Bug#680841: plplot: FTBFS: CMakeFiles/plplotadad.dir/plplot.o: could not read symbols: Bad value

2012-08-07 Thread Nobuhiro Iwamatsu
tags 680841 patch thanks Hi, I created a patch which revise this bug. I attached. Could you check and apply? Best regards, Nobuhiro -- Nobuhiro Iwamatsu iwamatsu at {nigauri.org / debian.org} GPG ID: 40AD1FA6 plplot-5.9.9.patch Description: Binary data

Processed: Re: plplot: FTBFS: CMakeFiles/plplotadad.dir/plplot.o: could not read symbols: Bad value

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 680841 patch Bug #680841 [src:plplot] plplot: FTBFS: CMakeFiles/plplotadad.dir/plplot.o: could not read symbols: Bad value Added tag(s) patch. thanks Stopping processing here. Please contact me if you need assistance. -- 680841:

Bug#683103: mkdir: cannot create directory `/run/shm': File exists

2012-08-07 Thread Vincent Danjean
Package: initscripts Version: 2.88dsf-29 Followup-For: Bug #683103 Hi, I've just been hit by this bug in a schroot. The host has initscripts 2.88dsf-28 installed. When upgrading my sid schroot, I got the error: mkdir: cannot create directory `/run/shm': File exists dpkg: error processing

Bug#684121: libotr2: Buffer overflows in libotr

2012-08-07 Thread Göran Weinholt
Package: libotr2 Version: 3.2.0-4 Severity: grave Tags: security upstream Justification: user security hole libotr contains buffer overflows in a few base64 decoding functions: http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html Fixes for the bugs are available from git:

Processed: found 675365 in 10.12.0-2, found 657142 in 2.1.25.dfsg1-5 ..., affects 684032

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: found 675365 10.12.0-2 Bug #675365 [chef] chef: unowned directory after purge: /var/lib/chef/cookbook_index/ Marked as found in versions chef/10.12.0-2. found 657142 2.1.25.dfsg1-5 Bug #657142 [sasl2-bin] sasl2-bin: unowned files after purge

Bug#683103: mkdir: cannot create directory `/run/shm': File exists

2012-08-07 Thread Roger Leigh
On Tue, Aug 07, 2012 at 09:18:39AM +0200, Vincent Danjean wrote: I've just been hit by this bug in a schroot. The host has initscripts 2.88dsf-28 installed. When upgrading my sid schroot, I got the error: mkdir: cannot create directory `/run/shm': File exists dpkg: error processing

Processed: Re: Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tag 683984 +pending Bug #683984 [libapache2-mod-rpaf] libapache2-mod-rpaf: potential Denial of Service Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 683984:

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sergey Kirpichev
tag 683984 +pending thanks 06.08.2012 4:27 пользователь Luciano Bello luci...@debian.org написал: Sébastien Bocahu reported to the security team: (...) A single request makes Apache segfault. On some of the environments I tested, it even kills all Apache processes (they become zombies).

Bug#682905: [PING] Re: Bug#682905: can't import signatures

2012-08-07 Thread Willi Mann
Hi Daniel! Have you received my last mail concerning this bug? WM -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#684130: digikam: crash when starts

2012-08-07 Thread Grey Fenrir
Package: digikam Version: 4:2.6.0-1+b1 Severity: grave Justification: renders package unusable Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sébastien Bocahu
Hi, I am the bug reporter. The minimal patch is to drop 030_ipv6.patch. I can't confirm that this bug is *not* reproducible for 0.6 version *with* the above patch. Can you ask bugreporter to report details on: --8-- rpaf 0.6 is available in Debian wheezy. The IPv6 patched is not

Processed: tagging 683648

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 683648 - sid Bug #683648 [python-django] Django's HTMLParser incompatible with python 2.7.3 Removed tag(s) sid. thanks Stopping processing here. Please contact me if you need assistance. -- 683648:

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sergey B Kirpichev
Ok, now it makes sense. As a workaround, you should avoid using x-forwarded-for header from untrusted sources. Usually, it is the case - you can trust your frontend servers ;) That means - real impact of this issue is very minor and mostly due to misconfiguration. 07.08.2012 14:15 пользователь

