Bug#693519: mosh: Broken watchfile

2012-11-29 Thread Keith Winstein
Thank you for catching this. We applied the patch and pushed to
Github. It will be in the next release.

On Sat, Nov 17, 2012 at 8:29 AM, Jonathan McCrohan jmccro...@gmail.com wrote:
 Package: mosh
 Severity: normal
 Tags: patch

 Hi,

 Github have changed their website which breaks debian/watch. I have
 attached a patch which fixes this issue.

 Jon

 -- System Information:
 Debian Release: wheezy/sid
   APT prefers testing
   APT policy: (650, 'testing'), (600, 'unstable'), (450, 'experimental')
 Architecture: amd64 (x86_64)
 Foreign Architectures: i386

 Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
 Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694473: [Pkg-mediawiki-devel] Bug#694473: Can't edit any text into the wiki anymore

2012-11-29 Thread Thorsten Glaser
On Tue, 27 Nov 2012, Mechtilde wrote:

 As Harald told at the German Debian-User list, it is not enough to
 restart /etc/init.d/apache2 but you need to stop and start apache2ctl.

This might be a long-standing bug in apache2 that SOMEONE thinks
it was a good idea to make restart==reload instead of, like in
virtually ALL OTHER initscripts, restart==stop+start.

I’ve always only be doing /etc/init.d/apache2 stop; … start, and
it WFM.

Debian package maintainer scripts have no business using apache2ctl
directly, they should use the initscripts or the invoke-rc.d tool.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-314
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Boris Esser, Sebastian Mancke


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694693: tiff: CVE-2012-5581

2012-11-29 Thread Moritz Muehlenhoff
Package: tiff
Severity: grave
Tags: security
Justification: user security hole

Hi Jay,
another security issue was discovered by Red Hat's Huzaifa S. Sidhpurwala:
The Red Hat bug contains the necessary details:
https://bugzilla.redhat.com/show_bug.cgi?id=867235

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694694: jruby: CVE-2012-5370

2012-11-29 Thread Moritz Muehlenhoff
Package: jruby
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see the Red Hat bug for details:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5370

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#681142: [Pkg-utopia-maintainers] Bug#681142: network-manager: remember the user's authentication, like sudo

2012-11-29 Thread Michael Biebl
On 11.07.2012 00:05, Stefan Monnier wrote:
 Package: network-manager
 Version: 0.9.4.0-5
 Severity: normal
 
 If I right-click = Edit connections then select wireless, then
 select a network, then click edit.  I get two problems here:
 - 2 boxes pop up, one for the edits, one for authentication.
   Depending on the time of the day, either the edit or the password
   box gets to be on top, so I sometimes have to look for the password
   box underneath the other, to be able to authenticate.
 - the authentication box always pops up, even if I went through the
   exact same steps 5 seconds earlier.  sudo handles this better by
   remembering if the user authenticated recently.

That's basically how policykit works. There is not really anything that
can be done in NM about that.




-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#684039: ITP: prime-phylo -- Bayesian estimation of gene trees taking the species tree into account

2012-11-29 Thread Andreas Tille
Hi Erik,

it seems I missed your ITP - otherwise I would have most probably pinged
you whether you intent to do the packaging inside the Debian Med team.  We
try to inject medical and microbiological software into Debian and your
ITP seems to fit perfectly into our biology task[1].

So I would suggest you join the Debian Med team (I checked whether you
just have an account on alioth.debian.org but failed in searching for
your name - otherwise I would have added you to the team right now).  All
steps are described in our team policy[2].

Meanwhile I might check your packaging you provided at mentors however,
I would strongly recommend (you might need require) that you choose at
your preference either our SVN or Git repository (see [2]) for your
packaging work to enable effective team maintenance.  For instance I
would turn your citation of the scientific paper into a debian/upstream
reference which is way more flexible than simply putting it into the
long description (which is deprecated).

I hope you like this idea and we would be very happy to welcome you in
our team.

Kind regards

  Andreas.

[1] http://debian-med.alioth.debian.org/tasks/bio
[2] http://debian-med.alioth.debian.org/docs/policy.html
 
 Package: wnpp
 Severity: wishlist
 Owner: Erik Sjölund erik.sjol...@gmail.com
 
 * Package name  : prime-phylo
   Version : 1.0.3
   Upstream Author : Lars Arvestada...@csc.kth.se, Bengt
 Sennbladbengt.sennb...@ki.se and others
 * URL : http://prime.sbc.su.se
 * License : GPL-3
   Programming Lang: C++
   Description: Bayesian estimation of gene trees taking the species
 tree into account
 
 PrIME (Probabilistic Integrated Models of Evolution) is a package
 supporting inference of evolutionary parameters in a Bayesian framework
 using MCMC. A distinguishing feature of PrIME is that the species tree is
 taken into account when analyzing gene trees.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#691790: [Pkg-utopia-maintainers] Bug#691790: network-manager: Connectivity checking fails

2012-11-29 Thread Michael Biebl
retitle 691790 Enable connectivity checking support
severity 691790 wishlist
thanks

On 29.10.2012 18:54, Alex Hermann wrote:
 
 Please compile nm against libsoup so the connectivity feature can be used.
 

Let's turn this into a wishlist/feature request bug.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#627955: [Pkg-utopia-maintainers] Bug#627955: network-manager: Network-Manager crashes when starting pptp vpn connection

2012-11-29 Thread Michael Biebl
Hi Thomas,

On 25.05.2011 22:34, Thomas Angermayer wrote:
 Package: network-manager
 Version: 0.8.4.0-1
 Severity: important
 
 I've set up an pptp vpn connection with the network-manager running under
 gnome. I only entered the name of the connection, the gateway, my username
 and password, and the option that everyone can use this connection.
 
 When I click on the network-manager (witn the left mouse key) and select
 VPN Connections and then the connection, I've set up, the NM-Applet
 disappears from the Gnome panel and I've to restart it with
 
 NetworkManager 
 
 After that, the NM-Applet appears again. But when I then try to start the
 vpn connection again, the same happened as described before!

Is this problem still reproducible with a current version from sid/wheezy?

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#694637: ITP: gildas -- Radioastronomy data analysis software

2012-11-29 Thread Andreas Tille
Hi Sebastien,

this seems to be a good candidate for Debian Science where we just have
several applications for astronomy[1].  I'm forewarding your ITP to the
mailing list and you might consider joining the team to profit from more
easy and qualified sponsering (please forgive me if you are just a
member and I simply failed in remembering your name).

Kind regards

  Andreas.

[1] http://blends.alioth.debian.org/science/tasks/astronomy

On Wed, Nov 28, 2012 at 03:34:16PM +0100, Sebastien Maret wrote:
 Package: wnpp
 Severity: wishlist
 Owner: Sebastien Maret sebastien.ma...@gmail.com
 
 * Package name: gildas
   Version : 201211c
   Upstream Author : The gildas programmer team gil...@iram.fr
 * URL : http://www.iram.fr/IRAMFR/GILDAS/gildas.html
 * License : No problem Bugroff
   Programming Lang: C, Fortran, Python
   Description : Radioastronomy data analysis software
 
   Gildas, the Grenoble Image and Line Data Analysis Software, is a
   collection of software oriented towards radioastronomical
   applications (either single-dish or interferometer). It is daily
   used to reduce all data acquired with the IRAM 30m telescope and
   Plateau de Bure Interferometer (PdBI).
 
 
 -- 
 To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: 
 http://lists.debian.org/20121128143416.21268.51691.report...@dmz98.obs.ujf-grenoble.fr
 
 

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694637: ITP: gildas -- Radioastronomy data analysis software

2012-11-29 Thread Sébastien Maret

Le 28 nov. 2012 à 17:24, Timo Juhani Lindfors timo.lindf...@iki.fi a écrit :

 Sebastien Maret sebastien.ma...@gmail.com writes:
 * License : No problem Bugroff
 
 I took a brief look but couldn't find a clear copyright license for many
 files. Some have headers for LGPL-2.1+, python license or GPL-2+ but
 many files don't have any headers.


There is a short copyright notice on their homepage:
http://www.iram.fr/IRAMFR/GILDAS/gildasli7.html#x10-7000

I talked to the developers yesterday and they plan to license future releases 
under the GPL. They make a new release every month, so hopefully by the time 
this package is finished the code will be GPL'ed.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694393: [Pkg-libvirt-maintainers] Bug#694393: libvirt-bin: error: Unable to create cgroup

2012-11-29 Thread Guido Günther
retitle 694393 Not stopped properly on ugrades 
thanks

On Thu, Nov 29, 2012 at 07:44:00AM +0100, Guido Günther wrote:
 retitle 694393: Not stopped properly on ugrades when switching from sysvinit 
 to systemd
 thanks
 
 On Thu, Nov 29, 2012 at 12:51:38AM +, brian m. carlson wrote:
  On Tue, Nov 27, 2012 at 07:31:42PM +0100, Guido Günther wrote:
   We should figure out which part of the cgroup hierachy is missing. Could
   you install debugging symbols, attach to libvirtd and break at
   cgroup.c::virCgroupForDomain? Alternatively you can run libvirtd as
   documented on the wiki. This will also print out the names of the
   cgroups it tries to create. Once you got the cgroups name you should be
   able to check which part in the cgroup hierachy is missing.
  
  I think the issue here is that libvirtd didn't die properly when I ran
  service libvirt-bin stop.  As a consequence, I had to kill it off with
  /bin/kill and when I started it manually using the formula from the
  wiki, it worked fine.  Since the process ID was 1355, and I have the max
  process ID set to 1048575, the service almost certainly had not been
  restarted since I originally booted my laptop, which was before the
  libvirt-bin upgrade.  For some reason, libvirtd is not being stopped and
  restarted properly.
 
 I adjusted the bugs title. Is it possible that you started libvirt with
 sysvinit, switched to systemd and then upgraded libvirt? In this case
 libvirt might indeed have little chance to get stopped properly.

Scratch that. We started to ship systemd service files in 0.9.13 not
0.9.12. Sorry for the noise.

 Cheers,
  -- Guido
 
  
  If this is a bug in systemd, please feel free to reassign it there.
  
  -- 
  brian m. carlson / brian with sandals: Houston, Texas, US
  +1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
  OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
 
 


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694623: Fixed in git

2012-11-29 Thread Mario Lang
tag 694623 + pending
Thanks.

Since ganglia is in collab-maint (great!) I've taken the opportunity and
committed the patch provided in this bug myself.

-- 
CYa,
  ⡍⠁⠗⠊⠕


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#479308: RFS: sipvicious/0.2.7-1 [ITP] Tools to audit SIP based VoIP systems

2012-11-29 Thread Helmut Grohne
For support@m.d.n: I believe the below package to be undistributable due
to lacking and wrong license declarations.

On Fri, Nov 02, 2012 at 12:56:21PM +0100, Victor Seva wrote:
 sipvicious - set of tools that can be used to audit SIP based VoIP
 systems.

Can you briefly explain the relation of the tool to similar utilities
such as sipsak or sip-tester?

 dget -x http://mentors.debian.net/debian/pool/main/s/sipvicious
 /sipvicious_0.2.7-1.dsc

I had a look at your package.

debian/changelog lists UNRELEASED as distribution. This has to be
changed before uploading.

The Build-Depends seem strange to me. Can you explain why you depend on
python | python-all |python-dev | python-all-dev? In any case listing
python-dev there seems like a Python Policy violation. Appendix A says:

| Packages that do not require the -dev packages must not build-depend
| on them. 

debian/copyright uses two different names to reference the same GPL
version. Usage of GPL-2.0+ seems uncommon as well. Maybe you can make
this more consistent?

Looking deeper you can see that GPL-2 is actually wrong. The works are
even incompatible with GPL-2 as can be seen in the header of svcrack.py
for example.

debian/copyright also does not mention the addition of works authored by
Andi Albrecht. Indeed I totally failed to find a license for those works
so far. That would make your package undistributeable.

Going further your manual pages seem to based on the help messages of
the tools. To me it seems like the pages need to be considered
derivative works. That means they lack copyright statements for
upstream.

debian/rules still contains comments from dh-make. Can you clean those?

Maybe I missed something, but why do you Build-Depend on python-support
and then use dh --with python2 instead? That dependency seems useless.
And why do you use any of those tools when you don't ship any Python
modules?

Upstream ships Berkely DB files. I was wondering if they are in
preferred form for modification according to said GPL-2^H3.

Furthermore those Berkley DB files are accessed from svfphelper.py using
relative paths. So after installing those tools, the databases will not
be found unless you first cd to /usr/share/sipvicious.

You list a homepage in debian/changelog, but it is notably absent in
debian/control. Maybe you can add that?

To me it seems like more work is needed before prime time.

Helmut


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694685: [Pkg-xfce-devel] Bug#694685: xfce4-volumed: uses non-unique string names for card identification

2012-11-29 Thread chrysn
On Thu, Nov 29, 2012 at 07:19:16AM +0100, Yves-Alexis Perez wrote:
 Can you try to configure /xfce4-mixer/active-track to Mixer and see what
 happens?

i can, but only if xfce4-volumed is not currently running. when configured
like that, it behaves like before (as if the first HD-Audio Generic (Alsa
mixer) card with the IEC958 was configured.

  this, by the way, also affects /xfce4-mixer/sound-card and
  /xfce4-mixer/sound-cards. those only constitute minor annoyances,
  though.
 
 The very problem might be in xfce4-mixer (for not naming cards
 differently) or even in alsa (although less probable).

i've considered filing this against alsa, but given they always use
numbered ids internally (a la hw:0), i assumed they don't guarantee
that the visible names are always distinct.

best regards,
chrysn


signature.asc
Description: Digital signature


Bug#675495: downgrading the severity of #675495 (openjdk-6 in wheezy)

2012-11-29 Thread Niels Thykier
On 2012-11-28 17:20, Julien Cristau wrote:
 On Tue, Aug 28, 2012 at 17:43:57 +0200, Moritz Muehlenhoff wrote:
 
 OpenJDK Security support has always been a nightmare for the security
 team because there was no support from the maintainers. Security support 
 s primarily the responsibility of the maintainer.

 If you dump two packages in the archive without taking any precautions
 to get a clean solution this only makes things worse. In any case we
 cannot hide the issue under the carpet. We have three options: 


I agree the situation is not very optimal.  It would have helped if we
had been reminded about the lack of security support earlier.  Though
even if we were, I am not sure we would have made it in time (nor am I
interested in placing blame here).

 - Drop openjdk6 from Wheezy (and proceed with the needed changes to allow
   that)

Steve Chamberlain sent a list of packages.  If my memory serves that is
just the tip of the iceberg.  OpenJDK-7 comes with a set of
regressions (occasionally that is just the implementation being
stricter), which in some cases the fix requires an API (or ABI) breakage.

