main/g/gnome-gv/gnome-gv_2.8.2-3.diff.gz
gnome-gv_2.8.2-3.dsc
  to pool/main/g/gnome-gv/gnome-gv_2.8.2-3.dsc
gnome-gv_2.8.2-3_i386.deb
  to pool/main/g/gnome-gv/gnome-gv_2.8.2-3_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christian Hammers [EMAIL PROTECTED] (supplier of updated gnome-gv package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 13:10:55 +0100
Source: gnome-gv
Binary: gnome-gv
Architecture: source i386
Version: 1:2.8.2-3
Distribution: unstable
Urgency: medium
Maintainer: Christian Hammers [EMAIL PROTECTED]
Changed-By: Christian Hammers [EMAIL PROTECTED]
Description: 
 gnome-gv   - GNOME PostScript viewer
Closes: 298847
Changes: 
 gnome-gv (1:2.8.2-3) unstable; urgency=medium
 .
   * Rebuild without libhowl0 which moves to non-free (thanks to
 Erinn 

Bug#288009: batik 1.5.1 would break fop

2005-03-10 Thread Wolfgang Baer
Hi,
I prepared a package for the batik 1.5.1 upstream release.
However during testing the package I realized that batik 1.5.1
breaks fop ! As far as I see no other packages depend on
libbatik-java.
fop is currently not in testing although a valid candidate.
A solution to the problem would be to upgrade batik to 1.5.1
and also to upload a new fop package with an embedded batik
library in the current version (with the affected Squiggle
class files removed from the library).
What do you think ?
Wolfgang



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Processed: prozilla

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 296925 pending
Bug#296925: remote shell via format string vulnerability (CAN-2005-0523)
There were no tags set.
Tags added: pending


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#288882: marked as done (blender: FTBFS when using sudo)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 12:47:18 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#22: fixed in blender 2.36-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 6 Jan 2005 02:36:04 +
From [EMAIL PROTECTED] Wed Jan 05 18:36:04 2005
Return-path: [EMAIL PROTECTED]
Received: from relay2.uni-heidelberg.de [129.206.210.211] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CmNVM-0008AU-00; Wed, 05 Jan 2005 18:36:04 -0800
Received: from ix.urz.uni-heidelberg.de (popix.urz.uni-heidelberg.de 
[129.206.119.235])
by relay2.uni-heidelberg.de (8.12.10/8.12.10) with ESMTP id 
j062a4bY012936
for [EMAIL PROTECTED]; Thu, 6 Jan 2005 03:36:04 +0100 (MET)
Received: from extmail.urz.uni-heidelberg.de (extmail.urz.uni-heidelberg.de 
[129.206.100.140])
by ix.urz.uni-heidelberg.de (8.8.8/8.8.8) with SMTP id DAA3481782
for [EMAIL PROTECTED]; Thu, 6 Jan 2005 03:36:01 +0100
Received: (qmail 13378 invoked by uid 0); 6 Jan 2005 02:36:00 -
Received: from ?80.137.20.193? (HELO live) (80.137.20.193)
  by extmail.urz.uni-heidelberg.de with RC4-SHA encrypted SMTP; 6 Jan 2005 
02:36:00 -
Received: from fernst by live with local (Exim 4.34)
id 1CmNVE-0001nZ-2J
for [EMAIL PROTECTED]; Thu, 06 Jan 2005 03:35:56 +0100
Date: Thu, 6 Jan 2005 03:35:55 +0100
From: Florian Ernst [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: blender: FTBFS when using sudo
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=2B/JsCI69OhZNC5r
Content-Disposition: inline
X-Reportbug-Version: 3.2
X-GPG-Key: http://ernst.uni-hd.de/pubkey.asc
X-GPG-Fingerprint: 34F8 7997 8BC1 03F0 9C43  F3D7 B375 3E4D 514B 3E7C
User-Agent: Mutt/1.5.6+20040907i
Sender: Florian Ernst [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--2B/JsCI69OhZNC5r
Content-Type: multipart/mixed; boundary=AhhlLboLdkugWU4S
Content-Disposition: inline


--AhhlLboLdkugWU4S
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Package: blender
Version: 2.35-1
Severity: serious
Tags: patch
Justification: http://release.debian.org/sarge_rc_policy.txt section 4

Hello,

blender FTBFS when using sudo. As mips{,el} can't use fakeroot the
error triggers there, please see the build logs, but it is not limited
to those archs.

This is due to scons creating the build dir with 755 permissions
during the clean target of debian/rules, thus preventing the user to
write to it during the build target. The attached patch sort of fixes
this problem.
Actually 01_SConstruct_debian.dpatch is supposed to correct the
temporary build dir, yet somehow this doesn't work, but I don't know
enough about scons to provide any details...

Cheers,
Flo

--AhhlLboLdkugWU4S
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=blender_FTBFS_sudo.diff
Content-Transfer-Encoding: quoted-printable

diff -u blender-2.35/debian/rules blender-2.35/debian/rules
--- blender-2.35/debian/rules
+++ blender-2.35/debian/rules
@@ -66,7 +66,7 @@
# Clean plugins
-$(MAKE) -C $(CURDIR)/release/plugins clean
rm -rf $(CURDIR)/release/plugins/include
-   rm -rf $(CURDIR)/build
+   rm -rf $(CURDIR)/../build
=20
rm -f $(CURDIR)/config.opts
=20

--AhhlLboLdkugWU4S--

--2B/JsCI69OhZNC5r
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Digital signature
Content-Disposition: inline

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFB3KQLs3U+TVFLPnwRAk8WAJ9cRNydxKgn62uLAxHSdp2T+UOnpgCeKhPC
rjWwB4XXMAzQfcirtuqxx0w=
=iuu9
-END PGP SIGNATURE-

--2B/JsCI69OhZNC5r--

---
Received: (at 22-close) by bugs.debian.org; 10 Mar 2005 17:53:04 +
From [EMAIL PROTECTED] Thu Mar 10 09:53:04 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9RqK-00040f-00; Thu, 10 Mar 2005 09:53:04 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
 

Bug#298167: marked as done (blender: insecure writing to /tmp/quit.blender)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 12:47:18 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298167: fixed in blender 2.36-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 5 Mar 2005 10:11:25 +
From [EMAIL PROTECTED] Sat Mar 05 02:11:25 2005
Return-path: [EMAIL PROTECTED]
Received: from lns-vlq-7-lil-82-254-199-25.adsl.proxad.net (yellowpig.yi.org) 
[82.254.199.25] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D7WFo-0008Dc-00; Sat, 05 Mar 2005 02:11:24 -0800
Received: from bill by yellowpig.yi.org with local (Exim 3.35 #1 (Debian))
id 1D7WFf-0005Oh-00
for [EMAIL PROTECTED]; Sat, 05 Mar 2005 11:11:15 +0100
Date: Sat, 5 Mar 2005 11:11:13 +0100
From: Bill Allombert [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: blender: insecure writing to /tmp/quit.blender
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
X-Reportbug-Version: 3.8
Sender: Bill Allombert [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: blender
Version: 2.35-1.1
Severity: serious
Tags: security

Hello Masayuki,

It seems there is a trivially exploitable symlink attack in blender:

To reproduce:
1) ln -s $HOME/foo /tmp/quit.blend
2) run blender
3) Create some objects
4) quit blender
5) blender output:
Saved session recovery to /tmp/quit.blend

Blender quit
6) Now $HOME/foo has been written to.

Looking at the code:
./source/blender/blenkernel/intern/blender.c line 666 (no joke):

/* no undo state to save */
if(undobase.first==undobase.last) return;

BLI_make_file_string(/, str, U.tempdir, quit.blend);

file = open(str,O_BINARY+O_WRONLY+O_CREAT+O_TRUNC, 0666);
if(file == -1) {
printf(Unable to save %s\n, str);
return;
}

blender needs to also set O_EXCL when opening the file to prevent
the symlink attack. However it seems a better fix to save this file
in $HOME/.blender: if several users run blender on the same machine,
only the first one will benefit of the /tmp/quit.blend.

Cheers,
-- 
Bill. [EMAIL PROTECTED]

Imagine a large red swirl here. 

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.27
Locale: LANG=fr_FR, LC_CTYPE=fr_FR (charmap=ISO-8859-1)

Versions of packages blender depends on:
ii  gettext   0.14.1-10  GNU Internationalization utilities
ii  gettext-base  0.14.1-10  GNU Internationalization utilities
ii  libc6 2.3.2.ds1-20   GNU C Library: Shared libraries an
ii  libfreetype6  2.1.7-2.3  FreeType 2 font engine, shared lib
ii  libgcc1   1:3.4.3-9  GCC support library
ii  libjpeg62 6b-10  The Independent JPEG Group's JPEG 
ii  libopenal00.2004090900-1.1   OpenAL is a portable library for 3
ii  libpng12-01.2.8rel-1 PNG library - runtime
ii  libsdl1.2debi 1.2.7+1.2.8cvs20041007-4.1 Simple DirectMedia Layer
ii  libstdc++51:3.3.5-8  The GNU Standard C++ Library v3
ii  libx11-6  4.3.0.dfsg.1-12.0.1X Window System protocol client li
ii  python2.3 2.3.5-1An interactive high-level object-o
ii  xlibmesa-gl [ 4.3.0.dfsg.1-12.0.1Mesa 3D graphics library [XFree86]
ii  xlibmesa-glu  4.3.0.dfsg.1-12.0.1Mesa OpenGL utility library [XFree
ii  xlibs 4.3.0.dfsg.1-12X Keyboard Extension (XKB) configu
ii  zlib1g1:1.2.2-4  compression library - runtime

-- no debconf information

---
Received: (at 298167-close) by bugs.debian.org; 10 Mar 2005 17:53:09 +
From [EMAIL PROTECTED] Thu Mar 10 09:53:09 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9RqP-00044S-00; Thu, 10 Mar 2005 09:53:09 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 

