Bug#560946: CVE-2009-3560 and CVE-2009-3720 denial-of-services

2009-12-14 Thread Mike Hommey
tag 560946 wontfix thanks On Mon, Dec 14, 2009 at 11:31:18AM -0500, Michael Gilbert wrote: retitle 560946 xulrunner: embeds expat severity 560946 important thanks On Mon, 14 Dec 2009 09:15:12 +0100, Mike Hommey wrote: On Sat, Dec 12, 2009 at 10:56:59PM -0500, Michael Gilbert wrote:

Bug#561119: dicom3tools: Trailing character invalid for this VR is not reported for File Meta Information

2009-12-14 Thread Mathieu Malaterre
Package: dicom3tools Version: 1.0~20091113-1 Severity: normal In the following file: http://gdcm.sourceforge.net/thingies/TG18-CH-2k-01_gdcmconv_j2k.dcm Clearly dciodvfy should report an issue of invalid character in (0002,0013) Implementation Version Name. Output is: $ dciodvfy

Bug#561116: libdns53: formating suggestions for long description

2009-12-14 Thread Gerfried Fuchs
Source: libdns53 Version: 1:9.6.1.dfsg.P2-1 Severity: minor Hi! The long description of your package could need some formating improvements. I want to make you aware that indention by at least two spaces means preformated text and will get rendered as such by package description

Bug#401066: [php-maint] Bug#401066: php5: Please patch PHP to add a mail header when sending mail

2009-12-14 Thread Krasimir Ganchev
Raphael I understand your point and it's nothing wrong with that but please note that this is official code not a third party patch. It is part of PHP 5.3.0 code and a useful feature for some admins. Regards, Krasimir Ganchev -Original Message- From: atom...@gmail.com

Bug#560910: iptables ignores mask on source ip address:

2009-12-14 Thread Laurence J. Lane
On Sun, Dec 13, 2009 at 11:00 AM, Anders Fugmann and...@fugmann.net wrote: Hi, I also observe that iptables ignores mask specification on source or destination options. The problem is observed when replacing rules. Eg. That's fixed in 1.4.6, which I'll roll out shortly. -- To UNSUBSCRIBE,

Bug#561122: dicom3tools: Error - Unrecognized enumerated value RGB for value 1 of attribute Photometric Interpretation

2009-12-14 Thread Mathieu Malaterre
Package: dicom3tools Version: 1.0~20091113-1 Severity: normal dciodvfy reports an erroneous issue: dciodvfy gdcmData/D_CLUNIE_VL6_RLE.dcm SCImage Error - Missing attribute Type 2C Conditional Element=Laterality Module=GeneralSeries Error - Unrecognized enumerated value RGB for value 1 of

Bug#560325: libsmi2ldbl: crashes wireshar when MIB-s are missing

2009-12-14 Thread Vincent Bernat
OoO En ce début d'après-midi nuageux du jeudi 10 décembre 2009, vers 14:14, Meelis Roos mr...@linux.ee disait : Package: libsmi2ldbl Version: 0.4.8+dfsg2-2 Severity: normal wireshark[16059]: segfault at 60043 ip 7f37db33e450 sp 7fff010497f0 error 4 in

Bug#561120: java3ds-fileloader: formating suggestions for long description

2009-12-14 Thread Gerfried Fuchs
Source: java3ds-fileloader Version: 1.2-1 Severity: minor Hi! The long description of your package could need some formating improvements. For a start, your package description should contain of full sentences[1], the start of your long description and the word Supports: aren't complete

Bug#561121: FTBFS on sparc: ICE in do_SUBST, at combine.c:677

2009-12-14 Thread Ludovic Brenta
Package: polyorb Version: 2.6.0~20090423-1 Severity: serious For the very first upload, polyorb FTBFS on sparc (it succeeds on i386, amd64 and powerpc): gcc-4.4 -c -gnatyg -gnatwae -gnat05 -gnatec=/build/buildd-polyorb_2.6.0~20090423-1-sparc-aHRpyU/polyorb-2.6.0~20090423/compilers/config.adc -g

Bug#558788: I agree with Henry-Nicolas

2009-12-14 Thread Rostislav Okulov
Yes, Ubuntu developers are trying to backport nouveau DRM as an ATI/Intel to .32 kernel and I think Debian can simply take their work. Because if not, 2 year cycle forbid us to use this driver in stable. And if mesa 7.7/7.8 hits the squeeze this pair (nouveau drm and nouveau dri) will be much

Bug#561123: dicom3tools: 13523 abort dcdump PrivateOwnerInversion.dcm

2009-12-14 Thread Mathieu Malaterre
Package: dicom3tools Version: 1.0~20091113-1 Severity: normal The following file is a valid DICOM file: http://gdcm.sourceforge.net/thingies/PrivateOwnerInversion.dcm However dcdump does not dump it properly: $ dcdump PrivateOwnerInversion.dcm dcdump: attrtyps.cc:78: virtual BinaryInputStream

Bug#559660: dirvish: environment variables for pre/post client/server scripts not working on lenny

2009-12-14 Thread robert spitzenpfeil
So I apparently don't know enough about bash. OK, I can live with that. Still it remains a hard fact that the following only works with ; in the dirvish code (see patch): --- dirvish.conf --- tree: /etc xdev: 0 index: gzip #pre-server: #pre-client: #post-client: post-server: cd .. ; find

Bug#560157: marked as done (rkhunter: RKHunter complains about outdated, versions of packages installed despite security updates)

2009-12-14 Thread Karl Schmidt
I would have to agree with Udo Rader - false warnings in stable are bugs. I came very close to just uninstalling rkhunter. It may be a hassle to fix the stable release, but that would be the right thing to do.

