Bug#494926: knetwalk crash when puzzle completed

2008-08-13 Thread Olivier Delemar
Package: knetwalk Version: 4:3.5.5-1 Severity: grave Justification: renders package unusable At the end of each game, whatever is the level, knetwalk crashes with a sig 11 reported by KDE. Here is the stack: (no debugging symbols found) Using host libthread_db library /lib/libthread_db.so.1. (no

Bug#494930: gnash_0.8.3-5(sparc/unstable): FTBFS on sparc

2008-08-13 Thread Martin Zobel-Helas
Package: gnash Version: 0.8.3-5 Severity: serious There was an error while trying to autobuild your package: Automatic build of gnash_0.8.3-5 on lebrun by sbuild/sparc 98 Build started at 20080813-0048 [...] ** Using build dependencies supplied by package: Build-Depends: dpkg-dev

Bug#494931: libnet-cups-perl_0.57-1(sparc/unstable): FTBFS, fails in testcases

2008-08-13 Thread Martin Zobel-Helas
Package: libnet-cups-perl Version: 0.57-1 Severity: serious There was an error while trying to autobuild your package: Automatic build of libnet-cups-perl_0.57-1 on lebrun by sbuild/sparc 98 Build started at 20080812-2130 [...] ** Using build dependencies supplied by package:

Bug#489491: marked as done (vdr-plugin-bitstreamout FTBFS: No libasound in linkage path)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 07:32:06 + with message-id [EMAIL PROTECTED] and subject line Bug#489491: fixed in vdr-plugin-bitstreamout 0.89b-7 has caused the Debian Bug report #489491, regarding vdr-plugin-bitstreamout FTBFS: No libasound in linkage path to be marked as done. This

Bug#494097: git-core: stack-based buffer overflow in git-diff and git-grep

2008-08-13 Thread Gerrit Pape
reopen 494097 found 494097 1:1.5.6.3-1.1 quit On Thu, Aug 07, 2008 at 10:46:01AM +0200, Nico Golde wrote: Hi, the following CVE (Common Vulnerabilities Exposures) id was published for git-core. You can find the upstream patch on: http://kerneltrap.org/mailarchive/git/2008/7/16/2529284

Bug#362288: marked as done (xzgv: exploitable buffer overflow with crafted JPEG images [CVE-2006-1060])

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 10:04:00 +0200 with message-id [EMAIL PROTECTED] and subject line Closing old security bug with versioning 2 has caused the Debian Bug report #362288, regarding xzgv: exploitable buffer overflow with crafted JPEG images [CVE-2006-1060] to be marked as done.

Processed: Re: Bug#494097: git-core: stack-based buffer overflow in git-diff and git-grep

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reopen 494097 Bug#494097: git-core: stack-based buffer overflow in git-diff and git-grep 'reopen' may be inappropriate when a bug has been closed with a version; you may need to use 'found' to remove fixed versions. Bug reopened, originator not changed.

Bug#398524: marked as done (wmaloader: postinst fails: /var/lib/dpkg/info/wmaloader.postinst: line 9: addgroup: command not found)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 10:09:27 +0200 with message-id [EMAIL PROTECTED] and subject line closing with correct version has caused the Debian Bug report #398524, regarding wmaloader: postinst fails: /var/lib/dpkg/info/wmaloader.postinst: line 9: addgroup: command not found to be

Bug#417142: still present in current version

2008-08-13 Thread Thijs Kinkhorst
found 417142 2.0-2 It seems like the fix for the bug was accidentally reverted, as the exact same problem is again present in the current version. Can you please investigate and fix? The bug is release critical. Thijs pgpQyb4vB7Zj7.pgp Description: PGP signature

Processed (with 4 errors): still present in current version

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: found 417142 2.0-2 Bug#417142: depends on non-essential package debconf in postrm Bug marked as found in version 2.0-2 and reopened. It seems like the fix for the bug was accidentally reverted, as the exact same Unknown command or malformed arguments

Bug#494936: bnx2 fails to load on bootup, succeeds on manual load

2008-08-13 Thread Nico Schottelius
Package: firmware-bnx2 Version: 0.12 Severity: grave BNX2 fails to load the firmware on bootup. If I rmmod bnx2 and modprobe bnx2 after bootup, the nics appear. Log can be found at http://home.schottelius.org/~nico/unix/linux/debian/dmesg.2.6.25-2%2bbnx2%2bmanual-load -- System Information:

Bug#472040: marked as done (python-coverage: ftbfs with python-central 0.6)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 10:33:59 +0200 with message-id [EMAIL PROTECTED] and subject line Re: python-coverage: ftbfs with python-central 0.6 has caused the Debian Bug report #472040, regarding python-coverage: ftbfs with python-central 0.6 to be marked as done. This means that you

Bug#413184: marked as done ([powerpci/mac] partman-md appears to not write back the raid flag to partitions.)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 10:42:25 +0200 with message-id [EMAIL PROTECTED] and subject line Re: [powerpci/mac] partman-md appears to not write back the raid flag to partitions. has caused the Debian Bug report #413184, regarding [powerpci/mac] partman-md appears to not write back the

Bug#493714: openttd: Network exploitable buffer overrun

2008-08-13 Thread Thijs Kinkhorst
I got a private mail by the maintainer stating: New version should be uploaded this weekend, I'll mail the release team with details when that happens. I'm having a bit of a problem with this upload, since my regular sponsor seems to be away. I had asked a DD to upload it last weekend,

Bug#445308: marked as done (Multiple symlink vulnerabilities)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 11:40:44 +0200 with message-id [EMAIL PROTECTED] and subject line fixed in upstream version has caused the Debian Bug report #445308, regarding Multiple symlink vulnerabilities to be marked as done. This means that you claim that the problem has been dealt

Bug#432195: marked as done (vgrabbj: freetype1 deprecation)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 09:18:02 + with message-id [EMAIL PROTECTED] and subject line Bug#432195: fixed in vgrabbj 0.9.6-3.1 has caused the Debian Bug report #432195, regarding vgrabbj: freetype1 deprecation to be marked as done. This means that you claim that the problem has

Processed: tagging 494682

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.35 tags 494682 pending Bug#494682: citadel-common: Fails badly at handling group creation. There were no tags set. Tags added: pending End of message, stopping processing here. Please

Bug#493714: marked as done (openttd: Network exploitable buffer overrun)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 09:17:24 + with message-id [EMAIL PROTECTED] and subject line Bug#493714: fixed in openttd 0.6.2-1 has caused the Debian Bug report #493714, regarding openttd: Network exploitable buffer overrun to be marked as done. This means that you claim that the

Processed: patch available

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: tags 492870 fixed-upstream patch Bug#492870: CVE-2008-3231: DoS via crafted OGG file Tags were: security Tags added: fixed-upstream, patch thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system

Bug#492870: patch available

2008-08-13 Thread Thijs Kinkhorst
tags 492870 fixed-upstream patch thanks Hi, Upstream patch is here: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=967a8e515380;style=gitweb Thijs pgp6tJGMtaEt3.pgp Description: PGP signature

Bug#446864: marked as done (missing dependency on libxaw7-dev)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 11:23:09 +0200 with message-id [EMAIL PROTECTED] and subject line fixed in 5.1.1-2 has caused the Debian Bug report #446864, regarding missing dependency on libxaw7-dev to be marked as done. This means that you claim that the problem has been dealt with. If

Bug#494097: git-core point release for lenny

2008-08-13 Thread Gerrit Pape
Hi, #494097 should be fixed in lenny. Instead of adding two patches to the current version 1.5.6.3-1.1, I suggest to update to the point release 1.5.6.5, which includes some more fixes. Is that okay with you?, upstream's point releases usually are of good quality. Thanks, Gerrit. -- To

Bug#377049: marked as done (gimp: Buffer overrun in XCF reading code)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 11:45:59 +0200 with message-id [EMAIL PROTECTED] and subject line Also fixed in 2.3 branch has caused the Debian Bug report #377049, regarding gimp: Buffer overrun in XCF reading code to be marked as done. This means that you claim that the problem has been

Bug#406207: marked as done (crm114: Message-ID is changed)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 11:51:10 +0200 with message-id [EMAIL PROTECTED] and subject line fixed in experimental branch aswell has caused the Debian Bug report #406207, regarding crm114: Message-ID is changed to be marked as done. This means that you claim that the problem has been

Bug#494940: libloudmouth1-0: clients constantly get kicked

2008-08-13 Thread Paul van Tilburg
Package: libloudmouth1-0 Version: 1.4.1-1 Severity: grave Justification: renders package unusable Hi! Clients that use LoudMouth constantly get kicked when used (at least) in combination with ejabberd. While my client (Gossip) on a NATed machine seems to have no problems, all clients (Gossip,