Bug#298922: mesa: FTBFS: /usr/bin/ld: cannot find -lGL

2005-03-10 Thread Kurt Roeckx
Package: mesa
version: 6.2.1-1
Severity: serious

Hi,

Your package is failing to build on all arches with the following
error:
CC=cc CXX=c++ ../../../bin/mklib -o GLU -major 1 \
-minor 3 -patch 060201 \
-cplusplus  -install ../../../lib \
-L../../../lib -lGL -lm libutil/error.o libutil/glue.o 
libutil/mipmap.olibutil/project.o libutil/quad.o libutil/registry.o 
libtess/dict.o libtess/geom.o libtess/memalloc.o libtess/mesh.o 
libtess/normal.o libtess/priorityq.o libtess/render.o libtess/sweep.o 
libtess/tess.o libtess/tessmono.o libnurbs/interface/bezierEval.o 
libnurbs/interface/bezierPatch.o libnurbs/interface/bezierPatchMesh.o 
libnurbs/interface/glcurveval.o libnurbs/interface/glinterface.o 
libnurbs/interface/glrenderer.o libnurbs/interface/glsurfeval.o 
libnurbs/interface/incurveeval.o libnurbs/interface/insurfeval.o 
libnurbs/internals/arc.o libnurbs/internals/arcsorter.o 
libnurbs/internals/arctess.o libnurbs/internals/backend.o 
libnurbs/internals/basiccrveval.o libnurbs/internals/basicsurfeval.o 
libnurbs/internals/bin.o libnurbs/internals/bufpool.o 
libnurbs/internals/cachingeval.o libnurbs/internals/ccw.o 
libnurbs/internals/coveandtiler.o libnurbs/internals/curve.o 
libnurbs/internals/curvelist.o libnurbs/internals/curvesub.o 
libnurbs/internals/dataTransform.o libnurbs/internals/displaylist.o 
libnurbs/internals/flist.o libnurbs/internals/flistsorter.o 
libnurbs/internals/hull.o libnurbs/internals/intersect.o 
libnurbs/internals/knotvector.o libnurbs/internals/mapdesc.o 
libnurbs/internals/mapdescv.o libnurbs/internals/maplist.o 
libnurbs/internals/mesher.o libnurbs/internals/monoTriangulationBackend.o 
libnurbs/internals/monotonizer.o libnurbs/internals/mycode.o 
libnurbs/internals/nurbsinterfac.o libnurbs/internals/nurbstess.o 
libnurbs/internals/patch.o libnurbs/internals/patchlist.o 
libnurbs/internals/quilt.o libnurbs/internals/reader.o 
libnurbs/internals/renderhints.o libnurbs/internals/slicer.o 
libnurbs/internals/sorter.o libnurbs/internals/splitarcs.o 
libnurbs/internals/subdivider.o libnurbs/internals/tobezier.o 
libnurbs/internals/trimline.o libnurbs/internals/trimregion.o 
libnurbs/internals/trimvertpool.o libnurbs/internals/uarray.o 
libnurbs/internals/varray.o libnurbs/nurbtess/directedLine.o 
libnurbs/nurbtess/gridWrap.o libnurbs/nurbtess/monoChain.o 
libnurbs/nurbtess/monoPolyPart.o libnurbs/nurbtess/monoTriangulation.o 
libnurbs/nurbtess/partitionX.o libnurbs/nurbtess/partitionY.o 
libnurbs/nurbtess/polyDBG.o libnurbs/nurbtess/polyUtil.o 
libnurbs/nurbtess/primitiveStream.o libnurbs/nurbtess/quicksort.o 
libnurbs/nurbtess/rectBlock.o libnurbs/nurbtess/sampleComp.o 
libnurbs/nurbtess/sampleCompBot.o libnurbs/nurbtess/sampleCompRight.o 
libnurbs/nurbtess/sampleCompTop.o libnurbs/nurbtess/sampleMonoPoly.o 
libnurbs/nurbtess/sampledLine.o libnurbs/nurbtess/searchTree.o
mklib: Making Linux shared library:  libGLU.so.1.3.060201
/usr/bin/ld: cannot find -lGL
collect2: ld returned 1 exit status
mklib: Installing libGLU.so.1.3.060201 libGLU.so.1 libGLU.so in ../../../lib
mv: cannot stat `libGLU.so.1.3.060201': No such file or directory
make[3]: *** [../../../lib/libGLU.so] Error 1


Kurt




Bug#298924: gwc: FTBFS: cc1: error: invalid option `arch=$arch`

2005-03-10 Thread Kurt Roeckx
Package: gwc
Version: 0.20.10-1
Severity: serious

Hi,

Your package is failing to build on most arches because it's
trying to set the -mcpu and -march to the architecture.  This
does not work at all in most cases.

It failed on all buildd builds so far.

Why is it trying to set that option in the first place?


Kurt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#296925: marked as done (remote shell via format string vulnerability (CAN-2005-0523))

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 13:17:08 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#296925: fixed in prozilla 1:1.3.7.4-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 25 Feb 2005 19:40:56 +
From [EMAIL PROTECTED] Fri Feb 25 11:40:56 2005
Return-path: [EMAIL PROTECTED]
Received: from kitenet.net [64.62.161.42] (postfix)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D4lKa-0003sY-00; Fri, 25 Feb 2005 11:40:56 -0800
Received: from dragon.kitenet.net (unknown [66.168.94.144])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(Client CN Joey Hess, Issuer Joey Hess (verified OK))
by kitenet.net (Postfix) with ESMTP id C222E17DC6
for [EMAIL PROTECTED]; Fri, 25 Feb 2005 19:40:55 + (GMT)
Received: by dragon.kitenet.net (Postfix, from userid 1000)
id 6AEAC6F031; Fri, 25 Feb 2005 14:43:23 -0500 (EST)
Date: Fri, 25 Feb 2005 14:43:23 -0500
From: Joey Hess [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: remote shell via format string vulnerability (CAN-2005-0523)
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=5mCyUwZo2JvN/JJP
Content-Disposition: inline
X-Reportbug-Version: 3.8
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--5mCyUwZo2JvN/JJP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: prozilla
Version: 1:1.3.7.3-1
Severity: grave

prozilla has another security hole. A format string vulnerability allows
remote code execution. I've not verified this, but here's the exploit:

http://downloads.securityfocus.com/vulnerabilities/exploits/prozillaFormatS=
tring.c

Based on info at the end of this gentoo bug repprt, the format string
problem involves a double expansion of a string from the server between
message() and curses_message().

In message(), we have:

  va_start(vp, args);
  vsnprintf(p, sizeof(p), args, vp);
  va_end(vp);

  switch (rt.display_mode)
{
case DISPLAY_CURSES:
  curses_message(p);

The above vsnprintf is vulnerable to a format string attack.

In curses_message(), we have:

va_start(vp, args);
vsnprintf(p, sizeof(p), args, vp);
va_end(vp);

Also vulnerable.

There may be others. Upstream is apparently aware of this vulnerability.

--=20
see shy jo

--5mCyUwZo2JvN/JJP
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Digital signature
Content-Disposition: inline

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCH3/ad8HHehbQuO8RAj8gAKDk9yZNwiM0PSZK+Vzh+728VNzRQwCglWT4
yH+3VzW5sAGILRa8WzzBnmE=
=gVOb
-END PGP SIGNATURE-

--5mCyUwZo2JvN/JJP--

---
Received: (at 296925-close) by bugs.debian.org; 10 Mar 2005 18:23:04 +
From [EMAIL PROTECTED] Thu Mar 10 10:23:03 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9SJL-0002RR-00; Thu, 10 Mar 2005 10:23:03 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9SDc-0007r6-00; Thu, 10 Mar 2005 13:17:08 -0500
From: [EMAIL PROTECTED] (Guilherme de S. Pastore)
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#296925: fixed in prozilla 1:1.3.7.4-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 13:17:08 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: prozilla
Source-Version: 1:1.3.7.4-1

We believe that the bug you reported is fixed in the latest version of
prozilla, which is due to be installed in the Debian FTP archive:

prozilla_1.3.7.4-1.diff.gz
  to pool/main/p/prozilla/prozilla_1.3.7.4-1.diff.gz
prozilla_1.3.7.4-1.dsc
  to 

Bug#298929: Security problem in distcc

2005-03-10 Thread Martin Schulze
Package: distcc
Version: 2.18.1-5
Severity: grave
Tags: sarge sid security

Saw this on bugtraq:

XCode ships with version 2.0.1 of distcc. We also tried updating to
2.18.3 and had similar issues with that version as well.
Apple was not contacted prior to this release because the exploit for
distccd is already known and in the wild.  Users of the distributed
compiling system in XCode should disable this feature until both Apple
and Samba can take proper action to protect its users.

Exploit:

There are a few known exploits for distcc. By using a common method
provided by metasploit (http://metasploit.com/projects/Framework/
exploits.html#distcc_exec), I was given full access to the remote users
home folder via telnet.

Proposed Solution:

Samba needs to work on proper directory jailing and remote code
execution with their distcc product.  Apple needs to at least ship with
the latest version of distcc, which supports an Allow List of people that
are allowed to connect to the distcc daemon. This would minimize the
damage caused by running this service on a machine.

This document and follow up information can be found at
http://dev.sdf1.net/archives/003082.html

Regards,

Joey


-- 
MIME - broken solution for a broken design.  -- Ralf Baechle

Please always Cc to me when replying to me on the lists.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298930: tulip: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: tulip
Severity: serious
Justification: Policy 2.2.1

Tulip contains two non-free fonts, Luxi Sans Regular and Luxi Sans Bold:
tulip-2.0.0/library/tulip-ogl/bitmaps/font.ttf
tulip-2.0.0/library/tulip-ogl/bitmaps/fontb.ttf

These fonts should be removed. To get replacement fonts, you can depend
on ttf-bitstream-vera, ttf-freefont, or one of the other font packages
in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298872: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 13:50:59 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298872: fixed in totem 0.100-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 12:54:19 +
From [EMAIL PROTECTED] Thu Mar 10 04:54:19 2005
Return-path: [EMAIL PROTECTED]
Received: from imf17aec.mail.bellsouth.net [205.152.59.65] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9NBD-0006v4-00; Thu, 10 Mar 2005 04:54:19 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf17aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 07:53:49 -0500
Received: by anemone (Postfix, from userid 1001)
id 00704C6AD; Thu, 10 Mar 2005 07:51:23 -0500 (EST)
Date: Thu, 10 Mar 2005 07:51:23 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: totem
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild totem without the libhowl0 dependency since it's 
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298872-close) by bugs.debian.org; 10 Mar 2005 18:55:31 +
From [EMAIL PROTECTED] Thu Mar 10 10:55:31 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Sol-0006TX-00; Thu, 10 Mar 2005 10:55:31 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9SkN-0001Gb-00; Thu, 10 Mar 2005 13:50:59 -0500
From: Sebastien Bacher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298872: fixed in totem 0.100-5
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 13:50:59 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: totem
Source-Version: 0.100-5

We believe that the bug you reported is fixed in the latest version of
totem, which is due to be installed in the Debian FTP archive:

totem-gstreamer_0.100-5_i386.deb
  to pool/main/t/totem/totem-gstreamer_0.100-5_i386.deb
totem-xine_0.100-5_i386.deb
  to pool/main/t/totem/totem-xine_0.100-5_i386.deb
totem_0.100-5.diff.gz
  to pool/main/t/totem/totem_0.100-5.diff.gz
totem_0.100-5.dsc
  to pool/main/t/totem/totem_0.100-5.dsc
totem_0.100-5_all.deb
  to pool/main/t/totem/totem_0.100-5_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Bacher [EMAIL PROTECTED] (supplier of updated totem package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 19:14:51 +0100
Source: totem
Binary: totem-gstreamer totem-xine totem
Architecture: source all i386
Version: 0.100-5
Distribution: unstable
Urgency: low
Maintainer: Sebastien Bacher [EMAIL PROTECTED]
Changed-By: Sebastien Bacher [EMAIL PROTECTED]
Description: 
 totem  - A simple media player for the 

Bug#298932: scorched3d-data: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: scorched3d-data
Severity: serious
Justification: Policy 2.2.1

Scorched3d contains Courier New and Arial Black, which are non-free
fonts:
scorched3d-38.1/data/fonts/courier.ttf
scorched3d-38.1/data/fonts/test.ttf
scorched3d-38.1/data/fonts/testout.ttf

These fonts should be removed. To get replacement fonts, you can depend
on ttf-bitstream-vera, ttf-freefont, or one of the other free fonts
packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298934: roxen3: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: roxen3
Severity: serious
Justification: Policy 2.2.1

The nfonts directory contains many non-free Truetype fonts. These should
be removed. I'm not sure what these fonts are used for, but if
replacements are needed you can depend on ttf-bitstream-vera,
ttf-freefont and/or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298937: phluid: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: phluid
Version: 0.0.3.2+cvs.20020210-2
Severity: serious
Justification: Policy 2.2.1

phluid contains the non-free font National First Font, which contains
the following copyright statement:
Freeware - Copyright [c] - Roger White - 1994 - All Rights Reserved.

