Bug#290009: any luck with r5rs-doc?

2005-09-29 Thread Nathanael Nerode
Anything happening here?  It would be nice to get this package back in for 
etch, but scm doesn't seem to be having much luck -- can it be made to run on 
a different scheme interpreter?  Or is there a new maintainer in the works 
for scm?

-- 
Nathanael Nerode  [EMAIL PROTECTED]

(Instead, we front-load the flamewars and grudges in
the interest of efficiency.) --Steve Lanagasek,
http://lists.debian.org/debian-devel/2005/09/msg01056.html


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#328048: mod_perl makes apache2 segv

2005-09-29 Thread Vincent Lefevre
On 2005-09-28 20:52:23 -0700, Jurij Smakov wrote:
 FWIW, I cannot reproduce it in current sid. Application I maintain 
 (torrus) uses libapache2-mod-perl2 and it's working happily. Here are 
 currently installed versions of relevant packages:
 
 apache2-common2.0.54-5
 apache2-mpm-worker2.0.54-5
 libapache2-mod-perl2  2.0.1-3
 perl  5.8.7-5

Here, on a PowerPC machine, Apache crashes with:

apache2-common2.0.54-5
apache2-mpm-prefork   2.0.54-5
libapache2-mod-perl2  2.0.1-3
perl  5.8.7-5

I had to remove perl.* symlinks from /etc/apache2/mods-enabled.

-- 
Vincent Lefèvre [EMAIL PROTECTED] - Web: http://www.vinc17.org/
100% accessible validated (X)HTML - Blog: http://www.vinc17.org/blog/
Work: CR INRIA - computer arithmetic / SPACES project at LORIA


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#327960: marked as done (rlplot: uninstallable; needs rebuild for the Qt/KDE transition)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 00:17:06 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#327960: fixed in rlplot 1.0-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 12 Sep 2005 23:48:12 +
From [EMAIL PROTECTED] Mon Sep 12 16:48:12 2005
Return-path: [EMAIL PROTECTED]
Received: from 84-120-66-144.onocable.ono.com (chistera.yi.org) [84.120.66.144] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EEy20-0003TD-00; Mon, 12 Sep 2005 16:48:12 -0700
Received: from userid 1000 by chistera.yi.org with local (Exim 4.52) 
  id 1EEy1e-0002UN-1g
  for [EMAIL PROTECTED]; Tue, 13 Sep 2005 01:47:50 +0200
From: Adeodato =?utf-8?B?U2ltw7M=?= [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: rlplot: uninstallable; needs rebuild for the Qt/KDE transition
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Message-Id: [EMAIL PROTECTED]
Date: Tue, 13 Sep 2005 01:47:50 +0200
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: rlplot
Version: 0.99.14-1
Severity: grave
Tags: sid

Hello,

  This is a grave bug filed against your package because it depends on
  libqt3c102-mt, which no longer exists, thus rendering yor package
  uninstallable in unstable. As part of the C++ ABI transition, this
  library has moved to the libqt3-mt package.

  Simply recompiling and uploading your package should be enough to fix
  this; as per this mail [1], you need not bump your Qt, kdelibs or aRts
  build-dependencies. Beware, though, that that may not be the case for
  all the involved librares. Also, make sure that you build the package
  in an up to date and clean sid environment, so that final dependencies
  are correct. Please do this as soon as possible in order to accelerate
  the Qt/KDE transition to testing.

[1] http://lists.debian.org/debian-devel-announce/2005/09/msg0.html

  Perhaps you find that your package fails to compile with gcc4. If
  that's the case, there's probably a bug about it in the BTS, and it
  may include a patch. If not (or if you have doubts about the
  correctness of the patch), you may be able to find a fix in upstream's
  CVS, or in the Ubuntu distribution. If your package fails only in arm,
  m68k, and hppa, see instructions in the above mail.

  Finally, if there's a strong reason for which your package should not
  be NMUed, please note so in this bug report. Prospective NMUers will
  read your reasoning, and will decide if it's strong enough to delay
  their upload.

  Thanks for your cooperation, and happy hacking!
  

  P.S.: There may be an already reported bug against this package for
  this very same reason. I've checked for that, and will be merging the
  bugs soon. The reason for still filing this bug was to have the
  opportunity of including the small bits of information above. I
  apologize for the inconvenience.


---
Received: (at 327960-close) by bugs.debian.org; 29 Sep 2005 07:18:19 +
From [EMAIL PROTECTED] Thu Sep 29 00:18:19 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKsfC-0005bx-00; Thu, 29 Sep 2005 00:17:06 -0700
From: James Stone [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#327960: fixed in rlplot 1.0-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 00:17:06 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: rlplot
Source-Version: 1.0-1

We believe that the bug you reported is fixed in the latest version of
rlplot, which is due to be installed in the Debian FTP archive:

rlplot_1.0-1.diff.gz
  to pool/main/r/rlplot/rlplot_1.0-1.diff.gz
rlplot_1.0-1.dsc
  to pool/main/r/rlplot/rlplot_1.0-1.dsc
rlplot_1.0-1_i386.deb
  to pool/main/r/rlplot/rlplot_1.0-1_i386.deb
rlplot_1.0.orig.tar.gz
  to 

Bug#330627: Gentoo had an advisory for this

2005-09-29 Thread Moritz Muehlenhoff
Hi,
there has been a Gentoo advisory about insecure temp files in rkhunter,
which got assigned CAN-2005-1270:
http://www.gentoo.org/security/en/glsa/glsa-200504-25.xml

So please check, whether the mentioned check_update.sh script is
vulnerable in the Debian package as well.

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#329870: pydf: Does not start on alpha architecture after installing

2005-09-29 Thread Radovan Garabik
On Wed, Sep 28, 2005 at 07:57:56PM +0200, Adrian Neumaier wrote:

...

 
 python2.4 (2.4.1+2.4.2rc1-1):
 
 python2.4 -c 'import os; print os.statvfs(/)'
 (4096, 4096, 1802133918588257, 2020764933271418, 1546304191037019, 0, 0, 255, 
 0, 0)
^^^  ^

this says your filesystem is 1802133918588257*4096 B == 6.4 exabytes big(!)
likewise, it says you have 7.2 exabytes of free space, therefore the
occupied space is negative and this is where pydf fails.
I am going to reassign the bug to python.

 
 python2.4 -c 'import os; print os.statvfs(/home)'
 (4096, 4096, 1640913730780508, 1108307721154497, 1101865270110756, 0, 0, 255, 
 0, 0)
 
 

ditto



-- 
 ---
| Radovan Garabík http://kassiopeia.juls.savba.sk/~garabik/ |
| __..--^^^--..__garabik @ kassiopeia.juls.savba.sk |
 ---
Antivirus alert: file .signature infected by signature virus.
Hi! I'm a signature virus! Copy me into your signature file to help me spread!



Bug#320413: Take over of texinfo/info packages

2005-09-29 Thread Frank Küster
Norbert Preining [EMAIL PROTECTED] wrote:

 On Mit, 28 Sep 2005, Frank Küster wrote:
  For more than 5 weeks no answer. How do we proceed with this? We should
  think about something rather soon, as with teTeX 3 going into unstable
  texinfo is broken.
 
 I think we do it rather now, than when I'm busy with uploading teTeX
 3.0.  Is the patch you posted to the bug log still up-to-date wrt to the
 version on http://www.tug.org/texlive/Debian/texinfo/?

 Yes it is. But:

 lintian spits out:
 W: texinfo: binary-without-manpage texi2pdf

There is a manpage in the sources of teTeX 2.0.2 (and thus in the sid
Debian package, or on 
http://cvs.debian.org/*checkout*/tetex-bin/texk/tetex/texi2pdf.man?rev=1.1.1.2cvsroot=tetexcontent-type=application/x-troff-man

 W: texinfo: possible-bashism-in-maintainer-script postinst:3 '[ $1 = 
 configure -a '

- if [ $1 = configure -a -z $2 ] ; then
+ if [ $1 = configure ]  [ -z $2 ] ; then

 E: texinfo: old-fsf-address-in-copyright-file
 W: info: possible-bashism-in-maintainer-script postinst:3 '[ $1 = 
 configure -o '

- if [ $1 = configure -o $1 = upgrade ]; then
+ if [ $1 = configure ] || [ $1 = upgrade ]; then

 E: info: old-fsf-address-in-copyright-file

 What the hell is this stupid old-fsf-address-in-copyright-file error. 

Doesn't lintian tell you more with -i?  web.ask.com pointed me to

, Lintian report for old-fsf-address-in-copyright-file
| 
| The /usr/share/doc/pkg/copyright file refers to the old postal
| address of the Free Software Foundation (FSF). The new address is:
| 
|   Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
|   MA 02111-1307, USA.
| 
`

Of course this is an upstream issue, just as the manpage.

 But what is with the bashism?! 

That test or [ understands boolean operators is specific to bash, or at
least it isn't guaranteed by POSIX and probably not implemented in the
test builtins of dash and posh.

 Do you accept it like this? Or should I prepare a new 0.1.

We're not really in a hurry; I'd say fix them first.

 And: Did we come to the conclusion that I write myself as teh new
 Maintainer or that I make a NMU upload?

In fact we were always talking about taking over.  So it's gonna be
4.8-1, with you as the maintainer and your signature in the changelog
file.

Regards, Frank
-- 
Frank Küster
Inst. f. Biochemie der Univ. Zürich
Debian Developer




Bug#330602: irssi-text: irssi SEGVs with recent sid perl upgrade

2005-09-29 Thread David Pashley
On Sep 28, 2005 at 21:59, simon raven praised the llamas by saying:
 Package: irssi-text
 Version: 0.8.10rc5-0.1
 Severity: grave
 Justification: renders package unusable
 
 hi,
 
 just like the subject says, it SEGVs when i launch it. also it dumps
 core. seems to be DynaLoader related, since i'm seeing similar behaviour
 with mod_perl (DynaLoader involved in the borkedness).
 
 more info provided upon request.
 

Can you disable loading all perl scripts on start up? Does it still
crash? Can you load one script at a time and let me know if it is all
scripts that cause it to crash or if it is just one or a set of scripts.

-- 
David Pashley
[EMAIL PROTECTED]
Nihil curo de ista tua stulta superstitione.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: os.statvfs bogus results on alpha

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 reassign 329870 python
Bug#329870: pydf: Does not start on alpha architecture after installing
Bug reassigned from package `pydf' to `python'.

 severity 329870 normal
Bug#329870: pydf: Does not start on alpha architecture after installing
Severity set to `normal'.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330336: Patch for NMU 2.0.7-1.2

2005-09-29 Thread Luk Claes
Jeremy T. Bouse wrote:
Next time I would appreciate it if you followed section 5.11.1 of the
 Developers Reference a bit more closely.
 
You did submit a bug report, atleast the snmp dependency was one that
 actually did not already have a report submitted on; however giving less
 than 24 hours before you uploaded not only the NMU but the patch to the
 BTS hardly gives time for a response from the developer. Submitting the
 patch within 24 hours and not uploading the NMU after giving some time
 for a response would have been better.
 
5.11.1 states the following order, please abid by it:
 
   1) File a bug report *Hurray you did that atleast*
   2) Wait a few days for a response. File a 'patch' if no response
   3) Wait a few more days if you get no answer, then mail announcing
 the intent to NMU
   4) Upload your package to DELAYED/7-day (not 3-DAY, not 5-DAY,
 *7-DAY*)

It's part of the gcc and Qt/KDE transition. At least for libfwbuilder
3-DAY is apropriate... Open RC bugs are an intent to NMU... and an NMU
is no attack, it's just to help you...

If you had checked all the other bugs you closed and read them you
 would have noticed that I was working on the 2.0.9 packaging already as
 it had been released. I had been working on 2.0.8 when the C++ ABI
 transition hit the mirrors. You would have also noticed I respond to
 just about every bug report filed, so not getting a response from a bug
 filed within 24 hours isn't a problem.

Fixing RC bugs is more important than a new upstream...

I won't go on about the fact that some of the items in the bugs you
 closed were not addressed in your NMU to begin with and would have been
 closed without being addressed.

You mean the bug that was already fixed, but not closed by you?

Checking the QA mia-history would have also showed I wasn't MIA as
 well; however you made no attempt, other than the one bug report to,
 contact me prior to doing the NMU.

Note that the NMU has not reached the archive yet and that your packages
are holding the Qt/KDE transition... The other option next to NMUing was
asking its removal from testing in a couple of days...

Note also that NMUing is to help you. I'm sorry if you misunderstood
this NMUs as an attack. The procedure for NMUing described in the
Developers Reference is indeed a good one for fixing random bugs, but
please understand that it is too much hassle for a testing migration of
a *big* transition.

So, sorry again if it came over as an attack.

Cheers

Luk


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330604: inkscape does not start

2005-09-29 Thread Wolfram Quester
Hi Torsten,

On Wed, Sep 28, 2005 at 10:40:13PM +0200, Torsten Zirzlaff wrote:
 Package: inkscape
 Version: 0.42.2-1
 Severity: grave
 Justification: renders package unusable
 
 During startup of inkscape it does display the beginnings of the canvas 
 area, but then stops with a popup that it has encountered an internal 
 error and closed now. On console the following appears:
 tinuviel zirzlaff 65 (~):inkscape
 
 Emergency save activated!
 Emergency save completed. Inkscape will close now.
 If you can reproduce this crash, please file a bug at www.inkscape.org
 with a detailed description of the steps leading to the crash, so we can 
 fix it.
 Abbruch
 
 
 -- System Information:
 Debian Release: testing/unstable
   APT prefers testing-proposed-updates
   APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
 Architecture: alpha
 Shell:  /bin/sh linked to /bin/bash
 Kernel: Linux 2.6.12.4.20050814
 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Since you are using alpha, this is probably a reintroduction of 64Bit
uncleanliness in inkscape. Hm, I hoped that this would be closed.
Can you provide a backtrace please? I had a look at the buildlog for
inkscape on alpha, but there are so many warnings that I'm lost.

Thanks for your help,

Wolfi


signature.asc
Description: Digital signature


Bug#330682: mantis: Several vulnerabilities in Mantis

2005-09-29 Thread Moritz Muehlenhoff
Package: mantis
Severity: grave
Tags: security
Justification: user security hole

mantis 1.0.0-rc2 fixed these security problems, that seem to be missing in
the latest DSA upload that fixed several others:

- 0006097: [security] user ID is cached indefinately (thraxisp)
- 0006189: [security] List of users (in filter) visible for unauthorized users. 
(thraxisp)

Besides that there was a CVE assignment (CAN-2005-3091) for a 
Cross-Site-Scripting
vulnerability that refers the Mantis bug 5751, for which I can't find a 
referenced
fix in the 0.19.2-4 changelog as well.

Cheers,
Moritz

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-rc1
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: proper tagging

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 329839 grave
Bug#329839: buffer overflow security fix 
Severity set to `grave'.

 tags 329839 security
Bug#329839: buffer overflow security fix 
There were no tags set.
Tags added: security

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#329848: stripclub: FTBFS on hppa

2005-09-29 Thread Benjamin Cutler
Steve Langasek wrote:

The fact that this only fails on hppa is rather odd, and is probably
worthy of a closer look.



Sure.  Test it on other architectures, and see if it still builds -- judging
by the timestamps, I think hppa is the only arch that's tried it since the
new binutils hit the archive, so it's a fair assumption that it's not
actually hppa-specific.

  

Looking at the timestamps, from what I can tell it looks like it's been
doing this for a while, and seems to be hppa specific (although the
error used to be 'file truncated'). I *just* tested rebuilding it on my
i386 box, using the latest sid packages, and it worked fine, so I'm not
sure why it's failing on hppa buildd. I don't have any other
architectures available to me.

Is there any documentation on whether or not compiling into /dev/null is
supported, or is this undocumented behavior that just happens to work on
everything BUT hppa? Seems like it's worth asking the gcc guys, so I'm
forwarding this to the gcc list.

In the mean time, I'll twiddle with the build scripts tomorrow and send
in a new package that should compile on hppa. I've known about this for
quite some time, but really had no idea what was causing it, so I just
kinda left it alone, hoping it was some hppa bug that would just get
fixed later.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#306693: Ubuntu patch for cpio CAN-2005-1111 and CAN-2005-1229

2005-09-29 Thread Martin Pitt
tag 306693 patch 
tag 305372 patch
thanks

Hi!

I finally got some time to fix these issues:

  http://patches.ubuntu.com/patches/cpio.CAN-2005-_1229.diff

In case it is useful for a DSA, here is the USN text:

| Imran Ghory found a race condition in the handling of output files.
| While a file was unpacked with cpio, a local attacker with write
| permissions to the target directory could exploit this to change the
| permissions of arbitrary files of the cpio user. (CAN-2005-)
| 
| Imran Ghory discovered a path traversal vulnerability. Even when the
| --no-absolute-filenames option was specified, cpio did not filter out
| .. path components. By tricking an user into unpacking a malicious
| cpio archive, this could be exploited to install files in arbitrary
| paths with the privileges of the user calling cpio. (CAN-2005-1229)

Have a nice day,

Martin

-- 
Martin Pitthttp://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?


signature.asc
Description: Digital signature


Bug#330664: linux-image-2.6.12-1-alpha-smp: kernel panic: trying to kill interrupt handler

2005-09-29 Thread Bastian Blank
severity 330664 important
tags 330664 moreinfo
thanks

On Thu, Sep 29, 2005 at 06:58:58AM +0200, DEMAINE Benoit-Pierre wrote:
 hand copy of KP:
 [...]
 Kernel panic - not syncing: Aiee, killing interrupt handler!

Please copy the whole output (serial console makes this easy). This line
don't show where it does wrong and what happened.