Processed (with 1 errors): merging

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reassign 493438 libpqxx Bug#493438: kpogre: FTBFS: Link errors with libpqxx Bug reassigned from package `kpogre' to `libpqxx'. forcemerge 492693 493438 Bug#492693: impossible to link due to missing export in .so Bug#493438: kpogre: FTBFS: Link errors

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Nico Golde
Hi Sven, * Sven Dowideit [EMAIL PROTECTED] [2008-08-13 11:05]: I'd need a second opinion on this report please. My recollection was that we squashed this in Bug#444982 If not, is there any chance that automated tool users are at least required to help out with a bit more information that

Bug#494097: git-core: stack-based buffer overflow in git-diff and git-grep

2008-08-13 Thread Nico Golde
Hi Gerrit, * Gerrit Pape [EMAIL PROTECTED] [2008-08-13 11:04]: On Thu, Aug 07, 2008 at 10:46:01AM +0200, Nico Golde wrote: the following CVE (Common Vulnerabilities Exposures) id was published for git-core. You can find the upstream patch on:

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
Nico, /var/run - I'll keep that in mind for post lenny - I was really hoping that debian had a place for this sort of session data, but didn't manage to get there - thanks :) I'm hoping for the next release that I can move everything into /var/twiki (rather than scattered around the fs,

Processed: merging

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reassign 493438 libpqxx-2.6.9ldbl Bug#493438: kpogre: FTBFS: Link errors with libpqxx Bug reassigned from package `libpqxx' to `libpqxx-2.6.9ldbl'. forcemerge 492693 493438 Bug#492693: impossible to link due to missing export in .so Bug#493438:

Processed: found 494097 in 1:1.5.6.3-1+lenny1

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.35 found 494097 1:1.5.6.3-1+lenny1 Bug#494097: git-core: stack-based buffer overflow in git-diff and git-grep Bug marked as found in version 1:1.5.6.3-1+lenny1. End of message,

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Steve Kemp
On Wed Aug 13, 2008 at 11:31:54 +1000, Sven Dowideit wrote: I will have to assume that this report is indeed incorrect unless I hear otherwise. On my Debian Etch system: [EMAIL PROTECTED]:~$ apt-get source twiki Reading package lists... Done Building dependency tree... Done Need to get

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 20:06 +1000, Sven Dowideit a écrit : Nico, /var/run - I'll keep that in mind for post lenny - I was really hoping that debian had a place for this sort of session data, but didn't manage to get there - thanks :) Maybe there is a web apps policy to be determined

Bug#494532: marked as done (depends on non-existing library libparted1.7-udeb in lenny)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 12:52:35 +0200 (CEST) with message-id [EMAIL PROTECTED] and subject line Re: Bug#494532: lenny di-2 on dell optiplex 755 fail disk detection has caused the Debian Bug report #494532, regarding depends on non-existing library libparted1.7-udeb in lenny to be

Bug#494949: Fails charset conversion, if E-Mail uses anything else but US-ASCII

2008-08-13 Thread Juhapekka Tolvanen
Package: muttprint Version: 0.72d-9 Severity: grave Whenever I try to print any E-Mail that uses some other charset than US-ASCII, it shows just this text in dialog: Clip here │ Muttprint Version 0.72d -- Error│ │

Bug#494097: marked as done (git-core: stack-based buffer overflow in git-diff and git-grep)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 11:02:11 + with message-id [EMAIL PROTECTED] and subject line Bug#494097: fixed in git-core 1:1.5.6.3-1+lenny2 has caused the Debian Bug report #494097, regarding git-core: stack-based buffer overflow in git-diff and git-grep to be marked as done. This

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Nico Golde
Hi Olivier, * Olivier Berger [EMAIL PROTECTED] [2008-08-13 12:53]: Le mercredi 13 août 2008 à 20:06 +1000, Sven Dowideit a écrit : [...] I'm hoping for the next release that I can move everything into /var/twiki (rather than scattered around the fs, including pollution the perl lib dirs)

Bug#494097: git-core_1.5.6.3-1+lenny2_amd64.changes ACCEPTED

2008-08-13 Thread Nico Golde
Hi Gerrit, * Debian Installer [EMAIL PROTECTED] [2008-08-13 13:25]: Mapping testing-security to testing-proposed-updates. Accepted: git-arch_1.5.6.3-1+lenny2_all.deb to pool/main/g/git-core/git-arch_1.5.6.3-1+lenny2_all.deb git-core_1.5.6.3-1+lenny2.diff.gz to