If you are interested in just how much of the iceberg you (probably)
haven't seen yet, have a look at http://titanpad.com/WciYqDGRNd

 - The Java maintainers take up the responsibility and step up to support
   openjdk6 in stable- and oldstable-security for Wheezy

For the record, Java maintainers != OpenJDK-X maintainers and I
don't think that is about to change.  Even if it did change, the Java
implementation is completely unlike the Java packages we are used to
maintain.
  On top of this, the Java team is currently down to about a handful of
active maintainers (I am not even sure if I should include myself in
that number) that have to keep 500+ packages floating.

 - A note is being added to the release notes that openjdk6 is unmaintained
   security-wise in Wheezy and should not generally be used

 Dumping this issue to the release notes doesn't sound like a reasonable
 option if there are lots of other packages still depending on it.  We
 might as well drop all those packages, IMO.
 
 Cheers,
 Julien
 
 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694695: network-manager-gnome: wifi selection fails silently w/o gnome-keyring

2012-11-29 Thread chrysn
Package: network-manager-gnome
Version: 0.9.4.1-2
Severity: normal

when installed without gnome-keyring, connecting to unknown protected
wireless networks fails silently. nm-applet's output shows:

Gkr-Message: secret service operation failed: The name
org.freedesktop.secrets was not provided by any service files

looking up that service led me the way to installing gnome-keyring, and
things work now. as connecting to wifi is the most common use case for
network-manager, gnome-keyring should at least be in the Recommends
field of the package.

alternatively, if bug #502644 was resolved, there would be an error
message when a user tries to connect to an unknown wifi network, or
those networks wouldn't be shown at all.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_AT.UTF8, LC_CTYPE=de_AT.UTF8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages network-manager-gnome depends on:
ii  dbus-x11  1.6.8-1
ii  dpkg  1.16.9
ii  gconf-service 3.2.5-1+build1
ii  gconf23.2.5-1+build1
ii  gnome-icon-theme  3.4.0-2
ii  libatk1.0-0   2.4.0-2
ii  libc6 2.13-35
ii  libcairo-gobject2 1.12.2-2
ii  libcairo2 1.12.2-2
ii  libdbus-1-3   1.6.8-1
ii  libdbus-glib-1-2  0.100-1
ii  libgconf-2-4  3.2.5-1+build1
ii  libgdk-pixbuf2.0-02.26.1-1
ii  libglib2.0-0  2.33.12+really2.32.4-3
ii  libgnome-bluetooth10  3.4.2-1
ii  libgnome-keyring0 3.4.1-1
ii  libgtk-3-03.4.2-4
ii  libnm-glib-vpn1   0.9.4.0-6
ii  libnm-glib4   0.9.4.0-6
ii  libnm-gtk00.9.4.1-2
ii  libnm-util2   0.9.4.0-6
ii  libnotify40.7.5-1
ii  libpango1.0-0 1.30.0-1
ii  network-manager   0.9.4.0-6
ii  policykit-1-gnome 0.105-2

Versions of packages network-manager-gnome recommends:
pn  gnome-bluetooth  none
ii  iso-codes3.40-1
pn  libpam-keyring   none
ii  mobile-broadband-provider-info   20120708-1
ii  xfce4-notifyd [notification-daemon]  0.2.2-2

Versions of packages network-manager-gnome suggests:
pn  network-manager-openconnect-gnome  none
pn  network-manager-openvpn-gnome  none
pn  network-manager-pptp-gnome none
pn  network-manager-vpnc-gnome none

-- no debconf information


signature.asc
Description: Digital signature


Bug#673042: parted: loose 'legacy BIOS bootable' flag on GPT disks

2012-11-29 Thread Moritz Muehlenhoff
severity 673042 grave
thanks

Hi Colin,

On Fri, Jul 13, 2012 at 09:40:26AM +0200, Jérémy Bobbio wrote:
 On Tue, May 15, 2012 at 07:03:44PM +0200, Jérémy Bobbio wrote:
  Parted currently does not handle GPT partition flags properly when
  modifying a GPT. The most crucial flag that is lost is the 'legacy BIOS
  bootable'. It is used by SYSLINUX to detect which partition the system
  should be booted from, for example. Currently, any changes using parted
  (or one of the tools that rely on parted e.g. gnome-disk-utility) will
  make a system using SYSLINUX on GPT unbootable if the flag is not
  manually re-added. Pretty annoying, to say the least.
  
  Attached is a patch against the version of parted currently in squeeze.
  It is made of three patches cherry-picked from upstream. Other GPT flags
  are still not preserved, but at least the 'legacy BIOS bootable' is.
  
  This patch fails on the version currently in sid due to some issues with
  autoconf/automake stuff. I'd rather let you handle that, but the
  backported patches apply cleanly and manually building the code showed
  that they work as intended.
  
  I think this issue is worth an update in the next stable point release.
 
 Any news on this? Comments? Thing I should do?

I'm raising the severity to RC. This really should be fixed for Wheezy:

This bug led to unbootable systems with two systems at work; the BIOS 
implementations in these systems discarded the hard disk in total if the 
bootable flag was missing.

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694473: [Pkg-mediawiki-devel] Bug#694473: Can't edit any text into the wiki anymore

2012-11-29 Thread Jonathan Wiltshire
Control: retitle -1 apache2: segmentation fault after reload, maybe PHP 
related

Control: reassign -1 apache2

Reassigning, there should be enough information now for someone with 
more apache experience to triage better.


Thanks,

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694550: tpu: libio-prompt-perl/0.997001-1+deb7u1

2012-11-29 Thread Niels Thykier
Control: tags -1 confirmed

On 2012-11-27 17:25, Salvatore Bonaccorso wrote:
 Package: release.debian.org
 Severity: normal
 User: release.debian@packages.debian.org
 Usertags: tpu
 
 Hi Release Team
 

Hi,

 On IRC I asked how to handle this, and Neil McGovern stated would be
 fine to file this t-p-u upload request (could be considered serious).
 
 It's about #694537 in libio-prompt-perl
 
 I have prepared an update targeting t-p-u. Debdiff is attached.
 

Looks fine, please go ahead.

 If required I can also drop the following two changes: 1) email change
 and 2) the addition of debian/gbp.conf for the pkg-perl git repos.
 

I think we can let those in as well.

 Regards and thanks for your work
 Salvatore
 
 [...]

Please write back when it has been uploaded.

~Niels


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694491: unblock: kdeadmin/4:4.8.4-2

2012-11-29 Thread Niels Thykier
Control: tags -1 confirmed

On 2012-11-26 22:01, Lisandro Damián Nicanor Pérez Meyer wrote:
 Package: release.debian.org
 Severity: normal
 User: release.debian@packages.debian.org
 Usertags: unblock
 
 Please unblock package kdeadmin
 
 This package ships a simple hack^w modification in the UI that allows
 us to downgrade the severity of #659155 from grave to normal.
 

If a proper fix for this appears, I'd be interested in seeing it as well.

 The diffstat is:
 
  changelog|9 ++
  control  |3 
  patches/lp_lpadmin_warning.patch |  119 
 +++
  patches/series   |1 
  4 files changed, 131 insertions(+), 1 deletion(-)
 
 Kinds regards, Lisandro.
 
 unblock kdeadmin/4:4.8.4-2
 
 [...]


Please go ahead and let us know once it has been rebuilt on all
(relevant architectures).

~Niels


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694695: [Pkg-utopia-maintainers] Bug#694695: network-manager-gnome: wifi selection fails silently w/o gnome-keyring

2012-11-29 Thread Michael Biebl
On 29.11.2012 10:19, chrysn wrote:
 Package: network-manager-gnome
 Version: 0.9.4.1-2
 Severity: normal
 
 when installed without gnome-keyring, connecting to unknown protected
 wireless networks fails silently. nm-applet's output shows:
 
 Gkr-Message: secret service operation failed: The name
 org.freedesktop.secrets was not provided by any service files
 
 looking up that service led me the way to installing gnome-keyring, and
 things work now. as connecting to wifi is the most common use case for
 network-manager, gnome-keyring should at least be in the Recommends
 field of the package.

..

 Versions of packages network-manager-gnome recommends:
 pn  libpam-keyring   none


That's what the libpam-keyring Recommends is for which you chose to not
install.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#688113: kde-runtime: Some headers files missing e.g. simpleresource.h

2012-11-29 Thread Pino Toscano
Hi,

Alle mercoledì 19 settembre 2012, ares ha scritto:
 Some headers files are missing. Bug is identical to ubungu bug 928009
 - see
 https://bugs.launchpad.net/ubuntu/+source/kde-runtime/+bug/928009
 where are all information described.
 
 They have already fixed their packages so maybe you could get
 inspiration (they've added kde-runtime-dev package).

The fix is wrong, simply because kde-runtime is supposed to be a 
runtime only module, not providing any development libraries to be 
used by 3rd parties. This has been a known problem upstream.

In KDE 4.9, kde-runtime will not contain development libraries anymore 
(the only ones, nepomuk-related, are moved to the new nepmuk-core 
module).

-- 
Pino Toscano


signature.asc
Description: This is a digitally signed message part.


Bug#694696: OpenSSL: TLS 1.1 and 1.2 client - invalid Client Hello during renegotiation

2012-11-29 Thread von Wittich, Christoph
Package: openssl
Version: 1.0.1c-4

http://rt.openssl.org/Ticket/Display.html?id=2828

TLSv1.2 with OpenSSL:

Client:

Content Type: Handshake (22)
Version: TLS 1.0 (0x0301)
Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Version: TLS 1.1 (0x0302)

Server responds with:

Content Type: Handshake (22)
Version: TLS 1.0 (0x0301)
Handshake Protocol: Server Hello
Handshake Type: Server Hello (2)
Version: TLS 1.0 (0x0301)


è 3073415368:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version 
number:s3_pkt.c:340:


TLS 1.2 with Internet Explorer 9 on Windows 7 behaves different:

Client:

Content Type: Handshake (22)
Version: TLS 1.1 (0x0302)
Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Version: TLS 1.1 (0x0302)

Server responds with:

Content Type: Handshake (22)
Version: TLS 1.1 (0x0302)
Handshake Protocol: Server Hello
Handshake Type: Server Hello (2)
Version: TLS 1.1 (0x0302)


è No Error

Mit freundlichen Grüßen
i.A. Christoph von Wittich

--
Christoph von Wittich   Büro Bautzen
EDV-Verantwortlicher  Zeppelinstraße 15
Tel. +49 3591 67 03-56   02625 Bautzen
   Fax +49 3591 
6703 918

Hentschke Bau GmbH  Geschäftsführer
Zeppelinstraße 15  Jörg Drews
02625 Bautzen Thomas Alscher
www.hentschke-bau.dehttp://www.hentschke-bau.de HRB 6535 Dresden



Bug#694697: samba4 is missing smbd binary

2012-11-29 Thread Franz z
Package: samba4
Version: 4.0.0~rc5+dfsg1-1
Severity: serious

The latest samba4 package in experimental is missing the important
binary /usr/sbin/smbd. Without this binary the samba daemon does not
even start, which makes this package completely useless.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694696: This issue seeems to be fixed in OpenSSL Version 1.0.1d (not released yet)

2012-11-29 Thread von Wittich, Christoph
This issue seeems to be fixed in OpenSSL Version 1.0.1d (not released yet)

Changes between 1.0.1c and 1.0.1d [xx XXX ]

  *) Fix possible deadlock when decoding public keys.
 [Steve Henson]

  *) Don't use TLS 1.0 record version number in initial client hello
 if renegotiating.
 [Steve Henson]


Mit freundlichen Grüßen
i.A. Christoph von Wittich

--
Christoph von Wittich   Büro Bautzen
EDV-Verantwortlicher  Zeppelinstraße 15
Tel. +49 3591 67 03-56   02625 Bautzen
   Fax +49 3591 
6703 918

Hentschke Bau GmbH  Geschäftsführer
Zeppelinstraße 15  Jörg Drews
02625 Bautzen Thomas Alscher
www.hentschke-bau.dehttp://www.hentschke-bau.de HRB 6535 Dresden



Bug#595817: upstream's packaging

2012-11-29 Thread chrysn
upstream keeps a ./debian/ directory in his package, which produces a
working package. it would need some enhancements (ill-formatted files,
old standards version), but can make a good starting point for creating
a package fit for inclusion in debian (which i currently don't have the
time to).


signature.asc
Description: Digital signature


Bug#690905: freedoom: Prboom Plus should be used instead of Prboom

2012-11-29 Thread Fabian Greffrath

Am 16.11.2012 11:32, schrieb Jon Dowland:

I've just put some initial packaging work at
git+ssh://git.debian.org/git/pkg-games/prboom+.git


I have currently started improving the packaging a bit and found the 
package name really confusing and distracting. Could we please rename 
the package to prboom-plus just as upstream calls the project 
itself? We could, of course, keep the symlinks to prboom+ binary and 
manpage, but as a Debian package name I find it really unsuitable.


 - Fabian


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694698: ITP: ruby-libwebsocket -- Universal Ruby library to handle WebSocket protocol

2012-11-29 Thread Vipin Nair
Package: wnpp
Severity: wishlist
Owner: Vipin Nair swv...@gmail.com

* Package name: ruby-libwebsocket
  Version : 0.1.7.1
  Upstream Author : Bernard Potocki bernard.poto...@imanel.org
* URL : https://github.com/imanel/libwebsocket
* License : MIT/X
  Programming Lang: Ruby
  Description : Universal Ruby library to handle WebSocket protocol


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#693653: OpenGL function fails and blocks Pmv and Autodocktools

2012-11-29 Thread Andreas Tille
Hi,

any reason not to upload a fixed package incorporating the suggested patch?

Kind regards

   Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#644362: linux-image-2.6.39-bpo.2-686-pae: hpacucli hangs when creating disks on cciss

2012-11-29 Thread leo weppelman
Jonathan,

I haven't tried it yet with the newer kernels. I will wait until
Debian/Wheezy will be released before trying something new. There is no
pressing need at the moment and I am pretty busy, so no time to experiment
:-(
However, when cciss and/or hpacucli fail on wheezy, I will chime in with a
new bug report ;-)

Thanks,

Leo.


On Sun, Nov 25, 2012 at 1:35 AM, Jonathan Nieder jrnie...@gmail.com wrote:

 Hi Leo,

 In October, 2011, leo weppelman wrote:
  On Wed, Oct 5, 2011 at 2:31 PM, Jonathan Nieder jrnie...@gmail.com
 wrote:
   leo weppelman wrote:

  the problem seems to be caused from replacing the big-lock
  on the ioctl-function by the mutex_lock/unlock on cciss_mutex...
 
