Bug#573551: affects squeeze, package has only been updated in testing

2011-03-21 Thread Faidon Liambotis
Hi micah, Sorry for the very late reply. On Thu, Mar 10, 2011 at 04:53:57PM -0500, micah anderson wrote: # update-rc.d -f ssh remove update-rc.d: using dependency based boot sequencing # echo $? 0 # update-rc.d ssh disable update-rc.d: using dependency based boot sequencing update-rc.d:

Bug#549054: raised severity: asterisk: Still uses gmime2.2

2011-03-14 Thread Faidon Liambotis
On Mon, Mar 14, 2011 at 12:02:31PM +0100, Jonas Smedegaard wrote: On Mon, Mar 14, 2011 at 09:12:00AM +0100, Ralf Treinen wrote: Hello, I have raised again the severity of this bug because gmime2.2 has been removed from sid on February 20, with the result that asterisk is no longer installable

Bug#618284: pristine-tar: pristine-gz cannot reproduce build

2011-03-14 Thread Faidon Liambotis
On Mon, Mar 14, 2011 at 05:51:05PM -0400, Joey Hess wrote: Maybe Faidon will have an idea. How about that? Regards, Faidon From 42bab1a7ffd0e50ca6e8ef93ee97c3dcd67f58f2 Mon Sep 17 00:00:00 2001 From: Faidon Liambotis parav...@debian.org Date: Tue, 15 Mar 2011 01:45:23 +0200 Subject: [PATCH

Bug#616301: xserver-xorg-video-radeon:screen goes black, system hangs after 2sec:[youtube(FF/Opera)-reset req.]

2011-03-12 Thread Faidon Liambotis
On Sun, Mar 06, 2011 at 01:08:49PM -0500, Alex Deucher wrote: On Fri, Mar 4, 2011 at 8:50 PM, Ben Hutchings b...@decadent.org.uk wrote: On Fri, 2011-03-04 at 21:01 +0200, Faidon Liambotis wrote: This isn't a singled out case nor in exotic, possibly faulty, hardware. It's on a standard 1

Bug#617451: heartbeat: LSB init script handling is suboptimal

2011-03-08 Thread Faidon Liambotis
Package: heartbeat Version: 1:3.0.3-2 Severity: important During the upgrade of a couple of systems to squeeze, I encountered a problem that took me a while to debug (although it's nothing specific to heartbeat changes in squeeze). More specifically, I was using heartbeat in a simple setup with

Bug#616301: xserver-xorg-video-radeon:screen goes black, system hangs after 2sec:[youtube(FF/Opera)-reset req.]

2011-03-04 Thread Faidon Liambotis
severity 616301 critical thanks My system locks up whenever I click on a YouTube video link since yesterday. I can probably live without YouTube :), but in any case this shouldn't happen. This isn't a singled out case nor in exotic, possibly faulty, hardware. It's on a standard 1½-year old Dell

Bug#573551: affects squeeze, package has only been updated in testing

2011-03-04 Thread Faidon Liambotis
On Thu, Mar 03, 2011 at 12:31:07PM -0500, micah anderson wrote: On Wed, 02 Mar 2011 11:28:46 -0500, micah anderson mi...@riseup.net wrote: Additionally, I think that we can push 2.6.4-1 into backports now. I uploaded a backport of 2.6.4-1 yesterday, pending NEW approval from backports.

Bug#573551: affects squeeze, package has only been updated in testing

2011-03-02 Thread Faidon Liambotis
On Mon, Feb 21, 2011 at 02:29:30PM +1100, Tim Connors wrote: The fix in 2.6.4-1 in testing is all well and good, but the bug applies to stable. Stable has the removed update-rc.d stop feature, and so in stable, I can't actually convince puppet to ensure the service is stopped. I also got

Bug#610487: asterisk: AST-2011-001: buffer overflow in caller ID URI encoding

2011-02-10 Thread Faidon Liambotis
Faidon Liambotis wrote: I can do the uploads (lenny hasn't been uploaded either, right?) but I'm afraid it'll be with minimal testing. Moritz, is that acceptable? Certainly better than having a remote exploitable hole... I'm pondering whether I should remove my name from maintainer as well

Bug#610487: asterisk: AST-2011-001: buffer overflow in caller ID URI encoding

2011-02-10 Thread Faidon Liambotis
On 02/11/11 00:01, Moritz Mühlenhoff wrote: Should I upload to security-master? Excellent, thanks for taking care. Please upload (remember that stable-security needs to be build with -sa, since it's new in Squeeze) Done for both oldstable-security and stable-security (and thanks for the

Bug#610487: asterisk: AST-2011-001: buffer overflow in caller ID URI encoding

2011-02-06 Thread Faidon Liambotis
Tzafrir, ping? I can do the uploads (lenny hasn't been uploaded either, right?) but I'm afraid it'll be with minimal testing. Moritz, is that acceptable? Certainly better than having a remote exploitable hole... I'm pondering whether I should remove my name from maintainer as well. Tzafrir,