Bastian

-- 
Schshschshchsch.
-- The Gorn, Arena, stardate 3046.2


signature.asc
Description: Digital signature


Processed: Ubuntu patch for cpio CAN-2005-1111 and CAN-2005-1229

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 306693 patch
Bug#306693: [CAN-2005-1229] cpio: allows extracting insecure pathnames (leading 
slash = / and dotdot = ..)
Tags were: security
Tags added: patch

 tag 305372 patch
Bug#305372: TOCTOU file-permissions vulnerability (CAN-2005-)
Tags were: security
Tags added: patch

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330364: Helix Player 1.0.6

2005-09-29 Thread Daniel Baumann
Helix Player 1.0.6 does fix the mentioned security problem.

Because Noah said he will prepare the stable-security package (and
packages by me seems not to be considered), I only made the package for
sid so far.

It is in the usual place at
http://archive.daniel-baumann.ch/debian/packages/helix-player/ and will
be uploaded today.

For sarge: As usual, there is no broken-out patch available, so one have
to pull it oneself from the 1.0.6 tarball.

-- 
Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email:  [EMAIL PROTECTED]
Internet:   http://people.panthera-systems.net/~daniel-baumann/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#312058: Planning to fix this one?

2005-09-29 Thread Erich Schubert
Hi,

 Hello!  This bug has been open and patched for quite a while.  Planning to 
 make a new upload soon?  Please reply to bug trail.

It has been on my TODO list for ages now... :-(
Sorry, I didn't have time for it yet.

best regards,
Erich Schubert
-- 
erich@(vitavonni.de|debian.org)--GPG Key ID: 4B3A135C(o_
   To understand recursion you first need to understand recursion.   //\
   Die kürzeste Verbindung zwischen zwei Menschen ist ein Lächeln.   V_/_




Bug#330664: linux-image-2.6.12-1-alpha-smp: kernel panic: trying to kill interrupt handler

2005-09-29 Thread DEMAINE Benoit-Pierre
 Please copy the whole output (serial console makes this easy). This line
 don't show where it does wrong and what happened.

I have been trying to use a serial cable for that for about 2h before sending 
this
report, but my cable seems faulty; I try againe when I have a new cable.

The only thing you see on screen is just a list of stack addresse, and name of
functions. I do think that may be helpfull ... if I can give th ebegining of 
the list.

It is the first time I report a bug being 'serious', and I hope I can proove it 
is
so within 4 days.

-- 
DEMAINE Benoit-Pierre (aka DoubleHP ) http://www.demaine.info/
\_o If computing were an exact science, IT engineers would not have work o_/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330607: marked as done (current version does not provide a binary :/)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 04:32:15 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#330607: fixed in qgo 1.0.2-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 28 Sep 2005 21:15:55 +
From [EMAIL PROTECTED] Wed Sep 28 14:15:55 2005
Return-path: [EMAIL PROTECTED]
Received: from master.debian.org [146.82.138.7] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EKjHP-0003k6-00; Wed, 28 Sep 2005 14:15:55 -0700
Received: from pd95348f6.dip.t-dialin.net (localhost.localdomain) 
[217.83.72.246] 
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1EKjHO-Mz-00; Wed, 28 Sep 2005 16:15:54 -0500
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Bastian Venthur [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: current version does not provide a binary :/
X-Mailer: reportbug 3.17
Date: Wed, 28 Sep 2005 23:15:59 +0200
X-Debbugs-Cc: [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-7.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_PACKAGE,OUR_MTA_MSGID,X_DEBBUGS_CC autolearn=no 
version=2.60-bugs.debian.org_2005_01_02

Package: qgo
Version: 1.0.2-3
Severity: grave

Hi new qgo maintainer ;)

I think you've made a little mistake in you last update. At least on my
box the qgo-binary is not installed anymore:

$ dpkg -L qgo
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/qgo
/usr/share/doc/qgo/copyright
/usr/share/doc/qgo/changelog.gz
/usr/share/doc/qgo/changelog.Debian.gz
/usr/share/menu
/usr/share/menu/qgo
/usr/share/man
/usr/share/man/man6
/usr/share/man/man6/qgo.6.gz


Please fix ASAP -- I need this programm, really ;)


kind regards

Bastian

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-laptop
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

-- no debconf information

---
Received: (at 330607-close) by bugs.debian.org; 29 Sep 2005 11:38:02 +
From [EMAIL PROTECTED] Thu Sep 29 04:38:02 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKwe7-0007bs-00; Thu, 29 Sep 2005 04:32:15 -0700
From: Cyril Chaboisseau [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#330607: fixed in qgo 1.0.2-5
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 04:32:15 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: qgo
Source-Version: 1.0.2-5

We believe that the bug you reported is fixed in the latest version of
qgo, which is due to be installed in the Debian FTP archive:

qgo_1.0.2-5.diff.gz
  to pool/main/q/qgo/qgo_1.0.2-5.diff.gz
qgo_1.0.2-5.dsc
  to pool/main/q/qgo/qgo_1.0.2-5.dsc
qgo_1.0.2-5_i386.deb
  to pool/main/q/qgo/qgo_1.0.2-5_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Cyril Chaboisseau [EMAIL PROTECTED] (supplier of updated qgo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 29 Sep 2005 00:32:07 +0200
Source: qgo
Binary: qgo
Architecture: source i386
Version: 1.0.2-5
Distribution: unstable
Urgency: low
Maintainer: Cyril Chaboisseau [EMAIL PROTECTED]
Changed-By: Cyril Chaboisseau [EMAIL PROTECTED]
Description: 
 qgo- Go client and full featured SGF editor
Closes: 330607
Changes: 
 qgo (1.0.2-5) unstable; 

Bug#330706: freenet-unstable: package spectacularly out of date

2005-09-29 Thread Sam Penny
Package: freenet-unstable
Version: 0.4.3+20020413-2
Severity: grave
Justification: renders package unusable

Nobody out there is still using version 0.4, there have been two major
point releases since that version was current and a third is in the
works. Unfortunately, the nature of this package means that using a
significantly out of date version will not work unless a large number of
others are also using that version.

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.26
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages freenet-unstable depends on:
ii  adduser   3.67   Add and remove users and groups
ii  debconf   1.4.58 Debian configuration management sy
ii  debianutils   2.14.3 Miscellaneous utilities specific t
ii  gij-4.0 [java-virtual-machine 4.0.1-2The GNU Java bytecode interpreter
ii  j2re1.4 [java-virtual-machine 1.4.2.02-1 Blackdown Java(TM) 2 Runtime Envir
ii  kaffe 2:1.1.5-3  A JVM to run Java bytecode
ii  kaffe-pthreads [kaffe]2:1.1.5-3  A POSIX threads enabled version of
ii  net-tools 1.60-15The NET-3 networking toolkit

freenet-unstable recommends no packages.

-- debconf information:
* freenet-unstable/storeSize: 209715200
  freenet-unstable/missing-address:
* freenet-unstable/ipAddress: 127.0.0.1
  freenet-unstable/services: fproxy
  freenet-unstable/port-not-a-short:
  freenet-unstable/bigfile-supported: false
  freenet-unstable/address-means-nontransient:
  freenet-unstable/listenPort: 21615
  freenet-unstable/size-not-a-number:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#222384: Processed: Not security related

2005-09-29 Thread Christoph Martin
tags 222384 + security
thanks

The removal of the security tag seams to be a mistake. There was no
explanation in the mail and I got no answer on my question about it. The
problem is clearly security related.

Christoph

Debian Bug Tracking System schrieb:
 Processing commands for [EMAIL PROTECTED]:
 
 
tags 222384 - security
 
 Bug#222384: mason: Mason does not setup /etc/rc.* links
 Tags were: patch sarge security
 Tags removed: security
 
 
thanks
 
 Stopping processing here.
 
 Please contact me if you need assistance.
 
 Debian bug tracking system administrator
 (administrator, Debian Bugs database)

-- 

Christoph Martin, Leiter der EDV der Verwaltung, Uni-Mainz, Germany
 Internet-Mail:  [EMAIL PROTECTED]
  Telefon: +49-6131-3926337
  Fax: +49-6131-3922856


signature.asc
Description: OpenPGP digital signature


Bug#330164: Fwd: Provisional patch for mysql authentication bypass

2005-09-29 Thread Martin Pitt
Hi!

I accidentially sent this to the wrong patch at first.

Martin

- Forwarded message from Martin Pitt [EMAIL PROTECTED] -

Date: Wed, 28 Sep 2005 19:49:34 +0200
From: Martin Pitt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Provisional patch for mysql authentication bypass

Hi!

I ported the two patches to 4.0.24:

 http://patches.ubuntu.com/patches/mysql-dfsg.CAN-2004-0627_0628.diff

they look straightforward; however, the exploit on

  
http://downloads.securityfocus.com/vulnerabilities/exploits/mysql-auth-bypass.pl

still claims that access is granted. It also claims that with mysql
4.1.12-1 (which has the patch already applied upstream), so I begin to
wonder whether it is actually the exploit that is broken, not the
patch.

Christian, can upstream shed some light on this?

Thanks in advance and have a nice day!

Martin
-- 
Martin Pitthttp://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?



- End forwarded message -

-- 
Martin Pitthttp://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?


signature.asc
Description: Digital signature


Processed: Fixed in NMU of view3ds 1.0.0-9.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 328002 + fixed
Bug#328002: view3ds: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of wvstreams 4.0.2-4.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 328001 + fixed
Bug#328001: wvstreams: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Bug#325247: libwvstreams4.0-qt: uninstallable because of missing libqt3c102-mt
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of synce-kde 0.8.1.1-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 328020 + fixed
Bug#328020: synce-kde: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Bug#327204: synce-kde: broken dependencies
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of kwirelessmonitor 0.5.91-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327991 + fixed
Bug#327991: kwirelessmonitor: uninstallable; needs rebuild for the Qt/KDE 
transition
Tags were: pending sid
Bug#326104: kwirelessmonitor: please update dependencies for new KDE 3.4.2
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of kiosktool 1.0-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327996 + fixed
Bug#327996: kiosktool: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of kompose 0.5.1-2.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327970 + fixed
Bug#327970: kompose: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of klog 0.3.2-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327972 + fixed
Bug#327972: klog: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of prokyon3 0.9.2-2.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 328008 + fixed
Bug#328008: prokyon3: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of zsafe 2.1.3-2.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 328018 + fixed
Bug#328018: zsafe: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of qtstalker 0.26-5.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327990 + fixed
Bug#327990: qtstalker: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: (no subject)

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 324836 fixed
Bug#324836: initng: /dev/MAKEDEV isn't created
There were no tags set.
Tags added: fixed

 tags 323244 fixed
Bug#323244: initng: Cardmgr should started before networking
There were no tags set.
Tags added: fixed

 tags 323693 fixed
Bug#323693: initng: /dev/xconsole is missing
Tags were: experimental
Tags added: fixed

 tags 325486 fixed
Bug#325486: initng: Bashisms in postinst - doesn't work with dash
Tags were: fixed-upstream
Tags added: fixed

 tags 323144 fixed
Bug#323144: initng: Link to package's homepage is wrong
Tags were: fixed-in-experimental experimental
Tags added: fixed


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330364: Helix Player 1.0.6

2005-09-29 Thread Noah Meyerhans
On Thu, Sep 29, 2005 at 01:05:22PM +0200, Daniel Baumann wrote:
 For sarge: As usual, there is no broken-out patch available, so one have
 to pull it oneself from the 1.0.6 tarball.

I've already done it.  The packages are built and the advisory is on its
way.

noah



signature.asc
Description: Digital signature


Bug#330364: Helix Player 1.0.6

2005-09-29 Thread Daniel Baumann
Noah Meyerhans wrote:
 I've already done it.  The packages are built and the advisory is on its
 way.

Thank you.

-- 
Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email:  [EMAIL PROTECTED]
Internet:   http://people.panthera-systems.net/~daniel-baumann/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330714: ispellcat: FTBFS: Missing Build-Depends on 'aspell'

2005-09-29 Thread Andreas Jochens
Package: ispellcat
Version: 0.4-5
Severity: serious
Tags: patch

When building 'ispellcat' in a clean 'unstable' chroot,
I get the following error:

debian/strip_mwl | ispell -d /ispellcat-0.4/catala.debian -e | \
tr -s ' ' '\n' | uniq  catala.words.debian
cp catala.words.debian ca.wl
prezip ca.wl
make: prezip: Command not found
make: *** [build-stamp] Error 127

Please add the missing Build-Depends on 'aspell' to debian/control.

Regards
Andreas Jochens

diff -urN ../tmp-orig/ispellcat-0.4/debian/control ./debian/control
--- ../tmp-orig/ispellcat-0.4/debian/control2005-09-29 13:08:05.0 
+
+++ ./debian/control2005-09-29 13:08:01.0 +
@@ -1,7 +1,7 @@
 Source: ispellcat
 Section: text
 Priority: optional
-Build-Depends: ispell, debhelper (= 4.0.0), dictionaries-common-dev (= 0.20)
+Build-Depends: debhelper, aspell, ispell, dictionaries-common-dev (= 0.20)
 Maintainer: Jordi Mallach [EMAIL PROTECTED]
 Standards-Version: 3.6.1.0
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#266176: marked as done (libapache2-mod-layout needs to be recompiled for apache2 LFS transition)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:02:06 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#266176: fixed in libapache2-mod-layout 4.0.1a-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 16 Aug 2004 23:30:47 +
From [EMAIL PROTECTED] Mon Aug 16 16:30:47 2004
Return-path: [EMAIL PROTECTED]
Received: from s010600e029962405.cg.shawcable.net (lucifer.0c3.net) 
[68.147.116.8] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1BwqwB-0008Ka-00; Mon, 16 Aug 2004 16:30:47 -0700
Received: from adconrad by lucifer.0c3.net with local (Exim 3.36 #1 (Debian))
id 1Bwqw9-6k-00
for [EMAIL PROTECTED]; Mon, 16 Aug 2004 17:30:45 -0600
To: [EMAIL PROTECTED]
Subject: libapache2-mod-layout needs to be recompiled for apache2 LFS transition
Message-Id: [EMAIL PROTECTED]
From: Adam Conrad [EMAIL PROTECTED]
Date: Mon, 16 Aug 2004 17:30:45 -0600
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: libapache2-mod-layout
Severity: serious

Due to an unfortunate but necessary change to the apache2 packages
that changed the ABI of libapr0, your package needs to be rebuilt
against the latest apache2 packages.  To make this transition happen
smoothly, the following must happen:

Bump your apache2-*/libapr build-depends to (= 2.0.50-9)
Upload with urgency=medium

I apologize for the lack of warning, however I spent all weekend
getting apache2 ready for this, and I didn't have much time to
send out warning bugs.

We've tested subversion, php4, and mod_perl extensively to make sure
these changes in APR don't break anything, and we're satisfied they
don't.  If those three aren't broken, the smaller ones should
certainly be fine too. :)

If action isn't taken before today's dinstall, I *WILL* NMU with
the above simple changes.

Thanks,

... Adam Conrad
(with the blessing of the RM team)

---
Received: (at 266176-close) by bugs.debian.org; 29 Sep 2005 13:08:27 +
From [EMAIL PROTECTED] Thu Sep 29 06:08:27 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKy34-0006hU-00; Thu, 29 Sep 2005 06:02:06 -0700
From: Guus Sliepen [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#266176: fixed in libapache2-mod-layout 4.0.1a-3
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 06:02:06 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: libapache2-mod-layout
Source-Version: 4.0.1a-3

We believe that the bug you reported is fixed in the latest version of
libapache2-mod-layout, which is due to be installed in the Debian FTP archive:

libapache2-mod-layout_4.0.1a-3.diff.gz
  to pool/main/liba/libapache2-mod-layout/libapache2-mod-layout_4.0.1a-3.diff.gz
libapache2-mod-layout_4.0.1a-3.dsc
  to pool/main/liba/libapache2-mod-layout/libapache2-mod-layout_4.0.1a-3.dsc
libapache2-mod-layout_4.0.1a-3_i386.deb
  to 
pool/main/liba/libapache2-mod-layout/libapache2-mod-layout_4.0.1a-3_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guus Sliepen [EMAIL PROTECTED] (supplier of updated libapache2-mod-layout 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 29 Sep 2005 14:42:59 +0200
Source: libapache2-mod-layout
Binary: libapache2-mod-layout
Architecture: source i386
Version: 4.0.1a-3
Distribution: unstable
Urgency: low
Maintainer: Guus Sliepen [EMAIL PROTECTED]
Changed-By: Guus Sliepen 

Bug#320413: Take over of texinfo/info packages

2005-09-29 Thread Norbert Preining
Hi Frank!

Please get the version
4.8-1
from the tug server. I have fixed all the lintian warnings and errors,
changed maintainer, added several bug-closings due to upstream fixes.
And stole the manpage from tetex.

The package is lintian clean and build in my pbuilder/sid.

On Don, 29 Sep 2005, Frank Küster wrote:
 , Lintian report for old-fsf-address-in-copyright-file
 | 
 | The /usr/share/doc/pkg/copyright file refers to the old postal
 | address of the Free Software Foundation (FSF). The new address is:
 | 
 |   Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
 |   MA 02111-1307, USA.
 | 
 `

THis adress is the wrong one. The right one is in
/usr/share/common-licences.

 In fact we were always talking about taking over.  So it's gonna be
 4.8-1, with you as the maintainer and your signature in the changelog
 file.

Done.

After the package is in Debian I will work on the other bugs. Probably
most of them are also solved by upstream already, but this has to be
checked.