Bug#561124: net-snmp: speaks of snmp-mibs-downloader which isn't found anywhere

2009-12-14 Thread Gerfried Fuchs
Package: net-snmp Version: 5.4.2.1~dfsg-4 Severity: normal Hi! From the NEWS.Debian file: #v+ net-snmp (5.4.2.1~dfsg-4) unstable; urgency=low As of version 5.4.2.1~dfsg-4, this package no longer downloads the MIBs from IETF or IANA, but suggests the package snmp-mibs-downloader in

Bug#557980: Please provide steps to get to the segfault

2009-12-14 Thread James Umbanhowar
Ok, I figured out what happened and I feel pretty old for not remembering that I had already reported this problem and been involved in the fix. It turns out that this is a regression of bug 412102. 64 bit environments require a different file than 32. James On Sunday 29 November 2009

Bug#561107: Solved

2009-12-14 Thread Anthony Campbell
Thanks for this pointer. Problem was fixed with the solution in 557091. Anthony -- Anthony Campbell - a...@acampbell.org.uk Microsoft-free zone - Using Debian GNU/Linux http://www.acampbell.org.uk - sample my ebooks at http://www.smashwords.com/profile/view/acampbell -- To UNSUBSCRIBE,

Bug#561099: initramfs-tools: determination of newest kernel in update-initramfs -u uses improper sorting

2009-12-14 Thread maximilian attems
On Mon, Dec 14, 2009 at 03:00:59PM +0100, Thiemo Nagel wrote: Package: initramfs-tools Version: 0.93.4 Severity: normal It seems as if lexical sort is used to determine the newest kernel for which the initramfs is updated when calling update-initramfs -u. For example, at my machine, this

Bug#561124: [Pkg-net-snmp-devel] Bug#561124: net-snmp: speaks of snmp-mibs-downloader which isn't found anywhere

2009-12-14 Thread Jochen Friedrich
Hi Gerfried, Unfortunately, there is nowhere a package named snmp-mibs-downloader to be found anywhere in the archive (nor stuck in NEW from what I can see). No clue what went wrong here. it's still an ITP. See Bug #559039. Thanks, Jochen -- To UNSUBSCRIBE, email to

Bug#560421: debhelper: [man] dh -- improve override rules description

2009-12-14 Thread Joey Hess
Jari Aalto wrote: Imagine yourself in the reader's position. For me, it was not that clear to read that they were overriding DH_COMMANDS. Look again: If debian/rules contains a target with a name like override_dh_command, then when it gets to that COMMAND in the sequence,

Bug#561125: hpijs_readme.html mentioned in man page does not exist

2009-12-14 Thread Philip Hands
Package: hpijs Version: 2.8.6.b-4 Severity: minor /usr/share/doc/hpijs/hpijs_readme.html is reffered to in the man page, but that file doesn't exist. -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (900, 'stable'), (800, 'testing'), (50, 'unstable')

Bug#560600: debhelper: PATCH [man] dh -- Document use of .PHONY override_dh_command

2009-12-14 Thread Joey Hess
Jari Aalto wrote: Could tou consider applying this to debhelper's next release. Based on your excellent reply. The patch is against Git. I think that sort of misses my actual point, which is that given a complete programming language (make), one can use it in an arbitrary number of ways, so it

Bug#559660: dirvish: environment variables for pre/post client/server scripts not working on lenny

2009-12-14 Thread Paul Slootman
On Mon 14 Dec 2009, robert spitzenpfeil wrote: post-server: cd .. ; find ./tree -type f ! -name dirvish_md5sums-on_server.log -exec md5sum {} \; | cat dirvish_md5sums-on_server.log ; ../magic.pl $DIRVISH_SRC ; scp -P 66 dirvish_md5sums-for_client.log r...@$dirvish_client:/tmp ; ssh -p 66

Bug#552322: [Pkg-xmpp-devel] Bug#552322: Bug#552322: Bug#552322: new package - request for testers

2009-12-14 Thread Simon Josefsson
Marcelo Jorge Vieira (metal) me...@alucinados.com writes: Hi Thadeu, Hi Jorge, Hi Simon, I'll be able to upload along this week, could we give you access to the git.d.o so you can pull the packaging there and I upload from there ? I asked Gustavo Noronha (kov) and he said he would upload

