Bug#340799: davfs behaves fishy

2005-12-04 Thread Luciano Bello
El sáb, 26-11-2005 a las 02:04 +0100, Martin Samuelsson escribió: I just tried mounting a WebDAV share, and got some unexpected behaviour. After som tracking down of the problem I learnt that it was because davfs2 can't handle IIS servers. Upstream bug #676475. Since it took me a while to

Bug#347300: ITP: prozilla -- multi-threaded download acelerator wich uses multiple

2006-01-09 Thread Luciano Bello
Package: wnpp Severity: wishlist * Package name : prozilla Version : 2.0.3 Upstream Author : Kalum Somaratna [EMAIL PROTECTED] * URL : http://prozilla.genesys.ro/ * License : GPL Description : multi-threaded download acelerator wich uses multiple connections Prozilla is a multi-threaded download

Bug#340799: the IIS new chance with davfs2

2006-01-11 Thread Luciano Bello
Hi everyone! If you are receiving this mail is because you [report|are interested| contribute] in a davfs2[1] bug[2][2'] related with the interoperation with IIS. The davfs2 new version (0.2.7-1) have following changelog: * Better interoperation with MS IIS. Would you like to test it?

Bug#335536: ITP: nepenthes -- versatile tool to collect malware by emulating widespread vulnerabilities

2005-10-24 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: nepenthes Version : 0.1.2 Upstream Author : Nepenthes Development Team [EMAIL PROTECTED] * URL : http://nepenthes.sourceforge.net/ * License : GPL Description

Bug#402617: Nepenthes new version in experimental

2006-12-12 Thread Luciano Bello
You can get the last upstream release from experimental. Cheers, luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#402617: Nepenthes new version in experimental

2006-12-12 Thread Luciano Bello
El mar, 12-12-2006 a las 16:49 +0100, Patryk Dawidziuk escribió: I'll try that. Any possible info about when it's ready to upload to sid ? We are living a peculiar moment in Debian. We call it freeze for release. In this strange period no upstream updates are not recommended in unstable. The

Bug#386305: #386305 iacd won't start if the pidfile already exists

2006-09-10 Thread Luciano Bello
tags 386305 + patch thanks Many packages solve the problem with a rm in the stop case. CaFeLUG September BTS luciano --- init.d.orig 2006-09-10 23:43:35.0 -0300 +++ init.d 2006-09-10 23:48:47.0 -0300 @@ -26,6 +26,7 @@ echo -n Stopping $DESC: $NAME start-stop-daemon --oknodo

Bug#387237: ITA: parprouted -- transparent IP (Layer 3) proxy ARP bridging tool

2006-09-12 Thread Luciano Bello
Package: wnpp Severity: normal I'm taking one of the damog's packages... Please, take a look to http://lists.debian.org/debian-devel/2006/09/msg00330.html luciano pgpLLHwtclqBh.pgp Description: PGP signature

Bug#393610: ITP: wicrawl -- a simple wi-fi (802.11x) Access Point auditor

2006-10-16 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: wicrawl Version : 0.3a Upstream Author : Midnight Research Labs [EMAIL PROTECTED] * URL : http://midnightresearch.com/projects/wicrawl/ * License : GPL Description

Bug#390822: Still willing to adopt dsniff?

2006-11-02 Thread Luciano Bello
El Jueves, 2 de Noviembre de 2006 07:51, Steve Kemp escribió: Hi, Are you still interested in adopting, with sponsorship, dsniff? If not I will make a new upload with the maintainer set to QA over the next day or two. (I don't want to have the package be in the etch release with

Bug#390822: Still willing to adopt dsniff?

2006-11-02 Thread Luciano Bello
El Jueves, 2 de Noviembre de 2006 16:16, Daniel Baumann escribió: i'm pretty sure you already have a sponsor, if not.. it would be an honor for me to do it. Hi panthera! Will be great be sponsored by you. Please, take a look to http://home.lucianobello.com.ar/dsniff/2.4b1-15/ I

Bug#389060: ITP: iperf -- tool to measure bandwidth

2006-09-23 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: iperf Version : unknown, posible release: 1st Sep Upstream Author : The Board of Trustees of the University of Illinois * URL : http://dast.nlanr.net/Projects/Iperf/ * License

Bug#389754: pebrot -- a text mode MSN messenger client

2006-09-27 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: pebrot Version : 0.8.8 Upstream Author : Angel Luis Jimenez Martinez * URL : http://sourceforge.net/projects/pebrot/ * License : GPL Description : a text mode MSN

