Bug#1023125: performous: new upstream release (1.2.0)

2022-10-30 Thread Rodrigo Campos
Package: performous Version: 1.1+git20181118-5+b1 Severity: normal Hi! A few months ago there has been a new upstream release of performous for version 1.2.0. See: https://github.com/performous/performous/releases/tag/1.2.0 It would be great to have it in Debian :) Best, Rodrigo

Bug#992083: Mod tidy should ignore missing standard library packages (fixed in go >= 1.15.10)

2021-08-11 Thread Rodrigo Campos
Package: golang-1.15 Version: 1.15.9-6 Severity: normal Hi! I'm currently trying to run go mod tidy on runc master[1] (16027b814d59403b71bb369a0ba064da47dd302b) and fails with this error: io/fs: package io/fs is not in GOROOT (/usr/lib/go-1.15/src/io/fs) Googling a little

Bug#990820: DefaultErrnoRet not working with runc 1.0

2021-07-08 Thread Rodrigo Campos
On 7/8/21 5:57 PM, Shengjing Zhu wrote: Hi, Hi! :) On Thu, Jul 8, 2021 at 7:12 PM Rodrigo Campos wrote: runc 1.0 from debian repositories doesn't honor DefaultErrnoRet, that It's expected. As I disable that in https://salsa.debian.org/go-team/packages/runc/-/blob/experimental/debian

Bug#926202: Seems this can be closed

2020-03-25 Thread Rodrigo Campos
IMHO, this can be closed as the fix (I've verified with a repro) is included now. But maybe can you, jaros...@thinline.cz, try to reproduced with those kernels I mentioned and report back?

Bug#926202: Fixed upstream

2020-03-25 Thread Rodrigo Campos
tags 926202 + fixed-upstream We (at Kinvolk) hit the very same bug (fault_state(0x5862)!) and created a way to reproduce with fio to have heavy IO. All the info is here: https://github.com/flatcar-linux/Flatcar/issues/12 As it's shown in the link, this was fixed in

Bug#902876: wordpress: CVE-2018-12895

2018-07-09 Thread Rodrigo Campos
On Mon, Jul 09, 2018 at 10:04:56PM +1000, Craig Small wrote: > I have sent the debdiff for stretch to the security team. Once they are > happy about it, stretch will get that update. Great, thanks a lot! :-)

Bug#902876: wordpress: CVE-2018-12895

2018-07-07 Thread Rodrigo Campos
On Sat, Jul 07, 2018 at 10:35:44PM +1000, Craig Small wrote: > Looks like they made a release, 4.9.7 with the fix. Uploading soon. > > The relevant patch (for backports) is > https://github.com/WordPress/WordPress/commit/c9dce0606b0d7e6f494d4abe7b193ac046a322cd I can only backport from packages

Bug#892010: exo-utils: exo-preferred-applications does not run with error "exo-helper-1: not found"

2018-03-03 Thread Rodrigo Campos
Package: exo-utils Version: 0.12.0-1 Severity: normal Dear Maintainer, When running "exo-preferred-applications" it fails with: /usr/bin/exo-preferred-applications: 11: exec: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1: not found The exo-preferred-applications seems to be a

Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-22 Thread Rodrigo Campos
On Thu, Sep 21, 2017 at 04:26:53PM +0100, Rodrigo Campos wrote: > On Thu, Sep 21, 2017 at 09:54:49AM +0200, Ángel wrote: > > Salvatore wrote: > > > have you identified already the issue -> fixing commit mappings? > > > > For version 4.8.1 [buster, sid], upstr

Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-21 Thread Rodrigo Campos
On Thu, Sep 21, 2017 at 09:54:49AM +0200, Ángel wrote: > Salvatore wrote: > > have you identified already the issue -> fixing commit mappings? > > For version 4.8.1 [buster, sid], upstream fixed them on 4.8.2 > https://codex.wordpress.org/Version_4.8.2 And for jessie backports I'll update as

Bug#851066: More security bugs in debian version

2017-05-20 Thread Rodrigo Campos
Hi, Just in case you weren't aware, several security issues has been fixed in flash. Here is the last batch of fixes that I know of: https://blog.qualys.com/laws-of-vulnerabilities/2017/05/09/adobe-fixes-half-dozen-flash-vulnerabilities-and-more These is, of course, not fixed in debian because

