Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Yoram bar haim
Package: glibc Version: 2.7-18 Severity: grave Justification: renders package unusable When compiling with gcc that uses march=i686 (or any sub-arch) gcc defines __i686 to be 1, that causes instructions such as ..ifndef __i686.get_pc_thunk.reg; to fail as syntax error (because the prefix is 1).

Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Bastian Blank
On Fri, Jan 30, 2009 at 10:37:57AM +0200, Yoram bar haim wrote: When compiling with gcc that uses march=i686 (or any sub-arch) gcc defines __i686 to be 1, that causes instructions such as ..ifndef __i686.get_pc_thunk.reg; to fail as syntax error (because the prefix is 1). if you force it to

Bug#513564: marked as done (glibc: Please redefine __i686 to work-around the infamous i686 compilation fail)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 10:36:27 +0100 with message-id 20090130093627.ga11...@artemis.corp and subject line Re: Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail has caused the Debian Bug report #513564, regarding glibc: Please redefine

Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-30 Thread Jochen Friedrich
Hi Kurt, I was looking at return codes for applications making use of openssl functions and found this in x509.c: if (X509_verify(cert, key) == -1) { log_print(x509_cert_validate: self-signed cert is bad); return 0; } X509_verify returns

Bug#513540: marked as done (newpki-lib: Does not properly check the result of X509_REQ_verify())

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 10:17:05 + with message-id e1lsqqr-0002li...@ries.debian.org and subject line Bug#513540: fixed in newpki-lib 2.0.0+rc1-4 has caused the Debian Bug report #513540, regarding newpki-lib: Does not properly check the result of X509_REQ_verify() to be marked as

Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Yoram bar haim
The problem is not with building other packages. the problem is building glibc itself. there is a cotradiction between the definition by gcc and the code used in glibc assebler files. On יום שישי 30 ינואר 2009 11:25:20 Bastian Blank wrote: On Fri, Jan 30, 2009 at 10:37:57AM +0200, Yoram bar

Processed: severity of 513490 is important

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: severity 513490 important Bug#513490: cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze Severity set to `important' from `grave' End of message, stopping processing here. Please contact me if you need assistance. Debian bug

Bug#513576: octave-symbolic does not uninstall

2009-01-30 Thread Steve Cotton
Package: octave3.0 Version: 1:3.0.1-6lenny1 Severity: critical Justification: breaks unrelated software (the package system) Or Package: octave-symbolic Version: 1.0.6-2 Not sure if the bug's in octave-symbolic or octave3.0, please reassign if this is wrong. octave-symbolic fails to either

Bug#513438: libjack-dev: missing libjack.la

2009-01-30 Thread Reinhard Tartler
reassign 513438 libarts1c2a retitle 513438 please rebuild to drop reference on libjack.la severity 513438 serious stop Justification: breaks unrelated packages. Xavier Vello xavier.ve...@gmail.com writes: Le jeudi 29 janvier 2009 22:11:08, vous avez écrit : Xavier Vello xavier.ve...@gmail.com

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
On Fri, 2009-01-30 at 12:28 +0200, Jonathan Quick wrote: (re-sending with subject) Hi Ben I assume you're aware of the RC bug #512839 introduced by your NMU (and in testing) xine-ui/0.99.5+cvs20070914-2.1 ? No, I missed that. The bug is clearly not grave; not sure whether it should be

Bug#513490: back to RC

2009-01-30 Thread Martin Zobel-Helas
Hi, as this bug _really_ should make it into Lenny, i am upgrading this bug to RC again, thus release team keeps this issue on its radar. Greetings Martin -- Martin Zobel-Helas zo...@debian.org | Debian System Administrator Debian GNU/Linux Developer | Debian Listmaster

Bug#495228: Intent to NMU: #495228: Synaptic much less usable without icon theme available

2009-01-30 Thread Cyril Brulebois
Phil Miller phildeb...@mailinator.com (28/01/2009): Package: synaptic Version: 0.62.5 Tags: confirmed Followup-For: Bug #495228 I just tested this by forcibly removing hicolor-icon-theme, and can confirm that synaptic is drastically less usable under that condition. Thanks Phil, please

