Bug#527449: swftools: multiple vulnerabilities in embedded copy of xpdf
On Tue, Aug 18, 2009 at 12:19:12PM +0200, Clement Hermann (nodens) wrote: Hi, Hi, Is there any news on this bug ? would you accept a patch to use libpoppler instead of embedded xpdf ? Nothing new; the 0.9.0 release of swftools still uses the xpdf 3.02 embedded in it and the last time I asked, the upstream had no plans to start using libpoppler instead. I thought that converting the upstream version to use libpoppler instead of the embedded library would be too big a task to maintain. Now it seems that new upstream releases don't happen that often, so the patched version could be maintainable. Obviously, I would be glad to get a patch for that. Cheers, -- Clément Hermann (nodens) - L'air pur ? c'est pas en RL, ça ? c'est pas hors charte ? Jean in L'Histoire des Pingouins, http://tnemeth.free.fr/fmbl/linuxsf/ Vous trouverez ma clef publique sur le serveur public pgp.mit.edu. Please find my public key on the public keyserver pgp.mit.edu. With kind regards, -- Simo Kauppi -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#427834: any progress?
Hi, On Thu, Nov 29, 2007 at 02:55:07AM -0500, Mike O'Connor wrote: Has any progress been made on fixing this bug? I have made version 0.8.1-2 and it is available at http://mentors.debian.net/debian/pool/main/s/swftools It has still some issues as Paul pointed out in http://lists.debian.org/debian-mentors/2007/11/msg00259.html I think the biggest issue is the xpdf as the swftools is not compatible with the libpoppler. I am not sure how that should be handled. I'm interested in seeing this package be included in lenny. If there has not yet been any effort into making this package installable on ia64, or to make it compliant with the new python policy, I'd be happy to work on getting it there. Feel free to work on the package. The source is at http://svn.debian.org/wsvn/pkg-flash/packages/swftools/ stew Thanks for your help, Simo signature.asc Description: Digital signature
Bug#451637: python-imaging: Warning from dpkg-shlibdeps while building a python module
Package: python-imaging Version: 1.1.5-11 Severity: important I get the following warning from dpkg-shlibdeps while building a python module which depends on python-imaging: dpkg-shlibdeps: warning: could not find any packages for /usr/lib/python2.4/site-packages/PIL/_imaging.so dpkg-shlibdeps: warning: unable to find dependency information for shared library /usr/lib/python2.4/site (soname packages/PIL/_imaging, path /usr/lib/python2.4/site-packages/PIL/_imaging.so, dependency field Depends) As a result, the python-imaging is not added to the Depends field. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.22 Locale: LANG=fi_FI, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages python-imaging depends on: ii libc6 2.3.6.ds1-13etch2 GNU C Library: Shared libraries ii libfreetype6 2.2.1-5+etch1 FreeType 2 font engine, shared lib ii libjpeg62 6b-13 The Independent JPEG Group's JPEG ii mime-support 3.39-1MIME files 'mime.types' 'mailcap ii python 2.4.4-2 An interactive high-level object-o ii python-central 0.5.12register and build utility for Pyt ii python-imaging-tk 1.1.5-11 Python Imaging Library ImageTk Mod ii zlib1g 1:1.2.3-13compression library - runtime python-imaging recommends no packages. -- no debconf information signature.asc Description: Digital signature
Bug#366793: Trying to reproduce this behaviour
On Thu, Sep 28, 2006 at 10:18:01AM +0200, Florian Hinzmann wrote: tags 366793 + moreinfo unreproducible thanks Hello! Thanks for your report. I was not able to reproduce it yet, but perhaps you could help me here. Do you have any idea under what circumstances this happens? Any observations may be important. It doesn't seem to happen anymore. At least I can't find those errors in my recent log files. Unfortunately, I cannot say when exactly it stopped happening. Does it happen everytime you check your mails or only occasionally? When it happens does it affect all mails or only to some of them? Which ones? You did file the bug against version 0.57-1 resp. reportbug did this for you. Did you call reportbug on the machine running the Spamassassin daemon spamd? If not, which version of libnet-dns-perl is running at that machine? Yes, I used reportbug in the machine running spamd and the version was 0.57-1. libnet-dns-perl version 0.59-1 just hit unstable. It would be nice to know if this error happens with 0.59, too. I'm tracking etch, and my version is still 0.57-1, so it must have been some other package causing the problem. Regards Florian -- Florian Hinzmann private: [EMAIL PROTECTED] Debian: [EMAIL PROTECTED] PGP Key / ID: 1024D/B4071A65 Fingerprint : F9AB 00C1 3E3A 8125 DD3F DF1C DF79 A374 B407 1A65 BR, Simo signature.asc Description: Digital signature