Bug#862816: wordpress: Six security bugs in wordpress 4.7.4 and earlier

2017-05-17 Thread Rodrigo Campos
On Wed, May 17, 2017 at 09:54:55PM +1000, Craig Small wrote: > Source: wordpress > Version: 4.7.4+dfsg-1 > Severity: grave > Tags: upstream security > Justification: user security hole > > Wordpress 4.7.4 and earlier has 6 security holes that are fixed in > 4.7.5[1] > > * 2.7.0 - 4.7.4 >

Bug#854869: wordpress: please consider to package and enable by default disable REST API plugin

2017-02-16 Thread Rodrigo Campos
On Sat, Feb 11, 2017 at 12:18:06PM +0100, Martin Steigerwald wrote: > Package: wordpress > Version: 4.7.2+dfsg-1~bpo8+1 > Severity: normal > > Dear Craig, > > thanks for your notice on your blog. Fortunately Rodrigo was fast with > the backport. And I think I installed the update before

Bug#845996: needrestart: Restarts lxdm by default

2016-11-28 Thread Rodrigo Campos
On Sun, Nov 27, 2016 at 05:45:24PM +0100, Thomas Liske wrote: > > Hi Rodrigo, > > Rodrigo Campos <rodr...@sdfg.com.ar> writes: > > I'm using lxdm display manager and needrestart tries to restart it by > > default, > > instead of being disabled by default as i

Bug#845996: needrestart: Restarts lxdm by default

2016-11-27 Thread Rodrigo Campos
Package: needrestart Version: 2.10-1 Severity: normal Dear Maintainer, I'm using lxdm display manager and needrestart tries to restart it by default, instead of being disabled by default as it is with others DM. The attached patch adds this behaviour for LXDM too. Please consider merging this

Bug#825696: golang: new upstream release (1.6.2)

2016-05-28 Thread Rodrigo Campos
Package: golang Version: 2:1.6.1-2 Severity: normal Hi, There is a new version, 1.6.2, available. I'm particularly interested because I'm hitting a bug in the net/http package that is fixed 1.6.2. Can you please upgrade? Thanks a lot, Rodrigo

Bug#818758: WordPress plugins depending on libphp-phpmailer > 5.2.10

2016-03-20 Thread Rodrigo Campos
On Sun, Mar 20, 2016 at 02:20:31PM +0100, David Raison wrote: > Package: wordpress > Version: 4.4.2+dfsg-1~bpo8+1 Please report bugs that you found in the packages to the backports mailing list and NOT to the Debian BTS, it says here: http://backports.debian.org/Instructions/#index6h2

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-16 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:54:17PM -0300, Felipe Sateler wrote: > Control: tags -1 - moreinfo > Control: forwarded -1 https://bugs.freedesktop.org/show_bug.cgi?id=94167 > > Thanks. Marking as forwarded accordingly. Closed upstream, not sure if you want to close it here too :)

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:46:22PM -0300, Felipe Sateler wrote: > On 15 February 2016 at 19:41, Rodrigo Campos <rodr...@sdfg.com.ar> wrote: > > On Mon, Feb 15, 2016 at 07:09:11PM -0300, Felipe Sateler wrote: > >> On 15 February 2016 at 16:11, Rodrigo Campos <

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:09:11PM -0300, Felipe Sateler wrote: > On 15 February 2016 at 16:11, Rodrigo Campos <rodr...@sdfg.com.ar> wrote: > > >> Would you forward > >> it upstream, then? > > No, sorry. When feedback will be requested by upstream then I won

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
Now with 812...@bugs.debian.org on "Cc:" On Mon, Feb 15, 2016 at 07:11:04PM +0000, Rodrigo Campos wrote: > On Mon, Feb 15, 2016 at 03:53:07PM -0300, Felipe Sateler wrote: > > On 15 February 2016 at 13:23, Rodrigo Campos <rodr...@sdfg.com.ar> wrote: > > > On Mon

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 12:58:58PM -0300, Felipe Sateler wrote: > Control: tags -1 moreinfo > > On 24 January 2016 at 22:42, Rodrigo Campos <rodr...@sdfg.com.ar> wrote: > > > > Package: pulseaudio > > Version: 7.1-2 > > Severity: normal > > > > D

Bug#812557: Acknowledgement (pulseaudio: "refusing to start/autospawn" with multi-user setup)

2016-02-01 Thread Rodrigo Campos
ping? :)

Bug#812557: Acknowledgement (pulseaudio: "refusing to start/autospawn" with multi-user setup)

