Bug#340738: O: php-clamav

2005-11-25 Thread Neil McGovern
Package: wnpp Severity: normal Hi there, I'm orphaning php-clamav for two reasons: 1) It's been rather superseeded by php-clamavlib 2) Upstream seems to have gone a little dead I'm not convinced that it should be in the archive, and so I'll request it's removal in a week, unless anyone objects

Bug#325689: Bug severity + tags

2005-12-06 Thread Neil McGovern
saturated, leading to a loss of availability of the machine that xloadimage is installed on. Regards, Neil McGovern -- __ .` `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member '. `- gpg: B345BDD3| Webapps Team member `- Please don't cc

Bug#325689: xsetbg keeps opening X clients without closing the old

2005-12-07 Thread Neil McGovern
On Wed, Dec 07, 2005 at 02:35:03AM +, James Troup wrote: Neil McGovern [EMAIL PROTECTED] writes: I'm tagging this bug as security and upping the severity. Justification: A small script can be used to affect the availability of the parent xserver if xloadimage is installed

Bug#339577: Patch for issue

2005-12-15 Thread Neil McGovern
tags 339577 + patch thanks Hi there, Further details are at: http://bugs.php.net/bug.php?id=34704 A patch is available for thsi issue at: http://wikimedia.org/~tstarling/php/exif_IFD2.patch Cheers, Neil -- __ .` `. [EMAIL PROTECTED] | Application Manager : :' ! |

Bug#343858: SQL Injection Vulnerability

2005-12-18 Thread Neil McGovern
to server_privileges.php db_name or checkprivs parameter. Regards, Neil McGovern -- __ .` `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member '. `- gpg: B345BDD3| Webapps Team member `- Please don't cc, I'm subscribed to the list

Bug#343908: RM: php-clamav - Superseeded, Upstream dead

2005-12-18 Thread Neil McGovern
Package: ftp.debian.org Severity: wishlist Hi there, I'm the (ex)maintainer for php-clamav. It's been suceeded by php-clamavlib and upstream is dead. Could you please remove it from the archive? Cheers, Neil -- __ .` `. [EMAIL PROTECTED] | Application Manager : :' !

Bug#327729: reproduced

2005-11-09 Thread Neil McGovern
On Wed, Nov 09, 2005 at 10:29:05AM -0500, Charles Fry wrote: I also verified that this bug is unreproducible with awstats 6.4 in Debian. What needs to be done prior to closing this bug? Hi there, This needs to be checked in 4.0-0.woody.2, which is old-stable (woody). Cheers, Neil -- A.

Bug#332259: [Secure-testing-team] Re: Bug#332259: spampd fails with 'Error in process_request': Modification of read-only variable in Syslog.pm

2005-10-06 Thread Neil McGovern
On Thu, Oct 06, 2005 at 03:30:32PM +0200, Sven Mueller wrote: Package spampd found 332259 2.20-16 Tags 332259 +pending +upstream thanks I created a fixed package (actually two: one for sid/etch and one for sarge), available at https://mail.incase.de/spampd/sarge-security/ respectively at

Bug#332668: Causes kernel oops intermittently

2005-10-07 Thread Neil McGovern
Package: ndiswrapper-source Version: 1.2+1.3rc1-1 Severity: important -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [bug marked as important instead of grave, as this bug is intermittent] Hi there, When I try and run dhclient (or ifup) on my Netgear WG511e: :07:00.0 Ethernet controller:

Bug#329545: ACK: blootbot: Please consider using dbconfig-common for database configuration

2005-10-12 Thread Neil McGovern
Hi there, Just a quick note to say that I have seen this bug report, and am working on it :) Neil -- __ .´ `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member `. `´ gpg: B345BDD3| Webapps Team member `- Please don't cc, I'm

Bug#333359: drivel: changelog talks about libssl0.9.8 transistion, but libssl is not mentioned in build-depends

2005-10-12 Thread Neil McGovern
On Tue, Oct 11, 2005 at 04:34:36PM +0200, Christian T. Steigies wrote: Package: drivel Version: 2.0.2-4 Severity: normal Hi, drivel just built fine on my m68k buildd, but I was wondering about your changelog entry. I see no libssl-dev dependency in the package, it was not installed on the

Bug#335533: missing man page

2005-10-24 Thread Neil McGovern
you please include some? Ref: Policy 12.1 Cheers, Neil McGovern - -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (650, 'unstable'), (1, 'experimental') Architecture: i386 (i686) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux

Bug#335671: spamassassin: Missing depends on libio-socket-inet6-perl

2005-10-25 Thread Neil McGovern
Package: spamassassin Version: 3.1.0a-1 Severity: grave Hi there, When upgrading spamassassin on testing, the following error is produced when trying to start via init.d or directly: Starting SpamAssassin Mail Filter Daemon: [11163] error: IO::Socket::INET6 module is required to use IPv6

Bug#332668: (no subject)

2005-10-31 Thread Neil McGovern
found 332668 1.4-1 thanks Hi there, I'm afraid that the same error is appearing in 1.4-1. There is now a method to reproduce though: 1) Boot computer with card in. 2) Watch it oops/panic (it usually panics) 3) Hard poweroff 4) Boot computer with card in. 5) Watch it play nicely and boot as

Bug#327729: path disclosure [CAN-2005-2732]

2005-10-13 Thread Neil McGovern
I've tested this with stable/testing/unstable and can't get this vulnerability to work, it simply returns the stats for the default config. Not sure about old-security though. Neil -- __ .´ `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member

Bug#333756: ITP: roundcube -- modern, skinable webmail solution for IMAP servers

2005-10-13 Thread Neil McGovern
Package: wnpp Severity: wishlist Owner: Neil McGovern [EMAIL PROTECTED] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package name: roundcube Version : 0.1-20051007 Upstream Author : Thomas Bruederli [EMAIL PROTECTED] URL : http://www.example.org/ License

Bug#333756: ITP: roundcube -- modern, skinable webmail solution for IMAP servers

2005-10-13 Thread Neil McGovern
On Thu, Oct 13, 2005 at 04:46:40PM +, Neil McGovern wrote: Package: wnpp Severity: wishlist Owner: Neil McGovern [EMAIL PROTECTED] Package name: roundcube Version : 0.1-20051007 Upstream Author : Thomas Bruederli [EMAIL PROTECTED] URL : http

Bug#333756: Update

2005-10-21 Thread Neil McGovern
I've been asked to wait before pacgaing this, as upstream are moving to an svn repository, and are going to release a new version soon. Neil -- __ .´ `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member `. `´ gpg: B345BDD3| Webapps Team

Bug#402504: drivel: no space in user name

2006-12-11 Thread Neil McGovern
severity 402504 wishlist tags 402504 + wontfix thanks On Sun, Dec 10, 2006 at 10:36:55PM +0100, Xavier Bestel wrote: I have setup a site with Drupal 5b2, it allows spaces in usernames. Alas, when trying to connect to it with Drivel, it says spaces aren't allowed (with any protocol) and says

Bug#76685: Confirmation of problem in xorg 7.1.0

2006-12-14 Thread Neil McGovern
Hi all, This bug still exists in the latest version of Xorg. Setting depth to 8 alleviates this, but nothing higher will work. Cheers, Neil -- * hermanr feels like a hedgehog having sex... signature.asc Description: Digital signature

Bug#375494: Removing tag

2006-10-18 Thread Neil McGovern
This is not a issue for the security team, removing the tag. It'll be nice if the bug is fixed anyway :) Neil -- * hermanr feels like a hedgehog having sex... signature.asc Description: Digital signature

Bug#394176: Error in text

2006-10-20 Thread Neil McGovern
Package: installation-report Severity: minor Hi there, When asked for the root password in the graphical installer, the text states that you won't see anything as you type in the password, but you see stars :) Neil -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-11 Thread Neil McGovern
Package: debian-policy Version: 3.7.2.2 Severity: wishlist Tags: patch Hi all, I'm including a patch that adds a should not to policy. Title: Embedding code provided in other packages Synopsis: Packages should not include or embed code that is available in

Bug#375496: RoQA: drupal -- fully-featured content management/discussion engine

2006-10-14 Thread Neil McGovern
I agree with this one. It seems I don't have the time to sort it, especially after tryign to clear up it's multiple security holes. Neil -- Tolimar So we can expect stockholm to be elected in 2009? Ganneff isnt the world own3d by ubuntu then? signature.asc Description: Digital signature

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-14 Thread Neil McGovern
On Wed, Oct 11, 2006 at 11:45:39AM +0100, Neil McGovern wrote: I'm including a patch that adds a should not to policy. Now updated, removed C-ism and fix some typos. I'm not sure we can say libraries instead of files, as some programs embed bits of libraries, instead of the whole lot. Which

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-15 Thread Neil McGovern
On Sat, Oct 14, 2006 at 05:30:10PM +0100, Neil McGovern wrote: On Wed, Oct 11, 2006 at 11:45:39AM +0100, Neil McGovern wrote: I'm including a patch that adds a should not to policy. Now updated, removed C-ism and fix some typos. And this time *with* the patch... Neil -- * hermanr

