Bug#689009: marked as done (fuseiso: Rename dependency fuse-util to fuse)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 08:32:28 + with message-id e1tnpw4-0006wu...@franck.debian.org and subject line Bug#689009: fixed in fuseiso 20070708-3 has caused the Debian Bug report #689009, regarding fuseiso: Rename dependency fuse-util to fuse to be marked as done. This means that

Bug#688847: libav: multiple CVEs in ffmpeg/libav

2012-12-25 Thread Moritz Mühlenhoff
On Mon, Oct 15, 2012 at 05:38:37AM -0400, Reinhard Tartler wrote: None of these are merged into 0.5.x, has the code diverged so much? I arrived only today from my two week trip and will work on backports for 0.7-0.5 this week. Sorry for the delay. Merry christmas Reinhard, did you have a

Processed: Re: please readd MAKEDEV calls to init.d.functions

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: severity 609736 grave Bug #609736 [isdnutils-base] please readd MAKEDEV calls to init.d.functions Severity set to 'grave' from 'important' retitle 609736 isdn device nodes are no longer created Bug #609736 [isdnutils-base] please readd MAKEDEV

Bug#609736: please readd MAKEDEV calls to init.d.functions

2012-12-25 Thread Christoph Biedl
severity 609736 grave retitle 609736 isdn device nodes are no longer created tags 609736 patch thanks justification 609736 Renders package unusable Sven Hartge wrote ... *wave* In upload 1:3.9.20060704+dfsg.2-8 you removed the MAKEDEV call from init.d.functions but this causes isdnlog and

Bug#696661: bind9 - Fails if openssl can't load the gost engine

2012-12-25 Thread Bastian Blank
Package: bind9 Version: 1:9.8.1.dfsg.P1-4.4 Severity: grave File: /usr/lib/libdns.so.81.3.1 libdns is configured with a list of openssl engines to load somewhere after startup (lib/dns/dst_api.c). It errors out if it can't load one of them. gost is _always_ an dynamic engine loaded as dynamic

Bug#691169: virtualbox-dkms: fails to build kernel-module with kernel 3.6.3

2012-12-25 Thread gregor herrmann
On Mon, 22 Oct 2012 16:03:27 +0200, sascha g. wrote: unfortunately i can't compile the kernel-module with the vanilla-kernel mentioned above. don't know at which kernel-version the problems started, but with 3.6.2 it doesn't work too. It also fails against linux-headers-3.7-trunk-amd64

Bug#696069: libmcs-dev: directory vs. symlink mess after squeeze = wheezy upgrade: /usr/share/doc/libmcs-dev

2012-12-25 Thread Andreas Metzler
tags 696069 pending # NMU in delayed queue thanks On 2012-12-16 Andreas Beckmann deb...@abeckmann.de wrote: Package: libmcs-dev [...] during an upgrade test with piuparts I noticed your package installs files over an existing symlink, overwriting files from another package in a way that is not

Processed: Re: Bug#696069: libmcs-dev: directory vs. symlink mess after squeeze = wheezy upgrade: /usr/share/doc/libmcs-dev

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 696069 pending Bug #696069 [libmcs-dev] libmcs-dev: directory vs. symlink mess after squeeze = wheezy upgrade: /usr/share/doc/libmcs-dev Added tag(s) pending. # NMU in delayed queue thanks Stopping processing here. Please contact me if

Bug#695789: marked as done (CVE-2012-2253)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 14:32:41 + with message-id e1tnvyf-qa...@franck.debian.org and subject line Bug#695789: fixed in mahara 1.5.1-3.1 has caused the Debian Bug report #695789, regarding CVE-2012-2253 to be marked as done. This means that you claim that the problem has been

Bug#599258: marked as done (qmk-groundstation: not ready for Debian Stable)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 14:52:21 + with message-id e1tnvrh-00046s...@franck.debian.org and subject line Bug#696053: Removed package(s) from unstable has caused the Debian Bug report #599258, regarding qmk-groundstation: not ready for Debian Stable to be marked as done. This means

Bug#316273: marked as done (kwiki: copyright file doesn't say where the upstream sources were obtained)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 14:53:24 + with message-id e1tnvsi-0004cw...@franck.debian.org and subject line Bug#675754: Removed package(s) from unstable has caused the Debian Bug report #316273, regarding kwiki: copyright file doesn't say where the upstream sources were obtained to be

Bug#670908: marked as done (deal.ii: FTBFS: include path for slepc missing)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 14:54:33 + with message-id e1tnvtp-0004l7...@franck.debian.org and subject line Bug#677883: Removed package(s) from unstable has caused the Debian Bug report #670908, regarding deal.ii: FTBFS: include path for slepc missing to be marked as done. This means