Without license this font Debian is not allowed to distribute this font,
and thus it should be removed. To get a replacement, you can depend on
ttf-bitstream-vera, ttf-freefont, or one of the other free fonts
packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages phluid depends on:
ii  aewm 1.2.5-2 a minimalist window manager for X1
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libimlib21.2.0-2.1   powerful image loading and renderi
ii  libttf2  1.4pre.20030402-1.1 FreeType 1, The FREE TrueType Font
ii  xlibs4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#268490: marked as done (efibootmgr: base package added dependency during freeze)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 11:48:32 -0700
with message-id [EMAIL PROTECTED]
and subject line fixed
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 28 Aug 2004 01:52:10 +
From [EMAIL PROTECTED] Fri Aug 27 18:52:10 2004
Return-path: [EMAIL PROTECTED]
Received: from atlrel9.hp.com [156.153.255.214] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1C0sO2-0003zS-00; Fri, 27 Aug 2004 18:52:10 -0700
Received: from smtp1.fc.hp.com (smtp.fc.hp.com [15.11.136.119])
by atlrel9.hp.com (Postfix) with ESMTP id 263C9C272
for [EMAIL PROTECTED]; Fri, 27 Aug 2004 21:52:09 -0400 (EDT)
Received: from ldl.fc.hp.com (ldl.fc.hp.com [15.11.146.30])
by smtp1.fc.hp.com (Postfix) with ESMTP
id 2EE193822F; Fri, 27 Aug 2004 19:52:03 -0600 (MDT)
Received: from localhost (localhost [127.0.0.1])
by ldl.fc.hp.com (Postfix) with ESMTP id 698161340F2;
Fri, 27 Aug 2004 19:52:03 -0600 (MDT)
Received: from ldl.fc.hp.com ([127.0.0.1])
by localhost (ldl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 07855-01; Fri, 27 Aug 2004 19:52:02 -0600 (MDT)
Received: from krebs (krebs.dannf [10.8.0.7])
by ldl.fc.hp.com (Postfix) with ESMTP id 275591340D4;
Fri, 27 Aug 2004 19:52:02 -0600 (MDT)
Received: by krebs (Postfix, from userid 20800)
id C90E93B7186; Fri, 27 Aug 2004 19:52:54 -0600 (MDT)
Content-Type: multipart/mixed; boundary1400580822197704898==
MIME-Version: 1.0
From: dann frazier [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: efibootmgr: base package added dependency during freeze
X-Mailer: reportbug 2.64
Date: Fri, 27 Aug 2004 19:52:54 -0600
Message-Id: [EMAIL PROTECTED]
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at ldl.fc.hp.com
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

This is a multi-part MIME message sent by reportbug.

--===1400580822197704898==
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: efibootmgr
Version: 0.4.9-1
Severity: grave
Tags: patch

efibootmgr was updated during the freeze so we can support a linux-2.6 d-i
flavor.  However, the new release we moved to added a dependency on pciutils.

   Base Package + New Dependency + Freeze == Bad

This patch backs out the code that pulls in the pciutils dependency, but
leaves in the sysfs support.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: ia64
Kernel: Linux 2.6.7-1-mckinley
Locale: LANG=C, LC_CTYPE=C

Versions of packages efibootmgr depends on:
ii  libc6.1 2.3.2.ds1-16 GNU C Library: Shared libraries an
ii  pciutils1:2.1.11-15  Linux PCI Utilities

-- no debconf information

--===1400580822197704898==
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=rm-pciutils-dep.patch

diff -urN efibootmgr-0.4.9/AUTHORS 
efibootmgr-0.5.0-test3+readbootorderfix/AUTHORS
--- efibootmgr-0.4.9/AUTHORS2004-06-09 15:39:43.0 -0600
+++ efibootmgr-0.5.0-test3+readbootorderfix/AUTHORS 2003-07-31 
09:12:59.0 -0600
@@ -13,6 +13,3 @@
 - Patches to efibootmgr.c
 - network boot entry creation in efi.c
 
-Joshua Giles [EMAIL PROTECTED]
-- walk the PCI path inserting parent bridge device path components for
-  network boot and EDD30 entries.
diff -urN efibootmgr-0.4.9/Makefile 
efibootmgr-0.5.0-test3+readbootorderfix/Makefile
--- efibootmgr-0.4.9/Makefile   2004-06-09 15:46:18.0 -0600
+++ efibootmgr-0.5.0-test3+readbootorderfix/Makefile2004-04-24 
09:17:09.0 -0600
@@ -1,10 +1,10 @@
   default: all
 
-  RELEASE_DATE := 09-Jun-2004
+  RELEASE_DATE := 24-Feb-2004
   RELEASE_MAJOR := 0
   RELEASE_MINOR := 5
   RELEASE_SUBLEVEL := 0
-  RELEASE_EXTRALEVEL := -test4
+  RELEASE_EXTRALEVEL := -test3
   RELEASE_NAME := efibootmgr
   RELEASE_STRING := 
$(RELEASE_NAME)-$(RELEASE_MAJOR).$(RELEASE_MINOR).$(RELEASE_SUBLEVEL)$(RELEASE_EXTRALEVEL)
 
diff -urN efibootmgr-0.4.9/debian/changelog 

Bug#298846: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 13:48:35 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298846: fixed in gdesklets 0.33.1-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 11:41:15 +
From [EMAIL PROTECTED] Thu Mar 10 03:41:15 2005
Return-path: [EMAIL PROTECTED]
Received: from imf22aec.mail.bellsouth.net [205.152.59.70] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9M2V-0003KE-00; Thu, 10 Mar 2005 03:41:15 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf22aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 06:40:44 -0500
Received: by anemone (Postfix, from userid 1001)
id EB03BC6AD; Thu, 10 Mar 2005 06:38:19 -0500 (EST)
Date: Thu, 10 Mar 2005 06:38:19 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gdesklets
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gdesklets without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298846-close) by bugs.debian.org; 10 Mar 2005 18:54:01 +
From [EMAIL PROTECTED] Thu Mar 10 10:54:01 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9SnI-0006Mp-00; Thu, 10 Mar 2005 10:54:00 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9Si3-00011u-00; Thu, 10 Mar 2005 13:48:35 -0500
From: Sebastien Bacher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298846: fixed in gdesklets 0.33.1-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 13:48:35 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: gdesklets
Source-Version: 0.33.1-2

We believe that the bug you reported is fixed in the latest version of
gdesklets, which is due to be installed in the Debian FTP archive:

gdesklets_0.33.1-2.diff.gz
  to pool/main/g/gdesklets/gdesklets_0.33.1-2.diff.gz
gdesklets_0.33.1-2.dsc
  to pool/main/g/gdesklets/gdesklets_0.33.1-2.dsc
gdesklets_0.33.1-2_i386.deb
  to pool/main/g/gdesklets/gdesklets_0.33.1-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Bacher [EMAIL PROTECTED] (supplier of updated gdesklets package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 19:29:31 +0100
Source: gdesklets
Binary: gdesklets
Architecture: source i386
Version: 0.33.1-2
Distribution: unstable
Urgency: low
Maintainer: Sebastien Bacher [EMAIL PROTECTED]
Changed-By: Sebastien Bacher [EMAIL PROTECTED]
Description: 
 gdesklets  - an advanced architecture for desktop applets
Closes: 298846
Changes: 
 gdesklets (0.33.1-2) unstable; urgency=low
 .
   * Rebuilt for the libhowl 

Bug#298807: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 14:02:59 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298807: fixed in evince 0.1.5-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 01:49:35 +
From [EMAIL PROTECTED] Wed Mar 09 17:49:35 2005
Return-path: [EMAIL PROTECTED]
Received: from imf25aec.mail.bellsouth.net [205.152.59.73] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Cnu-00040T-00; Wed, 09 Mar 2005 17:49:34 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf25aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Wed, 9 Mar 2005 20:49:04 -0500
Received: by anemone (Postfix, from userid 1001)
id 1759FC6AD; Wed,  9 Mar 2005 20:46:43 -0500 (EST)
Date: Wed, 9 Mar 2005 20:46:43 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: evince
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild evince without the libhowl0 dependency since it's
moving to non-free.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298807-close) by bugs.debian.org; 10 Mar 2005 19:08:32 +
From [EMAIL PROTECTED] Thu Mar 10 11:08:32 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9T1L-Wy-00; Thu, 10 Mar 2005 11:08:32 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9Svz-0002pX-00; Thu, 10 Mar 2005 14:02:59 -0500
From: Sebastien Bacher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298807: fixed in evince 0.1.5-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 14:02:59 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: evince
Source-Version: 0.1.5-2

We believe that the bug you reported is fixed in the latest version of
evince, which is due to be installed in the Debian FTP archive:

evince_0.1.5-2.diff.gz
  to pool/main/e/evince/evince_0.1.5-2.diff.gz
evince_0.1.5-2.dsc
  to pool/main/e/evince/evince_0.1.5-2.dsc
evince_0.1.5-2_i386.deb
  to pool/main/e/evince/evince_0.1.5-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Bacher [EMAIL PROTECTED] (supplier of updated evince package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 19:44:16 +0100
Source: evince
Binary: evince
Architecture: source i386
Version: 0.1.5-2
Distribution: unstable
Urgency: low
Maintainer: Sebastien Bacher [EMAIL PROTECTED]
Changed-By: Sebastien Bacher [EMAIL PROTECTED]
Description: 
 evince - Document (postscript, pdf) viewer
Closes: 298807
Changes: 
 evince (0.1.5-2) unstable; urgency=low
 .
   * Rebuilt for the libhowl transition (Closes: #298807).
   * debian/control.in:
 - updated the gnome-vfs requirements.
Files: 
 18ac27e3c94c4e3f55feffbfe4c791c9 1614 gnome optional evince_0.1.5-2.dsc
 

Bug#298943: langband-data: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: langband-data
Severity: serious
Justification: Policy 2.2.1

This package contains several non-free fonts:
- augie.ttf (http://www.speakeasy.org/~ecf/augie.txt)
- luximb.ttf (from ttf-xfree86-nonfree)
- lettergo.ttf and nova.ttf (no copyright information, no license)

These fonts should be removed. To get replacement fonts, you can depend
on ttf-bitstream-vera, ttf-freefont, or one of the other free fonts
packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298938: moodle: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: moodle
Severity: serious
Justification: Policy 2.2.1

Moodle contains two non-free fonts: Arial Narrow in:
/usr/share/moodle/lang/cs/fonts/default.ttf
/usr/share/moodle/lang/en/fonts/default.ttf
/usr/share/moodle/lang/sq/fonts/default.ttf
and Optima in:
/usr/share/moodle/lang/ru/fonts/default.ttf
/usr/share/moodle/lang/uk/fonts/default.ttf

These fonts should be removed. To get replacement fonts, you can depend
on ttf-bitstream-vera, ttf-freefont, or one of the other free fonts
packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298939: libxpm4: new buffer overflow security hole (CAN-2005-0605)

2005-03-10 Thread Branden Robinson
Package: libxpm4
Version: 4.3.0.dfsg.1-12
Severity: grave
Tags: security, upstream, fixed-upstream, patch

CAN-2005-0605 indicates that scan.c for LibXPM may allow attackers to
execute arbitrary code via a negative bitmap_unit value that leads to a
buffer overflow.

Patch is here:

https://bugs.freedesktop.org/attachment.cgi?id=1909

Description is here:

https://bugs.freedesktop.org/show_bug.cgi?id=1920

Gentoo issued an advisory about this on 4 March.

Ubuntu issued an advisory about this on 7 March.

I learned about this from Linux Weekly News.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.9-powerpc-smp
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages libxpm4 depends on:
ii  libc6   2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298942: luola-data: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: luola-data
Severity: serious
Justification: Policy 2.2.1

This package contains the font bluebold.ttf, which is one of Ray
Larabie's fonts and non-free. This font should be removed. To get
a replacement, you can depend on ttf-bitstream-vera, ttf-freefont,
or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298946: icewm-themes: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: icewm-themes
Severity: serious
Justification: Policy 2.2.1

This package contains the non-free font Chicago, which includes the
following copyright notice:  1990-91 Apple Computer Inc.  1990-91
Type Solutions Inc.  1990-91 The Font Bureau Inc.