Best wishes

Norbert

---
Dr. Norbert Preining preining AT logic DOT at Università di Siena
sip:[EMAIL PROTECTED] +43 (0) 59966-690018
gpg DSA: 0x09C5B094  fp: 14DF 2E6C 0307 BE6D AD76  A9C0 D2BF 4AA3 09C5 B094
---
BURES
The scabs on knees and elbows formed by a compulsion to make love on
cheap Habitat floor-matting.
--- Douglas Adams, The Meaning of Liff


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330715: lvm2: FTBFS: Missing Build-Depends on 'libreadline5-dev'

2005-09-29 Thread Andreas Jochens
Package: lvm2
Version: 2.01.14-2
Severity: serious
Tags: patch

When building 'lvm2' in a clean 'unstable' chroot,
I get the following error:

checking getopt.h presence... yes
checking for getopt.h... yes
checking for readline in -lreadline... no
configure: error: GNU Readline could not be found which is required for the
--enable-readline option (which is enabled by default).  Either disable readline
support with --disable-readline or download and install readline from:
ftp.gnu.org/gnu/readline
Note: if you are using precompiled packages you will also need the development
package as well (which may be called readline-devel or something similar).

make: *** [debian/build/build-deb/config.status] Error 1

Please add the missing Build-Depends on 'libreadline5-dev' to debian/control.

Regards
Andreas Jochens

diff -urN ../tmp-orig/lvm2-2.01.14/debian/control ./debian/control
--- ../tmp-orig/lvm2-2.01.14/debian/control 2005-09-29 13:11:49.0 
+
+++ ./debian/control2005-09-29 13:11:47.0 +
@@ -3,7 +3,7 @@
 Priority: optional
 Maintainer: Debian LVM Team [EMAIL PROTECTED]
 Uploaders: Bastian Blank [EMAIL PROTECTED], Andres Salomon [EMAIL 
PROTECTED]
-Build-Depends: debhelper ( 4.2), libdevmapper-dev (= 2:1.00.07-1), 
autotools-dev, libdlm-dev (= 0.trunk20050206-2), libselinux1-dev, 
libncurses5-dev
+Build-Depends: debhelper ( 4.2), libreadline5-dev, libdevmapper-dev (= 
2:1.00.07-1), autotools-dev, libdlm-dev (= 0.trunk20050206-2), 
libselinux1-dev, libncurses5-dev
 Standards-Version: 3.6.2
 
 Package: lvm2


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330716: crossfire-maps: FTBFS: Missing Build-Depends on 'debhelper'

2005-09-29 Thread Andreas Jochens
Package: crossfire-maps
Version: 1.8.0-1
Severity: serious
Tags: patch

When building 'crossfire-maps' in a clean 'unstable' chroot,
I get the following error:

if test /crossfire-maps-1.8.0/build != .; then rmdir 
/crossfire-maps-1.8.0/build; fi
rmdir: `/crossfire-maps-1.8.0/build': No such file or directory
make: [cleanbuilddir] Error 1 (ignored)
dh_clean
make: dh_clean: Command not found
make: *** [clean] Error 127

Please add the missing Build-Depends on 'debhelper' to debian/control.

Regards
Andreas Jochens

diff -urN ../tmp-orig/crossfire-maps-1.8.0/debian/control ./debian/control
--- ../tmp-orig/crossfire-maps-1.8.0/debian/control 2005-09-29 
13:12:48.0 +
+++ ./debian/control2005-09-29 13:12:44.0 +
@@ -3,7 +3,7 @@
 Priority: optional
 Maintainer: Kari Pahula [EMAIL PROTECTED]
 Standards-Version: 3.6.2
-Build-Depends: cdbs
+Build-Depends: debhelper, cdbs
 
 Package: crossfire-maps
 Architecture: all


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#329664: marked as done (shell command execution)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:32:14 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#329664: fixed in mozilla-thunderbird 1.0.6-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Sep 2005 14:52:55 +
From [EMAIL PROTECTED] Thu Sep 22 07:52:55 2005
Return-path: [EMAIL PROTECTED]
Received: from ms-2.rz.rwth-aachen.de (ms-dienst.rz.rwth-aachen.de) 
[134.130.3.131] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EISRT-0007Ts-00; Thu, 22 Sep 2005 07:52:55 -0700
Received: from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31])
 by ms-dienst.rz.rwth-aachen.de
 (iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004))
 with ESMTP id [EMAIL PROTECTED] for
 [EMAIL PROTECTED]; Thu, 22 Sep 2005 16:52:52 +0200 (MEST)
Received: from relay.rwth-aachen.de ([134.130.3.1])
by r220-1 (MailMonitor for SMTP v1.2.2 ) ; Thu,
 22 Sep 2005 16:52:51 +0200 (MEST)
Received: from [134.130.118.117]
 (coyote.mmweg.RWTH-Aachen.DE [134.130.118.117])by relay.rwth-aachen.de
 (8.13.3/8.13.3/1) with ESMTP id j8MEqp8L001249; Thu,
 22 Sep 2005 16:52:51 +0200 (MEST)
Date: Thu, 22 Sep 2005 16:53:02 +0200
From: Sebastian Ley [EMAIL PROTECTED]
Subject: shell command execution
To: Debian Bug Tracking System [EMAIL PROTECTED]
Message-id: [EMAIL PROTECTED]
MIME-version: 1.0
X-Mailer: reportbug 3.17
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-Debbugs-Cc: Debian Security Team [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: mozilla-thunderbird
Severity: grave
Tags: security

Secunia reports in http://secunia.com/advisories/16901/ that thunderbird
can be exploited to execute arbitrary shell commands in the context of
the user running thuderbird.

This bug has been assigned CAN-2005-2968.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)


---
Received: (at 329664-close) by bugs.debian.org; 29 Sep 2005 13:38:04 +
From [EMAIL PROTECTED] Thu Sep 29 06:38:04 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKyWE-0001Qp-00; Thu, 29 Sep 2005 06:32:14 -0700
From: Alexander Sack [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#329664: fixed in mozilla-thunderbird 1.0.6-4
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 06:32:14 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 3

Source: mozilla-thunderbird
Source-Version: 1.0.6-4

We believe that the bug you reported is fixed in the latest version of
mozilla-thunderbird, which is due to be installed in the Debian FTP archive:

mozilla-thunderbird-dev_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.6-4_i386.deb
mozilla-thunderbird-inspector_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.6-4_i386.deb
mozilla-thunderbird-offline_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.6-4_i386.deb
mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
mozilla-thunderbird_1.0.6-4.diff.gz
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.diff.gz
mozilla-thunderbird_1.0.6-4.dsc
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.dsc
mozilla-thunderbird_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be 

Bug#325536: marked as done (mozilla: FTBFS: change in behavior of __attribute__((unused)))

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:32:14 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#325536: fixed in mozilla-thunderbird 1.0.6-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 29 Aug 2005 09:07:53 +
From [EMAIL PROTECTED] Mon Aug 29 02:07:52 2005
Return-path: [EMAIL PROTECTED]
Received: from dsl093-039-086.pdx1.dsl.speakeasy.net (tennyson.netexpress.net) 
[66.93.39.86] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1E9fcO-0002LY-00; Mon, 29 Aug 2005 02:07:52 -0700
Received: by tennyson.netexpress.net (Postfix, from userid 1003)
id 610437049; Mon, 29 Aug 2005 02:07:51 -0700 (PDT)
Date: Mon, 29 Aug 2005 02:07:51 -0700
From: Steve Langasek [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: mozilla: FTBFS: change in behavior of __attribute__((unused))
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=XMCwj5IQnwKtuyBG
Content-Disposition: inline
X-Debbugs-Cc: [EMAIL PROTECTED]
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,X_DEBBUGS_CC 
autolearn=no version=2.60-bugs.debian.org_2005_01_02


--XMCwj5IQnwKtuyBG
Content-Type: multipart/mixed; boundary=ftEhullJWpWg/VHq
Content-Disposition: inline


--ftEhullJWpWg/VHq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: mozilla
Severity: serious

The current mozilla package fails to build on alpha, arm, and ia64
because it uses __attribute__((unused)) to mark static functions that
are called only from assembly routines.  As of gcc 3.1,
__attribute__((used)) exists for marking static functions that are used;
as of gcc 4.0, __attribute__((unused)) still suppresses compiler
warnings about unused static functions, but it does *not* prevent the
compiler from optimizing them away.

The attached patch should fix this failure for all three architectures.
It has only been tested on alpha, and each architecture has its own
implementation for this bit of code, but this patch fixes all uses of
__attribute__((unused)), so it should be sufficient.  (FWIW, one other
architecture -- i386 -- already uses ((used)) in the code...)

Since this bug is in the XPCOM code, it also affects other packages that
build copies of XPCOM.  I'll clone this bug off to them as soon as I
have a bug number back.

Thanks,
--=20
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/

--ftEhullJWpWg/VHq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=mozilla-unused.diff
Content-Transfer-Encoding: quoted-printable

diff -ur mozilla.orig/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_al=
pha.cpp=20
mozilla/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_alpha.cpp
--- mozilla.orig/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_alpha.c=
pp  2005-08-28 20:01:29.0 -0700
+++ mozilla/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_alpha.cpp
20=
05-08-28 02:36:43.0 -0700
@@ -43,7 +43,8 @@
 /* Prototype specifies unmangled function name and disables unused warning=
 */
 static void
 invoke_copy_to_stack(PRUint64* d, PRUint32 paramCount, nsXPTCVariant* s)
-__asm__(invoke_copy_to_stack) __attribute__((unused));
+__asm__(invoke_copy_to_stack) __attribute__((used));
+
=20
 static void
 invoke_copy_to_stack(PRUint64* d, PRUint32 paramCount, nsXPTCVariant* s)
diff -ur mozilla.orig/xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp m=
ozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp
--- mozilla.orig/xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp2002-0=
3-04 22:35:50.0 -0800
+++ mozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp 2005-08-28 =
02:46:41.0 -0700
@@ -45,7 +45,8 @@
 #endif
=20
 /* Specify explicitly a symbol for this function, don't try to guess the c=
++ mangled symbol.  */
-static nsresult PrepareAndDispatch(nsXPTCStubBase* self, uint32 methodInde=
x, PRUint32* args) asm(_PrepareAndDispatch);
+static nsresult PrepareAndDispatch(nsXPTCStubBase* self, uint32 

Bug#329667: marked as done (mozilla-thunderbird --compose executes shell commands)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:32:14 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#329667: fixed in mozilla-thunderbird 1.0.6-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Sep 2005 15:27:41 +
From [EMAIL PROTECTED] Thu Sep 22 08:27:41 2005
Return-path: [EMAIL PROTECTED]
Received: from mail.enyo.de [212.9.189.167] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EISz7-0006i6-00; Thu, 22 Sep 2005 08:27:41 -0700
Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de)
by albireo.enyo.de with esmtp id 1EISz6-0006gy-0d
for [EMAIL PROTECTED]; Thu, 22 Sep 2005 17:27:40 +0200
Received: from fw by deneb.enyo.de with local (Exim 4.52)
id 1EISyp-j8-FR; Thu, 22 Sep 2005 17:27:23 +0200
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Florian Weimer [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: mozilla-thunderbird --compose executes shell commands
X-Mailer: reportbug 3.15
Date: Thu, 22 Sep 2005 17:27:23 +0200
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: mozilla-thunderbird
Version: 1.0.6-3
Severity: grave
Tags: security

The --compose option executes shell commands:

  mozilla-thunderbird --compose 'mailto:`df`'

The df output appears in the To: line of the message.

(This is related to the recently disclosed Firefox bug, which does not
seem to affect Debian thanks to a different wrapper script.)

---
Received: (at 329667-close) by bugs.debian.org; 29 Sep 2005 13:38:03 +
From [EMAIL PROTECTED] Thu Sep 29 06:38:03 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKyWE-0001Qr-00; Thu, 29 Sep 2005 06:32:14 -0700
From: Alexander Sack [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#329667: fixed in mozilla-thunderbird 1.0.6-4
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 06:32:14 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 4

Source: mozilla-thunderbird
Source-Version: 1.0.6-4

We believe that the bug you reported is fixed in the latest version of
mozilla-thunderbird, which is due to be installed in the Debian FTP archive:

mozilla-thunderbird-dev_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.6-4_i386.deb
mozilla-thunderbird-inspector_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.6-4_i386.deb
mozilla-thunderbird-offline_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.6-4_i386.deb
mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
mozilla-thunderbird_1.0.6-4.diff.gz
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.diff.gz
mozilla-thunderbird_1.0.6-4.dsc
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.dsc
mozilla-thunderbird_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexander Sack [EMAIL PROTECTED] (supplier of updated mozilla-thunderbird 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Mon, 23 Sep 2005 17:00:00 +0100
Source: mozilla-thunderbird

Bug#329667: marked as done (mozilla-thunderbird --compose executes shell commands)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:32:14 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#329664: fixed in mozilla-thunderbird 1.0.6-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Sep 2005 15:27:41 +
From [EMAIL PROTECTED] Thu Sep 22 08:27:41 2005
Return-path: [EMAIL PROTECTED]
Received: from mail.enyo.de [212.9.189.167] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EISz7-0006i6-00; Thu, 22 Sep 2005 08:27:41 -0700
Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de)
by albireo.enyo.de with esmtp id 1EISz6-0006gy-0d
for [EMAIL PROTECTED]; Thu, 22 Sep 2005 17:27:40 +0200
Received: from fw by deneb.enyo.de with local (Exim 4.52)
id 1EISyp-j8-FR; Thu, 22 Sep 2005 17:27:23 +0200
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Florian Weimer [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: mozilla-thunderbird --compose executes shell commands
X-Mailer: reportbug 3.15
Date: Thu, 22 Sep 2005 17:27:23 +0200
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: mozilla-thunderbird
Version: 1.0.6-3
Severity: grave
Tags: security

The --compose option executes shell commands:

  mozilla-thunderbird --compose 'mailto:`df`'

The df output appears in the To: line of the message.

(This is related to the recently disclosed Firefox bug, which does not
seem to affect Debian thanks to a different wrapper script.)

---
Received: (at 329664-close) by bugs.debian.org; 29 Sep 2005 13:38:04 +
From [EMAIL PROTECTED] Thu Sep 29 06:38:04 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKyWE-0001Qp-00; Thu, 29 Sep 2005 06:32:14 -0700
From: Alexander Sack [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#329664: fixed in mozilla-thunderbird 1.0.6-4
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 06:32:14 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 3

Source: mozilla-thunderbird
Source-Version: 1.0.6-4

We believe that the bug you reported is fixed in the latest version of
mozilla-thunderbird, which is due to be installed in the Debian FTP archive:

mozilla-thunderbird-dev_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.6-4_i386.deb
mozilla-thunderbird-inspector_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.6-4_i386.deb
mozilla-thunderbird-offline_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.6-4_i386.deb
mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
mozilla-thunderbird_1.0.6-4.diff.gz
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.diff.gz
mozilla-thunderbird_1.0.6-4.dsc
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.dsc
mozilla-thunderbird_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexander Sack [EMAIL PROTECTED] (supplier of updated mozilla-thunderbird 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Mon, 23 Sep 2005 17:00:00 +0100
Source: mozilla-thunderbird

Bug#329664: marked as done (shell command execution)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 06:32:14 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#329667: fixed in mozilla-thunderbird 1.0.6-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Sep 2005 14:52:55 +
From [EMAIL PROTECTED] Thu Sep 22 07:52:55 2005
Return-path: [EMAIL PROTECTED]
Received: from ms-2.rz.rwth-aachen.de (ms-dienst.rz.rwth-aachen.de) 
[134.130.3.131] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EISRT-0007Ts-00; Thu, 22 Sep 2005 07:52:55 -0700
Received: from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31])
 by ms-dienst.rz.rwth-aachen.de
 (iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004))
 with ESMTP id [EMAIL PROTECTED] for
 [EMAIL PROTECTED]; Thu, 22 Sep 2005 16:52:52 +0200 (MEST)
Received: from relay.rwth-aachen.de ([134.130.3.1])
by r220-1 (MailMonitor for SMTP v1.2.2 ) ; Thu,
 22 Sep 2005 16:52:51 +0200 (MEST)
Received: from [134.130.118.117]
 (coyote.mmweg.RWTH-Aachen.DE [134.130.118.117])by relay.rwth-aachen.de
 (8.13.3/8.13.3/1) with ESMTP id j8MEqp8L001249; Thu,
 22 Sep 2005 16:52:51 +0200 (MEST)
Date: Thu, 22 Sep 2005 16:53:02 +0200
From: Sebastian Ley [EMAIL PROTECTED]
Subject: shell command execution
To: Debian Bug Tracking System [EMAIL PROTECTED]
Message-id: [EMAIL PROTECTED]
MIME-version: 1.0
X-Mailer: reportbug 3.17
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-Debbugs-Cc: Debian Security Team [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: mozilla-thunderbird
Severity: grave
Tags: security

Secunia reports in http://secunia.com/advisories/16901/ that thunderbird
can be exploited to execute arbitrary shell commands in the context of
the user running thuderbird.

This bug has been assigned CAN-2005-2968.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)


---
Received: (at 329667-close) by bugs.debian.org; 29 Sep 2005 13:38:03 +
From [EMAIL PROTECTED] Thu Sep 29 06:38:03 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKyWE-0001Qr-00; Thu, 29 Sep 2005 06:32:14 -0700
From: Alexander Sack [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#329667: fixed in mozilla-thunderbird 1.0.6-4
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 06:32:14 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 4

Source: mozilla-thunderbird
Source-Version: 1.0.6-4

We believe that the bug you reported is fixed in the latest version of
mozilla-thunderbird, which is due to be installed in the Debian FTP archive:

mozilla-thunderbird-dev_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.0.6-4_i386.deb
mozilla-thunderbird-inspector_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.0.6-4_i386.deb
mozilla-thunderbird-offline_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-offline_1.0.6-4_i386.deb
mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
  to 
pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.0.6-4_i386.deb
mozilla-thunderbird_1.0.6-4.diff.gz
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.diff.gz
mozilla-thunderbird_1.0.6-4.dsc
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4.dsc
mozilla-thunderbird_1.0.6-4_i386.deb
  to pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.0.6-4_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be 

Processed: tagging 330715

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 # Automatically generated email from bts, devscripts version 2.9.7
 tags 330715 pending
Bug#330715: lvm2: FTBFS: Missing Build-Depends on 'libreadline5-dev'
Tags were: patch
Tags added: pending


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#306693: Ubuntu patch for cpio CAN-2005-1111 and CAN-2005-1229

2005-09-29 Thread Martin Pitt
Hi Clint!

