Bug#496783: RM: newsgate -- RoQA; insecure, unstable, orphaned, limited archs, free alternatives, low popcon

2008-08-27 Thread Thijs Kinkhorst
Package: ftp.debian.org Hi, Please remove newsgate from unstable, as result of the combination of the following factors: * It's riddled with insecure tempfile usage; * As the documentation indicates the software is quite unfinished; * Most recent upstream release 1996; * Package has been up

Bug#429914: OpenFire in Debian : issue with mina ?

2008-08-27 Thread Damien Raude-Morvan
Hi, As you may have seen on my comment, I have a problem compiling openfire with debian mina package because of a non-existing getEventQueueSize method, I pasted the error message at the end of this mail. I checked out various branches of mina directly from svn and never found this method,

Bug#495085: [Pkg-samba-maint] Bug#495085: smbfs: *** glibc detected *** free(): invalid pointer: 0x08050c0a ***

2008-08-27 Thread Benoit Panizzon
Hi Christian Bug you're right, I could download the etchandhalf kernel sources and try again with that kernel... The point is mostly confirming that the bug is also there with the stock Debian kernel. As always with things related to cifs stuff, problems may lie in the userland utilities

Bug#496786: samba-common: net rpc shutdown don't work

2008-08-27 Thread Vladimir Stavrinov
Package: samba-common Version: 2:3.2.1-1 Severity: normal The scripts with this command were worked for a years, but now failed and report: Shutdown of remote machine failed result was: WERR_OK I don't know starting from what version this problem arise, but it is result of one of upgrades. At

Bug#496785: Openclipart needs more packages to work correctly

2008-08-27 Thread Carlos Izquierdo
Package: inkscape Version: 0.46-2 Severity: minor The Import From Open Clip Art Library funcion in Inkscape needs the package libgnomevfs2-extra to work (else it fails with the message: Failed to receive the Open Clip Art Library RSS feed). This bug is already documented in Ubuntu's Launchpad:

Bug#496784: Bitstream Vera Sans is the default font, but it may not be installed

2008-08-27 Thread Carlos Izquierdo
Package: inkscape Version: 0.46-2 Severity: minor Inkscape uses Bitstream Vera Sans as its default font (I don't know if this is taken from another configuration file or is specific to Inkscape). If the package ttf-bitstream-vera is not installed, a lot of error messages like this get

Bug#496746: pubkey auth non-functional on testing?

2008-08-27 Thread Thomas Liske
Hi, Colin Watson schrieb: Please use -vvv when reporting bugs. The lower the debug level, the larger the responsible region of code tends to be. In this case I need a bit more in order to help. [EMAIL PROTECTED]:~$ slogin -vvv localhost OpenSSH_5.1p1 Debian-2, OpenSSL 0.9.8g 19 Oct 2007

Bug#302750: [Help] Re: feh: alpha blending (e.g., thumbnail under pointer hilite) not working

2008-08-27 Thread Andreas Tille
Hi Maciej, you reported the problem described above a long time ago and got not response. I took over the feh package now and just would like to say sorry for leaving your problem ignored in the first place. I verified that this problem exists on recent testing with the current feh version.

Bug#496427: confirmed to be present

2008-08-27 Thread Thijs Kinkhorst
tags 496427 confirmed thanks Indeed present, a simple grep yields a number of different results already, see below. As the code contains many instances of different things written to /tmp, it may make sense to resolve that by creating one private working dir securely, and then prefixing that

Bug#496787: RFA: gnade -- GNat Ada Database Environment

2008-08-27 Thread Ludovic Brenta
Package: wnpp Severity: wishlist GNADE is a complete database development environment for Ada programmers. It consists of: a. A Thin binding to the ODBC API. With this API, you can write programs that query any ODBC-compliant database server. b. Thin bindings to some specific database servers

Bug#496371: [Pkg-lustre-maintainers] Bug#496371: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Patrick Winnertz
Hello Dmitry, Thanks for your test, but atm I've some problems to fix this issue for lustre- tests In some packages I've discovered scripts with errors which may be used by a user for damaging important system files or user's files. For example if a script uses in its work a temp file which is

Bug#496277: Confirmation that downgrading libxml2 is valid workaround

2008-08-27 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I was hit by this bug as well, and can confirm that downgrading libxml2 works: libxml2 2.6.32.dfsg-2+lenny1 - 2.6.32.dfsg-1 - Jonas - -- * Jonas Smedegaard - idealist og Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/

Bug#470279: lmbench: writes to /usr

2008-08-27 Thread Thijs Kinkhorst
tags 470279 moreinfo thanks Hi, during the configuration of the benchmark, config-run writes to /usr. This is a violation of the FHS, and means that lmbench cannot be ran when /usr is mounted read-only, such as running from a live CD. That would be a serious bug if that would be the