Bug#684121: marked as done (libotr2: Buffer overflows in libotr)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 10:47:16 + with message-id e1syhjk-0003pk...@franck.debian.org and subject line Bug#684121: fixed in libotr 3.2.1-1 has caused the Debian Bug report #684121, regarding libotr2: Buffer overflows in libotr to be marked as done. This means that you claim that

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sébastien Bocahu
As a workaround, you should avoid using x-forwarded-for header from untrusted sources. Usually, it is the case - you can trust your frontend servers ;) That means - real impact of this issue is very minor and mostly due to misconfiguration. Excuse me ? This is definitely _not_ a

Bug#684121: libotr2: Buffer overflows in libotr

2012-08-07 Thread Thibaut VARENE
Hi, I just uploaded 3.2.1-1 to unstable, it contains the changes listed here: http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=log;h=refs/heads/3.2_dev I'm CC'ing security as I suppose they might want to push this package to unstable as well. Note, the only difference between

Bug#684143: redeclipse: security issues with transmitted map cfgs

2012-08-07 Thread Martin Erik Werner
Package: redeclipse Version: 1.2-2 Severity: grave Tags: security patch upstream Justification: user security hole A security issue with execution of map cfg(script) files could allow these scripts the same r/w access to files as the user running the game client. This issue has been patched

Processed: cloning 684143

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: clone 684143 -7 Bug #684143 [redeclipse] redeclipse: security issues with transmitted map cfgs Bug 684143 cloned as bug 684144 thanks Stopping processing here. Please contact me if you need assistance. -- 684143:

Bug#684143: security issues with transmitted map cfgs

2012-08-07 Thread Martin Erik Werner
The fix for Red Eclipse has been committed as https://sourceforge.net/apps/trac/redeclipse/changeset/3764 . I've prepared a DEP-3 patch (attached). I intend to add this patch to the current version of Red Eclipse in Debian. -- Martin Erik Werner martinerikwer...@gmail.com From

Bug#684145: python-jenkinsapi: Missing build-depends on python-setuptools

2012-08-07 Thread Jeremy Bicha
Package: python-jenkinsapi Version: 0.1.11-2 Severity: serious Justification: fails to build from source -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 python-jenkinsapi fails to build from source in a clean Debian or Ubuntu chroot

Processed: Re: Bug#684144: security issues with transmitted map cfgs

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: retitle 684144 sauerbraten: security issues with transmitted map cfgs Bug #684144 [redeclipse] redeclipse: security issues with transmitted map cfgs Changed Bug title to 'sauerbraten: security issues with transmitted map cfgs' from 'redeclipse:

Bug#684145: python-jenkinsapi: Missing build-depends on python-setuptools

2012-08-07 Thread Jeremy Bicha
Also, are you sure that python-jenkinsapi shouldn't be Architecture: all ? Jeremy -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Processed: Re: Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tag 683984 +upstream Bug #683984 [libapache2-mod-rpaf] libapache2-mod-rpaf: potential Denial of Service Added tag(s) upstream. thanks Stopping processing here. Please contact me if you need assistance. -- 683984:

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sergey B Kirpichev
tag 683984 +upstream thanks On Tue, Aug 07, 2012 at 12:58:40PM +0200, Sébastien Bocahu wrote: This is definitely _not_ a misconfiguration issue. mod_rpaf is supposed to use the *last* X-Forwarded-For header. There's a bug which adds some garbage to the remote_ip field, when a specific

Bug#684150: python-wxgtk2.8 breaks upgrade from squeeze to wheezy

2012-08-07 Thread Uwe Storbeck
Package: python-wxgtk2.8 Version: 2.8.12.1-11 Severity: critical Justification: breaks the whole system Hello, the upgrade from squeeze to wheezy aborts with the following error message: E: Could not perform immediate configuration on 'python-wxgtk2.8'. Please see man 5 apt.conf under

Processed: limit source to qtcreator, tagging 683933

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: #qtcreator (2.5.0-2) unstable; urgency=medium # # * Build tm_posix.cpp on kFreeBSD and Hurd to fix a crash because of an #undefined symbol. (Closes: #683933) #- Add posix_rt_nonlinux.diff # limit source qtcreator Limiting to bugs

Bug#677864: wat ?