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-15 Thread Neil McGovern
On Sun, Oct 15, 2006 at 11:16:47AM +0200, Bill Allombert wrote: On Sun, Oct 15, 2006 at 09:49:58AM +0100, Neil McGovern wrote: --- policy.sgml +++ policy.sgml @@ -2105,6 +2105,14 @@ the file to the list in filedebian/files/file./p /sect +sect id=embeddedfiles

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-15 Thread Neil McGovern
On Sun, Oct 15, 2006 at 12:04:20PM +0200, Bill Allombert wrote: On Sun, Oct 15, 2006 at 10:44:10AM +0100, Neil McGovern wrote: +sect id=embeddedfiles + headingEmbedding code provided in other packages/heading + p + A package should not embed or include code from

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2006-10-15 Thread Neil McGovern
On Sun, Oct 15, 2006 at 11:57:47AM -0700, Chris Waters wrote: On Sun, Oct 15, 2006 at 11:24:22AM +0100, Neil McGovern wrote: We want to avoid packages shipping their own versions of libraries, as then if a security problem or major bug is discovered in that library, we have lots

Bug#389735: blootbot: fails to install

2006-09-29 Thread Neil McGovern
Hi there, Could you run /usr/sbin/blootbotsetup manyally for me and tell me the output (if any)? Does anythign appear in the logs in /var/log/blootbot/ ? Many thanks, Neil -- * stockholm calls netapp * stockholm calls someone else Ganneff you are typing random numbers on your phone? stockholm

Bug#400777: CVE ID

2006-11-30 Thread Neil McGovern
Hi there, This has been assigned CVE-2006-6169 Please mention this id in the changelog when closing it. Many thanks, Neil McGovern -- hermanr 10 people enough for a Debconf? If they were all Germans, maybe... signature.asc Description: Digital signature

Bug#381664: New upstream release

2006-08-06 Thread Neil McGovern
Package: drivel Severity: wishlist Upstream has released a new version of Drivel (2.0.3): please package it. Love, Me -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel:

Bug#381674: Error in man page

2006-08-06 Thread Neil McGovern
Package: chewmail Version: 1.1-1 Severity: minor Hi there, The chewmail man page falsely specifies an example of: chewmail --read-only -o %Y-%m inbox --read-only is an invalid option, and it should be --only-read Cheers, Neil -- System Information: Debian Release: testing/unstable APT

Bug#382895: sudo timeout

2006-08-15 Thread Neil McGovern
On Mon, Aug 14, 2006 at 11:48:38PM -0400, Michael Gilbert wrote: reassign 382895 sudo retitle 382895 sudo: timeout requires user to unneccesarily enter password thank perhaps this has more to do with sudo than with xfce. for example, with apt-get as an sudo capability, i can run $ sudo

Bug#348852: Crashes with error in in `select_item'

2006-01-19 Thread Neil McGovern
Package: raggle Version: 0.4.4-1 Severity: grave Hi there, Whilst browsing planet.dbeian.org through raggle, viewing the post: http://mjg59.livejournal.com/51563.html Caused raggle to crash with: /usr/bin/raggle:3563:in `select_item': undefined method `[]=' for nil:NilClass (NoMethodError)

Bug#348852: Crashes with error in in `select_item'

2006-01-20 Thread Neil McGovern
On Fri, Jan 20, 2006 at 04:51:41PM +0100, Michael Ablassmeier wrote: hi again, On Thu, Jan 19, 2006 at 02:11:19PM +0100, Michael Ablassmeier wrote: On Thu, Jan 19, 2006 at 12:33:53PM +, Neil McGovern wrote: Whilst browsing planet.dbeian.org through raggle, viewing the post: http

Bug#342943: [Secure-testing-team] Re: Bug#342943: only kronolith2 fixed

2006-01-22 Thread Neil McGovern
On Sun, Jan 22, 2006 at 11:35:15AM +0100, Martin Schulze wrote: Lionel Elie Mamane wrote: I've tried to backport the upstream patch for kronolith 2, but most files touched don't actually exist in kronolith 1, as well as a sizeable part of the code touched in the files that do exist. Here is

Bug#502753: blootbot: piuparts test fails: prompts without using debconf

2008-10-20 Thread Neil McGovern
severity 502753 normal thanks On Sun, Oct 19, 2008 at 04:07:56PM +0200, Lucas Nussbaum wrote: sh: /dev/tty: No such device or address It is reproducible by installing your package in a clean chroot - cleaned up using: debfoster -o MaxPriority=required -o UseRecommends=no -f -n apt

Bug#495968: remove gpicview from lenny?