  More clues:
  http://thread.gmane.org/gmane.linux.kernel/1113910/focus=1114035
 
  I tried to reproduce the problem with 3.1.0-rc7-686-pae from
  experimental as you requested, but I failed. The problem is that
  hpacucli does not find any controllers with this kernel :-(

 Hopefully since then hpacucli has gained support for 3.x.y kernels. :)
 Are you still able to reproduce this using 2.6.39?  Do newer kernels
 work any better?

 Thanks again for the clear report, and sorry for the long silence.

 Sincerely,
 Jonathan



Bug#694699: ia32-libs-i386: Package not available on amd64

2012-11-29 Thread Benjamin Peter

Package: ia32-libs-i386
Version: 1:0.1
Severity: normal

Dear Maintainer,

the package ia32-libs-i386 does not seem to be installable. On 
packages.debian.org it is also listed as unavailable. But I need

it for ia32-libs-gtk which is needed for firefox.

$ apt-get install ia32-libs-gtk

Reading package lists... Done
Building dependency tree   Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 ia32-libs-gtk : Depends: ia32-libs-i386 but it is not installable
 Depends: ia32-libs-gtk-i386 but it is not installable
E: Unable to correct problems, you have held broken packages.

sources.list:

# deb cdrom:[Debian GNU/Linux wheezy-DI-a1 _Wheezy_ - Official Snapshot 
amd64 DVD Binary-1 20120511-17:58]/ wheezy contrib main


deb http://ftp2.de.debian.org/debian/ wheezy main non-free contrib
deb-src http://ftp2.de.debian.org/debian/ wheezy main non-free contrib

deb http://ftp.nl.debian.org/debian/ wheezy main non-free contrib
deb-src http://ftp.nl.debian.org/debian/ wheezy main non-free contrib

deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free


Thanks for looking into it.


Benjamin Peter

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.6.6-ben (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash



smime.p7s
Description: S/MIME Kryptografische Unterschrift


Bug#694700: Use version less for libjpeg8-dev

2012-11-29 Thread Mathieu Malaterre
Package: swftools
Version: 0.9.2+ds1-3
Severity: normal
Tags: patch

Please use libjpeg-dev instead of libjpeg8-dev in d/control.

Thanks

-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (200, 'testing'), (100, 
'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-0.bpo.3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages swftools depends on:
ii  gsfonts 1:8.11+urwcyr1.0.7~pre44-4.2 Fonts for the Ghostscript interpre
ii  libc6   2.11.3-4 Embedded GNU C Library: Shared lib
ii  libfreetype 2.4.9-1~bpo60+1  FreeType 2 font engine, shared lib
ii  libgif4 4.1.6-9  library for GIF images (library)
ii  libjpeg62   6b1-1The Independent JPEG Group's JPEG 
ii  libmp3lame0 3.98.4+repack2-3~bpo60+1 MP3 encoding library
ii  zlib1g  1:1.2.3.4.dfsg-3 compression library - runtime

swftools recommends no packages.

Versions of packages swftools suggests:
ii  ghostscript [gs-common] 8.71~dfsg2-9 The GPL Ghostscript PostScript/PDF

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692791: #692791 - CVE-2012-5519 - cups lpadmin-to-root privilege escalation - Proposed solutions

2012-11-29 Thread Didier 'OdyX' Raboud
Hi all,
(Security and Release Teams CC'ed to get their advice)

As this is now going in several directions, let's try to summarize the
proposed solutions to get this privilege escalation fixed.

A) Move configuration stanzas from cupsd.conf to cups-files.conf

This is the patch at [0], from upstream revisions 10710 and 10713 and Marc's
small-fixes patch on STR-4223.

This patch moves the following configuration settings from cupsd.conf to
cups-files.conf:

 AccessLog  CacheDirConfigFilePerm  DataDir 
DocumentRoot
 ErrorLog   FileDevice  FontPath
LogFilePerm LPDConfigFile
 PageLogPrintCapRemoteRoot  
RequestRoot ServerBin
 ServerCertificate  ServerKey   
ServerRoot  SMBConfigFile
 StateDir   SystemGroupAuthKey  TempDir 
Pidfile

Amongst thoses, only SystemGroup was defined in the default cupsd.conf (and
Pidfile is Debian-specific). cups-files.conf is not editable by lpadmin users,
and not from the webinterface. As far as I read and understand the patch, the
above list of configuration stanzas just generate warnings if they are found
in cupsd.conf.

Pros: + That's the correct long-term solution.
Cons: - Far from easy to migrate automatically, especially when cupsd.conf was
edited through the webinterface automagically.
  - If putting these configuration stanzas in cupsd.conf just generates
warnings, what's the point of the exercise?

B) Disable any remote configuration by lpadmin users

This has been attempted by Marc on [1]. For now, it is incomplete as it still
allows lpadmin users to HTTP PUT updates to the configuration files.

Pros: + Addresses the problem in a way less intrusive way (smaller patch)
Cons: - Big loss of functionality through forbidding any lpadmin cups server
configuration

C) Ensure that logfiles paths are under CUPSD_LOGDIR /var/log/cups

This has been attempted by Michael on [2]. For now, it is proven to be too
weak as it lets attackers use /var/log/cups/../../../etc/shadow e.g. Also it
only checks the logfiles paths (and not DocumentRoot e.g.).

Pros: + Avoids the simple attack
Cons: - Doesn't really solve anything

D) Enforce default paths, override configuration settings

This has been presented as a possible solution: override the user configuration
settings with sane defaults.

Pros: + Avoids all possible attacks given sane defaults
Cons: - Breaks the test-suite that needs to redirect logfiles, DocumentRoot,
etc.
  - Takes configuration freedom away from administrators;
  - On upgrade, doesn't respect past configurations by administrators;

== Conclusion

In my opinion, A) is the correct long-term solution. It still needs some
additional scripting (move to ucf for cupsd.conf, preinst to move away what's
easily moved away, postinst to edit the new cups-files.conf with old values
from cupsd.conf. But this is probably way too intrusive for a stable upgrade.
Even for a fix targetted at testing, I suspect that this might be too
intrusive (+ the configuration file edit dance isn't written yet).

So, for squeeze/stable and wheezy/next-stable, I'd be tempted to go the B)
(to be fixed) way. Granted, we'll loose functionality, but it will put us on
the safe-side, with updates that drop functionality without needing a painful
configuration-files-edit upgrading path.

Opinions?

Cheers,

OdyX

[0] 
http://anonscm.debian.org/gitweb/?p=pkg-cups/cups.git;a=blob;f=debian/patches/Split-configuration-files-STR-4223.patch
[1] 
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=116;filename=CVE-2012-5519.patch;att=1;bug=692791
[2] 
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=131;filename=alt-CVE-2012-5519.patch;att=1;bug=692791


signature.asc
Description: This is a digitally signed message part.


Bug#694701: RFP: Puzzle Moppet -- Puzzle Moppet is a serenely peaceful yet devilishly challenging 3D puzzle game.

2012-11-29 Thread Debianer
Package: wnpp
Severity: wishlist

Home page: http://garnetgames.com/puzzlemoppet/
Licence: Source Code (WTFPLv2); Assets (freeware)
Description: Puzzle Moppet is a serenely peaceful yet devilishly
challenging 3D puzzle game.
Comments: There are a community release with fully open source assets:
https://bitbucket.org/Knitter/puzzlemoppet
Info: http://wiki.debian.org/Games/Suggested


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694702: icedove calls libreoffice scripts with incorrect arguments when file names contains blank characters

2012-11-29 Thread Eric Valette
Package: icedove
Version: 17.0-1
Severity: normal

Dear Maintainer,

when receiving attachements that can be opened by libreoffice (e.g word, 
powerpoint, ... or even odf), if attached file name contains blanc chracaters,
then icedove calls libreoffice with incorrect arguments (blank characters 
are considered as separator for the argument list

e.g if I recieve attache a file name toto data.pptx it will call
libreoffice with following arguments:

libreoffice --imrress /tmp/toto tata.pptx

Its easy to see adding a
for in in $*
do
echo A$iA   /tmp/debug_libreoffice_cal
done

at the beginning of the /usr/bin/libreoffice script

This is very annoying.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.6.8 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF8, LC_CTYPE=en_US.UTF8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF8)
Shell: /bin/sh linked to /bin/bash

Versions of packages icedove depends on:
ii  debianutils   4.3.4
ii  fontconfig2.9.0-7
ii  libasound21.0.25-4
ii  libatk1.0-0   2.6.0-1
ii  libc6 2.16-0experimental1
ii  libcairo2 1.12.6-1
ii  libdbus-1-3   1.6.8-1
ii  libdbus-glib-1-2  0.100-1
ii  libevent-2.0-52.0.19-stable-3
ii  libffi5   3.0.10-3
ii  libfontconfig12.9.0-7
ii  libfreetype6  2.4.9-1
ii  libgcc1   1:4.7.2-12
ii  libgdk-pixbuf2.0-02.26.4-2
ii  libglib2.0-0  2.34.3-1
ii  libgtk2.0-0   2.24.13-1
ii  libhunspell-1.3-0 1.3.2-4
ii  libjpeg8  8d-1
ii  libnspr4  2:4.9.3-1
ii  libnss3   2:3.13.4-3
ii  libpango1.0-0 1.30.1-1
ii  libpixman-1-0 0.26.0-3
ii  libsqlite3-0  3.7.14.1-1
ii  libstartup-notification0  0.12-2
ii  libstdc++64.7.2-12
ii  libvpx1   1.1.0-1
ii  libx11-6  2:1.5.0-1
ii  libxext6  2:1.3.1-2
ii  libxrender1   1:0.9.7-1
ii  libxt61:1.1.3-1
ii  psmisc22.20-1
ii  zlib1g1:1.2.7.dfsg-13

Versions of packages icedove recommends:
ii  hunspell-en-us [hunspell-dictionary]  20070829-6
ii  hunspell-fr [hunspell-dictionary] 1:3.3.0-4

Versions of packages icedove suggests:
ii  fonts-lyx 2.0.3-3
ii  libgssapi-krb5-2  1.10.1+dfsg-3

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694699: ia32-libs-i386: Package not available on amd64

2012-11-29 Thread Niels Thykier
Hi,

Thanks for the report.  There was a little mishap in the migration of
ia32-libs-gtk that allowed it to migrate before ia32-libs.  ia32-libs
have just migrated to testing 30 minutes and will be available on the
mirrors soon[1].

That said, ia32-libs + ia32-libs-gtk has been replaced by Multi-arch, so
you will probably need to ensure multi-arch has been enabled for the
upgrade to work successfully.

~Niels

[1] Depending on the mirror used and the sync delay between it and the
official mirror it may take several hours.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694703: RFP: Unvanquished -- Alien vs. Human Shooter (like Tremulous).

2012-11-29 Thread Debianer
Package: wnpp
Severity: wishlist

Home page: http://www.unvanquished.net/
License: GPLv3 (?)
License:
https://github.com/Unvanquished/Unvanquished/blob/master/COPYING.txt
Description: Alien vs. Human Shooter
Comments: Inspired by Tremulous, uses the Daemon engine (OpenWolf fork).
Debian repo (unofficial): http://www.moreofthesa.me.uk/unv.xhtml
Info: http://wiki.debian.org/Games/Suggested


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694704: RFP: Turtle Arena -- Turtle Arena is a free and open source cross-platform third-person action game.

2012-11-29 Thread Debianer
Package: wnpp
Severity: wishlist

Home page: https://code.google.com/p/turtlearena/
License: Turtle Arena source code is licensed under a modified version
of the GNU GPLv3 (or at your option, any later version), the license is
also used by Wolfenstein: Enemy Territory and Doom 3.
Engine: Spearmint (GPLv3) - http://code.google.com/p/ioq3ztm/
Description: Turtle Arena is a free and open source cross-platform
third-person action game using a modified version of the Spearmint
engine, which is based on ioquake3.
Launchpad PPA: https://launchpad.net/~zturtleman/+archive/turtlearena-stable
Info: http://wiki.debian.org/Games/Suggested


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694705: ITP: ruby-sdoc -- rdoc generator html with javascript search index

2012-11-29 Thread Anon Ray
package: wnpp
Severity: wishlist
Owner: Anon Ray rayanon...@gmail.com

*Package Name: ruby-sdoc
Version: 0.3.20
Upstream Author: Vladimir Kolesnikov, Nathan Broadbent
*URL: http://rubygems.org/gems/sdoc
*License: N/A
*Description: rdoc generator html with javascript search index

I am packaging sdoc as it is a dependency of json(#657881), which is a
dependency for diaspora.

-- 
Thanks,
Anon Ray


Bug#694706: ITP: ruby-permutation --Library to perform different operations with permutations of sequences

2012-11-29 Thread Arvind K
Package: wnpp
Owner: Arvind arvindkha...@gmail.com
Severity: wishlist


* Package name: ruby-permutation
  Version : 0.1.8
  Upstream Author : Florian Frank
* URL : http://rubygems.org/gems/permutation
* License :  N/A
  Programming Lang: Ruby
  Description :  Library to perform different operations with
permutations of sequences
(strings, arrays, etc.)


Bug#694707: ITP: ruby-ci-reporter -- CI::Reporter is an add-on to Test::Unit, RSpec and Cucumber that allows you to generate XML reports of your test, spec and/or feature runs

2012-11-29 Thread Addy Singh
package: ruby-ci-reporter
Severity: wishlist
Owner: Addy Singh addy...@gmail.com

*Package Name : ruby-ci-reporter
Version : 1.7.3
Upstream Author : Nick Sieger nicksie...@gmail.com
*URL : http://caldersphere.rubyforge.org/ci_reporter/
*License : N/A
*Description : CI::Reporter is an add-on to Test::Unit, RSpec and
Cucumber that allows you to generate XML reports of your test, spec
and/or feature runs. The resulting files can be read by a continuous
integration system that understands Ant's JUnit report XML format,
thus allowing your CI system to track test/spec successes and
failures.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#671495: done

2012-11-29 Thread intrigeri
adblock-plus = 2.1 was just accepted in squeeze-backports.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694697: [Pkg-samba-maint] Bug#694697: samba4 is missing smbd binary

2012-11-29 Thread Jelmer Vernooij
tags 694697 +moreinfo
severity 694697 important
thanks

On Thu, 2012-11-29 at 11:01 +0100, Franz z wrote:
 Package: samba4
 Version: 4.0.0~rc5+dfsg1-1
 Severity: serious
 
 The latest samba4 package in experimental is missing the important
 binary /usr/sbin/smbd. Without this binary the samba daemon does not
 even start, which makes this package completely useless.
smbd is packaged in the 'samba' package - it's an older version of it
though.

However, the Debian package sets up Samba4 in a way so that it doesn't
need the smbd binary. What fails exactly - and what error message do you
get?

Cheers,

Jelmer


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694708: ITP: ruby-jbuilder -- A ruby gem that gives a simple DSL for declaring JSON structure.

