from:"Alexander Golovko"

tags 690550 + pending
--

Hi,

Thank you for your help!


В Mon, 15 Oct 2012 21:54:43 +0900
victory victory@gmail.com пишет:

 Package: bacula
 Version: 5.2.6_dfsg-4
 Severity: wishlist
 Tags: patch l10n
 
 Dear bacula package maintainer,
 
  Here's Japanese po-debconf template translation (ja.po) file that 
  reviewed by several Japanese Debian developers and users.
 
  Could you apply it, please?

Translation was commited into git master branch, next uploaded version
will include it. 

The only change from your file is info about license (change default
PACKAGE to real package name - bacula).



-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#690595: [pkg-bacula-devel] Bug#690595: bacula: [INTL:gl] Galician debconf templates translation update

tags 690595 + pending
--

Hi!

Thank you for your help!


В Tue, 16 Oct 2012 00:36:59 +0200
Jorge Barreiro yortx.ba...@gmail.com пишет:

 Package: bacula
 Version: 5.2.6+dfsg-4
 Severity: wishlist
 Tags: l10n patch
 
 Galician debconf templates translation is attached.

Translation was commited into git master branch, next uploaded version
will include it.


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#690732: [pkg-bacula-devel] Bug#690732: [INTL:pl] Polish debconf translation

tags 690732 + pending
--

Hi,

Thank you for your help!

В Tue, 16 Oct 2012 23:40:42 +0200
Michał Kułach michalkul...@gmail.com пишет:

 Package: bacula
 Severity: wishlist
 Tags: l10n patch
 
 Hi!
 
 Please add the attached (last minute) Polish debconf translation.
 
 Thanks in advance,

Translation was commited into git master branch, next uploaded version
will include it.



-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#690745: [pkg-bacula-devel] Bug#690745: bacula: [INTL:it] Italian debconf translation

tags 690745 + pending
--

Hi,

Thank you for your help!

В Wed, 17 Oct 2012 08:30:44 +0200
Beatrice Torracca beatri...@libero.it пишет:

 Package: bacula
 Severity: wishlist
 Tags: l10n patch
 
 Hi.
 Please find attached the Italian translation of bacula debconf
 messages proofread by the Italian localization team.
 
 Please include it in your next upload.

Translation was commited into git master branch, next uploaded version
will include it.
The only change from your file is license info - default PACKAGE
changed to real package name bacula


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#687923: [pkg-bacula-devel] Bug#687923: bacula: needs update for wheezy

2012-10-15 Thread Alexander Golovko

В Sun, 14 Oct 2012 15:57:40 +0200
Thijs Kinkhorst th...@debian.org пишет:

 Hi,
 
 CVE-2012-4430 was fixed in unstable and stable, thanks for that, but
 wheezy is still lacking the fix. This is because the unstable version
 cannot migrate due to it containing many auxilliary fixes. Could you
 coordinate with the release team to make an upload to
 testing-proposed-updates with the security fix?

Thank you for reminder, i'm already in work on preparing upload
to wheezy (see #689003)

-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689003: unblock: bacula/5.2.6+dfsg-5

В Mon, 08 Oct 2012 14:26:08 +0200
Mehdi Dogguy me...@dogguy.org пишет:

On 28/09/2012 07:57, Alexander Golovko wrote:
Package: release.debian.org Severity: normal User:
release.debian@packages.debian.org Usertags: unblock

Hi!

Please unblock bacula-* packages, it fixes multiple bugs, include
CVE-2012-4430, crashes and debian policy violations:

#687923 - security issue CVE-2012-4430 #688732 - bacula-fd save
only first xattr on file #682733 - unowned files after purge
#680051 - switch between bacula-director-dbtype #679958 -
incorrect systemd service file Fix unsafe bacula-director
passwords. Fix bacula-fd crash on saving xattr on btrfs.

Ok, I don't feel comfortable with all these packaging changes. I don't
think I'm going to unblock this package. Could you prepare an upload
to t-p-u please? #687923, #682733, #679958, Fix unsafe
bacula-director passwords look okay. For the others, please show
minimal separate patches if you want to include them.