2012-08-07 Thread Ztatik Light
moar compiz pl0x -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#683671: dash doesn't ignore SIGINT when running an interactive command

2012-08-07 Thread Vincent Lefevre
Hi Jonathan, On 2012-08-02 11:03:11 -0700, Jonathan Nieder wrote: Vincent Lefevre wrote: Severity: grave Justification: causes non-serious data loss Can you explain that more precisely? At first glance it seems like an ordinary important bug. Emacs is often called by other programs,

Bug#628441: marked as done (ERROR while generating documentation for rails)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 7 Aug 2012 09:30:28 -0300 with message-id 20120807123028.gb10...@debian.org and subject line closing has caused the Debian Bug report #628441, regarding ERROR while generating documentation for rails to be marked as done. This means that you claim that the problem has been

Bug#680626: Squeeze-Wheezy: dist-upgrade fails, /usr/bin/python unable to load libssl.so.1.0.0

2012-08-07 Thread bertagaz
On Mon, Aug 06, 2012 at 08:43:57AM +0200, Raphael Hertzog wrote: Hello, On Sun, 05 Aug 2012, Robert Luberda wrote: Processing triggers for doc-base ... /usr/bin/perl: symbol lookup error: /usr/lib/perl5/auto/UUID/UUID.so: undefined symbol: Perl_xs_apiversion_bootcheck dpkg: error

Bug#684143: redeclipse: security issues with transmitted map cfgs

2012-08-07 Thread Martin Erik Werner
Extended description of the issue: Game maps can in cube2-engine games be transmitted either from server to client or from client to client, which includes a config file (mapname.cfg) which is in cubescript format, this makes it possible for an attacker to send a malign script via a new map (which

Bug#620137: Can't reproduce with libreoffice-writer 1:3.5.4-6

2012-08-07 Thread Kumar Appaiah
Hi. Just to post this information, I tried opening, saving and reopening the document bug-test.docx provided by the original bug reporter above, and the problem does not seem to occur in libreoffice-writer 1:3.5.4-6. I'd appreciate it if someone else could confirm that they are also, indeed, not

Bug#683984: libapache2-mod-rpaf: potential Denial of Service

2012-08-07 Thread Sébastien Bocahu
This garbage is exactly what you allowed to add via crafted request (curl -H ... etc). Why you want to allow so? I don't want to. It was allowed until now, as X-Forwarded-For headers were not deleted by the reverse proxy. I still think that many people are using Debian and mod_rpaf, and are

Bug#680626: Squeeze-Wheezy: dist-upgrade fails, /usr/bin/python unable to load libssl.so.1.0.0

2012-08-07 Thread Julien Cristau
On Tue, Aug 7, 2012 at 14:37:10 +0200, berta...@ptitcanardnoir.org wrote: However, when I ldd /usr/bin/python, it seems to be linked against libssl, so I'm wondering if this bug isn't related to the python package missing a dependency against libssl. It also seem to be linked against

Processed: Re: Bug#680738: salome-gui: links with both GPL-licensed and GPL-incompatible libraries

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: reopen 680738 Bug #680738 {Done: Francesco Poli invernom...@paranoici.org} [salome-gui] salome-gui: links with both GPL-licensed and GPL-incompatible libraries Bug reopened Ignoring request to alter fixed versions of bug #680738 to the same

Bug#680738: salome-gui: links with both GPL-licensed and GPL-incompatible libraries

2012-08-07 Thread Francesco Poli
reopen 680738 thanks On Wed, 11 Jul 2012 19:06:19 +0200 Francesco Poli wrote: [...] the OmniORB libraries SALOME links with really seem to be licensed under the GNU LGPL v2 or later, posing no issues with Open CASCADE. [...] I am sorry of reporting a non-issue: I am closing the bug

Bug#684170: init script does not stop service

2012-08-07 Thread Peter Palfrader
Package: munin-async Version: 2.0.0-1~bpo60+1 Severity: serious Hi, munin-async's init script does not stop the service. restart starts a second one: | weasel@menotti:~$ ps xauf | grep 'munin-as[y]' | root 15615 0.0 0.2 39304 9684 ?S13:56 0:00

Processed: retitle 683671 to dash doesn't ignore SIGINT when running a command that traps SIGINT, should implement WCE

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: retitle 683671 dash doesn't ignore SIGINT when running a command that traps SIGINT, should implement WCE Bug #683671 [dash] dash doesn't ignore SIGINT when running an interactive command Changed Bug title to 'dash doesn't ignore SIGINT when

