Bug#1077277: xfce4-settings: screen locked but lockscreen invisible after suspend

2024-08-01 Thread Rodrigo Campos
On 8/1/24 1:23 PM, Yves-Alexis Perez wrote: On Mon, 2024-07-29 at 16:10 +0200, Rodrigo Campos wrote: Thanks! I've been trying it in the last couple of days and it seems to fix the problem reliably for me. I've tried after sleep, after sleep and a new screen connected, sleepin

Bug#1077277: xfce4-settings: screen locked but lockscreen invisible after suspend

2024-07-29 Thread Rodrigo Campos
On 7/28/24 10:46 AM, Yves-Alexis Perez wrote: On Sat, 2024-07-27 at 21:02 +0200, Rodrigo Campos wrote: This problem seems to be caused because xfce4-settings is compiled with upower-glib support[1]. The linked answer explains the problem, but this other answer explains just how to recompile the

Bug#1077277: xfce4-settings: screen locked but lockscreen invisible after suspend

2024-07-27 Thread Rodrigo Campos
Package: xfce4-settings Version: 4.18.3-1+b1 Severity: normal Dear Maintainer, The lockscreen after suspend is not reliable. Sometimes it is shown, sometimes it isn't, but the screen is always locked. Sometimes my apps are showing, no indication of the lockscreen, but mouse clicks, etc. don't

Bug#1077274: linux-image-6.9.11-amd64: intird 3x bigger since Linux 6.9.10

2024-07-27 Thread Rodrigo Campos
Package: src:linux Version: 6.9.11-1 Severity: normal Dear Maintainer, When using 6.9.10 or older, the initrd is 3x bigger. In 6.9.9, the size of the initrd is ~80M. From 6.9.10, it is ~250M. Is this on purpose? This plays poorly with the default /boot size, that ~5 years ago when I installe

Bug#1023125: performous: new upstream release (1.2.0)

2022-10-30 Thread Rodrigo Campos
Package: performous Version: 1.1+git20181118-5+b1 Severity: normal Hi! A few months ago there has been a new upstream release of performous for version 1.2.0. See: https://github.com/performous/performous/releases/tag/1.2.0 It would be great to have it in Debian :) Best, Rodrigo

Bug#992083: Mod tidy should ignore missing standard library packages (fixed in go >= 1.15.10)

2021-08-11 Thread Rodrigo Campos
Package: golang-1.15 Version: 1.15.9-6 Severity: normal Hi! I'm currently trying to run go mod tidy on runc master[1] (16027b814d59403b71bb369a0ba064da47dd302b) and fails with this error: io/fs: package io/fs is not in GOROOT (/usr/lib/go-1.15/src/io/fs) Googling a little bi

Bug#990820: DefaultErrnoRet not working with runc 1.0

2021-07-08 Thread Rodrigo Campos
On 7/8/21 5:57 PM, Shengjing Zhu wrote: Hi, Hi! :) On Thu, Jul 8, 2021 at 7:12 PM Rodrigo Campos wrote: runc 1.0 from debian repositories doesn't honor DefaultErrnoRet, that It's expected. As I disable that in https://salsa.debian.org/go-team/packages/runc/-/blob/experimen

Bug#926202: Seems this can be closed

2020-03-25 Thread Rodrigo Campos
IMHO, this can be closed as the fix (I've verified with a repro) is included now. But maybe can you, jaros...@thinline.cz, try to reproduced with those kernels I mentioned and report back?

Bug#926202: Fixed upstream

2020-03-25 Thread Rodrigo Campos
tags 926202 + fixed-upstream We (at Kinvolk) hit the very same bug (fault_state(0x5862)!) and created a way to reproduce with fio to have heavy IO. All the info is here: https://github.com/flatcar-linux/Flatcar/issues/12 As it's shown in the link, this was fixed in https://git.kernel.org/pub/scm/

Bug#902876: wordpress: CVE-2018-12895

2018-07-09 Thread Rodrigo Campos
On Mon, Jul 09, 2018 at 10:04:56PM +1000, Craig Small wrote: > I have sent the debdiff for stretch to the security team. Once they are > happy about it, stretch will get that update. Great, thanks a lot! :-)

Bug#902876: wordpress: CVE-2018-12895

2018-07-07 Thread Rodrigo Campos
On Sat, Jul 07, 2018 at 10:35:44PM +1000, Craig Small wrote: > Looks like they made a release, 4.9.7 with the fix. Uploading soon. > > The relevant patch (for backports) is > https://github.com/WordPress/WordPress/commit/c9dce0606b0d7e6f494d4abe7b193ac046a322cd I can only backport from packages i

Bug#892010: exo-utils: exo-preferred-applications does not run with error "exo-helper-1: not found"