This font should be removed. If a replacement font is needed, you can
depend on ttf-bitstream-vera, ttf-freefont, or one of the other free
fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages icewm-themes depends on:
pn  icewm-common Not found.



Bug#298861: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 14:03:44 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298861: fixed in libgnomesu 0.9.5-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 12:19:50 +
From [EMAIL PROTECTED] Thu Mar 10 04:19:50 2005
Return-path: [EMAIL PROTECTED]
Received: from imf17aec.mail.bellsouth.net [205.152.59.65] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Mdq-0001na-00; Thu, 10 Mar 2005 04:19:50 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf17aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 07:19:06 -0500
Received: by anemone (Postfix, from userid 1001)
id C6A0EC6AD; Thu, 10 Mar 2005 07:16:41 -0500 (EST)
Date: Thu, 10 Mar 2005 07:16:41 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: libgnomesu
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild libgnomesu without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298861-close) by bugs.debian.org; 10 Mar 2005 19:08:56 +
From [EMAIL PROTECTED] Thu Mar 10 11:08:55 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9T1j-ZR-00; Thu, 10 Mar 2005 11:08:55 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9Swi-0003BY-00; Thu, 10 Mar 2005 14:03:44 -0500
From: Sebastien Bacher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298861: fixed in libgnomesu 0.9.5-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 14:03:44 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: libgnomesu
Source-Version: 0.9.5-2

We believe that the bug you reported is fixed in the latest version of
libgnomesu, which is due to be installed in the Debian FTP archive:

libgnomesu-common_0.9.5-2_all.deb
  to pool/main/libg/libgnomesu/libgnomesu-common_0.9.5-2_all.deb
libgnomesu-dev_0.9.5-2_i386.deb
  to pool/main/libg/libgnomesu/libgnomesu-dev_0.9.5-2_i386.deb
libgnomesu0_0.9.5-2_i386.deb
  to pool/main/libg/libgnomesu/libgnomesu0_0.9.5-2_i386.deb
libgnomesu_0.9.5-2.diff.gz
  to pool/main/libg/libgnomesu/libgnomesu_0.9.5-2.diff.gz
libgnomesu_0.9.5-2.dsc
  to pool/main/libg/libgnomesu/libgnomesu_0.9.5-2.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Bacher [EMAIL PROTECTED] (supplier of updated libgnomesu package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 19:39:49 +0100
Source: libgnomesu
Binary: libgnomesu-common libgnomesu-dev libgnomesu0
Architecture: source i386 all
Version: 0.9.5-2
Distribution: unstable
Urgency: low
Maintainer: 

Bug#298808: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 14:17:15 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298808: fixed in file-roller 2.8.4-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 01:51:11 +
From [EMAIL PROTECTED] Wed Mar 09 17:51:11 2005
Return-path: [EMAIL PROTECTED]
Received: from imf25aec.mail.bellsouth.net [205.152.59.73] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9Cok-00042q-00; Wed, 09 Mar 2005 17:50:31 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf25aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Wed, 9 Mar 2005 20:49:55 -0500
Received: by anemone (Postfix, from userid 1001)
id 89E10C6AD; Wed,  9 Mar 2005 20:47:34 -0500 (EST)
Date: Wed, 9 Mar 2005 20:47:34 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.5 required=4.0 tests=BAYES_10,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: file-roller
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild file-roller without the libhowl0 dependency since it's
moving to non-free.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298808-close) by bugs.debian.org; 10 Mar 2005 19:23:02 +
From [EMAIL PROTECTED] Thu Mar 10 11:23:01 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9TFN-000243-00; Thu, 10 Mar 2005 11:23:01 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9T9n-0004fM-00; Thu, 10 Mar 2005 14:17:15 -0500
From: Sebastien Bacher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298808: fixed in file-roller 2.8.4-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 14:17:15 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: file-roller
Source-Version: 2.8.4-2

We believe that the bug you reported is fixed in the latest version of
file-roller, which is due to be installed in the Debian FTP archive:

file-roller_2.8.4-2.diff.gz
  to pool/main/f/file-roller/file-roller_2.8.4-2.diff.gz
file-roller_2.8.4-2.dsc
  to pool/main/f/file-roller/file-roller_2.8.4-2.dsc
file-roller_2.8.4-2_i386.deb
  to pool/main/f/file-roller/file-roller_2.8.4-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Bacher [EMAIL PROTECTED] (supplier of updated file-roller package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 19:57:16 +0100
Source: file-roller
Binary: file-roller
Architecture: source i386
Version: 2.8.4-2
Distribution: unstable
Urgency: low
Maintainer: Sebastien Bacher [EMAIL PROTECTED]
Changed-By: Sebastien Bacher [EMAIL PROTECTED]
Description: 
 file-roller - an archive manager for GNOME
Closes: 298808
Changes: 
 file-roller (2.8.4-2) unstable; urgency=low
 .
   * Rebuilt for the libhowl transition (Closes: #298808).
Files: 
 dfe952813154b38f5b7b1c69780d71e3 1602 gnome optional 

Bug#298948: gozer: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: gozer
Severity: serious
Justification: Policy 2.2.1

This package contains the non-free font helmetr.ttf. I know this is
rather painful, as I read in the changelog that this font was used to
replace several other non-free fonts to begin with. But it seems that
helmetr.ttf's inclusion in OpenOffice was a mistake, and that the font
was never free:
http://lists.debian.org/debian-devel/2002/08/msg00897.html

To get a replacement, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages gozer depends on:
ii  giblib1  1.2.4-2 wrapper library for imlib2, and ot
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libimlib21.2.0-2.1   powerful image loading and renderi
ii  libttf2  1.4pre.20030402-1.1 FreeType 1, The FREE TrueType Font
ii  xlibs4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298949: golem: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: golem
Severity: serious
Justification: Policy 2.2.1

This package contains the font vixar.ttf, which includes the following
copyright statement: Copyright (c) 1995 Microsoft Corporation. All
rights reserved.

Without a free license Debian cannot distribute this font, and thus it
should be removed.

If a replacement font is needed, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298960: freewrl: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: freewrl
Severity: serious
Justification: Policy 2.2.1

This package contains many Bitstream fonts. The README file does not
include a license, instead it states they were copied from Red Hat 7.2.
I downloaded that distribution, but could find no trace of the fonts.
Without a free license Debian cannot distribute thess fonts, and
therefore they should be removed.

To get replacement fonts, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages freewrl depends on:
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libjpeg626b-10   The Independent JPEG Group's JPEG 
pn  libpng2  Not found.
ii  libttf2  1.4pre.20030402-1.1 FreeType 1, The FREE TrueType Font
ii  libwww-perl  5.803-4 WWW client/server library for Perl
ii  perl 5.8.4-8 Larry Wall's Practical Extraction 
pn  perlapi-5.6.1Not found.
ii  xlibmesa-gl [libgl1] 4.3.0.dfsg.1-12.0.1 Mesa 3D graphics library [XFree86]
ii  xlibs4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu
ii  zlib1g   1:1.2.2-4   compression library - runtime


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298957: gem: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: gem
Severity: serious
Justification: Policy 2.2.1

Gem contains the non-free fonts Arial, Courier New and Times New Roman.
Without a free license Debian cannot distribute these fonts, and
therefore they should be removed.

To get replacement fonts, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298955: gnurobbo: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: gnurobbo
Severity: serious
Justification: Policy 2.2.1

This package contains the font robbo.ttf, which includes the following
copyright statement: Copyright 1990-1996 Bitstream Inc.  All rights
reserved.

Without a free license Debian cannot distribute this font, and thus it
should be removed.

To get a replacement font, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#297980: Bug#297985: xserver-xfree86: X server crashes when compiling a program from gnat-gps

2005-03-10 Thread Ludovic Brenta
(CC'ing Helge Lenz the original reporter)

I have been able to create a core file with the debugging version of
the X server by using kill -SEGV, as Branden Robinson described.  Then
I tried to reproduce the problem with gnat-gps, and no core file is
created.  The X server exits as though gnat-gps were sending a
Ctrl+Alt+Backspace to it.  This then sends a SIGPIPE to gnat-gps,
which crashes.  Is it possible for a client program to cause the X
server to shut down?  If so, what kind of X request should I look for
in gnat-gps?

Here is additional information on how to debug gnat-gps.  Switch to a
text console (e.g. VT1), login as yourself, and do:

$ apt-get install gnat-gdb
$ apt-get source gnat-gps
$ cd gnat-gps-2.1.0
$ dpkg-buildpackage -rfakeroot
(takes ~1h on my Pentium III 900 MHz)
$ cd glide/obj
$ gnatgdb gnat-gps
(gdb) set env DISPLAY=:0
(gdb) break commands-builder.adb:207
(gdb) run

Swith to the X console (VT7 by default).  After loading sdc.gpr, press
F4.  Switch back to VT1 where GDB is running, and take it from there.
At one point, the X server exits but gnat-gps keeps on running in GDB.
In my previous experience, this happens while gnat-gps is in one of
the GNAT.Expect.Expect procedures.  Later on, gnat-gps receives
SIGPIPE because the X server is down.

Also, it is possible to attach GDB to the X server itself.  In a text
console, login as root and:

# ps -u root | grep XFree86-debug
(look at the PID of the X server)
# gdb /usr/bin/XFree86-debug
(gdb) attach pid-of-X-server

I have not yet had time to go further than this.  I would need to
install the sources to the X server, possibly rebuild it, and try to
find the exit point, i.e. what was XFree86 thinking when it shut down?

-- 
Ludovic Brenta.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298963: caudium: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: caudium
Severity: serious
Justification: Policy 2.2.1

This package contains three non-free fonts:
- fontrstc.ttf:  1998 utopiafonts. [EMAIL PROTECTED], see also
  the readme in [1].
- lucida_unicode.ttf and verdana.ttf: two Microsoft fonts.

Without a free license Debian cannot distribute these fonts, and
therefore they should be removed.

If replacement fonts are needed, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


[1]  
http://www.reflectingarea.com/styling/fonts/creators/UtopiaFonts/FontRedSuit.zip


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages caudium depends on:
pn  caudium-modules  Not found.
ii  debconf   1.4.46 Debian configuration management sy
ii  logrotate 3.7-2  Log rotation utility
pn  pike7Not found.
pn  pike7-crypto | pike7-lobotomiNot found.
pn  pike7-gz Not found.
pn  pike7-image  Not found.



Bug#298965: afterstep: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: afterstep
Severity: serious
Justification: Policy 2.2.1

This package contains the font:
afterstep-2.00.03/libAfterImage/apps/test.ttf
No copyright or license for this font is included. Unless this font has
been released in the public domain, Debian cannot distribute it, and
therefore it should be removed.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

Versions of packages afterstep depends on:
ii  imagemagick  6:6.0.6.2-2.2   Image manipulation programs
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libjpeg626b-10   The Independent JPEG Group's JPEG 
pn  libpng2  Not found.
pn  librplay3Not found.
ii  menu 2.1.22  provides update-menus functions fo
ii  perl 5.8.4-8 Larry Wall's Practical Extraction 
ii  xlibs4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu
ii  zlib1g   1:1.2.2-4   compression library - runtime


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298964: atris: contains non-free fonts

2005-03-10 Thread Peter De Wachter
Package: atris
Severity: serious
Justification: Policy 2.2.1

This package contains the font NewMediumNormal.ttf, which includes the
following copyright statement: Copyright  1998 by Matthew Welch. All
Rights Reserved. The license on the author's web page[1] is non-free,
and the atris package contains no license at all.