Bug#496433: this is indeed present

2008-08-27 Thread Thijs Kinkhorst
tags 496433 confirmed thanks Hi, Indeed, several times the file /tmp/audiolink.db.tmp gets used in code/audiolink. This is probably easily fixable through using the Perl::Temp module and its mktemp() funtion to create a secure file once, (re)use that on the several needed occasions and remove

Bug#496368: intent to NMU

2008-08-27 Thread Nico Golde
Hi, I'm going to upload an NMU for this one. Patch attached and archived on: http://people.debian.org/~nion/nmu-diff/sgml2x-1.0.0-11.1_1.0.0-11.2.patch Cheers Nico -- Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is

Bug#481134: Please hint poppler-data for lenny inclusion

2008-08-27 Thread Hideki Yamane
On Sun, 24 Aug 2008 08:32:21 +0200 Christian Perrier [EMAIL PROTECTED] wrote: Also don't forget about suggesting to add it to the CJK languages -desktop tasks in tasksel, if it is that important. I think that non-free packages can be added there... That's very very helpful for our users!

Bug#496419: issue is present, code runs as root

2008-08-27 Thread Thijs Kinkhorst
tags 496419 confirmed thanks Hi, A simple grep revealed a lot of tempfile issues here, see below. As far as I understand it, the code runs as root. This makes the issue quite serious. Please make sure this is fixed before lenny is released. As several different temp files are used insecurely,

Bug#481134: Please hint poppler-data for lenny inclusion

2008-08-27 Thread Hideki Yamane
On Sun, 24 Aug 2008 19:45:13 +0200 Luk Claes [EMAIL PROTECTED] wrote: unblocked Great thanks Luk! But, verrry sooorry, I've updated this poppler-data package before read this mail... changelog is below, 1 bug fix and trivial changes. poppler-data (0.2.0-2) unstable; urgency=low *

Bug#496788: RFP: cciss_vol_status -- CCISS RAID Drive and Volume Status Utility

2008-08-27 Thread Christian Hofstaedtler
Package: wnpp Severity: wishlist * Package name: cciss_vol_status Version : 1.0.3 Upstream Author : Stephen M. Cameron [EMAIL PROTECTED] * URL : http://cciss.sourceforge.net/ * License : GPL Programming Lang: C Description : CCISS RAID Drive and Volume

Bug#496582: gnome-app-install: Application hangs while searching for a package

2008-08-27 Thread Julian Andres Klode
reassign 496582 librsvg2-2 2.22.2-2 severity 496582 important Am Mittwoch, den 27.08.2008, 00:13 +0200 schrieb Jose Pablo Ferrero: The problem occurs when showing some icons (i.e. elisa.svg). Trying to open elisa.svg (/usr/share/app-install/icons/) with gpaint or gimp cause a segmentation

Bug#496790: astyle: Error in manpage

2008-08-27 Thread Martín Ferrari
Package: astyle Version: 1.22-1 Severity: minor Tags: patch The manage says: -V, --convert-tabs Convert tabs to spaces. But astyle --help (and actual behaviour) is: --version OR -V Print version number. It took me a while to understand why astyle was not doing something

Bug#496789: passwd(1) still describes the old behaviour of --lock

2008-08-27 Thread Ron
Package: passwd Version: 1:4.1.1-4 Severity: normal Hi, The passwd man page currently says: -l, --lock Lock the password of the named account. This option disables a password by changing it to a value which matches no possible encrypted value (it adds a ´!´ at the

Bug#496791: geany: Copy text with middle mouse button doesn't work

2008-08-27 Thread Torquil Macdonald Sørensen
Package: geany Version: 0.14-1 Severity: normal If I select text with the left mouse button, and then middle click somewhere else, the selected text is not copied. This works in all other programs I have. To clarify, I'm talking about copying text within geany, from and to the same text

Bug#496371: [Pkg-lustre-maintainers] Bug#496371: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Stephen Gran
This one time, at band camp, Patrick Winnertz said: I guess the part which is critical is this one: tmpfile=$(mktemp /tmp/iozone.XX) ---snip-- while date; do LOOP=`expr $LOOP + 1` echo Test #$LOOP iozone $VERIFY $ODIR -r $REC -i 0 -i 1 -f

Bug#496371: [Pkg-lustre-maintainers] Bug#496371: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Dmitry E. Oboukhov
SG tmpfile=$(mktemp /tmp/iozone.XX) use 'mktemp -t iozone.XX' instead 'mktemp /tmp/iozone.XX' -- ... mpd paused: Manowar - Gloves of Metal . ''`. Dmitry E. Oboukhov : :’ : [EMAIL PROTECTED] `. `~’ GPGKey: 1024D / F8E26537 2006-11-21 `- 1B23 D4F8 8EC0 D902 0555 E438