Bug#550153: init_nfsd is not in released 2.6.32

2009-12-14 Thread Harry Edmon
The released 2.6.32 does not have the init_nfsd entry. This has to be fixed for squeeze. -- Dr. Harry Edmon E-MAIL: ha...@atmos.washington.edu 206-543-0547 FAX: 206-543-0308 ha...@washington.edu, ha...@uw.edu Director of IT, College of the Environment and Director of

Bug#560157: marked as done (rkhunter: RKHunter complains about outdated, versions of packages installed despite security updates)

2009-12-14 Thread Julien Valroff
Le lundi 14 décembre 2009 à 11:10 -0600, Karl Schmidt a écrit : I would have to agree with Udo Rader - false warnings in stable are bugs. I must say I disagree here. See my previous explanations. I came very close to just uninstalling rkhunter. It may be a hassle to fix the stable

Bug#561126: Please work around Firefox bug 492459 (Websites are no longer rendered if SSL requests for JavaScripts are blocked by a proxy)

2009-12-14 Thread anomie
Package: privoxy Version: 3.0.15-2 Severity: wishlist Tags: patch Firefox (and thus Iceweasel) since 3.0.10 has a bug[1] in which it will wait forever for a javascript file to load if the SSL proxy (e.g. privoxy) returns a failure status code in response to the CONNECT. Since javascript must be

Bug#557550: rakarrack: fails to start with error Illegal Instruction

2009-12-14 Thread Tiago Bortoletto Vaz
Hi Hans-Juergen, On Sun, Nov 22, 2009 at 08:15:15PM +0100, Hans-Juergen Becker wrote: Package: rakarrack Version: 0.3.0-2 Severity: important Hi... i've tried to use rakarrack but it doesn't even start at all. error: Illegal instruction I've attached a trace output. Please help

Bug#561127: O: mailreader

2009-12-14 Thread Maurizio Lemmo (Tannoiser)
Package: wnpp Severity: normal Unfortunately I do not have enough time to maintain this package properly. -- System Information: Debian Release: 4.0 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-686

Bug#559967: FTBFS [hppa]: method openConnection() in the type URL is not...

2009-12-14 Thread Andrew Haley
On 12/14/2009 04:58 PM, dann frazier wrote: On Fri, Dec 11, 2009 at 02:10:18PM +0530, Onkar Shinde wrote: AFAIK, GCJ uses classpath library these days. The code from classpath is being merged in GCJ. And from the status of classpath [1] it is clear that

Bug#561128: linked against liblua5.1-0

2009-12-14 Thread Enrico Tassi
Package: liblua5.1-csnd Version: 1:5.11.1~dfsg-2 Severity: important According to ldd: ta...@birba:/tmp$ ldd /usr/lib/lua/5.1/csnd.so linux-vdso.so.1 = (0x7fff0b7d8000) libcsnd.so.5.2 = /usr/lib/libcsnd.so.5.2 (0x7f25d586f000) liblua5.1.so.0 =

Bug#556536: started over from scratch - same result

2009-12-14 Thread Dale Schroeder
I gave up trying to fix the existing systems and downgraded to stable. Today, I took a test machine and reinstalled the entire system. There were no improvements. Winbind would panic at a getent group command every time. getent passwd, wbinfo -u, and wbinfo -g do not appear to cause this

Bug#561129: O: libfrontier-rpc-perl

2009-12-14 Thread Maurizio Lemmo (Tannoiser)
Package: wnpp Severity: normal Unfortunately I do not have enough time to maintain this package properly. -- System Information: Debian Release: 4.0 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-686

Bug#561130: [hppa] infinite spinning

2009-12-14 Thread dann frazier
Package: waf Version: 0.4.4-1 User: debian-h...@lists.debian.org Usertags: hppa I've been noticing that waf-based packages sometimes fail to build on hppa. The failure symptom is an infinite hang in the build log that eventually gets killed by sbuild after a timeout. When I've noticed the hang in

Bug#561131: require 'csnd' fails, missing extern C

2009-12-14 Thread Enrico Tassi
Package: liblua5.1-csnd Version: 1:5.11.1~dfsg-2 Severity: grave ta...@birba:/tmp$ lua Lua 5.1.4 Copyright (C) 1994-2008 Lua.org, PUC-Rio require 'csnd' error loading module 'csnd' from file '/usr/lib/lua/5.1/csnd.so': /usr/lib/lua/5.1/csnd.so: undefined symbol: luaopen_csnd stack

Bug#555895: O: libmusicbrainz-2.1

2009-12-14 Thread Jens Peter Secher
2009/12/14 Yavor Doganov ya...@gnu.org: I wanted to prepare a QA upload of the orphaned package libmusicbrainz-2.1, but noticed that you're in Uploaders.  Are you interested in adopting it? I was put as uploader because I was sponsor initially. I have been thinking about adopting it, but have

Bug#560861: ITP: systempreferences.app -- GNUstep preferences application

2009-12-14 Thread Yavor Doganov
Gürkan Sengün wrote: Will you make this one replace the other preferences.app? Yes, but not with Replaces/Conflicts/etc -- as they're different applictions, I don't think that's appropriate. We'll simply make the gnustep metapackage depend on it, so it will be pulled in by default on most

Bug#561132: RM: llvm [ia64 mips mipsel] -- ANAIS; not supported anymore on ia64, mips and mipsel

2009-12-14 Thread Luk Claes
Package: ftp.debian.org Severity: normal Hi Please remove llvm on ia64, mips and mipsel as it's not supported on these architectures anymore. Cheers Luk -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#559842: CVE-2009-3736 local privilege escalation

2009-12-14 Thread Sune Vuorela
On Sunday 13 December 2009 12:13:38 Francesco P. Lovergine wrote: Package: proftpd-dfsg Version: 1.3.0-1 As already communicated to secteam on friday, this issue does not apply even with old versions, because external modules are taken from the /usr/lib/proftpd directory only in mod_dso.c.