Bug#494246: Problem caused by dot in option name

2008-08-13 Thread Olivier Tétard
Hello, This bug was solved in latest upstream's version[1]. I attach the patch that solves the problem. 1. http://bazaar.launchpad.net/~bzr/bzr/bzr.1.6/revision/3545.1.1?filter_file_id=rst2html.py-20060817120932-gn177u8v0008txhu-1file_id=tools-20050707102144-fee2fd7fd6ddfc1c Thanks,

Bug#494949: More info

2008-08-13 Thread Juhapekka Tolvanen
I checked out other bugs of this package and then bug #460166 seemed interesting. I copied the whole E-Mail as a file to koe.txt (It was easy, because I use Maildir-formatted folders). This command caused the same errors as seen in my initial bug-report: muttprint koe.txt With this command I

Processed: Tag 494246 patch

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: tags 494246 patch Bug#494246: bzr: FTBFS: doc/en/user-reference/bzr_man.txt:2344: (WARNING/2) Option list ends without a blank line; unexpected unindent. There were no tags set. Tags added: patch thanks Stopping processing here. Please contact me if

Bug#494949: More info

2008-08-13 Thread Juhapekka Tolvanen
On Wed, 13 Aug 2008, +14:47:11 EEST (UTC +0300), Juhapekka Tolvanen [EMAIL PROTECTED] pressed some keys: With this command I was able to actually print my E-Mail without error: LANG=en_US muttprint koe.txt Only Scandinavic characters in Subject-header where messed up, but body text was

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
Steve, yes but your information is outdated. (although i'm embarrassed that we didn't also resolve it in the etch version :/) http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982 Found in versions 4.1.2-1, twiki/1:4.1.2-2 Fixed in version twiki/1:4.1.2-3 and so, it seems to me that we're ok

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
na, sorry, twiki dumps session data into /tmp/twiki the /var vs /usr thing is a separate thing thta non-DD's get frustrated with - basically, most people expect twiki to be laid out in the same way as it is on non-debian system - everything under one twiki dir. Debian packaging policy confuses

Bug#494648: marked as done (The possibility of attack with the help of symlinks in some Debian packages)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 22:06:46 +1000 with message-id [EMAIL PROTECTED] and subject line duplicate of Bug#444982, which was fixed in Oct 2007 has caused the Debian Bug report #494648, regarding The possibility of attack with the help of symlinks in some Debian packages to be marked

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
Yes, I would suggest that there is a need for more detailed web apps policies - not just for where session files should be placed safely, but also things like safe and consistent ways to configure the webservers (apache1 vs apache2 are (or were last i looked) already a pain), and similarly for

Bug#483337: mt-daapd: Is there any hope for getting this in lenny? I'm happy to help...

2008-08-13 Thread Reuben Thomas
Package: mt-daapd Version: 0.2.4+r1376-1.1+etch1 Followup-For: Bug #483337 I use mt-daapd, and I'm rather aghast to see it disappear from lenny. I'd be happy to test any fix if that would help it get into lenny. Please let me know. -- System Information: Debian Release: lenny/sid APT prefers

Bug#494648: closed by Sven Dowideit [EMAIL PROTECTED] (duplicate of Bug#444982, which was fixed in Oct 2007)

2008-08-13 Thread Dmitry E. Oboukhov
reopen 494648 thanks If you want, You may merge the bugs 444982 494648, dont close! $ ln -s /etc/shadow /tmp/twiki $ LANG=C sudo apt-get install twiki Reading package lists... Done Building dependency tree Reading state information... Done Setting up twiki (1:4.1.2-3.2) ... Adding

Processed: Re: Bug#494648 closed by Sven Dowideit [EMAIL PROTECTED] (duplicate of Bug#444982, which was fixed in Oct 2007)

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reopen 494648 Bug#494648: The possibility of attack with the help of symlinks in some Debian packages Bug reopened, originator not changed. thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 11:12 +0100, Steve Kemp a écrit : On Wed Aug 13, 2008 at 11:31:54 +1000, Sven Dowideit wrote: I know that I can coerce it into working: [EMAIL PROTECTED]:~$ sudo rm -rf /tmp/twiki [EMAIL PROTECTED]:~$ ln -s /etc/shadow /tmp/twiki [EMAIL PROTECTED]:~$ sudo

Bug#494648: closed by Sven Dowideit [EMAIL PROTECTED] (duplicate of Bug#444982, which was fixed in Oct 2007)