Without a free license Debian cannot distribute this font, and therefore
it should be removed.

To get a replacement font, you can depend on ttf-bitstream-vera,
ttf-freefont, or one of the other free fonts packaged in Debian.


[1] http://www.squaregear.net/fonts/


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)



Bug#298967: bglibs-doc: contains non-free font

2005-03-10 Thread Peter De Wachter
Package: bglibs-doc
Version: 1.019-1
Severity: serious
Justification: Policy 2.2.1

This package contains the Arial font in the file Helvetica.ttf. No
license is included for this font. Without a free license Debian cannot
distribute this font, and therefore it should be removed. As far as I
can see, this font is not used at all, so this should cause no problems.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: changin severity for technical reasons

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 297283 normal
Bug#297283: mysql-server: mysql don't start after an upgrade
Severity set to `normal'.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298974: bittorrent-gui: btdownloadgui fails to launch

2005-03-10 Thread Jaap Haitsma
Package: bittorrent-gui
Version: 3.4.2-3
Severity: grave
Justification: renders package unusable

I get this error when launching btdownloadgui
Gdk-ERROR **: BadValue (integer parameter out of range for operation)
  serial 185 error_code 2 request_code 45 minor_code 0

and then it returns back to the command line

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages bittorrent-gui depends on:
ii  bittorrent3.4.2-3Scatter-gather network file transf
ii  libwxgtk2.4-python2.4.2.6wxWindows Cross-platform C++ GUI t
ii  python2.3.5-1An interactive high-level object-o

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298815: libsem-dev: trying to overwrite `/usr/include/semaphore.h', which is also in package libc6-dev

2005-03-10 Thread Robert Millan
On Thu, Mar 10, 2005 at 02:08:22PM +0100, Andreas Mueller wrote:
 On Thursday, 10. March 2005 12:25, Robert Millan wrote:
 
  On Thu, Mar 10, 2005 at 04:39:22AM +0100, Andreas Mueller wrote:
   Package: libsem-dev
   Version: error processing libsem-dev
   Severity: grave
   Justification: renders package unusable
  
   FYI, installed a fresh chroot and got the following
   error:
  
   (Reading database ... 18003 files and directories currently installed.)
   Unpacking libsem-dev (from .../libsem-dev_0.0.1-2_powerpc.deb) ...
   dpkg: error processing
   /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb (--unpack):
   trying to overwrite `/usr/include/semaphore.h', which is also in
   package libc6-dev
   Errors were encountered while processing:
   /var/cache/apt/archives/libsem-dev_0.0.1-2_powerpc.deb
   E: Sub-process /usr/bin/dpkg returned an error code (1)
 
  libsem-dev doesn't support linux-gnu.  Who built this package?  I can't
  find the changes file in merkel's queue/accepted.
 
 probably buildd builded it, if you didnt.

I've read the buildd log, and still can't understand what happened.  There are 
no linux
architectures listed in debian/control.

-- 
 .''`.   Proudly running Debian GNU/kFreeBSD unstable/unreleased (on UFS2+S)
: :' :
`. `'http://www.debian.org/ports/kfreebsd-gnu
  `-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#288009: batik 1.5.1 would break fop

2005-03-10 Thread Steve Langasek
On Thu, Mar 10, 2005 at 06:22:19PM +0100, Wolfgang Baer wrote:
 I prepared a package for the batik 1.5.1 upstream release.
 However during testing the package I realized that batik 1.5.1
 breaks fop ! As far as I see no other packages depend on
 libbatik-java.

 fop is currently not in testing although a valid candidate.
 A solution to the problem would be to upgrade batik to 1.5.1
 and also to upload a new fop package with an embedded batik
 library in the current version (with the affected Squiggle
 class files removed from the library).

fop is not really a valid candidate, although it appears to be in
grep-excuses.  Both libfop-java and libfop-java-doc are uninstallable on
their own right in unstable, because libfop-java depends on fop and fop
conflicts with libfop-java.  You can safely ignore this package for the time
being...

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#298849: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 16:32:13 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298849: fixed in gnome-session 2.8.1-6
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 11:45:07 +
From [EMAIL PROTECTED] Thu Mar 10 03:45:07 2005
Return-path: [EMAIL PROTECTED]
Received: from imf22aec.mail.bellsouth.net [205.152.59.70] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9M6F-00046d-00; Thu, 10 Mar 2005 03:45:07 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf22aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 06:44:36 -0500
Received: by anemone (Postfix, from userid 1001)
id 1E0BDC6AD; Thu, 10 Mar 2005 06:42:12 -0500 (EST)
Date: Thu, 10 Mar 2005 06:42:12 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.5 required=4.0 tests=BAYES_10,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gnome-session
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnome-session without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298849-close) by bugs.debian.org; 10 Mar 2005 21:38:26 +
From [EMAIL PROTECTED] Thu Mar 10 13:38:26 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9VMQ-0006Mz-00; Thu, 10 Mar 2005 13:38:26 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9VGP-0005fz-00; Thu, 10 Mar 2005 16:32:13 -0500
From: Josselin Mouette [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298849: fixed in gnome-session 2.8.1-6
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 16:32:13 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 2

Source: gnome-session
Source-Version: 2.8.1-6

We believe that the bug you reported is fixed in the latest version of
gnome-session, which is due to be installed in the Debian FTP archive:

gnome-session_2.8.1-6.diff.gz
  to pool/main/g/gnome-session/gnome-session_2.8.1-6.diff.gz
gnome-session_2.8.1-6.dsc
  to pool/main/g/gnome-session/gnome-session_2.8.1-6.dsc
gnome-session_2.8.1-6_i386.deb
  to pool/main/g/gnome-session/gnome-session_2.8.1-6_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Josselin Mouette [EMAIL PROTECTED] (supplier of updated gnome-session package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 21:44:15 +0100
Source: gnome-session
Binary: gnome-session
Architecture: source i386
Version: 2.8.1-6
Distribution: unstable
Urgency: medium
Maintainer: Josselin Mouette [EMAIL PROTECTED]
Changed-By: Josselin Mouette [EMAIL PROTECTED]
Description: 
 gnome-session - The GNOME 2 Session Manager
Closes: 289969 298849
Changes: 
 

Bug#298183: NMU diff

2005-03-10 Thread Joey Hess
It turns out that the older version of lesstif2 we have also had the
variables defined as signed ints, so the patch to fix CAN-2005-0605 in
lesstif2 is shorter than the fixes needed for newer versions of the
library. I combined this fix with the fix for lesstif1 that Martin Pitt
was kind enough to send and the result is the attached NMU diff.

Note that I haven't NMUed it yet, I'm still looking at the other open
security holes.

-- 
see shy jo
diff -ur old/lesstif1-1-0.93.94/debian/changelog 
lesstif1-1-0.93.94/debian/changelog
--- old/lesstif1-1-0.93.94/debian/changelog 2005-03-10 16:49:01.0 
-0500
+++ lesstif1-1-0.93.94/debian/changelog 2005-03-10 16:48:31.0 -0500
@@ -1,3 +1,12 @@
+lesstif1-1 (1:0.93.94-11.1) unstable; urgency=HIGH
+
+  * NMU
+  * Apply fix for newest libXpm buffer overflows in lesstif1, involving a
+negative bitmap_unit value. Fixed both lesstif1 and lesstif2.
+Closes: #298939 (CAN-2005-0605)
+
+ -- Joey Hess [EMAIL PROTECTED]  Thu, 10 Mar 2005 16:34:21 -0500
+
 lesstif1-1 (1:0.93.94-11) unstable; urgency=low
 
   * Mention CAN-2004-0688 in the 1:0.93.94-9 changelog.
diff -ur old/lesstif1-1-0.93.94/lib/Xm/LTXpm.c lesstif1-1-0.93.94/lib/Xm/LTXpm.c
--- old/lesstif1-1-0.93.94/lib/Xm/LTXpm.c   2005-03-10 16:49:00.0 
-0500
+++ lesstif1-1-0.93.94/lib/Xm/LTXpm.c   2005-03-10 16:36:47.0 -0500
@@ -6395,6 +6395,9 @@
 ibpp = image-bits_per_pixel;
 offset = image-xoffset;
 
+if (image-bitmap_unit  0)
+return (_LtXpmNoMemory);
+
 if ((image-bits_per_pixel | image-depth) == 1) {
ibu = image-bitmap_unit;
for (y = 0; y  height; y++)
diff -ur old/lesstif1-1-0.93.94/lib/Xm-2.1/Xpm.c 
lesstif1-1-0.93.94/lib/Xm-2.1/Xpm.c
--- old/lesstif1-1-0.93.94/lib/Xm-2.1/Xpm.c 2005-03-10 16:49:01.0 
-0500
+++ lesstif1-1-0.93.94/lib/Xm-2.1/Xpm.c 2005-03-10 16:46:14.0 -0500
@@ -6373,6 +6373,9 @@
 ibpp = image-bits_per_pixel;
 offset = image-xoffset;
 
+if (image-bitmap_unit  0)
+return (XpmNoMemory);
+
 if ((image-bits_per_pixel | image-depth) == 1) {
ibu = image-bitmap_unit;
for (y = 0; y  height; y++)


signature.asc
Description: Digital signature


Bug#298980: Culmus: not installable after upgrading to fontconfig 2.3.1-1

2005-03-10 Thread Lior Kaplan
Package: culmus
Version: 0.101-1
Severity: grave
Justification: renders package unusable

Hi Baruch,

I upgraded to fontconfig 2.3.1-1 and saw it overwrites the previous conf. I 
guessed that culmus add stuff to /etc/fonts/local.conf and decided to reinstall 
the package.

Fontconfig new version had a change: usage of /etc/fonts/conf.d instead of 
/etc/fonts/local.conf. Thus make culmus uninstallable send the installtions 
scrpits fail and leave the package in Failconfig status.

It seems that the sulution shold be very easy.

Some log from my machine:
laptop:~# apt-get --reinstall install culmus
Reading Package Lists... Done
Building Dependency Tree... Done
0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 2 not upgraded.
Need to get 1051kB of archives.
After unpacking 0B of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://mirror.hamakor.org.il unstable/main culmus 0.101-1 [1051kB]
Fetched 1051kB in 3m45s (4659B/s)
Preconfiguring packages ...
grep: /etc/fonts/local.conf: No such file or directory
(Reading database ... 51579 files and directories currently installed.)
Preparing to replace culmus 0.101-1 (using .../culmus_0.101-1_all.deb) ...
Unpacking replacement culmus ...
grep: /etc/fonts/local.conf: No such file or directory
Setting up culmus (0.101-1) ...
grep: /etc/fonts/local.conf: No such file or directory
grep: /etc/fonts/local.conf: No such file or directory
grep: /etc/fonts/local.conf: No such file or directory
sed: can't read /etc/fonts/local.conf: No such file or directory
dpkg: error processing culmus (--configure):
 subprocess post-installation script returned error exit status 2
Errors were encountered while processing:
 culmus
E: Sub-process /usr/bin/dpkg returned an error code (1)

laptop:~# dpkg -l fontconfig
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name   VersionDescription
+++-==-==-
ii  fontconfig 2.3.1-1generic font configuration library

laptop:~# dpkg -l culmus
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name   VersionDescription
+++-==-==-
iF  culmus 0.101-1Type1 Hebrew Fonts for X11

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686-smp
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages culmus depends on:
ii  debconf [debconf-2.0 1.4.46  Debian configuration management sy
ii  xutils   4.3.0.dfsg.1-12.0.1 X Window System utility programs

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#288009: batik 1.5.1 would break fop