Bug#339095: Re: Mailman DoS CVE-2005-3573, debbug #339095

2006-01-19 Thread Luciano Bello
Hi everyone! I just want to know what happened with the CVE-2005-3573[1], particularly in stable/sarge. Thanks for all your help. Luciano [1] http://bugs.debian.org/339095 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#339095: [Pkg-mailman-hackers] Bug#339095: Re: Mailman DoS CVE-2005-3573, debbug #339095

2006-01-20 Thread Luciano Bello
El vie, 20-01-2006 a las 12:30 +0100, Lionel Elie Mamane escribió: On Thu, Jan 19, 2006 at 03:33:21PM -0300, Luciano Bello wrote: I just want to know what happened with the CVE-2005-3573[1], particularly in stable/sarge. We (mailman Debian package maintainers) haven't heard back

Bug#339095: [Pkg-mailman-hackers] Bug#339095: Re: Mailman DoS CVE-2005-3573, debbug #339095

2006-01-20 Thread Luciano Bello
El vie, 20-01-2006 a las 11:43 -0300, Luciano Bello escribió: AFAIK, the bug is steel there :) s/steel/still sorry :) luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#442643: dsniff: newer BDB

2008-09-28 Thread Luciano Bello
El Sáb 27 Sep 2008, Luk Claes escribió: Can you please look into getting dsniff built with libdb-dev (bdb 4.6)? done signature.asc Description: This is a digitally signed message part.

Bug#465120: ITP: w3af -- framework to find and exploit web application vulnerabilities

2008-02-10 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: w3af Version : beta5 Upstream Author : Andres Riancho andres -dot- riancho [at] gmail +dot+ com * URL : http://w3af.sourceforge.net/ * License : GPLv2 Description

Bug#452314: RFH: imagemagick -- Image manipulation programs

2007-11-21 Thread Luciano Bello
Package: wnpp Severity: normal This is a request for assistance in maintaining the imagemagick package[1]. This is a very important package for Debian, and it's outdated with more than 100 open bugs. Most of them are probably fixed in newer versions. Imagemagick needs you for (in order

Bug#451455: nepenthes: FTBFS: Deprecated conversion from string constant to 'char*'

2007-11-15 Thread Luciano Bello
Hi daniel! Please, check the experimental version. luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#420672: Status of new ImageMagick?

2007-11-16 Thread Luciano Bello
El Jue 15 Nov 2007, Daniel Kobras escribió: Luciano was working on a new upstream version, but has been quite busy lately. Current status should be visible from CVS of pkg-gmagick on alioth. If you've got a bit of spare time to waste, you're welcome to join the team! Here is the repo.. is an

Bug#304719: Bugs#304719

2005-04-15 Thread Luciano Bello
tags 304719 pending thank... It's a really good suggestion, thank you very much for your contribution. I will add this feature in the next package release. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#307096: davfs2: parse environment for password, username and proxy

2005-05-04 Thread Luciano Bello
Sorry, but where do you put the patch? The upstream is working on it and have a solution in the CVS. I just want to offer him your solution. Thx for your contribution. -- Luciano Bello luciano at linux dot org.ar Linux Argetina signature.asc Description: Esta parte del mensaje =?ISO-8859-1

Bug#436482: firewalk

2007-08-07 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: firewalk Version : 5.0 Upstream Author : Mike D. Schiffman [EMAIL PROTECTED] * URL : http://www.packetfactory.net/firewalk/ * License : BSD Description : attempts

Bug#437708: Fwd: CVE-2007-3568: DoS vulnerability with crafted bmp

2007-08-13 Thread Luciano Bello
Just like http://www.securiteam.com/unixfocus/5WP030UM0W.html propuse, the patch is attached. luciano --- Imlib/load.c.orig 2007-08-13 23:06:20.0 -0300 +++ Imlib/load.c 2007-08-13 23:06:51.0 -0300 @@ -645,7 +645,7 @@ planes = (int)word; fread(word, 2, 1, file); bpp =

Bug#437621: CVE-2007-2030: unsecure tempfile handling

2007-08-13 Thread Luciano Bello
As I understand this, the problem exist in the mktemp() used in src/lharc.c:932 and src/lharc.c:951. The manpage mktemp(3) says: Never use mktemp(). Some implementations follow 4.3BSD and replace XX by the current process ID and a single letter, so that at most 26 different names can be

Bug#437621: CVE-2007-2030: unsecure tempfile handling

2007-08-13 Thread Luciano Bello
Sorry, the problem is that the tempfile is reused. From https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=236585 : lha doesn't open temporary files *exclusively* Ignore the prior message. luciano signature.asc Description: This is a digitally signed message part.