2008-08-13 Thread Sven Dowideit
I have bugger all knowledge on how to use the debian bugs system, and to be honest, keep finding it quite unhelpful. so. you have now bothered to tell me what the problem is. thanks :/ weird that we worked on this last year, but this was not noticed. I would still like to know what exactly _is_

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
no, its got nothing to do with /var/lib/twiki/data etc, its the location for session data - produced by CGI::Session etc. Olivier Berger wrote: Le mercredi 13 août 2008 à 11:12 +0100, Steve Kemp a écrit : On Wed Aug 13, 2008 at 11:31:54 +1000, Sven Dowideit wrote: I know that I can coerce

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Steve Kemp
On Wed Aug 13, 2008 at 22:51:00 +1000, Sven Dowideit wrote: no, its got nothing to do with /var/lib/twiki/data etc, its the location for session data - produced by CGI::Session etc. Yes it does. The code we're talking about is contained in the file debian/postinst, and only executes

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 12:52 +0200, Olivier Berger a écrit : Le mercredi 13 août 2008 à 20:06 +1000, Sven Dowideit a écrit : Nico, /var/run - I'll keep that in mind for post lenny - I was really hoping that debian had a place for this sort of session data, but didn't manage to get

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Dmitry E. Oboukhov
On 13:57 Wed 13 Aug , Steve Kemp wrote: SK On Wed Aug 13, 2008 at 22:51:00 +1000, Sven Dowideit wrote: SK no, its got nothing to do with /var/lib/twiki/data etc, its the location SK for session data - produced by CGI::Session etc. SK Yes it does. SK The code we're talking about is contained

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 13:57 +0100, Steve Kemp a écrit : My understanding of the discussion thus far is: a. This is a genuine bug. b. Which has been fixed. c. Except in Etch. No, as : Le mercredi 13 août 2008 à 16:39 +0400, Dmitry E. Oboukhov a écrit : reopen 494648

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
so Dmitry, if you were trying to actually help get this fixed, I presume you would have suggested that I just patch the code to rm /tmp/twiki and then create it? or what are you actually suggesting? Sven Dmitry E. Oboukhov wrote: Where? $curl

Bug#494648: closed by Sven Dowideit [EMAIL PROTECTED] (duplicate of Bug#444982, which was fixed in Oct 2007)

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 22:49 +1000, Sven Dowideit a écrit : I have bugger all knowledge on how to use the debian bugs system, and to be honest, keep finding it quite unhelpful. Please don't send anything but commands to [EMAIL PROTECTED] too ;) so. you have now bothered to tell me what

Bug#494969: sympa: Leftover debug code may lead to data loss

2008-08-13 Thread Olivier Berger
Package: sympa Version: 5.2.3-1.2+etch1 Severity: critical Justification: causes serious data loss Tags: security Thanks to Dmitry E. Oboukhov, for spotting that the following code in Sympa leads to potential data loss due to symlink attacks (I think) : In wwsympa.fcgi : open TMP,

Bug#491505: [package varmon] varmon segfaults on Etch i386

2008-08-13 Thread Christoph Franzen
Julien, Am Mon, 11 Aug 2008 22:35:12 +0200 schrieb Julien Danjou [EMAIL PROTECTED]: At 1218482627 time_t, Philipp Kern wrote: there is a Release Critical bug filed against your package. Unfortunately this package (varmon) needs special hardware to test it. Could you please look if the

Processed: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: found 494648 1:4.0.5-9.1 Bug#494648: The possibility of attack with the help of symlinks in some Debian packages Bug marked as found in version 1:4.0.5-9.1. found 494648 1:4.1.2-3.2 Bug#494648: The possibility of attack with the help of symlinks in

Processed: your mail

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: found 494969 5.3.4-5 Bug#494969: sympa: Leftover debug code may lead to data loss Bug marked as found in version 5.3.4-5. thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator

Bug#493363: Some SVG images make kio_thumbnail / Konqueror take 95% CPU and more than 1GB of memory

2008-08-13 Thread Steve Cotton
forwarded 493363 http://bugs.kde.org/show_bug.cgi?id=106847 quit Nice. could you forward this patch to the KDE SVN, so they can merge it into KDE 3.5.10? I would do but it is your patch :D Thanks Ana, I've sent it to their Bugzilla. Steve -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Processed: Re: Bug#493363: Some SVG images make kio_thumbnail / Konqueror take 95% CPU and more than 1GB of memory

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: forwarded 493363 http://bugs.kde.org/show_bug.cgi?id=106847 Bug#493363: ksvg: Some SVG images make kio_thumbnail / Konqueror take 95% CPU and more than 1GB of memory Noted your statement that Bug has been forwarded to