I can try to remove some patches, but i'm afraid, that completely
rework changes will be very hard. I list all changes (except #687923,
#682733, #679958, Fix unsafe bacula-director passwords) with links to
commits and additional description. Please say, which of changes can be
included and which not. Sorry for this abuse.

1. Build packages for all database types in the same time, not a
separate process for sqlite3, mysql and pgsql.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=1ca440fc3758a28fdcd17c05aa24f724934dbc5f

This change affect only package building process. It was thoroughly
checked, that binary packages changed not more, than on rebuild from
the same sources.
This change make build process much more clear and less differ from
standard debhelper. I'm afraid, that unaccepting this change will lead
to requirement of very hard reworking some other changes.
Another argument for accept this change is that this change will be one
of first candidate for post-wheezy and we will need support two
different solutions - for stable wheezy and current.

2. Save all file xattrs, not only first (Closes: #688732),
Fix bacula-fd crash on saving xattr on btrfs.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=455622199fb46805cd11f69630279af5987c0bb2
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=d7bb353b616c6221684ffc81cbfe2c885a1dab81

It is a regression since squeeze. Squeeze shipped with previous major
version of bacula. There are a big commits, but however this is
only adding upstream patch. I'm think, there is important bugfix.

3. fix daemons user/group on systems with systemd (Closes: #679958).
delegate daemons uid/gid changing to start-stop-daemon or systemd,
thanks to Matija Nalis (Closes: #556207).

This changes are related and intersected. First commit reverted by
last.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=d077cd3c71734828b635f8605c8411f6cd86b6f6
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=cf9eb640182f4adfd83d05954dc35a20b60170c1
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=694b788e0f82a734ca98bb0930a97432240c7fe8

Upstream already much time (at least since 2010, Oct) use
start-stop-daemon for change daemons uid/gid in their variant of init
scripts. Our patch for uid/gid changing by systemd was already accepted
into upstream.

The big problem, that without this change user can't simply get
backtraces on daemons crashes. This backtraces required for some
bugreport to upstream.

4. fix waiting for real daemon stopping (Closes: #684744).
remove unused code from bacula-director init script.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=ef0c7b8b1ee7060decff3b4757bfb512c11bb98a
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=d4052cfbafbcb1718b687886a7b01198f06fb0a1
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=037b600ebfec34b6d48adcbfa08580276e188d0b

First commit is bug fix, last is only adding info into changelog.
Second commit is not required, but always better, when init scripts
make the same tasks by the same methods.

5. Add build-depends for read-all capability support (Closes: #683080).
capabilities is linux-only feature. disable it for non-linux
platforms, add information, that capabilities is linux-only feature.
Add information about file daemon without root privileges.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=c6b51c2c010ae82f73d8cdce2eecbfbe52e6bbec
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=74198182c2fa9e2567077356e345ff5251e26bf1
http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=6e1fab3c304fa73b9c6801a07290ce48b7cadb24

Yes, this is, of-course, new feature. But maybe fact, that this
change can improve Debian security and will be very useful for Debian
System Administration Team will be enough for accept this change

Bug#689003: unblock: bacula/5.2.6+dfsg-5

В Tue, 9 Oct 2012 12:32:07 +0200
Julien Cristau jcris...@debian.org пишет:

 On Tue, Oct  9, 2012 at 13:17:23 +0400, Alexander Golovko wrote:
 
  1. Build packages for all database types in the same time, not a
  separate process for sqlite3, mysql and pgsql.
  
  http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=1ca440fc3758a28fdcd17c05aa24f724934dbc5f
  
 nak.

I try to convince you again, if you don't mind.

Benefits for our team:

Package building is faster. It was start, wait, make something, look,
wait, look, wait, forget, remember only after some time :(
It was really annoying and significantly slow my work.

Package building process is much clear. Anybody other can help us if
he has basic knowledge about debhelper. With old variant d/rules is
more hard for understanding.