Bug#496792: libsdl-perl: segfaults at perl exit

2008-08-27 Thread Jarek Kamiński
Package: libsdl-perl Version: 1.20.3dfsg-3+b1 Severity: minor Hi! [EMAIL PROTECTED] ~]% perl -MSDL -e1 zsh: segmentation fault perl -MSDL -e1 The segfault occurs after all perl code is executed. I can run for example frozen-bubble, perl segfaults after pressing escape and exiting from the

Bug#496743: openbox: action GrowToEdge* grows too much when windows are sid by side

2008-08-27 Thread Nico Golde
Hi Nicolas, * Nicolas Évrard [EMAIL PROTECTED] [2008-08-27 13:52]: This might not be a bug but it feels like it. When two windows are side by side the actions GrowToEdge* makes the selected window grow to the edge of the other window (the window on the left with a GrowToEast will go to

Bug#483337: intent to NMU

2008-08-27 Thread Nico Golde
Hi, a patch to fix this is attached and archived on: http://people.debian.org/~nion/nmu-diff/mt-daapd-0.9~r1696-1.3_0.9~r1696-1.4.patch Kind regards Nico -- Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13

Bug#496772: newsbeuter: depends on a nonexistent package

2008-08-27 Thread Nico Golde
Hi Riccardo, * Riccardo Stagni [EMAIL PROTECTED] [2008-08-27 13:53]: [...] (I filed a similar bugreport against libmrss0. If you think it's a fault in libnxml, please reassign/merge as appropriate) I reassigned this one back to newsbeuter as it is only newsbeuters fault calling

Bug#496349: libfcgi-perl: download link in copyright file is broken

2008-08-27 Thread gregor herrmann
On Mon, 25 Aug 2008 09:42:19 +0200, Toni Mueller wrote: I don't think the severity is warranted; debian/copyrights lists the place where the upstream sources were fetched at the time of packaging. After all web sites are in flux all the time, that's why we distribute them through our

Bug#496743: openbox: action GrowToEdge* grows too much when windows are sid by side

2008-08-27 Thread Nicolas Évrard
* Nico Golde [2008-08-27 15:29 +0200]: Hi Nicolas, * Nicolas Évrard [EMAIL PROTECTED] [2008-08-27 13:52]: This might not be a bug but it feels like it. When two windows are side by side the actions GrowToEdge* makes the selected window grow to the edge of the other window (the window on the

Bug#496762: newsbeuter: please provide a next-unread for only unread within the same feed

2008-08-27 Thread Nico Golde
severity 496762 wishlist tags 496762 upstream thanks Hi Gerfried, * Gerfried Fuchs [EMAIL PROTECTED] [2008-08-27 13:52]: Package: newsbeuter Version: 0.9.1-1 Severity: minor I downgraded the severity to wishlist as this is rather a feature request than a bug. Currently n goes to next

Bug#496771: Deb AMD64 eats huge amounts of memory (and babies?) because of badly built libs

2008-08-27 Thread Lennart Sorensen
On Wed, Aug 27, 2008 at 12:50:45PM +0200, Gustaf R??ntil?? wrote: Package: general Version: AMD64 This is basically a debian AMD64-version of the bug report for ubuntu AMD64 bug 24691 [1]. The problem is (seems to be) that a lot of libraries are built with alignment above 2**3. Most of

Bug#495917: openssh-client: unable to connect to Netscreen Devices with version 1:5.1p1-2

2008-08-27 Thread Dave Holland
Hello, A colleague tells me: | There appears to be a bug in XOS switches that mean that if you try and | ssh to them from a machine running openssh 4.7 or higher (this is the | default on lenny) then you will fail to connect with a message channel | 0: open failed: resource shortage: Channel

Bug#482140: (pas de sujet)

2008-08-27 Thread 01
I experienced the same problem with my notebook. Using Etch Stable (installed from the CD), then upgrading to Lenny (to get my Intel GMA965 chipset working well with 3D). I've got a 32 bits Intel architecture (CPU = pentium M) I solved the problem by : - editing my /etc/apt/sources.list to

Bug#481134: Please hint poppler-data for lenny inclusion

2008-08-27 Thread Christian Perrier
Hideki Yamane a écrit : So I and other Japanese Debian developer/maintainer/package maintainer/ users want poppler-data package to there, the CJK languages-desktop tasks in tasksel. Please consider that. The easiest way to have this to happen is by sending a wishlist bug report against

Bug#495085: [Pkg-samba-maint] Bug#495085: smbfs: *** glibc detected *** free(): invalid pointer: 0x08050c0a ***

2008-08-27 Thread Christian Perrier
Benoit Panizzon a écrit : Dowloaded the 2.6.24 debian tree, built it with make-kpkg... Problem persists. I also did apt-get install --reinstall smbfs and libc6 to be sure to have the right versions. Problem persists. Any more suggestions? My suggestion was not really meant to solve