2008-08-31 Thread Neil McGovern
On Sun, Aug 31, 2008 at 12:11:04AM +0200, Thomas Viehmann wrote: based on the maintainer's comments in the bug log, it seems dubious whether the bug #495968 (insecure /tmp file vulnerability) is fixed in time for lenny. Given that it has never been released with Debian before, it would be

Bug#495531: remove blobandconquer

2008-09-03 Thread Neil McGovern
On Wed, Sep 03, 2008 at 11:11:42PM +0200, Thomas Viehmann wrote: Hi, blobandconquer contains some non-DFSG-compliant material, as Guus, its maintainer, reports in #495531. Futhermore, he states I'm reporting this bug to prevent blobandconquer from getting released with lenny before

Bug#500782: Creates invalid transport streams

2008-10-01 Thread Neil McGovern
Package: vlc Version: 0.8.6-svn20061 Severity: normal Hi, VLC can produce invalid transport streams[0] when transcoding certain types of film. Steps to reproduce: 1) Download the 1080p h.264 mov of Big Buck Bunny. 2) In VLC, Open File... 3) Select the file, and select Stream/Save 4) Select

Bug#478789: Vegastrike 0.5.0 Released

2008-07-30 Thread Neil McGovern
On Mon, Jul 28, 2008 at 07:44:04PM -0400, Andres Mejia wrote: The package vegastrike-data-0.5.0 is suitable to go into main and if uploaded and accepted would fit in the archive at about 1GB total. As 1Gb is 1 CD, I'm not sure how this would be handled. CC-ing debian-cd for comments. Neil --

Bug#383465: Adding lenny ignore tag

2008-08-14 Thread Neil McGovern
tags 383465 +lenny-ignore thanks This is being lenny ignored as there's a fix underway (nouveau) and it's not yet a complete replacement, so nv will still be required. Neil -- twb I don't see why anyone would want to cyber with a 16yo. IME none of them can spell, and they probably

Bug#495796: Missing man page

2008-08-20 Thread Neil McGovern
Package: gourmet Severity: normal Hi, Gourmet seems to miss a man page for the 'gourmet' binary. Debian policy dictates that you should have one installed for each binary, see policy 12.1 It is not very hard to write a man page. See the Man-Page-HOWTO, man(7), the examples created by debmake

Bug#454212: megahal segfaults as soon as it's launched

2008-02-11 Thread Neil McGovern
point update (-release in cc). I can prepare a package if you want. Cheers, Neil -- Neil McGovern SQA - Amino Communications -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#454212: megahal: Confirmed in etch

2007-12-19 Thread Neil McGovern
Package: megahal Version: 9.1.1a-1 Followup-For: Bug #454212 Confirmed using etch i386 (though an amd64 processor). Attached output of megahal and strace. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh

Bug#458532: Clamav vulnerable to symlink attack

2008-01-01 Thread Neil McGovern
Package: clamav Version: 0.90.1-3etch7 Severity: critical Tags: security Two new CVEs for clamav: Name: CVE-2007-6595 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6595 Reference: BUGTRAQ:20071229 TK53 Advisory #2: Multiple vulnerabilities in ClamAV Reference:

Bug#293862: RFA: hawhaw

2005-02-06 Thread Neil McGovern
Package: wnpp Severity: normal Hi all, hawhaw (and hawhaw-doc/hawxy) needs a new maintainer. I'm not using this any more, and don't have the time to maintain it. hawhaw-doc is quite hard to produce from upstream, but this should be easier from version 6.0 Regards, Neil McGovern

Bug#293863: RFA: hawhaw-doc

2005-02-06 Thread Neil McGovern
Package: wnpp Severity: normal Hi all, hawhaw-doc (and hawhaw/hawxy) needs a new maintainer. I'm not using this any more, and don't have the time to maintain it. hawhaw-doc is quite hard to produce from upstream, but this should be easier from version 6.0 Regards, Neil McGovern

Bug#293864: RFA: hawxy

2005-02-06 Thread Neil McGovern
Package: wnpp Severity: normal Hi all, hawxy (and hawhaw-doc/hawhaW) needs a new maintainer. I'm not using this any more, and don't have the time to maintain it. hawhaw-doc is quite hard to produce from upstream, but this should be easier from version 6.0 Regards, Neil McGovern

Bug#249035: blootbot maintainer

2005-02-22 Thread Neil McGovern
Hi all, Wondering wat's happining with this. I'm happy to take it if no one else wants it. If I haven't heared anything in a ouple of weeks, I'll prepare a new upload. Ta, Neil -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key -

Bug#299056: drivel: please take care of /usr/share/mime/*

2005-03-11 Thread Neil McGovern
-mime-database /usr/share/mime must be called. This is called in the Debian postinst and postrm scripts. Regards, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li B345BDD3