Bug#610288: thin: ActiveRecord session store doesn't work with Rails

2011-01-18 Thread Faidon Liambotis
a patch from v1.2.6 in Rails adapter to properly detect Rack. +Among other things, this fixes the ActiveRecord session store (when +configured) on Rails. (Closes: #610288) + + -- Faidon Liambotis parav...@debian.org Tue, 18 Jan 2011 14:31:07 +0200 + thin (1.2.4-1) unstable; urgency=low

Bug#516183: ITP: python-django-cms

2011-01-17 Thread Faidon Liambotis
Ping? Regards, Faidon -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#610288: thin: ActiveRecord session store doesn't work with Rails

2011-01-16 Thread Faidon Liambotis
Package: thin Version: 1.2.4-1 Severity: grave Tags: patch Justification: renders package unusable When using Rails, thin ignores the configuration directive of picking ActiveRecord for a session store and falls back to a CookieStore instead (which is limited to 4K among other things). The bug

Bug#610165: ITP: less.js -- JavaScript parser of LESS Leaner CSS macro language

2011-01-15 Thread Faidon Liambotis
Jonas Smedegaard wrote: LESS is a macro language to produce CSS files. I'd start with that and expand it a bit. Regards, Faidon -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#610165: ITP: less.js -- JavaScript parser of LESS Leaner CSS macro language

2011-01-15 Thread Faidon Liambotis
On 15/01/2011 10:22 μμ, Jonas Smedegaard wrote: On Sat, Jan 15, 2011 at 10:16:21PM +0200, Faidon Liambotis wrote: Jonas Smedegaard wrote: LESS is a macro language to produce CSS files. I'd start with that and expand it a bit. How do you mean? Please elaborate. Or better: propose a patch

Bug#609946: sqlite3: Please provide a .symbols file

2011-01-13 Thread Faidon Liambotis
Package: libsqlite3-0 Version: 3.7.3-1 Severity: normal Tags: patch libsqlite3 currently gets a shlibs bump every time upstream introduces a new API. This hinders the release process and backports and has resulted in an NMU a few days ago. Attached you'll find an attempt for a .symbols file.

Bug#609948: iceweasel: about:license and about:rights texts are inaccurate and/or stub

2011-01-13 Thread Faidon Liambotis
Package: iceweasel Version: 3.5.16-4 Severity: minor (this is still present in 4.0~b8-1, present only in mozilla.d.n) about:license mentions, among other things: “Binaries of this product have been made available to you by the Mozilla Project under the Mozilla Public License. Know your rights.”

Bug#327585: slapd: perl backend failed to load XS (unknown symbols)

2011-01-08 Thread Faidon Liambotis
Everything but trivial perl scripts fail using slapd's back-perl, probably for the reasons stated in this bug. If I were opening the bug, I'd surely use a much more severe severity, but since the maintainers have commented and haven't done that, I'll refrain from doing so. The symptoms are

Bug#601506: boxbackup-server: bbstored-certs root CA expiration so far in the future it becomes the past

2010-10-30 Thread Faidon Liambotis
clone 601506 -1 retitle -1 Documentation errors regarding bbstored-certs severity -1 minor thanks On Tue, Oct 26, 2010 at 07:42:18PM +, Clint Adams wrote: $root_sign_period is set to 1 days, so when a new CA pair is initialized, gnutls thinks the expiration is in 1969 and openssl

Bug#596000: unblock: asterisk/1:1.6.2.9-2

2010-09-07 Thread Faidon Liambotis
) * Patch typos: fix a few typos in the source. * Patch man_hyphen: fix hyphen/minus issues in man pages. * Remove useless binaries aelparse, conf2ael and muted. [ Faidon Liambotis ] * Change the way that we read include files, to accommodate for changes in GCC 4.4. Taken from upstream's SVN

Bug#594777: varnish NMU for powerpc FTBFS

2010-09-07 Thread Faidon Liambotis
-maintainer upload. + * Urgency high because of a squeeze-targeted RC bugfix. + * Fix powerpc FTBFS caused by a race condition in a test suite case. +(Closes: #594777) + * Rename patch debian-changes-2.1.3-6 to fix-changelog-typo and fix +its documentation. + + -- Faidon Liambotis parav

Bug#535968: asterisk: Recording speed too fast with BRI cards

2010-08-20 Thread Faidon Liambotis
Rhonda, hi, Gerfried Fuchs wrote: * Tzafrir Cohen tzafrir.co...@xorcom.com [2009-09-12 23:00:55 CEST]: fixed 535968 1:1.6.1.0~dfsg~rc3-1 tag 535968 +lenny thanks This issue has already been fixed upstream. Thus it is Lenny-specific. So far, so good. Now, what to do about it in lenny?