Bug#684170: [Packaging] Bug#684170: init script does not stop service

2012-08-07 Thread Holger Levsen
Hi Peter, On Dienstag, 7. August 2012, Peter Palfrader wrote: munin-async's init script does not stop the service. restart starts a second one: ouch. Thanks for your bugreports! cheers, Holger -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of

Bug#684175: pokernetwork: calls addgroup without --system

2012-08-07 Thread Andreas Beckmann
Package: pokernetwork Version: 1.7.7-3.2 Severity: serious Justification: Policy 9.2 User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package left unowned files on the system after purge, which is a violation of policy 6.8 (or 10.8):

Bug#684176: hpcc: error while loading shared libraries: libatlas.so.3gf

2012-08-07 Thread Mario Lang
Package: hpcc Version: 1.4.1-2 Severity: grave hpcc on wheezy (note, not on sid) fails with the following error message: hpcc: error while loading shared libraries: libatlas.so.3gf: cannot open shared object file: No such file or directory This used to happen on sid as well, but went away on

Bug#684178: gpe-tetris: creates world writable directory /var/games/gpe

2012-08-07 Thread Andreas Beckmann
Package: gpe-tetris Version: 0.6.4-2 Severity: grave Tags: security Justification: user security hole User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I found that gpe-tetris creates a world writable directory and a world writable file in there: ERROR: BAD

Bug#684180: angband: removes files that were installed by another package: /usr/share/angband/*

2012-08-07 Thread Andreas Beckmann
Package: angband Version: 1:3.3.2-2 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package removes files that were installed by another package. The removed files were already present before the package was installed, they may

Bug#684170: [Packaging] Bug#684170: Bug#684170: init script does not stop service

2012-08-07 Thread Holger Levsen
the package already creates a munin-asyncd user, we just need to use it! :) -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#684176: hpcc: error while loading shared libraries: libatlas.so.3gf

2012-08-07 Thread Sébastien Villemot
reassign 684176 libatlas3-base 3.8.4-7 severity 684176 serious close 684176 3.8.4-8 thanks Mario Lang ml...@tugraz.at writes: Package: hpcc Version: 1.4.1-2 Severity: grave hpcc on wheezy (note, not on sid) fails with the following error message: hpcc: error while loading shared

Processed: python-ethtool: diff for NMU version 0.7-1.1

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 683174 + pending Bug #683174 [python-ethtool] FTBFS: Requires internet connectivity Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 683174:

Processed: Re: Bug#684176: hpcc: error while loading shared libraries: libatlas.so.3gf

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: reassign 684176 libatlas3-base 3.8.4-7 Bug #684176 [hpcc] hpcc: error while loading shared libraries: libatlas.so.3gf Bug reassigned from package 'hpcc' to 'libatlas3-base'. No longer marked as found in versions hpcc/1.4.1-2. Ignoring request to

Bug#683671: dash doesn't ignore SIGINT when running an interactive command

2012-08-07 Thread Jonathan Nieder
Vincent Lefevre wrote: On 2012-08-02 11:03:11 -0700, Jonathan Nieder wrote: How about this patch (which at least gets rid of a mysterious code artifact)? This is worse: Ctrl-G in emacs kills emacs! Weird. Why does system(3) claim it sets SIGINT to SIG_IGN, then? Puzzled, Jonathan -- To

Bug#684178: gpe-tetris: creates world writable directory /var/games/gpe

2012-08-07 Thread Neil Williams
tag 684178 - security severity 684178 normal thanks On Tue, 07 Aug 2012 16:49:47 +0200 Andreas Beckmann deb...@abeckmann.de wrote: Package: gpe-tetris Version: 0.6.4-2 Severity: grave Tags: security Justification: user security hole Highscore data for a game is not related to security. GPE

Bug#683174: python-ethtool: diff for NMU version 0.7-1.1

2012-08-07 Thread Felix Geyer
tags 683174 + pending thanks Dear maintainer, I've prepared an NMU for python-ethtool (versioned as 0.7-1.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. diff -Nru python-ethtool-0.7/debian/changelog python-ethtool-0.7/debian/changelog ---

Processed: Re: Bug#684178: gpe-tetris: creates world writable directory /var/games/gpe