Bug#295312: RFH: mysql-dfsg*

2005-03-12 Thread Neil McGovern
Hi there, I'd eb happy to help with both of these. All the best, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li B345BDD3 signature.asc Description: Digital signature

Bug#293864: Orphaning three packages

2005-03-13 Thread Neil McGovern
available, but it may be quite hard to package hawhaw-doc. If no one wants them, I'll ask for their removal. Regards, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li B345BDD3 signature.asc

Bug#293862: Orphaning three packages

2005-03-14 Thread Neil McGovern
On Mon, Mar 14, 2005 at 03:22:09AM +, Martin Michlmayr wrote: * Neil McGovern [EMAIL PROTECTED] [2005-02-12 14:30]: I'm orphaning three packages: hawhaw-doc - the documentation for HAWHAW and HAWXY hawxy - a script that makes PHP-enabled webservers to HAWHAW proxies libphp-hawhaw

Bug#290771: spamassassin: Breaks Mail::Audit scripts

2005-01-16 Thread Neil McGovern
/ doesn't exist. Many thanks, Neil McGovern -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-1-686 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages spamassassin depends on: ii

Bug#291223: ITP: libphp-clam -- PHP bindings for libclamav

2005-01-19 Thread Neil McGovern
Package: wnpp Severity: wishlist Package name: libphp-clam Version : 0.3.0 Upstream Author : Gareth Ardron [EMAIL PROTECTED] URL : http://freshmeat.net/projects/php-clam/ License : GPL Description : PHP bindings for libclamav A small module that

Bug#291223: ITP: libphp-clam -- PHP bindings for libclamav

2005-01-19 Thread Neil McGovern
On Thu, Jan 20, 2005 at 08:52:50AM +1100, Matthew Palmer wrote: On Wed, Jan 19, 2005 at 01:57:36PM +, Neil McGovern wrote: Package name: libphp-clam Version : 0.3.0 Upstream Author : Gareth Ardron [EMAIL PROTECTED] URL : http://freshmeat.net/projects

Bug#229960: still intend to adopt aeromail

2005-02-23 Thread Neil McGovern
On Mon, Feb 21, 2005 at 06:51:52AM +0100, SteX wrote: On Mon, Feb 21, 2005 at 12:21:41AM +0100, Gaudenz Steinlin wrote: Hi Gaudenz, I'm currently checking all packages owned by the Debian QA Group to decide whether they should be removed from Debian or not. In November 2004 you

Bug#229960: still intend to adopt aeromail

2005-02-23 Thread Neil McGovern
binary-indep in debian/rules could do with looking at: 1) You don't need all those dh_* programs running 2) dh_installmanpages: This program is deprecated, switch to dh_installman. Regrads, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg

Bug#297961: ITP: gaim-themes -- Smiley themes collection for gaim

2005-03-04 Thread Neil McGovern
section 6.2.2 of the Developer's Reference Regards, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li B345BDD3 signature.asc Description: Digital signature

Bug#392362: final call: [PROPOSAL] Add should not embed code from other packages

2007-08-07 Thread Neil McGovern
I think we've got consensus, and certainly a couple of seconds to the final draft of this item now. Any objections before this can go in? Neil -- int getRandomNumber() { return 4; // chosen by fair dice roll. guaranteed to be random. } // http://xkcd.com/c221.html signature.asc

Bug#432755: flashplugin-nonfree 9.0.48.0.1etch1 for Stable

2007-07-26 Thread Neil McGovern
On Thu, Jul 26, 2007 at 08:28:41AM +0200, Bart Martens wrote: Hi Stable Debian-Release, Hi Security Team, Not speaking in any official capacity here, but: Lets have a look at the vulnerabilities which still affect etch: CVE-2007-2022 - Unspecified vulnerability ... unspecified impact and

Bug#434308: Fix

2007-07-28 Thread Neil McGovern
This seems to be due to a missing debian/compat. As this is keeping a security hole in testing, I intend to NMU this on Monday unless the maintainer speaks up :) Cheers, Neil -- jmtd irssiproxy appears to be crack cut with washing up powder signature.asc Description: Digital signature

Bug#429403: New list: security-tracker

2007-07-30 Thread Neil McGovern
Again, seconded. This would be very useful for us. Neil -- Drinking coca cola is the most unhealthy thing you can do; it is healthier to drink tap water than coca cola : ) -- Sergio Cu�llar Vald�s signature.asc Description: Digital signature

Bug#404879: Wishlist item - channel keys

2007-01-02 Thread Neil McGovern
severity 404879 wishlist thanks This is a wishlist bug, as blootbot doesn't support keyed channels. I'm also not sure on the point of adding it, as people can still /msg the bot for any information, bypassing the channel key. Neil -- * Maulkin cries Maulkin NB: rm -rf /chroots/sarge while /home

Bug#402316: Patch for hinfo-update

2007-01-05 Thread Neil McGovern
tags 402316 + patch thanks Hello, Please find attached a patch which should solve (at least partially) this problem. * removes -r option from wget. * specifies an output file to ensure you don't end up with thousands of files. * performs perl syntax check to ensure it's a valid perl file.