Bug#561024: (ibm-3270_3.3.4p6-3.2/avr32): FTBFS: Outdated config.{sub,guess}

2009-12-14 Thread Bradley Smith
On Mon, 14 Dec 2009 12:32:28 +0100 Bastian Blank wa...@debian.org wrote: On Sun, Dec 13, 2009 at 07:23:01PM +, bradsm...@debian.org wrote: Package: ibm-3270 Version: 3.3.4p6-3.2 This version is heavily outdated, over a year actually. It uses autotools-dev in the meantime. Oh, I see

Bug#561133: nethack-console: rules file includes x11-dependent actions for the console target

2009-12-14 Thread John Sullivan
Package: nethack-console Version: 3.4.3-12 Severity: normal I was porting your Debian package to Maemo 5, so it can run on the Nokia N900. I was first trying to port the nethack-console interface, and not build the others. So I removed all the targets from the rules file other than console. But

Bug#560611: don't fix but package solr 1.4?

2009-12-14 Thread Jan-Pascal van Best
Thomas Koch wrote: The bug seems to be caused by the update of lucene2 from 2.4 to 2.9.1. The highlight component has been moved from lucene core to lucene contrib, but SOLR needs this component and gives only lucene2 = 2.4 as dependency. What's the right way to handle this? Debian stable

Bug#561134: hpijs: depends (via hplip) on cups, apparently to no purpose

2009-12-14 Thread Philip Hands
Package: hpijs Version: 2.8.6.b-4 Severity: normal The author of gnuspool (John M Collins j...@xisl.com) points out that he'd like to be able to install hpijs to be able to use it with ghostscript for his print spooler, which we're in the process of packaging. I must say that it certainly looks

Bug#559842: your mail

2009-12-14 Thread Kurt Roeckx
I think you're both not understanding each other. As I understand it, Michael is saying that the patch for the security issue is not applied to the package in Debian and that upstream has fixed that for the next release. As I understand Francesco, there is no need to apply the patch because it's

Bug#561135: dbconfig only applies the latest database upgrades

2009-12-14 Thread Patrick Matthäi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: dbconfig-common Version: 1.8.41 Severity: grave Hello, I have already mailed you about this issue. I have taken over the maintenance of the otrs2 package. At work we used 2.2 and then we upgraded to 2.3 and to 2.4, without any problems.

Bug#561136: squeeze: fails to create tar.bz2

2009-12-14 Thread Sebastian Dalfuß
Package: squeeze Version: 0.2.3-8 Severity: normal If squeeze is ordered to create a bzip2-ed tarball, it just creates a tarball but does not bzip2 it. The output file is named *.tar.bz2, but not compressed at all. -- System Information: Debian Release: squeeze/sid APT prefers unstable APT

Bug#559896:

2009-12-14 Thread Brent S. Elmer Ph.D.
There is still a problem that needs to be fixed. moin-mass-migrate fails unless the wiki is declared in farmconfig something like this: (profitwiki, r.*://belmer.btv.ibm.com/profitwiki/.*), however, the wiki won't work unless it is declared like this: (profitwiki,

Bug#561008: console-setup: approximations for 'toilet -f future' symbols look different before and after X

2009-12-14 Thread Francesco Poli
On Mon, 14 Dec 2009 16:19:55 +0200 Anton Zinoviev wrote: On Sun, Dec 13, 2009 at 05:35:38PM +0100, Francesco Poli (t1000) wrote: [...] If I switch back to the console (by pressing [Ctrl+Alt+F1]) and I login again, then the output of $ toilet -f future hello [...] looks different!

Bug#561124: [Pkg-net-snmp-devel] Bug#561124: net-snmp: speaks of snmp-mibs-downloader which isn't found anywhere

2009-12-14 Thread Gerfried Fuchs
block 561124 with 559039 thanks * Jochen Friedrich joc...@scram.de [2009-12-14 18:44:37 CET]: Hi Gerfried, Unfortunately, there is nowhere a package named snmp-mibs-downloader to be found anywhere in the archive (nor stuck in NEW from what I can see). No clue what went wrong here. it's

Bug#555895: O: libmusicbrainz-2.1

2009-12-14 Thread Yavor Doganov
Jens Peter Secher wrote: also a bit worried about http://musicbrainz.org/doc/libmusicbrainz which states that This version of the client library uses the old RDF web service and should not be used in new development. Yes, it's considered obsolete, but still widely used. I guess the right