Bug#418975: affects stable

2010-06-08 Thread Faidon Liambotis
Hi, Sorry for the late reply. Stefanos Harhalakis wrote: Does the attached patch work? Νο, 0x7f7b17504c82 in libnet_do_checksum (l=0x604010, buf=0xb8 Address 0xb8 out of bounds, protocol=1, len=32) at libnet_checksum.c:129 129 if (iph_p iph_p-ip_v == 6) (gdb) bt #0

Bug#418975: #418975 affects stable

2010-05-18 Thread Faidon Liambotis
Faidon Liambotis wrote: Faidon Liambotis wrote: Does the patch of message #77 fix your problem? Unfortunately, the patch doesn't apply cleanly on 1.1.2.1-2 and I'm not very comfortable with modifying the patch myself, especially considering that it's going to be for an SPU upload. Any

Bug#555540: any news on tokyocabinet's FTBFS?

2010-05-17 Thread Faidon Liambotis
On Fri, May 14, 2010 at 09:43:27PM +0200, Pierre Habouzit wrote: On Tue, May 11, 2010 at 10:52:09PM +0200, Serafeim Zanikolas wrote: Here's a ping for #40, which is blocking the transition of bogofilter (for quite a while now). It'd be sad to have to drop bogofilter support for

Bug#578005: Please consider backporting KVM_GET/SET_CLOCK to 2.6.32

2010-04-24 Thread Faidon Liambotis
Ben Hutchings wrote: This is definitely worthwhile but it does involve an ABI bump. So we will probably wait for a convenient time to do that. I saw that you (well, maks) just bumped the ABI to -5. Ping? :) Thanks, Faidon -- To UNSUBSCRIBE, email to

Bug#578005: Please consider backporting KVM_GET/SET_CLOCK to 2.6.32

2010-04-24 Thread Faidon Liambotis
maximilian attems wrote: tried 3cfc3092f40bc37c57ba556cfd8de4218f2135ab, ffde22ac53b6d6b1d7206f1172176a667eead778. none of them apply. ffde22ac53b6d6b1d7206f1172176a667eead778 (Xen-HVM) applies with some (manually checked, safe) fuzz/offset. On top of that,

Bug#578005: Please consider backporting KVM_GET/SET_CLOCK to 2.6.32

2010-04-15 Thread Faidon Liambotis
Package: linux-2.6 Version: 2.6.32-11 Severity: minor Tags: patch, fixed-upstream Hi, (severity minor since this is something between a bug and a feature request) Commit afbcf7ab8d1bc8c2d04792f6d9e786e0adeb328d, released with 2.6.33, reads: [PATCH] KVM: allow userspace to adjust kvmclock

Bug#418975: #418975 affects stable

2010-04-15 Thread Faidon Liambotis
Faidon Liambotis wrote: Does the patch of message #77 fix your problem? Unfortunately, the patch doesn't apply cleanly on 1.1.2.1-2 and I'm not very comfortable with modifying the patch myself, especially considering that it's going to be for an SPU upload. Any progress wit that? Can I do

Bug#418975: #418975 affects stable

2010-03-31 Thread Faidon Liambotis
Stefanos Harhalakis wrote: Hello, Does the patch of message #77 fix your problem? Unfortunately, the patch doesn't apply cleanly on 1.1.2.1-2 and I'm not very comfortable with modifying the patch myself, especially considering that it's going to be for an SPU upload. Regards, Faidon -- To

Bug#418975: #418975 affects stable

2010-03-29 Thread Faidon Liambotis
found 418975 libnet/1.1.2.1-2 submitter 418975 ! tags 418975 - help severity 418975 grave thanks According to the bug reports and my own testing this bug obviously affects lenny. In particular, it crashes IPv6Addr from heartbeat. IMO, it warrants an SPU upload. Maintainer was notified privately

Bug#392333: [Fwd: Re: Bug#392333: AW: [Fwd: ITP: irrtoolset -- policy analysis tools to operate with routing policies in RPSL format]]

2010-03-16 Thread Faidon Liambotis
Jan, hi, [ Cc'ing the ITP ] Jan Wagner wrote: I agree with you, that maintaining the package isn't a big trick. From the last releases, the biggest issue was the review of the copyright/license changes and probably maintaining additional patches. I'm not sure if you follow upstream's list

Bug#564680: gnugk: diff for NMU version 2:2.3.0-4-1.1

2010-02-21 Thread Faidon Liambotis
Stefano Zacchiroli wrote: If you welcome the NMU please let me know so that I can reschedule it to immediate, easing Damyan's life with firebird 2.1 :-) Please do, NMUs are always welcome. Regards, Faidon -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject

Bug#565188: plymouth package is currently useless

2010-02-16 Thread Faidon Liambotis
severity 565188 grave thanks The package is obviously unusable, with no documentation or even hints of configuration. IOW, completely useless. Beyond that I'd say that it's badly maintained or unmaintained. There is no integration work being done, no documentation and no responses whatsoever

Bug#485071: Please provide support for including EPS with XeLaTeX

2010-01-04 Thread Faidon Liambotis
Hilmar Preusse wrote: Please install the xetex.def from CTAN into your local texmf tree, the next version of TL will contain the fix. I've done that, yes. Is there a particular reason why the Debian-specific patch was dropped when the package was updated to TL 2009? Is it too much of a burden