2018-03-03 Thread Rodrigo Campos
Package: exo-utils Version: 0.12.0-1 Severity: normal Dear Maintainer, When running "exo-preferred-applications" it fails with: /usr/bin/exo-preferred-applications: 11: exec: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1: not found The exo-preferred-applications seems to be a shel

Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-22 Thread Rodrigo Campos
On Thu, Sep 21, 2017 at 04:26:53PM +0100, Rodrigo Campos wrote: > On Thu, Sep 21, 2017 at 09:54:49AM +0200, Ángel wrote: > > Salvatore wrote: > > > have you identified already the issue -> fixing commit mappings? > > > > For version 4.8.1 [buster, sid], upstr

Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-21 Thread Rodrigo Campos
On Thu, Sep 21, 2017 at 09:54:49AM +0200, Ángel wrote: > Salvatore wrote: > > have you identified already the issue -> fixing commit mappings? > > For version 4.8.1 [buster, sid], upstream fixed them on 4.8.2 > https://codex.wordpress.org/Version_4.8.2 And for jessie backports I'll update as soon

Bug#851066: More security bugs in debian version

2017-05-20 Thread Rodrigo Campos
Hi, Just in case you weren't aware, several security issues has been fixed in flash. Here is the last batch of fixes that I know of: https://blog.qualys.com/laws-of-vulnerabilities/2017/05/09/adobe-fixes-half-dozen-flash-vulnerabilities-and-more These is, of course, not fixed in debian because of

Bug#862816: wordpress: Six security bugs in wordpress 4.7.4 and earlier

2017-05-17 Thread Rodrigo Campos
On Wed, May 17, 2017 at 09:54:55PM +1000, Craig Small wrote: > Source: wordpress > Version: 4.7.4+dfsg-1 > Severity: grave > Tags: upstream security > Justification: user security hole > > Wordpress 4.7.4 and earlier has 6 security holes that are fixed in > 4.7.5[1] > > * 2.7.0 - 4.7.4 >Insu

Bug#854869: wordpress: please consider to package and enable by default disable REST API plugin

2017-02-16 Thread Rodrigo Campos
On Sat, Feb 11, 2017 at 12:18:06PM +0100, Martin Steigerwald wrote: > Package: wordpress > Version: 4.7.2+dfsg-1~bpo8+1 > Severity: normal > > Dear Craig, > > thanks for your notice on your blog. Fortunately Rodrigo was fast with > the backport. And I think I installed the update before disclosur

Bug#845996: needrestart: Restarts lxdm by default

2016-11-28 Thread Rodrigo Campos
On Sun, Nov 27, 2016 at 05:45:24PM +0100, Thomas Liske wrote: > > Hi Rodrigo, > > Rodrigo Campos writes: > > I'm using lxdm display manager and needrestart tries to restart it by > > default, > > instead of being disabled by default as it is with others DM.

Bug#845996: needrestart: Restarts lxdm by default

2016-11-27 Thread Rodrigo Campos
Package: needrestart Version: 2.10-1 Severity: normal Dear Maintainer, I'm using lxdm display manager and needrestart tries to restart it by default, instead of being disabled by default as it is with others DM. The attached patch adds this behaviour for LXDM too. Please consider merging this or

Bug#825696: golang: new upstream release (1.6.2)

2016-05-28 Thread Rodrigo Campos
Package: golang Version: 2:1.6.1-2 Severity: normal Hi, There is a new version, 1.6.2, available. I'm particularly interested because I'm hitting a bug in the net/http package that is fixed 1.6.2. Can you please upgrade? Thanks a lot, Rodrigo

Bug#818758: WordPress plugins depending on libphp-phpmailer > 5.2.10

2016-03-20 Thread Rodrigo Campos
On Sun, Mar 20, 2016 at 02:20:31PM +0100, David Raison wrote: > Package: wordpress > Version: 4.4.2+dfsg-1~bpo8+1 Please report bugs that you found in the packages to the backports mailing list and NOT to the Debian BTS, it says here: http://backports.debian.org/Instructions/#index6h2

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-16 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:54:17PM -0300, Felipe Sateler wrote: > Control: tags -1 - moreinfo > Control: forwarded -1 https://bugs.freedesktop.org/show_bug.cgi?id=94167 > > Thanks. Marking as forwarded accordingly. Closed upstream, not sure if you want to close it here too :)

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:46:22PM -0300, Felipe Sateler wrote: > On 15 February 2016 at 19:41, Rodrigo Campos wrote: > > On Mon, Feb 15, 2016 at 07:09:11PM -0300, Felipe Sateler wrote: > >> On 15 February 2016 at 16:11, Rodrigo Campos wrote: > >> > >> >

