Bug#320868: asterisk: Asterisk segfaults when hangup button in linphone pressed

reassign 320868 rate-engine found 320868 0.5.4-1 thanks Tzafrir Cohen wrote: On Mon, Aug 01, 2005 at 08:51:25PM -0400, Anthony DeRobertis wrote: Package: asterisk Version: 1:1.0.7.dfsg.1-2 Severity: grave Justification: renders package unusable Running with config included in package (except

Bug#320868: asterisk: Asterisk segfaults when hangup button in linphone pressed

Package: asterisk Version: 1:1.0.7.dfsg.1-2 Severity: grave Justification: renders package unusable Running with config included in package (except a few changes for the bind address). I have no telephony cards; only IP. Editing /etc/default/asterisk, to enable the commented-out debug options

Bug#319489: Buffer overflow in Description parsing

Kevin Dwyer wrote: - while (*scratch != '\n') { + while (*scratch != '\n' idx sizeof Description) { I strongly suspect that should be sizeof(Description)-1 because you're going to NULL-terminate... (didn't go back and look at the code to check closely) -- To UNSUBSCRIBE, email to

Bug#319489: Buffer overflow in Description parsing

Package: bidwatcher Version: 1.3.17-1 Severity: grave Tags: security -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In helpers.cpp, we find this code, which parses data returned from ebay: /* * Parse the description out of the buffer first. This is * most easily done at the

Bug#280987: Ooops, sorry, wrong link in my last comment...

Yeah, I meant to give http://bjorn.haxx.se/debian/testing.pl?package=mig instead. D'oh! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#280987: Don't the testing scripts already do that?

Don't the testing scripts already keep it out due to the gnumach bugs, without needing to file this fake bug? At least reading: http://bjorn.haxx.se/debian/testing.pl?package=gnumach seems to indicated they will. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe.

Bug#318506: Can't add auctions to bidwatcher anymore

Package: bidwatcher Version: 1.3.17-1 Severity: grave -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just tried to use bidwatcher again (haven't used it since April) and now it refuses to add ebay auctions. I tried both typing and copy/pasting the item number, but in both cases it says:

Bug#284835: electricsheep: Version in woody is so old it doesn't work at all

Thijs Kinkhorst wrote: woody cannot be updated anymore now sarge is released. I guess there are no options left other than to close this bug.. Seems that way. Either that, or just leave it tagged woody, to document the problem. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Bug#308421: Ten-song submissions limit loses data

Michael Ablassmeier wrote: indeed, i can reproduce this. From about 100 Submissions only ~10 found its way into the audioscrobbler database. Yes, this one is simple enough the patch out (it's a one-line change, I'll send you the patch if you want). However, upstream put it in to try and

Bug#308586: trying to overwrite `/usr/lib/python2.3/site-packages/apt_pkg.so', which is also in package python-apt

Package: python2.3-apt Version: 0.6.11 Severity: serious Tags: experimental -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Selecting previously deselected package python2.3-apt. Unpacking python2.3-apt (from .../python2.3-apt_0.6.11_i386.deb) ... dpkg: error processing

Bug#301878: xitalk -- Just exits; does not appear to do anything

Philipp Kern wrote: Hi there Anthony, It just exits; no messages, nothing. Could you please install strace and provide us with a ``strace xitalk'' just for the logs? Sure. BTW: There are some interesting lines in there, search for ttyp0, utmp, wtmp, and SIGSEGV. xitalk-strace.log.bz2

Bug#301878: Just exits; does not appear to do anything

Package: xitalk Version: 1.1.11-13 Severity: grave -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED]:tmp$ xitalk [EMAIL PROTECTED]:tmp$ [EMAIL PROTECTED]:tmp$ ps xa | grep xita 5652 pts/21 S+ 0:03 /usr/bin/python2.3 -S /usr/bin/reportbug xitalk 5716 pts/21 S+ 0:01

Bug#292777: Allows arbitrary command execution from filenames

Package: imms Version: 2.0.1-3 Severity: grave File: /usr/bin/analyzer Tags: security -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I was using analyzer on my music collection, and found this: [EMAIL PROTECTED]:Claude Debussy$ analyzer 'Claude Debussy - Prelude La Fille aux cheveux de

Bug#292777: Here is a patch

Package: imms Version: 2.0.1-3 Followup-For: Bug #292777 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Attached. I have only briefly tested this, so beware. This patch works by getting rid of the call to popen (and thus the shell). It replaces it with pipe, fork, exec, etc. - -- System

Bug#292777: Here is a patch

On Sat, Jan 29, 2005 at 04:40:44PM -0500, Justin Pryzby wrote: Quoting is also possible with $''; all one needs to do is loop around the given string and protect \ and ': $'' is a bash extension. It won't protect you if /bin/sh is, e.g., dash. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

<    1   2