Clint Adams [2005-09-29  9:34 -0400]:
http://patches.ubuntu.com/patches/cpio.CAN-2005-_1229.diff
 
 Has this been sent to GNU upstream?

No idea. This vuln is ages old, but there is no new upstream version
yet, so I presume not.

Martin
-- 
Martin Pitt  http://www.piware.de
Ubuntu Developer   http://www.ubuntulinux.org
Debian Developerhttp://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#324628: marked as done (xt-sdf2: FTBFS with gcc-4.0: static declaration of 'hash_table' follows non-static declaration)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 07:17:09 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#324628: fixed in xt-sdf2 2.0.1-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 23 Aug 2005 05:12:52 +
From [EMAIL PROTECTED] Mon Aug 22 22:12:51 2005
Return-path: [EMAIL PROTECTED]
Received: from (frobnitz.homelinux.net) [67.188.213.204] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1E7R5f-0005Q3-00; Mon, 22 Aug 2005 22:12:51 -0700
Received: from daniel by frobnitz.homelinux.net with local (Exim 4.52)
id 1E7R5Y-0005zF-Ez
for [EMAIL PROTECTED]; Mon, 22 Aug 2005 22:12:45 -0700
From: Daniel Schepler [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: xt-sdf2: FTBFS with gcc-4.0: static declaration of 'hash_table' 
follows non-static declaration
Date: Mon, 22 Aug 2005 22:12:39 -0700
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: xt-sdf2
Severity: serious
Version: 2.0.1-3

From my build log, using pbuilder in an i386 chroot:

...
gcc -I/usr/include/xt-aterm  -DPACKAGE=\toolbuslib\ -DVERSION=\0.5.1\ 
-DHAVE_STRERROR=1 -DHAVE_STRDUP=1  -I. -I.  -I.-Wall -g -O2 -c symbol.c
symbol.c:44: error: static declaration of 'hash_table' follows non-static 
declaration
symbol.h:53: error: previous declaration of 'hash_table' was here
symbol.c:45: error: static declaration of 'idx_table' follows non-static 
declaration
symbol.h:54: error: previous declaration of 'idx_table' was here
make[4]: *** [symbol.o] Error 1
make[4]: Leaving directory 
`/tmp/buildd/xt-sdf2-2.0.1/pre-pkgs/build/toolbuslib/libtb'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory `/tmp/buildd/xt-sdf2-2.0.1/pre-pkgs/build/toolbuslib'
make[2]: *** [pre-pkgs/build/toolbuslib.dummy] Error 2
make[2]: Leaving directory `/tmp/buildd/xt-sdf2-2.0.1'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/tmp/buildd/xt-sdf2-2.0.1'
make: *** [build-stamp] Error 2

-- System Information:
Debian Release: testing/unstable
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-amd64-k8
Locale: LANG=en, LC_CTYPE=en (charmap=UTF-8) (ignored: LC_ALL set to 
en_US.UTF-8)

-- 
Daniel Schepler  Please don't disillusion me.  I
[EMAIL PROTECTED]haven't had breakfast yet.
 -- Orson Scott Card

---
Received: (at 324628-close) by bugs.debian.org; 29 Sep 2005 14:18:38 +
From [EMAIL PROTECTED] Thu Sep 29 07:18:38 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EKzDh-0005ZC-00; Thu, 29 Sep 2005 07:17:09 -0700
From: Matej Vela [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#324628: fixed in xt-sdf2 2.0.1-4
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 07:17:09 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: xt-sdf2
Source-Version: 2.0.1-4

We believe that the bug you reported is fixed in the latest version of
xt-sdf2, which is due to be installed in the Debian FTP archive:

xt-sdf2-dev_2.0.1-4_i386.deb
  to pool/main/x/xt-sdf2/xt-sdf2-dev_2.0.1-4_i386.deb
xt-sdf2_2.0.1-4.diff.gz
  to pool/main/x/xt-sdf2/xt-sdf2_2.0.1-4.diff.gz
xt-sdf2_2.0.1-4.dsc
  to pool/main/x/xt-sdf2/xt-sdf2_2.0.1-4.dsc
xt-sdf2_2.0.1-4_i386.deb
  to pool/main/x/xt-sdf2/xt-sdf2_2.0.1-4_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matej Vela [EMAIL PROTECTED] (supplier of updated xt-sdf2 package)

(This message 

Bug#306693: marked as done ([CAN-2005-1229] cpio: allows extracting insecure pathnames (leading slash = / and dotdot = ..))

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 08:02:07 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#306693: fixed in cpio 2.6-6
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 28 Apr 2005 01:49:29 +
From [EMAIL PROTECTED] Wed Apr 27 18:49:28 2005
Return-path: [EMAIL PROTECTED]
Received: from master.debian.org [146.82.138.7] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DQy9g-0001LR-00; Wed, 27 Apr 2005 18:49:28 -0700
Received: from ip024.subnet65.gci-net.com ([127.0.0.1]) [216.183.65.24] 
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DQy9f-0001dr-00; Wed, 27 Apr 2005 20:49:27 -0500
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: cpio: allows extracting insecure pathnames (leading slash = / and 
dotdot =
 ..)
Cc: [EMAIL PROTECTED], bug-cpio@gnu.org
X-Mailer: reportbug 3.8
Date: Wed, 27 Apr 2005 18:47:41 -0700
X-Debbugs-Cc: [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-4.9 required=4.0 tests=BAYES_30,HAS_PACKAGE,
NO_REAL_NAME,OUR_MTA_MSGID,X_DEBBUGS_CC autolearn=no 
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: cpio
Version: 2.5-1.2
Severity: normal


Hi,

OK, several related issues here.  You probably already see where I am
going, but please humor me for a minute just in case.  Not sure if I'm
supposed to file with debian or with cpio's own bug lair.

I believe (IMHO) that this is a security issue and should be fixed
soon.  Anybody can create an archive and put it on the net that lots
of trusting people will run cpio -i on to inadvertently write a file
in, say, /etc/cron.daily.

~# touch /etc/cron.daily/aaa
~# find /etc/cron.daily/aaa|cpio -oa.cpio
1 block
~# \rm -v /etc/cron.daily/aaa 
removed `/etc/cron.daily/aaa'

Imagine that that file is buried deep in a huge archive of files with
innocent relative pathnames, and was made executable first.  Now the
unsuspecting user (who should, but does not, know better), does this:

~# cpio -t  a.cpio 
 lots of innocent files
/etc/cron.daily/aaa
 lots of innocent files
1 block
~# cpio -i  a.cpio #oops, forgot an option
1 block

And does not do this:

~# ls -l /etc/cron.daily/aaa 
-rw---  1 root root 0 Apr 27 18:23 /etc/cron.daily/aaa
~# \rm -v /etc/cron.daily/aaa
removed `/etc/cron.daily/aaa'

Note that the user should have used the --no-absolute-filenames
option, but did not.  So you could say it's preventable.  But consider
what happens if the pathname is relative:

~# find ../../../../../../../../../../../../etc/cron.daily/aaa | cpio -oa.cpio

Now that option will not help.  To prevent that requires preprocessing
the archive with cpio -t and grep '\.\.'.  How many users do that?
Especially on a large archive?

OK, here are my comments:

First, there is no way that I know of within cpio -o to prohibit
absolute pathnames and .. in a pathname.  This is important to flag
mistakes in the input and to prevent somebody who runs cpio -i
(including unfixed versions of cpio) from inadvertently installing
your files in unexpected (i.e. not below pwd) places.  IMHO safety
should be the default, but an option would be OK if necessary.
Prohibiting ^/ and \.\. is easy in a shell, but it should be built in
to make error handling easier.  Of course, this doesn't solve the
security problem.  It just avoids mistakes.

Second, more importantly, cpio -o does not by default prohibit
absolute filenames.  The option --no-absolute-filenames is an OK
workaround, but IMHO it should be the default.

Third, even more importantly, cpio -o does not by default or via an
option appear to check for .. in pathnames.  Using .. in the archive
is rarely needed, and IMHO it should be disallowed by default.  At
least, it should be an option.  (If it is disallowed by default, a nop
option to disallow should probably still be provided so that other
versions of cpio will (ideally) balk at an unrecognized option,
tipping the user to be more careful.)

Finally, I have a related wishlist item, which is an option to cpio -o
archives in which all pathnames, whether relative or absolute, are
converted to fully canonical (but NOT symlink-dereferenced 

Bug#330364: marked as done (helix-player: Helix Player Remote Format String Exploit)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 08:17:17 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#330364: fixed in helix-player 1.0.6-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 27 Sep 2005 18:32:50 +
From [EMAIL PROTECTED] Tue Sep 27 11:32:50 2005
Return-path: [EMAIL PROTECTED]
Received: from mail-out.m-online.net [212.18.0.9] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EKKG2-Mo-00; Tue, 27 Sep 2005 11:32:50 -0700
Received: from mail.m-online.net (svr20.m-online.net [192.168.3.148])
by mail-out.m-online.net (Postfix) with ESMTP id BA2C8703C5;
Tue, 27 Sep 2005 20:32:28 +0200 (CEST)
Received: from k.local (ppp-82-135-79-97.mnet-online.de [82.135.79.97])
by mail.m-online.net (Postfix) with ESMTP id 7C638105C6F;
Tue, 27 Sep 2005 20:32:48 +0200 (CEST)
Received: from stf by k.local with local (Exim 4.52)
id 1EKKFq-0001j8-Fh; Tue, 27 Sep 2005 20:32:38 +0200
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Stefan Fritsch [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: helix-player: Helix Player Remote Format String Exploit
X-Mailer: reportbug 3.17
Date: Tue, 27 Sep 2005 20:32:38 +0200
X-Debbugs-Cc: Debian Security Team [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: helix-player
Severity: grave
Tags: security
Justification: user security hole

According to http://www.open-security.org/advisories/13, there is
another remote vulnerability in helix player.



-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.3-k1
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

---
Received: (at 330364-close) by bugs.debian.org; 29 Sep 2005 15:18:20 +
From [EMAIL PROTECTED] Thu Sep 29 08:18:19 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EL09t-0005YS-00; Thu, 29 Sep 2005 08:17:17 -0700
From: Daniel Baumann [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#330364: fixed in helix-player 1.0.6-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 08:17:17 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: helix-player
Source-Version: 1.0.6-1

We believe that the bug you reported is fixed in the latest version of
helix-player, which is due to be installed in the Debian FTP archive:

helix-player_1.0.6-1.diff.gz
  to pool/main/h/helix-player/helix-player_1.0.6-1.diff.gz
helix-player_1.0.6-1.dsc
  to pool/main/h/helix-player/helix-player_1.0.6-1.dsc
helix-player_1.0.6-1_i386.deb
  to pool/main/h/helix-player/helix-player_1.0.6-1_i386.deb
helix-player_1.0.6.orig.tar.gz
  to pool/main/h/helix-player/helix-player_1.0.6.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Daniel Baumann [EMAIL PROTECTED] (supplier of updated helix-player package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thr, 29 Sep 2005 11:39:00 +0200
Source: helix-player
Binary: helix-player
Architecture: source i386
Version: 1.0.6-1
Distribution: unstable
Urgency: high
Maintainer: Daniel Baumann [EMAIL PROTECTED]
Changed-By: Daniel Baumann [EMAIL PROTECTED]

Bug#218908: Candidates for removal

2005-09-29 Thread Sam Hart
On Thu, 2005-09-29 at 10:15 +0200, Andreas Tille wrote:
 1266 days: tuxtype (0 waiting, new pkg, has RC bugs) [Rune B. Broberg]
  Copyright issues (see bug 218908).  Jeroen wrote let's see if someone
  interested jumps in, otherwise, removal seems to be the best option to me.
  -- on 21 June.  Someone said that they were trying to make a sponsored
  upload on 18 August; I've pinged them.

I hope Debian-Junior guys will do some action ...
It would be a shame to loose this nice thing.

Well, I just looked at the bug, and I think I can help out somewhat.

I was the original creator of Tux Typing and maintained it up to the 1.0
release. After that, I passed on maintainer-ship over to Jesse Andrews
(see this
http://www.samhart.com/snh/oldnews/2002-Apr-news.shtml#2002Apr7-23:27)

Nearly every graphic, sound and animation was something that I created
except for a few images which were pulled from the Copyright Free Photo
Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html

Beyond the 1.0 release, there may have been some graphics that
originated from somewhere else, I'm afraid you'd have to track down and
ask Jesse Andrews for those details.

However, I'm more than willing to do whatever I need to to ensure that
the graphics and sounds I've created have some sort of copyright or text
associated with them to make them work inside the DFSG. I can certainly
identify those images and sounds that I personally created (many of the
sounds, for example, are me doing things like taking a bite out of an
apple or saying things like excuse me). I can also identify which
images came from the Copyright Free Photo Archive.

If anyone is willing to work with me to identify what /specifically/ is
needed for it, I'd be more than obliged.

(FWIW, this was something we actually struggled with in Tux4Kids and
later at OSEF... we never really found a license that did for media what
other FLOSS licenses do for software. So, honestly, the lack of any real
text describing license or copyright was because we were at a loss as to
what to use.)

-- 
'
.O. Sam Hart, [EMAIL PROTECTED]
..OProgeny Linux Systems, Inc
OOO http://www.progeny.com/



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#325286: tagcolledit: FTBFS: Versioned Build-Depends on 'libtagcoll1-dev' can not be satisfied in 'unstable'

2005-09-29 Thread Enrico Zini
On Tue, Sep 27, 2005 at 03:06:15PM -0700, Steve Langasek wrote:

   Build-Depends: cdbs, debhelper ( 4.1), dh-buildinfo, pkg-config, 
   libtagcoll-dev (= 1.5), libtagcoll-dev ( 1.6), libgtkmm-2.4-dev
   There is no libtagcoll-dev package in unstable.
  It should be in NEW, hopefully coming in soon.
 Ok, then please don't close the bug in the changelog of tagcolledit, you
 didn't make any changes to tagcolledit to fix it.

I updated the build-depends to depend on the right package name and
version: isn't that worthwile of closing the bug?


Ciao,

Enrico

--
GPG key: 1024D/797EBFAB 2000-12-05 Enrico Zini [EMAIL PROTECTED]


signature.asc
Description: Digital signature


Bug#330733: twiki: INCLUDE function allows arbitrary shell command execution

2005-09-29 Thread Micah Anderson
Package: twiki
Version: 20040902-3
Severity: grave
Tags: security
Justification: user security hole

A new security bug in twiki showed up today:
http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude

An attacker is able to execute arbitrary shell commands with the
privileges of the web server process. The TWiki INCLUDE function
enables a malicious user to compose a command line executed by the
Perl backtick (`) operator.

The rev parameter of the INCLUDE variable is not checked properly for
shell metacharacters and is thus vulnerable to revision numbers
containing pipes and shell commands. The exploit is possible on
included topics with two or more revisions.

Example INCLUDE variable exploiting the rev parameter:
%INCLUDE{ Main.TWikiUsers rev=2|less /etc/passwd }%

The same vulnerability is exposed to all Plugins and add-ons that use
TWiki::Func::readTopicText function to read a previous topic revision.
This has been tested on TWiki:Plugins.RevCommentPlugin and
TWiki:Plugins.CompareRevisionsAddon.

If access to TWiki is not restricted by other means, attackers can use
the revision function with or without prior authentication, depending
on the configuration. 

The Common Vulnerabilities and Exposures project has assigned the name
CAN-2005-3056 to this vulnerability. Please include this number in any
changelogs fixing this.


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-2-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330738: mozilla-firefox: experimental version uninstable due to dependency

2005-09-29 Thread Itai Seggev
Package: mozilla-firefox
Version: 1.4.99+1.5beta1.dfsg-3
Severity: serious
Tags: experimental

I used reportbug to submit this bug a couple of days ago, but I
never got a confirmation and I can't find a bug report online. Anyway,
it seems to apply to the even newer version in experimental, so I'm
resubmitting it.

The new version in experimental depends on a non-existence 1.2.8rel-4
version of libpng12-0. According to packags.qa.d.o, the most recernt
versions are 1.2.8rel-1 in unstable and 1.2.8rel-2 in experimental.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (10, 
'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12cavy1
Locale: LANG=he_IL.UTF-8, LC_CTYPE=he_IL.UTF-8 (charmap=UTF-8)

Versions of packages mozilla-firefox depends on:
ii  debianutils   2.14.2 Miscellaneous utilities specific t
ii  fontconfig2.3.2-1generic font configuration library
ii  libatk1.0-0   1.10.1-2   The ATK accessibility toolkit
ii  libc6 2.3.5-3GNU C Library: Shared libraries an
ii  libfontconfig12.3.2-1generic font configuration library
ii  libfreetype6  2.1.10-1   FreeType 2 font engine, shared lib
ii  libgcc1   1:4.0.1-8  GCC support library
ii  libglib2.0-0  2.8.0-1The GLib library of C routines
ii  libgtk2.0-0   2.6.9-1The GTK+ graphical user interface
ii  libidl0   0.8.5-1library for parsing CORBA IDL file
ii  libjpeg62 6b-10  The Independent JPEG Group's JPEG
ii  libkrb53  1.3.6-5MIT Kerberos runtime libraries
ii  libpango1.0-0 1.8.2-1Layout and rendering of internatio
ii  libpng12-01.2.8rel-1 PNG library - runtime
ii  libstdc++64.0.1-8The GNU Standard C++ Library v3
ii  libx11-6  6.8.2.dfsg.1-5 X Window System protocol client li
ii  libxext6  6.8.2.dfsg.1-5 X Window System miscellaneous exte
ii  libxft2   2.1.7-1FreeType-based font drawing librar
ii  libxinerama1  6.8.2.dfsg.1-5 X Window System multi-head display
ii  libxp66.8.2.dfsg.1-5 X Window System printing extension
ii  libxt66.8.2.dfsg.1-5 X Toolkit Intrinsics
ii  psmisc21.6-1 Utilities that use the proc filesy
ii  xlibs 6.8.2.dfsg.1-5 X Window System client libraries m
ii  zlib1g1:1.2.3-3  compression library - runtime

mozilla-firefox recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330400: more info

2005-09-29 Thread mody
More info. When a working rails application is run this message appears in
error.log of apache.