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 07:09:11PM -0300, Felipe Sateler wrote: > On 15 February 2016 at 16:11, Rodrigo Campos wrote: > > >> Would you forward > >> it upstream, then? > > No, sorry. When feedback will be requested by upstream then I won't be > able to prov

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
Now with 812...@bugs.debian.org on "Cc:" On Mon, Feb 15, 2016 at 07:11:04PM +0000, Rodrigo Campos wrote: > On Mon, Feb 15, 2016 at 03:53:07PM -0300, Felipe Sateler wrote: > > On 15 February 2016 at 13:23, Rodrigo Campos wrote: > > > On Mon, Feb 15, 2016 at 12:58:58PM

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-02-15 Thread Rodrigo Campos
On Mon, Feb 15, 2016 at 12:58:58PM -0300, Felipe Sateler wrote: > Control: tags -1 moreinfo > > On 24 January 2016 at 22:42, Rodrigo Campos wrote: > > > > Package: pulseaudio > > Version: 7.1-2 > > Severity: normal > > > > Dear Maintainer, > >

Bug#812557: Acknowledgement (pulseaudio: "refusing to start/autospawn" with multi-user setup)

2016-02-01 Thread Rodrigo Campos
On Mon, Feb 01, 2016 at 03:18:14PM -0300, Felipe Sateler wrote: > On 1 Feb 2016 09:42, "Rodrigo Campos" wrote: > > > > ping? :) > > Hi, sorry I am out of town so I have not taken a look. But using the same Oh, no problem. Let me know when you are back :-) > se

Bug#812557: Acknowledgement (pulseaudio: "refusing to start/autospawn" with multi-user setup)

2016-02-01 Thread Rodrigo Campos
ping? :)

Bug#813228: Thanks

2016-01-30 Thread Rodrigo Campos
Yes, I know it's present in newer versions. Didn't know this is whishlist, sorry. I tought it was normal as MITM attacks are easier when no cert validation is done at all. I asked because the SSLCiphers were backported (although that probably is an even simpler patch) to 1.4 and thought this is an

Bug#813228: znc: doesn't validate TLS certificate of IRC server

2016-01-30 Thread Rodrigo Campos
Source: znc Version: 1.4-2 Severity: normal Dear Maintainer, The version in jessie does not validates the certificate of the IRC server. Here is the patch doing it that is merged upstream: https://github.com/znc/znc/pull/761 I didn't try if it applies cleany to jessie, but I think it mi

Bug#812557: pulseaudio: "refusing to start/autospawn" with multi-user setup

2016-01-24 Thread Rodrigo Campos
Package: pulseaudio Version: 7.1-2 Severity: normal Dear Maintainer, I'be updated debian testing (didn't update in a while) and after I upgraded, sound from programs that run as a different user stopped working. When some other user tries to run: "/usr/bin/pulseaudio --start --log-target=syslog"

Bug#810325: Wordpress backported patches

2016-01-08 Thread Rodrigo Campos
Or, if you prefer, you can see the changes backported to 4.1 directly by wordpress (they release 4.1.9 that you can use as base for debian stable). Also, if you want to see the patches in git, you can see: https://github.com/WordPress/WordPress/commits/4.1-branch The relevant patch that

Bug#806157: backupninja: Don't use "--extra-clean" with duplicity >= 0.6.20

2015-11-24 Thread Rodrigo Campos
Package: backupninja Version: 1.0.1-2 Severity: normal Dear Maintainer, When running duplicity with the "--extra-clean" flag, it removes used signatures and makes difficult to restore backups older than the last full backup, as reported here[1]. Also, this was added to backupninja to workaround

Bug#783572: New upstream release

2015-09-24 Thread Rodrigo Campos
severity 783572 normal thanks Changing severity to normal, as usually a new upstream release is a normal bug. Not wishlist. Thanks again, Rodrigo

Bug#783572: New upstream release

2015-09-24 Thread Rodrigo Campos
Hi, I'd need postfix 3.0 for full SMTPUTF8 support too. Please upgrade :) Thanks a lot, Rodrigo

Bug#799140: wordpress: CVE-2015-5714 CVE-2015-5715

2015-09-17 Thread Rodrigo Campos
On Wed, Sep 16, 2015 at 06:47:04PM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Wed, Sep 16, 2015 at 10:54:27AM +0200, Salvatore Bonaccorso wrote: > > See https://wordpress.org/news/2015/09/wordpress-4-3-1/ for details. I > > have not checked older versions in jessie and wheezy. Are they Not s