Also this change i test very-very deep. I compare packages, built from
sources with and without this change. Comparison include non-elf files
by content, where point symlinks, list of linked libraries for elf
files and buildlogs for anomaly differences in flags. There was one of
my most tested changes.

I really can promise, that this change not affect anything in binary
packages.

I hope, if this arguments will enough for allow exclusion and accept
this change.


  3. fix daemons user/group on systems with systemd (Closes: #679958).
  delegate daemons uid/gid changing to start-stop-daemon or systemd,
  thanks to Matija Nalis (Closes: #556207).
  
  This changes are related and intersected. First commit reverted by
  last.
  
  http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=d077cd3c71734828b635f8605c8411f6cd86b6f6
  http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=cf9eb640182f4adfd83d05954dc35a20b60170c1
  http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=694b788e0f82a734ca98bb0930a97432240c7fe8
  
  Upstream already much time (at least since 2010, Oct) use
  start-stop-daemon for change daemons uid/gid in their variant of
  init scripts. Our patch for uid/gid changing by systemd was already
  accepted into upstream. 
  
  The big problem, that without this change user can't simply get
  backtraces on daemons crashes. This backtraces required for some
  bugreport to upstream.
  
 Meh.  Can't the systemd files be simply removed?  If this doesn't
 affect sysvinit systems I would prefer not to bother.

Hmm. But systemd service files was added to package in 5.2.6+dfsg-1 via
bug #624532. And patch for fix them is trivial.



  5. Add build-depends for read-all capability support (Closes:
  #683080).
  
 A bit nervous about this one.  How much has this been tested, and how
 likely is it to affect unrelated features?

There are only one difference between packages built with and without
capabilities support in src/lib/priv.c on lines 110-132.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=blob;f=src/lib/priv.c;h=cfa4ec768970df40c3baea3f9d87831e761b7735;hb=52609e79da8df27cb68918acd074bff4af7cceb0

If binaries built without capabilities, than bacula-fd will return
error Keep readall caps not implemented when user try to use it.
If user start bacula without flags for enabling cap usage (default),
then the same code will be executed in both binaries - with or without
cap support.

This change should not affect to anything other.



  8. make package purging more careful about users files.
  
 Don't really see the point of this one.  Purging means purging.

actually, this is a difference from squeeze behavior for bacula-director
packages. Revert anyway?



  10. force /etc/defaults/bacula-dir reregistration in ucf when
  changing bacula-director database type, fix purging after this
  (Closes: #680051).
  
 Not sure about this, would appreciate advice from somebody who knows
 ucf.
 
  11. switch to /run directory
  
 nak.

Ok. i revert it.



  12. Fix impossibility to run out-of-box scripts make_mysql_tables
  and update_mysql_tables scripts, shipped with package (#679855).
  
 Are these scripts ever run automatically by the package?

No, scripts (dbconfig-common) use other files, generated on build time.
This files intended for users, who don't want or can't use dbconfig for
database population.



  13. switch from usermod to more debian-policy friendly adduser.
  
 Unless this is fixing an actual bug, nak.

Ok, i revert it.



  14. fix hostname substitution (Closes: #682966).
  
 Doesn't seem critical?

It is not critical for package installation. But this changes will do
all users immediately after first package installation.



  15. add bacula into cdrom group (Closes: #520508).
  
 Same here, I'd say defer to wheezy+1.

Ok, i revert it.


  16. Cleanup list of linked libraries.
  
 nak.

Maybe i incorrect worded this change.
This change remove unused libraries (no symbols from library used) from
list of linked libraries. 

From ld documentation:
--as-needed causes DT_NEEDED tags to only be emitted for libraries that
satisfy some symbol

Bug#690077: bacula: initial german debconf translation

tags 690077 + pending
--

Hi!

Thank you for your help!

Your translation added into git master branch and will be included into
next upload.

В Tue, 9 Oct 2012 20:05:07 +0200
Holger Wansing li...@wansing-online.de пишет:

 Package: bacula
 Severity: wishlist
 Tags: patch,l10n
 
 
 Hi,
 attached you get the initial german debconf translation
 for bacula, version 5.2.6+dfsg-4.
 Please include it in your package.
 
