Bug#778449: botch FTBFS on architectures without ocamlopt due to timeout

2015-02-14 Thread Johannes Schauer
Package: botch Version: 0.6-1~experimental1 Severity: serious Justification: fails to build from source Hi, botch FTBFS on arm64, mips, mipsel and s390x because the testsuite run is killed after a timeout. This is because these platforms do not provide native ocaml and thus running the

Bug#778448: rt-extension-calendar: Unneeded dependency on libdigest-sha-perl

2015-02-14 Thread Salvatore Bonaccorso
Source: rt-extension-calendar Version: 0.17-1 Severity: normal Hi rt-extension-calendar (Build-)Depends(-Indep) on libdigest-sha-perl. But Digest::SHA is in Perl core since v5.9.3 and 'RTx-Calendar does not seem to require an newer version of Digest::SHA as it is in perl core, thus the extra

Bug#778375: apt-transport-https: segfaults

2015-02-14 Thread Kurt Roeckx
Package: apt-transport-https Version: 1.0.9.6 Severity: serious Hi, When I try to download something over https apt just segfaults: https[7809]: segfault at 69 ip 7f523b8cbb03 sp 7fff432589e0 error 4 in https[7f523b8c+12000] Kurt -- To UNSUBSCRIBE, email to

Bug#773634: lazarus: Fails any execution due to missing LConvEncoding

2015-02-14 Thread Mazen NEIFER
Hi Rainer, Looks like you did not install LCL. LCL is recommended by lazarus, so if your package manager does not pull recommended packages you may fall in this issue. Can you please ensure LCL is installed and let me know? Cheers, Abou Al Montacir signature.asc Description: This is a

Bug#778341: procmail: CVE-2014-9681: unsafe handling of TZ environment variable

2015-02-14 Thread Santiago Vila
On Sat, Feb 14, 2015 at 07:47:14AM +0100, Salvatore Bonaccorso wrote: I see, I have missed #772706 somehow apparently, sorry about that. I have merged both reports. But this is still not a bug! procmail may be seen as a shell or as a special purpose programming language. The bash shell allows

Bug#778357: audit 'apt-get update' exit codes

2015-02-14 Thread Julian Andres Klode
Am 14.02.2015 01:45 schrieb Patrick Schleizer adrela...@riseup.net: Package: apt Severity: important X-Debbugs-CC: hol...@layer-acht.org,p...@debian.org When apt-get update fails the program under some conditions exits with a 0 status. It would be useful if it exited with a non-zero status

Bug#774428: unblock: simpleburn/1.7.0-2

2015-02-14 Thread John Paul Adrian Glaubitz
On 02/11/2015 12:34 AM, Mehdi Dogguy wrote: Looks like a sensible plan. Can we help to make that happen? Sure. I am just waiting for Mateusz to make another upload to mentors. Mateusz, ping? Otherwise I'd be happy to NMU. -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer -

Bug#777346: grep-excuses: Search autoremovals too

2015-02-14 Thread Ian Jackson
James McCoy writes (Re: Bug#777346: grep-excuses: Search autoremovals too): On Sat, Feb 07, 2015 at 03:42:14PM +, Ian Jackson wrote: Subject: [PATCH 2/3] grep-excuses: --debug option This should be 3/3. I reviewed the actual patch in your git repo. It and the rest in the series look

Bug#777540: policy violation in libhtp

2015-02-14 Thread Ralph J.Mayer
Control: retitle -1 policy violation - SONAME mismatch Hi Hlko, thx for confirming. Should I also file a bug against lintian to remove the upstream soname version is not correct override? Best regards rm -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject

Bug#666272: [keepnote] You can not change language.