Bug#561097: Package Priority should be optional

2009-12-14 Thread Ignace Mouzannar
retitle 561097 Please set priority of python-clientform to optional reassign 561097 ftp.debian.org thanks On Mon, Dec 14, 2009 at 14:57, Julien Cristau jcris...@debian.org wrote: On Mon, Dec 14, 2009 at 14:40:11 +0100, Ignace Mouzannar wrote: Package: python-clientform Severity: serious

Bug#559842: your mail

2009-12-14 Thread Michael Gilbert
On Mon, 14 Dec 2009 19:58:54 +0100, Kurt Roeckx wrote: I think you're both not understanding each other. As I understand it, Michael is saying that the patch for the security issue is not applied to the package in Debian and that upstream has fixed that for the next release. As I

Bug#561137: wireshark: module-not-found errors at startup

2009-12-14 Thread Sam Morris
Package: wireshark Version: 1.2.4-3 Severity: minor -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 When launched, wireshark shows me the following error message: The following errors were found while loading the MIBS: -:0 1 module-not-found failed to locate MIB module `IP-MIB' -:0 1

Bug#559842: your mail

2009-12-14 Thread Michael Gilbert
On Mon, 14 Dec 2009 14:20:32 -0500, Michael Gilbert wrote: If Franseco's analysis is correct, then I agree that the bug should remain closed. However, I plan to open a new bug about the fact that embedded expat library is used rather than the system version; if that is OK? correction: the

Bug#558364: [reportbug/master] added 'keyid' documentation; thanks to gregor herrmann for the report and to Carl Chenet for the partial patch; Closes: #558364

2009-12-14 Thread Sandro Tosi
tag 558364 pending tag 558364 pending thanks Date: Sun Dec 6 10:24:56 2009 +0100 Author: Sandro Tosi mo...@debian.org Commit ID: 3e29e5ef5ecc7305688cd4a746552399943aa507 Commit URL: http://git.debian.org/?p=reportbug/reportbug.git;a=commitdiff;h=3e29e5ef5ecc7305688cd4a746552399943aa507 Patch

Bug#559842: your mail

2009-12-14 Thread Francesco P. Lovergine
On Mon, Dec 14, 2009 at 02:20:32PM -0500, Michael Gilbert wrote: If Franseco's analysis is correct, then I agree that the bug should remain closed. However, I plan to open a new bug about the fact that embedded expat library is used rather than the system version; if that is OK? Yes,

Bug#561089: ispell: segfaults on checking any file

2009-12-14 Thread Roland Rosenfeld
On Mon, 14 Dec 2009, Agustin Martin wrote: On Mon, Dec 14, 2009 at 02:03:35PM +0100, Helmut Grohne wrote: Package: ispell Version: 3.1.20.0-7 Severity: grave Justification: renders package unusable When I try to spell check any file ispell simply segfaults. When I invoke it without

Bug#561131: require 'csnd' fails, missing extern C

2009-12-14 Thread Felipe Sateler
On Mon, 2009-12-14 at 19:00 +0100, Enrico Tassi wrote: Package: liblua5.1-csnd Version: 1:5.11.1~dfsg-2 Severity: grave ta...@birba:/tmp$ lua Lua 5.1.4 Copyright (C) 1994-2008 Lua.org, PUC-Rio require 'csnd' error loading module 'csnd' from file '/usr/lib/lua/5.1/csnd.so':

Bug#524052: firebird2.1-common: Home made UDF cannot use libib_utils.so

2009-12-14 Thread Damyan Ivanov
-=| Damyan Ivanov, Sun, Dec 13, 2009 at 11:48:24PM +0200 |=- -=| Pierre Yager, Tue, Apr 14, 2009 at 01:46:33PM + |=- Package: firebird2.1-common Version: 2.1.2.18118-release.ds1-1~mine.0 Severity: normal I have a home made UDF in Pascal/Delphi language compiled with FPC

Bug#561128: linked against liblua5.1-0

2009-12-14 Thread Felipe Sateler
On Mon, 2009-12-14 at 19:20 +0100, Enrico Tassi wrote: Package: liblua5.1-csnd Version: 1:5.11.1~dfsg-2 Severity: important According to ldd: ta...@birba:/tmp$ ldd /usr/lib/lua/5.1/csnd.so linux-vdso.so.1 = (0x7fff0b7d8000) libcsnd.so.5.2 = /usr/lib/libcsnd.so.5.2

Bug#559842: your mail

2009-12-14 Thread Francesco P. Lovergine
On Mon, Dec 14, 2009 at 07:58:54PM +0100, Kurt Roeckx wrote: I think you're both not understanding each other. As I understand it, Michael is saying that the patch for the security issue is not applied to the package in Debian and that upstream has fixed that for the next release. That's

Bug#559842: CVE-2009-3736 local privilege escalation

2009-12-14 Thread Francesco P. Lovergine
On Mon, Dec 14, 2009 at 07:39:59PM +0100, Sune Vuorela wrote: I am wondering, though, why proftpd ships its own copy of libltdl instead of using the system version, which would avoid this kind of bugs to be have to be fixed in proftpd at all. This is completely another problem. Indeed