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Julien Cristau
On Wed, Aug 13, 2008 at 23:24:47 +1000, Sven Dowideit wrote: so Dmitry, if you were trying to actually help get this fixed, I presume you would have suggested that I just patch the code to rm /tmp/twiki and then create it? or what are you actually suggesting? No. Don't touch/use

Processed: bug 494969 is forwarded to http://sourcesup.cru.fr/tracker/index.php?func=detailaid=4430

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.35 forwarded 494969 http://sourcesup.cru.fr/tracker/index.php?func=detailaid=4430 Bug#494969: sympa: Leftover debug code may lead to data loss Noted your statement that Bug has been

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
these are _WEB_ session files. there are no user directories. Dmitry E. Oboukhov wrote: SD so Dmitry, SD if you were trying to actually help get this fixed, I presume you would SD have suggested that I just patch the code to SD rm /tmp/twiki SD and then create it? SD or what are you

Bug#491505: [package varmon] varmon segfaults on Etch i386

2008-08-13 Thread Julien Danjou
Hi Christoph, At 1218635679 time_t, Christoph Franzen wrote: However, I need a few days/weeks to set that up in my spare time. Please tell me if you are interested and provide the following information: 1) Your desired user name on the machine jd 2) Software packages that MUST be

Bug#494926: knetwalk crash when puzzle completed

2008-08-13 Thread Ana Guerrero
On Wed, Aug 13, 2008 at 08:03:28AM +0200, Olivier Delemar wrote: Package: knetwalk Version: 4:3.5.5-1 Severity: grave Justification: renders package unusable At the end of each game, whatever is the level, knetwalk crashes with a sig 11 reported by KDE. Could you instal kdegames-dbg and

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
So are you suggesting that I instead fill up /tmp directly with thousands of cgisess_123412 files? because the location that those files go into needs to be predictable - so that each cgi script goes to the same place. Julien Cristau wrote: On Wed, Aug 13, 2008 at 23:24:47 +1000, Sven

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
Le mercredi 13 août 2008 à 16:19 +0200, Julien Cristau a écrit : On Wed, Aug 13, 2008 at 23:24:47 +1000, Sven Dowideit wrote: so Dmitry, if you were trying to actually help get this fixed, I presume you would have suggested that I just patch the code to rm /tmp/twiki and then

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
No, I was told by Nico or Joey that web apps should not be filling up the /var filesystem with session files. this is apparently also _not_ a solution. /tmp was determined in October 2007 as the best place Dmitry E. Oboukhov wrote: On 00:17 Thu 14 Aug , Sven Dowideit wrote: SD these are

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
Yes, you should not share CGI::Session files, it does lead to leakage, and really odd side effects. Olivier Berger wrote: Le mercredi 13 août 2008 à 16:19 +0200, Julien Cristau a écrit : On Wed, Aug 13, 2008 at 23:24:47 +1000, Sven Dowideit wrote: so Dmitry, if you were trying to actually

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Dmitry E. Oboukhov
On 00:38 Thu 14 Aug , Sven Dowideit wrote: SD No, I was told by Nico or Joey that web apps should not be filling up SD the /var filesystem with session files. SD this is apparently also _not_ a solution. SD /tmp was determined in October 2007 as the best place Ok, Yoy can do it (in your

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Sven Dowideit
Dmitry E. Oboukhov wrote: On 00:38 Thu 14 Aug , Sven Dowideit wrote: SD No, I was told by Nico or Joey that web apps should not be filling up SD the /var filesystem with session files. SD this is apparently also _not_ a solution. SD /tmp was determined in October 2007 as the best

Bug#445772: marked as done (gnat-gps: FTBFS: unsat b-deps: libgnatprj-dev: Depends: gnat-4.2 (= 4.2.1-7) but it is not going to be installed)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 15:17:06 + with message-id [EMAIL PROTECTED] and subject line Bug#445772: fixed in gnat-gps 4.3~2008.08.09 has caused the Debian Bug report #445772, regarding gnat-gps: FTBFS: unsat b-deps: libgnatprj-dev: Depends: gnat-4.2 (= 4.2.1-7) but it is not going

Bug#494303: use synaptic

2008-08-13 Thread Marius Mikucionis
doh! I also bumped into this one on a more outdated machine. interestingly, the other two (more up-to-date) ones did not show this problem and upgrade silently succeeded. I guess these packages were not designed to be upgraded in one big hop skipping some intermediate versions. I worked-around