2016-02-01 Thread Rodrigo Campos
On Mon, Feb 01, 2016 at 03:18:14PM -0300, Felipe Sateler wrote: > On 1 Feb 2016 09:42, "Rodrigo Campos" <rodr...@sdfg.com.ar> wrote: > > > > ping? :) > > Hi, sorry I am out of town so I have not taken a look. But using the same Oh, no problem. Let me

Bug#813228: Thanks

2016-01-30 Thread Rodrigo Campos
Yes, I know it's present in newer versions. Didn't know this is whishlist, sorry. I tought it was normal as MITM attacks are easier when no cert validation is done at all. I asked because the SSLCiphers were backported (although that probably is an even simpler patch) to 1.4 and thought this is

Bug#813228: znc: doesn't validate TLS certificate of IRC server

2016-01-30 Thread Rodrigo Campos
Source: znc Version: 1.4-2 Severity: normal Dear Maintainer, The version in jessie does not validates the certificate of the IRC server. Here is the patch doing it that is merged upstream: https://github.com/znc/znc/pull/761 I didn't try if it applies cleany to jessie, but I think it

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-01-24 Thread Rodrigo Campos
Package: pulseaudio Version: 7.1-2 Severity: normal Dear Maintainer, I'be updated debian testing (didn't update in a while) and after I upgraded, sound from programs that run as a different user stopped working. When some other user tries to run: "/usr/bin/pulseaudio --start

Bug#810325: Wordpress backported patches

2016-01-08 Thread Rodrigo Campos
Or, if you prefer, you can see the changes backported to 4.1 directly by wordpress (they release 4.1.9 that you can use as base for debian stable). Also, if you want to see the patches in git, you can see: https://github.com/WordPress/WordPress/commits/4.1-branch The relevant patch that

Bug#806157: backupninja: Don't use "--extra-clean" with duplicity >= 0.6.20

2015-11-24 Thread Rodrigo Campos
Package: backupninja Version: 1.0.1-2 Severity: normal Dear Maintainer, When running duplicity with the "--extra-clean" flag, it removes used signatures and makes difficult to restore backups older than the last full backup, as reported here[1]. Also, this was added to backupninja to workaround

Bug#783572: New upstream release

2015-09-24 Thread Rodrigo Campos
Hi, I'd need postfix 3.0 for full SMTPUTF8 support too. Please upgrade :) Thanks a lot, Rodrigo

Bug#783572: New upstream release

2015-09-24 Thread Rodrigo Campos
severity 783572 normal thanks Changing severity to normal, as usually a new upstream release is a normal bug. Not wishlist. Thanks again, Rodrigo

Bug#799140: wordpress: CVE-2015-5714 CVE-2015-5715

2015-09-17 Thread Rodrigo Campos
On Wed, Sep 16, 2015 at 06:47:04PM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Wed, Sep 16, 2015 at 10:54:27AM +0200, Salvatore Bonaccorso wrote: > > See https://wordpress.org/news/2015/09/wordpress-4-3-1/ for details. I > > have not checked older versions in jessie and wheezy. Are they Not

Bug#791708: needrestart: Add a "--quiet" option

2015-09-16 Thread Rodrigo Campos
On Wed, Sep 16, 2015 at 06:50:19PM +0200, Thomas Liske wrote: > Re, > > On Wed, Jul 22, 2015 at 04:55:25AM +0100, Rodrigo Campos wrote: > > > > It's a good aproximation, but filtering stderr seems like a "no-no". > > > > Is there a reason you don't

Bug#798194: Me too

2015-09-06 Thread Rodrigo Campos
On Mon, Sep 07, 2015 at 01:01:58AM +0100, Rodrigo Campos wrote: > The very same happens to me too. Can this be fixed ASAP please ? Upgrading gstreamer0.10-plugins-good to the version in unstable (0.10.31-3+nmu4+b2) solves the issue. pidgin can be installed (and works) just fine. Thanks a

Bug#798194: Me too

2015-09-06 Thread Rodrigo Campos
The very same happens to me too. Can this be fixed ASAP please ? Thanks a lot, Rodrigo

Bug#791708: needrestart: Add a --quiet option

2015-07-21 Thread Rodrigo Campos
On Tue, Jul 21, 2015 at 01:17:23AM +0200, Thomas Liske wrote: Re, On 07/07/2015 10:22 PM, Rodrigo Campos wrote: Thanks a lot for the quick response! I tried but didn't understand it. How can I make it interactive or auto? Using -b with -r doesn't seem to do anything. The batch

