Bug#478968: [Pkg-awstats-devel] Bug#478968: Bug#478968: Do you want me to NMU awstats?

2008-05-21 Thread Charles Fry
Or even better: How would you like to join our little team maintaining awstats? I don't have any deeper awstats knowledge, and I'm not even a perl guru, but sure.. I've been running awstats for a long time and I have no plans to stop using it anytime soon, so I'm interested in seeing it

Bug#433456: I'm experiencing this problem as well

2007-08-02 Thread Charles Fry
Since we know that the file we are looking for is package.xml, is there any reason not to specify that explicitely, instead of using . which isn't working for some of us? Charles On 7/21/07, Charles Fry [EMAIL PROTECTED] wrote: % /usr/bin/php5 -f /usr/share/dh-make-php/phppkginfo . package

Bug#433456: I'm experiencing this problem as well

2007-07-21 Thread Charles Fry
% /usr/bin/php5 -f /usr/share/dh-make-php/phppkginfo . package % /usr/bin/php5 -f /usr/share/dh-make-php/phppkginfo package.xml package Pager% I don't know what the extra character is at the end, either. In any case, I am running a stable installation, which may have something to do with it? If

Bug#432499: libhtml-mason-perl: FTBFS: unmet build dep libapache-request-perl

2007-07-10 Thread Charles Fry
Can somebody help me understand this. Is libapache-request-perl really scheduled for removal from unstable, and if so, how would I have been able to determine that on my own? thanks, Charles On 7/10/07, Lucas Nussbaum [EMAIL PROTECTED] wrote: Package: libhtml-mason-perl version: 1:1.35-3

Bug#432499: libhtml-mason-perl: FTBFS: unmet build dep libapache-request-perl

2007-07-10 Thread Charles Fry
/liba/libapache-request-perl.html (under problems): This package has been requested to be removed. Charles Fry wrote: Can somebody help me understand this. Is libapache-request-perl really scheduled for removal from unstable, and if so, how would I have been able to determine that on my own

Bug#388571: [Pkg-awstats-devel] Bug#395142: Awstats package not found using apt-get

2006-10-25 Thread Charles Fry
After running apt-get update, now apt-cache search awstats cannot find the package anymore. awstats used to be be there untill only last week. My Debian distribution is etch, kernel 2.6.16-2-686-smp The problem is that awstats was kindly removed from testing due to bug #388571 (it

Bug#388571: [Pkg-awstats-devel] Bug#388571: awstats: Non-free Firefox icon included

2006-09-22 Thread Charles Fry
Can anyone comment on whether or not it is problematic for us to distribute a tiny icon of Firefox's logo? The only thing I could find is: http://www.mozilla.org/products/firefox/buttons.html which says Mozilla Firefox and the Firefox logo are trademarks of The Mozilla Foundation. Usage

Bug#378249: courier-authlib: doesn't use shlibs

2006-07-22 Thread Charles Fry
courier-authlib appear to use shlibs as required by Policy 8.6. As a result, when I build courierpassd I get the following: dpkg-shlibdeps: warning: unable to find dependency information for shared library libcourierauth (soname 0, path libcourierauth.so.0, dependency field

Bug#378960: [Pkg-awstats-devel] Bug#378960: awstats: CVE-2006-3681 CVE-2006-3682: multiple vulnerabilities

2006-07-21 Thread Charles Fry
Are these fixed in 6.6? When do you expect to release 6.6? It is fixed in 6.6. I have just launched the beta start for 6.6 meanings code in current 6.6 package will not change (except for bug corrections found during beta). Beta last about 2 month. I also updated the AWStats

Bug#378960: [Pkg-awstats-devel] Bug#378960: awstats: CVE-2006-3681 CVE-2006-3682: multiple vulnerabilities

2006-07-19 Thread Charles Fry
Hi Laurent, Can you please comment on these vulnerabilities, especially CVE-2006-3681? Are these fixed in 6.6? When do you expect to release 6.6? thanks, Charles -Original Message- From: Alec Berryman [EMAIL PROTECTED] Subject: [Pkg-awstats-devel] Bug#378960: awstats: CVE-2006-3681