Bug#513490: marked as done (cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 12:32:02 + with message-id e1lssxs-0001hp...@ries.debian.org and subject line Bug#513490: fixed in cdebootstrap 0.5.4 has caused the Debian Bug report #513490, regarding cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze to be marked as

Processed: reopening and reassigning gcc report to libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: clone 513420 -1 Bug#513420: Breaks building libgsf from source Bug 513420 cloned as bug 513594. reopen -1 Bug#513594: Breaks building libgsf from source 'reopen' may be inappropriate when a bug has been closed with a version; you may need to use

Bug#513594: gcc-4.3 4.3.3-3

2009-01-30 Thread Matthias Klose
gcc-4.3 4.3.3-3 does not expose this bug, GCC packages for lenny+1 will like to expose it. patch is in the GCC upstream report. Matthias -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Processed (with 5 errors): [patch] invalid code in libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: notforwarded 513594 Bug#513594: invalid code in libgsf Removed annotation that Bug had been forwarded to http://gcc.gnu.org/PR39015. tags 513594 +patch Bug#513594: invalid code in libgsf Tags were: upstream Tags added: patch The patch from GCC

Bug#513594: [patch] invalid code in libgsf

2009-01-30 Thread Petr Salinger
notforwarded 513594 tags 513594 +patch The patch from GCC upstream report: http://gcc.gnu.org/bugzilla/attachment.cgi?id=17213action=view --- libgsf-1.14.11/gsf/gsf-output-csv.c.jj +++ libgsf-1.14.11/gsf/gsf-output-csv.c +0100 @@ -182,7 +182,7 @@ gsf_output_csv_quoting_mode_get_type (vo

Bug#513602: [compiz] Blank screen when load compiz

2009-01-30 Thread Claudio F Filho
Package: compiz Version: 0.7.6-7 Severity: serious --- Please enter the report below this line. --- Hi I am using KDE 4.x and Debian Sid. I tried get some effects and could change by compiz, but when tried to change got a error: a white screen. I sent this doubt to debian-kde list, and others

Bug#513602: [compiz] Blank screen when load compiz

2009-01-30 Thread Julien Cristau
On Fri, 2009-01-30 at 17:35 +0100, Claudio F Filho wrote: Package: compiz Version: 0.7.6-7 Severity: serious this is probably the wrong severity for this bug, but anyway.. --- Please enter the report below this line. --- Hi I am using KDE 4.x and Debian Sid. I tried get some effects and

Processed: invalid code in libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 513594 + upstream fixed-upstream pending Bug#513594: invalid code in libgsf Tags were: patch upstream Tags added: upstream, fixed-upstream, pending forwarded 513594 http://svn.gnome.org/viewvc/libgsf?view=revisionrevision=1039 Bug#513594:

Bug#513604: linux-libc-dev: drm headers conflict with libdrm-dev

2009-01-30 Thread Julien Cristau
Package: linux-libc-dev Version: 2.6.28-1~experimental.1~snapshot.12651 Severity: serious Justification: undeclared file conflict Hi, the kernel started installing drm headers which previously came with libdrm-dev. If we decide to do things this way for squeeze, linux-libc-dev will need to

Bug#513594: marked as done (invalid code in libgsf)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 17:47:03 + with message-id e1lsxsj-0002dc...@ries.debian.org and subject line Bug#513594: fixed in libgsf 1.14.11-2 has caused the Debian Bug report #513594, regarding invalid code in libgsf to be marked as done. This means that you claim that the problem

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Nelson A. de Oliveira
Package: glpi Version: 0.71.2-2 Severity: grave Tags: security Justification: user security hole Hi! glpi versions prior to 0.71.4 are affected by a SQL injection vulnerability. See the upstream announce [1] and SecurityFocus [2]. [1]

