Bug#784348: [Bug-wget] [bug #45037] wget -O foo ftp://ftp.funet.fi/pub/Linux/mirrors/debian/README deletes README symlink

2015-05-08 Thread Ángel González
On 07/05/15 06:10, Darshit Shah wrote: Given that this is a clearly documented feature of Wget, that -O is supposed to work as shell redirection, I think it should not pose too many issues. Yes, there is the security risk where another file may be overwritten, but I think the user should be

Bug#779377: Dual licensed LGPL2.1/GPL3 linking to GPL3 with OpenSSL exception

2015-02-28 Thread Ángel González
On 28/02/15 02:31, Riley Baird wrote: Hi -legal! I was reviewing a package classified-ads for Debian, and I noticed a potential problem in the process. Namely, the author of the program has decided to use GPL3 with the OpenSSL exception. However, they have taken some files from Nokia which

Bug#779377: Dual licensed LGPL2.1/GPL3 linking to GPL3 with OpenSSL exception

2015-02-28 Thread Ángel González
On 01/03/15 00:05, Riley Baird wrote: Or they could keep the files from Nokia under LGPL2.1, and use GPL3+openssl exception for the rest of the files. Given that they have proper headers, I don't see a problem with that, although I would mention that in the readme. But what license would the

Bug#771244: Re[2]: bash 4.3: Clear Scrollback and Reset (Ctrl-Shift-X) in konsole stopped to work as expected when upgrading from upstream bash 4.2 to upstream bash 4.3

2014-11-30 Thread Ángel González
Askar Safin wrote: Please stop mischaracterizing the issue. It's not a bug: it's a case of konsole's mismatched expectations. Since the mechanism it uses is not documented, and relies on something in readline that is not documented, it can't fairly be called a bug. Should long text line

Bug#771244: bash 4.3: Clear Scrollback and Reset (Ctrl-Shift-X) in konsole stopped to work as expected when upgrading from upstream bash 4.2 to upstream bash 4.3

2014-11-28 Thread Ángel González
Doesn't seem like a bug to me. You asked your terminal emulator to clear the screen. It did so. Now you complain that it's too clean :) I understand how it may look confusing, but I don't think the term has much option here. Suppose that instead of the shell, you were executing something else

Bug#767227: [oss-security] Re: CVE request: lsyncd command injection

2014-11-25 Thread Ángel González
On 20-11-2014 Mitre wrote: There is a command injection flaw in lsyncd, a file change monitoring and synchronization daemon: https://github.com/axkibe/lsyncd/issues/220 https://github.com/creshal/lsyncd/commit/18f02ad013b41a72753912155ae2ba72f2a53e52

Bug#712792: find silently misses all folder contents when there is a gazillion of entries

2013-06-19 Thread Ángel González
Package: findutils Version: 4.4.2-4 If a folder has enough entries relative to the available memory, find doesn't return any of them: cd folder-with-too-many-entries $ find . $ echo $? 0 $ ls -U | wc -l 1914188 $ ls ls: memory exhausted $ find --version find (GNU findutils) 4.4.2 Copyright

Bug#711784: The crlf option of netcat doesn't replace all LF when the input is not a terminal

2013-06-09 Thread Ángel González
Package: netcat-openbsd Version: 1.105-7 The -C option of netcat is only replacing with CRLF the last LF of a read() This happens to work quite well when the input is a terminal, as the file descriptor is in line-mode, and catching all of them, but fails as soon as you start piping to netcat. A

Bug#710412: mod_access_compat apparently not working

2013-05-30 Thread Ángel González
Package: apache2 Version: 2.4.4-2 cat /etc/apache2/sites-enabled/test VirtualHost *:80 ServerName test DocumentRoot /tmp/test Directory /tmp/test Order allow,deny Allow from all /Directory /VirtualHost ^D mkdir /tmp/test echo Hello

Bug#702475: Bug#707879: apache2: mod_mpm_itk.so: undefined symbol: cap_set_proc

2013-05-12 Thread Ángel González
Thanks Arno, I didn't find 702475 when searching earlier. Stefan, I confirm that the workaround works (but you need to use the full path). --- /etc/apache2/mods-available/mpm_itk.load2013-05-12 10:39:44.743748291 + +++ /etc/apache2/mods-available/mpm_itk.load2013-05-12

Bug#707879: apache2: mod_mpm_itk.so: undefined symbol: cap_set_proc

2013-05-11 Thread Ángel González
Package: apache2 Version: 2.4.4-2 Severity: |important| Using apache2 2.4.4-2 (from experimental) with the itk mpm fails with: apache2: Syntax error on line 140 of /etc/apache2/apache2.conf: Syntax error on line 2 of /etc/apache2/mods-enabled/mpm_itk.load: Cannot load

Bug#657698: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds

2012-02-02 Thread Ángel González
Stefan Esser wrote: And there are many many good reasons, why Suhosin must be external to PHP. The most obvious one is that the code is clearly separated, so that not someone of the hundred PHP commiters accidently breaks a safe guard. That's not a justification to keep it as a patch. Safe