/home/patrik/public_html/ftplog/../config/../vendor/activesupport/lib/active_support/clean_logger.rb:13:in
 `remove_const': constant Logger::Format not defined (NameError)
  from 
/home/patrik/public_html/ftplog/../config/../vendor/activesupport/lib/active_support/clean_logger.rb:13
  from 
/home/patrik/public_html/ftplog/../config/../vendor/activesupport/lib/active_support.rb:31
  from /home/patrik/public_html/ftplog/../config/environment.rb:50
  from /home/patrik/public_html/ftplog/dispatch.cgi:5
[Thu Sep 29 17:36:02 2005] [error] [client 127.0.0.1] Premature end of script 
headers: /home/patrik/public_html/ftplog/dispatch.cgi

HTH
Mody


signature.asc
Description: Digital signature


Bug#328227: marked as done (libmpfr-dev: Non-free doc mpfr.texi : GFDL 1.1)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 08:47:08 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#328227: fixed in mpfr 2.2.0.dfsg.1-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 14 Sep 2005 09:05:08 +
From [EMAIL PROTECTED] Wed Sep 14 02:05:08 2005
Return-path: [EMAIL PROTECTED]
Received: from tortoise.loria.fr (tortoise.lateralis.org) [152.81.15.241] 
(Debian-exim)
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EFTCW-00081G-00; Wed, 14 Sep 2005 02:05:08 -0700
Received: from laurent by tortoise with local (Exim 4.52)
id 1EFTCU-0001An-4k; Wed, 14 Sep 2005 11:05:06 +0200
Date: Wed, 14 Sep 2005 11:05:06 +0200
From: Laurent Fousse [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: libmpfr-dev: Non-free doc mpfr.texi : GFDL 1.1
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=x+6KMIRAuhnl3hBn
Content-Disposition: inline
X-Reportbug-Version: 3.17
Organization: =?iso-8859-1?Q?KomiT=EA?=
User-Agent: Mutt/1.5.10i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02


--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Package: libmpfr-dev
Version: 2.1.2-1
Severity: serious
Justification: Policy 2.2.1

The MPFR documentation is provided as texinfo source file licensed
under the GFDL version 1.1 or any later version.

Since there is only a limited number of useful rephrasing of this
technical documentation, I consider an attempt to rewrite it a
complete waste of time and I won't be doing it.

Upstream might consider the option of a relicensing, the problem being
that the copyright was assigned to the FSF. If you know how to deal
with such a situation, please reply.

My short time plan is to obliterate the documentation from the source
tarball.

--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Digital signature
Content-Disposition: inline

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJ+fBTUld8sb4OVwRAiWdAJ9IJPiU5hXoyHM0Lj+d5n61/ZSxMACcCM2+
oZBlFuS81dxE9W+7kPcUceY=
=lQIi
-END PGP SIGNATURE-

--x+6KMIRAuhnl3hBn--

---
Received: (at 328227-close) by bugs.debian.org; 29 Sep 2005 15:48:09 +
From [EMAIL PROTECTED] Thu Sep 29 08:48:09 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EL0cm-0004w4-00; Thu, 29 Sep 2005 08:47:08 -0700
From: Laurent Fousse [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#328227: fixed in mpfr 2.2.0.dfsg.1-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 08:47:08 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: mpfr
Source-Version: 2.2.0.dfsg.1-1

We believe that the bug you reported is fixed in the latest version of
mpfr, which is due to be installed in the Debian FTP archive:

libmpfr-dev_2.2.0.dfsg.1-1_i386.deb
  to pool/main/m/mpfr/libmpfr-dev_2.2.0.dfsg.1-1_i386.deb
mpfr_2.2.0.dfsg.1-1.diff.gz
  to pool/main/m/mpfr/mpfr_2.2.0.dfsg.1-1.diff.gz
mpfr_2.2.0.dfsg.1-1.dsc
  to pool/main/m/mpfr/mpfr_2.2.0.dfsg.1-1.dsc
mpfr_2.2.0.dfsg.1.orig.tar.gz
  to pool/main/m/mpfr/mpfr_2.2.0.dfsg.1.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Fousse [EMAIL PROTECTED] (supplier of updated mpfr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])



Bug#328048: mod_perl makes apache2 segv

2005-09-29 Thread Andres Salomon
On Thu, 2005-09-29 at 09:14 +0200, Vincent Lefevre wrote:
 On 2005-09-28 20:52:23 -0700, Jurij Smakov wrote:
  FWIW, I cannot reproduce it in current sid. Application I maintain 
  (torrus) uses libapache2-mod-perl2 and it's working happily. Here are 
  currently installed versions of relevant packages:
  
  apache2-common2.0.54-5
  apache2-mpm-worker2.0.54-5
  libapache2-mod-perl2  2.0.1-3
  perl  5.8.7-5
 
 Here, on a PowerPC machine, Apache crashes with:
 
 apache2-common2.0.54-5
 apache2-mpm-prefork   2.0.54-5
 libapache2-mod-perl2  2.0.1-3
 perl  5.8.7-5
 
 I had to remove perl.* symlinks from /etc/apache2/mods-enabled.
 


This is just a wild guess, but this sounds a whole lot like library
conflicts; ie, a perl program pulling in libmysqlclient12 (thus causing
modperl to load libmysqlclient12), and php loading libmysqlclient10.
What perl libs are installed?  What other apache modules are loaded, and
what libs are they pulling in?  What versions of libmysqlclient and pcre
are installed on the system?





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330474: mutt: opens of same mbox by multiple mutt processes erase message bodies

2005-09-29 Thread Branden Robinson
retitle 330474 mutt: rewrites Content-Length message header in mbox folders to 
be zero, which subsequently causes mutt to nuke the entire message body
thanks

My initial diagnosis of this bug was overly complex.

Here's a repro recipe.

1) Open any mbox folder with mutt -R.  (-R means read-only, you don't
have to do this, but it will allow you to observe the bug without
destroying your mail folder).

2) Tag one or messages in that folder.

3) Observe the Content-Length headers in the message(s) you've tagged.  In
most cases of real-world mail, the header value will be non-zero.

4) C)opy the tagged message(s) to a new folder.

5) Quit.

6) Use $PAGER or $EDITOR to view the new folder.

7) Observe the Content-Length headers in the message(s).  Note that they
are all zero.

8) Observe that the message body (or bodies) is/are still present.

9) Open the new folder with mutt.  Don't specify -R this time.

10) Read the message(s) in it.

11) Observe that you can't read the message body.

12) Quit back to the index, and quit mutt.  Don't use exit.  We want
changes written to the folder.

13) Use $PAGER or $EDITOR to view the new folder again.

14) WHERE THE HELL ARE THE MESSAGE BODIES?

Retitled bug accordingly.

I stand by the severity of this report.

I don't know if it's specific to mbox folders; that's just the only format
I ever use.

-- 
G. Branden Robinson| You are not angry with people when
Debian GNU/Linux   | you laugh at them.  Humor teaches
[EMAIL PROTECTED] | them tolerance.
http://people.debian.org/~branden/ | -- W. Somerset Maugham


signature.asc
Description: Digital signature


Processed: Re: Bug#330474: mutt: opens of same mbox by multiple mutt processes erase message bodies

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 retitle 330474 mutt: rewrites Content-Length message header in mbox folders 
 to be zero, which subsequently causes mutt to nuke the entire message body
Bug#330474: mutt: opens of same mbox by multiple mutt processes erase message 
bodies
Changed Bug title.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330743: cups-pdf: No longer installable when not using shadow passwords.

2005-09-29 Thread James Sleeman
Package: cups-pdf
Version: 1.7.3-6
Severity: grave
Justification: renders package unusable


When performing a dist-upgrade bringing in the latest cups-pdf the 
installation fails due to this system not using shadow passwords...

Setting up cups-pdf (1.7.3-6) ...
chage: the shadow password file is not present
adduser: `/usr/bin/chage -M 9 cups-pdf' returned error code 15.  
Aborting.
Cleaning up.
Removing user `cups-pdf'.
dpkg: error processing cups-pdf (--configure):
 subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
 cups-pdf

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.3
Locale: LANG=en_NZ, LC_CTYPE=en_NZ (charmap=ISO-8859-1)

Versions of packages cups-pdf depends on:
ii  adduser   3.67.1 Add and remove users and groups
ii  cupsys1.1.23-12  Common UNIX Printing System(tm) - 
ii  gs-esp8+8.15rc4.dfsg.1-2 The Ghostscript PostScript interpr
ii  libc6 2.3.5-6GNU C Library: Shared libraries an

cups-pdf recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330744: Maintainer field screwed up

2005-09-29 Thread Christoph Berg
Package: aspectj
Version: 1.1.1-1
Severity: serious

Hi.

Maintainer: Takashi Okamoto [EMAIL PROTECTED]
Uploaders: James LewisMoss [EMAIL PROTECTED]

This can't be right. Please upload a new version that fixes this.
That field makes [1] show the wrong name.

[1] http://qa.debian.org/~myon/qa/[EMAIL PROTECTED]

Christoph
-- 
[EMAIL PROTECTED] | http://www.df7cb.de/cs/
Universität des Saarlandes, Compiler Design Lab


signature.asc
Description: Digital signature


Processed: moreinfo

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 329343 important
Bug#329343: lincity-ng: Saved game can't be pause after loaded. When save my 
game is on accelerate mode.
Severity set to `important'.

 tag 329343 moreinfo
Bug#329343: lincity-ng: Saved game can't be pause after loaded. When save my 
game is on accelerate mode.
There were no tags set.
Tags added: moreinfo

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#218908: Candidates for removal

2005-09-29 Thread Florian Ernst
Hello *,

On Thu, Sep 29, 2005 at 10:37:01AM -0500, Sam Hart wrote:
  1266 days: tuxtype (0 waiting, new pkg, has RC bugs) [Rune B. Broberg]
   Copyright issues (see bug 218908).  Jeroen wrote let's see if someone
   interested jumps in, otherwise, removal seems to be the best option to 
  me.
   -- on 21 June.  Someone said that they were trying to make a sponsored
   upload on 18 August; I've pinged them.
 
 [...]
 Nearly every graphic, sound and animation was something that I created
 except for a few images which were pulled from the Copyright Free Photo
 Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html

...and the copyright (and redistribution terms) for those images needs
to be explicitely listed. Only _most_ of the pictures at this archive
are really free to use, as I understand it. E.g. this archive lists
the U.S. Fish and Wildlife Service as one of their main sources, but
the FWS say Not all the information on our site is in the public
domain. Some images/graphics are licensed for use under the copyright
law, [...] (http://www.fws.gov/help/policies.html#copyright). Please
see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=218908;msg=29
for a longer list dealing with tuxtype_1.5.3 (not in Debian, but parts
of this list apply to 1.0 currently present in Debian as well, see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=218908;msg=41.

 Beyond the 1.0 release, there may have been some graphics that

Graphics, sound files and fonts.

 originated from somewhere else, I'm afraid you'd have to track down and
  ^^^
 ask Jesse Andrews for those details.
 [...]
 If anyone is willing to work with me to identify what /specifically/ is
 needed for it, I'd be more than obliged.

Methinks you already named it as underlined above, but possibly some
other people might want to chime in at this point...


BTW, there's someone interested in maintaining tuxtype, but currently
his approach seems to be to remove all questionable media files from
the package... Nathanael Nerode is on the spot, however.

Cheers,
Flo


signature.asc
Description: Digital signature


Bug#328048: mod_perl makes apache2 segv

2005-09-29 Thread Vincent Lefevre
On 2005-09-29 12:01:46 -0400, Andres Salomon wrote:
 This is just a wild guess, but this sounds a whole lot like library
 conflicts; ie, a perl program pulling in libmysqlclient12 (thus causing
 modperl to load libmysqlclient12), and php loading libmysqlclient10.
 What perl libs are installed?  What other apache modules are loaded, and
 what libs are they pulling in?  What versions of libmysqlclient and pcre
 are installed on the system?

In my case, I have (after removing perl.*):

cgi.load
dav.conf
dav.load
dav_fs.conf
dav_fs.load
dav_svn.conf
dav_svn.load
userdir.conf
userdir.load
xmlrpc.conf
xmlrpc.load

When perl.* is there, then this is ruby (used by xmlrpc) that crashes.
With perl.* and without xmlrpc.*, I still get the crash (in mod_perl
this time). So, perhaps you're right, this may be a library conflict.

-- 
Vincent Lefèvre [EMAIL PROTECTED] - Web: http://www.vinc17.org/
100% accessible validated (X)HTML - Blog: http://www.vinc17.org/blog/
Work: CR INRIA - computer arithmetic / SPACES project at LORIA


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#328048: mod_perl makes apache2 segv

2005-09-29 Thread SR, ESC
Le jeu 2005-09-29 a 12:20:01 -0400, Vincent Lefevre [EMAIL PROTECTED] a dit:
 On 2005-09-29 12:01:46 -0400, Andres Salomon wrote:
  This is just a wild guess, but this sounds a whole lot like library
  conflicts; ie, a perl program pulling in libmysqlclient12 (thus causing
  modperl to load libmysqlclient12), and php loading libmysqlclient10.
  What perl libs are installed?  What other apache modules are loaded, and
  what libs are they pulling in?  What versions of libmysqlclient and pcre
  are installed on the system?
 
for my case, i think it may be this, but i don't know how to explain
irssi crashing, as it seems to crash at the same point. but it
certainly sounds like you found something to check out some more. good
for you folks. on my end, i'll do more digging. i think it might be a
combination of things.

 -- 
 Vincent Lefèvre [EMAIL PROTECTED] - Web: http://www.vinc17.org/
 100% accessible validated (X)HTML - Blog: http://www.vinc17.org/blog/
 Work: CR INRIA - computer arithmetic / SPACES project at LORIA

-- 
Puritanism: The haunting fear that someone, somewhere may be happy.
-- unknown


pgpYP4CiqQFSO.pgp
Description: PGP signature


Bug#239337: marked as done (xemacs21: Incomplete information in copyright file (in woody))

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 18:35:26 +0200
with message-id [EMAIL PROTECTED]
and subject line This is woody only. Tell this to the version tracking
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 22 Mar 2004 11:18:03 +
From [EMAIL PROTECTED] Mon Mar 22 03:18:03 2004
Return-path: [EMAIL PROTECTED]
Received: from ms-smtp-03.nyroc.rr.com [24.24.2.57] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1B5NRT-0007KZ-00; Mon, 22 Mar 2004 03:18:03 -0800
Received: from doctormoo (syr-24-59-115-225.twcny.rr.com [24.59.115.225])
by ms-smtp-03.nyroc.rr.com (8.12.10/8.12.10) with ESMTP id 
i2MBHwVS003643;
Mon, 22 Mar 2004 06:17:58 -0500 (EST)
Received: by doctormoo (Postfix, from userid 1000)
id 94FB944068; Mon, 22 Mar 2004 06:18:16 -0500 (EST)
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Nathanael Nerode [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: xemacs21: Incomplete information in copyright file (in sarge  woody)
X-Mailer: reportbug 2.48
Date: Mon, 22 Mar 2004 06:18:16 -0500
Message-Id: [EMAIL PROTECTED]
X-Virus-Scanned: Symantec AntiVirus Scan Engine
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_12 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-7.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2004_03_12
X-Spam-Level: 

Package: xemacs21
Version: 21.4.6-8
Severity: serious
Tags: woody sarge
Justification: Policy 13.6

This is essentially a reopening of bug 161501.  This shouldn't be necessary,
because it's fixed in sid, but no new version of xemacs has made it into
'testing' since woody released, so this *still* affects the version in sarge.

Great, just great.


---
Received: (at 239337-done) by bugs.debian.org; 29 Sep 2005 16:35:36 +
From [EMAIL PROTECTED] Thu Sep 29 09:35:36 2005
Return-path: [EMAIL PROTECTED]
Received: from higgs.djpig.de [213.133.98.126] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL1Ng-0001ff-00; Thu, 29 Sep 2005 09:35:36 -0700
Received: from djpig by higgs.djpig.de with local (Exim 4.50)
id 1EL1Nb-0004SJ-Vn
for [EMAIL PROTECTED]; Thu, 29 Sep 2005 18:35:31 +0200
Date: Thu, 29 Sep 2005 18:35:26 +0200
From: Frank Lichtenheld [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: This is woody only. Tell this to the version tracking
Message-ID: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
version=2.60-bugs.debian.org_2005_01_02

Version: 21.4.17-1

Let's close this with the sarge version. If someone wants
to track down where it was fixed between woody and sarge,
feel free...