2012-11-29 Thread Dominick Ray
Package: wnpp
Severity: wishlist
Owner: Dominick Ray ray.domin...@gmail.com

* Package name: ruby-jbuilder
  Version : 0.9.0
  Upstream Author : David Heinemeier Hansson da...@loudthinking.com
* URL : http://rubygems.org/gems/jbuilder
* License : MIT
  Programming Lang: Ruby
  Description : A ruby gem to create JSON structures via a Builder-style DSL

Jbuilder gives you a simple DSL for declaring JSON structures that
beats massaging giant hash structures. This is particularly helpful
when the generation process is fraught with conditionals and loops.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694709: ITP: ruby-weblibsocket -- Universal Ruby library to handle WebSocket protocol

2012-11-29 Thread Vipin Nair
Package: wnpp
Severity: wishlist
Owner: Vipin Nair swv...@gmail.com

* Package name: ruby-weblibsocket
  Version : 0.7.1-1
  Upstream Author : Bernard Potocki bernard.poto...@imanel.org
* URL : http://github.com/imanel/libwebsocket
* License : MIT/X
  Programming Lang: Ruby
  Description : Universal Ruby library to handle WebSocket protocol


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694710: ITP: ruby-libwebsocket -- Universal Ruby library to handle WebSocket protocol

2012-11-29 Thread Vipin Nair
package: ruby-libwebsocket
Severity: wishlist
Owner: Vipin Nair swv...@gmail.com

*Package Name : ruby-libwebsocket
Version : 0.7.1-1
Upstream Author : Bernard Potocki bernard.poto...@imanel.org
*URL : http://github.com/imanel/libwebsocket
*License : MIT/X
*Description : Universal Ruby library to handle WebSocket protocol


-- 
Regards,
Vipin Nair
National Institute of Technology, Calicut
http://swvist.github.com


Bug#694711: ITP: ruby-creole -- Creole is a lightweight markup language

2012-11-29 Thread jaseem abid
package: ruby-creole
Severity: wishlist
Owner: Jaseem Abidjaseem...@gmail.com

*Package Name : ruby-creole
Version : 0.5.1
Upstream Author : Lars Christensen lar...@belunktum.dk, Daniel Mendler
m...@daniel-mendler.de

*URL : http://wikicreole.org/
*License : N/A
*Description : Creole is a lightweight markup language


Bug#694713: ITP: ruby-libwebsocket -- Universal Ruby library to handle WebSocket protocol

2012-11-29 Thread Vipin Nair
package: wnpp
Severity: wishlist
Owner: Vipin Nair swv...@gmail.com

*Package Name : libwebsocket
 Version : 0.7.1-1
 Upstream Author : Bernard Potocki bernard.poto...@imanel.org
*URL : https://github.com/imanel/libwebsocket
*License : MIT
*Description : Universal Ruby library to handle WebSocket protocol

I am packaging libwebmachine as its a build dependency of diaspora.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694712: ITP: ruby-ci-reporter -- CI::Reporter is an add-on to Test::Unit, RSpec and Cucumber that allows you to generate XML reports of your test, spec and/or feature runs

2012-11-29 Thread Addy Singh
package: wnpp
Severity: wishlist
Owner: Addy Singh addy...@gmail.com

*Package Name : ruby-ci-reporter
Version : 1.7.3
Upstream Author : Nick Sieger nicksie...@gmail.com
*URL : http://caldersphere.rubyforge.org/ci_reporter/

*License : N/A
*Description : CI::Reporter is an add-on to Test::Unit, RSpec and
Cucumber that allows you to generate XML reports of your test, spec
and/or feature runs. The resulting files can be read by a continuous
integration system that understands Ant's JUnit report XML format,
thus allowing your CI system to track test/spec successes and
failures.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694715: gdm3: Extra closing bracket in log

2012-11-29 Thread Santiago Vila
Package: gdm3
Version: 3.4.1-4
Severity: minor

I get messages like these in /var/log

Nov 28 18:34:15  gdm3][14949]: pam_unix(gdm3:session): session closed for 
user 
Nov 29 11:05:30  gdm-welcome][22332]: pam_unix(gdm-welcome:session): 
session closed for user Debian-gdm

Note the extra `]' after gdm3 or gdm-welcome.

I know this is minor but it's a little bit annoying, as it forces me
to add a new logcheck regexp to discard those messages.

Thanks.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694716: firmware-nonfree: CVE-2012-2619

2012-11-29 Thread Moritz Muehlenhoff
Package: firmware-nonfree
Severity: important
Tags: security

This seems to affect the firmware-brcm80211 package AFAICS:
http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694717: nut-server cannot start automatically on system boot

2012-11-29 Thread programmer11...@programist.ru
Package: nut-server
Version: 2.6.5-1
Severity: Serious

Hello, comrades.
The upsd daemon cannot start automatically on system boot.

Log from /var/log/boot
Tue Nov 20 13:52:47 2012: [] Starting NUT - power devices information server and drivers:  (driver(s) failed). upsd^[[?25l^[[?1c^[7^[[1G[^[[32m ok ^[[39;49m^[8^[[?25h^[[?0c.
Tue Nov 20 13:52:48 2012: [] Starting NUT - power device monitor and shutdown controller: nut-client^[[?25l^[[?1c^[7^[[1G[^[[32m ok ^[[39;49m^[8^[[?25h^[[?0c.

Log from /var/log/syslog
Nov 29 13:18:28 debian-terminal upsd[2476]: listening on 127.0.0.1 port 3493
Nov 29 13:18:28 debian-terminal upsd[2476]: Can't connect to UPS [novex] 
(blazer_usb-novex): No such file or directory
Nov 29 13:18:28 debian-terminal upsd[2477]: Startup successful
Nov 29 13:18:28 debian-terminal upsmon[2534]: Startup successful
Nov 29 13:18:28 debian-terminal upsd[2477]: User novex_mon@127.0.0.1 logged 
into UPS [novex]
Nov 29 13:18:28 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:18:28 debian-terminal upsmon[2539]: Communications with UPS 
novex@localhost:3493 lost
Nov 29 13:18:33 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:18:33 debian-terminal upsmon[2539]: UPS novex@localhost:3493 is 
unavailable
Nov 29 13:18:38 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:18:43 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:18:48 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected

Further message Driver not connected writes every 5 seconds.


If I am start daemon manually, it launches and work normally.

Log from console
$ sudo upsdrvctl start
Network UPS Tools - UPS driver controller 2.6.5
Network UPS Tools - Megatec/Q1 protocol USB driver 0.09 (2.6.5)
Supported UPS detected with megatec protocol
Vendor information read in 1 tries
No values provided for battery high/low voltages in ups.conf
Using 'guestimation' (low: 9.97, high: 12.458333)!
Battery runtime will not be calculated (runtimecal not set)
Broadcast Message from nut@debian-t
(somewhere) at 13:21 ...   
Communications with UPS novex@localhost:3493 established 
Broadcast Message from nut@debian-t
(somewhere) at 13:21 ...   
UPS novex@localhost:3493: forced shutdown in progress 

Log from /var/log/syslog
Nov 29 13:21:33 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:21:38 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:21:40 debian-terminal kernel: [  207.113477] usb 3-1: usbfs: 
USBDEVFS_CONTROL failed cmd blazer_usb rqt 128 rq 6 len 255 ret -110
Nov 29 13:21:41 debian-terminal kernel: [  208.117505] usb 3-1: usbfs: 
USBDEVFS_CONTROL failed cmd blazer_usb rqt 128 rq 6 len 255 ret -110
Nov 29 13:21:43 debian-terminal upsmon[2539]: Poll UPS [novex@localhost:3493] 
failed - Driver not connected
Nov 29 13:21:43 debian-terminal blazer_usb[3125]: Startup successful
Nov 29 13:21:45 debian-terminal upsd[2477]: Connected to UPS [novex]: 
blazer_usb-novex
Nov 29 13:21:48 debian-terminal upsmon[2539]: Communications with UPS 
novex@localhost:3493 established
Nov 29 13:21:48 debian-terminal upsmon[2539]: UPS novex@localhost:3493: forced 
shutdown in progress

This error also affected on versions 2.6.4-1 and 2.6.4-2.1.

System Information:
Debian Release: wheezy/sid
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4 amd64
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8
Shell: /bin/sh linked to /bin/dash
libc6 version 2.13-37

I am using an UPS Novex NUPS-650 that supports Megatec protocol. UPS connected 
to desktop computer with USB cable.

Configuration file /etc/nut/ups.conf
[novex]
driver = blazer_usb
protocol = megatec
port = auto
desc = Terminal UPS


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#693663: This driver is too buggy to live

2012-11-29 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

tags 693663 + confirmed
thanks

Hello Ben,

Thank you for your work to document all these issues. If there would
be an alternative, I would not hesitate to get rid of this module.
Unfortunately, there isn't.

This module was originally written for Linux 2.6.8, including (almost)
all the bugs, by the manufacturer of the hardware. I adjusted it so it
uses dkms and can compile on newer kernels. I noticed the bad coding,
but didn't start fixing all the bugs so far.

If I would give priority to this package, I would try to rewrite it so
that it conforms to v4l2. As it is now, the only reasonable (and
documented) way to use it is through a non-free library provided by
the hardware producer. Now that I think about it, this means it really
belongs in contrib.

I am using this module, and I (manually) make sure that I don't have
any races. I agree that this should be done by technical means. Also,
I think I see some of the other problems you describe (in particular
the memory leakage). I'm interested to get this fixed, but not so
interested that I've started doing it already.

Summarizing:
- - I agree that this module should not be in a stable release.
- - I think it does deserve to be in unstable, because people with this
hardware want to use it on Debian; this support is better than no support.
- - I very much invite people to help and fix the issues.
- - I'll make some changes to the description to make clear that the
module is buggy.

Thanks,
Bas

On 19-11-12 04:20, Ben Hutchings wrote:
 Package: pvcam-dkms Version: 4.1.0-2 Severity: grave
 
 There is a complete lack of locking, memory barriers or anything
 that could protect against races:
 
 - Two tasks calling device_open() on the same camera at the same
 time may race and succeed, which violates the assumption that: /*
 With the Linux driver - each camera   */ /* is totally exclusive use!
 */ - Two tasks may race in device_ioctl() on the same file. - The
 ISR is not synchronised with the tasks requesting I/O.
 
 A failed device_ioctl() may mark the camera closed, but doesn't
 prevent the same file handle from being used, so again there can be
 two file handles for the same camera.
 
 Various functions can return positive numbers (= success) for 
 errors.
 
 device_ioctl() doesn't consistently check whether copy_from_user()
 or copy_to_user() succeeded.
 
 pvcam_create_buffer() doesn't map memory correctly: virt_to_bus() 
 doesn't generally work for PCI devices, and won't translate NULL to
 0, so in case memory allocation fails it will not abort.
 
 pvcam_write_read() assumes little-endian byte order on the host.
 
 loadPCIflash() reads directly from user addresses without using 
 copy_from_user().
 
 Unimplemented functions quietly do nothing instead of returning a 
 meaningful error.
 
 In most error cases that the driver actually bothers to check for, 
 it immediately returns without clearing up resources that have been
 allocated.  This can result in a crash or resource leak.
 
 Ben.
 
 -- System Information: Debian Release: wheezy/sid APT prefers
 stable-updates APT policy: (500, 'stable-updates'), (500,
 'proposed-updates'), (500, 'unstable'), (500, 'stable'), (1,
 'experimental') Architecture: i386 (x86_64) Foreign Architectures:
 amd64
 
 Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores) Locale:
 LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) Shell: /bin/sh
 linked to /bin/dash
 
 Versions of packages pvcam-dkms depends on: ii  dkms  2.2.0.3-1.2
 
 Versions of packages pvcam-dkms recommends: pn  libpvcam  none
 
 pvcam-dkms suggests no packages.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlC3SK8ACgkQFShl+2J8z5WOsACfV2hhEWamjOPcO9+E2ssA8mDM
V2EAoJZ+1tgbVlCQI75wyZN5qfF2Fov9
=kFtF
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694695: [Pkg-utopia-maintainers] Bug#694695: network-manager-gnome: wifi selection fails silently w/o gnome-keyring

2012-11-29 Thread chrysn
On Thu, Nov 29, 2012 at 10:43:18AM +0100, Michael Biebl wrote:
  Versions of packages network-manager-gnome recommends:
  pn  libpam-keyring   none
 
 
 That's what the libpam-keyring Recommends is for which you chose to not
 install.

i've tested it again, and neither is libpam-keyring (to be precise,
libpam-gnome-keyring, which is the only package to provide
libpam-keyring) necessary nor sufficient to provide the
org.freedesktop.secrets service. itself, it recommends gnome-keyring,
which really provides the necessary services.

it can be argued whether or not a transitive recommendation is
sufficient here. personally, i'd add it to Recommends and evaluate if
libpam-keyring still adds to the package (maybe functionality was moved
between there and gnome-keyring, i'm not knowledgeable there).

best regards and thanks for your fast response
chrysn


signature.asc
Description: Digital signature


Bug#694718: libfile-rsync-perl: New upstream version (0.43) available

2012-11-29 Thread Axel Beckert
Package: libfile-rsync-perl
Version: 0.42-2
Severity: wishlist

Dear Maintainer,

there's a new upstream version available for File::Rsync, containing
some fixes:

  Tue Aug 18 10:56:10 CDT 2009 ( leakin at dfw dot nostrum dot com )

  * version 0.43: Gavin Carr ( gavin at openfusion dot com dot au )
  sent a patch to make include-from and exclude-from allow multiple
  arguments.  This oversight was a misunderstanding on my part as to
  how these actually work.  Many thanks to Gavin for correcting my
  preception in the form of a very helpful patch.

  also added support for new options in 2.6.7

  removed 1 second sleep based on Petya Kohts testing ( kohts at
  yandex-team dot ru ) as this is un-needed paranoia

  added test to check for rsync binary in configured location

It would be nice if the package could be updated to that version.

Adding http://search.cpan.org/dist/File-Rsync/ add as homepage would be
neat, too.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libfile-rsync-perl depends on:
ii  perl   5.14.2-15
ii  rsync  3.0.9-3

libfile-rsync-perl recommends no packages.

libfile-rsync-perl suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694719: chromium: After browser has run for a while, new windows open with 'Your profile could not be opened correctly.'