Bug#404818: Patch + CVE id

2007-01-08 Thread Neil McGovern
tags 404818 + patch thanks This has been assigned CVE id CVE-2006-6799, please mention this in the changelog. The attached pacth *should* fix the issue. I don't think it contains regressions, but I haven't had time to test it. When uploading, please do so with high urgency. Many thanks, Neil

Bug#403034: Downgrading and removing tag

2006-12-16 Thread Neil McGovern
tags 403034 - security severity 403034 normal thanks Firstly, this isn't a security issue. Clamav does segfault if you give it a $loop value of about 10,000, but that wouldn't cause a DoS. As it's not a security issue, it's not grave. Important is defined as: a bug which has a major effect

Bug#412427: ITP: resiprocate -- Session Initiation Protocol (SIP) stack

2007-02-25 Thread Neil McGovern
Package: wnpp Severity: wishlist Owner: Neil McGovern [EMAIL PROTECTED] Package name: resiprocate Version : 1.1rc1 Upstream Author : ReSIProcate Developers [EMAIL PROTECTED] URL : http://www.resiprocate.org License : Vovida Software License v. 1.0 (3

Bug#412427: ITP: resiprocate -- Session Initiation Protocol (SIP) stack

2007-02-26 Thread Neil McGovern
On Mon, Feb 26, 2007 at 12:53:00PM +0330, Kaveh Mousavi Zamani wrote: On 2/25/07, Neil McGovern [EMAIL PROTECTED] wrote: [snip] Erm, You appear to have missed out the content of the mail... Neil -- blarson I use three different operating systems: Sarge, Etch, and Sid. signature.asc

Bug#412515: Please install additional header files

2007-02-26 Thread Neil McGovern
Package: libares-dev Version: 1.1.1-5 Severity: wishlist Hi there, libares generates: ares_dns.h ares.h ares_private.h but only installs ares.h, making a new package I'm building for Debian (resiprocate) FTBFS. Would it be possible to include these? Many thanks, Neil McGovern -- System

Bug#409971: Displays bad information

2007-02-06 Thread Neil McGovern
Package: xfce4-battery-plugin Version: 0.4.90.3-1 Severity: important Hi there, The xfce4-battery-plugin displays the same (broken) information independent of if the power adaptor is plugged in or not. There is no hover over, and no alerts on low power levels. Hence, this makes the plugin

Bug#332668: [ndiswrapper]: Causes kernel oops intermittently

2007-02-08 Thread Neil McGovern
On Thu, Feb 08, 2007 at 08:36:50PM +1000, Kel Modderman wrote: Hi Neil, Is ndiswrapper still unstable for you? or #332668 still valid? Hi there, Unfortunately I don't have the laptop which this was occuring any more, so can't test this :| Neil -- A. Because it breaks the logical sequence

Bug#344949: Bug#333756: Taking Roundcube ITP

2007-02-10 Thread Neil McGovern
On Sat, Feb 10, 2007 at 09:02:31AM +0100, Vincent Bernat wrote: Without any activity on this ITP since more than one year, I take it over. Neil, if you finally do not agree, take the ITP back. Fine by me, it seems I *don't* actually have enough time to look at this. Thanks for taking care of

Bug#410383: stats unlinking - permission denied

2007-02-10 Thread Neil McGovern
Package: ntp Version: 1:4.2.2.p4+dfsg-1 Severity: normal Hi there, ntp-server is producing lots of odd lines in the syslog: Feb 10 06:59:35 cheddar ntpd[32025]: can't open /var/log/ntpstats/peerstats.20070210: Permission denied Feb 10 07:00:39 cheddar ntpd[32025]: can't open

Bug#410383: [pkg-ntp-maintainers] Bug#410383: stats unlinking - permission denied

2007-02-10 Thread Neil McGovern
On Sat, Feb 10, 2007 at 12:59:18PM +0100, Peter Eisentraut wrote: Neil McGovern wrote: 07:01:44 cheddar ntpd[32025]: can't open /var/log/ntpstats/peerstats.20070210: Permission denied However, these files are read/write by the user ntp, as is the directory. selinux? Nope. Neil