Bug#791708: needrestart: Add a --quiet option

2015-07-07 Thread Rodrigo Campos
Package: needrestart Version: 2.1-1 Severity: wishlist Dear Maintainer, I'm using needrestart inside scripts (in particular fabric scripts) and it will be nice if a --quiet option can be added. Something like the -q from apt-get, that says: Quiet; produces output suitable for logging,

Bug#791708: needrestart: Add a --quiet option

2015-07-07 Thread Rodrigo Campos
On Tue, Jul 07, 2015 at 09:56:44PM +0200, Thomas Liske wrote: Hi Rodrigo, On 07/07/2015 08:58 PM, Rodrigo Campos wrote: Package: needrestart Version: 2.1-1 Severity: wishlist Dear Maintainer, I'm using needrestart inside scripts (in particular fabric scripts

Bug#781767: Makes it unusable for my buckets too

2015-06-16 Thread Rodrigo Campos
On Tue, Jun 16, 2015 at 10:12:03AM -0500, Matt Domsch wrote: Buckets with dots is the AWS recommended method, and is required for all regions except for us-east-1.  It becomes usable if you use Ohh, didn't know that. Then I fully agree =) Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to

Bug#781767: Makes it unusable for my buckets too

2015-06-16 Thread Rodrigo Campos
On Sat, Jun 13, 2015 at 07:24:15AM +, Gianfranco Costamagna wrote: Control: severity -1 grave Control: found -1 1.5.0~rc1-2 Control: fixed -1 1.5.2-1 thanks I'm setting the correct severity, since the jessie package is completely unusable. Well, it's not completely unusable. It

Bug#781767: Makes it unusable for my buckets too

2015-06-12 Thread Rodrigo Campos
On Fri, Jun 12, 2015 at 08:57:02AM +, Gianfranco Costamagna wrote: Hi Rodrigo and Matt, I tried to apply the upstream commit to 1.5.0~rc1-2 and it doesn't apply cleanly. I see two/three possible solutions: 1) upgrade to stretch (just almost jocking) or apt-pinning s3cmd from there

Bug#781767: Makes it unusable for my buckets too

2015-06-12 Thread Rodrigo Campos
On Fri, Jun 12, 2015 at 03:25:52PM +, Gianfranco Costamagna wrote: Hi Rodrigo I'm not doing any of those. I'm just using a python virtualenv right now, but would love to switch to jessie and avoid it :) I uploaded a new s3cmd on unstable, that will hopefully migrate to testing in 5

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
On Thu, Jun 11, 2015 at 04:42:15PM -0500, Matt Domsch wrote: The copy in jesse's repository is 1.5.0~rc1-2 which is not v1.5.2 where the fix was committed.  I see the same failure if I simply apt-get install s3cmd on a new jesse install.  v1.5.2 is in experimental and unstable or can be

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
Hi, Any news on this ? I've upgraded to jessie and scripts using s3cmd broke because of this bug. It renders the package unusable to me (and all using dots in the buckets name). As a workaround, just in case, I've used s3cmd from a python virtual env using the last release. Probably the package

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
On Thu, Jun 11, 2015 at 01:38:01PM -0500, Matt Domsch wrote: Please run a failing case with --debug and report results. I'm not sure why you need this, as it's trivial to reproduce and the original report says which commit should fix it. But here it goes anyways...  v1.5.2 should not fail on

Bug#787118: [debian-mysql] Bug#787118: mariadb-server-10.0: Compile with OpenSSL (instead of YaSSL)

2015-05-28 Thread Rodrigo Campos
On Thu, May 28, 2015 at 11:53:14PM +0300, Otto Kekäläinen wrote: Hello! Thanks for reporting your request. OpenSSL is problematic because its license. I think Debian recommends using cyassl so we'll switch from bundled yassl to cyassl once it is confirmed to work. I don't think anybody is

Bug#787118: mariadb-server-10.0: Compile with OpenSSL (instead of YaSSL)

2015-05-28 Thread Rodrigo Campos
Package: mariadb-server-10.0 Version: 10.0.19-1 Severity: wishlist Dear Maintainer, Mariadb seems to be compiled using YaSSL intead of openssl. For example, running in a mysql console: MariaDB [(none)] show variables like %ssl%; +---+--+ |

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-26 Thread Rodrigo Campos
On Wed, May 20, 2015 at 10:08:44PM +1000, Craig Small wrote: On Mon, May 18, 2015 at 10:12:21AM +0200, Raphael Hertzog wrote: That's the general case. But with wordpress, the security team is rather open to integrate new upstream releases. We did it multiple times already. Let me ask them.