Bug#437704: CVE-2007-3726: crafted RAR archive may cause crash

2007-08-15 Thread Luciano Bello
tags 437704 patch stop Patch adapted attached. As Stefan said, is the same patch. http://lists.opensuse.org/opensuse-commit/2007-07/msg01030.html diff -Naur unrar-nonfree-3.7.3/rarvm.cpp unrar-nonfree-3.7.3.orig/rarvm.cpp --- unrar-nonfree-3.7.3/rarvm.cpp 2007-08-15 18:09:38.0 -0300 +++

Bug#431937: imagemagick

2007-08-16 Thread Luciano Bello
retitle 431937 import crashes on grabbing a screenshot tags 431937 +unreproducible stop Works for me with any problem. If somebody have this problem, please submmit it to [EMAIL PROTECTED] luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact

Bug#399892: nepenthes_0.2.0-1(hppa/experimental): FTBFS: tries to use static library compiled without -fPIC

2007-08-29 Thread Luciano Bello
El Mar 17 Jul 2007, Jan Wagner escribió: Hi Luciano, On Wednesday 20 June 2007 19:15, Luciano Bello wrote: I need your opinion and comments about: http://bugs.debian.org/399892 Nepenthes has a module (modulehoneytrap.so) linked with libipq (IPQ library for userspace), which

Bug#437703: CVE-2007-3726: crafted RAR archive may cause crash

2007-08-31 Thread Luciano Bello
tags 437703 patch stop The adaptation attached. luciano --- rarvm.cpp.orig 2007-09-01 01:02:26.0 -0300 +++ rarvm.cpp 2007-09-01 01:08:49.0 -0300 @@ -843,7 +843,7 @@ int DataSize=R[4]; uint FileOffset=R[6]; -if (DataSize=VM_GLOBALMEMADDR) +if

Bug#369030: why is fixed package not uploaded yet?

2007-10-04 Thread Luciano Bello
Upstrem is working in a new version. luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#404747: When using fuse file system, kernel version 7, davfs2 crashed

2006-12-28 Thread Luciano Bello
Hi vorlon, I will uploading a patched version to sid this night. From upstream Why is it critical: davfs holds unsynchronized data in memory as well as in the cache on disk. These will be lost in case of a crash. In more detail: 1) mount.davfs will crash when using fuse (but not immediately,

Bug#404747: When using fuse file system, kernel version 7, davfs2 crashed

2006-12-27 Thread Luciano Bello
Package: davfs2 Version: 1.1.2-2 Severity: serious From an upstream e-mail report --- start When using fuse file system, kernel version 7, davfs2 crashed. But this is the fuse version that will be included in the standard kernel of etch. I believe the bug is serious and it is in 1.1.3 too. But

Bug#412945: #412945: News about segv in imagemagick

2007-03-20 Thread Luciano Bello
Hi! I was working the last week in #412945 [1] with imagemagick. Most of the advances was made by adapting patches from graphicmagick[2]. I made a script[3] for check the Sami's probes of concept. I include more [4] of them from the graphicsmagick's BTS [2]. As I said, I adapt many patches

Bug#422993: davfs: fails to install: subprocess post-installation script returned error exit status 30

2007-05-13 Thread Luciano Bello
The problem appears when the 1.1.2-3 versions was configure for non-root users. The problem was the related with debconf and was hard to diagnostic. Please accept my apologies, the new version is coming. luciano pgpU2tC55mVEz.pgp Description: PGP signature

Bug#429069: helper/cdebootstrap-helper-diverts/sbin/start-stop-daemon should inform that is useless

2007-06-15 Thread Luciano Bello
Package: cdebootstrap Severity: wishlist Tags: patch Would be nice if when the user runs start-stop-daemon in a jail, the script notifies that nothing will be doing. The patch is just an example. Could be in a log or anywhere. luciano diff -Naur

Bug#431596: ITP: ziptie -- framework for Network Inventory Management

2007-07-03 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: ziptie Version : 2007.06stable Upstream Author : * URL : http://ziptie.org * License : Mozilla Public License Version 1.1 Description : framework for Network

Bug#429507: O: airsnort -- WLAN sniffer

2007-07-04 Thread Luciano Bello
hi, Is useful for Debian this package? I mean, the source are unmaitained since 2 years ago[1] and the package its really buggy[2]. There are betters options for do the same, like aircrack which are in better conditions than this one. May be a RFR should be better. Whats your

Bug#429528: shlib-with-non-pic-code mess with the soname

2007-06-18 Thread Luciano Bello
package: lintian severity: normal Hi! I'm packaging nepenthes (http://packages.debian.org/nepenthes) I have this issue with lintian: E: nepenthes: shlib-with-non-pic-code usr/lib/nepenthes/x4.so N: N: The listed shared libraries contain object code that was compiled N: without

Bug#429528: that would be me

2007-06-18 Thread Luciano Bello
El Lun 18 Jun 2007, Russ Allbery escribió: The package looks like it builds a whole bunch of modules.  Do they all produce the same error, or just this one module? With many modules (im not sure about all of them). luciano signature.asc Description: This is a digitally signed message part.