2015-02-14 Thread lct
It may be duplicated with #572. A locale env is '*.UTF-8' and resources are named '*.UTF8' on Python 2.7 environment, Debian wheezy. Yes, I confirm this bug: cd /usr/lib/python2.7/dist-packages/keepnote/rc/locale cp -r de_DE.UTF8 de_DE.UTF-8 (and all other languages) After start language is

Bug#778379: kcollectd should not hard depend on collectd

2015-02-14 Thread Thomas Koch
Package: kcollectd Severity: normal -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I want to install kcollectd on my laptop to view rrd files from my server. I can mount the folder with the rrd files with e.g. NFS or sshfs. In this case it's annoying to install collectd on my laptop

Bug#777664: [Pkg-salt-team] Bug#777664: Bug#777664: salt-minion: Make log file readable by adm group

2015-02-14 Thread Joe Healy
Hi Ben, On Wed, Feb 11, 2015 at 9:18 PM, Benjamin Drung benjamin.dr...@profitbricks.com wrote: I'll make these changes. You are partially right - I/we do need a sponsor, but I haven't asked for one yet as I want to make sure the latest addition to the packaging (salt-api) is ok

Bug#778376: pkgconfig libgcj.pc link points to non existent file

2015-02-14 Thread Victor Seva
Package: gcj-jdk Severity: normal Tags: patch # dpkg -L gcj-jdk | grep libgcj.pc /usr/lib/pkgconfig/x86_64-linux-gnu/libgcj.pc # ls -la /usr/lib/pkgconfig/x86_64-linux-gnu/libgcj.pc lrwxrwxrwx 1 root root 11 Oct 18 09:03 /usr/lib/pkgconfig/x86_64-linux-gnu/libgcj.pc - libgcj15.pc # ls -la

Bug#778364: unblock: glibc/2.19-15

2015-02-14 Thread Ivo De Decker
Control: tags -1 d-i Hi, On Fri, Feb 13, 2015 at 09:11:20PM -0500, Michael Gilbert wrote: Please consider unblocking glibc. It fixes 5 security issues: https://security-tracker.debian.org/tracker/source-package/glibc unblock glibc/2.19-15 unblock-udeb glibc/2.19-15 Unblocked, but need

Bug#775691: matplotlib: printf buffer overrun

2015-02-14 Thread Sandro Tosi
how about using a delayed queue instead of having uploaded straight to unstable? On Sat, Feb 14, 2015 at 1:35 AM, Michael Gilbert mgilb...@debian.org wrote: Hi, I've uploaded an nmu fixing this issue. Please see attached patch. Best wishes, Mike -- Sandro Tosi (aka morph, morpheus,

Bug#778382: knews: [INTL:it] Italian translation of debconf messages

2015-02-14 Thread Beatrice Torracca
Package: knews Severity: wishlist Tags: patch l10n Hi. Please find attached the Italian translation of knews debconf messages proofread by the Italian localization team. Please include it in your next upload. Thanks, Beatrice # Italian translation of knews debdonf messages. # Copyright (C)

Bug#778380: update check-mk-server to 1.2.4p5

2015-02-14 Thread kioto mitsubisi
Package: check-mk-server Version: 1.2.2p3-1~bpo70+1 Hello, We are currently using the 1.2.2p3-1~bpo70+1 version of check-mk-server, however since, as indicated here [1], check-mk has a newer version, it would be great if you can update packate to 1.2.4p5. It has been

Bug#778381: macchanger: [INTL:it] Italian translation of debconf messages

2015-02-14 Thread Beatrice Torracca
Package: macchanger Severity: wishlist Tags: patch l10n Hi. Please find attached the Italian translation of macchanger debconf messages proofread by the Italian localization team. Please include it in your next upload. Thanks, Beatrice # Italian translation of macchanger debconf messages #

Bug#778385: lyskom-server: [INTL:it] Italian translation of debconf messages

2015-02-14 Thread Beatrice Torracca
Package: lyskom-server Severity: wishlist Tags: l10n patch Hi. Please find attached the Italian translation of lyskom-server debconf messages proofread by the Italian localization team. Please include it in your next upload. Thanks, Beatrice # Italian translation of lyskom-server debconf