Bug#791708: needrestart: Add a "--quiet" option

2015-09-16 Thread Rodrigo Campos
On Wed, Sep 16, 2015 at 06:50:19PM +0200, Thomas Liske wrote: > Re, > > On Wed, Jul 22, 2015 at 04:55:25AM +0100, Rodrigo Campos wrote: > > > > It's a good aproximation, but filtering stderr seems like a "no-no". > > > > Is there a reason you do

Bug#798194: Me too

2015-09-06 Thread Rodrigo Campos
On Mon, Sep 07, 2015 at 01:01:58AM +0100, Rodrigo Campos wrote: > The very same happens to me too. Can this be fixed ASAP please ? Upgrading gstreamer0.10-plugins-good to the version in unstable (0.10.31-3+nmu4+b2) solves the issue. pidgin can be installed (and works) just fine. Thanks a

Bug#798194: Me too

2015-09-06 Thread Rodrigo Campos
The very same happens to me too. Can this be fixed ASAP please ? Thanks a lot, Rodrigo

Bug#791708: needrestart: Add a "--quiet" option

2015-07-21 Thread Rodrigo Campos
On Tue, Jul 21, 2015 at 01:17:23AM +0200, Thomas Liske wrote: > Re, > > On 07/07/2015 10:22 PM, Rodrigo Campos wrote: > > Thanks a lot for the quick response! > > > > I tried but didn't understand it. How can I make it interactive or auto? > > Using >

Bug#791708: needrestart: Add a "--quiet" option

2015-07-07 Thread Rodrigo Campos
On Tue, Jul 07, 2015 at 09:56:44PM +0200, Thomas Liske wrote: > Hi Rodrigo, > > > On 07/07/2015 08:58 PM, Rodrigo Campos wrote: > > Package: needrestart > > Version: 2.1-1 > > Severity: wishlist > > > > Dear Maintainer, > > > > I'm usi

Bug#791708: needrestart: Add a "--quiet" option

2015-07-07 Thread Rodrigo Campos
Package: needrestart Version: 2.1-1 Severity: wishlist Dear Maintainer, I'm using needrestart inside scripts (in particular fabric scripts) and it will be nice if a --quiet option can be added. Something like the -q from apt-get, that says: "Quiet; produces output suitable for logging, o

Bug#781767: Makes it unusable for my buckets too

2015-06-16 Thread Rodrigo Campos
On Tue, Jun 16, 2015 at 10:12:03AM -0500, Matt Domsch wrote: > Buckets with dots is the AWS recommended method, and is required for all > regions except for us-east-1.  It becomes usable if you use Ohh, didn't know that. Then I fully agree =) Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email t

Bug#781767: Makes it unusable for my buckets too

2015-06-16 Thread Rodrigo Campos
On Sat, Jun 13, 2015 at 07:24:15AM +, Gianfranco Costamagna wrote: > Control: severity -1 grave > Control: found -1 1.5.0~rc1-2 > Control: fixed -1 1.5.2-1 > > thanks > > > I'm setting the correct severity, since the jessie package is completely > unusable. Well, it's not completely unusab

Bug#781767: Makes it unusable for my buckets too

2015-06-12 Thread Rodrigo Campos
On Fri, Jun 12, 2015 at 03:25:52PM +, Gianfranco Costamagna wrote: > Hi Rodrigo > > >I'm not doing any of those. I'm just using a python virtualenv right now, but > >would love to switch to jessie and avoid it :) > > > I uploaded a new s3cmd on unstable, that will hopefully migrate to testin

Bug#781767: Makes it unusable for my buckets too

2015-06-12 Thread Rodrigo Campos
On Fri, Jun 12, 2015 at 08:57:02AM +, Gianfranco Costamagna wrote: > Hi Rodrigo and Matt, > > I tried to apply the upstream commit to 1.5.0~rc1-2 and it doesn't apply > cleanly. > > I see two/three possible solutions: > 1) upgrade to stretch (just almost jocking) or apt-pinning s3cmd from th

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
On Thu, Jun 11, 2015 at 04:42:15PM -0500, Matt Domsch wrote: > The copy in jesse's repository is 1.5.0~rc1-2 which is not v1.5.2 where the > fix > was committed.  I see the same failure if I simply apt-get install s3cmd on a > new jesse install.  v1.5.2 is in experimental and unstable or can be >

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
On Thu, Jun 11, 2015 at 01:38:01PM -0500, Matt Domsch wrote: > Please run a failing case with --debug and report results. I'm not sure why you need this, as it's trivial to reproduce and the original report says which commit should fix it. But here it goes anyways... >  v1.5.2 should not > fail

Bug#781767: Makes it unusable for my buckets too

2015-06-11 Thread Rodrigo Campos
Hi, Any news on this ? I've upgraded to jessie and scripts using s3cmd broke because of this bug. It renders the package unusable to me (and all using dots in the buckets name). As a workaround, just in case, I've used s3cmd from a python virtual env using the last release. Probably the package f