Bug#365479: Support for the flash list
I've been working to get the swftools packaged for Debian and this list would be a great place to coordinate and discuss all the Debian flash related issues. Simo -- :r ~/.signature signature.asc Description: Digital signature
Bug#366793: spamassassin: Can't use string (Net::DNS::RR::MX) while strict refs in use
Package: libnet-dns-perl Version: 0.57-1 Severity: normal I'm using spamassassin (3.1.0a-2) with procmail to check the incoming messages for spam. The following error appears quite often (not sure if this happens for every checked message) in the log file: May 10 17:48:13 server spamd[24339]: Can't use string (Net::DNS::RR::MX) as a HASH ref while strict refs in use at /usr/lib/perl5/Net/DNS/RR.pm line 724. May 10 17:48:13 server spamd[24339]: Can't use string (Net::DNS::RR::MX) as a HASH ref while strict refs in use at /usr/lib/perl5/Net/DNS/RR.pm line 724. May 10 17:48:13 server spamd[24339]: Compilation failed in require at (eval 815) line 3. May 10 17:48:13 server spamd[24339]: Can't use string (Net::DNS::RR::MX) as a HASH ref while strict refs in use at /usr/lib/perl5/Net/DNS/RR.pm line 724. May 10 17:48:13 server spamd[24339]: Compilation failed in require at (eval 815) line 3. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.15 Locale: LANG=fi_FI, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages libnet-dns-perl depends on: ii libc6 2.3.6-7GNU C Library: Shared libraries ii libdigest-hmac-perl 1.01-3 create standard message integrity ii libnet-ip-perl1.24-1 Perl extension for manipulating IP ii perl [libmime-base64-perl]5.8.8-4Larry Wall's Practical Extraction ii perl-base [perlapi-5.8.8] 5.8.8-4The Pathologically Eclectic Rubbis libnet-dns-perl recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#187275: swftools: 187275: packaging status?
On Tue, Jan 31, 2006 at 10:26:44PM +0800, Paul Wise wrote: Hi Simo, What is the status of your swftools package, is it ready to upload? Where can I view the latest version? Would you like me to help you find a sponsor? My email is down atm, so please reply to the bug as well as to me. -- bye, pabs http://wiki.debian.org/PaulWise Hi Paul, Thanks for asking. Right now I'm waiting for the new upstream release. I did the changes after your good comments. I also made the 'official' swftools package so that it has as little changes to the upstream as possible. I also spoke to the upstream and at least some of the build issues are going to be embedded to the future upstream releases. Right before I was going to ask for comments from d-m, there was a DSA concerning the xpdf. Since the swftools has xpdf embedded, and 0.7.0 does not compile against the libpoppler, I thought it should not be uploaded. The next release has the newer xpdf and hopefully it compiles against libpoppler, so I'm waiting for that. I'll build a pre-package from the development snapshot, but unfortunately the current snapshot does not compile with the g++ 4.0.3 :( When I get a good snapshot, I would appreciate if you and possibly others could have a look at the package, so that by the time I get the official release from the upstream we would be good to go. The packages are nowadays in http://www.mediasitomo.com/debian-swftools/ BR, Simo signature.asc Description: Digital signature
Bug#347536: libavifile-0.7-dev: avifile-config --libs gives rpath
Package: libavifile-0.7-dev
Version: 1:0.7.44.20051021-1
Severity: normal
When I use `avifile-config --libs` to get the avifile library
information, it gives the -rpath option, which causes a lintian warning,
when I build a debian package.
Since the libavifile is in the standard location, it does not need to
give the library path. And even if it gives the path, it should not use
the -rpath option.