2012-11-29 Thread Sam Morris
Package: chromium
Version: 22.0.1229.94~r161065-3
Severity: normal

After leaving the browser open for a few days, running a new chromium
will result in the Your profile could not be opened correctly message.
I end up with two instances of chromium sharing the same profile
directory, which is probably not good for the profile. The most obvious
problem manifested by this is that if I then quit the first instance of
the browser, then when the browser is next launched, the tabs that were
running in the old instance are not restored.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (530, 'testing'), (520, 'unstable'), (510, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages chromium depends on:
ii  chromium-inspector  22.0.1229.94~r161065-3
ii  gconf-service   3.2.5-1+build1
ii  libasound2  1.0.25-4
ii  libatk1.0-0 2.4.0-2
ii  libbz2-1.0  1.0.6-4
ii  libc6   2.13-37
ii  libcairo2   1.12.2-2
ii  libcups21.5.3-2.6
ii  libdbus-1-3 1.6.8-1
ii  libevent-2.0-5  2.0.19-stable-3
ii  libexpat1   2.1.0-1
ii  libflac81.2.1-6
ii  libfontconfig1  2.9.0-7
ii  libfreetype62.4.9-1
ii  libgcc1 1:4.7.2-4
ii  libgconf-2-43.2.5-1+build1
ii  libgcrypt11 1.5.0-3
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-02.33.12+really2.32.4-3
ii  libgnome-keyring0   3.4.1-1
pn  libgtk2.0-0 none
ii  libjpeg88d-1
ii  libnspr42:4.9.2-1
ii  libnss3 2:3.13.6-1
ii  libnss3-1d  2:3.13.6-1
ii  libpango1.0-0   1.30.0-1
ii  libpng12-0  1.2.49-1
ii  libpulse0   2.0-6
ii  libspeex1   1.2~rc1-7
ii  libstdc++6  4.7.2-4
ii  libudev0175-7
ii  libvpx1 1.1.0-1
ii  libx11-62:1.5.0-1
ii  libxext62:1.3.1-2
ii  libxfixes3  1:5.0-4
ii  libxml2 2.8.0+dfsg1-6
ii  libxrender1 1:0.9.7-1
ii  libxslt1.1  1.1.26-14
ii  libxss1 1:1.2.2-1
ii  xdg-utils   1.1.0~rc1+git20111210-6

chromium recommends no packages.

Versions of packages chromium suggests:
ii  chromium-l10n  22.0.1229.94~r161065-3

-- Configuration Files:
/etc/chromium/default changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#631799: [squeeze] Kernel logs name_count maxed, losing inode data messages

2012-11-29 Thread Rik Theys

On 11/25/2012 01:12 AM, Jonathan Nieder wrote:

On some of our servers, we periodically see name_count maxed,
losing inode data messages in the kernel log.


As you mentioned, this is said to be fixed by

commit 5195d8e217a7
Author: Eric Paris epa...@redhat.com
Date:   Tue Jan 3 14:23:05 2012 -0500

audit: dynamically allocate audit_names when not enough
space is in the names array

which is part of 3.3.

Am I correct in understanding that the wheezy kernel is affected, too?
What is the impact of this bug --- does it flood logs in some
situations, for example, or does it lose important information?  Is
the fix harmless or does it have potential downsides?


On this particular server, I get 3 messages every approx. 6 minutes.

[5262360.801855] name_count maxed, losing inode data: dev=00:07, inode=8
[5262360.801861] name_count maxed, losing inode data: dev=00:07, 
inode=334434366
[5262360.803580] name_count maxed, losing inode data: dev=00:3c, 
inode=21757958


The inode=8 and inode=21757958 are always the same. The second message 
is always different.


I don't think it loses important information in my case as I don't audit 
a lot of items. My audit log is 99% LOGIN audits.


I have not yet tried to apply the fix, so I can't comment on that.

I can install the 3.2 backports kernel on this system to see if Wheezy 
is also affected, but I assume it is if the fix is in 3.3. It could be a 
while before I can confirm this as this is a production system and I did 
not plan on rebooting the system before the end of January. I'll see if 
I can squeeze in a reboot somewhere.


Regards,

Rik

--
Rik Theys
System Engineer
KU Leuven - Dept. Elektrotechniek (ESAT)
Kasteelpark Arenberg 10 bus 2440  - B-3001 Leuven-Heverlee
+32(0)16/32.11.07

Any errors in spelling, tact or fact are transmission errors


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692791: #692791 - CVE-2012-5519 - cups lpadmin-to-root privilege escalation - Proposed solutions

2012-11-29 Thread Marc Deslauriers
On 12-11-29 05:30 AM, Didier 'OdyX' Raboud wrote:
snip
 B) Disable any remote configuration by lpadmin users
 
 This has been attempted by Marc on [1]. For now, it is incomplete as it still
 allows lpadmin users to HTTP PUT updates to the configuration files.
 
 Pros: + Addresses the problem in a way less intrusive way (smaller patch)
 Cons: - Big loss of functionality through forbidding any lpadmin cups server
 configuration
snip
 
 So, for squeeze/stable and wheezy/next-stable, I'd be tempted to go the B)
 (to be fixed) way. Granted, we'll loose functionality, but it will put us on
 the safe-side, with updates that drop functionality without needing a painful
 configuration-files-edit upgrading path.
 

I don't believe B is a viable approach. The HTTP PUT interface is used
by cupsctl and possibly other local tools, and there's no easy way of
filtering what gets uploaded in the cupsd.conf file.

FYI, in Ubuntu, I plan on doing a less-elegant version of A, which would
be to get the new config file, but without automatically migrating any
settings, and without changing the original config file so the user
doesn't get any debconf prompts. Options that got moved to the new file
would print warnings in the logs for the admin to see. The only thing is
that the SystemGroup line will still be in the original config file
after the upgrade, but with the log file warning disabled for it.

Marc.





signature.asc
Description: OpenPGP digital signature


Bug#637191: debian-maintainers: Annual ping for KURASHIKI Satoru

2012-11-29 Thread KURASHIKI Satoru
hi,

This is my annual ping.

regards,
--
KURASHIKI Satoru


pgpUgvHsrLsAq.pgp
Description: PGP signature


Bug#659155: Reduce severity

2012-11-29 Thread Lisandro Damián Nicanor Pérez Meyer
Control: severity -1 normal

With the resent upload of kdeadmin 4:4.8.4-2, the UI now advices the user that 
she/he must be in the lp/lpadmin group. The bug is still there, but now the 
severity can be downgraded.

Regards, Lisandro.

-- 
$ make war
make: *** No rule to make target `war'.  Stop.  Try `love' instead
  David Gravereaux

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.


Bug#694323: Bug#694324: Bug#694323: [gsfonts] Fonts include copyrighted adobe fragment all right reserved

2012-11-29 Thread Ralf Stubner
On Tue, Nov 27, 2012 at 11:58 PM, Norbert Preining prein...@logic.at wrote:
 Wait ... I am not sure either. Maybe fontfoge *also* contains and
 adds this code ... I just found the text in the sources of lmodern.

For the record: Yes, fontforge does contain the code from Adobe.
However, it is already possible now to use different code for
OtherSubrs. That's what I have done in my FPL fonts. See
URW-OtherSubrs.ps and the ReadOtherSubrsFile statement in the pe-files
in URL:http://dante.ctan.org/tex-archive/fonts/fpl/source/. I expect
that the code will not work out of the box with current fontforge
versions, but the principles should still apply.

Hence the fontforge bug for containing the OtherSubrs code from Adobe
does in no way block the corresponding bug in various font packages,
even if they were edited with fontforge. The feature to define
OtherSubrs was introduced in 2005 (cf URL:
 http://comments.gmane.org/gmane.comp.fonts.fontforge.devel/861).

cheerio
ralf


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#671729: Lokalize uses its own broken version of msgcat

2012-11-29 Thread David Prévot
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi Pino,

Le 29/11/2012 06:16, Pino Toscano a écrit :
 Alle domenica 6 maggio 2012, David Prévot ha scritto:
 I've reported a similar bug upstream [0] some time ago, but despite
 its current status, it hasn't really been fixed or resolved.

  0: https://bugs.kde.org/show_bug.cgi?id=256035
 
 It should have been fixed in some RC of KDE 4.8, and indeed I cannot 
 reproduce your issue with the lokalize currently in testing (4.8.4).

Right, the PO file is not as broken anymore, but the no-wrap entries are
still wrapped, and the one-line around 80 characters are not handled the
same way as msgcat does, so it still “produce[s] an unnecessary and
unreadable huge diff on VCS” (aka: upstream bug [0] is still unfixed).

Regards

David

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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=NDBO
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#693653: OpenGL function fails and blocks Pmv and Autodocktools

2012-11-29 Thread Steffen Möller
Hi Andreas,

 any reason not to upload a fixed package incorporating the suggested
 patch?

Upstream did not react, yet. I was hoping for a quick adoption by upstream and 
then a patch-free upload of that package. Need to ask again.

Cheers,

Steffen


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#671729: Lokalize uses its own broken version of msgcat

2012-11-29 Thread Pino Toscano
Hi David,

Alle giovedì 29 novembre 2012, David Prévot ha scritto:
 Le 29/11/2012 06:16, Pino Toscano a écrit :
  Alle domenica 6 maggio 2012, David Prévot ha scritto:
  I've reported a similar bug upstream [0] some time ago, but
  despite its current status, it hasn't really been fixed or
  resolved.
  
 0: https://bugs.kde.org/show_bug.cgi?id=256035
  
  It should have been fixed in some RC of KDE 4.8, and indeed I
  cannot reproduce your issue with the lokalize currently in testing
  (4.8.4).
 
 Right, the PO file is not as broken anymore, but the no-wrap entries
 are still wrapped, and the one-line around 80 characters are not
 handled the same way as msgcat does, so it still “produce[s] an
 unnecessary and unreadable huge diff on VCS” (aka: upstream bug [0]
 is still unfixed).

It would seem to me this is a different problem though (i.e. not 
honours no-wrap entries vs produces broken .po files).

I see no mention of support for no-wrap in entries, so could you 
please open a new bug/wish upstream for that (since I see you have 
already an account on KDE's bugzilla)?

Thanks,
-- 
Pino Toscano


signature.asc
Description: This is a digitally signed message part.


Bug#681142: [Pkg-utopia-maintainers] Bug#681142: network-manager: remember the user's authentication, like sudo

2012-11-29 Thread Stefan Monnier
 If I right-click = Edit connections then select wireless, then
 select a network, then click edit.  I get two problems here:
 - 2 boxes pop up, one for the edits, one for authentication.
 Depending on the time of the day, either the edit or the password
 box gets to be on top, so I sometimes have to look for the password
 box underneath the other, to be able to authenticate.
 - the authentication box always pops up, even if I went through the
 exact same steps 5 seconds earlier.  sudo handles this better by
 remembering if the user authenticated recently.
 That's basically how policykit works.  There is not really anything that
 can be done in NM about that.

Of course, there is.  NM and PolicyKit teams should be willing to work
together to resolve whatever problem comes up, right?  So if you agree
it's a problem, please try and figure out with the PolicyKit guys how it
can be resolved.


Stefan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694720: linux-image-3.2.0-4-686-pae: tty buffer flush NULL pointer dereference

2012-11-29 Thread Ilya Zykov
Package: src:linux
Version: 3.2.32-1
Severity: normal
Tags: upstream

Dear Maintainer,
The root of problem is carelessly use buffer flushing, then another thread can
write to it.
Main kernel accept the other patch for resolve this and relative problem:
https://lkml.org/lkml/2012/3/14/552
My patch resolve this problem better and clear. IMHO:
https://lkml.org/lkml/2012/11/27/599

diff --git a/drivers/tty/tty_buffer.c b/drivers/tty/tty_buffer.c
index 6c9b7cd..4f02f9c 100644
--- a/drivers/tty/tty_buffer.c
+++ b/drivers/tty/tty_buffer.c
@@ -114,11 +114,14 @@ static void __tty_buffer_flush(struct tty_struct *tty)
 {
struct tty_buffer *thead;

-   while ((thead = tty-buf.head) != NULL) {
-   tty-buf.head = thead-next;
-   tty_buffer_free(tty, thead);
+   if (tty-buf.head == NULL)
+   return;
+   while ((thead = tty-buf.head-next) != NULL) {
+   tty_buffer_free(tty, tty-buf.head);
+   tty-buf.head = thead;
}
-   tty-buf.tail = NULL;
+   WARN_ON(tty-buf.head != tty-buf.tail);
+   tty-buf.head-read = tty-buf.head-commit;
 }

 /**

For reproduce you can use attachement program.
Need SMP.
-
 Not execute on important systems 
-

BUG: unable to handle kernel NULL pointer dereference at 0004
[ 1910.660041] IP: [c11d2b44] tty_insert_flip_string_fixed_flag+0x46/0x7c
[ 1910.660067] *pdpt = 2bf9f001 *pde = 
[ 1910.660070] Oops:  [#1] SMP
[ 1910.660076] Modules linked in: isofs udf crc_itu_t bnep rfcomm bluetooth
rfkill binfmt_misc nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc loop
i2c_piix4 psmouse serio_raw evdev virtio_balloon i2c_core pcspkr processor
thermal_sys button ext4 crc16 jbd2 mbcache sg sr_mod cdrom virtio_blk
virtio_net floppy ata_generic ata_piix libata scsi_mod virtio_pci virtio_ring
virtio uhci_hcd ehci_hcd usbcore usb_common [last unloaded: scsi_wait_scan]
[ 1910.660102]
[ 1910.660104] Pid: 9116, comm: a.out Not tainted 3.2.0-4-686-pae #1 Debian
3.2.32-1 Red Hat KVM
[ 1910.660108] EIP: 0060:[c11d2b44] EFLAGS: 00010206 CPU: 0
[ 1910.660110] EIP is at tty_insert_flip_string_fixed_flag+0x46/0x7c
[ 1910.660112] EAX: f747cc00 EBX:  ECX: f747 EDX: 0296
[ 1910.660114] ESI: f72be000 EDI: 045f EBP: 045f ESP: ebe99ed4
[ 1910.660116]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[ 1910.660118] Process a.out (pid: 9116, ti=ebe98000 task=f7404940
task.ti=ebe98000)
[ 1910.660119] Stack:
[ 1910.660120]   f747cc00 0047cc00 ebf31000 f747cc00 045f 045f
c11d3696
[ 1910.660126]  045f c12ef76c ebf31000 f72be000 c11cf4fa c14002f0 f7404940
ebf49240
[ 1910.660130]  f72be000 ebf3139c ebf310e4  f7404940 c1031f01 ebf310e8
ebf310e8
[ 1910.660135] Call Trace:
[ 1910.660138]  [c11d3696] ? pty_write+0x24/0x43
[ 1910.660144]  [c11cf4fa] ? n_tty_write+0x23e/0x2c5
[ 1910.660158]  [c1031f01] ? try_to_wake_up+0x155/0x155
[ 1910.660161]  [c11cceb6] ? tty_write+0x161/0x1d3
[ 1910.660163]  [c11cf2bc] ? process_echoes+0x23b/0x23b
[ 1910.660166]  [c11ccd55] ? tty_write_lock+0x39/0x39
[ 1910.660178]  [c10cc493] ? vfs_write+0x83/0xd4
[ 1910.660181]  [c10cc653] ? sys_write+0x3d/0x61
[ 1910.660190]  [c12c16ac] ? syscall_call+0x7/0xb
[ 1910.660195]  [c12c] ? __schedule+0x4b/0x55b
[ 1910.660197] Code: 20 b8 00 07 00 00 2b 14 24 81 fa 00 07 00 00 0f 47 d0 8b
44 24 04 e8 d1 fd ff ff 89 c5 8b 44 24 04 85 ed 8b 98 d4 00 00 00 74 2b 8b 43
04 89 e9 03 43 0c 89 c7 f3 a4 89 e9 8b 53 08 03 53 0c 8a
[ 1910.660222] EIP: [c11d2b44] tty_insert_flip_string_fixed_flag+0x46/0x7c
SS:ESP 0068:ebe99ed4
[ 1910.660226] CR2: 0004