Bug#787118: [debian-mysql] Bug#787118: mariadb-server-10.0: Compile with OpenSSL (instead of YaSSL)

2015-05-28 Thread Rodrigo Campos
On Thu, May 28, 2015 at 11:53:14PM +0300, Otto Kekäläinen wrote: > Hello! > > Thanks for reporting your request. OpenSSL is problematic because its license. > > I think Debian recommends using cyassl so we'll switch from bundled > yassl to cyassl once it is confirmed to work. I don't think anybod

Bug#787118: mariadb-server-10.0: Compile with OpenSSL (instead of YaSSL)

2015-05-28 Thread Rodrigo Campos
Package: mariadb-server-10.0 Version: 10.0.19-1 Severity: wishlist Dear Maintainer, Mariadb seems to be compiled using YaSSL intead of openssl. For example, running in a mysql console: MariaDB [(none)]> show variables like "%ssl%"; +---+--+ | Variable_

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-26 Thread Rodrigo Campos
On Wed, May 20, 2015 at 10:08:44PM +1000, Craig Small wrote: > On Mon, May 18, 2015 at 10:12:21AM +0200, Raphael Hertzog wrote: > > That's the general case. But with wordpress, the security team is rather > > open to integrate new upstream releases. We did it multiple times already. > > Let me ask

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-18 Thread Rodrigo Campos
On Mon, May 18, 2015 at 10:12:21AM +0200, Raphael Hertzog wrote: > On Sat, 16 May 2015, Craig Small wrote: > > > I mean, instead of using 4.2.x to extract the patches and backport, isn't > > > it > > > easier to extract them from 4.1.x for stable ? Or just do a "new upstream > > > release" based o

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-15 Thread Rodrigo Campos
On Fri, May 15, 2015 at 02:35:45PM +0100, Rodrigo Campos wrote: > On Fri, May 15, 2015 at 09:08:28PM +1000, Craig Small wrote: > > On Thu, May 07, 2015 at 05:31:03AM +0100, Rodrigo Campos wrote: > > > A new Wordpress *critical* security release has been announced here: > >

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-15 Thread Rodrigo Campos
On Fri, May 15, 2015 at 09:08:28PM +1000, Craig Small wrote: > On Thu, May 07, 2015 at 05:31:03AM +0100, Rodrigo Campos wrote: > > A new Wordpress *critical* security release has been announced here: > > https://wordpress.org/news/2015/05/wordpress-4-2-2/ > > > >

Bug#784603: May help to easily apply changes to stable: WP 4.1.5 release

2015-05-14 Thread Rodrigo Campos
On Wed, May 13, 2015 at 07:31:39PM +0100, Rodrigo Campos wrote: > Hi, > > Just in case you didn't notice (I didn't at first :) there was a wordpress > 4.1.5 > release upstream: https://codex.wordpress.org/Version_4.1.5 > > You can download here: https://wordpre

Bug#784603: May help to easily apply changes to stable: WP 4.1.5 release

2015-05-13 Thread Rodrigo Campos
Hi, Just in case you didn't notice (I didn't at first :) there was a wordpress 4.1.5 release upstream: https://codex.wordpress.org/Version_4.1.5 You can download here: https://wordpress.org/download/release-archive/ This might be the easiest way to apply the changes to stable. But, of course, do

Bug#784603: wordpress: Wordpress 4.2.2 critical security release

2015-05-06 Thread Rodrigo Campos
Source: wordpress Version: 4.1+dfsg-1+deb8u1 Severity: important Dear Maintainer, A new Wordpress *critical* security release has been announced here: https://wordpress.org/news/2015/05/wordpress-4-2-2/ Can you please update and backport the patches to stable ? Also, let me know if you need hel

Bug#783347: Any ETA on when the backport will come to jessie ?

2015-05-01 Thread Rodrigo Campos
On Sat, May 02, 2015 at 01:01:29PM +1000, Craig Small wrote: > On Thu, Apr 30, 2015 at 07:46:52PM +0100, Rodrigo Campos wrote: > > But is there any ETA on when the changes will come to jessie ? Can I help > > you > > with testing ? > > > > Also, I can review the

Bug#780817: Can you please backport to stable?

2015-04-30 Thread Rodrigo Campos
On Tue, Apr 14, 2015 at 04:02:41PM +0100, Rodrigo Campos wrote: > On Tue, Apr 07, 2015 at 03:00:46PM +0100, Rodrigo Campos wrote: > > On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: > > > On Tue, Mar 24, 2015 at 03:49:57PM +0000, Rodrigo Campos

Bug#783347: Any ETA on when the backport will come to jessie ?