 Thanks for your i18n efforts.
 
 So long
 Holger
 


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689003: unblock: bacula/5.2.6+dfsg-5

В Tue, 9 Oct 2012 19:50:04 +0200
Julien Cristau jcris...@debian.org пишет:

On Tue, Oct 9, 2012 at 17:56:47 +0400, Alexander Golovko wrote:

В Tue, 9 Oct 2012 12:32:07 +0200
Julien Cristau jcris...@debian.org пишет:

On Tue, Oct 9, 2012 at 13:17:23 +0400, Alexander Golovko wrote:

1. Build packages for all database types in the same time, not a
separate process for sqlite3, mysql and pgsql.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=1ca440fc3758a28fdcd17c05aa24f724934dbc5f

nak.

I try to convince you again, if you don't mind.

ok, I guess I'll take your word for it.

i'm sorry for my english, but what you mean? That you allow this change
or that it rejected and i should not continue try to change you opinion?

3. fix daemons user/group on systems with systemd (Closes:
#679958). delegate daemons uid/gid changing to
start-stop-daemon or systemd, thanks to Matija Nalis (Closes:
#556207).

This changes are related and intersected. First commit reverted
by last.

Upstream already much time (at least since 2010, Oct) use
start-stop-daemon for change daemons uid/gid in their variant of
init scripts. Our patch for uid/gid changing by systemd was
already accepted into upstream.

The big problem, that without this change user can't simply get
backtraces on daemons crashes. This backtraces required for some
bugreport to upstream.

Meh. Can't the systemd files be simply removed? If this doesn't
affect sysvinit systems I would prefer not to bother.

Hmm. But systemd service files was added to package in 5.2.6+dfsg-1
via bug #624532. And patch for fix them is trivial.

Apparently not so trivial, since it needs a fixup now. I would rather
not see a change that affects all paths to fix something for the .1%
of users that run systemd.

ohh. i think, that will be better to split explanation of this change
into two parts.

First - changes in sysvinit scripts. Instead of run daemons as root and
pass options for chuid we allow start-stop-daemon to run it as
non-root. This is what do upstream and without this fix we have a
problems with getting backtraces on daemons crashes.

Second - changes in systemd service files. In 5.2.6+dfsg-1 our team add
this files into packages, but unfortunely, they was shipped with
incorrect (empty) uid/gid in them.
So, for systemd service files was fixed two problems:
a) Change daemons uid/gid by systemd, as do sysvinit scripts. This
is separate patch [1] for simplicity sending it to upstream (already
accepted by upstream)
b) Fixing incorrect uid/gid. Due to limitation of upstream build
system we can't use build options and hardcore uid/gid by patch [2]

As i understand, your opinion is that will be better do not ship
systemd service files at all, but include changes in sysvinit scripts?

8. make package purging more careful about users files.

Don't really see the point of this one. Purging means purging.

actually, this is a difference from squeeze behavior for
bacula-director packages. Revert anyway?

That would be my preference, yes.

ok. i revert it.

16. Cleanup list of linked libraries.

nak.

Maybe i incorrect worded this change.
This change remove unused libraries (no symbols from library used)
from list of linked libraries.

I know what --as-needed does. It's essentially cosmetic, not
appropriate during the freeze.

ok. i revert it.

And the next question.
Currently bacula can't built on hurd platforms. Should i include
fix for this problem into next upload, intended for wheezy or not?

If the patch is small and obvious enough why not, but hurd won't make
wheezy so it's not really needed from our perspective.

In fact this is depend on upstream. There was a little changes in
package (disabled acl, xattr and mtx on this platform) and i wait
while upstream fix problems with maximum path length on this platform.
I will ask this additionally, when upstream prepare patch.

Upstream recommend do not use hardening for bacula, so we have 71
lintian warning about this fact. In git master branch this warnings was
hidden by adding lintian-overrides. This is cosmetic change and should
not present in next upload, intended for wheezy?