Bug#481134: Please hint poppler-data for lenny inclusion

2008-08-27 Thread Deng Xiyue
在 2008-08-27三的 15:58 +0200,Christian Perrier写道: Hideki Yamane a écrit : So I and other Japanese Debian developer/maintainer/package maintainer/ users want poppler-data package to there, the CJK languages-desktop tasks in tasksel. Please consider that. The easiest way to have this

Bug#496395: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Moritz Muehlenhoff
tags 496395 confirmed patch thanks Dmitry E. Oboukhov wrote: Package: apertium Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts of packages (marked as executable)

Bug#496794: utime callback is deprecated

2008-08-27 Thread Goswin von Brederlow
Package: unionfs-fuse Version: 0.21-2 Severity: wishlist Tags: patch The utime callback only allows for second resolution and is deprecated. The utimens callback allows for microsecond resolution. MfG Goswin -- System Information: Debian Release: lenny/sid APT prefers unstable APT

Bug#496743: openbox: action GrowToEdge* grows too much when windows are sid by side

2008-08-27 Thread Nico Golde
Hi Nicolas, * Nicolas Évrard [EMAIL PROTECTED] [2008-08-27 16:11]: * Nico Golde [2008-08-27 15:29 +0200]: * Nicolas Évrard [EMAIL PROTECTED] [2008-08-27 13:52]: This might not be a bug but it feels like it. When two windows are side by side the actions GrowToEdge* makes the selected window

Bug#417142: NMU for websvn

2008-08-27 Thread Thijs Kinkhorst
Hi Pierre, This RC bug has now been open for two weeks. I'm uploading an NMU to the delayed-5 queue according to the attached patch. I hope this helps to keep websvn in good shape in lenny. cheers, Thijs diff -u websvn-2.0/debian/changelog websvn-2.0/debian/changelog ---

Bug#496402: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Moritz Muehlenhoff
severity 496402 normal thanks On Sun, Aug 24, 2008 at 10:05:29PM +0400, Dmitry E. Oboukhov wrote: Package: aegis Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Micha Lenk
Hi Athanasius, Athanasius wrote: Package: gnucash Version: 2.2.6-1 Recently GNUcash on my Debian/lenny (testing) system stopped running. If I run it from an xterm I see: gnc.bin-Message: main: binreloc relocation support was disabled at configure time. 3:2008/08/27

Bug#496795: php5: Segfaults on infinite recursion

2008-08-27 Thread Gergely Nagy
Package: php5 Version: 5.2.6-2 Severity: normal While fiddling around with one project, I accidentally made an infinite recursion, and PHP went away with a segmentation fault. A few minutes later, I could reduce the problem to the following snippet: ?php function foo () { foo (); } foo (); ?

Bug#496371: [Pkg-lustre-maintainers] Bug#496371: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Stephen Gran
This one time, at band camp, Patrick Winnertz said: Thanks Stephen, tmpfile=$(mktemp /tmp/iozone.XX) I know that this way it is possible. But as the user should find the log afterwards I would prefer to use /tmp/iozone.log or something else, nothing random. But as I wrote in my

Bug#496796: [paraview] Saving an animation to .avi fails

2008-08-27 Thread Ondrej Certik
Package: paraview Version: 3.2.3-2 Severity: normal --- Please enter the report below this line. --- When I create several .vtk files, paraview allows them to load at once and then one can click the play button and it shows the animation. This works fine. However, when doing save animation and

Bug#496619: seconded

2008-08-27 Thread Philippe MONROUX
seconded -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#496798: ImageJ: Run script does not allow to change maximum size of JVM heap

2008-08-27 Thread Stefan Heim
Package: imagej Version: 1.40a-1 Severity: normal Tags: patch The run script provided with the ImageJ package (/usr/bin/imagej) does not allow to change the maximum size of the JVM heap the program will use on 32 bit architectures via the -x option as documented in the man page. When using the

Bug#496797: dhcp3-relay init gets damaged by xen-utils-common package

2008-08-27 Thread Fabian Schulte
Package: dhcp3-relay Version: 3.0.4-13 Severity: minor Hello, if you install the dhcp3-relay package version 3.0.4-13 along with the xen-utils-common package version 3.0.3-0-2 you will probably have: ~# ls -l /etc/rc*.d/*dhcp3-relay lrwxrwxrwx 1 root root 21 Aug 27 14:28

Bug#496799: imp4: cyrus.php file missing

2008-08-27 Thread pmunoz
Package: imp4 Version: 4.2-1 Severity: grave Justification: renders package unusable The file /usr/share/horde3/imp/lib/Quota/cyrus.php has been removed from horde3 (checked hord3 CVS website, stating courier.php and cyrus.php have been merged somehow). However some imp functions still use

Bug#494422: It IS a bug somewhere that installing 2 bootloader packages breaks booting