Bug#494982: offlineimap: crashes on reusing an open connection

2008-08-13 Thread Tanguy Ortolo
Package: offlineimap Version: 6.0.2 Severity: grave Tags: patch Justification: renders package unusable OfflineIMAP crashes with backtrace, I think when it tries to reuse an already open connection. Here is the backtrace, that is rather self-explaining: Main program terminated with exception:

Bug#493446: marked as done (gpmudmon-applet: FTBFS: Could not find gtkdatabox_marker.h)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 15:32:04 + with message-id [EMAIL PROTECTED] and subject line Bug#493446: fixed in gpmudmon-applet 0.4.4-1 has caused the Debian Bug report #493446, regarding gpmudmon-applet: FTBFS: Could not find gtkdatabox_marker.h to be marked as done. This means that

Bug#494677: libapache2-mod-perl2: FTBFS: dpkg-checkbuilddeps: Unmet build dependencies: libcgi-pm-perl (= 3.33)

2008-08-13 Thread Niko Tyni
On Mon, Aug 11, 2008 at 03:10:17PM +0300, Niko Tyni wrote: Package: libapache2-mod-perl2 Version: 2.0.4-2 Severity: serious As explained in http://lists.debian.org/debian-release/2008/08/msg00557.html 2.0.4-2 is failing on all autobuilders because of an sbuild bug. We'll have to

Bug#494677: libapache2-mod-perl2: FTBFS: dpkg-checkbuilddeps: Unmet build dependencies: libcgi-pm-perl (= 3.33)

2008-08-13 Thread Adeodato Simó
* Niko Tyni [Wed, 13 Aug 2008 19:11:12 +0300]: It will take at least a week to get the fix in unstable, as we want 5.10.0-13 in testing first. We could either let the unbuildable libapache2-mod-perl2/2.0.4-2 stay in sid until then, That sounds fine from a release management point of view.

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Dmitry E. Oboukhov
SD On 00:38 Thu 14 Aug , Sven Dowideit wrote: SD No, I was told by Nico or Joey that web apps should not be filling up SD the /var filesystem with session files. SD SD this is apparently also _not_ a solution. SD SD /tmp was determined in October 2007 as the best place SD SD Ok, Yoy can do

Bug#494648: The possibility of attack with the help of symlinks in some Debian packages

2008-08-13 Thread Olivier Berger
On Wed, Aug 13, 2008 at 10:12:29PM +1000, Sven Dowideit wrote: the best irony of this bug, is : I've implemented Joey's suggestion of 1777 O_EXCL - mostly the files in tmp are written by CGI::Session, that takes care of things. I also moved the 1777 tmp dir back to /tmp/twiki, as per

Bug#494215: FTBFS: libtool: link: `/usr/lib/libct.la' is not a valid libtool archive

2008-08-13 Thread Riku Voipio
reassign 494215 libgda2-dev thanks The .la files of libgda2-dev refer to .la file but libgda2-dev has no depends freetds-dev. Alternatively /usr/lib/libct.la should be dropped from the .la files provided by libgda2-dev, but that might be trickier.. This breaks building of libgdamm1.3, possibly

Processed: FTBFS: libtool: link: `/usr/lib/libct.la' is not a valid libtool archive

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reassign 494215 libgda2-dev Bug#494215: libgdamm1.3: FTBFS: libtool: link: `/usr/lib/libct.la' is not a valid libtool archive Bug reassigned from package `libgdamm1.3' to `libgda2-dev'. thanks Stopping processing here. Please contact me if you need

Bug#494268: atd: /etc/init.d/atd stop kills itself

2008-08-13 Thread Chris Lawrence
On Tue, Aug 12, 2008 at 10:56 PM, Rob Browning [EMAIL PROTECTED] wrote: severity 494268 serious thanks I suppose this should probably be serious, since it prevents /etc/init.d/at from stopping the server. I think it may also kill an attempt to run /etc/init.d/atd restart. I'm also cc'ing

Bug#494982: offlineimap: crashes on reusing an open connection

2008-08-13 Thread John Goerzen
severotu 494982 normal thanks Tanguy Ortolo wrote: Package: offlineimap Version: 6.0.2 Severity: grave Tags: patch Justification: renders package unusable I will be uploading a fix shortly. Python in etch and sid both are 2.5, so dropping severity. -- John -- To UNSUBSCRIBE, email to