What is the best way to prepare package without rejected changes

Bug#689796: bacula: French debconf templates translation

2012-10-06 Thread Alexander Golovko

tags 689796 + pending
--

Hi!

Thank you for your help!

Your translation added into git master branch, next uploaded
version will include this changes.


В Sat, 06 Oct 2012 13:31:12 +0200
Julien Patriarca patriar...@gmail.com пишет:

 Package: bacula
 Version: N/A
 Severity: wishlist
 Tags: patch l10n
 
 
 
 
 *** /home/julien/traductions/po-debconf/patch-translate.txt
 
 
 Please find attached the french debconf templates translation,
 proofread by the debian-l10n-french mailing list contributors.
 
 This file should be put as debian/po/fr.po in your package build tree.
 
 
 
 -- System Information:
 Debian Release: 6.0.6
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'stable')
 Architecture: amd64 (x86_64)
 
 Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
 Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689797: Initial Czech translation of PO debconf template for bacula 5.2.6+dfsg-4

2012-10-06 Thread Alexander Golovko

tags 689797 + pending
--

Hi!

Thank you for your help!

Your translation added into git master branch, next uploaded
version will include this changes.


В Sat, 6 Oct 2012 13:35:29 +0200
Michal Šimůnek michal.simu...@gmail.com пишет:

 Package: bacula
 Version: 5.2.6+dfsg-4
 Severity: wishlist
 Tags: l10n, patch
 
 In attachment there is initial Czech translation of PO debconf
 template (cs.po) for package bacula, please include it.


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#688199: bacula-director-sqlite3: modifies conffiles (policy 10.7.3): /etc/bacula/scripts/delete_catalog_backup

2012-10-06 Thread Alexander Golovko

tags 688199 + pending
--

В Mon, 24 Sep 2012 13:12:48 +0400
Alexander Golovko alexan...@ankalagon.ru пишет:

 Hi!
 
 Thank you for report!
 
 This is a result of our fix #656912.
 We should switch this file to ucf control or revert this changes.

Fixed in git master branch. This changes will be included in next
upload.

 
 But changes in config file are not dangerous for users.
 
 В Thu, 20 Sep 2012 10:46:44 +0200
 Andreas Beckmann deb...@abeckmann.de пишет:
 
  Package: bacula-director-sqlite3
  Version: 5.2.6+dfsg-3
  Severity: serious
  User: debian...@lists.debian.org
  Usertags: piuparts
  
  Hi,
  
  during a test with piuparts I noticed your package modifies
  conffiles. This is forbidden by the policy, see
  http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files
  
  10.7.3: [...] The easy way to achieve this behavior is to make the
  configuration file a conffile. [...] This implies that the default
  version will be part of the package distribution, and must not be
  modified by the maintainer scripts during installation (or at any
  other time).
  
  Note that once a package ships a modified version of that conffile,
  dpkg will prompt the user for an action how to handle the upgrade of
  this modified conffile (that was not modified by the user).
  
  Further in 10.7.3: [...] must not ask unnecessary questions
  (particularly during upgrades) [...]
  
  If a configuration file is customized by a maintainer script after
  having asked some debconf questions, it may not be marked as a
  conffile. Instead a template could be installed in /usr/share and
  used by the postinst script to fill in the custom values and create
  (or update) the configuration file (preserving any user
  modifications!). This file must be removed during postrm purge.
  ucf(1) may help with these tasks.
  See also http://wiki.debian.org/DpkgConffileHandling
  
  In https://lists.debian.org/debian-devel/2012/09/msg00412.html and
  followups it has been agreed that these bugs are to be filed with
  severity serious.
  
  debsums reports modification of the following files,
  from the attached log (scroll to the bottom...):
  
/etc/bacula/scripts/delete_catalog_backup
  
  
  cheers,
  
  Andreas
 
 
 


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689643: Danish translation of the debconf templates bacula

tags 689643 + pending
--

Hi!

Thank you for your help!