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tag 684178 - security Bug #684178 [gpe-tetris] gpe-tetris: creates world writable directory /var/games/gpe Removed tag(s) security. severity 684178 normal Bug #684178 [gpe-tetris] gpe-tetris: creates world writable directory /var/games/gpe

Bug#671673: dvipsk-ja: diff for NMU version 5.98+p1.7b-1.1

2012-08-07 Thread gregor herrmann
tags 671673 + pending thanks Dear maintainer, Taku YASUI has prepared an NMU for dvipsk-ja (versioned as 5.98+p1.7b-1.1) and I've uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. -- .''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key

Processed: dvipsk-ja: diff for NMU version 5.98+p1.7b-1.1

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 671673 + pending Bug #671673 [dvipsk-ja] dvipsk-ja: unowned file /usr/local/share/texmf/ls-R after purge (policy 6.8, 9.1.2) Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 671673:

Bug#684191: charybdis: license conflict: 4-clause BSD + GPLv2+

2012-08-07 Thread Jakub Wilk
Source: charybdis Version: 3.3.0-7 Severity: serious According to the copyright file, src/reslib.c is licensed under 4-clause BSD, while the rest of the code is under GPLv2 (or later). These two licenses are incompatible. -- Jakub Wilk -- To UNSUBSCRIBE, email to

Processed: Re: Bug#636805: Bug in viewvc also encountered

2012-08-07 Thread Debian Bug Tracking System
Processing control commands: tag -1 +patch Bug #636805 [viewvc] viewvc runs extremely slowly (~15s per page) Added tag(s) patch. -- 636805: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=636805 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email

Bug#636805: Bug in viewvc also encountered

2012-08-07 Thread gregor herrmann
Control: tag -1 +patch On Fri, 30 Sep 2011 10:20:43 +0200, Frédéric Boiteux wrote: I didn't see your patch in the Debian bug report' web page, don't you forget to attach it ? The fix would be welcome indeed. Attached is my attempt to backport the commit, as a debdiff. Tests welcome

Bug#683671: dash doesn't ignore SIGINT when running an interactive command

2012-08-07 Thread Vincent Lefevre
On 2012-08-07 08:26:46 -0700, Jonathan Nieder wrote: Vincent Lefevre wrote: On 2012-08-02 11:03:11 -0700, Jonathan Nieder wrote: How about this patch (which at least gets rid of a mysterious code artifact)? This is worse: Ctrl-G in emacs kills emacs! Weird. Why does system(3)

Bug#682824: marked as done (hylafax-server: creates world writable directory without sticky bit set)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 18:52:24 +0200 with message-id 502147c8.40...@abeckmann.de and subject line Re: Bug#682824: hylafax-server: creates world writable directory without sticky bit set has caused the Debian Bug report #682824, regarding hylafax-server: creates world writable

Bug#681687: missing mime entry

2012-08-07 Thread Ian Jackson
Steve Langasek writes (Bug#681687: missing mime entry): On Thu, Jul 26, 2012 at 04:48:59PM +0100, Ian Jackson wrote: 3. We agree with the Release Team that it is now too late to deploy such automation in wheezy. I don't actually agree that it's too late, but I would vote for a

Bug#681687: Call for votes on evince MIME entry

2012-08-07 Thread Ian Jackson
I'm calling for votes on the following proposal. There are three options - two positive versions, and FD. In summary A. Do not overrule release team. It is too late for automation. B. Do not overrule release team. Defer to them on automation. F. Further Discussion. Here are the full

Bug#681687: Call for votes on evince MIME entry

2012-08-07 Thread Russ Allbery
Ian Jackson ijack...@chiark.greenend.org.uk writes: I'm calling for votes on the following proposal. There are three options - two positive versions, and FD. In summary A. Do not overrule release team. It is too late for automation. B. Do not overrule release team. Defer to them on

Bug#684194: gnat-gps: /u/s/d/gnat-gps is empty after upgrade from squeeze

2012-08-07 Thread Andreas Beckmann
Package: gnat-gps Version: 5.0-12 Severity: serious Justification: Policy 12.5 Hi, during a test with piuparts I noticed your package is missing the copyright file after upgrading from squeeze, /usr/share/doc/gnat-gps is just an empty directory. The package installs fine in sid. Andreas

Bug#681687: Call for votes on evince MIME entry

2012-08-07 Thread Ian Jackson
Ian Jackson writes (Bug#681687: Call for votes on evince MIME entry): I'm calling for votes on the following proposal. There are three options - two positive versions, and FD. In summary A. Do not overrule release team. It is too late for automation. B. Do not overrule release team.