crash bt
PID: 9116   TASK: f7404940  CPU: 0   COMMAND: a.out
 #0 [ebe99d88] crash_kexec at c106924b
 #1 [ebe99dd8] oops_end at c12c285a
 #2 [ebe99de8] no_context at c12bc67f
 #3 [ebe99e10] bad_area at c12bc7d4
 #4 [ebe99e24] do_page_fault at c12c42b6
 #5 [ebe99e94] error_code (via page_fault) at c12c229d
EAX: f747cc00  EBX:   ECX: f747  EDX: 0296  EBP: 045f
DS:  007b  ESI: f72be000  ES:  007b  EDI: 045f  GS:  00e0
CS:  0060  EIP: c11d2b44  ERR:   EFLAGS: 00010206
 #6 [ebe99ec8] tty_insert_flip_string_fixed_flag at c11d2b44
 #7 [ebe99ef0] pty_write at c11d3691
 #8 [ebe99f04] n_tty_write at c11cf4f7
 #9 [ebe99f48] tty_write at c11cceb2
#10 [ebe99f7c] vfs_write at c10cc491
#11 [ebe99f94] sys_write at c10cc64e
#12 [ebe99fb0] system_call at c12c16a5
EAX: 0004  EBX: 0003  ECX: bfdcbfd1  EDX: 045f
DS:  007b  ESI:   ES:  007b  EDI: bfdcc430
SS:  007b  ESP: bfdcbfb4  EBP: bfdcc448  GS:  0033
CS:  0073  EIP: b7780416  ERR: 0004  EFLAGS: 0246



-- Package-specific info:
** Version:
Linux version 3.2.0-4-686-pae 

Bug#683847: unblock: sgml-base/1.26+nmu4

2012-11-29 Thread Helmut Grohne
Thanks for pinging the issue.

On Tue, Nov 27, 2012 at 09:20:38PM -0500, Samuel Bronson wrote:
 Anyway, *someone* should probably do *something* here...

Just what? As far as I can see the most fundamental question has not
received a final answer:

Will wheezy ship sgml catalogs as configuration files or as conffiles?

I am explicitly deferring this question to the release managers now.
There is no obviously correct answer, but we can only solve problems
after there is an answer. If you (release team) need more insight into
the issue(s), feel free to ask me via mail or irc (helmut).

Helmut


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694721: cannot visit the Gimp website that is embedded in Gimp

2012-11-29 Thread jidanni
Package: gimp
Version: 2.8.2-2

Help  About  Visit the Gimp Website

gives The specified location is not supported !

As to what that location is... nobody knows.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694722: eMachines eM355, encrypted boots off pendrive, preseeding fails

2012-11-29 Thread Stefan Klinger
Package: installation-reports

Boot method: USB pendrive with debian-wheezy-DI-b4-amd64-netinst.iso
Image version: 
http://cdimage.debian.org/cdimage/wheezy_di_beta4/amd64/iso-cd/debian-wheezy-DI-b4-amd64
Date: Thu 2012-Nov-29 14:53:32 CET

Machine: eMachines eM355
Processor: Intel Atom N570 CPU @ 1.66GHz
Memory: 1G

Partitions:
Filesystem Type 1K-blocksUsed Available Use% Mounted on
rootfs rootfs15622144 1450684  12193636  11% /
udev   devtmpfs 10240   0 10240   0% /dev
tmpfs  tmpfs   101600 340101260   1% /run
/dev/mapper/sda1_crypt btrfs 15622144 1450684  12193636  11% /
tmpfs  tmpfs 5120   0  5120   0% /run/lock
tmpfs  tmpfs   203180   0203180   0% /run/shm
/dev/mapper/sda2_crypt btrfs228571136 152 226445248   1% /usr/local

Output of lspci -knn (or lspci -nn):
00:00.0 Host bridge [0600]: Intel Corporation Atom Processor 
D4xx/D5xx/N4xx/N5xx DMI Bridge [8086:a010] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: agpgart-intel
00:02.0 VGA compatible controller [0300]: Intel Corporation Atom Processor 
D4xx/D5xx/N4xx/N5xx Integrated Graphics Controller [8086:a011] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: i915
00:02.1 Display controller [0380]: Intel Corporation Atom Processor 
D4xx/D5xx/N4xx/N5xx Integrated Graphics Controller [8086:a012] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
00:1b.0 Audio device [0403]: Intel Corporation N10/ICH 7 Family High Definition 
Audio Controller [8086:27d8] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: snd_hda_intel
00:1c.0 PCI bridge [0604]: Intel Corporation N10/ICH 7 Family PCI Express Port 
1 [8086:27d0] (rev 02)
Kernel driver in use: pcieport
00:1c.1 PCI bridge [0604]: Intel Corporation N10/ICH 7 Family PCI Express Port 
2 [8086:27d2] (rev 02)
Kernel driver in use: pcieport
00:1d.0 USB controller [0c03]: Intel Corporation N10/ICH 7 Family USB UHCI 
Controller #1 [8086:27c8] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: uhci_hcd
00:1d.1 USB controller [0c03]: Intel Corporation N10/ICH 7 Family USB UHCI 
Controller #2 [8086:27c9] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: uhci_hcd
00:1d.2 USB controller [0c03]: Intel Corporation N10/ICH 7 Family USB UHCI 
Controller #3 [8086:27ca] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: uhci_hcd
00:1d.3 USB controller [0c03]: Intel Corporation N10/ICH 7 Family USB UHCI 
Controller #4 [8086:27cb] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: uhci_hcd
00:1d.7 USB controller [0c03]: Intel Corporation N10/ICH 7 Family USB2 EHCI 
Controller [8086:27cc] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: ehci_hcd
00:1e.0 PCI bridge [0604]: Intel Corporation 82801 Mobile PCI Bridge 
[8086:2448] (rev e2)
00:1f.0 ISA bridge [0601]: Intel Corporation NM10 Family LPC Controller 
[8086:27bc] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
00:1f.2 SATA controller [0106]: Intel Corporation N10/ICH7 Family SATA 
Controller [AHCI mode] [8086:27c1] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: ahci
00:1f.3 SMBus [0c05]: Intel Corporation N10/ICH 7 Family SMBus Controller 
[8086:27da] (rev 02)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: i801_smbus
01:00.0 Ethernet controller [0200]: Atheros Communications Inc. AR8152 v2.0 
Fast Ethernet [1969:2062] (rev c1)
Subsystem: Acer Incorporated [ALI] Device [1025:0349]
Kernel driver in use: atl1c
02:00.0 Network controller [0280]: Atheros Communications Inc. AR9285 Wireless 
Network Adapter (PCI-Express) [168c:002b] (rev 01)
Subsystem: Lite-On Communications Inc Device [11ad:6631]
Kernel driver in use: ath9k


Comments:

I intend to have a completely encrypted harddisk and boot off a separate
pendrive.  apt-cacher on the local network is used to limit network
load, and I wanted (but failed) to use preseeding.

$ curl -OL 
'http://ftp.nl.debian.org/debian/dists/testing/main/installer-amd64/current/images/hd-media/boot.img.gz'
$ curl -OL 
'http://cdimage.debian.org/cdimage/wheezy_di_beta4/amd64/iso-cd/debian-wheezy-DI-b4-amd64-netinst.iso'

Again, I'm having trouble verifying authenticity of these files.  There
is no such thing as a signature file for `boot.img.gz`.  But even for
the second file, verification does not complete:

$ curl -OL 

Bug#660963: Porting qt4-x11 to Debian/m68k

2012-11-29 Thread Thorsten Glaser
tags 660963 + patch confirmed
thanks

Hi,

I’ve confirmed that the patch from the attached debdiff works.

bye,
//mirabilos
-- 
Darwinism never[…]applied to wizardkind. There's a more than fair amount of[…]
stupidity in its gene-pool[…]never eradicated[…]magic evens the odds that way.
It's[…]harder to die for us than[…]muggles[…]wonder if, as technology[…]better
[…]same will[…]happen there too. Dursleys' continued existence indicates so.--- qt4-x11-4.8.2+dfsg/debian/changelog 2012-11-24 02:10:05.0 +0100
+++ qt4-x11-4.8.2+dfsg/debian/changelog 2012-11-25 16:34:22.0 +0100
@@ -1,3 +1,9 @@
+qt4-x11 (4:4.8.2+dfsg-3+m68k.2) unreleased; urgency=low
+
+  * Add atomics glue for m68k, reusing avr32 support (Closes: #660963).
+
+ -- Thorsten Glaser t...@mirbsd.de  Sun, 25 Nov 2012 16:33:39 +0100
+
 qt4-x11 (4:4.8.2+dfsg-3) unstable; urgency=medium
 
   * Apply disable-SSL-compression-by-default.patch. Disables SSL compression
--- qt4-x11-4.8.2+dfsg/debian/patches/m68k.diff 1970-01-01 01:00:00.0 
+0100
+++ qt4-x11-4.8.2+dfsg/debian/patches/m68k.diff 2012-11-25 16:33:20.0 
+0100
@@ -0,0 +1,22 @@
+Description: Use GCC atomic builtins on m68k, like avr32 does
+Author: Thorsten Glaser t...@debian.org
+Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=660963
+
+--- /dev/null
 b/src/corelib/arch/m68k/arch.pri
+@@ -0,0 +1,3 @@
++#
++# Motorola 68000 and ColdFire (m68k) architecture
++#
+--- a/src/corelib/arch/qatomic_arch.h
 b/src/corelib/arch/qatomic_arch.h
+@@ -66,6 +66,9 @@ QT_BEGIN_HEADER
+ #  include QtCore/qatomic_i386.h
+ #elif defined(QT_ARCH_IA64)
+ #  include QtCore/qatomic_ia64.h
++#elif defined(QT_ARCH_M68K)
++/* this works (on Linux) because qatomic_avr32.h uses only GCC builtins */
++#  include QtCore/qatomic_avr32.h
+ #elif defined(QT_ARCH_MACOSX)
+ #  include QtCore/qatomic_macosx.h
+ #elif defined(QT_ARCH_MIPS)
--- qt4-x11-4.8.2+dfsg/debian/patches/series2012-11-23 23:01:43.0 
+0100
+++ qt4-x11-4.8.2+dfsg/debian/patches/series2012-11-25 16:31:53.0 
+0100
@@ -50,3 +50,6 @@
 no_libicu_message.diff
 QTBUG-25324_assistant_segfault_on_start_with_gcc_4.7.patch
 fix_use_after_free_qlocale_unix.patch
+
+# debian-ports patches
+m68k.diff


Bug#684666: R: Re: Bug#684666: R: Bug#684666: R: Bug#684666: AMI BIOS detected: BIOS may corrupt low RAM, working around it.

2012-11-29 Thread asronche...@libero.it
Hi,




Messaggio originale
Da: b...@decadent.org.uk
Data: 10-nov-2012 19.23
A: asronche...@libero.itasronche...@libero.it
Ogg: Re: Bug#684666: R: Bug#684666: R: Bug#684666: AMI BIOS detected: BIOS 
may corrupt low RAM, working around it.

On Fri, 2012-11-09 at 16:40 +0100, asronche...@libero.it wrote:
 Now i'm testing that SODIMM + one 2gB SODIMM from the 4gB set.
 This way the ram will amount to ~ 6gB , so i'll be able to understand if my 
pc 
 has some problems when the ram is  4gB.

Yes, that's a good experiment.


That experiment went well.
After that, i tried another experiment:

I mounted the problematic 4gB SODIMM into a notebook of a friend and he 
borrowed me one of his SODIMM (4gB) and the two laptops worked well.

In this case my laptop was using 2 SODIMM: 
SODIMM A) 4gB (it's the good one of the 8gB set)
SODIMM B) 4gB (it comes from my friend notebook)

so my friend notebook used this set:
SODIMM A) 2gB (it was already there in his notebook)
SODIMM B) 4gB (this is the one that created problems in my notebook)

my friend uses windows 7 and i use debian wheezy.
No problem arised . The two notebook worked good for more than 5 days without 
problems. After the 5 days i stopped the experiment and 
i gave back that SODIMM to my friend.


Conclusions:
1)The problematic SODIMM could be defective in a way that create problems when 
plugged in my notebook. (problem with its pins, maybe)

2)That SODIMM worked well in another notebook and passed long memtesting on my 
notebook. Why doesnt it work on my notebook? 
Why does it create memory corruption problems? This remains a mistery.

3)My notebook has no problem handling RAM amount 4gB, since it was able to 
survive a 5 days uptime with 8gB RAM mounted.


Problem is partially solved, since i can at least mount 6gB RAM on my notebook 
(4gB SODIMM + the old 2gB one )

Ben, thanks for your help but now i'm pretty sure that this is simply an 
hardware problem (since , as i could see , my debian wheezy 
installation had no problems to handle 8gB RAM)




 P.s.: someone is spamming on bugs.debian.org spoofing my email address:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683177
 i 've signaled the spam using the signal spam link. I hope this doesnt 
get 
 my email backlisted.

No, spam reporting should just result in that single message being
hidden.

Ben.


it's happend again, i've just seen that another spam email has been sent via 
my email account on 22 november.
I think that's because i usually use Tor to access the webmail. Maybe someone 
owning an exit node sniffed my traffic.
Some spam was sent to some subscription e-mail addresses, the ones with an 
hash in the address. I checked in my webmail 
and i've seen that they're the same mail addresses that were used by bugs.
debian.org to receive my subscription-confirmation.
That 'hash mail address' is the kind of thing someone can only know by using 
my webmail (aka accessing the list of addressess i've communicated with)


Ciao,
Asdrubale


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#588839: Include pv-grub to securely boot guest kernels

2012-11-29 Thread Sylvain Munaut
How exactly would the existing packages be re-used ?