*** avifile-config.diff
--- avifile-config 2006-01-11 13:20:02.0 +0200
+++ avifile-config 2006-01-11 13:22:38.0 +0200
@@ -105,9 +105,9 @@
fi
if test $lib_dir != /usr/lib; then
-libs=-L$lib_dir -Wl,-rpath,${exec_prefix}/lib -laviplay
+libs=-L$lib_dir -laviplay
else
-libs=-Wl,-rpath,${exec_prefix}/lib -laviplay
+libs=-laviplay
fi
if test $echo_cflags = yes; then
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15
Locale: LANG=en_US, [EMAIL PROTECTED] (charmap=ISO-8859-15)
Versions of packages libavifile-0.7-dev depends on:
ii libavifile-0.7c2 1:0.7.44.20051021-1 shared libraries for AVI read/writ
ii libxft-dev 2.1.7-1 FreeType-based font drawing librar
ii libxrender-dev 1:0.9.0.2-1 X Rendering Extension client libra
libavifile-0.7-dev recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#187275: ITP: swftools -- collection of SWF manipulation and generation tools
Package: wnpp Followup-For: Bug #187275 Owner: Simo Kauppi [EMAIL PROTECTED] * Package name: swftools Version : 0.7.0 Upstream Author : Matthias Kramm [EMAIL PROTECTED] and others * URL : http://www.swftools.org/ * License : GPL Description : Collection of utilities for SWF file manipulation/creation SWF Tools is a collection of SWF (Flash) manipulation and creation utilities. This version of swftools is compiled without the L.A.M.E support to comply with the DFSG. This package includes: pdf2swf, jpeg2swf, png2swf, gif2swf,font2swf, swfcombine, swfextract, swfdump, swfstrings, swfbbox and swfc. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#338648: ntop gives nasty warnings when installing
On Fri, Nov 11, 2005 at 09:11:26PM +0100, Ola Lundqvist wrote: Hello On Fri, Nov 11, 2005 at 09:33:22PM +0200, Simo Kauppi wrote: Package: ntop Version: 3:3.2-1 Severity: minor When isntalling ntop with aptitude, I get nasty warnings from adduser: Well nasty is a bit harsh but I understand what you mean. I agree :) bad choice of a word. Setting up ntop (3.2-1) ... Adding system user: ntop. adduser: Warning: The home dir you specified already exists. Adding system user `ntop'... Adding new group `ntop' (116). Adding new user `ntop' (116) with group `ntop'. The home directory `/var/lib/ntop' already exists. Not copying from `/etc/skel' adduser: Warning: that home directory does not belong to the user you are currently creating Starting network top daemon: Fri Nov 11 16:33:29 2005 NOTE: Interface merge enabled by default Fri Nov 11 16:33:29 2005 Initializing gdbm databases The warnings are probably caused by the fact that ntop installs files into the /var/lib/ntop directory and then calls the adduser with --home /var/lib/ntop in the postinst script. Maybe the adduser should be in a preinst script, so it would not get upset. Maybe that is a solution, yes. Regards, // Ola And while I'm at it, after purging the ntop, the user is still in the /etc/passwd. I don't know why, but maybe the $USER doesn't get set in the postrm. Simo -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14 Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15) Versions of packages ntop depends on: ii adduser 3.77 Add and remove users and groups ii debconf [debconf-2.0] 1.4.58 Debian configuration management sy ii libc6 2.3.5-6GNU C Library: Shared libraries an ii libfreetype6 2.1.7-2.4 FreeType 2 font engine, shared lib ii libgd2-noxpm 2.0.33-2 GD Graphics Library version 2 (wit ii libgdbm3 1.8.3-2GNU dbm database routines (runtime ii libjpeg62 6b-10 The Independent JPEG Group's JPEG ii libpcap0.70.7.2-7System interface for user-level pa ii libpng12-01.2.8rel-5 PNG library - runtime ii libssl0.9.8 0.9.8a-3 SSL shared libraries ii zlib1g1:1.2.3-4 compression library - runtime ntop recommends no packages. -- debconf information: * ntop/user: ntop * ntop/interfaces: eth0 -- - Ola Lundqvist --- / [EMAIL PROTECTED] Annebergsslingan 37 \ | [EMAIL PROTECTED] 654 65 KARLSTAD | | +46 (0)54-10 14 30 +46 (0)70-332 1551 | | http://www.opal.dhs.org UIN/icq: 4912500 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#338648: ntop gives nasty warnings when installing