Gruesse,
-- 
Frank Lichtenheld [EMAIL PROTECTED]
www: http://www.djpig.de/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: tagging 320875

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 # Automatically generated email from bts, devscripts version 2.9.7
  # this was fixed in 3.94-1.0
 tags 320875 fixed
Bug#320875: aalib transition
There were no tags set.
Tags added: fixed


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#327018: marked as done ([RFS] grace6: An XY plotting tool)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 18:42:08 +0200
with message-id [EMAIL PROTECTED]
and subject line [RFS] grace6: An XY plotting tool
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 7 Sep 2005 05:32:11 +
From [EMAIL PROTECTED] Tue Sep 06 22:32:11 2005
Return-path: [EMAIL PROTECTED]
Received: from moutng.kundenserver.de [212.227.126.171] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1ECsXb-0001ds-00; Tue, 06 Sep 2005 22:32:11 -0700
Received: from i577B0BB2.versanet.de [87.123.11.178] (helo=[192.168.42.100])
by mrelayeu.kundenserver.de with ESMTP (Nemesis),
id 0ML29c-1ECsXW40cA-00015A; Wed, 07 Sep 2005 07:32:06 +0200
Message-ID: [EMAIL PROTECTED]
Date: Wed, 07 Sep 2005 07:36:52 +0200
From: Torsten Werner [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Organization: Debian GNU/Linux
User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050817)
X-Accept-Language: de-DE, de, en-us, en
MIME-Version: 1.0
To: Christoph Berg [EMAIL PROTECTED], Li Daobing [EMAIL PROTECTED]
CC: Ionut Georgescu [EMAIL PROTECTED],  debian-mentors@lists.debian.org, 
 [EMAIL PROTECTED]
Subject: Re: [RFS] grace6: An XY plotting tool
References: [EMAIL PROTECTED] [EMAIL PROTECTED]
In-Reply-To: [EMAIL PROTECTED]
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 7bit
X-Provags-ID: kundenserver.de [EMAIL PROTECTED] 
login:c71377c073bc7a3d65be7fb93cee7d50
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: grace6
Severity: grave
Version: 5.99.0+final-7

Christoph Berg schrieb:
 Re: Li Daobing in [EMAIL PROTECTED]
 
I want to adopt grace6[1].

[1] http://bugs.debian.org/307358

I rebuild grace6[2], lintian and linda clean. I have upload it to
mentors.debian.net[3].
 
 
 Hi,
 
 the package looks fine. Uploaded.
 
 A minor nit: update the maintainer name in debian/copyright for the
 next upload.
 
 Christoph

Hello,


DO NOT DO THAT AGAIN!

RFH does not mean, that the package is not maintained. You should have
coordinated the upload with the current maintainer - at least the ITA
mail should be send some days/weeks *before* the upload.

Ionut is the future maintainer who has coordinated with me. Ionut,
please send your own ITA mail to the bug report mentioned above. We will
discuss privately how to fix the problem.


Torsten

---
Received: (at 327018-done) by bugs.debian.org; 29 Sep 2005 16:42:13 +
From [EMAIL PROTECTED] Thu Sep 29 09:42:13 2005
Return-path: [EMAIL PROTECTED]
Received: from idefix.mpipks-dresden.mpg.de [193.174.246.34] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL1U4-0003Hv-00; Thu, 29 Sep 2005 09:42:12 -0700
Received: from bacon.pks.mpg.de by idefix.mpipks-dresden.mpg.de 
(8.11.1/1.1.22.3/04Jan99-0437PM)
id j8TGg8w039748; Thu, 29 Sep 2005 18:42:08 +0200 (CEST)
Received: by bacon.pks.mpg.de (sSMTP sendmail emulation); Thu, 29 Sep 2005 
18:42:08 +0200
Date: Thu, 29 Sep 2005 18:42:08 +0200
From: Ionut Georgescu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: Christoph Berg [EMAIL PROTECTED], Li Daobing [EMAIL PROTECTED],
   Torsten Werner [EMAIL PROTECTED]
Subject: Re: [RFS] grace6: An XY plotting tool
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=FL5UXtIhxfXey3p5
Content-Disposition: inline
User-Agent: Mutt/1.5.11
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
version=2.60-bugs.debian.org_2005_01_02


--FL5UXtIhxfXey3p5
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello everyone,

I am closing this bug now. The maintainership question has been solved.

Ionut

--=20
***
* Ionu=C5=A3 Georgescu
* Max-Planck-Institut f=C3=BCr Physik komplexer Systeme
* Noethnitzer Str. 38, D-01187 Dresden
* Phone: +49 (351) 871-2209
* Fax:   +49 (351) 871-1999=20

--FL5UXtIhxfXey3p5
Content-Type: application/pgp-signature; name=signature.asc

Bug#330738: marked as done (mozilla-firefox: experimental version uninstable due to dependency)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 12:27:08 -0400
with message-id [EMAIL PROTECTED]
and subject line Bug#330738: mozilla-firefox: experimental version uninstable 
due to dependency
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 29 Sep 2005 16:02:15 +
From [EMAIL PROTECTED] Thu Sep 29 09:02:15 2005
Return-path: [EMAIL PROTECTED]
Received: from turing.cs.hmc.edu [134.173.42.99] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL0rP-0003Bp-00; Thu, 29 Sep 2005 09:02:15 -0700
Received: by turing.cs.hmc.edu (Postfix, from userid 13452)
id AC4C3532B4; Thu, 29 Sep 2005 09:02:14 -0700 (PDT)
Date: Thu, 29 Sep 2005 09:02:14 -0700
From: Itai Seggev [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: mozilla-firefox: experimental version uninstable due to dependency
Message-ID: [EMAIL PROTECTED]
References: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: [EMAIL PROTECTED]
User-Agent: Mutt/1.4.2.1i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: mozilla-firefox
Version: 1.4.99+1.5beta1.dfsg-3
Severity: serious
Tags: experimental

I used reportbug to submit this bug a couple of days ago, but I
never got a confirmation and I can't find a bug report online. Anyway,
it seems to apply to the even newer version in experimental, so I'm
resubmitting it.

The new version in experimental depends on a non-existence 1.2.8rel-4
version of libpng12-0. According to packags.qa.d.o, the most recernt
versions are 1.2.8rel-1 in unstable and 1.2.8rel-2 in experimental.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (10, 
'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12cavy1
Locale: LANG=he_IL.UTF-8, LC_CTYPE=he_IL.UTF-8 (charmap=UTF-8)

Versions of packages mozilla-firefox depends on:
ii  debianutils   2.14.2 Miscellaneous utilities specific t
ii  fontconfig2.3.2-1generic font configuration library
ii  libatk1.0-0   1.10.1-2   The ATK accessibility toolkit
ii  libc6 2.3.5-3GNU C Library: Shared libraries an
ii  libfontconfig12.3.2-1generic font configuration library
ii  libfreetype6  2.1.10-1   FreeType 2 font engine, shared lib
ii  libgcc1   1:4.0.1-8  GCC support library
ii  libglib2.0-0  2.8.0-1The GLib library of C routines
ii  libgtk2.0-0   2.6.9-1The GTK+ graphical user interface
ii  libidl0   0.8.5-1library for parsing CORBA IDL file
ii  libjpeg62 6b-10  The Independent JPEG Group's JPEG
ii  libkrb53  1.3.6-5MIT Kerberos runtime libraries
ii  libpango1.0-0 1.8.2-1Layout and rendering of internatio
ii  libpng12-01.2.8rel-1 PNG library - runtime
ii  libstdc++64.0.1-8The GNU Standard C++ Library v3
ii  libx11-6  6.8.2.dfsg.1-5 X Window System protocol client li
ii  libxext6  6.8.2.dfsg.1-5 X Window System miscellaneous exte
ii  libxft2   2.1.7-1FreeType-based font drawing librar
ii  libxinerama1  6.8.2.dfsg.1-5 X Window System multi-head display
ii  libxp66.8.2.dfsg.1-5 X Window System printing extension
ii  libxt66.8.2.dfsg.1-5 X Toolkit Intrinsics
ii  psmisc21.6-1 Utilities that use the proc filesy
ii  xlibs 6.8.2.dfsg.1-5 X Window System client libraries m
ii  zlib1g1:1.2.3-3  compression library - runtime

mozilla-firefox recommends no packages.

-- no debconf information

---
Received: (at 330738-done) by bugs.debian.org; 29 Sep 2005 16:27:20 +
From [EMAIL PROTECTED] Thu Sep 29 09:27:20 2005
Return-path: [EMAIL PROTECTED]
Received: from mailout1.igs.net [216.58.97.34] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))

Bug#330753: gtk+2.0-directfb: FTBFS: Missing Build-Depends on 'dbs'

2005-09-29 Thread Andreas Jochens
Package: gtk+2.0-directfb
Version: 2.0.9.2-1
Severity: serious
Tags: patch

When building 'gtk+2.0-directfb' in a clean 'unstable' chroot,
I get the following error:


 debian/rules clean
debian/rules:30: /usr/share/dbs/dbs-build.mk: No such file or directory
make: *** No rule to make target `/usr/share/dbs/dbs-build.mk'.  Stop.

Please add the missing Build-Depends on 'dbs' to debian/control.

Regards
Andreas Jochens

diff -urN ../tmp-orig/gtk+2.0-directfb-2.0.9.2/debian/control ./debian/control
--- ../tmp-orig/gtk+2.0-directfb-2.0.9.2/debian/control 2005-09-29 
17:13:39.0 +
+++ ./debian/control2005-09-29 17:13:35.0 +
@@ -2,7 +2,7 @@
 Section: libs
 Priority: optional
 Maintainer: Alastair McKinstry [EMAIL PROTECTED]
-Build-Depends: debhelper ( 4.0.0), libgtk2.0-dev, libdirectfb-dev (= 
0.9.22), autoconf
+Build-Depends: debhelper, dbs, libgtk2.0-dev, libdirectfb-dev (= 0.9.22), 
autoconf
 Standards-Version: 3.6.2
 
 Package: libgtk+2.0-directfb0-udeb


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#320413: Take over of texinfo/info packages

2005-09-29 Thread Frank Küster
Norbert Preining [EMAIL PROTECTED] wrote:

 Hi Frank!

 Please get the version
   4.8-1
 from the tug server. I have fixed all the lintian warnings and errors,
 changed maintainer, added several bug-closings due to upstream fixes.
 And stole the manpage from tetex.

Fine - but there's still one problem.  You should make it a habit to
test upgrading packages before you upload or provide new versions:
Because it depends on tex-common, but tex-common conflicts with tetex in
sid, it cannot be installed.  If you write

Depends: *, tex-common | tetex-bin ( 3.0)

it should work (I only tried with --force-depends).  Just tried, it
does, although there's now an ugly circular dependency between texinfo
and tetex-base; both upgrading texinfo when tetex-base is installed, and
installing texinfo and tetex-base in one run works.

Regards, Frank
-- 
Frank Küster
Inst. f. Biochemie der Univ. Zürich
Debian Developer




Bug#218908: Candidates for removal

2005-09-29 Thread Sam Hart
On Thu, 2005-09-29 at 18:23 +0200, Florian Ernst wrote:
 On Thu, Sep 29, 2005 at 10:37:01AM -0500, Sam Hart wrote:
  [...]
  
  [...]
  Nearly every graphic, sound and animation was something that I created
  except for a few images which were pulled from the Copyright Free Photo
  Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html
 
 ...and the copyright (and redistribution terms) for those images needs
 to be explicitely listed.

Actually, I'm not 100% this really has to be the case on material I
originally created. I assumed that by placing material I original
created inside an archive where everything else was covered by the GPL,
I was licensing them under the GPL.

As I understand it, only those from the Copyright Free Photo archive
need to be listed specifically. I don't mind explicitly listing
copyright and redistribution terms on each of the media files I created,
but it seems like an exorbitant amount of work considering they were
just intended to be covered by the GPL of the project as a whole anyway.

If this isn't the case, then I can find /many/ other projects out there
where artwork, sounds, etc. were created for projects that would need to
be revised.

  Only _most_ of the pictures at this archive
 are really free to use, as I understand it. E.g. this archive lists
 the U.S. Fish and Wildlife Service as one of their main sources, but
 the FWS say Not all the information on our site is in the public
 domain. Some images/graphics are licensed for use under the copyright
 law, [...] (http://www.fws.gov/help/policies.html#copyright). Please
 see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=218908;msg=29
 for a longer list dealing with tuxtype_1.5.3 (not in Debian, but parts
 of this list apply to 1.0 currently present in Debian as well, see
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=218908;msg=41.

Yes, I actually did see that. I'd need to check again (as it has been so
long) but I'm reasonably certain what was originally in 1.0 came
specifically from the Copyright Free archive as listed before.

 BTW, there's someone interested in maintaining tuxtype, but currently
 his approach seems to be to remove all questionable media files from
 the package... Nathanael Nerode is on the spot, however.

And, as I said, I am available to anyone who has specific questions. I'm
no longer part of the Tux Typing team (I really should track them all
down, honestly, and see what's up) and I don't think I even have CVS
access on sf.net any more, so I can't specifically change any of these
at this point.

However, if whoever wants to maintain it wants to contact me privately
with a list of questionable media files, I would be more than happy to
tell where the ones I know of came from.

-- 
'
.O. Sam Hart, [EMAIL PROTECTED]
..OProgeny Linux Systems, Inc
OOO http://www.progeny.com/



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#218908: Candidates for removal

2005-09-29 Thread Florian Ernst
On Thu, Sep 29, 2005 at 12:36:18PM -0500, Sam Hart wrote:
 On Thu, 2005-09-29 at 18:23 +0200, Florian Ernst wrote:
  On Thu, Sep 29, 2005 at 10:37:01AM -0500, Sam Hart wrote:
   [...]
   Nearly every graphic, sound and animation was something that I created
   except for a few images which were pulled from the Copyright Free Photo
   Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html
 
  ...and the copyright (and redistribution terms) for those images needs
  to be explicitely listed.

 Actually, I'm not 100% this really has to be the case on material I
 originally created. [...]
 If this isn't the case, then I can find /many/ other projects out there
 where artwork, sounds, etc. were created for projects that would need to
 be revised.

Ah, sorry, I didn't quite make myself clear. Actually I only mean
those few images which were pulled from the Copyright Free Photo
Archive, and not those you have created.

Cheers,
Flo


signature.asc
Description: Digital signature


Bug#330478: solfege: Should depend on python2.3-gnome2-extras

2005-09-29 Thread Andrés Roldán
Package: solfege
Version: 2.0.4-4
Tags: patch
Followup-For: Bug #330478

It needs to depend on python2.3-gnome2-extras to get it working.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-ck3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages solfege depends on:
ii  libc6 2.3.5-6GNU C Library: Shared libraries an
ii  python2.3.5-3An interactive high-level object-o
ii  python-gnome2 2.10.0-2   Python bindings for the GNOME desk
ii  python-gtk2   2.6.2-1Python bindings for the GTK+ widge

solfege recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330606: mozilla-firefox does not start up

2005-09-29 Thread John Hasler
Eric writes:
 Can you move your ~/.mozilla directory out of the way and try again?

I just tried that.  No difference.  Ps shows:

32305 pts/49   Sl 0:01 /usr/lib/mozilla-firefox/firefox-bin -a firefox


...


Hold on.  I tried stracing it and it worked.  Tried it without strace and
it still works.   Moved .mozilla back and it still works.  WTF?

My bookmarks have gone missing, though.
-- 
John Hasler


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#218908: Candidates for removal

2005-09-29 Thread Andreas Tille

On Thu, 29 Sep 2005, Sam Hart wrote:


Nearly every graphic, sound and animation was something that I created
except for a few images which were pulled from the Copyright Free Photo
Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html


Well, if you are looking for photos that make a nice background for
a penguin why not using WikiMedia, for instance at my Iceland gallery

http://commons.wikimedia.org/wiki/User:Tillea/Gallery/Iceland

My other Iceland in winter images

http://fam-tille.de/island/winter/

can be provided in a reasonable resolution at request.

(I used GFDL for the images in WikiMedia, but for the sake of TuxType
I can apply any reasonable DFSG-free license.)

Kind regards

  Andreas.

--
http://fam-tille.de


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#218908: Candidates for removal

2005-09-29 Thread Sam Hart
On Thu, 2005-09-29 at 19:50 +0200, Florian Ernst wrote:
 On Thu, Sep 29, 2005 at 12:36:18PM -0500, Sam Hart wrote:
  On Thu, 2005-09-29 at 18:23 +0200, Florian Ernst wrote:
   On Thu, Sep 29, 2005 at 10:37:01AM -0500, Sam Hart wrote:
[...]
Nearly every graphic, sound and animation was something that I created
except for a few images which were pulled from the Copyright Free Photo
Archive here: http://gimp-savvy.com/PHOTO-ARCHIVE/index.html
  
   ...and the copyright (and redistribution terms) for those images needs
   to be explicitely listed.
 
  Actually, I'm not 100% this really has to be the case on material I
  originally created. [...]
  If this isn't the case, then I can find /many/ other projects out there
  where artwork, sounds, etc. were created for projects that would need to
  be revised.
 
 Ah, sorry, I didn't quite make myself clear. Actually I only mean
 those few images which were pulled from the Copyright Free Photo
 Archive, and not those you have created.

Ah, okay. I was scared there for a bit :-)

Well, I can't help on the font issues (I have contacted Jesse Andrews
and some of the others who worked on the project after me to see if they
can point me to where they came from... most likely external
contributors)... however, for the images I'd be more than happy to find
or make replacements to any ones which are really questionable.

Specifically replacing the FWS ones will be very easy (the FWS website
is easily navigable and explicitly says which images are in the public
domain and which are not).

That being said, the FWS site also says this:
Most of the images on our Web pages are in the public
domain (which means they have no copyright restrictions). If an
image on our Web site is not restricted and does not say it is
copyrighted, then you can assume it is in the public domain.

If only we could search on their site for all the images that are /not/
in the public domain then we could verify that these images are fine. As
far as I can tell, the vast majority of images on their site are in the
public domain.

-- 
'
.O. Sam Hart, [EMAIL PROTECTED]
..OProgeny Linux Systems, Inc
OOO http://www.progeny.com/



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330478: solfege: Should depend on python2.3-gnome2-extras

2005-09-29 Thread tom
Hello,
I'm preparing debian packages for solfege 3.0 that will fix this.
I'm a little buzy, but it should be done in a few days.
-- 
Tom Cato Amundsen [EMAIL PROTECTED] http://www.solfege.org/
GNU Solfege - free ear traininghttp://www.gnu.org/software/solfege/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330640: gnuift needs to be rebuilt on m68k for C++ transition

2005-09-29 Thread Robert Jordens
Hello!