В Thu, 4 Oct 2012 18:11:28 +0100 (BST)
Joe Dalton joedalt...@yahoo.dk пишет:

 Package: bacula
 Severity: wishlist
 Tags: l10n patch
 
 Please include the attached Danish bacula translations.

Included into git master branch with changes, i think there is not
intentional typo in file. I change fglrx-driver to bacula in
header, including license, so please confirm, that there was legitimate
change.

http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commitdiff;h=4c02505a320aaa2c3f29392f889ac2bec3334506;hp=d8c3cd189b9a65db85b1e22f1f34243c0b0abab2


 
 joe@pc:~/over/debian/bacula$ msgfmt --statistics -c -v -o /dev/null
 da.po da.po: 3 oversatte tekster.
 
 bye
 Joe
 


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#687923: Bug#687923: bacula: CVE-2012-4430

Hi!

resend message to RT.


В Mon, 17 Sep 2012 14:38:11 +0400
Alexander Golovko alexan...@ankalagon.ru пишет:

 Hi, thank you!
 
 You can test new version of packages for squeeze:
 http://pkg-bacula.alioth.debian.org/tmp/5.0.2-2.2+squeeze1/
 
 
 For Security Team members - please, review new packages. 
 Debdiff with current squeeze version in attach. Can i upload this
 packages?
 
 
 В Mon, 17 Sep 2012 09:40:03 +0200
 Moritz Muehlenhoff j...@inutil.org пишет:
 
  Package: bacula
  Severity: grave
  Tags: security
  Justification: user security hole
  
  This was assigned CVE-2012-4430:
  https://secunia.com/advisories/50535/
  
  Upstream fix:
  http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905
  
  Cheers,
  Moritz
  
  ___
  pkg-bacula-devel mailing list
  pkg-bacula-de...@lists.alioth.debian.org
  http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-bacula-devel
  
  
 
 
 


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#687923: bacula: CVE-2012-4430, Debian RT

Hi!

resend message to RT.


В Mon, 17 Sep 2012 14:38:11 +0400
Alexander Golovko alexan...@ankalagon.ru пишет:

 Hi, thank you!
 
 You can test new version of packages for squeeze:
 http://pkg-bacula.alioth.debian.org/tmp/5.0.2-2.2+squeeze1/
 
 
 For Security Team members - please, review new packages. 
 Debdiff with current squeeze version in attach. Can i upload this
 packages?
 
 
 В Mon, 17 Sep 2012 09:40:03 +0200
 Moritz Muehlenhoff j...@inutil.org пишет:
 
  Package: bacula
  Severity: grave
  Tags: security
  Justification: user security hole
  
  This was assigned CVE-2012-4430:
  https://secunia.com/advisories/50535/
  
  Upstream fix:
  http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905
  
  Cheers,
  Moritz
  
  ___
  pkg-bacula-devel mailing list
  pkg-bacula-de...@lists.alioth.debian.org
  http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-bacula-devel
  
  
 
 
 


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#678818: release.debian.org: pu: package bacula/5.0.2+dfsg-0+squeeze1

Hi!

Due to prepared upload to security-master with security fix, please do
not upload this package.
We will prepare updated package, which will also include already
uploaded changes.

thank you!

-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689467: New spanish translation

2012-10-03 Thread Alexander Golovko

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

tags 689467 + pending
- --

Hi!

Thank you for your help!

Your translation added into git master branch, next uploaded
version will include this changes.

В Wed, 03 Oct 2012 01:10:46 +0200
Javier FernÃ¡ndez-Sanguino PeÃ±a j...@debian.org пишет:

 Package: bacula
 Version: 5.2.6+dfsg-4
 Severity: wishlist
 Tags: l10n patch
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Please find attached a new po-debconf translation of this package
 into Spanish. This translation is still being reviewed by the Spanish
 translation team. If the translation gets updated  I will submit a
 new file to this bug report.
 