Bug#378571: courier-authdaemon: socket directory should have 750 permissions

2006-07-17 Thread Charles Fry
Package: courier-authdaemon Version: 0.58-3 Severity: critical Tags: security Justification: root security hole Hi, The current courier-authdaemon package sets 755 permissions on the directory /var/run/courier/authdaemon which allows non-root users to connect to the authentication daemon. The

Bug#378241: courier-authlib: libraries should be in /usr/lib

2006-07-14 Thread Charles Fry
Package: courier-authlib Version: 0.58-3 Severity: serious Justification: Policy 10.2 Hi, I just uploaded courierpassd which uses courier-authlib to change courier user passwords. I've been discussing on debian-mentors a lintian warning which complains about the rpath used to access the

Bug#378249: courier-authlib: doesn't use shlibs

2006-07-14 Thread Charles Fry
Package: courier-authlib Version: 0.58-3 Severity: serious Justification: Policy 8.6 Hi, courier-authlib appear to use shlibs as required by Policy 8.6. As a result, when I build courierpassd I get the following: dpkg-shlibdeps: warning: unable to find dependency information for shared

Bug#378241: at least libcourierauth

2006-07-14 Thread Charles Fry
I should point out that the shared library which I need is libcourierauth. It may very well be the case that the others can remain private. Charles -- Just moisten Your tooth brush Dip in jar And you'll enjoy Cleaner teeth by far Burma-Vita Tooth Powder

Bug#378249: at least libcourierauth

2006-07-14 Thread Charles Fry
I should have specified that all I really need is libcourierauth. I guess that whatever libraries are made public per bug #378241 should use shlibs. Charles -- Free--free A trip To Mars For 900 Empty jars Burma-Shave http://burma-shave.org/jingles/1955/free_free signature.asc Description:

Bug#377119: libsvn-javahl: package name violates Java policy

2006-07-11 Thread Charles Fry
So ... I'm CCing this to the debian-java list with a question: is it reasonable to name a package 'libsvn-java' if the jar file it ships is named svn-javahl.jar? I really don't like 'libsvn-javahl-java' as a name (reminds me of 'python-pyvorbis'), but if policy requires it, we'll use it.

Bug#377119: libsvn-javahl: package name violates Java policy

2006-07-10 Thread Charles Fry
Yes, I wonder about that too. The jar file really is named svn-javahl, for historical reasons: there was once a second effort (now dead, I believe) to produce java bindings which were not high-level. There is also an independent project out there, not affiliated with the Subversion project

Bug#377119: libsvn-javahl: package name violates Java policy

2006-07-06 Thread Charles Fry
Package: libsvn-javahl Severity: serious Justification: Java policy 2.4 Hi, According to the current java policy, section 2.4: Java libraries packages must be named libXXX[version]-java (without the brackets), where the version part is optional and should only contain the necessary

Bug#312932: need stable binary name

2006-05-30 Thread Charles Fry
Hi, It is urgent that this bug be fixed in a timely manner. We need to upload a package that depends on and uses xmlstarlet, but can't do so if the binary name is different on different architectures. thanks, Charles -- The answer to A shaver's dream A greaseless No brush Shaving cream

Bug#312932: xmlstarlet package

2006-05-18 Thread Charles Fry
Are you still trying to maintain the Debian xmlstarlet package? There are currently a number of very old bugs that are very important that have been ignored for over a year. Thanks for reminding me, I'm working on the package now. Unfortunately, the patch for bug #312932 induces another

Bug#353932: machine compromised with awstats.pl?configdir

2006-03-06 Thread Charles Fry
Someone was able to install zbind on my machine using the following scripts. The damage was limited to www-data, a restricted user, and logs were able to monitor behaviour, but posed a large threat. snip I notice that the attacker tried a number of different URLs. Is it possible that