Bug#560816: texlive-base: postinst fails on fmtutil-sys infinite recursion

2009-12-14 Thread Hilmar Preuße
On 13.12.09 Frank Küster (fr...@debian.org) wrote: Oswald Buddenhagen o...@kde.org wrote: Hi, ### From file: /etc/texmf/fmt.d/10texlive-base.cnf [...] etexpdftex language.def-translate-file=cp227.tcx *etex.ini pdfetex pdftex language.def

Bug#560635: Reassigning to ming

2009-12-14 Thread Alejandro Rios P.
Hello I've done several test and I found that this FTBFS bug happens only when building op-panel against ming-fonts-dejavu fonts. If I use other fdb fonts, the packages builds fine. Also, ming package should include last patches commited to upstream CVS, that will fix other possible bugs that

Bug#561138: icedove fails on mail folders over 2gb; wraps around to start of folder

2009-12-14 Thread saccanana
Package: icedove Version: 2.0.0.19-1 Severity: important when a mail folder is over 2gb, trying to display a message shows the first messages in the folder. also stops filters from working folder cannot be compacted. no error message was given when i tried to download mail that made the

Bug#560771: [Pkg-acpi-devel] Bug#560771: acpid: CVE-2009-4235: weak permissions on /var/log/acpid

2009-12-14 Thread Michael Meskes
On Sun, Dec 13, 2009 at 09:42:58PM -0600, Raphael Geissert wrote: I think the best approach is to prepare uploads for unstable and stable (via stable-proposed-updates) fixing the permissions of the Why only proposed-updates and not security? file, and an upload for oldstable (via

Bug#520463: sbuild schroot texlive-base-bin

2009-12-14 Thread Hilmar Preusse
On 13.12.09 Brian May (br...@microcomaustralia.com.au) wrote: On Sun, Dec 13, 2009 at 01:17:41AM +0100, Hilmar Preusse wrote: Hi, Did you get any response? If not, does it make sense to look further into the problem or was that a one-timer? Unfortunately I can't remember even filling

Bug#502336: fails to date date when computer has very old time

2009-12-14 Thread Martin Michlmayr
* Frans Pop elen...@planet.nl [2009-12-11 22:05]: gettimeofday({2203525639, 203778}, NULL) = 0 settimeofday({56041989, 2148687426}, NULL) = -1 EINVAL (Invalid argument) The value for tv_sec looks low and the one for tv_usec way too high. Could it be that the calculation is just wrong

Bug#526674: No longer present?

2009-12-14 Thread Martin Michlmayr
* Daniel Burrows dburr...@debian.org [2009-12-11 07:09]: I can't reproduce this with the latest cwidget and g++ versions (0.5.16 and 4.4.2 respectively). Can anyone else? I don't have access to my build system right now so you're welcome to close this bug if you think it's gone. -- Martin

Bug#561135: dbconfig only applies the latest database upgrades

2009-12-14 Thread sean finney
hi patrick, On Mon, Dec 14, 2009 at 08:00:04PM +0100, Patrick Matthäi wrote: I have already mailed you about this issue. as asked in private, could you attach the output from the console when you export dbc_debug=1 before trying the upgrade? if you have the time to do this it would be very

Bug#561139: python-enthoughtbase: circular dependency hell

2009-12-14 Thread Bill Allombert
Package: python-enthoughtbase Version: 3.0.3-2 Severity: important Hello Debian Python Modules Team, There is a circular dependency between python-apptools, python-enthoughtbase, python-traits and python-traitsgui: python-apptools :Depends: python-traitsgui python-enthoughtbase

Bug#561140: source-highlight: Missing file for .php processing

2009-12-14 Thread Robert Pogson
Package: source-highlight Version: 2.4-5.2 Severity: normal Upon processing a .php file, source-highlight reports that it cannot find a file php3.lang. Providing a symbolic link for /usr/share/source-highlight/php3.lang - /usr/share/source-highlight/php.lang allows the programme to run

Bug#561089: ispell: segfaults on checking any file

2009-12-14 Thread Roland Rosenfeld
I wrote: I know that this didn't happen with the old 20071211 ngerman dictionary, but the upstream maintainer of this dictionary was quite active and introduced many changes in 20091006 version. I didn't understand why this hash table overflow in buildhash implies the segmentation fault

Bug#561141: description misleading now that tail uses inotify

2009-12-14 Thread Joey Hess
Package: inotail Version: 0.5-1 Severity: normal Tail uses inotify as of coreutils 7.5. So either this package is no longer useful, or it has some other features that tail lacks. Either way, the current description is misleading, since it implies that tail doesn't use inotify. -- System

Bug#502336: fails to date date when computer has very old time

2009-12-14 Thread Frans Pop
On Monday 14 December 2009, Martin Michlmayr wrote: So, to me this looks like a calculation error in rdate, probably in ntp.c. ntpdate uses adjtimex() to fix this but this is a Linux-specific syscall so David is reluctant to use it in rdate. Maybe rdate can fix the value manually somehow.