 Thanks for including it in your next package upload,
 
 Javier
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.12 (GNU/Linux)
 
 iD8DBQFQa3RysandgtyBSwkRAgkcAJ4y7Q/JHOItii8KS2KyZzCxiFzYfwCdEQn/
 IDSJaTmxGs84+SUsNQH7F9w=
 =0Lt/
 -END PGP SIGNATURE-


- -- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJQbAilAAoJEGps3EGnzChGuAYP/iFBmehcrG1Iictb8fPPQAaB
WULbNQxrbf4Z9OE7Ij6EVCZq5WNFmPVI7TXamVHHFsc2f7gtqqG0DHZiEfFRYBwY
/i0HSFqb6R3nDOGe2wvZBe3pmT/mitgWqYn5DA9ypMChFL6JfYDaQnMVRPeN6YV2
c10aTi8X/1d+Mg2DuZ9WS3xa5YYXcioWWRWVERNKbrO7lo8Vo8ypRQXnK+yX1oUe
I0ZljSIvtPny8GTGqd6CFA7l8SodLZMFCqHufh14hJokOeFdJfefktWuyqU+/ODx
+23skxTLrrI7rqOs/Cluxf5gz3n4ldAgLxaaqZajrgSVIX8/kjJWEwMs9xfQrBlv
syQQR7/3RMsYwB+dx9W632p3ziHykG8oEnkOhaMp31C/xZQYNXLavVOlJVnJrhIg
OhJFqAqC3BUMTgOJDJF6Kf27PbArv53HV0Wt18/bDSN1hfWxoKnclSGZsGVrYv2g
E8PEwzMDzRtnf0G9zOKD6CP51YZo454RENeHTurMZgP5LVhH2dXpqpxIRVnedFXY
mXffrLmro7WDFNRzisgRVm30H3WOn3UtJKYbU0t3miz39I7Upc1ZXF6P7cVRClNp
1d473lZXwygFNuwxMKfyGMli+sAmUs8Jsfk5o51PZPTU5BpjP5G/dqCeFw/t939W
UBwCQt7tw+Jc03wjUBRE
=0AvC
-END PGP SIGNATURE-

Bug#687240: templates://bacula/{bacula-director-db.templates.in} : Final update for English review

2012-10-02 Thread Alexander Golovko

В Fri, 28 Sep 2012 20:15:42 +0200
Christian PERRIER bubu...@debian.org пишет:

 Dear Debian maintainer,
 
 On Saturday, September 15, 2012, I notified you of the beginning of a
 review process concerning debconf templates for bacula.
 
 The debian-l10n-english contributors have now reviewed these
 templates, and the final proposed changes are attached to this update
 to the original bug report.
 
 Please review the suggested changes, and if you have any
 objections, let me know in the next 3 days.

Thank you very much!
I include your changes into git master branch.

 
 However, please try to avoid uploading bacula with these changes
 right now.
 

What is better if we will upload new packages - add new templates or
keep last uploaded (previous version of your work)?


 The second phase of this process will begin on Monday, October 01,
 2012, when I will coordinate updates to translations of debconf
 templates.
 
 The existing translators will be notified of the changes: they will
 receive an updated PO file for their language.
 
 Simultaneously, a general call for new translations will be sent to
 the debian-i18n mailing list.
 
 Both these calls for translations will request updates to be sent as
 individual bug reports. That will probably trigger a lot of bug
 reports against your package, but these should be easier to deal with.
 
 The call for translation updates and new translations will run until
 about Monday, October 22, 2012. Please avoid uploading a package with
 fixed or changed debconf templates and/or translation updates in the
 meantime. Of course, other changes are safe.
 
 Please note that this is an approximative delay, which depends on my
 own availability to process this work and is influenced by the fact
 that I simultaneously work on many packages.
 
 Around Tuesday, October 23, 2012, I will contact you again and will
 send a final patch summarizing all the updates (changes to debconf
 templates, updates to debconf translations and new debconf
 translations).
 
 Again, thanks for your attention and cooperation.
 
 



-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689442: Russian debconf templates translation

2012-10-02 Thread Alexander Golovko

tags 689442 + pending
--

Hi, Yuri

Thank you for your help!

I add your translation into git master branch, next uploaded version
will include it.