Bug#485071: Please provide support for including EPS with XeLaTeX

2010-01-03 Thread Faidon Liambotis
Hi, Norbert Preining wrote: On So, 08 Jun 2008, Faidon Liambotis wrote: +%% 2007/10/25 [JK] Version v0.93 added EPS support from dvipdfmx.def +%% (for use with xdvipdfmx, default driver in xetex 0.997) Yes, but texlive ships 0.996-patch2. Are you/we sure that this works

Bug#562029: use the standard readline library

2009-12-21 Thread Faidon Liambotis
jida...@jidanni.org wrote: Asterisk should use the standard readline library, that way C-r could search back etc. It uses libreadline, no idea why C-r doesn't work though. Perhaps you'd prefer raising the issue with upstream? It'd be better than us forwarding the request. By the way, perhaps

Bug#557262: 2.6.31+2.6.31.4: XFS - All I/O locks up to D-state after 24-48 hours (sysrq-t+w available) - root cause found = asterisk

2009-12-20 Thread Faidon Liambotis
reassign 557262 linux-2.6 thanks Justin, Justin Piszcz wrote: Justin Piszcz wrote: Found root cause-- root cause is asterisk PBX software. I use an SPA3102. When someone called me, they accidentally dropped the connection, I called them back in a short period. It is during this time

Bug#561688: ITP: turbotail -- drop-in replacement for tail, using FAM for following files

2009-12-19 Thread Faidon Liambotis
Christian Dietrich wrote: Package: wnpp Severity: wishlist Owner: Christian Dietrich stettber...@dokucode.de * Package name: turbotail Version : 0.3 Upstream Author : Folkert van Heusden folk...@vanheusden.com * URL : http://www.vanheusden.com/turbotail/ *

Bug#559103: CVE-2009-4055: RTP Remote Crash Vulnerability

2009-12-06 Thread Faidon Liambotis
Moritz, hi, Moritz Muehlenhoff wrote: Package: asterisk Severity: grave Tags: security http://downloads.asterisk.org/pub/security/AST-2009-010.html Thanks! Fix just uploaded to sid; urgency high but likely to be blocked by the uw-imap transition. Due to the severity of the vulnerability,

Bug#557262: 2.6.31+2.6.31.4: XFS - All I/O locks up to D-state after 24-48 hours (sysrq-t+w available) - root cause found = asterisk

2009-11-20 Thread Faidon Liambotis
Justin Piszcz wrote: Found root cause-- root cause is asterisk PBX software. I use an SPA3102. When someone called me, they accidentally dropped the connection, I called them back in a short period. It is during this time (and the last time) this happened that the box froze under

Bug#555664: Port conflict between asterisk and cyrus-common

2009-11-14 Thread Faidon Liambotis
reassign 555664 cyrus-common-2.3 thanks. Bastian Blank wrote: On Tue, Nov 10, 2009 at 04:56:27PM -0500, Avi wrote: Asterisk uses port 2000 for cisco-cssp. Cyrus-common uses port 2000, listed in /etc/services as the sieve port, for timsieved. Port 2000 is assiged to cisco-cssp according to

Bug#554487: New asterisk vulnerabilities

2009-11-08 Thread Faidon Liambotis
Moritz Muehlenhoff wrote: On Wed, Nov 04, 2009 at 11:09:48PM +0200, Faidon Liambotis wrote: Security Team, hi, Two new asterisk vulnerabilities were announced today, affecting lenny and unstable; the first one affects also etch. http://downloads.asterisk.org/pub/security/AST-2009-008.html

Bug#555220: asterisk: CVE-2007-2383 and CVE-2008-7720 prototypejs vulnerabilities

2009-11-08 Thread Faidon Liambotis
forcemerge 554486 555220 thanks Michael Gilbert wrote: This is a mass-filing, and the only checking done so far is a version comparison, so please determine whether or not your package is itself affected or not. If it is not affected please close the bug with a message indicating this along

Bug#554486: New asterisk vulnerabilities

2009-11-04 Thread Faidon Liambotis
Security Team, hi, Two new asterisk vulnerabilities were announced today, affecting lenny and unstable; the first one affects also etch. http://downloads.asterisk.org/pub/security/AST-2009-008.html http://downloads.asterisk.org/pub/security/AST-2009-009.html No CVE numbers yet. These are

Bug#553727: replacing libreadline5-dev build dependency with libreadline-dev

2009-11-01 Thread Faidon Liambotis
Hi, Matthias Klose wrote: Package: asterisk Version: 1:1.6.2.0~rc3-2 Severity: important User: d...@debian.org Usertags: readline6 Sent to http://lists.debian.org/debian-devel/2009/09/msg00549.html As a package maintainer you got this email directly as well. Both libreadline-dev (=

Bug#552604: insserv error during installation: Service zaptel has to be enabled to start service asterisk

2009-10-29 Thread Faidon Liambotis
tags 552604 + pending Sascha Silbe wrote: The Required-Start: $local_fs zaptel line in /etc/init.d/asterisk should probably be downgraded (I don't have any FXO/FXS hardware, so the zaptel package isn't installed): A package failed to install. Trying to recover: Setting up asterisk