Bug#413926: Wordpress removal comments

2007-03-09 Thread Neil McGovern
Hi -ctte and bug followers, I released the last (and only) two security advisories for wordpress, DTSA-33-1[0] and DTSA-34-1[1], so I thought it may be useful for me to comment on this bug. (After writing this mail, I realise it's rather long... so there's a short summary at the end, marked by

Bug#408612: Patch for NMU

2007-01-27 Thread Neil McGovern
for security updates. + + -- Neil McGovern [EMAIL PROTECTED] Sat, 27 Jan 2007 10:23:23 + + geoip (1.3.17-1) unstable; urgency=low * The latest upstream version diff -u geoip-1.3.17/debian/rules geoip-1.3.17/debian/rules --- geoip-1.3.17/debian/rules +++ geoip-1.3.17/debian/rules

Bug#408623: Patch for NMU

2007-01-27 Thread Neil McGovern
; urgency=high + + * Non-maintainer upload by security team + * Added checking for a correctly formatted perl file and stops pager +variable being parsed from the /var/lib files (Closes: #402316) + + -- Neil McGovern [EMAIL PROTECTED] Sat, 27 Jan 2007 11:10:13 + + hinfo (1.02-3) unstable

Bug#398486: RFC: teamspeak-server -- VoIP chat for online gaming (server)

2006-11-17 Thread Neil McGovern
On Tue, Nov 14, 2006 at 03:26:32AM +0100, Adam Cecile wrote: Hello mentors! Could you please review my teamspeak-server package? http://mentors.debian.net/debian/pool/non-free/t/teamspeak-server/teamspeak-server_2.0.20.1-1.dsc Hello, It seems that the TeamSpeak licence doesn't allow

Bug#398486: RFC: teamspeak-server -- VoIP chat for online gaming (server)

2006-11-17 Thread Neil McGovern
On Fri, Nov 17, 2006 at 10:21:17PM +0100, Daniel Baumann wrote: Neil McGovern wrote: This could put us in a tricky legal situation. Until this is cleared up, I object to this ITP. please read the whole license, *including* the special permission given by the vendor. I did, and quoted

Bug#398486: RFC: teamspeak-server -- VoIP chat for online gaming (server)

2006-11-17 Thread Neil McGovern
On Fri, Nov 17, 2006 at 10:38:14PM +0100, Daniel Baumann wrote: Neil McGovern wrote: On Fri, Nov 17, 2006 at 10:21:17PM +0100, Daniel Baumann wrote: Neil McGovern wrote: This could put us in a tricky legal situation. Until this is cleared up, I object to this ITP. please read the whole

Bug#395877: Package lta embeds neon

2006-11-22 Thread Neil McGovern
On Wed, Nov 22, 2006 at 08:40:37AM +0100, Daniel Baumann wrote: Note that this was done on purpose. Otherwise, webdav support doesn't work. Is there a reason why dynamic linking won't work? It would be really nice to get another embedded code copy out of Debian. Neil -- [..] Debian (in the

Bug#421026: RFA: mysql-dfsg-5.0 -- MySQL database server

2007-04-27 Thread Neil McGovern
On Thu, Apr 26, 2007 at 12:04:42AM +0200, Christian Hammers wrote: Package: wnpp Severity: normal Hello I'm looking for an adopter for the MySQL packages as I do no longer have enough time to maintain it and especially prepare the transition to MySQL 5.1 and the intended split-away of

Bug#432200: `require': no such file to load -- debian (LoadError)

2007-07-08 Thread Neil McGovern
Package: apt-listbugs Version: 0.0.80 Severity: grave When running apt-listbugs: /usr/sbin/apt-listbugs:213:in `require': no such file to load -- debian (LoadError) from /usr/sbin/apt-listbugs:213:in `main' It seems that libdpkg-ruby isn't available for ruby1.9, which is linked as my

Bug#432509: [debian-mysql] Bug#432509: cron script to optimize databases

2007-07-10 Thread Neil McGovern
On Tue, Jul 10, 2007 at 11:22:51AM +0200, Robert Millan wrote: Package: mysql-client Severity: wishlist Tags: patch I think a cron script to optimize databases would be useful. There's a significant performance penalty for database fragmentation, and periodic optimization runs seem to be

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2007-06-25 Thread Neil McGovern
On Mon, Jun 18, 2007 at 07:27:43PM +0200, Bill Allombert wrote: On Mon, Jun 18, 2007 at 03:59:12PM +0200, Stefan Fritsch wrote: I second Neil's proposal from Sun, 15 Oct 2006 09:49:58, i.e. the latest version. and I have to object to it because the proposal seems to mix build-time and

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2007-06-26 Thread Neil McGovern
On Mon, Jun 25, 2007 at 05:33:53PM +0200, Bill Allombert wrote: Any suggestions for improved wording? If this is that what you want, then I will certainly not object, but the current draft seems to imply something else. Especially the expected meaning of package does not seems to capture