2005-03-10 Thread Wolfgang Baer
Steve Langasek wrote:
On Thu, Mar 10, 2005 at 06:22:19PM +0100, Wolfgang Baer wrote:
 fop is currently not in testing although a valid candidate.
A solution to the problem would be to upgrade batik to 1.5.1
and also to upload a new fop package with an embedded batik
library in the current version (with the affected Squiggle
class files removed from the library).

fop is not really a valid candidate, although it appears to be in
grep-excuses.  Both libfop-java and libfop-java-doc are uninstallable on
their own right in unstable, because libfop-java depends on fop and fop
conflicts with libfop-java.  You can safely ignore this package for the time
being...
There was a small discussion on debian-java the last minutes. I will
prepare a patched fop release which should compile against batik 1.5.1
Should therefore the libfop-java and libfop-java-doc binary packages
removed in the new package ? I think they are transitional packages
not needed anymore as fop is not in testing at all. Am I right ?
(I CC debian-java for this binary package removal question)
Regards,
Wolfgang
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Bug#298850: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 17:17:36 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298850: fixed in gnome-terminal 2.8.2-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 11:45:49 +
From [EMAIL PROTECTED] Thu Mar 10 03:45:49 2005
Return-path: [EMAIL PROTECTED]
Received: from imf22aec.mail.bellsouth.net [205.152.59.70] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9M6u-0004Et-00; Thu, 10 Mar 2005 03:45:48 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf22aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 06:45:18 -0500
Received: by anemone (Postfix, from userid 1001)
id 95871C6AD; Thu, 10 Mar 2005 06:42:53 -0500 (EST)
Date: Thu, 10 Mar 2005 06:42:53 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gnome-terminal
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf on RM Steve Langasek)

Please rebuild gnome-terminal without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298850-close) by bugs.debian.org; 10 Mar 2005 22:24:19 +
From [EMAIL PROTECTED] Thu Mar 10 14:24:18 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9W4o-0005Dt-00; Thu, 10 Mar 2005 14:24:18 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9VyK-dD-00; Thu, 10 Mar 2005 17:17:36 -0500
From: Josselin Mouette [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298850: fixed in gnome-terminal 2.8.2-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 17:17:36 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: gnome-terminal
Source-Version: 2.8.2-2

We believe that the bug you reported is fixed in the latest version of
gnome-terminal, which is due to be installed in the Debian FTP archive:

gnome-terminal_2.8.2-2.diff.gz
  to pool/main/g/gnome-terminal/gnome-terminal_2.8.2-2.diff.gz
gnome-terminal_2.8.2-2.dsc
  to pool/main/g/gnome-terminal/gnome-terminal_2.8.2-2.dsc
gnome-terminal_2.8.2-2_i386.deb
  to pool/main/g/gnome-terminal/gnome-terminal_2.8.2-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Josselin Mouette [EMAIL PROTECTED] (supplier of updated gnome-terminal 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 22:50:38 +0100
Source: gnome-terminal
Binary: gnome-terminal
Architecture: source i386
Version: 2.8.2-2
Distribution: unstable
Urgency: medium
Maintainer: Arnaud Patard [EMAIL PROTECTED]
Changed-By: Josselin Mouette [EMAIL PROTECTED]
Description: 
 gnome-terminal - The GNOME 2 terminal emulator application
Closes: 298850
Changes: 
 

Bug#298868: marked as done (rebuild without libhowl0 dep)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 17:47:35 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#298868: fixed in nautilus-cd-burner 2.8.7-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 10 Mar 2005 12:41:02 +
From [EMAIL PROTECTED] Thu Mar 10 04:41:02 2005
Return-path: [EMAIL PROTECTED]
Received: from imf19aec.mail.bellsouth.net [205.152.59.67] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9MyL-0004vI-00; Thu, 10 Mar 2005 04:41:01 -0800
Received: from double-helix.org ([68.154.213.225])
  by imf19aec.mail.bellsouth.net
  (InterMail vM.5.01.06.11 201-253-122-130-111-20040605) with ESMTP
  id [EMAIL PROTECTED]
  for [EMAIL PROTECTED]; Thu, 10 Mar 2005 07:40:31 -0500
Received: by anemone (Postfix, from userid 1001)
id 602DFC6AD; Thu, 10 Mar 2005 07:38:06 -0500 (EST)
Date: Thu, 10 Mar 2005 07:38:06 -0500
From: Erinn Clark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rebuild without libhowl0 dep
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Operating-System: Debian GNU/Linux
X-GPG-Key-Server: pgp.mit.edu
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: nautilus-cd-burner
Severity: grave
Justification: libhowl0 moving to non-free

(on behalf of RM Steve Langasek)

Please rebuild nautilus-cd-burner without the libhowl0 dependency since it's
moving to non-free. Only a recompile is required, but it's required on 
multiple architectures, so there should be a sourceful upload.

Thanks.


-- 
off the chain like a rebellious guanine nucleotide

---
Received: (at 298868-close) by bugs.debian.org; 10 Mar 2005 22:53:03 +
From [EMAIL PROTECTED] Thu Mar 10 14:53:02 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9WWc-0002Eb-00; Thu, 10 Mar 2005 14:53:02 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9WRL-0001M8-00; Thu, 10 Mar 2005 17:47:35 -0500
From: Josselin Mouette [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#298868: fixed in nautilus-cd-burner 2.8.7-3
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 17:47:35 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: nautilus-cd-burner
Source-Version: 2.8.7-3

We believe that the bug you reported is fixed in the latest version of
nautilus-cd-burner, which is due to be installed in the Debian FTP archive:

libnautilus-burn-dev_2.8.7-3_i386.deb
  to pool/main/n/nautilus-cd-burner/libnautilus-burn-dev_2.8.7-3_i386.deb
libnautilus-burn0_2.8.7-3_i386.deb
  to pool/main/n/nautilus-cd-burner/libnautilus-burn0_2.8.7-3_i386.deb
nautilus-cd-burner_2.8.7-3.diff.gz
  to pool/main/n/nautilus-cd-burner/nautilus-cd-burner_2.8.7-3.diff.gz
nautilus-cd-burner_2.8.7-3.dsc
  to pool/main/n/nautilus-cd-burner/nautilus-cd-burner_2.8.7-3.dsc
nautilus-cd-burner_2.8.7-3_i386.deb
  to pool/main/n/nautilus-cd-burner/nautilus-cd-burner_2.8.7-3_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Josselin Mouette [EMAIL PROTECTED] (supplier of updated nautilus-cd-burner 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 10 Mar 2005 23:18:49 +0100
Source: nautilus-cd-burner
Binary: 

Bug#288009: batik 1.5.1 would break fop

2005-03-10 Thread Steve Langasek
On Thu, Mar 10, 2005 at 11:12:35PM +0100, Wolfgang Baer wrote:
 Steve Langasek wrote:
 On Thu, Mar 10, 2005 at 06:22:19PM +0100, Wolfgang Baer wrote:
  fop is currently not in testing although a valid candidate.
 A solution to the problem would be to upgrade batik to 1.5.1
 and also to upload a new fop package with an embedded batik
 library in the current version (with the affected Squiggle
 class files removed from the library).

 fop is not really a valid candidate, although it appears to be in
 grep-excuses.  Both libfop-java and libfop-java-doc are uninstallable on
 their own right in unstable, because libfop-java depends on fop and fop
 conflicts with libfop-java.  You can safely ignore this package for the 
 time
 being...

 There was a small discussion on debian-java the last minutes. I will
 prepare a patched fop release which should compile against batik 1.5.1

 Should therefore the libfop-java and libfop-java-doc binary packages
 removed in the new package ? I think they are transitional packages
 not needed anymore as fop is not in testing at all. Am I right ?

I don't think there's any reason for transitional packages for a package
that's only in unstable.  It's the maintainer's call whether to have a
transitional package, but this is *not* the way to do it: uninstallable
packages are not allowed.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#292228: marked as done (manpage looks not distributeable, as license not adhered)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Fri, 11 Mar 2005 00:43:32 +0100
with message-id [EMAIL PROTECTED]
and subject line Acknowledging this NMU
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at maintonly) by bugs.debian.org; 25 Jan 2005 20:47:34 +
From [EMAIL PROTECTED] Tue Jan 25 12:47:34 2005
Return-path: [EMAIL PROTECTED]
Received: from pcpool00.mathematik.uni-freiburg.de [132.230.30.150] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CtXb4-0002UQ-00; Tue, 25 Jan 2005 12:47:34 -0800
Received: from pcpool08.mathematik.uni-freiburg.de ([132.230.30.158])
by pcpool00.mathematik.uni-freiburg.de with asmtp (Exim 3.35 #1 
(Debian))
id 1CtXb6-00022e-00
for [EMAIL PROTECTED]; Tue, 25 Jan 2005 21:47:36 +0100
Received: from brl by pcpool08.mathematik.uni-freiburg.de with local (Exim 3.35 
#1 (Debian))
id 1CtXb6-5x-00
for [EMAIL PROTECTED]; Tue, 25 Jan 2005 21:47:36 +0100
Date: Tue, 25 Jan 2005 21:47:36 +0100
From: Bernhard R. Link [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: manpage looks not distributeable, as license not adhered
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
Sender: Bernhard R. Link [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gnuserv
Version: 3.12.6-1
Severity: serious

The following manpages say they are only distributeable under
the GFDL, but do not include the license text required by this
license:

dtemacs.1.gz

This mass-filing of bugs was announced 2005-01-09 in my mail to 
debian-devel and debian-legal:
http://lists.debian.org/debian-devel/2005/01/msg00499.html
http://lists.debian.org/debian-legal/2005/01/msg00262.html

Hochachtungsvoll,
Bernhard R. Link

---
Received: (at 292228-done) by bugs.debian.org; 10 Mar 2005 23:42:47 +
From [EMAIL PROTECTED] Thu Mar 10 15:42:47 2005
Return-path: [EMAIL PROTECTED]
Received: from maileuz.sivit.org [194.146.224.64] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9XIk-0002kn-00; Thu, 10 Mar 2005 15:42:47 -0800
Received: from localhost (localhost [127.0.0.1])
by maileuz.sivit.org (Postfix) with ESMTP id ED8DE3F95
for [EMAIL PROTECTED]; Fri, 11 Mar 2005 00:43:24 +0100 (CET)
Received: from maileuz.sivit.org ([127.0.0.1])
by localhost (maileuz.sivit.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 30134-39 for [EMAIL PROTECTED];
Fri, 11 Mar 2005 00:43:19 +0100 (CET)
Received: from hebus.dyndns.org (ATuileries-151-1-14-23.w82-123.abo.wanadoo.fr 
[82.123.76.23])
by maileuz.sivit.org (Postfix) with ESMTP id A09073FAC
for [EMAIL PROTECTED]; Fri, 11 Mar 2005 00:43:19 +0100 (CET)
Received: from benj by hebus.dyndns.org with local (Exim 3.36 #1 (Debian))
id 1D9XJU-0001Wg-00
for [EMAIL PROTECTED]; Fri, 11 Mar 2005 00:43:32 +0100
From: Benjamin Drieu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Acknowledging this NMU
Organization: APRIL - http://www.april.org/
X-Face: [EMAIL PROTECTED]|NZ\/;)nH`Ie?W,[EMAIL PROTECTED];d,3]Qa'qt3[`_D@
 BZgsuv|[EMAIL PROTECTED]Rn')V7mG\?E,ejoiLT)$(pFml1'[EMAIL 
PROTECTED]Bn`('jHOpTl7618jRM'plV%e
 Sl6q
Date: Fri, 11 Mar 2005 00:43:32 +0100
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/signed; boundary==-=-=;
micalg=pgp-sha1; protocol=application/pgp-signature
Sender: Benjamin Drieu [EMAIL PROTECTED]
X-Virus-Scanned: by amavis at maileuz.sivit.org
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-0.6 required=4.0 tests=BAYES_00,OPT_HEADER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

--=-=-=


I hereby acknowledge this NMU, thanks !