Bug#539681: No more crashes with 1.6.1.0~dfsg-1.0.0jones1

2009-10-29 Thread Faidon Liambotis
Eloy, hi, Eloy Paris wrote: Just downgraded and tested 1.6.1.0~dfsg-1.0.0jones1 -- I no longer see the crashes that I was experiencing with 1.6.2beta3. Thanks for the much detailed bug report, this is highly appreciated. I'm terribly sorry for not responding sooner. I uploaded 1:1.6.2.0~rc3-1

Bug#552756: AST-2009-007: SIP INVITE ACL bypass

2009-10-29 Thread Faidon Liambotis
Raphael Geissert wrote: A vulnerability has been reported in asterisk that allows a device to make calls on networks intended to be prohibited as defined by the deny and permit lines in sip.conf. The original advisory can be found at:

Bug#552756: AST-2009-007: SIP INVITE ACL bypass

2009-10-29 Thread Faidon Liambotis
Raphael Geissert wrote: Yes, the versions in testing and unstable (at least those that were there before I reported it) were both affected. May I suggest you to reply to the email in the future whenever you don't think it affects a version? the versions in the descriptions are usually not

Bug#531728: asterisk: console video support

2009-10-27 Thread Faidon Liambotis
Jonas, hi, Thanks for your report. Jonas Smedegaard wrote: Asterisk 1.6 supports video on console channel if linked against FFmpeg libraries. Unfortunately the autoconf code does not detect the location of those libraries as packaged by Debian, and the console code expects old organisation

Bug#533532: Bugs still present

2009-10-25 Thread Faidon Liambotis
Joerg, hi, Joerg Dorchain wrote: this bug is still present in asterisk version 1:1.6.2.0~dfsg~rc1-1. Even worse, the workaround I used in setting dtmf detection to inband does not work anymore Would it be too much to ask to reply to that upstream bug that you mentioned before? Thanks,

Bug#552336: N900/SIP session-timer problem

2009-10-25 Thread Faidon Liambotis
koos vriezen wrote: Problem is described here https://bugs.maemo.org/show_bug.cgi?id=5614 Bug looks like issue https://issues.asterisk.org/view.php?id=15403 so it might be fixed upstream in rc3 Thanks. We'll wait until -rc3 gets released and get back to you. Regards, Faidon -- To

Bug#486890: Running asterisk in RT-mode hangs on 2.6.25.7 with CONFIG_RT_GROUP_SCHED set

2009-10-25 Thread Faidon Liambotis
Michael, hi, Michael Bussmann wrote: After upgrading my system to 2.6.25.7 I noticed that asterisk suddenly hung shortly after starting it. The process is unkillable (but in status R). It worked all right when I started asterisk without realtime priority. I recompiled the kernel without

Bug#364420: cannot find latex if current path contains spaces

2009-10-25 Thread Faidon Liambotis
severity 364420 important thanks On Sun, Apr 23, 2006 at 01:19:48PM +0200, VSJ wrote: If the .tex file to be compiled is located in a directory that contains one or more spaces e.g. /home/user/directory with spaces/test.tex then rubber is not able to find the compiler: The same happens if the

Bug#531551: asterisk: Perhaps build-depend on rubber and (for kpsewhich) texlive-base-bin

2009-10-25 Thread Faidon Liambotis
Jonas Smedegaard wrote: But I would say it was best to regenerate documentation anyway. Should I file a separate bug about that? FWIW, I tried fixing this. The fix is simple: dependency on rubber, texlive-latex-extra, latex2html and three lines in debian/rules. However, I bumped into #364420,

Bug#542741: enable hardening options

2009-10-25 Thread Faidon Liambotis
tags 542741 + wontfix thanks Kees, hi, Kees Cook wrote: Since asterisk listens on external ports and processes untrusted inputs, I think it might benefit from having hardening[1] enabled for its build. The attached patch implements this. I'm sorry, NACK. I'm in favor of your proposal to do

Bug#513229: One Way Audio

2009-10-25 Thread Faidon Liambotis
tags 513229 + unreproducible moreinfo thanks GNUbie, hi, Tzafrir Cohen wrote: Next thing to verify is that the SIP device does send RTP. I suppose you can see that from 'rtp debug'. If not, look at a packet dump with wireshark. I suppose RTP was sent, though. Do you record calls with

Bug#542154: /etc/modprobe.d/hostap-utils should have .conf

2009-10-18 Thread Faidon Liambotis
Mika, hi, Michael Prokop wrote: * Michael Prokop m...@debian.org [20091018 14:56]: * Kevin Mitchell kevmi...@math.sfu.ca [20090912 07:58]: On probing any module I get the message: WARNING: All config files need .conf: /etc/modprobe.d/hostap-utils, it will be ignored in a future release.