Bug#399892: nepenthes_0.2.0-1(hppa/experimental): FTBFS: tries to use static library compiled without -fPIC

2007-06-20 Thread Luciano Bello
Hi! I need your opinion and comments about: http://bugs.debian.org/399892 Nepenthes has a module (modulehoneytrap.so) linked with libipq (IPQ library for userspace), which is part of iptables-dev. Libipq looks like it only comes in a static form, and hence isn't built PIC.

Bug#430162: RFH: dsniff -- Various tools to sniff network traffic for cleartext insecurities

2007-06-22 Thread Luciano Bello
Package: wnpp Severity: normal I request assistance with maintaining the dsniff package. In this moment, upstream is preparing a new version in python[1] (the current is in C) and its look like he do not maintain this one anymore. In the other hand, the current application has important

Bug#430162: RFH: dsniff -- Various tools to sniff network traffic for cleartext

2007-06-22 Thread Luciano Bello
I was forgotten, the project is here: http://svn.debian.org/wsvn/collab-maint/deb-maint/dsniff/ signature.asc Description: This is a digitally signed message part.

Bug#430162: RFH: dsniff -- Various tools to sniff network traffic for cleartext

2007-06-28 Thread Luciano Bello
El Lun 25 Jun 2007, Raffaele Spizzuoco escribió: I'd like very much to help you with this package. How can i do it? Well, primary this bug http://bugs.debian.org/420129 needs help urgently :). You can take the sources from http://svn.debian.org/wsvn/collab-maint/deb-maint/dsniff/ . You don't

Bug#409235: davfs2: [INTL:de] German po-debconf template translation

2007-04-23 Thread Luciano Bello
Hi Matthias, Here is the de.po file for davfs2 1.2.0-1. I will release it the next weekend. Will be great if you can complete the new lines. Thanks :) luciano de.po Description: application/gettext pgpLdTLxu6ECI.pgp Description: PGP signature

Bug#414153: davfs2 : [INTL:pt] Portuguese translation for debconf messages

2007-04-23 Thread Luciano Bello
Hi debianPT, Here is the pt.po file for davfs2 1.2.0-1. I will release it the next weekend. Will be great if you can complete the new lines. Thanks :) luciano pt.po Description: application/gettext pgpaD89fIWTsq.pgp Description: PGP signature

Bug#413221: davfs2: [INTL:ja] Japanese debconf templates translation

2007-04-23 Thread Luciano Bello
Hi Kobayashi, Here is the ja.po file for davfs2 1.2.0-1. I will release it the next weekend. Will be great if you can complete the new lines. Thanks :) luciano ja.po Description: application/gettext pgprhuRTzGvDB.pgp Description: PGP signature

Bug#418898: davfs2: [INTL:nl] Dutch po-debconf translation

2007-04-23 Thread Luciano Bello
Hi Bart, Here is the nl.po file for davfs2 1.2.0-1. I will release it the next weekend. Will be great if you can complete the new lines. Thanks :) luciano nl.po Description: application/gettext pgpHKIZ989zjz.pgp Description: PGP signature

Bug#314719: Ubuntu packages

2005-08-30 Thread Luciano Bello
://ziemia.ath.cx/~at/dev/ubuntu.html Thx... I will see it. Maybe some joined effort could be worked out? No source debs published there though, as far as I can see. Feel free to tell me if I can do anything to help. Ok... thx! I will consider it. -- Luciano Bello [EMAIL PROTECTED] Linux Argentina

Bug#323420: (no subject)

2005-08-16 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: metasploit-framework Version : 2.4 Upstream Author : H D Moore [EMAIL PROTECTED] * URL : http://www.metasploit.org/projects/Framework/ * License : GPL and Artistic

Bug#323420: advanced platform for developing, testing, and using exploit code

2005-08-16 Thread Luciano Bello
retitle 323420 ITP: metasploit-framework -- advanced platform for developing, testing, and using exploit code thanks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323855: ITP: opencvs -- OpenBSD CVS implementation with special emphasis in security