Bug#679400: marked as done ([deal.ii] FTBFS: call of overloaded constructor is ambiguous)

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 14:54:33 + with message-id e1tnvtp-0004l7...@franck.debian.org and subject line Bug#677883: Removed package(s) from unstable has caused the Debian Bug report #679400, regarding [deal.ii] FTBFS: call of overloaded constructor is ambiguous to be marked as

Processed: tagging 696524

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 696524 + patch Bug #696524 [x2goplugin] X2Go Plugin container crashes after session startup Added tag(s) patch. thanks Stopping processing here. Please contact me if you need assistance. -- 696524:

Bug#696574: Fix for CVE-2012-5665 and CVE-2012-5666

2012-12-25 Thread Luca Falavigna
Control: tags -1 patch Attached patch should fix these issues. 4.0.8debian-1.3.debdiff Description: Binary data

Processed: Fix for CVE-2012-5665 and CVE-2012-5666

2012-12-25 Thread Debian Bug Tracking System
Processing control commands: tags -1 patch Bug #696574 [src:owncloud] owncloud: multiple security issues Added tag(s) patch. -- 696574: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696574 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to

Bug#680635: (no subject)

2012-12-25 Thread Salvo Tomaselli
any plans on solving the problem? You might want to orphan the package otherwise. -- Salvo Tomaselli -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#609736: please readd MAKEDEV calls to init.d.functions

2012-12-25 Thread Christoph Biedl
Christoph Biedl wrote... During the holidays I'll prepare an NMU for both issues, let me know soon if you plan to do an upload on your own. Um, hold it. In the meantime I also found an upgrade issue and segmentation faults in isdnlog. But for now, some family issues require for attention.

Bug#696483: Fix for CVE-2012-5657

2012-12-25 Thread Luca Falavigna
Control: tags -1 path Attached patch, taken from upstream SVN repository at http://framework.zend.com/svn/framework/standard/branches/release-1.11/, should fix this issue. 1.11.13-1.1.debdiff Description: Binary data

Processed: tagging 696483

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: tags 696483 + patch Bug #696483 [zendframework] zendframework: CVE-2012-5657 Added tag(s) patch. thanks Stopping processing here. Please contact me if you need assistance. -- 696483: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696483

Bug#696681: falconpl: possible security issue due to misuse of the libcurl API

2012-12-25 Thread Alessandro Ghedini
Package: falconpl Severity: serious Tags: security Hi, I recently discovered that falconpl is using the libcurl API in a way that may not be what the original author intended. In particular I'm referring to the fact that the CURLOPT_SSL_VERIFYHOST option is treated as it was a boolean value

Bug#694570: installation failures with d-i beta4 relating to EFI

2012-12-25 Thread Cyril Brulebois
Control: severity -1 important Jonathan Dowland j...@debian.org (27/11/2012): Package: installation-reports Severity: critical Justification: makes baby jesus cry Not something that really makes sense for an installation report. And given `date`, doesn't seem to be a huge issue. ;p Mraw,

Processed: Re: Bug#694570: installation failures with d-i beta4 relating to EFI

2012-12-25 Thread Debian Bug Tracking System
Processing control commands: severity -1 important Bug #694570 [installation-reports] installation failures with d-i beta4 relating to EFI Severity set to 'important' from 'critical' -- 694570: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694570 Debian Bug Tracking System Contact

Bug#691169: virtualbox-dkms: fails to build kernel-module with kernel 3.6.3

2012-12-25 Thread gregor herrmann
On Tue, 25 Dec 2012 13:04:07 +0100, gregor herrmann wrote: unfortunately i can't compile the kernel-module with the vanilla-kernel mentioned above. don't know at which kernel-version the problems started, but with 3.6.2 it doesn't work too. It also fails against

Bug#696423: marked as done (missing Built-Using on gcc-4.7 (for gcc-4.7-source))

2012-12-25 Thread Debian Bug Tracking System
Your message dated Tue, 25 Dec 2012 20:47:33 + with message-id e1tnbpr-0004xr...@franck.debian.org and subject line Bug#696423: fixed in gcc-avr 1:4.7.2-2 has caused the Debian Bug report #696423, regarding missing Built-Using on gcc-4.7 (for gcc-4.7-source) to be marked as done. This means

Bug#685726:

2012-12-25 Thread Nikita Gubenko
Guys, any update on this bug? Can reproduce on 3.2.0-4-amd64 with vhd image. -- Best Regards, Nikita Gubenko -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#681830: #681830 - gdm3: X failures not necessarily related to gnome-shell also cause this

2012-12-25 Thread Tony Houghton
I've seen this behaviour several times, and agree it's at least serious, so sorry for not reporting this or finding a bug to subscribe to earlier. Today it was caused by X failing to start due to some problem I couldn't be bothered to remmebr after deleting several hundred files from /var/log, but

Bug#609736: Not an isdnutils bug

2012-12-25 Thread Rolf Leggewie
severity 609736 important tags 609736 - patch thanks As I've written in this ticket before, this is not a bug in isdnutils. I'm afraid there is no good solution at the moment and I'm not aware of anyone working on this in the kernel or udev. For the time being the administrator needs to make

Processed: bug 696282 is forwarded to https://bugzilla.gnome.org/show_bug.cgi?id=672364 ...