2008-08-27 Thread Robert Millan
On Wed, Aug 27, 2008 at 10:16:40AM +0200, Jonas Smedegaard wrote: 2) bootloader packages conflict with each other (bad - leaves a moment with *no* bootloader if switching) Not that bad IMHO. Not having a bootloader package is _not_ the same as not having a bootloader. GRUB (both Legacy

Bug#495154: Processed: RM: tmsnc/testing -- ROM; project discontinued upstream

2008-08-27 Thread Thomas Viehmann
Hi Miriam, Debian Bug Tracking System wrote: Bug#495154: tmsnc: Package should not go into stable Changed Bug title to `RM: tmsnc/testing -- ROM; project discontinued upstream' from `tmsnc: Package should not go into stable'. based on the bug report, it looks like the release team would

Bug#495968: [gpicview] security RC bugs

2008-08-27 Thread Nico Golde
Hi, [2] [ 2019485 ] gpicview ask_before_save is ignored with LIBJPEG [3] [ 2019492 ] gpicview ask_before_save is ignored if auto_save_rotated those are no security bugs, there is no way for another user to exploit this. Those are just normal application bugs. Kind regards Nico -- Nico Golde -

Bug#491655: how about fixing this in a Debian revision / NMU

2008-08-27 Thread Thomas Viehmann
Hi, Luk Claes wrote: Yes, I think it's worth fixing. as not much seems to have happened in for a week (particularly not on Friday), I'll be aiming at a NMU on Saturday. That should also give the maintainers some breathing-room to consider what else they're planning to do. Kind regards T. --

Bug#496800: dependency problem between mono and mono-common and mono-jit

2008-08-27 Thread F. Luteijn
Package: mono Version: 1.2.5.1-1+lenny1 Severity: normal Mono is dependent on mono-common (= 1.2.5.1-1+lenny1) and mono-jit (= 1.2.5.1-1+lenny1), but those packages are not available. Installing mono (and mono-dev also) will fail and installing mono-common or mono-jit will remove mono. --

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Athanasius
On Wed, Aug 27, 2008 at 04:19:49PM +0200, Micha Lenk wrote: Athanasius wrote: Package: gnucash Version: 2.2.6-1 Recently GNUcash on my Debian/lenny (testing) system stopped running. If I run it from an xterm I see: gnc.bin-Message: main: binreloc relocation support was disabled

Bug#495917: openssh-client: unable to connect to Netscreen Devices with version 1:5.1p1-2

2008-08-27 Thread Colin Watson
On Wed, Aug 27, 2008 at 02:51:08PM +0100, Dave Holland wrote: A colleague tells me: | There appears to be a bug in XOS switches that mean that if you try and | ssh to them from a machine running openssh 4.7 or higher (this is the | default on lenny) then you will fail to connect with a

Bug#491655: [Pkg-audacious-maintainers] Bug#491655: how about fixing this in a Debian revision / NMU

2008-08-27 Thread William Pitcock
On Wed, 2008-08-27 at 16:52 +0200, Thomas Viehmann wrote: Hi, Luk Claes wrote: Yes, I think it's worth fixing. as not much seems to have happened in for a week (particularly not on Friday), I'll be aiming at a NMU on Saturday. That should also give the maintainers some breathing-room to

Bug#494995: [uml-devel] Bug#494995: user-mode-linux: static build fails with multiple definition of `strrchr'

2008-08-27 Thread Jeff Dike
On Wed, Aug 27, 2008 at 09:04:29AM +0100, Graham Cobb wrote: On Tuesday 26 August 2008 21:20:12 Jeff Dike wrote: A symbol clash between libc and the kernel. Try this: ... The patch itself didn't apply for me (probably because I copy/paste'd it from the email) but making the change by

Bug#496802: ImageJ: New upstream release available

2008-08-27 Thread Stefan Heim
Package: imagej Version: 1.40a-1 Severity: wishlist Upstream has released version 1.41j of ImageJ, which contains some important bug fixes as well as new features. It is available from http://rsbweb.nih.gov/ij/upgrade/ij.jar Since one cannot use the Plugins-Utilities-Update ImageJ mechanism

Bug#496436: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Moritz Muehlenhoff
tags 496436 patch confirmed thanks Dmitry E. Oboukhov wrote: Package: gpsdrive-scripts Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts of packages (marked as

Bug#496801: ivtv-utils: Devices not numbered from 1

2008-08-27 Thread David Liontooth
Package: ivtv-utils Version: 1.2.0-1 Severity: minor /usr/share/doc/ivtv-utils/NEWS.Debian.gz has the entry, ivtv (0.6.0-1) * The IVTV devices have been renumbered starting with 1 instead of zero. i.e. Tuner 0 has become Tuner 1 etc. -- Ian Campbell [EMAIL PROTECTED] Wed, 22 Mar 2006