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-18 Thread Rodrigo Campos
On Mon, May 18, 2015 at 10:12:21AM +0200, Raphael Hertzog wrote: On Sat, 16 May 2015, Craig Small wrote: I mean, instead of using 4.2.x to extract the patches and backport, isn't it easier to extract them from 4.1.x for stable ? Or just do a new upstream release based on 4.1.5 ?

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-15 Thread Rodrigo Campos
On Fri, May 15, 2015 at 09:08:28PM +1000, Craig Small wrote: On Thu, May 07, 2015 at 05:31:03AM +0100, Rodrigo Campos wrote: A new Wordpress *critical* security release has been announced here: https://wordpress.org/news/2015/05/wordpress-4-2-2/ Can you please update and backport

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-15 Thread Rodrigo Campos
On Fri, May 15, 2015 at 02:35:45PM +0100, Rodrigo Campos wrote: On Fri, May 15, 2015 at 09:08:28PM +1000, Craig Small wrote: On Thu, May 07, 2015 at 05:31:03AM +0100, Rodrigo Campos wrote: A new Wordpress *critical* security release has been announced here: https://wordpress.org/news/2015

Bug#784603: May help to easily apply changes to stable: WP 4.1.5 release

2015-05-14 Thread Rodrigo Campos
On Wed, May 13, 2015 at 07:31:39PM +0100, Rodrigo Campos wrote: Hi, Just in case you didn't notice (I didn't at first :) there was a wordpress 4.1.5 release upstream: https://codex.wordpress.org/Version_4.1.5 You can download here: https://wordpress.org/download/release-archive

Bug#784603: May help to easily apply changes to stable: WP 4.1.5 release

2015-05-13 Thread Rodrigo Campos
Hi, Just in case you didn't notice (I didn't at first :) there was a wordpress 4.1.5 release upstream: https://codex.wordpress.org/Version_4.1.5 You can download here: https://wordpress.org/download/release-archive/ This might be the easiest way to apply the changes to stable. But, of course,

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-06 Thread Rodrigo Campos
Source: wordpress Version: 4.1+dfsg-1+deb8u1 Severity: important Dear Maintainer, A new Wordpress *critical* security release has been announced here: https://wordpress.org/news/2015/05/wordpress-4-2-2/ Can you please update and backport the patches to stable ? Also, let me know if you need

Bug#783347: Any ETA on when the backport will come to jessie ?

2015-05-01 Thread Rodrigo Campos
On Sat, May 02, 2015 at 01:01:29PM +1000, Craig Small wrote: On Thu, Apr 30, 2015 at 07:46:52PM +0100, Rodrigo Campos wrote: But is there any ETA on when the changes will come to jessie ? Can I help you with testing ? Also, I can review the backports if you still need peer review

Bug#780817: Can you please backport to stable?

2015-04-30 Thread Rodrigo Campos
On Tue, Apr 14, 2015 at 04:02:41PM +0100, Rodrigo Campos wrote: On Tue, Apr 07, 2015 at 03:00:46PM +0100, Rodrigo Campos wrote: On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: Hi, Can you please

Bug#783347: Any ETA on when the backport will come to jessie ?

2015-04-30 Thread Rodrigo Campos
Sorry to disturb Craig, But is there any ETA on when the changes will come to jessie ? Can I help you with testing ? Also, I can review the backports if you still need peer review :) Thanks a lot and sorry again, Rodrigo -- To UNSUBSCRIBE, email to

Bug#780817: Can you please backport to stable?

2015-04-14 Thread Rodrigo Campos
On Tue, Apr 07, 2015 at 03:00:46PM +0100, Rodrigo Campos wrote: On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: Hi, Can you please backport the security fixes for stable? Or is that process already

Bug#780817: Can you please backport to stable?

2015-04-07 Thread Rodrigo Campos
On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: Hi, Can you please backport the security fixes for stable? Or is that process already ongoing? Hi again, I contacted the security team (t

Bug#780817: Can you please backport to stable?

2015-03-31 Thread Rodrigo Campos
On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: Hi, Can you please backport the security fixes for stable? Or is that process already ongoing? Hi again, I contacted the security team (t...@security.debian.org) and Salvatore Bonaccorso answered me that there won't be a DSA

Bug#780817: Can you please backport to stable?

2015-03-24 Thread Rodrigo Campos
Hi, Can you please backport the security fixes for stable? Or is that process already ongoing? Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#780851: wordpress: Will unstable/experimental receive security updates during the freeze?