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: forwarded 696282 https://bugzilla.gnome.org/show_bug.cgi?id=672364 Bug #696282 [gnucash] gnucash silently corrupts the account file if it is truncated when read Set Bug forwarded-to-address to 'https://bugzilla.gnome.org/show_bug.cgi?id=672364'.

Processed: Not an isdnutils bug

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: severity 609736 important Bug #609736 [isdnutils-base] isdn device nodes are no longer created Severity set to 'important' from 'grave' tags 609736 - patch Bug #609736 [isdnutils-base] isdn device nodes are no longer created Removed tag(s) patch.

Bug#685726:

2012-12-25 Thread Julien Cristau
On Wed, Dec 26, 2012 at 01:27:54 +0400, Nikita Gubenko wrote: Guys, any update on this bug? Can reproduce on 3.2.0-4-amd64 with vhd image. You send a mail with empty Subject, refer to this bug, and include 0 context. That's not helpful to know what you're talking about. Cheers, Julien

Processed: retitle 696282 to gnucash: does not properly handle XML parse errors, leading to possible data loss

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: retitle 696282 gnucash: does not properly handle XML parse errors, leading to possible data loss Bug #696282 [gnucash] gnucash silently corrupts the account file if it is truncated when read Bug #658732 [gnucash] gnucash: import silently

Processed: severity of 696349 is serious

2012-12-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: severity 696349 serious Bug #696349 [nwchem] nwchem: Fortran runtime error: Sequential READ or WRITE not allowed after EOF marker, possibly use REWIND or BACKSPACE Severity set to 'serious' from 'important' thanks Stopping processing here.

Bug#696691: freetype: multiple vulnerabilities in freetype before 2.4.11

2012-12-25 Thread Salvatore Bonaccorso
Source: freetype Severity: grave Tags: security Justification: user security hole -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, the following vulnerabilities were published for freetype. CVE-2012-5670[0]: Out-of-bounds write in _bdf_parse_glyphs CVE-2012-5669[1]: Out-of-bounds read in

Processed: Re: Bug#696691: freetype: multiple vulnerabilities in freetype before 2.4.11

2012-12-25 Thread Debian Bug Tracking System
Processing control commands: tags -1 + patch Bug #696691 [src:freetype] freetype: multiple vulnerabilities in freetype before 2.4.11 Added tag(s) patch. -- 696691: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696691 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#696691: freetype: multiple vulnerabilities in freetype before 2.4.11

2012-12-25 Thread Salvatore Bonaccorso
Control: tags -1 + patch Hi Steve Attached the debdiff containing the three git commints as quilt patches. They apply (with small offset). Hope that helps, Regards, Salvatore diff -u freetype-2.4.9/debian/changelog freetype-2.4.9/debian/changelog --- freetype-2.4.9/debian/changelog +++

Bug#696532: thanks, I'm working on it

2012-12-25 Thread Rolf Leggewie
Christoph, thank you for the report and patch. I've only become aware of it now. I've had a look and intend to fix the issue in both experimental and unstable with only a slight difference to what you suggest. I'm busy with family commitments and travel preparation for the next few days but

Bug#695718: ecl DFSG

2012-12-25 Thread Christoph Egger
Hi! A fix for unstable is currently building. Hopefully it's still building everywhere ecl tends to be a bit nasty there ;-) Regards Christoph -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#696681: falconpl: possible security issue due to misuse of the libcurl API

2012-12-25 Thread Kartik Mistry
On Tue, Dec 25, 2012 at 11:11 PM, Alessandro Ghedini gh...@debian.org wrote: After discussing this with the security team, it was decided that it would be best if this was fixed before the Wheezy release. Note that this should be fixed anyway, since as of curl v7.28.1 (which has been

Bug#696681: falconpl: possible security issue due to misuse of the libcurl API

2012-12-25 Thread Vasudev Kamath
On Wed, Dec 26, 2012 at 11:16 AM, Kartik Mistry kartik.mis...@gmail.com wrote: This is done already: https://groups.google.com/forum/?fromgroups=#!msg/falconpl/Vnnv0yb-_Bg/Vkl5RFHEk8QJ (and related discussions on IRC at #falconpl, Freenode) Just a note patch is already merged into upstream [1]