Bug#777195: [squid3] tcp_outgoing_address ignored

2015-02-14 Thread Amos Jeffries
On Fri, 6 Feb 2015 11:45:05 +0500 Roman Mamedov wrote: Hello, On some occasions I was using the directive tcp_outgoing_address 0.0.0.0 to force Squid on a dual-stack host to be IPv4-only. This works fine on 3.1.20-2.2+deb7u2 currently in Wheezy. That behaviour was a bug. It caused Squid

Bug#778374: [pkg-horde] Bug#778374: php5 5.6.5 fully breaks Horde packages in Debian jessie

2015-02-14 Thread Mike Gabriel
Hi, The attached patch against php5 allows Horde to start again. With that patched php5 version on my Debian jessie system, IMP (Horde's mail client) seems to work ok again. However, I also see regressions in Kronolith (calenadaring tool), Turba (address book) and Nag (task planner).

Bug#778370: unblock: graphicsmagick/1.3.20-3+deb8u1

2015-02-14 Thread GCS
On Sat, Feb 14, 2015 at 12:41 PM, Adam D. Barratt a...@adam-barratt.org.uk wrote: On Sat, 2015-02-14 at 09:24 +0100, László Böszörményi wrote: Please unblock the recent upload of graphicsmagick, which fixes CVE-2014-8355, bug #778238 [1]. Why is a fix via unstable versioned as -3+deb8u1? That

Bug#777540: policy violation in libhtp

2015-02-14 Thread Hilko Bengen
* Ralph J.Mayer: Should I also file a bug against lintian to remove the upstream soname version is not correct override? No, the wrong override that hides the problem from Lintian is part of the libhtp source package itself: ,[ libhtp-0.5.15/debian/overrides/libhtp1 ] | # upstream soname

Bug#778367: kfreebsd-10: CVE-2014-7250 resource consumption issue

2015-02-14 Thread Steven Chamberlain
forwarded 778367 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195243 tags 778367 + moreinfo thanks Hi, Michael Gilbert wrote: Note that the versions mentioned in the advisory are really old (freebsd 5.4), but unfortunately there aren't enough details yet to actually check. There are

Bug#776747: iceweasel: cannot reproduce

2015-02-14 Thread Claudio Moretti
Control: severity -1 important Hi, I've installed Iceweasel 35.0.1-1 this morning, and so far I didn't get a single crash. I believe the severity of this should be downgraded to, at least important (as it doesn't affect everyone). Please be aware that this bug shows up from apt-listbugs when

Bug#778352: (pre-approval) unblock: xymon/4.3.17-6

2015-02-14 Thread Axel Beckert
Hi Adam, Adam D. Barratt wrote: I've just uploaded xymon/4.3.17-6 to DELAYED/15 (see https://ftp-master.debian.org/deferred.html) with: [...] As soon as I've got your approval for the debdiff below, I'll fast-forward the upload to unstable. Please go ahead, and Thanks! Rescheduled.

Bug#778383: flashybrid: [INTL:it] Italian translation of debconf messages

2015-02-14 Thread Beatrice Torracca
Package: flashybrid Severity: wishlist Tags: l10n patch Hi. Please find attached the Italian translation of flashybrid debconf messages proofread by the Italian localization team. Please include it in your next upload. Thanks, Beatrice # Italian translation of flashybrid debconf messages. #

Bug#778384: fookebox: [INTL:it] Italian translation of debconf messages

2015-02-14 Thread Beatrice Torracca
Package: fookebox Severity: wishlist Tags: l10n patch Hi. Please find attached the Italian translation of fookebox debconf messages proofread by the Italian localization team. Please include it in your next upload. Thanks, Beatrice # Italian translation of fookebox debconf messages # Copyright

Bug#775116: openntpd: Can't remove or purge package

2015-02-14 Thread Jörgen Tegnér
Hi, I did a quick test with the following changes to deb-systemd-helper --- deb-systemd-helper.dist 2015-02-14 10:38:45.058351945 +0100 +++ deb-systemd-helper 2015-02-14 11:10:24.550995696 +0100 @@ -325,7 +325,7 @@ if (is_purge() || -l $link) { my $link_state = $link;

Bug#778351: unblock: isc-dhcp/4.3.1-6

2015-02-14 Thread Adam D. Barratt
Control: tags -1 + confirmed d-i On Fri, 2015-02-13 at 16:54 -0500, Michael Gilbert wrote: Please consider unblocking isc-dhcp. It fixes a regression in init script error handling (bug #755834, unfortunate bug # typo in the changelog). Done. There are no changes to the udebs.