2015-04-30 Thread Rodrigo Campos
Sorry to disturb Craig, But is there any ETA on when the changes will come to jessie ? Can I help you with testing ? Also, I can review the backports if you still need peer review :) Thanks a lot and sorry again, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.o

Bug#780817: Can you please backport to stable?

2015-04-14 Thread Rodrigo Campos
On Tue, Apr 07, 2015 at 03:00:46PM +0100, Rodrigo Campos wrote: > On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: > > On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: > > > Hi, > > > > > > Can you please backport the security

Bug#780817: Can you please backport to stable?

2015-04-07 Thread Rodrigo Campos
On Tue, Mar 31, 2015 at 01:54:15PM +0100, Rodrigo Campos wrote: > On Tue, Mar 24, 2015 at 03:49:57PM +0000, Rodrigo Campos wrote: > > Hi, > > > > Can you please backport the security fixes for stable? Or is that process > > already ongoing? > > Hi again, >

Bug#780817: Can you please backport to stable?

2015-03-31 Thread Rodrigo Campos
On Tue, Mar 24, 2015 at 03:49:57PM +, Rodrigo Campos wrote: > Hi, > > Can you please backport the security fixes for stable? Or is that process > already ongoing? Hi again, I contacted the security team (t...@security.debian.org) and Salvatore Bonaccorso answered me that ther

Bug#780817: Can you please backport to stable?

2015-03-24 Thread Rodrigo Campos
Hi, Can you please backport the security fixes for stable? Or is that process already ongoing? Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#780851: wordpress: Will unstable/experimental receive security updates during the freeze?

2015-03-20 Thread Rodrigo Campos
Source: wordpress Severity: wishlist Dear Maintainer, I need to install wordpress, but the version on debian stable is too old for my need. I was thinking about using the debian package from unstable (that I see is updated to latest wordpress, thanks!), but I'd like to know if you plan to upload

Bug#780817: dokuwiki: Insufficient escaping in user manager allows XSS attack

2015-03-19 Thread Rodrigo Campos
Package: dokuwiki Version: 0.0.20120125b-2+deb7u1 Severity: important Dear Maintainer, There's been a hotfix release for dokuwiki. >From the report: "The user's details were not properly escaped in the user manager's edit form. This allows a registered user to edit her own name (using the change

Bug#771199: Ping

2014-12-22 Thread Rodrigo Campos
On Fri, Dec 12, 2014 at 12:21:54PM -0300, Rodrigo Campos wrote: > On Fri, Dec 12, 2014 at 03:42:26PM +0100, Stefan Fritsch wrote: > > tags 771199 wheezy > > thanks > > > > On Friday 12 December 2014 11:29:49, Rodrigo Campos wrote: > > > On Thu, Dec 04, 2014

Bug#771199: Ping

2014-12-12 Thread Rodrigo Campos
On Fri, Dec 12, 2014 at 03:42:26PM +0100, Stefan Fritsch wrote: > tags 771199 wheezy > thanks > > On Friday 12 December 2014 11:29:49, Rodrigo Campos wrote: > > On Thu, Dec 04, 2014 at 10:01:51PM +0000, Rodrigo Campos wrote: > > > Ping ? :) > > > > Re-pi

Bug#771199: Ping

2014-12-12 Thread Rodrigo Campos
On Thu, Dec 04, 2014 at 10:01:51PM +, Rodrigo Campos wrote: > Ping ? :) Re-ping ? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#771199: Ping

2014-12-04 Thread Rodrigo Campos
Ping ? :) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#770425: Fixes for debian stable ?

2014-12-03 Thread Rodrigo Campos
On Wed, Dec 03, 2014 at 05:58:11PM +1100, Craig Small wrote: > On Tue, Dec 02, 2014 at 02:17:37PM +0000, Rodrigo Campos wrote: > > The upstream release was on Nov 20, it's been almost 2 weeks and the bug > > seem > > kind of serious. Any chance to do a quick fix an

Bug#770425: Fixes for debian stable ?