Bug#495154: Processed: RM: tmsnc/testing -- ROM; project discontinued upstream

2008-08-27 Thread Miriam Ruiz
2008/8/27 Thomas Viehmann [EMAIL PROTECTED]: Hi Miriam, Debian Bug Tracking System wrote: Bug#495154: tmsnc: Package should not go into stable Changed Bug title to `RM: tmsnc/testing -- ROM; project discontinued upstream' from `tmsnc: Package should not go into stable'. based on the bug

Bug#496803: util-vserver: system hang when shutting down host

2008-08-27 Thread Adam Borowski
Package: util-vserver Version: 0.30.216~r2772-1 Severity: grave Tags: patch Justification: causes non-serious data loss I'm afraid that /etc/init.d/util-vserver stop hangs if there is at least one guest running; it's usually called on host shutdown when it will block the whole system from

Bug#496410: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Dmitry E. Oboukhov
severity 496410 grave thanks SL So I don't think I've made a mistake here. You are mistake, see http://www.debian.org/Bugs/Developer.en.html#severities quote: grave makes the package in question unusable or mostly so, or causes data loss, or introduces a security hole allowing access

Bug#496804: ttf-indic-fonts: Non standard /etc/fonts/ directory usage.

2008-08-27 Thread Osamu Aoki
Package: ttf-indic-fonts Version: 1:0.5.4 Severity: normal I see followings under /etc/fonts/conf.d ttf-bengali-fonts.conf ttf-devanagari-fonts.conf ttf-gujarati-fonts.conf ttf-kannada-fonts.conf ttf-malayalam-fonts.conf ttf-oriya-fonts.conf ttf-punjabi-fonts.conf ttf-tamil-fonts.conf

Bug#429695: grub-efi: key combinations requiring ctrl do not work

2008-08-27 Thread Felix Zielcke
Hello, Marco from upstream just told me on IRC that this problem might have been fixed by apple already. So please make sure you're running the latest firmware version. In case it still happens, then please try out the patch from Robert

Bug#417142: NMU for websvn

2008-08-27 Thread Pierre Chifflier
On Wed, Aug 27, 2008 at 04:10:06PM +0200, Thijs Kinkhorst wrote: Hi Pierre, This RC bug has now been open for two weeks. I'm uploading an NMU to the delayed-5 queue according to the attached patch. I hope this helps to keep websvn in good shape in lenny. Hi Thijs, I'm merging your

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Micha Lenk
Hi Athanasius, Athanasius wrote: Can you please tell us the version of libgcrypt11 you have currently installed? (Run dpkg -l libgcrypt11 for this information). ii libgcrypt111.4.1-1LGPL Crypto library - runtime library (and checking dpkg -l libgcrypt\* that is the only

Bug#496800: [pkg-mono-group] Bug#496800: dependency problem between mono and mono-common and mono-jit

2008-08-27 Thread Jo Shields
On Wed, 2008-08-27 at 16:48 +0200, F. Luteijn wrote: Package: mono Version: 1.2.5.1-1+lenny1 Severity: normal Mono is dependent on mono-common (= 1.2.5.1-1+lenny1) and mono-jit (= 1.2.5.1-1+lenny1), but those packages are not available. Installing mono (and mono-dev also) will fail and

Bug#495917: openssh-client: unable to connect to Netscreen Devices with version 1:5.1p1-2

2008-08-27 Thread Dave Holland
On Wed, Aug 27, 2008 at 03:59:18PM +0100, Colin Watson wrote: Does the rather ugly patch attached to this mail help? The Extreme X450 XOS switches we have here (X450 and Black Diamond models) have this version banner: SSH-2.0-4.1.2 SSH Secure Shell Toolkit so I guess after this line +

Bug#496410: The possibility of attack with the help of symlinks in some Debian packages

2008-08-27 Thread Bastian Blank
severity 496410 important thanks On Wed, Aug 27, 2008 at 07:12:29PM +0400, Dmitry E. Oboukhov wrote: _or_ _causes_ _data_ _loss_ It does not cause data loss, the admin needs to execute it. And now stop bitching around. Bastian -- Superior ability breeds superior ambition. --

Bug#496805: f-prot-installer: F-prot-installer points to the wrong download location

2008-08-27 Thread Aniruddha
Package: f-prot-installer Version: 0.5.22 Severity: important f-prot-installer fails with the following error message: -- System Information: the following NEW packages will be installed: f-prot-installer 0 upgraded, 1 newly installed, 0 to remove and 215 not upgraded. Need to get

Bug#496806: RM: mono -- ROM; testing-security package obsolete causing problems

2008-08-27 Thread Jo Shields
Package: ftp.debian.org Hi, Please remove mono 1.2.5.1-1+lenny1 from security.debian.org. The package was rendered obsolete a long time ago. Whilst usually this wouldn't cause a problem, an obsolete metapackage (mono) is available only in testing-security (removed from the version in lenny) and