The resulting binary of PV Grub will not be run on the Dom0, it is
cross compiled to run as a stub domain under the hypervisor directly
and it will not have access to the dom0 at that point so I don't see
how you'd re-use the packages installed on the dom0.

Cheers,

Sylvain


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#689291: confirmed

2012-11-29 Thread Holger Levsen
severity 689291 important
tags 689291 + patch
# not adding 100 lines of noise to the logfiles every 5min is important,
# so one can better read the logs for debugging
thanks

commit 789c59e3a27f5d38cabd02c8f57fec605e6146a8
Author: Steve Schnepp steve.schn...@pwkf.org
Date:   Thu Sep 6 13:46:17 2012 +0200

master: fix too many warnings in munin-graph.log

When graph_strategy was missing, a warning was emitted since the value is
undef.

Closes: #1251

diff --git a/master/lib/Munin/Master/HTMLConfig.pm 
b/master/lib/Munin/Master/HTMLConfig.pm
index dfa8b70..bbccffa 100644
--- a/master/lib/Munin/Master/HTMLConfig.pm
+++ b/master/lib/Munin/Master/HTMLConfig.pm
@@ -473,7 +473,7 @@ sub generate_service_templates {
}
 }
 
-if ($config-{'graph_strategy'} eq cgi) {
+if (munin_get($config, graph_strategy, cron) eq cgi) {
map { $srv{$_} = $config-{'cgiurl_graph'} . / . $imgs{$_} } keys 
%imgs;
 } else {
map { $srv{$_} = $root_path . / . $imgs{$_} } keys %imgs;
@@ -500,7 +500,7 @@ sub generate_service_templates {
for my $scale (@times) {
 # Don't try to find the size if cgi is enabled, 
 # otherwise old data might pollute  
-next if ($config-{'graph_strategy'} eq cgi);
+next if (munin_get($config, graph_strategy, cron) eq cgi);
 if (my ($w, $h)
 = get_png_size(munin_get_picture_filename($service, $scale))) {
 $srv{img . $scale . width}  = $w;
@@ -512,7 +512,7 @@ sub generate_service_templates {
 $srv{imgweeksum} = $srv{node}-week-sum.png;
 $srv{imgyearsum} = $srv{node}-year-sum.png;
 for my $scale ([week, year]) {
-next if ($config-{'graph_strategy'} eq cgi);
+next if (munin_get($config, graph_strategy, cron) eq cgi);
 if (my ($w, $h)
 = get_png_size(munin_get_picture_filename($service, $scale, 
1)))
 {


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694723: live-build: bootparameters can't accept | chars

2012-11-29 Thread Thanatermesis
Package: live-build
Version: 3.0~a67-1
Severity: normal

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

In the boot parameter arguments we can include multiple hooks to run
using the | character as seen in the file 9990-hooks in live-config
package, but when this option is passed from --bootappend-live in
live-build, the build fails in the binary-grub* steps because there's a
sed command using something like:

sed s|foo|bar|

error message in live-build building the iso is:

sed: -e expresión #1, carácter 195: opción desconocida para `s'




- -- Package-specific info:

- -- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages live-build depends on:
ii  debootstrap  1.0.42

Versions of packages live-build recommends:
ii  cpio2.11-8
ii  gnu-fdisk   1.2.4-3.1
ii  live-boot-doc   3.0~b7-1
ii  live-config-doc 3.0.12-1
ii  live-manual-html [live-manual]  1:3.0~a13-1

Versions of packages live-build suggests:
ii  dosfstools   3.0.13-1
ii  fakeroot 1.18.4-2
ii  genisoimage  9:1.1.11-2
ii  git  1:1.7.10.4-1+wheezy1
pn  loadlin  none
ii  memtest86+   4.20-1.1
ii  mtools   4.0.17-1
ii  parted   2.3-11
ii  squashfs-tools   1:4.2-5
ii  sudo 1.8.5p2-1
pn  syslinux | grub  none
ii  uuid-runtime 2.20.1-5.2
pn  win32-loader none

- -- no debconf information


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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=3/AK
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#693663: This driver is too buggy to live

2012-11-29 Thread Ben Hutchings
On Thu, 2012-11-29 at 12:36 +0100, Bas Wijnen wrote:
 tags 693663 + confirmed
 thanks
 
 Hello Ben,
 
 Thank you for your work to document all these issues. If there would
 be an alternative, I would not hesitate to get rid of this module.
 Unfortunately, there isn't.

Thanks for accepting this despite my provocative summary.

 This module was originally written for Linux 2.6.8, including (almost)
 all the bugs, by the manufacturer of the hardware. I adjusted it so it
 uses dkms and can compile on newer kernels. I noticed the bad coding,
 but didn't start fixing all the bugs so far.

 If I would give priority to this package, I would try to rewrite it so
 that it conforms to v4l2.

If you're not already aware of it then see the series beginning at
http://lwn.net/Articles/203924/.  Of course the kernel internal API
for V4L2 has changed since then; I'm not sure how much.

 As it is now, the only reasonable (and
 documented) way to use it is through a non-free library provided by
 the hardware producer. Now that I think about it, this means it really
 belongs in contrib.

I think you're right.

 I am using this module, and I (manually) make sure that I don't have
 any races. I agree that this should be done by technical means. Also,
 I think I see some of the other problems you describe (in particular
 the memory leakage). I'm interested to get this fixed, but not so
 interested that I've started doing it already.
 
 Summarizing:
 - I agree that this module should not be in a stable release.
 - I think it does deserve to be in unstable, because people with this
 hardware want to use it on Debian; this support is better than no support.
 - I very much invite people to help and fix the issues.

This would be difficult for someone who doesn't have the hardware and
software.

 - I'll make some changes to the description to make clear that the
 module is buggy.
[...]

Thanks.

Ben.

-- 
Ben Hutchings
Never attribute to conspiracy what can adequately be explained by stupidity.


signature.asc
Description: This is a digitally signed message part


Bug#537051: Add no-await trigger support and Breaks to fix ca-certificates-java breakage

2012-11-29 Thread Guillem Jover
Hi!

On Tue, 2012-11-13 at 13:18:37 -0800, Don Armstrong wrote:
 Control: tag -1 patch
 
 Please find the attached patches which fix this problem. I've tested
 them a bit, but please review them.
 
 ca-certificates (20121112+nmu1) unstable; urgency=low
 
   * Non-maintainer upload
   * Breaks ca-certificates-java (20121112+nmu1); partially fixing #537051.
   * Provide update-ca-certificates and update-ca-certificates-fresh
 triggers.
   * Call the triggers using no-await so that the configuration files from
 the newer version of ca-certificates-java are in places before the
 upgrade. Closes: #537051.


 diff --git a/debian/ca-certificates.triggers b/debian/ca-certificates.triggers
 new file mode 100644
 index 000..14dec6e
 --- /dev/null
 +++ b/debian/ca-certificates.triggers
 @@ -0,0 +1,4 @@
 +interest-noawait update-ca-certificates
 +interest-noawait update-ca-certificates-fresh

As these are not supported by squeeze's dpkg, this can cause upgrade
problems (see below).

 +interest update-ca-certificates
 +interest update-ca-certificates-fresh

(OOC why the duplicates?)

 diff --git a/debian/control b/debian/control
 index 5ef776e..8f84573 100644
 --- a/debian/control
 +++ b/debian/control
 @@ -13,9 +13,11 @@ Vcs-Browser: 
 http://git.debian.org/?p=collab-maint/ca-certificates.git
  
  Package: ca-certificates
  Architecture: all
 +Pre-Depends: dpkg (= 1.16.1)

This only guarantees that this dpkg version will be configured before
installing this package, but not that the currently running dpkg will
be that one version, so the upgrade from squeeze can still fail due to
parser errors for the unknown triggers directive.

 diff --git a/debian/postinst b/debian/postinst
 index 198c57e..9964e27 100644
 --- a/debian/postinst
 +++ b/debian/postinst
 @@ -142,12 +142,29 @@ EOF
   # fix bogus symlink to ca-certificates.crt on upgrades; see
   # Debian #643667; drop after wheezy
   if dpkg --compare-versions $2 lt-nl 20111025; then
 - update-ca-certificates --fresh
 + dpkg-trigger --no-await update-ca-certificates-fresh
   else
 - update-ca-certificates
 + dpkg-trigger --no-await update-ca-certificates
   fi
  ;;

This is of course fine, though.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692330: Vnstati. Incorrect colors in the image.

2012-11-29 Thread Miś Uszatek
Package: vnstati
Version: 1.10-1
Severity: important



The same problem occurs with me.
The error is just a kernel Linux debian 2.6.32-5-amd64 # 1 SMP Mon Sep
23 11:00:33 UTC 2012 x86_64 GNU/Linux. And the kernel Linux debian
2.6.32-5-686 # 1 SMP Mon Sep 23 9:49:36 UTC 2012 i686 GNU/Linux,
this error does not exist.

So, this problem occurs only on some versions of the kernel.

Annex image vnstati.



-- System Information:
Debian Release: 6.0.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages vnstati depends on:
ii  libc6  2.11.3-4  Embedded GNU C Library:
Shared lib ii  libgd2-xpm 2.0.36~rc1~dfsg-5 GD Graphics
Library version 2 ii  vnstat 1.10-1
console-based network traffic moni

vnstati recommends no packages.

vnstati suggests no packages.

-- no debconf information

attachment: 1.png

Bug#694724: ITP: libb64 -- base64 encoding/decoding library

2012-11-29 Thread Jakub Wilk

Package: wnpp
Severity: wishlist
Owner: Jakub Wilk jw...@debian.org

* Package name: libb64
  Version : 1.2
  Upstream Author : Chris Venter chris.ven...@gmail.com
* URL : http://libb64.sourceforge.net/
* License : none (the code has been placed in the public domain)
  Programming Lang: C, C++
  Description : base64 encoding/decoding library

libb64 is a library of ANSI C routines for fast encoding/decoding data 
into and from a base64-encoded format. C++ wrappers are included.


--
Jakub Wilk


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694725: Package in conflict with GNOME meta-packages

2012-11-29 Thread Jerome Vouillon
Package: at-spi
Version: 1.32.0-2
Severity: important
User: jerome.vouil...@pps.univ-paris-diderot.fr
Usertags: coinst-upgrades

Hi,

The package at-spi cannot be installed together with the following
GNOME meta-packages: gnome, gnome-core, gnome-desktop-environment.
Indeed, these meta-packages depend on package libatk-adaptor which
conflicts with at-spi.

$ apt-get install at-spi
[...]
The following packages will be REMOVED:
  caribou caribou-antler gnome gnome-core gnome-desktop-environment gnome-orca
  libatk-adaptor python-pyatspi2
[...]

I'm therefore wondering whether this package is still providing useful
functionalities, or whether it should be dropped.

Regards,

-- Jérôme Vouillon

PS: this issue was find using the coinst-upgrades tool
(see http://coinst.irill.org/upgrades/ for information on this tool).


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#670653: found 670653 in 1.15.3-9

2012-11-29 Thread Colin Watson
notfound 670653 1.15.3-9
close 670653
thanks

The part of this that was reverted is no longer a problem, since as of
gettext 1.18.1.1-10 (in NEW, see #683751) gettext is M-A: foreign rather
than allowed.

Thanks,

-- 
Colin Watson   [cjwat...@ubuntu.com]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694726: gpsim: build failure with multi processor option (-j)

2012-11-29 Thread Hideki Yamane
Package: gpsim
Severity: important
Version: 0.26.1-2

Hi,

 gpsim package has built failure with specify using multi processor
 by -j option. Probably need fix to its debian/rules file.


-- 
Regards,

 Hideki Yamane henrich @ debian.or.jp/org
 http://wiki.debian.org/HidekiYamane


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694727: Segmentation fault on 32-bit architectures

2012-11-29 Thread Michel Dänzer
Package: accountsservice
Version: 0.6.29-1
Severity: important
Tags: upstream

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Upstream bug report: https://bugs.freedesktop.org/show_bug.cgi?id=57343

As referenced there, this is fixed in upstream Git commit
4d5166d1833e42d81b854374aa6e73f83a67a70e.


- -- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (102, 'experimental')
Architecture: powerpc (ppc)

Kernel: Linux 3.6.2+
Locale: LANG=de_CH.UTF-8, LC_CTYPE=de_CH.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages accountsservice depends on:
ii  dbus   1.6.8-1
ii  libaccountsservice00.6.29-1
ii  libc6  2.13-37
ii  libglib2.0-0   2.34.2-1
ii  libpolkit-gobject-1-0  0.105-1

accountsservice recommends no packages.

Versions of packages accountsservice suggests:
ii  gnome-control-center  1:3.6.2-1

- -- no debconf information

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFQt3YCWoGvjmrbsgARAoL1AKCg+4FqFnWgsJvKndvBO9Di0etH9ACfe5Bl
/7EmkYsAwKFru1N3BxNheZo=
=pjHB
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694693: tiff: CVE-2012-5581

2012-11-29 Thread Jay Berkenbilt
Moritz Muehlenhoff j...@inutil.org wrote:


 Hi Jay,
 another security issue was discovered by Red Hat's Huzaifa S. Sidhpurwala:
 The Red Hat bug contains the necessary details:
 https://bugzilla.redhat.com/show_bug.cgi?id=867235

Looking at the bugzilla issue, it's not completely clear to me whether
this was fixed in 4.0.2 or 4.0.3, and the patch will be pretty different
for the 3.x versions and the 4.x versions.  I'll see what I can do about
finding time very soon to address this.  I'm a little concerned about
Tom Lane's comment about a behavioral change:

https://bugzilla.redhat.com/show_bug.cgi?id=867235#c6

I'll look at it a little before blindly taking the diff.

-- 
Jay Berkenbilt q...@debian.org


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#539201: (no subject)

2012-11-29 Thread dE .

This's still not fixed?

Is it that hard?


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692791: members of lpadmin can read every file on server via cups

2012-11-29 Thread Michael Sweet
Didier,

On 2012-11-28, at 6:58 AM, Didier 'OdyX' Raboud o...@debian.org wrote:
 ...
 DocumentRoot has to be fixed that way IMHO as the attack is immediate and I 
 think it's a suitable fix for our stable releases. For SystemGroup, I think 
 it's reasonably okay to leave that bug open for stable releases; the 
 long-term 
 fix (to push that to cups-files.conf) is okay in that regard.
 
 Any idea/patch on how you'd enforce default DocumentRoot (including making 
 sure the tests still run? )?


One simple check: if we are running as root, require the defaults.


Michael Sweet, Senior Printing System Engineer, PWG Chair



Bug#693653: OpenGL function fails and blocks Pmv and Autodocktools

2012-11-29 Thread Andreas Tille
Hi,

On Thu, Nov 29, 2012 at 01:59:12PM +0100, Steffen Möller wrote:
 Hi Andreas,
 
  any reason not to upload a fixed package incorporating the suggested
  patch?
 