Bug#503591: TZInfo that use zoneinfo db

2012-08-07 Thread Josef Stribny
Hi all, I rewrote TZInfo a bit to use system-wide zoneinfo files. You can look at it at GitHub: https://github.com/strzibny/tzinfo I am trying to make this change with Phillip Ross as you can follow here: http://rubyforge.org/tracker/index.php?func=detailaid=29620group_id=894atid=3525

Bug#684143: marked as done (redeclipse: security issues with transmitted map cfgs)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 18:17:24 + with message-id e1syolm-0003rf...@franck.debian.org and subject line Bug#684143: fixed in redeclipse 1.2-3 has caused the Debian Bug report #684143, regarding redeclipse: security issues with transmitted map cfgs to be marked as done. This means

Processed: unarchiving 664949

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: unarchive 664949 Bug #664949 {Done: Axel Beckert a...@debian.org} [src:dillo] dillo: FTBFS on amd64: bw.o: could not read symbols: Bad value Unarchived Bug 664949 thanks Stopping processing here. Please contact me if you need assistance. --

Bug#684145: python-jenkinsapi: Missing build-depends on python-setuptools

2012-08-07 Thread Al Stone
On 08/07/2012 06:00 AM, Jeremy Bicha wrote: Also, are you sure that python-jenkinsapi shouldn't be Architecture: all ? Jeremy Sigh. Do not work on packages after a 16 hour work day :(. Yup, this has been fixed, as well as the build-dep. Should be uploaded in a hour or two. -- Ciao, al

Bug#655470: marked as done (hexer: Hexer trashes memory upon wrong key)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 18:47:14 + with message-id e1syooe-000886...@franck.debian.org and subject line Bug#655470: fixed in hexer 0.1.7-1.1 has caused the Debian Bug report #655470, regarding hexer: Hexer trashes memory upon wrong key to be marked as done. This means that you

Bug#664949: JFTR: Bug#677705 was the real cause for Bug#664949 (dillo: FTBFS on amd64: bw.o: could not read symbols: Bad value)

2012-08-07 Thread Axel Beckert
Hi, Hector Oron wrote: During a rebuild of all packages in sid, your package failed to build on amd64. I can reproduce this issue with and without pbuilder on amd64 while I can't reproduce it on i386. I have only had few time to give it a pick to this bug. It seems to be related to

Bug#679182: logkeys: FTBFS on mips*: braces around scalar initializer for type 'unsigned int'

2012-08-07 Thread Scott Howard
On Mon, Aug 6, 2012 at 7:56 PM, Vedran Furač vedran.fu...@gmail.com wrote: On 07/27/2012 10:33 PM, Scott Howard wrote: It still FTBFS with the new package from mentors/svn: upload.cc:87:30: error: braces around scalar initializer for type ‘unsigned int’ logkeys.cc:154:30: error: braces

Bug#684145: marked as done (python-jenkinsapi: Missing build-depends on python-setuptools)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 19:02:25 + with message-id e1syp2v-0001vf...@franck.debian.org and subject line Bug#684145: fixed in python-jenkinsapi 0.1.11-3 has caused the Debian Bug report #684145, regarding python-jenkinsapi: Missing build-depends on python-setuptools to be marked as

Bug#683147: Package no longer maintained

2012-08-07 Thread jidanni
Package no apparently longer maintained. Removing package solved problem. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#680796: marked as done (libmojomojo-perl: FTBFS: tests failed)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Tue, 07 Aug 2012 19:17:38 + with message-id e1syphe-0002zf...@franck.debian.org and subject line Bug#680796: fixed in libmojomojo-perl 1.05+dfsg-3 has caused the Debian Bug report #680796, regarding libmojomojo-perl: FTBFS: tests failed to be marked as done. This means that

Bug#669384: jxplorer: simple authentification (user + password)