Bug#495154: Processed: RM: tmsnc/testing -- ROM; project discontinued upstream

2008-08-27 Thread Thomas Viehmann
retitle 495154 RM: tmsnc -- ROM; project discontinued upstream thanks Miriam Ruiz wrote: It would be better to remove it both from testing AND unstable. It makes no sense to keep maintaining it in Debian at all. Will do. Thanks for the quick reply! Kind regards T. -- Thomas Viehmann,

Bug#491655: [Pkg-audacious-maintainers] Bug#491655: how about fixing this in a Debian revision / NMU

2008-08-27 Thread Thomas Viehmann
William Pitcock wrote: I am not upload enabled at the moment, please proceed with the NMU. You might take a look at some of the other patches and see if they are worthwhile to include in the NMU too. If you can whip up a short MU for sponsoring, we could also go with that. Otherwise, I'd

Bug#496807: gnucash: silently removes main files while trying to save without lock

2008-08-27 Thread Bas Wijnen
Package: gnucash Version: 2.2.6-1 Severity: grave Justification: causes data loss I was trying to use gnucash over sshfs, to allow several machines to handle the same file. It complained that it was unable to get a lock, and so couldn't prevent simultaneous writes. This was no problem, because

Bug#491270: bug has been pending for three weeks

2008-08-27 Thread Thomas Viehmann
Hi, this (RC!) bug has been pending for three weeks now. Unless there are objections, I should think that August is a good month to have a fix uploaded and will see to that if noone else does. Kind regards T. -- Thomas Viehmann, http://thomas.viehmann.net/ -- To UNSUBSCRIBE, email to

Bug#496800: [pkg-mono-group] Bug#496800: dependency problem between mono and mono-common and mono-jit

2008-08-27 Thread Frans Luteijn
It is a fresh install without any old dependicies. When I select mono I don't expect such dependicy problems which cannot normally be solved. It should normally be build with the right version or it should not be in the repository. Met vriendelijke groet, Frans Luteijn. Xout Europe BV De

Bug#491655: [Pkg-audacious-maintainers] Bug#491655: how about fixing this in a Debian revision / NMU

2008-08-27 Thread William Pitcock
Hi, On Wed, 2008-08-27 at 17:40 +0200, Thomas Viehmann wrote: William Pitcock wrote: I am not upload enabled at the moment, please proceed with the NMU. You might take a look at some of the other patches and see if they are worthwhile to include in the NMU too. If you can whip up a

Bug#496747: xserver-xorg-video-ati: multi-head virtualsize and direct rendering not working with two different monitor resolutions

2008-08-27 Thread Brice Goglin
Philipp Neuser wrote: When you've got two monitores with different resoultion, the virtualsize is not correct. It's always the bigger one. You can only correct this, if you open a console and type xrandr --output VGA-0 --auto. You have to do this every time you login. As I said, please

Bug#496808: ruby1.8: DoS vulnerability in rexml parsing module

2008-08-27 Thread Frank Louwers
Package: ruby1.8 Version: 1.8.5-4etch2 Severity: grave Tags: security Justification: user security hole The rexml lib is vulnerable to a DoS attack. Please see http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/. I know there isn't an official patch yet (except the

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Micha Lenk
Hi Athanasius, Athanasius wrote: On Wed, Aug 27, 2008 at 05:14:43PM +0200, Micha Lenk wrote: Athanasius wrote: Can you please tell us the version of libgcrypt11 you have currently installed? (Run dpkg -l libgcrypt11 for this information). ii libgcrypt111.4.1-1LGPL Crypto library

Bug#496807: gnucash: silently removes main files while trying to save without lock

2008-08-27 Thread Micha Lenk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 forwarded 496807 http://bugzilla.gnome.org/show_bug.cgi?id=549595 thanks Hi Bas, thank you for your feedback on Gnucash. I have forwarded your report to the upstream bug tracker as http://bugzilla.gnome.org/show_bug.cgi?id=549595 Regards Micha

Bug#480320: closed by Ding Honghui [EMAIL PROTECTED] (Bug#480320: fixed in curlftpfs 0.9.2-1)

2008-08-27 Thread Liam Healy
Can the new version be uploaded to testing? Because of the freeze, this must be done by request. http://release.debian.org/migration/testing.pl?package=curlftpfs * trying to update curlftpfs from 0.9.1-3 to 0.9.2-1 (candidate is 15 days old) * curlftpfs is in freeze; contact

Bug#496809: selinux-policy-default: logrotate_t needs to test exec syslogd

2008-08-27 Thread Vaclav Ovsik
Package: selinux-policy-default Version: 2:0.0.20080702-6 Severity: normal Tags: patch Hi, while running cron.daily script /etc/cron.daily/sysklogd following denials appeared: Aug 27 13:13:50 sid kernel: [ 554.238311] type=1400 audit(1219835630.106:5): avc: denied { execute } for pid=5273