Bug#353932: can't reproduce exploit

2006-03-02 Thread Charles Fry
My attempts to reproduce this exploit have failed. Anyone else? Charles -- 6 million housewives Can't be wrong Who keep Their husbands Right along in Burma-Shave http://burma-shave.org/jingles/1955/million_housewives signature.asc Description: Digital signature

Bug#331418: please update the license text

2006-02-09 Thread Charles Fry
severity 332606 important severity 332607 important severity 332608 important severity 332609 important severity 332610 important severity 332611 important severity 332613 important severity 332614 important severity 332615 important severity 332616 important severity 332617 important severity

Bug#346788: xasteroids: FTBFS: build-depends on removed xlibs-dev

2006-01-12 Thread Charles Fry
This has been fixed in the new version at: http://debian.frogcircus.org/packages/ I'm actively looking for someone to upload it. cheers, Charles -Original Message- From: Adeodato Simó [EMAIL PROTECTED] Subject: Bug#346788: xasteroids: FTBFS: build-depends on removed xlibs-dev

Bug#332606: PHP License

2006-01-05 Thread Charles Fry
I just wanted to make sure that all relevant RC bugs were aware of the following debian-legal post by MJ Ray: The PHP licence could be OK for any software which has PHP Group contribution (regardless who is licensing later), but would require lying about other software. So, it is

Bug#332606: PHP License

2006-01-05 Thread Charles Fry
, assuming that they deal with Pear packages, which I have not taken the time to verify. The PHP License clearly remains unacceptable for all non-PHP Group software. Charles 1. http://lists.debian.org/debian-legal/2005/11/msg00260.html -Original Message- From: Charles Fry [EMAIL PROTECTED

Bug#337584: alternatives

2005-11-16 Thread Charles Fry
Well, in order to get my RC bugs closed, I temmporarily switched to xmlstarlet. Nonetheless, I do believe that this is a serious issue that should be addressed. There is no reason that I can come up with that a computer without a network connection should be prevented from running xpath on a local

Bug#332611: [Fwd: Re: File/HTTP and the PHP License]

2005-11-09 Thread Charles Fry
- Forwarded message from Michael Wallner [EMAIL PROTECTED] - From: Michael Wallner [EMAIL PROTECTED] Subject: Re: File/HTTP and the PHP License Date: Wed, 09 Nov 2005 09:03:17 +0100 To: Charles Fry [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Hi Charles, the process of converting all

Bug#337437: bug dependency correction

2005-11-09 Thread Charles Fry
Umm, actually I meant that these are dependent on bug 337584. Charles -- The tube's A whopper 35 cents Easy shaving Low expense Burma-Shave http://burma-shave.org/jingles/1932/the_tubes signature.asc Description: Digital signature

Bug#337584: xpath without network connection

2005-11-09 Thread Charles Fry
Hi, I recently filed bug #337584, about how libxml-xpath-perl fails in the absense of a network connection when an online DTD is specified in the file being parsed (the actual failure seems to come from libxml-parser-perl, perhaps I should have filed the bug there?). It ends up that I was using

Bug#332607: Date and the PHP License

2005-11-09 Thread Charles Fry
- The pear group does not work on this problem but have asked the PHP group (!). - We wait since a year to have a change, after having discussed this issue, it seems that only the PHP related text includes PHP will be changed but not includes Zend.. There were also other problematic

Bug#332607: Date and the PHP License

2005-11-09 Thread Charles Fry
For example, the Pear group could remove the PHP License from their list of acceptable licenses, and encourage all packages released under the PHP License to migrate to the practically equivilant BSD License. I will bring that to the group before the end of the year (I am in this

Bug#332617: Services_Weather and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Services_Weather module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Services_Weather is released is problematic for

Bug#332618: XML_Parser and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR XML_Parser module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which XML_Parser is released is problematic for software

Bug#332608: DB and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR DB module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which DB is released is problematic for software other than PHP

Bug#332611: HTTP and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR HTTP module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which HTTP is released is problematic for software other than PHP

Bug#332613: Mail and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Mail module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Mail is released is problematic for software other than PHP