2015-03-20 Thread Rodrigo Campos
Source: wordpress Severity: wishlist Dear Maintainer, I need to install wordpress, but the version on debian stable is too old for my need. I was thinking about using the debian package from unstable (that I see is updated to latest wordpress, thanks!), but I'd like to know if you plan to

Bug#780817: dokuwiki: Insufficient escaping in user manager allows XSS attack

2015-03-19 Thread Rodrigo Campos
Package: dokuwiki Version: 0.0.20120125b-2+deb7u1 Severity: important Dear Maintainer, There's been a hotfix release for dokuwiki. From the report: The user's details were not properly escaped in the user manager's edit form. This allows a registered user to edit her own name (using the change

Bug#771199: Ping

2014-12-22 Thread Rodrigo Campos
On Fri, Dec 12, 2014 at 12:21:54PM -0300, Rodrigo Campos wrote: On Fri, Dec 12, 2014 at 03:42:26PM +0100, Stefan Fritsch wrote: tags 771199 wheezy thanks On Friday 12 December 2014 11:29:49, Rodrigo Campos wrote: On Thu, Dec 04, 2014 at 10:01:51PM +, Rodrigo Campos wrote: Ping

Bug#771199: Ping

2014-12-12 Thread Rodrigo Campos
On Thu, Dec 04, 2014 at 10:01:51PM +, Rodrigo Campos wrote: Ping ? :) Re-ping ? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#771199: Ping

2014-12-12 Thread Rodrigo Campos
On Fri, Dec 12, 2014 at 03:42:26PM +0100, Stefan Fritsch wrote: tags 771199 wheezy thanks On Friday 12 December 2014 11:29:49, Rodrigo Campos wrote: On Thu, Dec 04, 2014 at 10:01:51PM +, Rodrigo Campos wrote: Ping ? :) Re-ping ? This is a fix that we can and should include

Bug#771199: Ping

2014-12-04 Thread Rodrigo Campos
Ping ? :) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#770425: Fixes for debian stable ?

2014-12-03 Thread Rodrigo Campos
On Wed, Dec 03, 2014 at 05:58:11PM +1100, Craig Small wrote: On Tue, Dec 02, 2014 at 02:17:37PM +, Rodrigo Campos wrote: The upstream release was on Nov 20, it's been almost 2 weeks and the bug seem kind of serious. Any chance to do a quick fix and then continue to discuss changing

Bug#770425: Fixes for debian stable ?

2014-12-02 Thread Rodrigo Campos
Hi, The upstream release was on Nov 20, it's been almost 2 weeks and the bug seem kind of serious. Any chance to do a quick fix and then continue to discuss changing wordpress version in stable ? Or any ETA on when the fixes will come to stable ? I've manually applied the workaround suggested

Bug#771199: apache2: SNI hostname comparison against Host header is not case-insensitive

2014-11-27 Thread Rodrigo Campos
Package: apache2 Version: 2.2.22-13+deb7u3 Severity: normal Dear Maintainer, apache2 on debian using SSL returns error 400 when using ssl vhosts with SNI and some capital letters. A similar bug is reported on Ubuntu[1] with instructions on how to reproduce. I can confirm it happens when hosting

Bug#770949: wordpress: Please update to fix security bug

2014-11-25 Thread Rodrigo Campos
Source: wordpress Version: 3.6.1+dfsg-1~deb7u4 Severity: important Dear Maintainer, I'm setting the priority to important as it is mentioned as critical update. Please feel free to change it, and sorry in advance if I set it wrong :) The original wordpress announce is here:

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
Package: apache2 Version: 2.2.22-13+deb7u3 Severity: normal Dear Maintainer, As explained here[1], TLS session tickets can make Perfect Forward Secrecy useless. The currently backported patches of openssl and apache on debian stable don't provide any way to disable session tickets nor change the

Bug#762619: I'm using MPM prefork

2014-09-23 Thread Rodrigo Campos
Forgot to tell that I tested it with MPM prefork. Using another MPM might change the result of the test (didn't test, not sure if it would or not). Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
On Tue, Sep 23, 2014 at 10:41:49PM +0200, Stefan Fritsch wrote: On Tuesday 23 September 2014 20:30:04, Rodrigo Campos wrote: I tried to do some tests to see if maybe a reload was enough (doesn't cause downtime :)) to re-generate the randomly generated session ticket key at startup. But let