2012-08-07 Thread Luc Novalès
Hi, I just verified with wireshark : Password contains special characters and is not correctly transmitted. With 3.3b3 sourceforge version it is. Regards Luc. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#683147: Maintainer gone

2012-08-07 Thread jidanni
No matter if I spell his email pag or psg, it still bounces. Maintainer missing in action. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#684075: [Packaging] Bug#684075: Subject: munin: insecure state file handling, munin-root privilege escalation in smart_ plugin

2012-08-07 Thread Holger Levsen
Hi Stevie, On Montag, 6. August 2012, Stevie Trujillo wrote: A possible solution is to have a directory dedicated to each plugin, especially plugins which may run with superuser privileges, so that less-privileged users cannot modify their state files. This cannot be enforced by munin on all

Bug#684218: ogre contains non-free font from larabie collection

2012-08-07 Thread Manuel A. Fernandez Montecelo
Source: ogre Version: 1.7.4-5 Severity: serious Tags: upstream Forwarded: http://ogre3d.org/mantis/view.php?id=546 People reported to me that the package contains the Larabie fonts, which are considered non-free [1], and there are packages for fonts-larabie which are indeed in non-free [2]

Bug#684219: ogre-1.8 contains non-free font from larabie collection

2012-08-07 Thread Manuel A. Fernandez Montecelo
Source: ogre-1.8 Version: 1.8.0-1 Severity: serious Tags: upstream Forwarded: http://ogre3d.org/mantis/view.php?id=546 People reported to me that the package contains the Larabie fonts, which are considered non-free [1], and there are packages for fonts-larabie which are indeed in non-free [2]

Processed: user debian...@lists.debian.org, usertagging 683939, found 683939 in 0.16-2

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: user debian...@lists.debian.org Setting user to debian...@lists.debian.org (was deb...@abeckmann.de). usertags 683939 piuparts There were no usertags set. Usertags are now: piuparts. found 683939 0.16-2 Bug #683939 {Done: Bernd Zeimetz

Bug#684170: status update

2012-08-07 Thread Holger Levsen
Hi, running as munin-async user aint that straightforward as /var/lib/munin/spool/ belongs to root atm (and probably should be moved to /var/spool/munin(-async?) Besides that the init-script is horrible, not sure yet how much I want to replace it... cheers, Holger -- To

Processed (with 1 errors): forcibly merging 656584 674039

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: forcemerge 656584 674039 Bug #656584 [network-manager] NetworkManager doesn't interact with existing ifupdown configuration properly causing mountnfs breakage Unable to merge bugs because: package of #674039 is 'initscripts' not 'network-manager'

Processed: bug triaging

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 682869 + pending Bug #682869 [munin] munin: insecure/misleading apache configuration (authentication bypass) Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 682869:

Processed: reassign 674039 to network-manager, forcibly merging 656584 674039

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: reassign 674039 network-manager Bug #674039 [initscripts] /etc/network/if-up.d/mountnfs: boot stalls by 3 minutes because network is not configured yet (using network-manager) Bug reassigned from package 'initscripts' to 'network-manager'. No

Bug#677810: snort: white/blacklist

2012-08-07 Thread Javier Fernández-Sanguino Peña
On Tue, Jul 31, 2012 at 04:23:52PM +0800, Jim Barber wrote: I have also encountered this problem when installing snort for the first time on a freshly installed Debian host. To get the package to configure I did the following steps: (...) Thank you (and the other reports) for the additional

Bug#681967: marked as done (snort-pgsql: removes files that were installed by another package: /etc/snort/database.conf)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Wed, 8 Aug 2012 00:41:30 +0200 with message-id 20120807224130.gb11...@javifsp.no-ip.org and subject line Re: Bug#681967: snort-pgsql: removes files that were installed by another package: /etc/snort/database.conf has caused the Debian Bug report #681967, regarding snort-pgsql:

Bug#678786: Build successful

2012-08-07 Thread Raúl Benencia
I've successfuly built this package on amd64. Build log attached. I: using fakeroot in build. I: Current time: Tue Aug 7 19:41:06 ART 2012 I: pbuilder-time-stamp: 1344379266 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/base.tgz] I: creating local configuration

Processed: re: FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: retitle 683011 FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting Bug #683011 [src:libnss-ldap] FTBFS on arm*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting Changed Bug title to 'FTBFS on