Bug#496808: ruby1.8: DoS vulnerability in rexml parsing module

2008-08-27 Thread Thijs Kinkhorst
On Wednesday 27 August 2008 17:56, Frank Louwers wrote: The rexml lib is vulnerable to a DoS attack. Please see http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/. This is CVE-2008-3790. Please mention it in the package changelog on uploads. Thijs pgpzxooaDe7u4.pgp

Bug#493217: libnfsidmap-0.21 is available

2008-08-27 Thread Steve Dickson
Kevin Coffman wrote: --- libnfsidmap-0.21/libnfsidmap.c~ 2008-08-02 10:52:00.289845221 +1200 +++ libnfsidmap-0.21/libnfsidmap.c 2008-08-02 10:47:50.647889312 +1200 @@ -101,7 +101,7 @@ char plgname[128]; int ret = 0; - snprintf(plgname, sizeof(plgname), %s%s.so,

Bug#496723: tasksel: Please add consolekit to the desktop task

2008-08-27 Thread Joey Hess
Michael Biebl wrote: For a better out-of-the-box experience I'd like to see consolekit installed by default as part of the desktop and/or laptop task in lenny. I hope you're aware that lenny is frozen.. -- see shy jo signature.asc Description: Digital signature

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Athanasius
On Wed, Aug 27, 2008 at 06:02:59PM +0200, Micha Lenk wrote: Athanasius wrote: On Wed, Aug 27, 2008 at 05:14:43PM +0200, Micha Lenk wrote: Athanasius wrote: Can you please tell us the version of libgcrypt11 you have currently installed? (Run dpkg -l libgcrypt11 for this information). ii

Bug#493817: O: ruledispatch -- Rule-based Dispatching and Generic Functions

2008-08-27 Thread Chris Lamb
retitle 493817 ITA: ruledispatch -- Rule-based Dispatching and Generic Functions owner 493817 ! thanks I intend to adopt this package. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG: 0x634F9A20

Bug#493804: O: pyprotocols -- Open Protocols and Component Adaptation for Python

2008-08-27 Thread Chris Lamb
retitle 493804 ITA: pyprotocols -- Open Protocols and Component Adaptation for Python owner 493804 ! thanks I intend to adopt this package. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG:

Bug#493791: O: decoratortools -- version-agnostic decorators support for Python

2008-08-27 Thread Chris Lamb
retitle 493791 ITA: decoratortools -- version-agnostic decorators support for Python owner 493791 ! thanks I intend to adopt this package. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG:

Bug#496810: initscript nsca fails when invocked with start and already running

2008-08-27 Thread Vincent Danjean
Package: nsca Version: 2.6-3.2 Severity: serious Hi, you should add in README.Debian that dpkg-reconfigure nsca is needed to install startup links (I discovered it by looking at /var/lib/dpkg/info/nsca.postinst..., not something usual users want to do). README.Debian currently says : by

Bug#472603: RFA: udptunnel -- Tunnel UDP packets over a TCP connection

2008-08-27 Thread Chris Lamb
retitle 472603 ITA: udptunnel -- Tunnel UDP packets over a TCP connection owner 472603 ! thanks I intend to adopt this package. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG: 0x634F9A20

Bug#496812: awesome: blank java applications

2008-08-27 Thread James Umbanhowar
Package: awesome Version: 3.0~rc4-1 Severity: normal The programs start and continue running, but the window itself is just grey. I can activate windows in the programs by clicking in the window and the menus themselves show up. I have experienced this problem in both jabref and josm. I

Bug#496349: libfcgi-perl: download link in copyright file is broken

2008-08-27 Thread Luk Claes
gregor herrmann wrote: On Mon, 25 Aug 2008 09:42:19 +0200, Toni Mueller wrote: I don't think the severity is warranted; debian/copyrights lists the place where the upstream sources were fetched at the time of packaging. After all web sites are in flux all the time, that's why we distribute

Bug#496793: GNUcash: fails to run Libgcrypt version mismatch

2008-08-27 Thread Athanasius
On Wed, Aug 27, 2008 at 06:31:55PM +0200, Micha Lenk wrote: Athanasius wrote: Can you also provide an ltrace output and the file /tmp/gnucash.trace produced when running Gnucash with command line option --debug? I got your ltrace file. What's with the /tmp/gnucash.trace file created by

Bug#496768: wireshark: Follow TCP stream is not Port numbers reused-aware

2008-08-27 Thread Joost Yervante Damad
On Wednesday 27 August 2008 11:52:18 Christoph Biedl wrote: Package: wireshark Version: 1.0.2-3 Severity: normal TCP Port numbers reused happens every now and then, especially if the capture is run over a longer time and the client OS does not use a wide range of local ports. Now I

<    1   2   3   4   >