date:20190831

Bug#934293: marked as done (fuse3.postinst fails)

2019-08-31 Thread Debian Bug Tracking System

Your message dated Sun, 01 Sep 2019 06:49:36 +
with message-id 
and subject line Bug#934293: fixed in fuse3 3.6.2-1
has caused the Debian Bug report #934293,
regarding fuse3.postinst fails
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
934293: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934293
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: fuse3
Version: 3.4.1-1
Severity: normal

root@nuc8:/home/roderich# apt install fuse3
...
Setting up fuse3 (3.4.1-1) ...
dpkg: error processing package fuse3 (--configure):
 installed fuse3 package post-installation script subprocess returned error
exit status 1
Errors were encountered while processing:
 fuse3
E: Sub-process /usr/bin/dpkg returned an error code (1)


The problem is line 34 of fuse3.postint, running it by hand gives

root@nuc8:/home/roderich# udevadm test --action -p  $(udevadm info -q path -n
/dev/fuse)
Invalid action '-p'


Cheers, Roderich




-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.2.7 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fuse3 depends on:
ii  adduser 3.118
ii  libc6   2.28-10
ii  libfuse3-3  3.4.1-1
ii  lsb-base10.2019051400
ii  mount   2.34-0.1
ii  sed 4.7-1

fuse3 recommends no packages.

fuse3 suggests no packages.

-- Configuration Files:
/etc/fuse.conf [Errno 2] No such file or directory: '/etc/fuse.conf'

-- no debconf information
--- End Message ---
--- Begin Message ---
Source: fuse3
Source-Version: 3.6.2-1

We believe that the bug you reported is fixed in the latest version of
fuse3, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 934...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS)  (supplier of updated fuse3 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 01 Sep 2019 06:15:20 +
Source: fuse3
Architecture: source
Version: 3.6.2-1
Distribution: unstable
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) 
Changed-By: Laszlo Boszormenyi (GCS) 
Closes: 934293
Changes:
 fuse3 (3.6.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop outdated udevadm commands from postinst (closes: #934293).
   * Remove dh_makeshlibs override.
   * Update Standards-Version to 4.4.0 .
Checksums-Sha1:
 6d5f7f030e85a03265357b054e6eb533bf9b04ee 2327 fuse3_3.6.2-1.dsc
 2bdef7a3f1f9e63fed87559c6e77d27e5f2c2e0c 126 fuse3_3.6.2.orig.tar.xz
 32dff1bd03d43226eb833be6a7897cce00e6aa2f 1012 fuse3_3.6.2.orig.tar.xz.asc
 1761c11fce6ba2ccbfdab8332cfc8fe62d4c8534 16552 fuse3_3.6.2-1.debian.tar.xz
Checksums-Sha256:
 e5b48112d6874035f71a94fa6525b2098987d162e0cfec2916bbc19782fe3269 2327 
fuse3_3.6.2-1.dsc
 f45869427575e1e59ab743a67deb57addbf2cb8f9ce431199dbd40ddab71f281 126 
fuse3_3.6.2.orig.tar.xz
 f4f7d6139ef2ba5de395c34aee50ab1c9eb5b27b77c13155fff5da6db32f9edf 1012 
fuse3_3.6.2.orig.tar.xz.asc
 61db31529bf2e6c10398c8e047a3d322a8cd4545dd15b8ec4c76915398d0cf07 16552 
fuse3_3.6.2-1.debian.tar.xz
Files:
 2a1177ebf29c4ac0989fb8837c7e491b 2327 utils optional fuse3_3.6.2-1.dsc
 1798945aa69434286723ba141c7a 126 utils optional fuse3_3.6.2.orig.tar.xz
 b86f354336e6231029d8939adf9fd91d 1012 utils optional 
fuse3_3.6.2.orig.tar.xz.asc
 c2a1a400e8dd37544e0b6f955ec50c56 16552 utils optional 
fuse3_3.6.2-1.debian.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAl1rZe0ACgkQ3OMQ54ZM
yL+N5BAAlOmtcc7fp8Kwovqy/IrJ81FK089RgsyxtxHCCCGyOQKre3if+iB4i782
3SmUj/piLsyAolXe1TjWeBtKQi3b0NwR65C7jDyLjpLXsFB9pYs3OHSex7kPQNQk
KFTZfFrqSPw2lDU0tNFbhOz9hABxl7k1flkbdhQXwZCtjB861/4BA4VpImQOQPco
RD6yp3GceY8dgoKpJTZdkmvc0LZgyOgQcU/nEEA5jWpeJJaQ+HGbEccOv+pmFgPZ
evJPYEXC1T2B4D5jYXgeP1U2HNPvJaash3bOIEGG08Oog6TW6eMWwXYTgtOw48uq
ssvpZvbfWAbXdyQ/k3xTpllWFv04NObd0a4SHdrIt6HgFFMm6EIg+zl2BlKs