Bug#778352: (pre-approval) unblock: xymon/4.3.17-6

2015-02-14 Thread Adam D. Barratt
Control: tags -1 + confirmed moreinfo On Fri, 2015-02-13 at 23:12 +0100, Axel Beckert wrote: Upstream recently fixed two memory leaks in xymond, xymon's main daemon. Without these fixes leakages of 2 GB memory per day have been observed under production conditions. I've just uploaded

Bug#689083: [Pkg-phototools-devel] Bug#689083: libgphoto2-2-dev is not Multi-Arch compatible

2015-02-14 Thread hpfn
On Thu, 12 Feb 2015 23:39:42 +0100 Francois Gouget fgou...@free.fr wrote: Package: libgphoto2-dev Version: 2.5.4-1.1+b2 Followup-For: Bug #689083 Dear Maintainer, Hi Francois, Here is a proposed patch to make it possible to make libgphoto2-dev as Multi-Arch: same. The trick is that

Bug#778377: 2.4 regression: /etc/zabbix/zabbix_*.conf.d is ignored

2015-02-14 Thread Harald Dunkel
Package: zabbix_agent Version: 2.4.3+dfsg-1 Since 2.4 it seems that the /etc/zabbix/zabbix_*.conf.d directories are silently ignored. Thats pretty painful, esp. for the upgrade of the zabbix_agent package: I have to edit zabbix_agentd.conf on each and every client. Its a lot of work, and it gives

Bug#778349: pre-approval request - unblock: python-softlayer/3.2.0-2

2015-02-14 Thread Adam D. Barratt
Control: tags -1 + confirmed moreinfo On Fri, 2015-02-13 at 16:45 -0500, Scott Kitterman wrote: RC bug fix. Requesting approval before upload since I propose including also a fix for an important bug as well as changes related to the new maintainer. The last is administrative, but given I'm

Bug#778352: (pre-approval) unblock: xymon/4.3.17-6

2015-02-14 Thread Axel Beckert
Control: tags -1 - moreinfo Hi, the upload reached unstable: https://packages.qa.debian.org/x/xymon/news/20150214T123351Z.html Adam D. Barratt wrote: Please go ahead, and remove the moreinfo tag once that's been done. Done herewith. Regards, Axel -- ,''`. | Axel Beckert

Bug#777681: slapd deleting attributes fills mdb backend

2015-02-14 Thread GALAMBOS Daniel
found 777681 2.4.31-1+nmu2 notfound 777681 2.4.31+really2.4.40-3~bpo70+1 thanks Yes, I messed up with the first testing. I could not reproduce the problem with 2.4.40 only with 2.4.31 and 2.4.39 Knowing this I think there is no point in asking it on openldap-technical, as their opinion is

Bug#778366: unblock: kfreebsd-10/10.1~svn274115-2

2015-02-14 Thread Steven Chamberlain
Hi, Michael Gilbert wrote: Please consider unblocking kfreebsd-10. It fixes 2 security issues: https://security-tracker.debian.org/kfreebsd-10 A debdiff is attached. The other change is to limit the arch-dep packages to kfreebsd-any (which was forgotten in the previous upload). Thanks,

Bug#778408: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: newlib Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#775456: applying into debian-edu

2015-02-14 Thread Georges Khaznadar
Hello David, David Prévot a écrit : [...] On Fri, Jan 16, 2015 at 12:11:08PM +0100, Georges Khaznadar wrote: I am enthusiastic about your ITP. If I can help, please tell me! Thanks, do not hesitate to apply into Debian Edu team membership on Alioth, where I initially intend to share the