Bug#532839: asking Crypt::RSA upstream to drop requirements for Math::Pari

2009-12-14 Thread Daniel Kahn Gillmor
This is just a note to indicate that i've asked the upstream developer for Crypt::RSA to consider dropping requirements for Math::Pari in favor of Math::BigInt: http://rt.cpan.org/Public/Bug/Display.html?id=52689 --dkg signature.asc Description: OpenPGP digital signature

Bug#426048: Anyone still working on it?

2009-12-14 Thread Eva Ramón Salinas
Hi there, is there anyone still working on the package? If not, I might will do it in the next weeks, since I am going to have the time for it. It would not be my first package, I've already had one uploaded. I am actually running fuppes at home and I think it's cool. It is a pity not having a

Bug#561136: [Pkg-xfce-devel] Bug#561136: squeeze: fails to create tar.bz2

2009-12-14 Thread Yves-Alexis Perez
tag 561136 confirmed thanks On 14/12/2009 19:41, Sebastian Dalfuß wrote: Package: squeeze Version: 0.2.3-8 Severity: normal If squeeze is ordered to create a bzip2-ed tarball, it just creates a tarball but does not bzip2 it. The output file is named *.tar.bz2, but not compressed at all.

Bug#558684: ITP: envstore -- save and restore environment variables

2009-12-14 Thread Joerg Jaspert
Umm, the thing this tool does is so trivial in shell - do we really need a package? It only wastes space, IMO. You have a valid point there and gave me a new idea how to simplify. How? I think space is cheap. If you said Debian wants to be more than just a collection of packages and

Bug#561142: Update byobu to 2.40

2009-12-14 Thread Artur Rona
Package: byobu Version: 2.34-1 Please update byobu package to 2.40 version. It would be nice to merge with Ubuntu's package if it's possible. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#561143: Upgrade nvidia-settings to 190.42

2009-12-14 Thread Artur Rona
Package: nvidia-settings Version: 185.18.31-1 Please upgrade nvidia-settings to 190.42 version. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#502336: fails to date date when computer has very old time

2009-12-14 Thread Martin Michlmayr
* Frans Pop elen...@planet.nl [2009-12-14 20:58]: Are you sure? ... If I misunderstand and adjtimex() somehow really is the solution, then probably adjtime() could be used instead. Well, I'm not sure. But my assumption is based on this explanation: http://linux.die.net/man/2/adjtimex and the

Bug#119888: Patch for fix that

2009-12-14 Thread Xan
In this reference [http://wiki.nginx.org/ThttpdRealIP] is avaliable a patch for that thttpd respect the X-forward-for header (originaly posted by Daniel Clemente [http://www.danielclemente.com/amarok/ip_real.txt] ). I would like you apply this patch. I add now: --- thttpd-2.25b/libhttpd.c

Bug#561144: Update ldap to 2.4.20

2009-12-14 Thread Artur Rona
Package: ldap-utils Version: 2.4.17-2.1 Please update ldap to 2.4.20 version. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#561089: ispell: segfaults on checking any file

2009-12-14 Thread Helmut Grohne
severity 561089 important thanks Thanks for all your work on this bug. I also observed that languages other than german work well with ispell. (Answer to some question in this thread.) On Mon, Dec 14, 2009 at 08:49:32PM +0100, Roland Rosenfeld wrote: In the meantime I found out, that my recent

Bug#357297: Is this going to get fixed soon? It is extremely annoying.

2009-12-14 Thread Lennart Sorensen
Please revert this crap now so we can actually start controlling our screensaver settings again. We have now had xscreensaver forced on us for 3 months. This is getting rediculous. All that has to be done is remove the crap that the previous version added to the package. This is breaking kde

Bug#561145: PmwOptionMenu.py: _tkinter.TclError: can't delete Tcl command

2009-12-14 Thread Christoph Berg
Package: python-pmw Version: 1.3.2-3 Severity: important Tags: patch Hi, with pycocuma, I'm running into the same issue as detailed in [1]. Luckily, there's already a fix: [2] [1] http://sourceforge.net/tracker/index.php?func=detailaid=2795731group_id=10743atid=110743 [2]

Bug#532839: asking Crypt::RSA upstream to drop requirements for Math::Pari

2009-12-14 Thread Salvatore Bonaccorso
Hey Daniel On Mon, Dec 14, 2009 at 02:54:43PM -0500, Daniel Kahn Gillmor wrote: This is just a note to indicate that i've asked the upstream developer for Crypt::RSA to consider dropping requirements for Math::Pari in favor of Math::BigInt:

Bug#561144: [Pkg-openldap-devel] Bug#561144: Update ldap to 2.4.20

2009-12-14 Thread Quanah Gibson-Mount
Please don't. Please wait on 2.4.21, there's a serious bug in 2.4.20 with TLS/SSL. Our hope is to have 2.4.21 be the next stable. --Quanah --On Monday, December 14, 2009 9:07 PM +0100 Artur Rona ari-tc...@tlen.pl wrote: Package: ldap-utils Version: 2.4.17-2.1 Please update ldap to