2005-08-18 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: opencvs Version : unknown, posible release: 1st Sep Upstream Author : Jean-François Brousseau [EMAIL PROTECTED] * URL : http://www.opencvs.org/ * License : BSD Description

Bug#323855: ITP: opencvs -- OpenBSD CVS implementation with special emphasis in security

2005-08-19 Thread Luciano Bello
of Debian. And I will work in it, unless somebody has a *really_reasonable_objection*. Like always, sorry for my English. -- Luciano Bello [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#303533: davfs2: CODA kernel version mismatch

2005-06-21 Thread Luciano Bello
the better solution, but I don't know how difficult is implemented it. [0]Werner Baumann [EMAIL PROTECTED] [1]http://sourceforge.net/mailarchive/forum.php?thread_id=7524909forum_id=1351 -- Luciano Bello [EMAIL PROTECTED] Linux Argetina signature.asc Description: This is a digitally signed message part

Bug#311286: Playing with: davfs2: WebDAV URL's with spaces do not work bug

2005-07-08 Thread Luciano Bello
more information. Thanks for your help [1] http://bugs.debian.org/311286 -- Luciano Bello [EMAIL PROTECTED] Linux Argetina execve(/bin/mount, [mount, -t, davfs, https://lucianobello.no-ip.org/example%20with%20spaces%20dav;, -o, username=luciano,password=], [/* 13 vars */]) = 0 uname

Bug#268254: ITP: jailkit -- chroot jail utilities

2005-07-12 Thread Luciano Bello
Hi! Are you still working on http://bugs.debian.org/268254 ? For me this package is very useful, and I'm wondering, if you are not working on it anymore, I try to package it. Thanks, greeting from HEL/DebConf5 -- Luciano Bello [EMAIL PROTECTED] Linux Argentina signature.asc Description

Bug#245361: ITP: poink -- nosuid ping

2005-07-12 Thread Luciano Bello
Hi! Are you still working on http://bugs.debian.org/245361 ? For me this package is very useful, and I'm wondering, if you are not working on it anymore, I try to package it. Thanks, greeting from HEL/DebConf5 -- Luciano Bello [EMAIL PROTECTED] Linux Argentina signature.asc Description

Bug#483458: ITP: python-buzhug -- pure-Python database engine, using a Pythonic, no-SQL syntax

2008-05-28 Thread Luciano Bello
Package: wnpp Severity: wishlist X-Debbugs-CC: [EMAIL PROTECTED] * Package name: python-cluster Version : 1.1.1b3 Upstream Author : Michel Albert exhuma at users.sourceforge.net * URL : http://python-cluster.sourceforge.net/ * License : LGPL Description :

Bug#484300: davfs2: zope webdav server problems

2008-07-08 Thread Luciano Bello
Can you send the info asked in http://bugs.debian.org/484300#10 ? Have you got any problem to get it? luciano signature.asc Description: This is a digitally signed message part.

Bug#406627: fwknop in Debian

2008-05-19 Thread Luciano Bello
El Jue 15 May 2008, Paul Hedderly escribió: Any progress? Mind if I carry on and do this one? Please.. go on! If you need an sponsor, just tell me. luciano signature.asc Description: This is a digitally signed message part.

Bug#323420: metasploit licnese issues

2008-07-02 Thread Luciano Bello
retitle 323420 RFP: metasploit-framework -- advanced platform for developing, testing, and using exploit code noowner 323420 thank... El Mié 02 Jul 2008, Matt Taggart escribió: Any update on #323420, regarding metasploit licening? If it could be made at least redistributable it could go in

Bug#489027: wrong command in mail servers' reference card

2008-07-02 Thread Luciano Bello
Package: www.debian.org Severity: minor In the page http://www.debian.org/Bugs/server-refcard says: quit|stop|thank...|--... 'thank...' is not a command for [EMAIL PROTECTED] The line should be changed to quit|stop|thank|thanks|thankyou|thank you|-- luciano signature.asc Description: This is

Bug#230313: Bug #230313:

2006-04-14 Thread Luciano Bello
El sáb, 08-04-2006 a las 10:32 +0200, Martin Michlmayr escribió: * Luciano Bello [EMAIL PROTECTED] [2006-04-07 22:37]: From that site I mention in my bug report that has disappeared in the meantime... ad I don't have sources. What do you propose to do now? I think you should check