Cheers,
Benjamin

-- 
o Benjamin Drieu:   [EMAIL PROTECTED]
[EMAIL PROTECTED]
o APRIL:http://www.april.org/
o Grisbi:   http://www.grisbi.org/

--=-=-=
Content-Type: application/pgp-signature

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)


Processed: alleged hppa bug

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 294163 normal
Bug#294163: libdb4.3: build failed on hppa
Severity set to `normal'.

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: FWD: downgrade

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 298051 important
Bug#298051: imagemagick: information disclosure from exif thumbnails
Severity set to `important'.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#298051: downgrade

2005-03-10 Thread Joey Hess
severity 298051 important
thanks

Discussion with the RMs decided that these exif leakage bugs are not RC.

-- 
see shy jo


signature.asc
Description: Digital signature


Processed: Fixed in NMU of lesstif1-1 1:0.93.94-11.1

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 298939 + fixed
Bug#298939: libxpm4: new buffer overflow security hole (CAN-2005-0605)
Tags were: fixed-upstream patch security upstream
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#291709: marked as done (asterisk-chan-misdn_0.0.3rc2-4(ia64/unstable): FTBFS: non-PIC in shared library)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Thu, 10 Mar 2005 21:32:12 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#291709: fixed in asterisk-chan-misdn 0.0.3rc6-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Jan 2005 16:43:13 +
From [EMAIL PROTECTED] Sat Jan 22 08:43:13 2005
Return-path: [EMAIL PROTECTED]
Received: from mmjgroup.com [192.34.35.33] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CsOLx-0005iE-00; Sat, 22 Jan 2005 08:43:13 -0800
Received: from mix.mmjgroup.com (mix.mmjgroup.com [192.34.35.16])
by mmjgroup.com (Postfix) with ESMTP id C57E316DE8
for [EMAIL PROTECTED]; Sat, 22 Jan 2005 09:43:11 -0700 (MST)
Received: by mix.mmjgroup.com (Postfix, from userid 1000)
id E50908F30B; Sat, 22 Jan 2005 09:43:12 -0700 (MST)
Date: Sat, 22 Jan 2005 09:43:12 -0700
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: asterisk-chan-misdn_0.0.3rc2-4(ia64/unstable): FTBFS: non-PIC in 
shared library
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.4 required=4.0 tests=BAYES_00,HAS_PACKAGE,
NO_REAL_NAME autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: asterisk-chan-misdn
Version: 0.0.3rc2-4
Severity: serious

There was an error while trying to autobuild your package:

 Automatic build of asterisk-chan-misdn_0.0.3rc2-4 on caballero by sbuild/ia64 
 1.170.5
 Build started at 20050122-1629

[...]

 ** Using build dependencies supplied by package:
 Build-Depends: debhelper (= 4.0.0), asterisk-dev, libmisdn-dev, 
 libisdnnet-dev (= 0.0.0+cvs20041018-4)

[...]

 /usr/include/isdn_net.h: At top level:
 te_lib.c:53: warning: `entity_nt' defined but not used
 cc -shared -Xlinker -x -o chan_misdn.so chan_misdn.o te_lib.o -lisdnnet 
 -lmISDN
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 /usr/bin/ld: /usr/lib/gcc-lib/ia64-linux/3.3.5/../../../libmISDN.a(device.o): 
 @gprel relocation against dynamic symbol devlist
 collect2: ld returned 1 exit status
 make[1]: *** [chan_misdn.so] Error 1
 make[1]: Leaving directory `/build/buildd/asterisk-chan-misdn-0.0.3rc2'
 make: *** [build-stamp] Error 2

A full build log can be found at:
http://buildd.debian.org/build.php?arch=ia64pkg=asterisk-chan-misdnver=0.0.3rc2-4

Shared libraries must be built using only -fPIC code.

lamont

---
Received: (at 291709-close) by bugs.debian.org; 11 Mar 2005 02:38:21 +
From [EMAIL PROTECTED] Thu Mar 10 18:38:20 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9a2e-00039V-00; Thu, 10 Mar 2005 18:38:20 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9Zwi-00084h-00; Thu, 10 Mar 2005 21:32:12 -0500
From: Simon Richter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#291709: fixed in asterisk-chan-misdn 0.0.3rc6-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 10 Mar 2005 21:32:12 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no 

Bug#299007: base-files: Insecure PATH in /root/.profile

2005-03-10 Thread Paul Szabo
Package: base-files
Version: 3.0.2
Severity: critical
Tags: patch security
Justification: root security hole


I recently noticed that /usr/local and /usr/local/{bin,sbin} are
group-writable and owned by root:staff. This is wrong: those directories
are in the default PATH for root. They (and files within) should be
root-owned: group staff users or become-any-user-but-root bugs should not
be able to trojan and thus get root.

The Debian Policy Manual [1] says:

  ... /usr/local take precedence over the equivalents in /usr.
  ... should have permissions 2775 and be owned by root.staff.

but it [2] also says:

  ... make sure that [it] is secure ...
  Files should be owned by root.root ... mode 644 or 755.
  Directories should be mode 755 or 2775 ... owned by the group that needs
  write access to it.

The Debian Reference [3] and Securing Debian Manual [4], [5] say

  [group] staff is ... for helpdesk types or junior sysadmins ... to do
  things in /usr/local and to create directories in /home.

  [group] staff: Allows users to add local modifications to the system
  (/usr/local, /home) without needing root privileges.

  The 'staff' group are usually help-desk/junior sysadmins, allowing them
  to work in /usr/local and create directories in /home. 

(This is surely wrong, seems a SysV left-over: you need root privileges to
chown user directories in /home or in fact to create users in /etc/passwd.)

Junior sysadmins should not be able or encouraged to trojan root, even if
you trust them with the root password or give them sudo privileges.

Become-any-user-but-root and become-any-group-but-root bugs are quite
common. When a group of machines share user home directories via NFS
exported from somewhere with default root-squash, getting root on one
machine gives precisely that on all others of the group. There have been
genuine such bugs also e.g. in sendmail [6].

This security lapse has been discussed before [7], [8].

The solution is to remove /usr/local things from the default PATH in
/root/.profile (i.e. in /usr/share/base-files/dot.profile), leaving a
warning comment instead.

It would also be good to re-word the confused policy, and to make
/usr/local root-owned. (Maybe /usr/local/sbin could then be used again.)
Discuss on debian-policy@lists.debian.org, or reportbug debian-policy?

References:

[1] http://www.debian.org/doc/debian-policy/ch-opersys.html#s9.1.2
[2] http://www.debian.org/doc/debian-policy/ch-files.html#s10.9
[3] http://www.debian.org/doc/manuals/reference/ch-tune.en.html#s9.2.3
[4] 
http://www.debian.org/doc/manuals/securing-debian-howto/ch11.en.html#s11.1.12.1
[5] 
http://www.debian.org/doc/manuals/securing-debian-howto/ch11.en.html#s11.1.12.2
[6] http://hackersplayground.org/papers/sendmailholes.txt
[7] http://lists.debian.org/debian-doc/2001/08/msg00041.html
[8] http://lists.debian.org/debian-user/2003/12/msg02057.html

Cheers,

Paul Szabo   [EMAIL PROTECTED]   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux pisa.maths.usyd.edu.au 2.4.22-smssvr1.5.3 #1 SMP Wed Jun 23 
13:01:39 EST 2004 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages base-files depends on:
ii  base-passwd   3.4.1  Debian Base System Password/Group 
ii  gawk [awk]1:3.1.0-3  GNU awk, a pattern scanning and pr
ii  mawk [awk]1.3.3-8a pattern scanning and text proces



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#299013: libdevmapper1.01 initscript should be in rcS.d, not rc2.d

2005-03-10 Thread Andre Tomt
Package: libdevmapper1.01
Version: 2:1.01.00-1
Severity: grave
Justification: renders package unusable


# ls -l /etc/rc2.d/S20libdevmapper1.01
lrwxrwxrwx  1 root root 26 Mar  7 20:59 /etc/rc2.d/S20libdevmapper1.01 - 
../init.d/libdevmapper1.01

this used to reside in rcS.d, not rc2.d. I'm pretty sure this could
wreak havoc with a lot of lvm2 setups out there. And furthermore, the
change does not seem to be noted in the changelog.

05:36 trippeh devmapper 1.00 - 1.01 transition is acting up here
05:36 trippeh /etc/rcS.d symlink fuckage
05:43 trippeh hm.
05:43  trippeh wonders why libdevmapper1.01 moved from rcS.d to rc2.d
05:44  dilinger ...
05:45 trippeh doesnt seem to mentioned in the changelog either.
05:45  dilinger looks at waldi
05:45  dilinger update-rc.d libdevmapper1.01 defaults /dev/null
05:46  dilinger trippeh: please file a bug or ask waldi about it
05:47  dilinger that's certainly not right, as lvm-common is still in rcS.d
05:48  dilinger and it depends upon libdevmapper1.*

:-)

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-s2-up
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libdevmapper1.01 depends on:
ii  libc6   2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: [CAN-2004-0957] i believe this patch should do it...

2005-03-10 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 285276 patch
Bug#285276: mysql: vulnerability issue (CAN-2004-0956 and CAN-2004-0957)
Tags were: security woody
Bug#296674: mysql-server: Security bug in MySQL in woody (CAN-2004-0957)
Tags added: patch

 tags 296674 patch
Bug#296674: mysql-server: Security bug in MySQL in woody (CAN-2004-0957)
Tags were: patch security woody
Bug#285276: mysql: vulnerability issue (CAN-2004-0956 and CAN-2004-0957)
Tags added: patch

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#296674: [CAN-2004-0957] i believe this patch should do it...

2005-03-10 Thread sean finney
tags 285276 patch
tags 296674 patch
thanks

hi,

i believe the attached patch fixes the vulnerability.  i took the redhat
src rpm patch mysql-3.23.58-security.patch, removed the parts of the
patch that are already addressed by other DSA's, adjusted some line
numbers, and did a little extra massaging to get it to fit.

the patch cleanly applies, the package builds and installs, mysql starts
up, and i can connect to the database all without problems.  however,
this is all in my virgin woody-i386 chroot on an unstable amd64 box, and
i haven't tested that the vulnerability is actually gone.  could someone
more familiar with the vulnerability try a before and after to see if
the problem is resolved?


sean

-- 
diff -Naur mysql-3.23.58-orig/include/my_sys.h mysql-3.23.58/include/my_sys.h
--- mysql-3.23.58-orig/include/my_sys.h 2003-09-11 07:49:20.0 -0400
+++ mysql-3.23.58/include/my_sys.h  2004-10-12 13:27:15.380784008 -0400
@@ -476,7 +476,7 @@
 const char *own_pathname_part);
 extern my_string my_load_path(my_string to, const char *path,
  const char *own_path_prefix);
-extern int wild_compare(const char *str,const char *wildstr);
+extern int wild_compare(const char *str,const char *wildstr,pbool 
str_is_pattern);
 extern my_string my_strcasestr(const char *src,const char *suffix);
 extern int my_strcasecmp(const char *s,const char *t);
 extern int my_strsortcmp(const char *s,const char *t);
diff -Naur mysql-3.23.58-orig/mysys/mf_wcomp.c mysql-3.23.58/mysys/mf_wcomp.c
--- mysql-3.23.58-orig/mysys/mf_wcomp.c 2003-09-11 07:49:19.0 -0400
+++ mysql-3.23.58/mysys/mf_wcomp.c  2004-10-12 13:27:15.382783734 -0400
@@ -24,11 +24,12 @@
 
 char wild_many='*';
 char wild_one='?';
-char wild_prefix=0;
+char wild_prefix=0; /* QQ this can potentially cause a SIGSEGV */
 