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-08 Thread Faidon Liambotis
. +Fixes FTBFS. + + -- Faidon Liambotis parav...@debian.org Thu, 08 Oct 2009 12:07:32 + + shibboleth-sp2 (2.0.dfsg1-4) unstable; urgency=low [ Ferenc Wagner ] diff -u shibboleth-sp2-2.0.dfsg1/debian/control shibboleth-sp2-2.0.dfsg1/debian/control --- shibboleth-sp2-2.0.dfsg1/debian/control

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-08 Thread Faidon Liambotis
Florian Weimer wrote: Thanks, please upload. (You need to build the source package with -sa.) Yes, of course. Just uploaded to security-master. (It's odd that the original package FTBFSes, but well...) It is, I was wondering myself. It had multiple serious bugs actually: - tries to generate

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-08 Thread Faidon Liambotis
Florian Weimer wrote: * Faidon Liambotis: Florian Weimer wrote: Thanks, please upload. (You need to build the source package with -sa.) Yes, of course. Just uploaded to security-master. Thanks. Have you verified that the versions you've uploaded, together with the previous security

Bug#549936: breaks Shibboleth SPs: IdPs with KeyDescriptor use=signing are broken

2009-10-07 Thread Faidon Liambotis
Ferenc Wagner wrote: Unfortunately Russ is the only DD in the team. While I can help with building packages for example, I'm not familiar with the security procedure and can't upload either. OK, I'll handle this then, no problem. Thanks, Faidon -- To UNSUBSCRIBE, email to

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-07 Thread Faidon Liambotis
Florian Weimer wrote: Right. Please upload opensaml2 first (after sending in a source debdiff for review), and then wait with uploading shibboleth-sp2 until we tell you it's okay to do so. OK, will do. How should we handle the fact that the newer xmltooling is breaking the old (as in, lenny)

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-07 Thread Faidon Liambotis
Florian Weimer wrote: Right. Please upload opensaml2 first (after sending in a source debdiff for review), and then wait with uploading shibboleth-sp2 until we tell you it's okay to do so. Scott and Russ, under which conditions did you see the specific opensaml code to be inlined on

Bug#549936: breaks Shibboleth SPs: IdPs with KeyDescriptor use=signing are broken

2009-10-06 Thread Faidon Liambotis
Package: libxmltooling1 Version: 1.0-2+lenny1 Severity: grave Hi, (elevated severity because of unrelated breakage in a security update) libxmltooling 1.0-2+lenny1 security upgrade breaks Shibboleth SPs for IdPs which have use=signing in their IDPSSODescriptor's KeyDescriptor. I've verified

Bug#549936: breaks Shibboleth SPs: IdPs with KeyDescriptor use=signing are broken

2009-10-06 Thread Faidon Liambotis
Russ Allbery wrote: Unfortunately, I'm both sick at the moment and my main computer is dead with hardware failure, so I can't easily pursue it at the moment. If someone else could, that would be great. I had proposed the needed changes for opensaml2 for the next stable update, but didn't get

Bug#549989: wanpipe drivers don't build cleanly with zaptel-source

2009-10-06 Thread Faidon Liambotis
Gerhard Pircher wrote: The compile log of Sangoma's wanpipe driver package reports the following warnings while building the wanpipe module: Building modules, stage 2. MODPOST 1 modules WARNING: zt_alarm_notify [/usr/src/wanpipe-3.7.0.6/kdrvtmp/wanpipe.ko] undefined! WARNING:

Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

2009-10-06 Thread Faidon Liambotis
Hi, Russ Allbery wrote: The Shibboleth suite of software and libraries, which includes xmltooling, opensmal2, and shibboleth-sp2, has had several vulnerabilities announced over the past month and a half. Most of those are in xmltooling and are being handled in conjunction with the Debian

Bug#539473: CVE-2009-2651: Remote Crash Vulnerability in RTP stack

2009-10-05 Thread Faidon Liambotis
Moritz Muehlenhoff wrote: You are right that we should do an update for a point release of lenny though to address a minor information disclosure vulnerability[1], plus some other non-security related bugs. However, I'd like to avoid upgrading to a newer 1.4.x release but backport changes

Bug#511036: ttf-droid

2009-10-05 Thread Faidon Liambotis
Simon, hi, si...@ochsenreither.de wrote: sincere apologies to you Faidon and everyone else waiting for that package for already too long. I could need some guidance getting the package into Debian, but I'm willing to work on it and join the font packaging team. You could join the Debian

Bug#548984: Binaries intended to be run by root belong to /usr/sbin

2009-09-29 Thread Faidon Liambotis
Package: intel-gpu-tools Version: 1.0.1-1 Severity: minor Most, if not all, of the binaries provided by this package are for system administration purposes and require root privileges. Even the manpages say so. The binaries, however, are installed in /usr/bin instead of /usr/sbin, as the FHS

Bug#545480: ITP: libnet-epp-perl -- EPP XML frame system built on top of XML::LibXML

2009-09-16 Thread Faidon Liambotis
Peter Pentchev wrote: On Wed, Sep 09, 2009 at 04:41:59AM +0300, Faidon Liambotis wrote: Peter Pentchev wrote: As of writing, its only well-developed application is the provisioning of Internet domain names, hosts, and related contact details. What about Net::DRI? Never used but heard good