Bug#291994: Decrypt::makeFileKey2() Buffer Overflow

2005-01-24 Thread Luciano Bello
Package: kpdf Version: 3.x Severity: grave Tags: security sarge sid patch The version in woody is not affected by this problem. TITLE: KDE kpdf Decrypt::makeFileKey2() Buffer Overflow SECUNIA ADVISORY ID: SA13916 VERIFY ADVISORY: http://secunia.com/advisories/13916/ CRITICAL: Highly critical

Bug#292002: Decrypt::makeFileKey2() Buffer Overflow

2005-01-24 Thread Luciano Bello
Package: kpdf Version: 3.x Severity: grave Tags: security patch TITLE: KOffice Decrypt::makeFileKey2() Buffer Overflow SECUNIA ADVISORY ID: SA13934 VERIFY ADVISORY: http://secunia.com/advisories/13934/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: KOffice 1.x

Bug#366861: The correct name of Mexico is México, not Méjico

2006-05-11 Thread Luciano Bello
Subject: kde-i18n-es: The correct name of Mexico is México, not Méjico Package: kde-i18n-es Version: 4:3.5.1-1 Severity: normal Tags: l10n patch The name of the city, country and state is México, not Méjico. In many parts of the kde-i18n-es files you can find Méjico. I attach a patch only as a

Bug#360146: cgoban package is old

2006-03-30 Thread Luciano Bello
Package: cgoban Version: 1.9.14-8.1 Severity: wishlist The cgoban package is old. Acording with cgoban page[1] the actual version is 2.6.12. Please submit a RFA if you don't want to maintein it anymore. Thx, Luciano [1] http://kgs.kiseido.com/en_US/download.xhtml -- System Information: Debian

Bug#360146: acknowledged by developer (Re: Bug#360146: cgoban package is old)

2006-03-31 Thread Luciano Bello
Hi! AFAIK, cgoban v1 is deprecated. The natural evolution is cgoban v2. cgoban v1 did't have a release since 2003. Even if somebody package cgoban v2, there is no sense to support v1 anymore. My 2 cents... Luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Bug#230313: Bug #230313:

2006-03-31 Thread Luciano Bello
Hi, I'm intent to adopt MRTGutils, I thinks it's a useful tool. The URL http://www.poehlsen.org/mrtgutils/ don't work any more. I know that you submit this bug 2 years ago, do you know where this project is now? Thx Luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Bug#230313: Bug #230313:

2006-03-31 Thread Luciano Bello
El vie, 31-03-2006 a las 22:30 +0800, Randolph Chung escribió: The debian mrtgutils was developed by me and is Debian specific utility; it has no webpage. There is another application on the net called mrtgutils that is unrelated. I understand that mrtgutils developed by you do not have

Bug#348796: /usr/lib/mount.davfs-2.6: Could not open pid-file

2006-02-11 Thread Luciano Bello
On sáb, 2006-02-11 at 16:15 +0100, Yann Rouillard wrote: Hi, Had you some response from people familiar with Debian policy ? From the FHS 5.10 Files under this directory should be cleared (removed or truncated as appropriate) at the beginning of the boot process. Programs may have a

Bug#355896: 'man update-modules' in spanish. typo 'generando generando'

2006-03-08 Thread Luciano Bello
Package: modutils Version: 2.4.27.0-3 Severity: minor Tags: patch Found a typo in '/usr/share/man/es/man8/update-modules.8', see the attached patch. See you Luciano --- update-modules.es.8 2006-03-08 12:06:11.131126136 -0300 +++ update-modules.es.8.new 2006-03-08 12:17:02.502102696 -0300 @@

Bug#230313: Bug #230313:

2006-03-31 Thread Luciano Bello
El vie, 31-03-2006 a las 17:41 +0100, Martin Michlmayr escribió: * Luciano Bello [EMAIL PROTECTED] [2006-03-31 10:54]: I'm intent to adopt MRTGutils, I thinks it's a useful tool. The URL http://www.poehlsen.org/mrtgutils/ don't work any more. I know that you submit this bug 2 years ago, do

Bug#230313: Bug #230313:

2006-04-04 Thread Luciano Bello
El sáb, 01-04-2006 a las 09:47 +0100, Martin Michlmayr escribió: Probably not. What do you intend to do? Continue maintaining the current tools in Debian and essentially become upstream since Randolph wrote them? Yeap, this is the intention. I like the idea of implement the mrtg sources as

Bug#230313: Bug #230313:

2006-04-05 Thread Luciano Bello
El mié, 05-04-2006 a las 15:17 +0200, Martin Michlmayr escribió: Such as more and more advanced tools: 2252:[EMAIL PROTECTED]: /usr/local/bin] ls -1 mr* mrtg-apache mrtg-apm [] mrtg-smtp mrtg-smtp-latency mrtg-tcp-latency 2253:[EMAIL PROTECTED]: /usr/local/bin] Unfortuantely I

Bug#230313: Bug #230313:

2006-04-07 Thread Luciano Bello
El jue, 06-04-2006 a las 07:51 +0200, Martin Michlmayr escribió: * Luciano Bello [EMAIL PROTECTED] [2006-04-05 22:57]: From where are these binaries? i.e. http://www.google.com/search?q=%22mrtg-smtp-latency%22 Your search - mrtg-smtp-latency - did not match any documents. From that site

Bug#316872: libssh request, any sponsor for it

2006-06-20 Thread Luciano Bello
hi dudes! Some packages need libssh2[1]. We have a pending RFS[2]. Somebody know what happened? luciano [1] http://www.libssh2.org/ [2] http://bugs.debian.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#367820: the commit

2006-05-29 Thread Luciano Bello
Here is the commit notification from CVS, just in case: http://sourceforge.net/mailarchive/message.php?msg_id=16320281 luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323420: Status update?

2006-05-29 Thread Luciano Bello
El Martes, 23 de Mayo de 2006 17:37, James Westby escribió: Could you please confirm the current status of this ITP? I'm was with much work. I'm still working on it. probably will be a release candidate in the next week. BTW, what's your opinion with metasploit v3.0? luciano

Bug#369996: ITP: medusa-cracker -- speedy, massively parallel, modular, login brute-forcer for network services

2006-06-02 Thread Luciano Bello
Package: wnpp Severity: wishlist Owner: Luciano Bello [EMAIL PROTECTED] * Package name: medusa-cracker Version : 1.1 Upstream Author : JoMo-Kun [EMAIL PROTECTED] * URL : http://www.foofus.net/jmk/medusa/medusa.html * License : GPLv2 Description : speedy

Bug#346507: Still depending of libgcrypt11, libgpg-error0 or libtasn1-2?

2006-08-19 Thread Luciano Bello
Hi! The bug #346507 is about deprecated dependencies. Those dependencies are not in the control file. Is this bug still existing? Please, check it. luciano pgpYG2Ce5tbcz.pgp Description: PGP signature

Bug#323855: reopen... ITP OpenCVS

2006-08-25 Thread Luciano Bello
reopen 323855 thanks bts The OpenCVS project have no an oficial release yet. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#347300: prozilla, ITP in debian on hold

2006-08-25 Thread Luciano Bello
Hi kamul! 3 mouths pass from your last contact. El dom, 28-05-2006 a las 08:53 +0530, Grendel escribió: Expect a reply from me in about 1-2 days. I suppose that you have health problems. Hope all is well dude! Please, no matter about prozilla, if you see this mail, contact me.

Bug#379674: RFP: libssh2 -- library implementing the SSH2 protocol as defined by Internet Drafts

2006-07-24 Thread Luciano Bello
Package: wnpp Severity: wishlist Package name: libssh2 Version : 0.14 Upstream Author : Sara Golemon [EMAIL PROTECTED] URL : http://www.libssh2.org/ License : GPL Description : library implementing the SSH2 protocol as defined by Internet Drafts

Bug#323420: Metasploit packaging - license issues

2006-08-04 Thread Luciano Bello
El Jueves, 3 de Agosto de 2006 14:30, James Westby escribió: I hope you are well. Yes, I am :) So debian-legal helped point out the places where metasploit in its current state makes it undistributable, and the new license is not DFSG free. How would you like to proceed now? Do you want to

Bug#307096: partial fixed

2006-05-19 Thread Luciano Bello
tags 307096 + wontfix thanks Hi! This bug has two parts: - take proxy from environment variable 'http_proxy'. Fixed in 0.2.4 - take username and password from environment. Will not fix, because the upstream think the secrets file is the better solution. But from 0.2.4 on, credentials will no

Bug#378759: Patch for nepenthes: dpkg-buildpackage erases y.tab.c if run a second time

2006-07-20 Thread Luciano Bello
tags 378759 -patch thank you No, it's not the unique reference... # rgrep tab\.c * | grep rm missing:rm -f y.tab.c y.tab.h modules/download-creceive/Makefile.in: -rm -f *.tab.c modules/download-csend/Makefile.in: -rm -f *.tab.c modules/download-curl/Makefile.in: -rm -f *.tab.c

Bug#378759: Patch for nepenthes: dpkg-buildpackage erases y.tab.c if run a second time

2006-07-20 Thread Luciano Bello
tags 378759 +patch +pending thank you the patch from José Parrella works fine. Will be upload tomorrow. thx, luciano -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#474411: nepenthes - FTBFS: error: 'free' was not declared in this scope

2008-04-05 Thread Luciano Bello
tag 474411 +unreproducible thank... In my pbuilder I have no any problem. Can you include the bugreport footer o more information about in which conditions can I reproduce the problem? luciano signature.asc Description: This is a digitally signed message part.