Bug#771944: closed by Michael Gilbert mgilb...@debian.org (Re: Bug#771944: Following FusionForge 5.3 stable branch)

2015-02-14 Thread Michael Gilbert
On Sat, Feb 14, 2015 at 8:24 AM: You got it all wrong. So other than the typo s/font/fusion/, I don't really understand that statement. There were two unstable fusionforge uploads post-freeze that were in fact accepted into testing [0], and there are no other proposed changes currently to

Bug#777573: alsa-base: Sound works, then stops working

2015-02-14 Thread Elimar Riesebieter
* Tim Dowd mrdowdsouthmo...@gmail.com [2015-02-14 09:21 -0600]: Please close this bug. It was a fault with a component in my audio system. Apologies for the trouble. Bug closed hereby. Elimar -- what IMHO then? IMHO - Inhalation of a Multi-leafed Herbal Opiate ;) --posting

Bug#778391: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: llvm-toolchain-3.4 Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at

Bug#778400: okular: Filename suggestion in Save As dialog truncates filenames ending in '?.pdf'

2015-02-14 Thread JO John
Package: okular Version: 4:4.14.2-2 Severity: normal Dear Maintainer, * What led up to the situation? 1) Open a PDF document the filename of which ends in the ?.pdf sequence, for example: 'What do?.pdf'. 2) Select the FileSave As command. 3) The filename suggestion is being truncated to

Bug#778401: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: knews Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778398: [pkg-xtuple-maintainers] Bug#778398: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Daniel Pocock
Thanks for reporting this. I'm not able to look at the issue this weekend. Can you please let me know if it has been reported upstream or if you have a moment could you file the report in the upstream bug tracker at http://www.xtuple.org ? I don't believe the package is in stable, but it is in

Bug#778404: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: ptlib Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778405: wrong version used for BUILD_USING lookup

2015-02-14 Thread Goswin von Brederlow
Package: gcc-arm-none-eabi Version: 4.8.3-9+11 Severity: normal Hi, I'm trying to build gcc-arm-none-eabi using gcc-4.9-source. The debian/rules files nicely defines GCC_VERSION at the top and I thought that would be all that I need to change. But a few lines later the BUILT_USING lookup has

Bug#776412: Report upstream

2015-02-14 Thread Sylvain Archenault
I believe it's an upstream issue, i created the following issue; https://code.google.com/p/chromium/issues/detail?can=2q=colspec=ID%20Pri%20M%20Week%20ReleaseBlock%20Cr%20Status%20Owner%20Summary%20OS%20Modifiedid=458780thanks=458780ts=1423926891 Sylvain -- To UNSUBSCRIBE, email to

Bug#778386: Main Menu: unable to move up/down items

2015-02-14 Thread Schler Thomas (ID SD)
Package: gnome-menus Version: 3.4.2-5 Severity: normal Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? Go to panel menu Applications: Choose Accessories - Main Menu In the middle part of window Main Menu you get listed

Bug#777893: gyoto: ftbfs with GCC-5

2015-02-14 Thread Thibaut Paumard
Hi, It's easy to get Gyoto to compile with gcc 5: simply add -P to CPPFLAGS. The configure script will be fixed upstream in the next release. By the way, does a-one (reading this bug) know whether -P is safe, i.e. accepted by all the relevant C preprocessors? I don't intend on pushing any new

Bug#778388: ccache: scanner confused by comment signs in strings

2015-02-14 Thread Oswald Buddenhagen
Package: ccache Version: 3.1.10-1 Severity: normal i have this fine piece of code: *outStr += fL1S( /* \\u) + QString::number(maskedTok, 16) + fL1S( */); if i change anything between the /* parts, ccache will think that nothing changed ... even though the comment chars are obviously