Package: ntop Version: 3:3.2-1 Severity: minor When isntalling ntop with aptitude, I get nasty warnings from adduser: Setting up ntop (3.2-1) ... Adding system user: ntop. adduser: Warning: The home dir you specified already exists. Adding system user `ntop'... Adding new group `ntop' (116). Adding new user `ntop' (116) with group `ntop'. The home directory `/var/lib/ntop' already exists. Not copying from `/etc/skel' adduser: Warning: that home directory does not belong to the user you are currently creating Starting network top daemon: Fri Nov 11 16:33:29 2005 NOTE: Interface merge enabled by default Fri Nov 11 16:33:29 2005 Initializing gdbm databases The warnings are probably caused by the fact that ntop installs files into the /var/lib/ntop directory and then calls the adduser with --home /var/lib/ntop in the postinst script. Maybe the adduser should be in a preinst script, so it would not get upset. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14 Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15) Versions of packages ntop depends on: ii adduser 3.77 Add and remove users and groups ii debconf [debconf-2.0] 1.4.58 Debian configuration management sy ii libc6 2.3.5-6GNU C Library: Shared libraries an ii libfreetype6 2.1.7-2.4 FreeType 2 font engine, shared lib ii libgd2-noxpm 2.0.33-2 GD Graphics Library version 2 (wit ii libgdbm3 1.8.3-2GNU dbm database routines (runtime ii libjpeg62 6b-10 The Independent JPEG Group's JPEG ii libpcap0.70.7.2-7System interface for user-level pa ii libpng12-01.2.8rel-5 PNG library - runtime ii libssl0.9.8 0.9.8a-3 SSL shared libraries ii zlib1g1:1.2.3-4 compression library - runtime ntop recommends no packages. -- debconf information: * ntop/user: ntop * ntop/interfaces: eth0 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#337618: classpath-tools leaves dangling symlinks after removing
Package: classpath-tools Version: 0.0.20020812-1 Severity: minor After removing classpath-tools, the symlinks in /etc/alternatives/ /usr/share/man/man1/ and /usr/bin/ are left dangling. The prerm script has a line: update-alternatives --remove $one /usr/bin/cp-$one which, I think, should be: update-alternatives --remove $one /usr/bin/$one-cp Also, the postinst script creates an alternative /usr/bin/javadoc, which is also in the gjdoc package . The classpath-tools prerm script doesn't have `update-alternatives --remove javadoc /usr/bin/gjdoc` and the javadoc is left dangling. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14 Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#314955: xawtv: Audio is mono until mute/unmute or adjust the volume
Package: xawtv Version: 3.94-1 Severity: normal After starting the xawtv (or motv) and after changing the channel, the audio seems to be in mono. The audio is switched to stereo when I mute and then unmute the audio or when I adjust the volume. My TV card is Hauppauge WinTV with nicam stereo and FM radio. The broadcast here in Finland is nicam stereo. My sound card is es1370 based card and I am using alsa drivers. My computer has a 3000+ AMD Athlon 64 processor in MSI motherboard with VIA K8T800 Pro chipset. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.12-rc6 Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15) Versions of packages xawtv depends on: ii debconf 1.4.30.13 Debian configuration management sy ii libasound2 1.0.8-3 ALSA library ii libc62.3.2.ds1-22GNU C Library: Shared libraries an ii libfontconfig1 2.3.2-1 generic font configuration library ii libfreetype6 2.1.7-2.4 FreeType 2 font engine, shared lib ii libice6 4.3.0.dfsg.1-14 Inter-Client Exchange library ii libjpeg626b-10 The Independent JPEG Group's JPEG ii liblircclient0 0.7.1pre2-2 LIRC client library ii libncurses5 5.4-4 Shared libraries for terminal hand ii libpng12-0 1.2.8rel-1 PNG library - runtime ii libsm6 4.3.0.dfsg.1-14 X Window System Session Management ii libx11-6 4.3.0.dfsg.1-14 X Window System protocol client li ii libxaw7 4.3.0.dfsg.1-14 X Athena widget set library ii libxext6 4.3.0.dfsg.1-14 X Window System miscellaneous exte ii libxft2 2.1.7-1 FreeType-based font drawing librar ii libxmu6 4.3.0.dfsg.1-14 X Window System miscellaneous util ii libxpm4 4.3.0.dfsg.1-14 X pixmap library ii libxrandr2 4.3.0.dfsg.1-14 X Window System Resize, Rotate and ii libxrender1 1:0.8.3-1 X Rendering Extension client libra ii libxt6 4.3.0.dfsg.1-14 X Toolkit Intrinsics ii libxv1 4.3.0.dfsg.1-14 X Window System video extension li ii libzvbi0 0.2.16-1video Blank Interval decoder (VBI) ii pia 3.94-1 movie player ii scantv 3.94-1 scan TV channels for stations ii v4l-conf 3.94-1 tool to configure video4linux driv ii xawtv-plugins3.94-1 plugins for xawtv and motv ii xlibmesa-gl [libgl1] 4.3.0.dfsg.1-14 Mesa 3D graphics library [XFree86] ii xlibs4.3.0.dfsg.1-14 X Keyboard Extension (XKB) configu ii xutils 4.3.0.dfsg.1-14 X Window System utility programs ii zlib1g 1:1.2.2-4 compression library - runtime -- debconf information: xawtv/freqtab: xawtv/channel-scan: true xawtv/tvnorm: xawtv/makedev: true xawtv/build-config: false -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