Bug#474411: nepenthes - FTBFS: error: 'free' was not declared in this scope

2008-04-06 Thread Luciano Bello
tag 474411 -unreproducible thanks... The problem is the g++ version. I'm working on it. Please, next time include more details about the building conditions. luciano signature.asc Description: This is a digitally signed message part.

Bug#467209: RFP: python-buzhug -- pure-Python database engine, using a Pythonic, no-SQL syntax

2008-02-23 Thread Luciano Bello
Package: wnpp Severity: wishlist X-Debbugs-CC: [EMAIL PROTECTED] * Package name: python-buzhug Version : 1.0 Upstream Author : Pierre Quentel [EMAIL PROTECTED] * URL : http://buzhug.sourceforge.net/ * License : BSD License Description : pure-Python

Bug#467217: RFP: python-pypdf -- Pure-Python library built as a PDF toolkit

2008-02-23 Thread Luciano Bello
Package: wnpp Severity: wishlist X-Debbugs-CC: [EMAIL PROTECTED] * Package name: python-pypdf Version : 1.10 Upstream Author : Mathieu Fenniak [EMAIL PROTECTED] * URL : http://pybrary.net/pyPdf/ * License : modified BSD license Description : pure-Python

Bug#467222: RFP: python-socksipy -- Python SOCKS client module

2008-02-23 Thread Luciano Bello
Package: wnpp Severity: wishlist X-Debbugs-CC: [EMAIL PROTECTED] * Package name: python-socksipy Version : 1.10 Upstream Author : Dan Haim [EMAIL PROTECTED] * URL : http://socksipy.sourceforge.net/ * License : BSD style license Description : Python SOCKS

Bug#399892: #399892 nepenthes_0.2.0-1(hppa/experimental): FTBFS: tries to use static library compiled without -fPIC

2008-03-21 Thread Luciano Bello
Hi Laurence, I would like to fix http://bugs.debian.org/399892 soon. Frank [EMAIL PROTECTED] proposed to ask you because libipq looks like it only comes in a static form, and hence isn't built -fPIC. I contacted you few months ago without any response. I'm CCing to the BTS this

Bug#429069: #429069 helper/cdebootstrap-helper-diverts/sbin/start-stop-daemon should inform that is useless

2008-03-21 Thread Luciano Bello
Hi waldi, If you run start-stop-daemon in a pbuilder chroot, there is still no warning. Please, confirm that you fix this bug. luciano signature.asc Description: This is a digitally signed message part.

Bug#395568: packagesearch crash if ~./debtags don not exist

2006-10-27 Thread Luciano Bello
Package: packagesearch Version: 2.2 Severity: minor When a run packagesearch I have this error: [EMAIL PROTECTED]:~$ packagesearch Dynamic Library error: /usr/lib/packagesearch/libaptplugin.so: undefined symbol: _ZN9pkgPolicyD2Ev terminate called after throwing an instance of

Bug#611495: [CVE-2010-4705] [CVE-2010-4704] integer overflow in Vorbis decoder

2011-01-29 Thread Luciano Bello
Package: ffmpeg Severity: important Tags: security patch Hi, the following CVE (Common Vulnerabilities Exposures) ids were published for ffmpeg. Patches are provided in the CVE notes. CVE-2010-4704[0]: | libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and | earlier allows remote

Bug#617655: unixodbc: buffer overflow in SQLDriverConnect function

2011-03-10 Thread Luciano Bello
Package: unixodbc Version: 2.2.14p2-2 Severity: normal Tags: upstream patch security Hi, A buffer overflow in unixODBC has been reported in http://seclists.org/oss- sec/2011/q1/446 . The fix can be found here

Bug#617773: libvirt: several API calls do not honour read-only connection

2011-03-11 Thread Luciano Bello
Package: libvirt Tags: security Hi, It has been found that several libvirt API calls (virNodeDeviceDettach, virNodeDeviceReset, virDomainRevertToSnapshot, virDomainSnapshotDelete) did not honour read-only connection. Remote attacker could use this flaw to crash the host server (DoS). Please use

  1   2   3   4   >