 Upstream did not react, yet. I was hoping for a quick adoption by upstream 
 and then a patch-free upload of that package. Need to ask again.

We are in freeze time so no new upstream.  There is no problem in just
applying the patch and upload.

Kind regards

   Andreas.

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694707: ITP: ruby-ci-reporter -- CI::Reporter is an add-on to Test::Unit, RSpec and Cucumber that allows you to generate XML reports of your test, spec and/or feature runs

2012-11-29 Thread Gergely Nagy
Control: reassign -1 wnpp

Addy Singh addy...@gmail.com writes:

 package: ruby-ci-reporter

When filing ITP bugs, please follow the recommendation[1], and file it
against the wnpp pseudo-package. Doing otherwise will not make the ITP
visible, it will not reach the appropriate lists, either.

I have reassigned the report now, but please be more careful in the
future (or use reportbug, which has explicit support for filing ITPs).

 [1]: http://www.debian.org/devel/wnpp/#l2

-- 
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694537: Pending fixes for bugs in the libio-prompt-perl package

2012-11-29 Thread pkg-perl-maintainers
tag 694537 + pending
thanks

Some bugs in the libio-prompt-perl package are closed in revision
bd11290372f822607b8beb00d7c55f1b2f3a43bb in branch '  wheezy' by
Salvatore Bonaccorso

The full diff can be seen at
http://anonscm.debian.org/gitweb/?p=pkg-perl/packages/libio-prompt-perl.git;a=commitdiff;h=bd11290

Commit message:

Add 694537-use-Scalar-Util-openhandle.patch patch

IO::Prompt doesn't work on perl (= 5.14) if prompt() is called in
non-main package with 'Can't call method opened without a package
or object reference at /usr/share/perl5/IO/Prompt.pm line 188.'.

Thanks: Michael Howe michael.h...@it.ox.ac.uk
Closes: #694537


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694711: ITP: ruby-creole -- Creole is a lightweight markup language

2012-11-29 Thread Gergely Nagy
Control: reassign -1 wnpp

jaseem abid jaseema...@gmail.com writes:

 package: ruby-creole

When filing ITP bugs, please follow the recommendation[1], and file it
against the wnpp pseudo-package. Doing otherwise will not make the ITP
visible, it will not reach the appropriate lists, either.

I have reassigned the report now, but please be more careful in the
future (or use reportbug, which has explicit support for filing ITPs).

 [1]: http://www.debian.org/devel/wnpp/#l2

-- 
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694710: ITP: ruby-libwebsocket -- Universal Ruby library to handle WebSocket protocol

2012-11-29 Thread Gergely Nagy
Control: reassign -1 wnpp

Vipin Nair swv...@gmail.com writes:

 package: ruby-libwebsocket

When filing ITP bugs, please follow the recommendation[1], and file it
against the wnpp pseudo-package. Doing otherwise will not make the ITP
visible, it will not reach the appropriate lists, either.

I have reassigned the report now, but please be more careful in the
future (or use reportbug, which has explicit support for filing ITPs).

 [1]: http://www.debian.org/devel/wnpp/#l2

-- 
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694725: Package in conflict with GNOME meta-packages

2012-11-29 Thread Josselin Mouette
Le jeudi 29 novembre 2012 à 15:43 +0100, Jerome Vouillon a écrit : 
 The package at-spi cannot be installed together with the following
 GNOME meta-packages: gnome, gnome-core, gnome-desktop-environment.
 Indeed, these meta-packages depend on package libatk-adaptor which
 conflicts with at-spi.

 I'm therefore wondering whether this package is still providing useful
 functionalities, or whether it should be dropped.

You are right, it should be dropped. Only the library (built by the same
source package) is still relevant.

Cheers,
-- 
 .''`.  Josselin Mouette
: :' :
`. `'
  `-


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692791: members of lpadmin can read every file on server via cups

2012-11-29 Thread Michael Sweet
Marc,

On 2012-11-28, at 9:00 AM, Marc Deslauriers marc.deslauri...@canonical.com 
wrote:
 On 12-11-27 11:38 PM, Michael Sweet wrote:
 After looking at this patch in detail, it doesn't actually prevent users in 
 the lpadmin group from modifying cupsd.conf and performing the specified 
 privilege escalation.
 
 An alternate fix for cups-1.5 and earlier that specifically addresses the 
 reported problem by requiring the log files to reside in CUPS_LOGDIR:
 
 
 Thanks for taking a look at it Michael. I now see what you meant by
 needing to disable HTTP PUT in cupsd.
 
 So, your alternate fix doesn't actually solve the problem as I can still
 do something like:
 
 PageLog /var/log/cups/../../../etc/shadow

Adding a check for ../ in the path will catch that, easy fix...

 Also, there are a lot of other directives that can pretty trivially
 escalate to root...for example, setting ConfigFilePerm to 04777...

Well, that would yield a world-writable cupsd.conf; I'll update things to mask 
out everything but read/write bits for both ConfigFilePerm and LogFilePerm.


Michael Sweet, Senior Printing System Engineer, PWG Chair


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#638353: Cannot choose login language

2012-11-29 Thread Josselin Mouette
Le mardi 27 novembre 2012 à 18:18 +0100, Jaap Winius a écrit : 
 Perhaps I missed something, but today I've been busy testing a wheezy  
 upgrade for the squeeze workstations at my site and noticed that the  
 gdm package was no longer available.

As mentioned in the squeeze release notes, gdm is only here for
convenience in squeeze. The default login manager is gdm3 (which happens
to not have the bug you mention in the squeeze version).

 It seems that we are expected to use gdm3 instead, with its new wheezy  
 artwork. But while it looks nice and I'd be happy to use it, there is  
 apparently still no option for users to select a language, which in my  
 case is critical.

The user’s language is now stored in AccountsService. It can be set
within gnome-control-center or using the DBus interface.

As already stated, this is an upstream design change in 3.4 that I
completely disagree with, and I’ll happily accept patches that add back
keyboard selection to the login screen.

Cheers,
-- 
 .''`.  Josselin Mouette
: :' :
`. `'
  `-


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#692791: members of lpadmin can read every file on server via cups

2012-11-29 Thread Marc Deslauriers
Michael,

On 12-11-29 10:12 AM, Michael Sweet wrote:
 So, your alternate fix doesn't actually solve the problem as I can still
 do something like:

 PageLog /var/log/cups/../../../etc/shadow
 
 Adding a check for ../ in the path will catch that, easy fix...
 
 Also, there are a lot of other directives that can pretty trivially
 escalate to root...for example, setting ConfigFilePerm to 04777...
 
 Well, that would yield a world-writable cupsd.conf; I'll update things to 
 mask out everything but read/write bits for both ConfigFilePerm and 
 LogFilePerm.

We'll most likely be using your approach of splitting the config files
out in our stable releases, so I don't think it's worth investing time
in trying to find an alternative fix.

Thanks!

Marc.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694550: tpu: libio-prompt-perl/0.997001-1+deb7u1

2012-11-29 Thread Salvatore Bonaccorso
Hi Niels

On Thu, Nov 29, 2012 at 10:32:20AM +0100, Niels Thykier wrote:
 Control: tags -1 confirmed
 
 On 2012-11-27 17:25, Salvatore Bonaccorso wrote:
  Package: release.debian.org
  Severity: normal
  User: release.debian@packages.debian.org
  Usertags: tpu
  
  Hi Release Team
  
 
 Hi,
 
  On IRC I asked how to handle this, and Neil McGovern stated would be
  fine to file this t-p-u upload request (could be considered serious).
  
  It's about #694537 in libio-prompt-perl
  
  I have prepared an update targeting t-p-u. Debdiff is attached.
  
 
 Looks fine, please go ahead.
 
  If required I can also drop the following two changes: 1) email change
  and 2) the addition of debian/gbp.conf for the pkg-perl git repos.
  
 
 I think we can let those in as well.

Thank you!

  Regards and thanks for your work
  Salvatore
  
  [...]
 
 Please write back when it has been uploaded.

I uploaded the version to testing-proposed-updates.

Regards,
Salvatore


signature.asc
Description: Digital signature


Bug#693511: rcconf: ssh daemon doesn't show up in rcconf.

2012-11-29 Thread Atsushi Kamoshida
Hi Tim,

Thank you for the reply.
I'll close this bug but please open new bug or re-open this bug if you
find some difference between the problem system and your new VM.
I believe the following commands help you something.

# rcconf --list | grep ssh
# ls -la /etc/rc*.d/*ssh*
# cat /var/lib/rcconf/services

Regards,
Atsushi

2012/11/20, bugrep...@quantentunnel.de bugrep...@quantentunnel.de:
 Hi Atsushi,

 well, I built a new VM with a fresh wheezy and there the problem does not
 occur. Obviously this behaviour only exists in my original installation.

 This is strange anyway. But I think you can delete my bug report. Sorry for
 the false alarm.

 Cheers
 Tim




  Original-Nachricht 
 Datum: Sun, 18 Nov 2012 22:29:39 +0900
 Von: 鴨志田睦 pka...@gmail.com
 An: bugrep...@quantentunnel.de
 CC: ka...@kamop.org
 Betreff: FW: Re: Bug#693511: rcconf: ssh daemon doesn\'t show up in
 rcconf.

 Hello Tim,

 I just replied to you about rcconf problem but your mail server didn't
 receive my email with the following error.

 bugrep...@quantentunnel.de: host mx0.gmx.net[213.165.64.100] said:
 550-5.1.1
 {mx069} bugrep...@quantentunnel.de... Sorry, your envelope sender
 has
 been denied: The recipient 550 5.1.1 does not want to receive mail
 from
 your address. ( http://portal.gmx.net/serverrules ) (in reply to RCPT
 TO
 command)

 So I forward it to you from my gmail account.
 I attached what I replied to you and it can be seen at the following url.

 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693511

 As it looks impossible for me to send email to you from my
 private/debian mail account, please see my messages via above url
 after this.

 Thanks,
 Atsushi


 --
 Hello Tim,

 I tried to reproduce it in my testing environment but I couldn't see the
 problem.

 I created VM and fresh-installed squeeze on it and then upgraded to sid.

 ii  rcconf 2.5   all
 ii  whiptail   0.52.14-11i386
 ii  openssh-client 1:6.0p1-3 i386
 ii  openssh-server 1:6.0p1-3 i386
 ii  sysv-rc2.88dsf-34all

 When I run rcconf, ssh item exists.
 I turned on and off of ssh and it works fine for me.

 # rcconf --list | grep ssh
 ssh on

 # ls -la /etc/rc*.d/*ssh*
 lrwxrwxrwx 1 root root 13 Nov 17 23:12 /etc/rc2.d/S17ssh - ../init.d/ssh
 lrwxrwxrwx 1 root root 13 Nov 17 23:12 /etc/rc3.d/S17ssh - ../init.d/ssh
 lrwxrwxrwx 1 root root 13 Nov 17 23:12 /etc/rc4.d/S17ssh - ../init.d/ssh
 lrwxrwxrwx 1 root root 13 Nov 17 23:12 /etc/rc5.d/S17ssh - ../init.d/ssh

 If possible, could you please create test environment and reproduce the
 problem?

 Thanks,
 Atsushi



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#690876: vino: Does not work, no error shown

2012-11-29 Thread Josselin Mouette
Le jeudi 18 octobre 2012 à 21:10 +0200, Eugen Dedu a écrit : 
 I start vino-preferences, I check on Allow other users to view..., I
 close the dialog box.  No error is shown, vino-server is not
 executing (ps aux|grep vino), connecting to it from other computer
 does not work.  How can I find out where the problem is?

vino-preferences should set org/gnome/Vino/enabled in DConf.
The process is then started by gnome-session which looks for this
setting because it is mentioned
in /usr/share/gnome/autostart/vino-server.desktop.

I just checked all of this works on an unstable system.

Cheers,
-- 
 .''`.  Josselin Mouette
: :' :
`. `'
  `-


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694728: RFP: media-ctl -- Media controller control application for V4L2 devices

2012-11-29 Thread Marius Kotsbak
Package: wnpp
Severity: wishlist

* Package name: media-ctl
  Version : git master
  Upstream Author : Laurent Pinchart laurent.pinch...@ideasonboard.com
* URL : http://git.ideasonboard.org/media-ctl.git
* License : LGPL
  Programming Lang: C
  Description : Media controller control application for V4L2 devices

Media-ctl is an utility and library for setup of media controller topology.

There is already some Debian packaging work done upstream:

http://git.ideasonboard.org/media-ctl.git/tree/HEAD:/debian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#690876: vino: Does not work, no error shown

2012-11-29 Thread Eugen Dedu

On 29/11/12 16:43, Josselin Mouette wrote:

Le jeudi 18 octobre 2012 à 21:10 +0200, Eugen Dedu a écrit :

I start vino-preferences, I check on Allow other users to view..., I
close the dialog box.  No error is shown, vino-server is not
executing (ps aux|grep vino), connecting to it from other computer
does not work.  How can I find out where the problem is?


vino-preferences should set org/gnome/Vino/enabled in DConf.


Looking with dconf-editor, org/gnome/Vino does not exist on my machine.


The process is then started by gnome-session which looks for this
setting because it is mentioned
in /usr/share/gnome/autostart/vino-server.desktop.


Is it started when pressing Close or when new connection arrives?


I just checked all of this works on an unstable system.


--
Eugen


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694730: RFP: libsass -- A C implementation of a Sass compiler

2012-11-29 Thread Étienne BERSAC
Package: wnpp
Severity: wishlist


* Package name: libsass
  Version : 1.0
  Upstream Author : Hampton Catlin supp...@moovweb.com
* URL : https://github.com/hcatlin/libsass
* License : BSD
  Programming Lang: C, C++
  Description : A C implementation of a Sass compiler


Actually, i wonder if we should provide libsass as a seperate package shared 
with sass-compiler, python-sass, etc. or let each bindings link statically to 
libsass.

I prefer shipping one .so and have package for sass-compiler, python-sass, and 
ruby-sass using the shared object. We could still ship libsass.a in libsass-dev 
for static linking.


FROM libsass project :

Libsass is a C/C++ port of the Sass CSS precompiler. The original version was 
written in Ruby, but this version is meant for efficiency and portability.

Sass is a CSS pre-processor language to add on exciting, new, awesome features 
to CSS. Sass was the first language of its kind and by far the most mature and 
up to date codebase.

Sass was originally created by the co-creator of this library, Hampton Catlin 
(@hcatlin). The extension and continuing evolution of the language has all been 
the result of years of work by Nathan Weizenbaum (@nex3) and Chris Eppstein 
(@chriseppstein).

For more information about Sass itself, please visit http://sass-lang.com


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



  1   2   3   >