Bug#774333: sane plustek backend not working

2015-02-14 Thread Jörg Frings-Fürst
tags 774333 - moreinfo tags 774333 sane-backends/1.0.25+git20150102-1 thanks Hello Mark, hello Jeremy, many thanks for your testing. So I can close this bug. CU Jörg -- New: GPG Fingerprint: 63E0 075F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D GPG key (long) : 09F89F3C8CA1D25D GPG Key

Bug#778389: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: php5 Severity: important Tags: security The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the reason

Bug#778398: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: openrpt Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778407: ITP: golang-glog -- Leveled execution logs for Go

2015-02-14 Thread Martín Ferrari
Package: wnpp Severity: wishlist Owner: Martín Ferrari tin...@debian.org * Package name: golang-glog Version : 0.1~git20150214.44145f0 Upstream Author : Google Inc. * URL : https://github.com/golang/glog * License : Apache-2.0 Programming Lang: Go

Bug#778414: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: efl Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778396: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: cups Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778397: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: librcsb-core-wrapper Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code

Bug#778394: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: llvm-toolchain-snapshot Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected

Bug#778395: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: haskell-regex-posix Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at

Bug#778403: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: vnc4 Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#774428: unblock: simpleburn/1.7.0-2

2015-02-14 Thread Mateusz Łukasik
On 14.02.2015 11:52 AM, John Paul Adrian Glaubitz wrote: On 02/11/2015 12:34 AM, Mehdi Dogguy wrote: Looks like a sensible plan. Can we help to make that happen? Sure. I am just waiting for Mateusz to make another upload to mentors. Mateusz, ping? Otherwise I'd be happy to NMU. I think

Bug#778406: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: clamav Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#776172: vlc: crash (segmentation fault) on a webm file

2015-02-14 Thread Sebastian Ramacher
Control: tags -1 + unreproducible Control: severity -1 normal On 2015-02-14 00:58:27, Vincent Lefevre wrote: On 2015-01-25 02:18:52 +0100, Sebastian Ramacher wrote: Does avprobe / avplay crash too? I couldn't reproduce the crash with it. But I could reproduce the crash with VLC only be

Bug#778411: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: sma Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778410: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: yap Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778362: Periodic (90s) restart of KDM by systemd on jessie

2015-02-14 Thread Jedd Rashbrooke
Thanks for the hints, Alexandre. Adjusting getty counts (I like 4 ttys ready to go, not the default 6) is something else I need to learn how to control in a post-innittab world, along with understanding how no kdm.service works better than kdm.service being present. Fun times ahead! -- To

Bug#771944: closed by Michael Gilbert mgilb...@debian.org (Re: Bug#771944: Following FusionForge 5.3 stable branch)

2015-02-14 Thread beuc
Hi, You got it all wrong. I wrote: So, I take it we need to maintain a branch off the upstream stable branch, that will not include most user-related bugfixes (but include the piupart-related nitpicks ;))? Short of an answer from you, that's exactly what happened, and Jessie has a sub-par

Bug#778387: CVE-2014-9679

2015-02-14 Thread Moritz Muehlenhoff
Package: cups Severity: grave Tags: security This was assigned CVE-2014-9679 and is fixed in experimental already: https://www.cups.org/str.php?L4551 Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#774020: systemd: black screen with backlight on start. rescue mode plus Ctrl-D allows normal boot

2015-02-14 Thread allan
And, more interesting info: Switching to Nvidia's driver today resolved the issue for me, but it appears X is trying to start before nouveau finishes initializing. I think this may still be systemd, as reducing the number of active cores on the machine also resolves the issue.