Processed: reassign 939022

2019-08-31 Thread Debian Bug Tracking System

Processing commands for cont...@bugs.debian.org:

> reassign 939022 pyresample
Bug #939022 [basemap] pyresample: autopkgtest failure with PROJ 6 (epsg data 
file removed)
Bug reassigned from package 'basemap' to 'pyresample'.
Ignoring request to alter found versions of bug #939022 to the same values 
previously set
Ignoring request to alter fixed versions of bug #939022 to the same values 
previously set
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
939022: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939022
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#932197: Please switch to Python 3

2019-08-31 Thread Scott Kitterman

On Tue, 16 Jul 2019 16:07:38 +0200 Thomas Goirand  wrote:
> Source: nipype
> Version: 1.1.9-1
> Severity: important
> 
> Hi,
> 
> I'd like to switch python-xvfbwrapper to Python 3 only, and noticed that
> nipype only has Python 2 support. Python 2 is going to be removed from
> Sid/Testing.

Python3 is supported upstream.

Scott K

Bug#903201: marked as done (cinnamon: CVE-2018-13054: privilege escalation in cinnamon-settings-users.py GUI)

2019-08-31 Thread Debian Bug Tracking System

Your message dated Sun, 1 Sep 2019 13:00:08 +0900
with message-id <20190901040008.coxo57fmkbz6k...@bulldog.preining.info>
and subject line CVE-2018-13054: privilege escalation in
cinnamon-settings-users.py GUI
has caused the Debian Bug report #903201,
regarding cinnamon: CVE-2018-13054: privilege escalation in
cinnamon-settings-users.py GUI
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)

--
903201: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903201
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: cinnamon
Version: 3.2.7-4
Severity: grave
Tags: patch security upstream
Forwarded: https://github.com/linuxmint/Cinnamon/pull/7683

Hi,

The following vulnerability was published for cinnamon.

CVE-2018-13054[0]:
| An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The
| cinnamon-settings-users.py GUI runs as root and allows configuration of
| (for example) other users' icon files in
| _on_face_browse_menuitem_activated and _on_face_menuitem_activated.
| These icon files are written to the respective user's $HOME/.face
| location. If an unprivileged user prepares a symlink pointing to an
| arbitrary location, then this location will be overwritten with the
| icon content.

It requires admin intervention though, but still filling it as RC
severity.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-13054
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13054
[1] https://github.com/linuxmint/Cinnamon/pull/7683
[2] https://bugzilla.suse.com/show_bug.cgi?id=1083067

Regards,
Salvatore
--- End Message ---
--- Begin Message ---
fixed 903201 3.8.8-1
thanks

Hi all,

there is still
#903201 cinnamon: CVE-2018-13054: privilege escalation in
cinnamon-settings-users.py GUI
open, but it is already fixed in 3.8.8, so I am closing this bug now and
mark it as fixed in 3.8.8-1 in buster.

There is a fix to remove the root owned .face file that is not
incorporated, we could add that later on. For the time being I create a
buster branch that incorporates that fix. We will see if we upload it to
a point release.

Best

Norbert

--
PREINING Norbert http://www.preining.info
Accelia Inc. + IFMGA ProGuide + TU Wien + JAIST + TeX Live + Debian Dev
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13--- End Message ---

86 matches

Mail list logo