Bug#332609: File and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR File module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which File is released is problematic for software other than PHP

Bug#332616: Net_Socket and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Net_Socket module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Net_Socket is released is problematic for software

Bug#331418: Log and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Log module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Log is released is problematic for software other than PHP

Bug#332606: Auth and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Auth module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Auth is released is problematic for software other than PHP

Bug#332607: Date and the PHP License

2005-11-08 Thread Charles Fry
Hi, As you may already be aware, a Debian package of your PEAR Date module has been created for distribution as a part of Debian (and thereafter all of its derivatives). Unfortunately, it was discovered that the PHP License under which Date is released is problematic for software other than PHP

Bug#334833: awstats 6.4-1.1 security fix

2005-11-08 Thread Charles Fry
Hi, Version 6.4-1.1 of awstats was uploaded to unstable in response to CVE-2005-1527. However, it was never uploaded to stable-security, even though version 6.4.1 is the current stable version of awstats. As far as I can tell, 6.4-1.1 (or 6.4.2) should be uploaded to stable-security. Charles

Bug#332607: Date and the PHP License

2005-11-08 Thread Charles Fry
Pierre Joy has already asked, and I have agreed to switch Date to the BSD license. I believe the other developers involved with the Date/TimeZone code have also agreed. If there is anything else I need to do, please let me know. In addition to agreeing, you simply need to make the change

Bug#338014: lsh-utils: lcp depends on lsh

2005-11-07 Thread Charles Fry
Package: lsh-utils Version: 2.0.1-4.2 Severity: serious lcp needs lsh in order to properly execute, which dependency should be explicitely indicated in debian/control. Charles -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (900, 'testing'), (800,

Bug#337437: depends on xpath networkless failure

2005-11-07 Thread Charles Fry
All of these bugs are dependent on bug 338017, where xpath fails in the absence of a network connection. If xpath is unwilling to fix this, then xmlstarlet can always be used, but I am hesitant to do that as the problem is actually in pear.mk which has already been submitted to CDBS (bug 332632).

Bug#325271: tinycdb doesn't provide cdbmake

2005-11-07 Thread Charles Fry
clone 325271 -1 reassign -1 freecdb retitle -1 skkdic requires cdbmake to complete migration from freecdb thanks tinycdb is not currently a fit replacement for freecdb in skkdic, which depends on the cdbmake command, which is not currenlty included in tinycdb. It seems that cdbmake should either

Bug#325270: patch for migration to tinycdb

2005-11-07 Thread Charles Fry
tags 325270 patch thanks Hi, Attached is a patch for migrating from freecdb to tinycdb. Charles -- The whale Put Jonah Down the hatch But coughed him up Because he scratched Burma-Shave http://burma-shave.org/jingles/1950/the_whale diff -Nur dbskkd-cdb-1.01-orig/debian/control

Bug#325272: patch for migration to tinycdb

2005-11-07 Thread Charles Fry
tags 325272 patch thanks Hi, Attached is a patch for migrating from freecdb to tinycdb. Charles -- The whale Put Jonah Down the hatch But coughed him up Because he scratched Burma-Shave http://burma-shave.org/jingles/1950/the_whale diff -Nru skksearch-0.0-orig/debian/cdb.h

Bug#337437: php-cache-lite: FTBFS: can't rm -*/package.xml (missing Build-Depends?)

2005-11-04 Thread Charles Fry
Daniel, First, I thank you for catching this. The package built properly in my pbuilder environment, which I can only assume is due to the fact that this specific problem is indeed based on a requiremnt of the xpath implementation I was using to retrieve the DTD from the network. I've created a

Bug#315676: libapache2-mod-perl2: perl.conf incorrectly handled

2005-06-24 Thread Charles Fry
Package: libapache2-mod-perl2 Version: 2.0.1-1 Severity: grave Justification: renders package unusable Hi, The new libapache2-mod-perl2 (which I thank you for) does not contain a perl.conf, yet it attempts to install one in rules: -install -m644 $(CURDIR)/debian/perl.conf