В Tue, 02 Oct 2012 20:27:51 +0400
Yuri Kozlov yu...@komyakino.ru пишет:

 Package: bacula
 Version: 5.2.6+dfsg-4
 Severity: wishlist
 Tags: l10n patch
 
 Dear Maintainer,
 *** Please consider answering these questions, where appropriate ***
 
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
  ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
 
 *** End of the template - remove these lines ***
 
 Russian debconf templates translation is attached.
 
 -- System Information:
 Debian Release: wheezy/sid
   APT prefers unstable
   APT policy: (500, 'unstable'), (500, 'testing')
 Architecture: amd64 (x86_64)
 Foreign Architectures: i386
 
 Kernel: Linux 3.2.0-3-amd64 (SMP w/4 CPU cores)
 Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#689003: unblock: bacula/5.2.6+dfsg-5

2012-09-28 Thread Alexander Golovko

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hi!

Please unblock bacula-* packages, it fixes multiple bugs, include
CVE-2012-4430, crashes and debian policy violations:

#687923 - security issue CVE-2012-4430
#688732 - bacula-fd save only first xattr on file
#682733 - unowned files after purge
#680051 - switch between bacula-director-dbtype
#679958 - incorrect systemd service file
Fix unsafe bacula-director passwords.
Fix bacula-fd crash on saving xattr on btrfs.


Also new version include useful for DSA team [1] security improvement -
ability to run bacula-fd without root privileges (#683080)


There are also other changes in packages, i don't know need you see
more detailed description about this changes. Most of them are
not so important bugfixes, as listed above and several minor
wishlistes, that should not affect to stability.

Thank you very much!


[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683080#75


unblock bacula/5.2.6+dfsg-5

-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#688732: bacula save only first xattr on file

Package: bacula-fd
Version: 5.2.6+dfsg-3

Bacula save only first extended attribute from file.

For reproduce:
1. create FileSet with aclsupport=yes and xattrsupport=yes

2. mount fs with acl and user_xattr

mount -o remount,user_xattr,acl /mnt/test

3. set more then one extended attribute on file

$ setfattr -n user.attr1 -v somevalue /mnt/test/somefile
$ setfattr -n user.attr2 -v somevalue /mnt/test/somfile

3. run backup and then restore files

Restored file will have only one extended attribute user.attr1


-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#687240: [pkg-bacula-devel] Bug#687240: Bug#687240: [RFR] templates://bacula/{bacula-director-db.templates.in}

tags 687240 -pending
--

Oh, but we have security issue and serious incorrect behaviour with
xattr. I upload package, but not mark this bug as closed, so we can
continue work on it.
IMHO, we always can make new upload with your changes, but current
upload allow peoples to find more bugs before release.

May be i'm wrong and should not yet include your changes in upload? But
your text definitely better, than my :)

В Mon, 24 Sep 2012 21:36:39 +0200
Christian PERRIER bubu...@debian.org пишет:

 Quoting Alexander Golovko (alexan...@ankalagon.ru):
  tags 687240 + pending
  --
  
  Thank you!
  I include your changes into git master branch. New package version
  will be uploaded in the nearest time.
 
 Please wait for the end of the soon-to-come call for translations
 before uploading a version with these changes. I warned : the process
 is quite long..:-)
 
 



-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#677616: mtx: [hurd-i386] FTBFS: mtxl.h:39:1: error: unknown type name 'DEVICE_TYPE'

Hi!

Unfortunelly, there is no userspace interface to access scsi devices
on hurd, so mtx can't be built for this arch. Samuel, if i'm
incorrectly understand you, please fix me.

Bacula packages should be fixed for do not use mtx on hurd-i386.
But please notify bacula team after situation changed and mtx will be
in archive - we restore mtx usage for hurd arch.

-- 
with best regards,
Alexander Golovko
email: alexan...@ankalagon.ru
xmpp: alexan...@ankalagon.ru


signature.asc
Description: PGP signature

Bug#687240: [pkg-bacula-devel] Bug#687240: Bug#687240: Bug#687240: [RFR] templates://bacula/{bacula-director-db.templates.in}