[Wed, 28 Sep 2005] Nathanael Nerode wrote:
 gnuift has accidentally been built with the old version of G++ on m68k,
 as noted at http://people.debian.org/~mfurr/gxx/broken.html.
 
 Please rebuild on m68k with G++ 4.0 and binNMU.

AFAICS that build was done on a broken buildd. I'd like to ask the m68k
admins to do the binNMU.

Robert.

-- 
Every program is a part of some other program, and rarely fits.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330606: mozilla-firefox does not start up

2005-09-29 Thread Torsten Zirzlaff

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi.

On Thu, 29 Sep 2005, Eric Dorland wrote:


* Torsten Zirzlaff ([EMAIL PROTECTED]) wrote:

[...]


Can you move your ~/.mozilla directory out of the way and try again?


  Done, but the situation is the same, except it creates the nescessary 
files and waits then.



- -- 
s-mail: Neckarstr. 120 Torsten Zirzlaff

70190 Stuttgart
Germanye-mail :  [EMAIL PROTECTED]
phone: +49 711 285 19 40 [EMAIL PROTECTED]
mobil: +49 174 857 56 77
data:  +49 711 286 40 57/9

+-+
|  The shortest unit of time in the universe is the New York Second, defined  |
|  as the period of time between the traffic lights turning green and the cab |
|  behind you honking. -- Terry Pratchett 'Lords and Ladies'  |
+-+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iQEVAwUBQzw7VFqurtge6dVZAQJO1wgAuWuEloakCRtVcwe2NSzHrlnOZXoP0zrN
AhohgFUzQOeu2rIsm+ARZnchFNngjFRTPEKUYhr6UHN2S8yBjp3DHvmZevHsnXyd
9bmULr9q0rSltrkplzd+/i2QF1ZqVb/6ma96fa4M+mmH3yLDCwuz3SZBxnPNVj3U
4Fef6aTy8LEBKDOghqv0723wuNFCgfPTY0UgWJM7qh4dgA6ovB+gGqeE/bHD2Izd
sT6B6ZCeSG48tK5Kg03sU7zog//i+E/fVG/63SdkpTJAT1PUCrIGcdEVlv+X87dp
HoKUwvmewhYYwfT+pyY/3dVwFKEKofQMlHx3pZIRIpRB8N0OZpH+Dg==
=LQAV
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Clarify

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 retitle 330603 gbatnav: FTBFS: missing automake1.9 dep, GNOME1 currently FUBAR
Bug#330603: gbatnav: ftbfs [sparc] /bin/sh: ../depcomp: No such file or 
directory
Changed Bug title.


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#329839: marked as done (buffer overflow security fix )

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 11:32:12 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#329839: fixed in abiword 2.2.10-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 23 Sep 2005 18:49:26 +
From [EMAIL PROTECTED] Fri Sep 23 11:49:26 2005
Return-path: [EMAIL PROTECTED]
Received: from ptr-64-201-187-87.ptr.terago.ca (mars.net-itech.com) 
[64.201.187.87] 
by spohr.debian.org with smtp (Exim 3.36 1 (Debian))
id 1EIsbu-0005K1-00; Fri, 23 Sep 2005 11:49:26 -0700
Received: (qmail 6748 invoked from network); 23 Sep 2005 18:49:22 -
Received: from unknown (HELO minimai.internal.nit.ca) (192.168.12.1)
  by mars.net-itech.com with SMTP; 23 Sep 2005 18:49:22 -
Received: (qmail 28553 invoked from network); 23 Sep 2005 18:49:22 -
Received: from unknown (HELO ?192.168.12.210?) (192.168.12.210)
  by minimai.internal.nit.ca with SMTP; 23 Sep 2005 18:49:22 -
Message-ID: [EMAIL PROTECTED]
Date: Fri, 23 Sep 2005 14:50:18 -0400
From: Hubert Figuiere [EMAIL PROTECTED]
User-Agent: Debian Thunderbird 1.0.6 (X11/20050802)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: buffer overflow security fix 
Content-Type: multipart/mixed;
 boundary=040704040909040402090504
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

This is a multi-part message in MIME format.
--040704040909040402090504
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Package: abiword
Version: 2.2.9
Severity: important

Attached is a security patch for AbiWord that fix a buffer overflow
allowing to execute arbitrary code when importing a bogus RTF file.

Patch is already in upstream CVS, but I recommend to apply it for stable.

Thanks.

Hub
-- 
http://www.figuiere.net/hub/blog/

--040704040909040402090504
Content-Type: text/x-patch;
 name=abiword-security-fix.diff
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename=abiword-security-fix.diff

Index: src/wp/impexp/xp/ie_imp_RTF.cpp
===
RCS file: /cvsroot/abi/src/wp/impexp/xp/ie_imp_RTF.cpp,v
retrieving revision 1.347.2.18
retrieving revision 1.347.2.19
diff -u -p -u -r1.347.2.18 -r1.347.2.19
--- src/wp/impexp/xp/ie_imp_RTF.cpp 27 Jul 2005 15:20:30 -  
1.347.2.18
+++ src/wp/impexp/xp/ie_imp_RTF.cpp 23 Sep 2005 16:37:41 -  
1.347.2.19
@@ -7937,9 +7937,10 @@ bool IE_Imp_RTF::ReadOneFontFromTable(bo
FIXME: CJK font names come in form \'aa\'cd\'ef - so we have to
parse \'HH correctly (currently we ignore them!) - VH
*/
-   while ( ch != '}'ch != '\\'ch != ';'  ch!= '{')
+   while ( ch != '}'ch != '\\'ch != ';'  ch!= '{'  count  
MAX_KEYWORD_LEN)
{
-   keyword[count++] = ch;
+   keyword[count] = ch;
+   count++;
if (!ReadCharFromFile(ch))
{
return false;

--040704040909040402090504--

---
Received: (at 329839-close) by bugs.debian.org; 29 Sep 2005 18:40:22 +
From [EMAIL PROTECTED] Thu Sep 29 11:40:22 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EL3CW-0005We-00; Thu, 29 Sep 2005 11:32:12 -0700
From: Joshua Kwan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#329839: fixed in abiword 2.2.10-1
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 11:32:12 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 2

Source: abiword
Source-Version: 2.2.10-1

We believe that the bug you reported is fixed in the latest version of
abiword, which is due to be installed in the Debian FTP archive:

abiword-common_2.2.10-1_all.deb
  to 

Bug#330733: marked as done (twiki: INCLUDE function allows arbitrary shell command execution)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 20:42:40 +0200
with message-id [EMAIL PROTECTED]
and subject line Bug#330733: twiki: INCLUDE function allows arbitrary shell 
command execution
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 29 Sep 2005 15:48:47 +
From [EMAIL PROTECTED] Thu Sep 29 08:48:47 2005
Return-path: [EMAIL PROTECTED]
Received: from mail.riseup.net [69.90.134.155] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL0eM-0005Tc-00; Thu, 29 Sep 2005 08:48:47 -0700
Received: from localhost (localhost [127.0.0.1])
by mail.riseup.net (Postfix) with ESMTP id E6CFAA2DF6;
Thu, 29 Sep 2005 08:48:19 -0700 (PDT)
Received: from mail.riseup.net ([127.0.0.1])
by localhost (buffy [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 03753-06; Thu, 29 Sep 2005 08:48:19 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.riseup.net (Postfix) with ESMTP id B1271A2D80;
Thu, 29 Sep 2005 08:48:19 -0700 (PDT)
Received: by pond (Postfix, from userid 1000)
id 6BDAC3A847; Thu, 29 Sep 2005 11:28:23 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Micah Anderson [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: twiki: INCLUDE function allows arbitrary shell command execution
X-Mailer: reportbug 3.17
Date: Thu, 29 Sep 2005 11:28:23 -0400
X-Debbugs-Cc: Debian Security Team [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at riseup.net
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: twiki
Version: 20040902-3
Severity: grave
Tags: security
Justification: user security hole

A new security bug in twiki showed up today:
http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude

An attacker is able to execute arbitrary shell commands with the
privileges of the web server process. The TWiki INCLUDE function
enables a malicious user to compose a command line executed by the
Perl backtick (`) operator.

The rev parameter of the INCLUDE variable is not checked properly for
shell metacharacters and is thus vulnerable to revision numbers
containing pipes and shell commands. The exploit is possible on
included topics with two or more revisions.

Example INCLUDE variable exploiting the rev parameter:
%INCLUDE{ Main.TWikiUsers rev=2|less /etc/passwd }%

The same vulnerability is exposed to all Plugins and add-ons that use
TWiki::Func::readTopicText function to read a previous topic revision.
This has been tested on TWiki:Plugins.RevCommentPlugin and
TWiki:Plugins.CompareRevisionsAddon.

If access to TWiki is not restricted by other means, attackers can use
the revision function with or without prior authentication, depending
on the configuration. 

The Common Vulnerabilities and Exposures project has assigned the name
CAN-2005-3056 to this vulnerability. Please include this number in any
changelogs fixing this.


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-2-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

---
Received: (at 330733-done) by bugs.debian.org; 29 Sep 2005 18:43:15 +
From [EMAIL PROTECTED] Thu Sep 29 11:43:14 2005
Return-path: [EMAIL PROTECTED]
Received: from mail.enyo.de [212.9.189.167] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL3NC-0007lz-00; Thu, 29 Sep 2005 11:43:14 -0700
Received: from deneb.vpn.enyo.de ([212.9.189.177] helo=deneb.enyo.de)
by albireo.enyo.de with esmtp id 1EL3N7-0004Vk-Pq; Thu, 29 Sep 2005 
20:43:09 +0200
Received: from fw by deneb.enyo.de with local (Exim 4.52)
id 1EL3Me-00069B-8z; Thu, 29 Sep 2005 20:42:40 +0200
From: Florian Weimer [EMAIL PROTECTED]
To: Micah Anderson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Bug#330733: twiki: INCLUDE function allows 

Bug#330792: libgsl0-dev: floating point problems on alpha

2005-09-29 Thread Clint Adams
Package: libgsl0-dev
Version: 1.7-1
Severity: grave
Justification: Steve Langasek said so.

bogofilter has been failing to build on alpha, and I am told to blame
GSL.

http://buildd.debian.org/build.php?pkg=bogofilterarch=alpha


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#218908: [debian-jr] Re: Candidates for removal

2005-09-29 Thread Bill Kendrick
On Thu, Sep 29, 2005 at 01:46:37PM -0500, Sam Hart wrote:
 Well, I can't help on the font issues (I have contacted Jesse Andrews
 and some of the others who worked on the project after me to see if they
 can point me to where they came from... most likely external
 contributors)... however, for the images I'd be more than happy to find
 or make replacements to any ones which are really questionable.

OOC, is Tux Typing using TTF fonts directly, or pre-rendered bitmaps?
I'm guessing the former, for i18n reasons.  If the latter, however, some
fonts allow _use_ (as in, you can make something with the font and ship that),
but not redistribution.

(Typically, font licenses have restrictions all over the board, and
the licenses are poorly written.  Not to mention the oodles of free
font sites out there that ship raw TTF files w/o any license info...
they just seem to download font ZIPs from everywhere, unzip the whole load
of them, and delete everything but the TTFs.  Idiots!)

Of course, I inadvertendly used some Apple Macintosh font which I found
sitting (as a TTF file) in some IceWM theme, or something.  The Debian folks
pointed that out to me, and I directed them to the theme, which was also
being dist'd by Debian. ;^)

-bill!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330743: cups-pdf: No longer installable when not using shadow passwords.

2005-09-29 Thread Martin-Éric Racine
pe, 2005-09-30 kello 04:24 +1200, James Sleeman kirjoitti:
 Package: cups-pdf
 Version: 1.7.3-6
 Severity: grave
 Justification: renders package unusable
 
 
 When performing a dist-upgrade bringing in the latest cups-pdf the 
 installation fails due to this system not using shadow passwords...

cups-pdf does not depend upon the usage of shadow passwords per se, it
just adds a system uses, so I suspect that the bug is actually caused by
the latest passwd package.  See bug #330291 for example.

-- 
Martin-Éric Racine
http://q-funk.iki.fi




Processed: Re: basket: FTBFS: cast from 'Item*' to 'int' loses precision

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 300176 serious
Bug#300176: basket: FTBFS (amd64/gcc-4.0): cast from 'Item*' to 'int' loses 
precision
Severity set to `serious'.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330733: twiki: INCLUDE function allows arbitrary shell command execution

2005-09-29 Thread Sven Dowideit
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

excellent.

Micah, did you manage to reproduce this in the debian package at all?

you see, the debian package is significantly more secure than the
upstream version, and as you've marked it as grave, I presume that you
have found a way to make it happen. (as when I had a go, i did not get
the exploit (i got a unhelpful, but correct error message invalid
number argument at /usr/share/perl5/TWiki.pm line 3339.)

could you please either tell me how to reproduce the problem in the
current debian package, or close it?

Cheers

Sven

Micah Anderson wrote:
 Package: twiki
 Version: 20040902-3
 Severity: grave
 Tags: security
 Justification: user security hole
 
 A new security bug in twiki showed up today:
 http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude
 
 An attacker is able to execute arbitrary shell commands with the
 privileges of the web server process. The TWiki INCLUDE function
 enables a malicious user to compose a command line executed by the
 Perl backtick (`) operator.
 
 The rev parameter of the INCLUDE variable is not checked properly for
 shell metacharacters and is thus vulnerable to revision numbers
 containing pipes and shell commands. The exploit is possible on
 included topics with two or more revisions.
 
 Example INCLUDE variable exploiting the rev parameter:
 %INCLUDE{ Main.TWikiUsers rev=2|less /etc/passwd }%
 
 The same vulnerability is exposed to all Plugins and add-ons that use
 TWiki::Func::readTopicText function to read a previous topic revision.
 This has been tested on TWiki:Plugins.RevCommentPlugin and
 TWiki:Plugins.CompareRevisionsAddon.
 
 If access to TWiki is not restricted by other means, attackers can use
 the revision function with or without prior authentication, depending
 on the configuration. 
 
 The Common Vulnerabilities and Exposures project has assigned the name
 CAN-2005-3056 to this vulnerability. Please include this number in any
 changelogs fixing this.
 
 
 -- System Information:
 Debian Release: testing/unstable
   APT prefers testing
   APT policy: (990, 'testing'), (500, 'unstable')
 Architecture: i386 (i686)
 Shell:  /bin/sh linked to /bin/bash
 Kernel: Linux 2.6.8-2-k7
 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDPE2aPAwzu0QrW+kRAqZLAJ90bJEaXjUiwrkNcOu/U25JiLXAjgCeMoiy
VRnVrGHfBUXGaRpLZR8JP0M=
=5784
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330809: lvm-common: fail to install because devfsd is an unknown initscript

2005-09-29 Thread Petter Reinholdtsen

Package:  lvm-common
Severity: serious
Version:  1.5.20
Justification: circular dependency

When trying to build a LTSP chroot, the lvm-common package fail to
install.  I use this command in a sid chroot to build the ltsp
environment (chroot):

  # ltsp-build-client --dist sid --mirror http://ftp.skolelinux.no/debian
  [...]
  Setting up lvm-common (1.5.20) ...
  invoke-rc.d: unknown initscript, /etc/init.d/devfsd not found.
  dpkg: error processing lvm-common (--configure):
   subprocess post-installation script returned error exit status 100
  dpkg: dependency problems prevent configuration of lvm2:
   lvm2 depends on lvm-common ( 1.5.8); however:
Package lvm-common is not configured yet.
  dpkg: error processing lvm2 (--configure):
   dependency problems - leaving unconfigured
  [...]

The problem seem to be related to devfsd, which is to be installed,
have not been set up when lvm-common is being set up.  Some circular
dependency?

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#318758: Bug#330478: solfege: Should depend on python2.3-gnome2-extras

2005-09-29 Thread Steve Langasek
block 330478 by 318758
thanks

On Thu, Sep 29, 2005 at 11:59:53AM -0500, Andrés Roldán wrote:
 Package: solfege
 Version: 2.0.4-4
 Tags: patch
 Followup-For: Bug #330478

 It needs to depend on python2.3-gnome2-extras to get it working.

solfege *should* depend on python2.3-gnome2-extras, but python2.3-gnome2
*must* depend on python2.3-gnome2-extras because python2.3-gnome2 shipped in
sarge and the change in provided modules means there is no partial upgrade
path for these packages from sarge to etch.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/


signature.asc
Description: Digital signature


Processed: Re: Bug#330478: solfege: Should depend on python2.3-gnome2-extras

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 block 330478 by 318758
Bug#330478: solfege: Solfege did not start
Was not blocked by any bugs.
Blocking bugs added: 318758

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330812: Xsession snipped runs init script without checking permissions

2005-09-29 Thread Eduard Bloch
Package: xprint-common
Version: 1:0.1.0.alpha1-12
Severity: grave

Hello,

the Xsession.d file tries run the init script but it cannot rely on its
existance since it is a conffile. I know of cases where the file was
_not_ executable which made Xsession fail because Overfiend insists on
using set -e there and your script is executed by the shell of
Xsession, not your own shebang interpreter.

Obvious workaround: add a || true statement.

Eduard.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-rc2
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages xprint-common depends on:
ii  debconf [debconf-2.0]  1.4.58Debian configuration management sy
ii  xbase-clients  6.8.2.dfsg.1-7miscellaneous X clients
ii  xprint 1:0.1.0.alpha1-12 Xprint - the X11 print system (bin

Versions of packages xprint-common recommends:
ii  xfonts-base   6.8.2.dfsg.1-7 standard fonts for X

-- debconf information:
* xprint-common/default_printer_resolution: 600


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330792: libgsl0-dev: floating point problems on alpha

2005-09-29 Thread Dirk Eddelbuettel
On Thu, Sep 29, 2005 at 03:26:18PM -0400, Clint Adams wrote:
 Package: libgsl0-dev
 Version: 1.7-1
 Severity: grave
 Justification: Steve Langasek said so.