2014-12-02 Thread Rodrigo Campos
Hi, The upstream release was on Nov 20, it's been almost 2 weeks and the bug seem kind of serious. Any chance to do a quick fix and then continue to discuss changing wordpress version in stable ? Or any ETA on when the fixes will come to stable ? I've manually applied the workaround suggested her

Bug#771199: apache2: SNI hostname comparison against Host header is not case-insensitive

2014-11-27 Thread Rodrigo Campos
Package: apache2 Version: 2.2.22-13+deb7u3 Severity: normal Dear Maintainer, apache2 on debian using SSL returns error 400 when using ssl vhosts with SNI and some capital letters. A similar bug is reported on Ubuntu[1] with instructions on how to reproduce. I can confirm it happens when hosting s

Bug#770949: wordpress: Please update to fix security bug

2014-11-25 Thread Rodrigo Campos
Source: wordpress Version: 3.6.1+dfsg-1~deb7u4 Severity: important Dear Maintainer, I'm setting the priority to important as it is mentioned as critical update. Please feel free to change it, and sorry in advance if I set it wrong :) The original wordpress announce is here: https://wordpress.org

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
On Tue, Sep 23, 2014 at 11:43:22PM +0200, Stefan Fritsch wrote: > On Tuesday 23 September 2014 22:02:36, Rodrigo Campos wrote: > > But well, that email says with that setup it did. As it did with > > mine. And reading the thread I didn't see nobody saying that in all > >

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
On Tue, Sep 23, 2014 at 10:41:49PM +0200, Stefan Fritsch wrote: > On Tuesday 23 September 2014 20:30:04, Rodrigo Campos wrote: > > I tried to do some tests to see if maybe a reload was enough > > (doesn't cause downtime :)) to re-generate the randomly generated > > ses

Bug#762619: I'm using MPM prefork

2014-09-23 Thread Rodrigo Campos
Forgot to tell that I tested it with MPM prefork. Using another MPM might change the result of the test (didn't test, not sure if it would or not). Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact li

Bug#762619: apache2: Don't let TLS session tickets botch PFS

2014-09-23 Thread Rodrigo Campos
Package: apache2 Version: 2.2.22-13+deb7u3 Severity: normal Dear Maintainer, As explained here[1], TLS session tickets can make Perfect Forward Secrecy useless. The currently backported patches of openssl and apache on debian stable don't provide any way to disable session tickets nor change the

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-08-26 Thread Rodrigo Campos
On Tue, Aug 26, 2014 at 10:07:47AM +0200, Tanguy Ortolo wrote: > Rodrigo Campos, 2014-08-26 01:55+0100: > >On Mon, Aug 25, 2014 at 05:51:52PM +0200, Tanguy Ortolo wrote: > >>Given the importance of this modification, and the level of damage > >>it could do if we made a

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-08-25 Thread Rodrigo Campos
On Mon, Aug 25, 2014 at 05:51:52PM +0200, Tanguy Ortolo wrote: > Hello, > > Rodrigo Campos, 2014-07-25 19:12+0100: > >The dokuwiki installation doesn't ever erase the cache. In my installation > >the > >cache was using 750M and the whole data directory,

Bug#756050: dokuwiki: Doesn't erase the cache nor does other needed maintenance

2014-07-25 Thread Rodrigo Campos
Package: dokuwiki Version: 0.0.20120125b-2 Severity: normal Dear Maintainer, The dokuwiki installation doesn't ever erase the cache. In my installation the cache was using 750M and the whole data directory, excluding the cache, was 20M. When looking how to erase the cache, I found this: https://

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-26 Thread Rodrigo Campos
On Wed, Feb 26, 2014 at 11:04:16PM +0100, Christoph Biedl wrote: > Rodrigo Campos wrote... > > > Sure, here they go: > > > > $ hd 14_02_04_access_log.gz | head -4 > > 1f 8b 08 08 ff 7e f1 52 02 03 31 34 5f 30 32 5f > > |.~.R..14_02_|

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-25 Thread Rodrigo Campos
On Tue, Feb 25, 2014 at 10:14:59PM +0100, Christoph Biedl wrote: > Rodrigo Campos wrote... > > > I'm seeing the exact same thing with file from wheezy, version > > 5.11-2+deb7u1. > > While I was able to reproduce that one in squeeze, wheezy looks fine > to me. C

Bug#623630: Present in 5.11-2+deb7u1 too

2014-02-19 Thread Rodrigo Campos
Hi, I'm seeing the exact same thing with file from wheezy, version 5.11-2+deb7u1. If it helps anyone, in my case I can workaround this bug using "gzip -t". If you need more information, please let me know. Thanks, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.o

Bug#728444: libfontconfig1: xpdf is broken by fontconfig version 2.11.0-1

2013-11-04 Thread Rodrigo Campos
On Tue, Nov 05, 2013 at 12:10:35AM +0100, Francesco Poli wrote: > On Mon, 4 Nov 2013 13:01:22 +0100 Vincent Lefevre wrote: > > > On 2013-11-01 12:58:19 +0100, Francesco Poli (wintermute) wrote: > > > I wonder why nobody thought to report a release-critical bug against > > > libfontconfig1, in orde

Bug#728444: Work-around

2013-11-02 Thread Rodrigo Campos
Hi, Besides is probably pretty clear from the bug report, I add this information just in case is useful for someone else. Downgrading the library to the previous version on testing makes xpdf work again. I did this by adding: deb http://snapshot.debian.org/archive/debian/20131029T094523Z