Bug#778390: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: olsrd Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778392: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: llvm-toolchain-3.5 Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at

Bug#776094: dovecot-imapd: corrupts mailbox after trying to retrieve it (fwd)

2015-02-14 Thread Santiago Vila
Hello. I wrote about this three weeks ago but got no answer. I'm going to officially forward the Debian bug this time, with all the details. The test case is just 840 bytes long. Please give it a try. -- Forwarded message -- From: Santiago Vila sanv...@unex.es To:

Bug#778374: Is php5 a good candidate for “minor” release bump? (was: [php-maint] Bug#768509: debian-edu-config: After upgrading a Wheezy main-server to Debian 7.7 the Gosa gui fails to connect to LDAP

2015-02-14 Thread David Prévot
Hi, [Bug#778374: php5 5.6.5 fully breaks Horde packages in Debian jessie] reminded me of this not so old message: Le 18/11/2014 12:36, Ondřej Surý a écrit : On Tue, Nov 18, 2014, at 03:28, David Prévot wrote: [ Adding php maintainers, security team and release team to the loop. ] Le

Bug#778393: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: llvm-toolchain-3.6 Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at

Bug#778399: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: z88dk Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778402: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: radare2 Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778409: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: vigor Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778412: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: nvi Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778413: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2015-02-14 Thread Luciano Bello
Package: alpine Severity: important Tags: security patch The security team received a report from the CERT Coordination Center that the Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability. It looks like this package includes the affected code at that's the

Bug#778415: ntp: NetworkManager breaks dhcp hook

2015-02-14 Thread Helmut Grohne
Package: ntp Version: 1:4.2.6.p5+dfsg-2+deb7u3 Severity: normal Tags: patch Usually, ntp obtains its servers via dhcp. As soon as network-manager is installed, this is broken, because NetworkManager disables the dhcp hooks. This issue is known for a long time and known as #537358. The

Bug#778349: pre-approval request - unblock: python-softlayer/3.2.0-2

2015-02-14 Thread Scott Kitterman
On Saturday, February 14, 2015 11:55:50 AM Adam D. Barratt wrote: Control: tags -1 + confirmed moreinfo On Fri, 2015-02-13 at 16:45 -0500, Scott Kitterman wrote: RC bug fix. Requesting approval before upload since I propose including also a fix for an important bug as well as changes

Bug#777518: Changes in patch block fixing u-boot FTBFS

2015-02-14 Thread Vagrant Cascadian
Control: block 777518 by 777520 Well, mostly block. There may be a workaround by fixing the patch, but it's unclear weather the workaround has other impacts... live well, vagrant signature.asc Description: PGP signature

Bug#776717: hwinfo build is not reproducible

2015-02-14 Thread Tomasz Buchert
This has been fixed in the git and will be a part of the new upload. Tomasz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#248397: Contributions

2015-02-14 Thread Richard Winters
Hello, Is help still requested for this package?

Bug#778326: quilt: new upstream release 0.64 (2015-02-09)

2015-02-14 Thread Martin Quinson
Thanks for the reminder. I will however wait for jessie to be released before packaging the new version. The changes are not really fundamental and quilt is quite high in the dependency chain. I don't want to mess with the release. Thanks anyway, Mt. On Fri, Feb 13, 2015 at 05:46:36PM +0200,

Bug#776683: snmpd: SNMPd still tries to query PCI Bus

2015-02-14 Thread gregor herrmann
Control: tag -1 + unreproducible moreinfo On Sat, 31 Jan 2015 00:25:00 +0100, Piotr Gorski wrote: I have VPS form OVH running Debian Jessie. Few hours ago I've installed snmpd to monitor my network interfaces but snmpd can't start. When I try starting it with /etc/init.d/snmpd start it says:

Bug#679249: Contributions

2015-02-14 Thread Richard Winters
Hello, I'm looking to get my foot in the door as a contributor. Many years as a developer (c++)..autotools and debian packaging experience (nothing too advanced with regards to debian packaging yet...just simple multi-binary package with conf and init). Not sure if any of that helps (above).