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Nico Golde
Hi, * Nelson A. de Oliveira nao...@debian.org [2009-01-30 19:06]: glpi versions prior to 0.71.4 are affected by a SQL injection vulnerability. See the upstream announce [1] and SecurityFocus [2]. [1] http://www.glpi-project.org/spip.php?page=annonceid_breve=161lang=en [2]

Bug#506353: marked as done (CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 21:17:05 + with message-id e1lt0jz-0006ng...@ries.debian.org and subject line Bug#506353: fixed in mailscanner 4.74.16-1 has caused the Debian Bug report #506353, regarding CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files

Bug#512839: Depends on what you use xine for

2009-01-30 Thread garkein
Ben, I understand that you don't agree with the bug being grave. The point is that I use it mainly for watching TV. This is practically not possible anymore now since the VDR playback breaks on every channel switch due to xdg-screensaver hogging the audio handle. For that usage it is definately a

Bug#442125: marked as done (xmove assert: SaveVisuals() couldn't find the default visual)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 21:58:50 GMT with message-id 200901302158.n0ulwoq7025...@kmos.homeip.net and subject line xmove has been removed from Debian, closing #442125 has caused the Debian Bug report #442125, regarding xmove assert: SaveVisuals() couldn't find the default visual to be

Bug#495683: marked as done (sshguard: Current implementation skip any other iptables rules)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 22:17:12 + with message-id e1lt1fk-0002fb...@ries.debian.org and subject line Bug#495683: fixed in sshguard 1.3-1 has caused the Debian Bug report #495683, regarding sshguard: Current implementation skip any other iptables rules to be marked as done. This

Bug#513531: marked as done (CVE-2008-4770: Arbitrary code execution via crafted RFB protocol data)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 23:02:26 + with message-id e1lt2nw-0004dk...@ries.debian.org and subject line Bug#513531: fixed in vnc4 4.1.1+X4.3.0-31 has caused the Debian Bug report #513531, regarding CVE-2008-4770: Arbitrary code execution via crafted RFB protocol data to be marked as

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Raphael Geissert
On Friday 30 January 2009 15:09:34 Nico Golde wrote: Hi, * Nelson A. de Oliveira nao...@debian.org [2009-01-30 19:06]: glpi versions prior to 0.71.4 are affected by a SQL injection vulnerability. See the upstream announce [1] and SecurityFocus [2]. [1]

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Raphael Geissert
2009/1/30 Raphael Geissert atom...@gmail.com: [...] [1]http://cognifty.com/blog.entry/id=6/addslashes_dont_call_it_a_comeback.html Here's[2] another reference as to what mysql_real_escape_string does. On a side note, while the conclusion in [1] partially true, it misses the part of real input

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
gark...@mailueberfall.de wrote I understand that you don't agree with the bug being grave. The point is that I use it mainly for watching TV. This is practically not possible anymore now since the VDR playback breaks on every channel switch due to xdg-screensaver hogging the audio handle. For

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
On Sat, 2009-01-31 at 02:25 +, Ben Hutchings wrote: Just as a remark regarding your intended fix: I haven't yet seen the place where xine does a wait() or waitpid() for those forked childs to clean up the zombies. If there is a place, ok, I just havn't seen it yet. I added

Processed: setting package to xine-console xine-ui xine-dbg, tagging 512839

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: #xine-ui (0.99.5+cvs20070914-2.1~lenny2) testing; urgency=medium # # * Update screensaver control code to match version 0.99.5+cvs20070914-2.1 #as intended, fixing process and file handle leak (Closes: #512839) # package xine-console

Bug#512839: marked as done (xine-ui: xdg-screensaver broke XVDR plugin)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Sat, 31 Jan 2009 04:02:05 + with message-id e1lt73v-0004bn...@ries.debian.org and subject line Bug#512839: fixed in xine-ui 0.99.5+cvs20070914-2.1~lenny2 has caused the Debian Bug report #512839, regarding xine-ui: xdg-screensaver broke XVDR plugin to be marked as done.