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
On Tue, Sep 23, 2014 at 11:43:22PM +0200, Stefan Fritsch wrote: On Tuesday 23 September 2014 22:02:36, Rodrigo Campos wrote: But well, that email says with that setup it did. As it did with mine. And reading the thread I didn't see nobody saying that in all mpms and configurations

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-08-26 Thread Rodrigo Campos
On Tue, Aug 26, 2014 at 10:07:47AM +0200, Tanguy Ortolo wrote: Rodrigo Campos, 2014-08-26 01:55+0100: On Mon, Aug 25, 2014 at 05:51:52PM +0200, Tanguy Ortolo wrote: Given the importance of this modification, and the level of damage it could do if we made a mistake (it deletes file in a wiki

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-08-25 Thread Rodrigo Campos
On Mon, Aug 25, 2014 at 05:51:52PM +0200, Tanguy Ortolo wrote: Hello, Rodrigo Campos, 2014-07-25 19:12+0100: The dokuwiki installation doesn't ever erase the cache. In my installation the cache was using 750M and the whole data directory, excluding the cache, was 20M. When looking how

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-07-25 Thread Rodrigo Campos
Package: dokuwiki Version: 0.0.20120125b-2 Severity: normal Dear Maintainer, The dokuwiki installation doesn't ever erase the cache. In my installation the cache was using 750M and the whole data directory, excluding the cache, was 20M. When looking how to erase the cache, I found this:

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-26 Thread Rodrigo Campos
On Wed, Feb 26, 2014 at 11:04:16PM +0100, Christoph Biedl wrote: Rodrigo Campos wrote... Sure, here they go: $ hd 14_02_04_access_log.gz | head -4 1f 8b 08 08 ff 7e f1 52 02 03 31 34 5f 30 32 5f |.~.R..14_02_| 0010 30 34 5f 61 63 63 65 73 73 5f 6c

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-25 Thread Rodrigo Campos
On Tue, Feb 25, 2014 at 10:14:59PM +0100, Christoph Biedl wrote: Rodrigo Campos wrote... I'm seeing the exact same thing with file from wheezy, version 5.11-2+deb7u1. While I was able to reproduce that one in squeeze, wheezy looks fine to me. Can you please check again? Yeap, wheezy

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-19 Thread Rodrigo Campos
Hi, I'm seeing the exact same thing with file from wheezy, version 5.11-2+deb7u1. If it helps anyone, in my case I can workaround this bug using gzip -t. If you need more information, please let me know. Thanks, Rodrigo -- To UNSUBSCRIBE, email to

Bug#728444: libfontconfig1: xpdf is broken by fontconfig version 2.11.0-1

2013-11-04 Thread Rodrigo Campos
On Tue, Nov 05, 2013 at 12:10:35AM +0100, Francesco Poli wrote: On Mon, 4 Nov 2013 13:01:22 +0100 Vincent Lefevre wrote: On 2013-11-01 12:58:19 +0100, Francesco Poli (wintermute) wrote: I wonder why nobody thought to report a release-critical bug against libfontconfig1, in order to

Bug#728444: Work-around

2013-11-02 Thread Rodrigo Campos
Hi, Besides is probably pretty clear from the bug report, I add this information just in case is useful for someone else. Downgrading the library to the previous version on testing makes xpdf work again. I did this by adding: deb

Bug#726034: xchat: Uses absolute paths on config files

2013-10-11 Thread Rodrigo Campos
Package: xchat Version: 2.8.8-7.1 Severity: normal Dear Maintainer, When switching users in my PC I realized xchat uses absolute paths on the config file, so it was pointless to only copy the ~/.xchat folder and expect it to work okay. For example, it uses an abs path for the dcc_dir option in

Bug#714604: libc6-dev: RUSAGE_THREAD constant not exported

2013-07-01 Thread Rodrigo Campos
Package: libc6-dev Version: 2.13-38 Severity: normal Hi, When including sys/time.h and sys/resource.h as the getrusage manpage says, RUSAGE_THREAD is not defined. For example, the following code fails to compile: #include sys/time.h #include sys/resource.h int main() {

Bug#669878: Workaround that worked for me

2012-07-07 Thread Rodrigo Campos
Hi, I have, like Stefan Beller, a 32-bit system with fluxbox started by gdm too and hit the very same problem he describe. What did work for me was removing phonon, like this: aptitude purge phonon phonon-backend-xine (I did have phonon installed, not phonon-backend-vlc) This removed