Bug#539473: CVE-2009-2651: Remote Crash Vulnerability in RTP stack

2009-09-16 Thread Faidon Liambotis
Hi, Moritz Muehlenhoff wrote: Asterisk maintainers, what should be done about stable? Would it make sense to update the stable version to 1.4.26.2 in a point update? (IIRC there's still a performance regression affecting Lenny from a previous security update?) This particular vulnerability

Bug#515731: does not fallback utimensat() when cp'ing symlinks

2009-09-10 Thread Faidon Liambotis
unarchive 515731 found 515731 coreutils/7.5-4 retitle 515731 does not fallback utimensat() when cp'ing symlinks thanks On an up-to-date sid chroot, running on a etch system (yes, I should upgrade, I know): # cp -dp /lib/libc.so.6 /root/ cp: preserving times for `/root/libc.so.6': Function not

Bug#511036: ttf-droid, sponsorship?

2009-09-09 Thread Faidon Liambotis
Hi, There is an ITP bug for the droid fonts since January, but unfortunately noone has taken a step and upload them yet. However, I'm seeing that you're maintaining them in Ubuntu? Are you still interested in having them in Debian? If so, I can sponsor your uploads and perhaps you could also

Bug#545480: ITP: libnet-epp-perl -- EPP XML frame system built on top of XML::LibXML

2009-09-08 Thread Faidon Liambotis
Peter Pentchev wrote: As of writing, its only well-developed application is the provisioning of Internet domain names, hosts, and related contact details. What about Net::DRI? Never used but heard good words about it. Regards, Faidon -- To UNSUBSCRIBE, email to

Bug#541441: CVE-2009-2726: Asterisk SIP Channel Driver Denial of Service

2009-08-14 Thread Faidon Liambotis
That's AST-2009-005[1], which mentions: Note that while this potential vulnerability has existed in Asterisk for a very long time, it is only potentially exploitable in 1.6.1 and above, since those versions are the first that have allowed SIP packets to exceed 1500 bytes total, which does not

Bug#540206: [Pkg-fonts-devel] Bug#540206: ttf-mgopen: MgOpen Canonica hinting looks terrible

2009-08-06 Thread Faidon Liambotis
tags 540206 + confirmed help thanks Steve Pomeroy wrote: The text rendering of the font MgOpen Canonica looks terrible at small sizes (really, at any size below 20). I suspect this is due to broken hinting. Yes it does; I'm aware of it, as well of some its other problems (partial lack of Euro

Bug#537110: ITP: libdap -- A C++ SDK contains an implementation of DAP 2.0 and 3.1, Client- and Server-side support classes and a prototype implementation of the AIS

2009-07-15 Thread Faidon Liambotis
Youhei SASAKI wrote: Package: wnpp Owner: Youhei SASAKI uwab...@gfd-dennou.org Severity: wishlist * Package name: libdap Version : 3.8.2 Upstream Author : The University of Rhode Island and The Massachusetts Institute of Technology * URL or Web page :

Bug#392333: ITP: irrtoolset -- policy analysis tools to operate with routing policies in RPSL format

2009-06-19 Thread Faidon Liambotis
I'm ressurecting this, since upstream created a cruft-removal branch (that apparently is going to be released as 5.0) removing old cruft, automatically generated code and the such. I'm hoping that copyright extraction would be much easier with this, much more limited, tree but that remains to be

Bug#392333: AW: [Fwd: ITP: irrtoolset -- policy analysis tools to operate with routing policies in RPSL format]

2009-06-19 Thread Faidon Liambotis
On Fri, Jun 19, 2009 at 07:07:07PM +0200, Jan Wagner wrote: I did follow the mailinglist and recognised it. If you haven't any objections, we could propable maintain the package together. My rcs for the package is available at https://trac.cyconet.org/svn/debian/irrtoolset/ Err, too late :(

Bug#531551: asterisk: Perhaps build-depend on rubber and (for kpsewhich) texlive-base-bin

2009-06-16 Thread Faidon Liambotis
Tzafrir Cohen wrote: On Tue, Jun 02, 2009 at 11:12:11AM +0200, Jonas Smedegaard wrote: I noticed that configure checks for, and in a clean build chroot fails to find, the commands rubber and kpsewhich. However in the released tarballs (which includes betas and RCs) the generated HTML and

Bug#533079: asterisk: start-stop-daemon should have --make-pid

2009-06-14 Thread Faidon Liambotis
Darsha, hi, Darshaka Pathirana wrote: --- /etc/init.d/asterisk.orig 2009-06-14 17:01:23.0 +0200 +++ /etc/init.d/asterisk2009-06-14 16:31:44.0 +0200 @@ -170,7 +170,7 @@ echo $DESC is already running. Use restart. exit

Bug#532942: RM: asterisk-spandsp-plugins -- RoM; superseded by the asterisk package

2009-06-12 Thread Faidon Liambotis
Package: ftp.debian.org Severity: normal Hi, asterisk-spandsp-plugins (source)/asterisk-app-fax (binary) hasn't been building or working for quite some time, which resulted into not being part of testing or lenny. Fortunately, its functionality was merged into the asterisk core by upstream, and