Bug#777518: Bug#777520: patch: regression causes u-boot to FTBFS

2015-02-14 Thread GCS
Hi Vagrant, On Mon, Feb 9, 2015 at 4:27 AM, Vagrant Cascadian vagr...@debian.org wrote: Package: patch Version: 2.7.4-1 Severity: serious Justification: causes FTBFS in other packages Control: affects -1 u-boot $ dpkg-source -x u-boot_2014.10+dfsg1-2.dsc dpkg-source: warning: failed to

Bug#778356: Subtitles unreadable in 0.7.3

2015-02-14 Thread Alessandro Ghedini
On sab, feb 14, 2015 at 12:33:55 +0100, Juliusz Chroboczek wrote: Package: mpv Version: 0.7.3-1 In both 0.7.3-1 and 0.7.3-1ffmpeg, SRT subtitles appear as opaque white squares, one per character. The same video shows the subtitles just fine with 0.6.2-2. This is a netbook using the N450

Bug#764692: Bug#778418: ndisc6: fails to build on kfreebsd

2015-02-14 Thread Steven Chamberlain
Control: block -1 by 764692 Hi, Michael Gilbert wrote: This package no longer builds on the freebsd architectures: https://buildd.debian.org/ndisc6 This is another effect of #764692; we should be able to fix it in glibc post-jessie release, by updating the glibc-bsd copy of tcp.h (and

Bug#777439: Jessie DI-rc1 amd64 after installation no network interfaces

2015-02-14 Thread Holger Wansing
Hi, Heiko Ernst gipfelsturm...@gmx.net wrote: this is my installer syslog [...] Feb 10 07:52:49 debootstrap: Creating /etc/network/interfaces. Hmm, at the beginning of the installation, /etc/network/interfaces is created and apparently works (OP did not complain about network problems

Bug#775691: matplotlib: printf buffer overrun

2015-02-14 Thread Sandro Tosi
On Sat, Feb 14, 2015 at 5:01 PM, Michael Gilbert mgilb...@debian.org wrote: On Sat, Feb 14, 2015 at 4:59 AM, Sandro Tosi wrote: how about using a delayed queue instead of having uploaded straight to unstable? Don't the NMU guidelines [0] say otherwise when there is no maintainer activity

Bug#778340: RFS: sudoku/1.0.3-1 ITA

2015-02-14 Thread Markus Koschany
Hi Peter, I can't sponsor your package but nevertheless I wanted to say thanks for taking care of sudoku. The package looks very good and for a ncurses game it is also well integrated into desktop environments. I hope you will find a sponsor soon. Here are only two minor points: debian/control:

Bug#775691: matplotlib: printf buffer overrun

2015-02-14 Thread Michael Gilbert
On Sat, Feb 14, 2015 at 12:03 PM, Sandro Tosi wrote: Don't the NMU guidelines [0] say otherwise when there is no maintainer activity for more than 7 days? like they say Have you clearly expressed your intention to NMU, at least in the BTS? It is also a good idea to try to contact the

Bug#332498: Contributions

2015-02-14 Thread Richard Winters
Hello, Is help still requested for this package?

Bug#776713: tiptop: package is not reproducible

2015-02-14 Thread Tomasz Buchert
This now fixed in the git repository and will be released with the new upload. Tomasz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#532097: Contributions

2015-02-14 Thread Richard Winters
Hello, I 'm in the same boat as the last person to reply about a year ago...cups is the top listed package for new-commers in the 'how-can-i-help' package. I've also offered help to nodejs, grub2, icu, and openssl. The debian-js team replied to me, but I had to email the guys directly :P They

Bug#749321: Poor transition path

2015-02-14 Thread Luciano Bello
On Sat, 27 Sep 2014 14:07:18 +0200 =?UTF-8?B?SmVyZW15IExhaW7DqQ==?= jeremy.la...@m4x.org wrote: I think the transition to pypdf2 was handled rather poorly. This issue manage to make the way up in my ToDo list this week, after way too much time. I'm sorry for the long delay. Since I'm a bit

Bug#778417: ITP: netcdf-python -- python interface to the netCDF4 (network Common Data Form) library

2015-02-14 Thread Ross Gammon
Package: wnpp Severity: wishlist Owner: Ross Gammon rossgam...@mail.dk * Package name: netcdf-python Version : 1.1.3 Upstream Author : University Corporation for Atmospheric Research/Unidata * URL : http://unidata.github.io/netcdf4-python/ * License : ISC,

  1   2   >