Bug#669878: Workaround that worked for me

2012-07-07 Thread Rodrigo Campos
On Sat, Jul 07, 2012 at 03:54:43PM -0300, Rodrigo Campos wrote: Hi, I have, like Stefan Beller, a 32-bit system with fluxbox started by gdm too and hit the very same problem he describe. What did work for me was removing phonon, like this: aptitude purge phonon phonon-backend

Bug#650639: fluxbox crash when expanding the toolbar to All Heads

2011-12-05 Thread Rodrigo Campos
On Mon, Dec 05, 2011 at 01:28:26PM -0500, Paul R. Tagliamonte wrote: I've been meaning to ack this. A coredump would be ultra useful, I think the debug headers are stripped, so it might require a bit of love. Yeah, debug symbols are not present on the fluxbox package and there isn't a

Bug#650639: fluxbox crash when expanding the toolbar to All Heads

2011-12-01 Thread Rodrigo Campos
Package: fluxbox Version: 1.3.2-2 Severity: normal Dear Maintainer, I have a Dual head configuration on my notebook at work. Just in case it matters, to configure it (i've just configured it) I used these xrandr lines: xrandr --output VGA1 --mode 1024x768 --scale 1x1.2 --left-of LVDS1 xrandr

Bug#590986: Already fixed

2011-12-01 Thread Rodrigo Campos
Hi, As I said, tha patch has been applied upstream. Now the upstream release that contains the patch has been included in Debian, so feel free to close this bug. Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#580069: workarround for the first run

2011-11-17 Thread Rodrigo Campos
Hi, A workarround that works for me is forcing logrotate with -f. This way it adds the entry to /var/lib/logrotate/status (as logrotate never rotated it, there isn't an entry), and it should behave as expected from now on if I'm not wrong. Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email

Bug#626039: pidgin still uninstallable

2011-11-12 Thread Rodrigo Campos
Hi, pidgin is still uninstallable. Is there any plan to sort this out in the near future ? Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#598150: Using consolekit 0.4.1-4 workarounds the issue

2011-03-07 Thread Rodrigo Campos
Hi, I just wanted to add that using consolekit 0.4.1-4 from stable (with newer nm and nm-applet) works okay for me. Also, So, in short, I believe this won't be fixed in ConsoleKit and we can post bug reports (priority wishlist) against the DMs. The bug reported to xdm was marked as wont fix:

Bug#598150: Using consolekit 0.4.1-4 workarounds the issue

2011-03-07 Thread Rodrigo Campos
On Mon, Mar 07, 2011 at 10:57:06PM -0300, Rodrigo Campos wrote: Hi, I just wanted to add that using consolekit 0.4.1-4 from stable (with newer nm and nm-applet) works okay for me. Sorry, forgot to tell that to enable the buttons of 'Enable Wireless' and 'Enable Networking' I need to remove

Bug#604404: libpurple0: Unable to validate certificate (msn)

2010-11-21 Thread Rodrigo Campos
Package: libpurple0 Severity: important I use severity important since it makes msn almost unusable for me. But I'm not sure important is the correct severity :) Pidgin disconnects from MSN very often with Unable to validate certificate. The certificate for omega.contacts.msn.com could not be

Bug#604404: The fix works for me

2010-11-21 Thread Rodrigo Campos
Also, I forgot to tell that the fix works for me :) Thanks! Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#590986: Patch applied upstream

2010-10-20 Thread Rodrigo Campos
FYI the patch has been applied upstream. See: http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d5d82ecf3b0f370216c12e0f8163f0a5249da91e Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#590986: Add a cross reference from cat's man page to tac

2010-10-19 Thread Rodrigo Campos
The attached patch should fix this. I've also just sent it upstream Thanks a lot, Rodrigo From 15f32fae82619310affe90f6ac24a37f146a31f9 Mon Sep 17 00:00:00 2001 From: Rodrigo Campos rodr...@sdfg.com.ar Date: Tue, 19 Oct 2010 19:48:46 -0300 Subject: [PATCH] doc: add a cross reference from cat's

Bug#544374: Any reason to not close this bug ?

2010-09-30 Thread Rodrigo Campos
As I said in my last email, on 6 Jan 2010, the problem was that my old desktop doesn't have the needed OpenGL support. Is there any reason to keep this bug open ? Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#590986: coreutils: cat manpage should refer to tac

2010-07-30 Thread Rodrigo Campos
Package: coreutils Version: 8.5-1 Severity: normal tac (by default) does the same as cat, but in reverse order. So I think having a see also tac on cat's manpage could be useful (it would, at least, have saved me about 5 minutes :-P) Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to

  1   2   >