Bug#560541: pkgconfig file in libsvm-dev? [was: Bug#560541: libsvm-ruby: FTBFS]

2009-12-14 Thread Michael Schutte
Hi! libsvm-ruby relies on a libsvm.pc file to figure out how to build with libsvm. This convenience has gone away between the 2.89-1 and 2.90-1 uploads of your package, causing libsvm-ruby to FTBFS on a QA rebuild. The libsvm changelog simply states, | * Removed libsvm.pc from libsvm-dev. May

Bug#558684: ITP: envstore -- save and restore environment variables

2009-12-14 Thread Maximilian Gass
On Mon, Dec 14, 2009 at 08:56:13PM +0100, Joerg Jaspert wrote: You have a valid point there and gave me a new idea how to simplify. How? Just an idea how to achieve something similar without any extra tools. However, this bug report should stay on-topic. I think space is cheap. If you said

Bug#560948: CVE-2009-3560 and CVE-2009-3720 denial-of-services

2009-12-14 Thread Hilmar Preuße
notfound 2007.dfsg.2-4+lenny1 notfound 2009-3 stop On 13.12.09 Michael Gilbert (michael.s.gilb...@gmail.com) wrote: package: texlive-bin severity: serious tags: security Hi, The following CVE (Common Vulnerabilities Exposures) ids were published for expat. I have determined that this

Bug#561147: libcwidget3: Initial German translation

2009-12-14 Thread Sven Joachim
Package: libcwidget3 Version: 0.5.16-2 Severity: wishlist Hi, I'm not entirely sure if cwidget is meant to be translated yet (see the discussion at the end of #475802), but since the gettext infrastructure is now there I decided to translate it anyway since it is very short and I would much like

Bug#561146: [rxvt] wrong escape sequences emitted

2009-12-14 Thread Mate Miklos
Package: rxvt Severity: normal --- Please enter the report below this line. --- Doing a 'f...@bar:~$ cat', and typing Shift-Up, Shift-Down, Shift-Right, Shift- Left results: xterm, konsole, gnome-terminal, terminator: ^[[1;2A^[[1;2B^[[1;2C^[[1;2D urxvt: ^[[a^[[b^[[c^[[d Similarly, for Ctrl-Up,

Bug#561148: smbclient: samba asks for password even when it isn't needed

2009-12-14 Thread Michał
Package: smbclient Version: 2:3.4.3-1 Severity: grave Justification: renders package unusable When I'm trying to acces samba resources on remonte computers i have to give username and password i've never set. Sometimes when i push enter it works, but during for example change of directory pass

Bug#561128: linked against liblua5.1-0

2009-12-14 Thread Enrico Tassi
On Mon, Dec 14, 2009 at 05:03:01PM -0300, Felipe Sateler wrote: You mean installing it as /usr/lib/liblua5.1-luaCsnd.so and symlinking it to /usr/lib/lua/...? The problem I have is that the lua module does not have a SONAME, since it is not really meant to be linked by C programs. C/C++

Bug#559660: dirvish: environment variables for pre/post client/server scripts not working on lenny

2009-12-14 Thread Robert Spitzenpfeil
On 12/14/2009 07:12 PM, Paul Slootman wrote: On Mon 14 Dec 2009, robert spitzenpfeil wrote: post-server: cd .. ; find ./tree -type f ! -name dirvish_md5sums-on_server.log -exec md5sum {} \; | cat dirvish_md5sums-on_server.log ; ../magic.pl $DIRVISH_SRC ; scp -P 66

Bug#561149: rails: Expand dependecy to be either Ruby1.8 OR Ruby1.9.1

2009-12-14 Thread Richard Hurt
Package: rails Version: 2.2.3-1 Severity: wishlist Since Ruby1.9.1 has entered a non-development status I would like to see Rails dependency modified to include it. As I understand it, the current version of Rails is compatable with Ruby1.9.1 so this should just be a modification to the existing

Bug#559842: CVE-2009-3736 local privilege escalation

2009-12-14 Thread Kurt Roeckx
On Mon, Dec 14, 2009 at 08:13:23PM +0100, Francesco P. Lovergine wrote: On Mon, Dec 14, 2009 at 07:39:59PM +0100, Sune Vuorela wrote: I am wondering, though, why proftpd ships its own copy of libltdl instead of using the system version, which would avoid this kind of bugs to be have to

Bug#559842: your mail

2009-12-14 Thread Kurt Roeckx
On Mon, Dec 14, 2009 at 02:20:32PM -0500, Michael Gilbert wrote: However, I plan to open a new bug about the fact that embedded expat library is used rather than the system version; if that is OK? It would probably be useful to have a bug against lintian asking that it checks that a package

Bug#548128: Similar Problem

2009-12-14 Thread Frans Pop
On Saturday 12 December 2009, Frans Pop wrote: So, if the problem is simply that rdate fails when the current system time is before the epoch (1-1-1970), how about we include a trivial command to set the date to the epoch before calling rdate as a workaround until rdate gets fixed. Martin has

<    1   2   3   4   5   >