He has a stack of of 'get out of jail free' cards I owe him, so I can't yell
that loud but ...

 bogofilter has been failing to build on alpha, and I am told to blame
 GSL.
 
 http://buildd.debian.org/build.php?pkg=bogofilterarch=alpha

... that looks like it failed over its 'make test' call.  What do gsl and I
have to do with that?  Swing the cluebat, please.

Dirk

-- 
Statistics: The (futile) attempt to offer certainty about uncertainty.
 -- Roger Koenker, 'Dictionary of Received Ideas of Statistics'


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#330604: inkscape does not start

2005-09-29 Thread Torsten Zirzlaff

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Wolfram.

On Thu, 29 Sep 2005, Wolfram Quester wrote:


Hi Torsten,


[...]


Since you are using alpha, this is probably a reintroduction of 64Bit
uncleanliness in inkscape. Hm, I hoped that this would be closed.
Can you provide a backtrace please? I had a look at the buildlog for
inkscape on alpha, but there are so many warnings that I'm lost.


   Hm, sicher kann ich einen backtrace machen. Nur die Frage was für eine 
Art von Backtrace? Im Anhang ein Backtrace aus dem gdb gestartet.

Vielleicht einfach mal mit -mieee übersetzen.

Ciao

Torsten
- -- 
s-mail: Neckarstr. 120 Torsten Zirzlaff

 70190 Stuttgart
 Germanye-mail :  [EMAIL PROTECTED]
phone: +49 711 285 19 40 [EMAIL PROTECTED]
mobil: +49 174 857 56 77
data:  +49 711 286 40 57/9

+-+
|  The shortest unit of time in the universe is the New York Second, defined  |
|  as the period of time between the traffic lights turning green and the cab |
|  behind you honking. -- Terry Pratchett 'Lords and Ladies'  |
+-+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iQEVAwUBQzw9uFqurtge6dVZAQJPxwf9H9zST9fvXX7p50nkxYstzIwHknNvpZcZ
fXrmhHoCH34SfLEUd54vXzPdysazTVL5aVra6L8nuPXb0OvwDmSDgqXKyeMRyi9b
DWNCkezPACDv0tJQn2h/QDi+PSz6Dwf53ji0/SuCFOuuXfc6mg7E1tl+762b7hIO
PLIFNAA0yQWb/gVmIYUsSEDNry8rbzmMt6RiRNaYHdDHD1Gi5SkBRo30mADi9wyf
quqj0OYAuM2LNRpGehYuVKUDrEA2vMytMECbM4ONpj4/Dj5GCWXlc4wMIDbmSL1P
Heks/tzAXdBqWFTBzsOYMVGMFqqDDgBKfBGvwRVm8lq2G1XCGeMMbg==
=TEvL
-END PGP SIGNATURE-
Program received signal SIGFPE, Arithmetic exception.
[Switching to Thread 16384 (LWP 1928)]
0x0001204db62c in Shape::initialiseEdgeData ()
(gdb) bt
#0  0x0001204db62c in Shape::initialiseEdgeData ()
#1  0x000120500a10 in Shape::ConvertToShape ()
#2  0x0001201fdca0 in refresh_offset_source ()
#3  0x00012020c6bc in sp_shape_set_shape ()
#4  0x0001201fcb38 in refresh_offset_source ()
#5  0x0001201f8110 in SPObject::updateDisplay ()
#6  0x0001201e4e50 in sp_item_group_item_list ()
#7  0x0001201f8110 in SPObject::updateDisplay ()
#8  0x0001201e4e50 in sp_item_group_item_list ()
#9  0x00012020b238 in sp_root_get_type ()
#10 0x0001201f8110 in SPObject::updateDisplay ()
#11 0x00012019909c in sp_document_ensure_up_to_date ()
#12 0x0001203dac0c in sp_icon_doc_icon ()
#13 0x0001203db338 in sp_icon_doc_icon ()
#14 0x02791adc in _gtk_marshal_BOOLEAN__BOXED ()
   from /usr/lib/libgtk-x11-2.0.so.0
#15 0x0200013176e0 in g_cclosure_new_swap ()
   from /usr/lib/libgobject-2.0.so.0
#16 0x020001318144 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#17 0x02000132e0b8 in g_signal_stop_emission ()
   from /usr/lib/libgobject-2.0.so.0
#18 0x02000132f804 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
#19 0x0200013300b4 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#20 0x028cd744 in gtk_widget_activate ()
   from /usr/lib/libgtk-x11-2.0.so.0
#21 0x026d7a40 in gtk_container_propagate_expose ()
   from /usr/lib/libgtk-x11-2.0.so.0
#22 0x02865508 in gtk_toggle_button_get_inconsistent ()
   from /usr/lib/libgtk-x11-2.0.so.0
#23 0x02791adc in _gtk_marshal_BOOLEAN__BOXED ()
   from /usr/lib/libgtk-x11-2.0.so.0
#24 0x0200013176e0 in g_cclosure_new_swap ()
   from /usr/lib/libgobject-2.0.so.0
#25 0x020001318144 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#26 0x02000132e0b8 in g_signal_stop_emission ()
   from /usr/lib/libgobject-2.0.so.0
#27 0x02000132f804 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
#28 0x0200013300b4 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#29 0x028cd744 in gtk_widget_activate ()
   from /usr/lib/libgtk-x11-2.0.so.0
#30 0x026d7a40 in gtk_container_propagate_expose ()
   from /usr/lib/libgtk-x11-2.0.so.0
#31 0x0268471c in gtk_box_reorder_child ()
   from /usr/lib/libgtk-x11-2.0.so.0
#32 0x026d4fc0 in gtk_container_forall ()
   from /usr/lib/libgtk-x11-2.0.so.0
#33 0x026d765c in gtk_container_get_focus_hadjustment ()
   from /usr/lib/libgtk-x11-2.0.so.0
#34 0x02791adc in _gtk_marshal_BOOLEAN__BOXED ()
   from /usr/lib/libgtk-x11-2.0.so.0
#35 0x0200013176e0 in g_cclosure_new_swap ()
   from /usr/lib/libgobject-2.0.so.0
#36 0x020001318144 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#37 0x02000132e0b8 in g_signal_stop_emission ()
   from /usr/lib/libgobject-2.0.so.0
#38 0x02000132f804 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
#39 0x0200013300b4 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#40 

Processed: Fixed in NMU of krecord 1.16-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327166 + fixed
Bug#327166: krecord: not yet kde 3.4.2 compatible
Tags were: patch pending sid
Bug#327941: krecord: uninstallable; needs rebuild for the Qt/KDE transition
Tags added: fixed

 tag 327941 + fixed
Bug#327941: krecord: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: fixed patch pending sid
Bug#327166: krecord: not yet kde 3.4.2 compatible
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed: Fixed in NMU of imgseek 0.8.5-1.1

2005-09-29 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tag 327936 + fixed
Bug#327936: imgseek: uninstallable; needs rebuild for the Qt/KDE transition
Tags were: patch pending sid
Tags added: fixed

 quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#304260: marked as done (lilo ignores failures on upgrade, leaving the system silently unbootable)

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 13:48:06 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#304260: fixed in lilo 1:22.6.1-7
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 11 Apr 2005 23:30:03 +
From [EMAIL PROTECTED] Mon Apr 11 16:30:03 2005
Return-path: [EMAIL PROTECTED]
Received: from mailgate1.uni-kl.de [131.246.120.5] 
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DL8Ly-0007NN-00; Mon, 11 Apr 2005 16:30:02 -0700
Received: from debian.localnet (rotes255.wohnheim.uni-kl.de [131.246.178.65])
by mailgate1.uni-kl.de (8.13.1/8.13.1) with ESMTP id j3BNTxTx018279;
Tue, 12 Apr 2005 01:29:59 +0200
Received: from inet by debian.localnet with local (Exim 4.50)
id 1DL8Lu-0006It-U9; Tue, 12 Apr 2005 01:29:58 +0200
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Eduard Bloch [EMAIL PROTECTED]
To: Debian Bug Tracking System [EMAIL PROTECTED]
Subject: Fatal: LVM_GET_IOP_VERSION failed on /dev/lvm
X-Mailer: reportbug 3.9
Date: Tue, 12 Apr 2005 01:29:58 +0200
Message-Id: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: lilo
Version: 1:22.6.1-6
Severity: grave

Hello, trying to update to the Ubuntu (also tried with Sid version),
lilo fails on two points where the Woody version worked just fine.
The first is a minor issue: for (bogus) redundancy reasons, two harddisks were
declared in lilo.conf and mapped to bios=0x80. However, the new version just
forbids that for no reason. This problem is already reported in another bug
report.

Second, and the most annoying: it fails to work with /boot on a
LVM-over-Raid1. Woody version (downgraded) works 1a, but Ubuntu and Sid
versions exit with the errors listed below. It should also be mentioned that
there is no /dev/lvm, the group is called sys and the root volume is
/dev/sys/boot, mounted as /boot.

And the final problem is: the upgrade does NOT FAIL (thus the severity). Yes,
the boot loader has been fscked up and I did not notice it before the next
boot and it was not fun to get a recent KNOPPIX for this box :(

LILO version 22.6.1, Copyright (C) 1992-1998 Werner Almesberger
Development beyond version 21 Copyright (C) 1999-2004 John Coffman
Released 17-Nov-2004, and compiled at 22:18:56 on Mar 12 2005
Debian GNU/Linux

raid_setup returns offset =   ndisk = 0
 BIOS   VolumeID   Device
Reading boot sector from /dev/sda
pf:  dev=0800  id=100F59DC  name=/dev/scsi/host0/bus0/target0/lun0/disc
bios_dev:  device 0800
bios_dev:  masked device 0800, which is /dev/scsi/host0/bus0/target0/lun0/disc
bios_dev: geometry check found 0 matches
bios_dev: (0x81)  vol-ID=29014D44  *PT=08078E28
bios_dev: (0x80)  vol-ID=100F59DC  *PT=08078DE0
bios_dev: PT match found 2 matches (0x80)
bios_dev: S/N match found 1 match (0x80)
Warning: Kernel  BIOS return differing head/sector geometries for device 0x80
Kernel: 35044 cylinders, 64 heads, 32 sectors
  BIOS: 1024 cylinders, 255 heads, 63 sectors
pf:  dev=0810  id=29014D44  name=/dev/scsi/host0/bus0/target1/lun0/disc
bios_dev:  device 0810
bios_dev:  masked device 0810, which is /dev/scsi/host0/bus0/target1/lun0/disc
bios_dev: geometry check found 0 matches
bios_dev: (0x81)  vol-ID=29014D44  *PT=08078E28
bios_dev: (0x80)  vol-ID=100F59DC  *PT=08078DE0
bios_dev: PT match found 2 matches (0x80)
bios_dev: S/N match found 1 match (0x81)
Warning: Kernel  BIOS return differing head/sector geometries for device 0x81
Kernel: 35044 cylinders, 64 heads, 32 sectors
  BIOS: 1024 cylinders, 255 heads, 63 sectors
pf_hard_disk_scan: ndevs=2
  0800  100F59DC  /dev/scsi/host0/bus0/target0/lun0/disc
  0810  29014D44  /dev/scsi/host0/bus0/target1/lun0/disc
Resolve invalid VolumeIDs
Resolve duplicate VolumeIDs
  0800  100F59DC  /dev/scsi/host0/bus0/target0/lun0/disc
  0810  29014D44  /dev/scsi/host0/bus0/target1/lun0/disc
device codes (user assigned pf) = 1
device codes (user assigned) = 1
device codes (BIOS assigned) = 3
device codes (canonical) = 3
bios_dev:  device 0800
bios_dev:  masked device 0800, which is /dev/scsi/host0/bus0/target0/lun0/disc
bios_dev: geometry check found 0 matches
bios_dev: (0x81)  vol-ID=29014D44  

Bug#330753: marked as done (gtk+2.0-directfb: FTBFS: Missing Build-Depends on 'dbs')

2005-09-29 Thread Debian Bug Tracking System
Your message dated Thu, 29 Sep 2005 13:47:34 -0700
with message-id [EMAIL PROTECTED]
and subject line Bug#330753: fixed in gtk+2.0-directfb 2.0.9.2-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--
Received: (at submit) by bugs.debian.org; 29 Sep 2005 17:20:23 +
From [EMAIL PROTECTED] Thu Sep 29 10:20:23 2005
Return-path: [EMAIL PROTECTED]
Received: from c214041.adsl.hansenet.de (localhost.localdomain) [213.39.214.41] 
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EL250-0008Pc-00; Thu, 29 Sep 2005 10:20:23 -0700
Received: from aj by localhost.localdomain with local (Exim 4.52)
id 1EL24z-0007M1-B1; Thu, 29 Sep 2005 19:20:21 +0200
To: Debian Bug Tracking System [EMAIL PROTECTED]
From: Andreas Jochens [EMAIL PROTECTED]
Subject: gtk+2.0-directfb: FTBFS: Missing Build-Depends on 'dbs'
Message-Id: [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 19:20:21 +0200
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: gtk+2.0-directfb
Version: 2.0.9.2-1
Severity: serious
Tags: patch

When building 'gtk+2.0-directfb' in a clean 'unstable' chroot,
I get the following error:


 debian/rules clean
debian/rules:30: /usr/share/dbs/dbs-build.mk: No such file or directory
make: *** No rule to make target `/usr/share/dbs/dbs-build.mk'.  Stop.

Please add the missing Build-Depends on 'dbs' to debian/control.

Regards
Andreas Jochens

diff -urN ../tmp-orig/gtk+2.0-directfb-2.0.9.2/debian/control ./debian/control
--- ../tmp-orig/gtk+2.0-directfb-2.0.9.2/debian/control 2005-09-29 
17:13:39.0 +
+++ ./debian/control2005-09-29 17:13:35.0 +
@@ -2,7 +2,7 @@
 Section: libs
 Priority: optional
 Maintainer: Alastair McKinstry [EMAIL PROTECTED]
-Build-Depends: debhelper ( 4.0.0), libgtk2.0-dev, libdirectfb-dev (= 
0.9.22), autoconf
+Build-Depends: debhelper, dbs, libgtk2.0-dev, libdirectfb-dev (= 0.9.22), 
autoconf
 Standards-Version: 3.6.2
 
 Package: libgtk+2.0-directfb0-udeb

---
Received: (at 330753-close) by bugs.debian.org; 29 Sep 2005 20:55:03 +
From [EMAIL PROTECTED] Thu Sep 29 13:55:03 2005
Return-path: [EMAIL PROTECTED]
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EL5JW-0004Zf-00; Thu, 29 Sep 2005 13:47:34 -0700
From: Alastair McKinstry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#330753: fixed in gtk+2.0-directfb 2.0.9.2-2
Message-Id: [EMAIL PROTECTED]
Sender: Archive Administrator [EMAIL PROTECTED]
Date: Thu, 29 Sep 2005 13:47:34 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: gtk+2.0-directfb
Source-Version: 2.0.9.2-2

We believe that the bug you reported is fixed in the latest version of
gtk+2.0-directfb, which is due to be installed in the Debian FTP archive:

gtk+2.0-directfb_2.0.9.2-2.diff.gz
  to pool/main/g/gtk+2.0-directfb/gtk+2.0-directfb_2.0.9.2-2.diff.gz
gtk+2.0-directfb_2.0.9.2-2.dsc
  to pool/main/g/gtk+2.0-directfb/gtk+2.0-directfb_2.0.9.2-2.dsc
libgtk+2.0-directfb0-udeb_2.0.9.2-2_i386.udeb
  to pool/main/g/gtk+2.0-directfb/libgtk+2.0-directfb0-udeb_2.0.9.2-2_i386.udeb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alastair McKinstry [EMAIL PROTECTED] (supplier of updated gtk+2.0-directfb 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Thu, 29 Sep 2005 20:16:32 +0100
Source: gtk+2.0-directfb
Binary: libgtk+2.0-directfb0-udeb
Architecture: source i386
Version: 2.0.9.2-2
Distribution: unstable
Urgency: low
Maintainer: Alastair McKinstry [EMAIL PROTECTED]

Bug#330474: mutt/2096: eats mail by setting content-length to zero in mboxes

2005-09-29 Thread New Mutt PR
Number: 2096
Notify-List:[EMAIL PROTECTED]
Category:   mutt
Synopsis:   eats mail by setting content-length to zero in mboxes
Confidential:   no
Severity:   critical
Priority:   high
Responsible:mutt-dev
State:  open
Keywords:   
Class:  sw-bug
Submitter-Id:   net
Arrival-Date:   Thu Sep 29 23:24:29 +0200 2005
Originator: Branden Robinson
Release:CVS 2005-09-24
Organization:
Environment:
Description:
This is Debian Bug#330474, filed at severity critical, which you can read in 
http://bugs.debian.org/330474. In summary:

- reproducable on, at least, powerpc (but not on i386)
- loosing mail occurs in two steps:
  - a mailbox is opened, and then the Content-Length of its messages is set to 0
  - the mailbox is reopened; if there's modifications to it, the messages with 
Content-Lenght set to 0 get truncated

Se the How-To-Repeat section.
How-To-Repeat:
Any mbox should do, but I've used this one-message-only one: 
http://people.debian.org/~adeodato/tmp/2005-09-29/mutt-eating-mail/mbox.gz

mutt -f mbox
ENTER
qq
cat mbox
# notice the Content-Length header
mutt -f mbox
wn
q
cat mbox
Fix:
Reverting the introduction of fseeko/ftello fixes 
(http://people.debian.org/~adeodato/tmp/2005-09-29/mutt-eating-mail/revert-this.diff),
 but it would be better to investigate and come with a real fix.
Add-To-Audit-Trail:

Unformatted:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



  1   2   >