Bug#726034: xchat: Uses absolute paths on config files

2013-10-11 Thread Rodrigo Campos
Package: xchat Version: 2.8.8-7.1 Severity: normal Dear Maintainer, When switching users in my PC I realized xchat uses absolute paths on the config file, so it was pointless to only copy the ~/.xchat folder and expect it to work okay. For example, it uses an abs path for the dcc_dir option in ~/

Bug#714604: libc6-dev: RUSAGE_THREAD constant not exported

2013-07-01 Thread Rodrigo Campos
Package: libc6-dev Version: 2.13-38 Severity: normal Hi, When including sys/time.h and sys/resource.h as the getrusage manpage says, RUSAGE_THREAD is not defined. For example, the following code fails to compile: #include #include int main() { struct rusage u

Bug#669878: Workaround that worked for me

2012-07-07 Thread Rodrigo Campos
On Sat, Jul 07, 2012 at 03:54:43PM -0300, Rodrigo Campos wrote: > Hi, > > I have, like Stefan Beller, a 32-bit system with fluxbox started by gdm too > and > hit the very same problem he describe. What did work for me was removing > phonon, > like this: > > a

Bug#669878: Workaround that worked for me

2012-07-07 Thread Rodrigo Campos
Hi, I have, like Stefan Beller, a 32-bit system with fluxbox started by gdm too and hit the very same problem he describe. What did work for me was removing phonon, like this: aptitude purge phonon phonon-backend-xine (I did have phonon installed, not phonon-backend-vlc) This removed k

Bug#650639: fluxbox crash when expanding the toolbar to "All Heads"

2011-12-05 Thread Rodrigo Campos
On Mon, Dec 05, 2011 at 01:28:26PM -0500, Paul R. Tagliamonte wrote: > I've been meaning to ack this. > > A coredump would be ultra useful, I think the debug headers are > stripped, so it might require a bit of love. Yeah, debug symbols are not present on the fluxbox package and there isn't a flu

Bug#590986: Already fixed

2011-12-01 Thread Rodrigo Campos
Hi, As I said, tha patch has been applied upstream. Now the upstream release that contains the patch has been included in Debian, so feel free to close this bug. Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Tr

Bug#650639: fluxbox crash when expanding the toolbar to "All Heads"

2011-12-01 Thread Rodrigo Campos
Package: fluxbox Version: 1.3.2-2 Severity: normal Dear Maintainer, I have a Dual head configuration on my notebook at work. Just in case it matters, to configure it (i've just configured it) I used these xrandr lines: xrandr --output VGA1 --mode 1024x768 --scale 1x1.2 --left-of LVDS1 xrandr --o

Bug#580069: workarround for the first run

2011-11-17 Thread Rodrigo Campos
Hi, A workarround that works for me is forcing logrotate with "-f". This way it adds the entry to /var/lib/logrotate/status (as logrotate never rotated it, there isn't an entry), and it should behave as expected from now on if I'm not wrong. Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email

Bug#626039: pidgin still uninstallable

2011-11-12 Thread Rodrigo Campos
Hi, pidgin is still uninstallable. Is there any plan to sort this out in the near future ? Thanks a lot, Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#598150: Using consolekit 0.4.1-4 workarounds the issue

2011-03-07 Thread Rodrigo Campos
On Mon, Mar 07, 2011 at 10:57:06PM -0300, Rodrigo Campos wrote: > Hi, > > I just wanted to add that using consolekit 0.4.1-4 from stable (with newer nm > and nm-applet) works okay for me. Sorry, forgot to tell that to enable the buttons of 'Enable Wireless' and 'E

Bug#598150: Using consolekit 0.4.1-4 workarounds the issue

2011-03-07 Thread Rodrigo Campos
Hi, I just wanted to add that using consolekit 0.4.1-4 from stable (with newer nm and nm-applet) works okay for me. Also, > So, in short, I believe this won't be fixed in ConsoleKit and we can post bug > reports (priority wishlist) against the DMs. The bug reported to xdm was marked as wont fix:

Bug#604404: The fix works for me

2010-11-21 Thread Rodrigo Campos
Also, I forgot to tell that the fix works for me :) Thanks! Rodrigo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#604404: libpurple0: Unable to validate certificate (msn)

2010-11-21 Thread Rodrigo Campos
Package: libpurple0 Severity: important I use severity important since it makes msn almost unusable for me. But I'm not sure important is the correct severity :) Pidgin disconnects from MSN very often with "Unable to validate certificate. The certificate for omega.contacts.msn.com could not be va

  1   2   >