Bug#683011: FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting

2012-08-07 Thread peter green
retitle 683011 FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting tags 683011 +patch thanks It appeared the arm* and kfreebsd* failures are the same or at least related. At the very least other behaviours seem the same on those architectures. Specifically

Bug#683011: FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting

2012-08-07 Thread Steve Langasek
On Wed, Aug 08, 2012 at 12:56:04AM +0100, peter green wrote: I am ccing those involved in the previous nmu and the rc bug it fixed (which seems somewhat related to this bug) to see if they have opinions on this. My opinion is that the upstream rules on naming the libnss_ldap file are a horror

Processed: Re: Bug#657407: zoneminder: Mysql CREATE command denied to user 'zmuser'@'localhost' for table 'Logs'

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: severity 657407 serious Bug #657407 [zoneminder] zoneminder: Mysql CREATE command denied to user 'zmuser'@'localhost' for table 'Logs' Severity set to 'serious' from 'normal' thanks Stopping processing here. Please contact me if you need

Bug#683011: FTBFS on arm* and kfreebsd*: libnss-ldap missing files (debian/tmp/usr/lib/*/*), aborting

2012-08-07 Thread peter green
Emmanuel Kasper: can you tell us if the patch in http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=14;bug=683011 fixes libnss-ldap on kfreebsd for you? Steve Langasek wrote: My opinion is that the upstream rules on naming the libnss_ldap file are a horror show. ;) Your proposed fix looks

Bug#674039: [Pkg-sysvinit-devel] Bug#674039: mount -a still required

2012-08-07 Thread Henrique de Moraes Holschuh
On Wed, 08 Aug 2012, Aljaž Prusnik wrote: Isn't that what the network manager does so it can operate - comments out those lines? Don't let anything mess with the loopback. Your system will go bonkers if it is down because network-manager screwed up or took its sweet time to bring it up. --

Bug#677810: marked as done (Package fails to configure)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Wed, 08 Aug 2012 01:47:51 + with message-id e1syvnh-0005mt...@franck.debian.org and subject line Bug#677810: fixed in snort 2.9.2.2-3 has caused the Debian Bug report #677810, regarding Package fails to configure to be marked as done. This means that you claim that the

Bug#681426: syslinux-themes-debian-wheezy: patches for *.cfg

2012-08-07 Thread Frank Chung
tags 681426 + patch thanks Dear maintainers, The same problem affects all of /usr/share/syslinux/themes/debian-wheezy/extlinux/*.cfg. Enclosed please find patches for each. Thanks, Frank --- menu.cfg~ 2012-06-27 22:08:18.0 +0800 +++ menu.cfg2012-06-27 22:08:18.0 +0800 @@

Processed: syslinux-themes-debian-wheezy: patches for *.cfg

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 681426 + patch Bug #681426 [syslinux-themes-debian-wheezy] syslinux-themes-debian-wheezy: extlinux/theme.cfg refers to debian-squeeze files Added tag(s) patch. thanks Stopping processing here. Please contact me if you need assistance. --

Processed (with 1 errors): libv8: FTBFS on mipsel - tests failures on Loongsoon 2E, not on Broadcom

2012-08-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: unarchive 667991 Bug #667991 {Done: Jonas Smedegaard d...@jones.dk} [libv8-3.8.9.16] libv8: FTBFS on mipsel - tests failures on Loongsoon 2E, not on Broadcom Warning: Unknown package 'libv8-3.8.9.16' Unarchived Bug 667991 Warning: Unknown package

Bug#684256: CVE-2012-3447: file injection writing to host filesystem

2012-08-07 Thread Thomas Goirand
Package: nova Version: 2012.1.1-5 Severity: critical As the subject says, nova currently suffers from CVE-2012-3447. Patch is already on the way, and I hope to upload the fix today. Thomas Goirand (zigo) -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of

Bug#684256: marked as done (CVE-2012-3447: file injection writing to host filesystem)

2012-08-07 Thread Debian Bug Tracking System
Your message dated Wed, 08 Aug 2012 04:47:18 + with message-id e1syyaw-0001wb...@franck.debian.org and subject line Bug#684256: fixed in nova 2012.1.1-6 has caused the Debian Bug report #684256, regarding CVE-2012-3447: file injection writing to host filesystem to be marked as done. This