Bug#495006: listadmin: 2.40 update broke it against Mailman-2.1.9/etch

2008-08-13 Thread Johannes Stezenbach
Package: listadmin Version: 2.40-2.1 Severity: grave Tags: patch Justification: renders package unusable 2.32-1 worked, but after update to 2.40-2.1 listadmin only displays fetching data for foo ... nothing in queue. This patch fixes it for me: --- /usr/bin/listadmin 2008-08-11

Bug#495005: xsane segfaults

2008-08-13 Thread Julien Danjou
Package: xsane Version: 0.995-4 Severity: serious Run xsane with only a hostname in net.conf to access remotely the scanner. Press scan. It ask for user/password (?), I just click ok or cancel, and a couple of seconds later it happens: (gdb) bt full #0 0x7f23f312ea43 in free () from

Processed: reassign 495005 to libsane

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.35 reassign 495005 libsane Bug#495005: xsane segfaults Bug reassigned from package `xsane' to `libsane'. End of message, stopping processing here. Please contact me if you need

Bug#495005: xsane segfaults

2008-08-13 Thread Julien BLACHE
reassign 495005 libsane 1.0.19-15 severity 495005 normal retitle 495005 [net] segfault with hpaio as the remote backend thanks Julien Danjou [EMAIL PROTECTED] wrote: Hi, Run xsane with only a hostname in net.conf to access remotely the scanner. Press scan. It ask for user/password (?), I

Processed: Re: Bug#495005: xsane segfaults

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reassign 495005 libsane 1.0.19-15 Bug#495005: xsane segfaults Bug reassigned from package `libsane' to `libsane'. severity 495005 normal Bug#495005: xsane segfaults Severity set to `normal' from `serious' retitle 495005 [net] segfault with hpaio as

Bug#494982: marked as done (offlineimap: crashes on reusing an open connection)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 19:02:03 + with message-id [EMAIL PROTECTED] and subject line Bug#494982: fixed in offlineimap 6.0.3 has caused the Debian Bug report #494982, regarding offlineimap: crashes on reusing an open connection to be marked as done. This means that you claim that

Bug#491621:

2008-08-13 Thread Rince
I have 0.8.0 in git locally - I seem to have typoed my password too many times in a short period, so I've temporarily been timed out of pushing things to git. I'll push it when I get home (~4 hours), and then I'll submit the package for review and inclusion in unstable. - Rich On Tue, Aug 12,

Bug#495010: linux-patch-grsecurity2: Doesn't apply against Lenny kernel

2008-08-13 Thread Moritz Muehlenhoff
Package: linux-patch-grsecurity2 Severity: grave Justification: renders package unusable Both the pax-linux and the grsecurity-2.1.11 patch don't apply against 2.6.25 and 2.6.26. Since Lenny will mostly likely ship with 2.6.26, please update the patch to it. Cheers, Moritz -- System

Bug#495011: [snowballz] crashes with TypeError

2008-08-13 Thread Simon Wenner
Package: snowballz Version: 0.9.5.1-1 Severity: serious I played several levels (with default settings) and all of them crash after about one minute of playing with the following Python Type Error: File rabbyt._anims.pyx, line 230, in rabbyt._anims.AnimSlot.anim.__set__ TypeError: Cannot convert

Processed: tagging 489773

2008-08-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.6~etch1 tags 489773 + pending Bug#489773: freeradius listening on wrong port There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if

Bug#492870: marked as done (CVE-2008-3231: DoS via crafted OGG file)

2008-08-13 Thread Debian Bug Tracking System
Your message dated Wed, 13 Aug 2008 19:17:06 + with message-id [EMAIL PROTECTED] and subject line Bug#492870: fixed in xine-lib 1.1.14-2 has caused the Debian Bug report #492870, regarding CVE-2008-3231: DoS via crafted OGG file to be marked as done. This means that you claim that the

Bug#488924: dspam-webfrontend and apache2-suexec

2008-08-13 Thread Stefan Fritsch
On Wednesday 16 July 2008, Kurt B. Kaiser wrote: tags 488924 + pending thanks The reversion in apache2 is going into testing today (2.2.9-5), so the UID issue is gone. However, we need to add apache2-suexec as a dependency for dspam-webfrontend. dspam-webfrontend does not depend on

Bug#489208: bug #489208: fml incompatible with perl 5.10

2008-08-13 Thread Stefan Fritsch
fml has a rather low popcon count and the maintainer doesn't seem to be active anymore. Maybe it would make sense to remove the package? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

  1   2   >