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2007-06-26 Thread Neil McGovern
On Tue, Jun 26, 2007 at 04:54:31PM +0200, Bill Allombert wrote: Updated :) 1) this library is already packaged in Debian: Removed 2) Optionally ... should not seems internally inconsistent. Changed to: Preferably,... should not But I certainly lift my objection. Great :) Not sure if

Bug#392362: [PROPOSAL] Add should not embed code from other packages

2007-06-26 Thread Neil McGovern
On Tue, Jun 26, 2007 at 03:43:14PM -0700, Russ Allbery wrote: This is one of the things that was discussed at the Policy BoF at DebConf, and Manoj and I would both like to start adding it. In the future, we'll be doing so in a new format that allows rationale to be tagged separately and

Bug#397179: [php-maint] Bug#397179: Please don't add this patch

2007-05-21 Thread Neil McGovern
On Thu, May 17, 2007 at 04:01:12PM +0200, Thijs Kinkhorst wrote: Hi, I'm not in favour of adding this patch. It *will* create different behaviour than the vanilla PHP does - that's the whole purpose of the thing As can any Debian specific patches. Especially for an interpreter (or

Bug#418568: UK mirror updates

2007-04-10 Thread Neil McGovern
Package: mirror Hi there, Just found this mail to -release, and so am forwarding it here as a bug. I'm happy to contact the mirror owners if you need a UK contact person. Cheers, Neil - Forwarded message from Andrew M.A. Cater [EMAIL PROTECTED] - Date: Sun, 8 Apr 2007 15:46:05 +

Bug#418885: Depreciation of egg.trayicon

2007-04-12 Thread Neil McGovern
Package: gtimelog Version: 0.0+svn65-1debian2 Severity: normal Upon startup, gtimelog outputs: /usr/bin/gtimelog:628: DeprecationWarning: the module egg.trayicon is deprecated; equivalent functionality can now be found in pygtk 2.10 import egg.trayicon This should probably be updated before

Bug#409971: [Pkg-xfce-devel] Bug#409971: Displays bad information

2007-04-24 Thread Neil McGovern
On Sun, Apr 22, 2007 at 04:47:26PM +0100, Simon Huggins wrote: On Tue, Feb 06, 2007 at 08:15:27PM +, Neil McGovern wrote: The xfce4-battery-plugin displays the same (broken) information independent of if the power adaptor is plugged in or not. There is no hover over, and no alerts

Bug#325934: ITP: php-clamavlib -- PHP ClamAV Lib - ClamAV Interface for PHP Scripts

2005-08-31 Thread Neil McGovern
On Wed, Aug 31, 2005 at 11:16:31PM +0200, Jonas Genannt wrote: * Package name: php-clamavlib Hi there, How does this differ from php-clamav? Regards, Neil McGovern -- __ .Ž `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member `. `Ž gpg

Bug#325934: ITP: php-clamavlib -- PHP ClamAV Lib - ClamAV Interface for PHP Scripts

2005-08-31 Thread Neil McGovern
On Wed, Aug 31, 2005 at 11:57:38PM +0200, Jonas Genannt wrote: Neil McGovern wrote: On Wed, Aug 31, 2005 at 11:16:31PM +0200, Jonas Genannt wrote: * Package name: php-clamavlib Hi there, How does this differ from php-clamav? It is a complete rewrite and more

Bug#325934: ITP: php-clamavlib -- PHP ClamAV Lib - ClamAV Interface for PHP Scripts

2005-08-31 Thread Neil McGovern
On Thu, Sep 01, 2005 at 12:14:24AM +0200, Jonas Genannt wrote: Package is ready under [1]. I will send an email for searching an sponsor to the mentors list. No need, I'll be happy to sponsor you. Could you register the package (and youself) at http://sponsors.debian.net ? Cheers, Neil --

Bug#319599: ITP: darkplaces - greatly improved engine for original quake1

2005-07-23 Thread Neil McGovern
.) Description : This is the short description (Include the long description here.) -- Regards, Neil McGovern -- A. Because it breaks the logical sequence of discussion Q. Why is top posting bad? gpg key - http://www.halon.org.uk/pubkey.txt

Bug#322535: NMU

2005-08-22 Thread Neil McGovern
Hi there, Can you please update the package. If there's no reply by Friday, I'll prepare an NMU. Many thanks, Neil McGovern -- __ .Ž `. [EMAIL PROTECTED] | Application Manager : :' ! | Secure-Testing Team member `. `Ž gpg: B345BDD3| Webapps Team member

  1   2   3   >