-int wild_compare(register const char *str, register const char *wildstr)
+int wild_compare(register const char *str, register const char *wildstr,
+ pbool str_is_pattern)
 {
-  reg3 int flag;
+  char cmp;
   DBUG_ENTER(wild_compare);
 
   while (*wildstr)
@@ -36,33 +37,55 @@
 while (*wildstr  *wildstr != wild_many  *wildstr != wild_one)
 {
   if (*wildstr == wild_prefix  wildstr[1])
+  {
wildstr++;
-  if (*wildstr++ != *str++) DBUG_RETURN(1);
+if (str_is_pattern  *str++ != wild_prefix)
+  DBUG_RETURN(1);
+  }
+  if (*wildstr++ != *str++)
+DBUG_RETURN(1);
 }
-if (! *wildstr ) DBUG_RETURN (*str != 0);
+if (! *wildstr )
+  DBUG_RETURN(*str != 0);
 if (*wildstr++ == wild_one)
 {
-  if (! *str++) DBUG_RETURN (1);   /* One char; skipp */
+  if (! *str || (str_is_pattern  *str == wild_many))
+DBUG_RETURN(1); /* One char; skip */
+  if (*str++ == wild_prefix  str_is_pattern  *str)
+str++;
 }
 else
 {  /* Found '*' */
-  if (!*wildstr) DBUG_RETURN(0);   /* '*' as last char: OK */
-  flag=(*wildstr != wild_many  *wildstr != wild_one);
-  do
+  while (str_is_pattern  *str == wild_many)
+str++;
+  for (; *wildstr ==  wild_many || *wildstr == wild_one; wildstr++)
+if (*wildstr == wild_many)
+{
+  while (str_is_pattern  *str == wild_many)
+str++;
+}
+else
+{
+  if (str_is_pattern  *str == wild_prefix  str[1])
+str+=2;
+  else if (! *str++)
+DBUG_RETURN (1);
+}
+  if (!*wildstr)
+DBUG_RETURN(0);/* '*' as last char: OK */
+  if ((cmp= *wildstr) == wild_prefix  wildstr[1]  !str_is_pattern)
+cmp=wildstr[1];
+  for (;;str++)
   {
-   if (flag)
-   {
- char cmp;
- if ((cmp= *wildstr) == wild_prefix  wildstr[1])
-   cmp=wildstr[1];
- while (*str  *str != cmp)
-   str++;
- if (!*str) DBUG_RETURN (1);
-   }
-   if (wild_compare(str,wildstr) == 0) DBUG_RETURN (0);
-  } while (*str++  wildstr[0] != wild_many);
-  DBUG_RETURN(1);
+while (*str  *str != cmp)
+  str++;
+if (!*str)
+  DBUG_RETURN (1);
+   if (wild_compare(str,wildstr,str_is_pattern) == 0)
+  DBUG_RETURN (0);
+  }
+  /* We will never come here */
 }
   }
-  DBUG_RETURN (*str != '\0');
+  DBUG_RETURN (*str != 0);
 } /* wild_compare */
diff -Naur mysql-3.23.58-orig/mysys/mf_wfile.c mysql-3.23.58/mysys/mf_wfile.c
--- mysql-3.23.58-orig/mysys/mf_wfile.c 2003-09-11 07:49:20.0 -0400
+++ mysql-3.23.58/mysys/mf_wfile.c  2004-10-12 13:27:15.383783596 -0400
@@ -107,7 +107,7 @@
 
   not_pos=wf_pack-not_pos;
   for (i=0 ; i  not_pos; i++)
-if (wild_compare(name,wf_pack-wild[i]) == 0)
+if (wild_compare(name,wf_pack-wild[i],0) == 0)
   goto found;
   if (i)
 DBUG_RETURN(1);/* No-match */
@@ 

Bug#295488: marked as done ([sparc64] [atyfb] No display after boot; monitor is suspended)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Fri, 11 Mar 2005 01:17:36 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#295488: fixed in kernel-source-2.6.10 2.6.10-6
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 16 Feb 2005 03:50:17 +
From [EMAIL PROTECTED] Tue Feb 15 19:50:16 2005
Return-path: [EMAIL PROTECTED]
Received: from smtp-b2c.tiscali.nl (ha-smtp2.tiscali.nl) [195.241.80.19] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D1GCe-0003yn-00; Tue, 15 Feb 2005 19:50:16 -0800
Received: from strider.fjphome.nl (195-240-184-66-mx.xdsl.tiscali.nl 
[195.240.184.66])
by ha-smtp2.tiscali.nl (Postfix) with ESMTP id 9BFE750D072
for [EMAIL PROTECTED]; Wed, 16 Feb 2005 04:49:45 +0100 (CET)
From: Frans Pop [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [sparc64] [atyfb] No display after boot; monitor is suspended
Date: Wed, 16 Feb 2005 04:49:58 +0100
User-Agent: KMail/1.7.1
MIME-Version: 1.0
Content-Type: Multipart/Mixed;
  boundary=Boundary-00=_mLsECAuweWUkDN9
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

--Boundary-00=_mLsECAuweWUkDN9
Content-Type: text/plain;
  charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: kernel-source-2.6.10
Severity: serious
Justification: Serious regression from 2.6.8
Tags: patch

As a result of the discussion on switching to 2.6.10 for Sarge, I have 
tested 2.6.10 on my Sparc Ultra 10.

Result was that I discovered a serious regression for the atyfb (Mach64) 
framebuffer driver since upstream 2.6.10-rc2. I've managed to trace the 
problem and solve it with the help from upstream.

Please apply the attached patch that was prepared by David S. Miller 
[EMAIL PROTECTED] and will also be pushed in the upstream kernel.

For the complete history of this patch, see [1].

[1] http://lists.debian.org/debian-sparc/2005/02/msg00043.html

Cheers,
FJP

--Boundary-00=_mLsECAuweWUkDN9
Content-Type: text/x-diff;
  charset=us-ascii;
  name=sparc_atyfb.patch
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=sparc_atyfb.patch

= drivers/video/aty/atyfb_base.c 1.82 vs edited =
--- 1.82/drivers/video/aty/atyfb_base.c 2005-01-04 18:48:32 -08:00
+++ edited/drivers/video/aty/atyfb_base.c   2005-02-15 08:19:00 -08:00
@@ -2511,7 +2511,15 @@
}
} else
 #endif /* !CONFIG_PPC */
-   if (!fb_find_mode(var, info, mode, NULL, 0, defmode, 8))
+   if (
+#if defined(CONFIG_SPARC32) || defined(CONFIG_SPARC64)
+  /* On Sparc, unless the user gave a specific mode
+   * specification, use the PROM probed values in
+   * default_var.
+   */
+   !mode ||
+#endif
+   !fb_find_mode(var, info, mode, NULL, 0, defmode, 8))
var = default_var;
 
if (noaccel)

--Boundary-00=_mLsECAuweWUkDN9--

---
Received: (at 295488-close) by bugs.debian.org; 11 Mar 2005 06:23:08 +
From [EMAIL PROTECTED] Thu Mar 10 22:23:08 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9dYC-00084j-00; Thu, 10 Mar 2005 22:23:08 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9dSq-0004g1-00; Fri, 11 Mar 2005 01:17:36 -0500
From: Andres Salomon [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#295488: fixed in kernel-source-2.6.10 2.6.10-6
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Fri, 11 Mar 2005 01:17:36 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Source: kernel-source-2.6.10
Source-Version: 2.6.10-6

We believe that the bug you reported is fixed in the latest version of
kernel-source-2.6.10, which is due to be installed in the Debian FTP archive:

kernel-doc-2.6.10_2.6.10-6_all.deb
  to 

Bug#295628: marked as done (nis kills sparc64)

2005-03-10 Thread Debian Bug Tracking System
Your message dated Fri, 11 Mar 2005 01:17:36 -0500
with message-id [EMAIL PROTECTED]
and subject line Bug#295628: fixed in kernel-source-2.6.10 2.6.10-6
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 2 Jan 2005 09:57:17 +
From [EMAIL PROTECTED] Sun Jan 02 01:57:17 2005
Return-path: [EMAIL PROTECTED]
Received: from tershal.beezly.org.uk [213.177.254.57] (Debian-exim)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Cl2U9-0002hs-00; Sun, 02 Jan 2005 01:57:17 -0800
Received: from [10.0.0.212] (helo=[10.0.0.212])
by tershal.beezly.org.uk with esmtp (Exim 4.34)
id 1Cl2U6-0003iz-8j
for [EMAIL PROTECTED]; Sun, 02 Jan 2005 09:57:14 +
Subject: nis kills sparc64
From: Beezly [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Content-Type: text/plain
Date: Sun, 02 Jan 2005 09:57:26 +
Message-Id: [EMAIL PROTECTED]
Mime-Version: 1.0
X-Mailer: Evolution 2.1.2 
Content-Transfer-Encoding: 7bit
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: nis
Version: 3.12-3
Severity: critical

Installing the nis package on my E4500 kills the machine. It seems to
stop the machine creating new processes althought it's difficult for me
to tell as I have limited physical access to the machine.

Doing apt-get install nis produces the following...

gold:/usr/sbin# apt-get install nis
Reading Package Lists... Done
Building Dependency Tree... Done
The following NEW packages will be installed:
  nis
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 235kB of archives.
After unpacking 844kB of additional disk space will be used.
Get:1 http://mirrors.shef.ac.uk testing/main nis 3.12-3 [235kB]
Fetched 235kB in 4s (53.7kB/s)
Preconfiguring packages ...
Selecting previously deselected package nis.
(Reading database ... 29539 files and directories currently installed.)
Unpacking nis (from .../archives/nis_3.12-3_sparc.deb) ...
Setting up nis (3.12-3) ...
Setting NIS domainname to: beezly.org.uk
Starting NIS services: ypbind

The machine becomes inaccessible after loading ypbind and you cannot
interrupt the terminal, however it IS still possible to ping the
machine. ssh to the machine gets as far as opening a connection, but no
further.

Marked critical as it flattens my machine, every application and makes
it unusable.

Anything you want me to try out, please let me know although it can take
me a while to get back to you... I have to drive over two hills to get
to the machine!

Cheers,

Andrew


---
Received: (at 295628-close) by bugs.debian.org; 11 Mar 2005 06:23:02 +
From [EMAIL PROTECTED] Thu Mar 10 22:23:02 2005
Return-path: [EMAIL PROTECTED]
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D9dY6-00083v-00; Thu, 10 Mar 2005 22:23:02 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1D9dSq-0004g3-00; Fri, 11 Mar 2005 01:17:36 -0500
From: Andres Salomon [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#295628: fixed in kernel-source-2.6.10 2.6.10-6
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Fri, 11 Mar 2005 01:17:36 -0500
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 2

Source: kernel-source-2.6.10
Source-Version: 2.6.10-6

We believe that the bug you reported is fixed in the latest version of
kernel-source-2.6.10, which is due to be installed in the Debian FTP archive:

kernel-doc-2.6.10_2.6.10-6_all.deb
  to pool/main/k/kernel-source-2.6.10/kernel-doc-2.6.10_2.6.10-6_all.deb
kernel-patch-debian-2.6.10_2.6.10-6_all.deb
  to 
pool/main/k/kernel-source-2.6.10/kernel-patch-debian-2.6.10_2.6.10-6_all.deb
kernel-source-2.6.10_2.6.10-6.diff.gz
  to pool/main/k/kernel-source-2.6.10/kernel-source-2.6.10_2.6.10-6.diff.gz
kernel-source-2.6.10_2.6.10-6.dsc
  to