Bug#532481: ITP: radsecproxy -- RADIUS protocol proxy supporting RadSec

2009-06-09 Thread Faidon Liambotis
Package: wnpp Severity: wishlist Owner: Faidon Liambotis parav...@debian.org Package name: radsecproxy Version : 1.3 Upstream Author : Stig Venaas stig.ven...@uninett.no URL : http://software.uninett.no/radsecproxy/ License : Dual BSD/GPL (without OpenSSL

Bug#531759: asterisk: Perhaps build-depend on libsqlite3-dev instead of libsqlite-dev

2009-06-03 Thread Faidon Liambotis
Jonas Smedegaard wrote: Asterisk currently link against the older 2.x branch of SQLite. It looks like that branch is deprecated - only approx. 30 packages link against it, and most of those are plugins with the newer linkage offered as an alternative too. Agreed, this needs to be done.

Bug#528248: request for the creation of debian-user-greek mailing list

2009-05-11 Thread Faidon Liambotis
severity 528248 wishlist kthxbye The debian-l10n-greek mailing list is frequently abused for discussion and user support purposes; therefore, I am supporting such a request. The submitter has called for support on this bug on several Greek FL/OSS mailing lists. I don't think there is a point of

Bug#513003: #513003 - progress?

2009-05-11 Thread Faidon Liambotis
Serafeim Zanikolas wrote: The package is ready but my sponsor has been busy. Also, it appears that pdfshuffler creates predictably-named temporary files, which might be a blocker (I've notified upstream, but it's not fixed yet). (I'm the afforementioned sponsor that's been busy, sorry for that:

Bug#495939: local host fails to sync with mongrel when CRLs are in use with apache2

2009-04-30 Thread Faidon Liambotis
forwarded 495939 http://projects.reductivelabs.com/issues/899 thanks Martin, hi, martin f krafft wrote: After switching to mongrel (and recreating the certificate for the local puppetd), it won't sync with puppet anymore: err: /File[/var/lib/puppet/lib]: Failed to generate additional

Bug#513606: ITP: freeswitch -- An open source telephony platform.

2009-01-30 Thread Faidon Liambotis
There's #389591 and you might want to contact Phil Hands who has showed interest for this. You're also welcome to join the Debian VoIP team. Thanks, Faidon -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#512407: automatic configuration fails if /proc/partitions doesn't exist

2009-01-20 Thread Faidon Liambotis
Package: munin-node Version: 1.2.6-8 Severity: normal Tags: patch munin-node's postinst calls munin-node-configure to create the initial list of enabled plugins by probing each of them for configuration. Unfortunately, it fails to enable everything if /proc/partitions doesn't exist, which

Bug#500645: upstream patch

2009-01-18 Thread Faidon Liambotis
Hi, Apparently the upstream fix is a two-liner and doesn't break ABI. Seems easy to fix and test and live migration is an important feature. Perhaps it could be part of the next upload? Thanks, Faidon

Bug#509566: [Pkg-puppet-devel] Bug#509566: Bug#509566:

2009-01-15 Thread Faidon Liambotis
Micah Anderson wrote: b) The Debian default in the versions so far which tried /once/ and then exited without looping *at all*. That was what puppet = 0.24 did with -w 0 and that's what the documentation still (incorrectly) says. Doyou have a reference, or a commitsh where this

Bug#509566: [Pkg-puppet-devel] Bug#509566:

2009-01-14 Thread Faidon Liambotis
Thom May wrote: On Tue, Jan 13, 2009 at 4:26 PM, Faidon Liambotis parav...@debian.org wrote: Thijs Kinkhorst wrote: Sometimes people just install a package to read documentation/the manpages/read the code etc. It should either need manual work for the init script to start (i.e. disable

Bug#509566:

2009-01-13 Thread Faidon Liambotis
Thijs Kinkhorst wrote: FWIW, I don't agree. I don't find it acceptable to have a fresh-installed package writing 2 lines on my syslog every 5 seconds. Busylooping is obviously wrong, but doing it every 5 seconds is not an unacceptable burden. It does not load the system significantly.

Bug#509566:

2009-01-08 Thread Faidon Liambotis
Thijs Kinkhorst wrote: Setting waitforcert to 5 helps a bit, but it is still a problem IMO. Your suggestions are all very valid in my opinion, but I think that the uploaded fix has made the issue not grave anymore. I hope the Puppet maintainers will evaluate your suggestions for including in

Bug#509566: [Pkg-puppet-devel] Bug#509566:

2009-01-08 Thread Faidon Liambotis
Thom May wrote: I'm not sure what I want to do, and I definitely don't want you to NMU. ACK. I don't want to challenge you on this (and I won't act) but please reconsider the severity of this. Thanks, Faidon -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#509566: Puppet: setting timeout to 0 causes puppet to try requesting a certificate infinitely often

2009-01-07 Thread Faidon Liambotis
severity 509566 grave thanks Besides having autosign disabled on the master or not having network at all, the problem can be manifested with installing the package on a random on a random network. Let me repeat this: executing apt-get install puppet on *any* random system, without any

<    1   2   3   4   5   6   7   8   >