Bug#856114: wolfssl: CVE-2017-6076

2017-03-03 Thread Clint Byrum
will make it into stretch. Currently, no packages depend > > on it. > > > > In the past, I cooperated with Clint Byrum as a sponsor and copied him on > > this message. Perhaps he would prefer to upload? Thank you! > > Clint, can you please take care of the sponsoring? I'm quite > over

Bug#811428: [debian-mysql] Bug#811428: Bug#811428: mysql-5.5: Multiple security fixes from the January 2016 CPU

2016-01-19 Thread Clint Byrum
Is anyone working on the build/test/upload of the final binaries? Excerpts from Norvald H. Ryeng's message of 2016-01-19 13:02:57 -0800: > The Critical Patch Update is out: > http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html > > The following vulnerabilities are fixed

Bug#793314: Let's just drop handlersocket

2016-01-01 Thread Clint Byrum
Excerpts from Esa Peuha's message of 2016-01-01 03:32:45 -0800: > On Wed, 30 Dec 2015, Clint Byrum wrote: > > > I orphaned it a long time ago, and nobody has stepped up to maintain, so > > I suggest just dropping it rather than chasing this RC. > > The people who have

Bug#793314: Let's just drop handlersocket

2015-12-30 Thread Clint Byrum
It is an interesting piece of technology, but IMO it is more trouble than it is worth, and most of the use cases for it are handled well by the Memcache protocol addition in MySQL 5.6: http://dev.mysql.com/doc/refman/5.6/en/innodb-memcached.html I orphaned it a long time ago, and nobody has

Bug#809011: closing 809011

2015-12-26 Thread Clint Byrum
close 809011 thanks The recent upload of 1.3.0-1 should address this.

Bug#775630: closing 775630

2015-03-09 Thread Clint Byrum
close 775630 thanks See http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/2015-March/007624.html -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#765663: [debian-mysql] Bug#765663: mysql-5.5: Multiple security fixes from October 2014 CPU

2014-11-05 Thread Clint Byrum
Sorry Salvatore, I think at least a couple of us have been preoccupied with the OpenStack summit in Paris the last few weeks. I'll try to make some time to update unstable ASAP. Excerpts from Salvatore Bonaccorso's message of 2014-11-05 22:19:12 +0100: On Fri, Oct 17, 2014 at 09:40:13AM +0200,

Bug#763378: [Pkg-monitoring-maintainers] Bug#763378: syslog-nagios-bridge is not installable

2014-11-03 Thread Clint Byrum
Apologies, I may have missed emails in the past. I will take a look at getting the latest pynag uploaded. Excerpts from Daniel Pocock's message of 2014-09-29 21:59:33 +0200: On 29/09/14 21:22, Aurelien Jarno wrote: Package: syslog-nagios-bridge Version: 1.0.1-4 Severity: grave

Bug#763378: [Pkg-monitoring-maintainers] Bug#763378: syslog-nagios-bridge is not installable

2014-11-03 Thread Clint Byrum
BTW, the last time Palli was seen on IRC was April 17. 07:49 ... join!#debian-python - palli(~pa...@212-30-216-15.static.simnet.is) Excerpts from Daniel Pocock's message of 2014-11-03 23:41:48 +0100: Palli's email address is bouncing: - The following addresses had permanent fatal

Bug#763378: [Pkg-monitoring-maintainers] Bug#763378: syslog-nagios-bridge is not installable

2014-11-03 Thread Clint Byrum
I've uploaded 0.9.1 to unstable. Excerpts from Daniel Pocock's message of 2014-09-29 21:59:33 +0200: On 29/09/14 21:22, Aurelien Jarno wrote: Package: syslog-nagios-bridge Version: 1.0.1-4 Severity: grave Justification: renders package unusable Latest upload of

Bug#730544: closing 730544

2013-12-26 Thread Clint Byrum
close 730544 2.1.6-2 thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#713580: handlersocket: diff for NMU version 1.1.0-7-g1044a28-1.1

2013-08-22 Thread Clint Byrum
Excerpts from gregor herrmann's message of 2013-08-22 08:13:29 -0700: tags 713580 + patch tags 713580 + pending thanks Dear maintainer, I've prepared an NMU for handlersocket (versioned as 1.1.0-7-g1044a28-1.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay

Bug#707280: [debian-mysql] Bug#707280: mysql-5.5: gcc-4.4 is targeted for removal in unstable

2013-05-08 Thread Clint Byrum
On 2013-05-08 10:47, Matthias Klose wrote: Package: mysql-5.5 Version: 5.5.31+dfsg-1 Severity: serious Tags: jessie sid User: debian-...@lists.debian.org Usertags: gcc-4.4-removal Jessie will ship without gcc-4.4. please use the default versions of the compiler packages to build this package

Bug#699886: [debian-mysql] Bug#699886: TLS timing attack in yaSSL (Lucky 13)

2013-04-14 Thread Clint Byrum
I will be at the openstack summit all this week, and thus pressed for time. An NMU for this bug would be most welcome, thanks!! Sent from my iPhone On Apr 14, 2013, at 6:25, Michael Stapelberg stapelb...@debian.org wrote: Hi Clint, Clint Byrum spam...@debian.org writes: Thanks Michael! I

Bug#699886: [debian-mysql] Bug#699886: TLS timing attack in yaSSL (Lucky 13)

2013-03-27 Thread Clint Byrum
Thanks Michael! I suspect that we will see 2.2.2d in one of the upcoming releases from Oracle. While I would prefer to ship wheezy with no known security bugs, I don't have much time to build and test a new package. If someone else wants to do that I will gladly sponsor it. -Original

Bug#698068: MySQL 5.5.30 does not fix CVE-2012-4414, what to do next?

2013-03-08 Thread Clint Byrum
Please refer to [1] as the rest of this message assumes the reader has read the log thus far. I have just now comitted MariaDB's test for CVE-2012-4414 to the SVN repo where we maintain mysql-5.5 unstable packaging. The package fails to build right now because this test fails. Lifting the test

Bug#698068: mysql-server-5.5: Serious regression in replication caused by fix for CVE-2012-4414

2013-02-28 Thread Clint Byrum
-02-03 at 22:53 +0100, Moritz Mühlenhoff wrote: On Sat, Jan 26, 2013 at 11:26:27AM +, Adam D. Barratt wrote: On Sun, 2013-01-13 at 11:53 -0800, Clint Byrum wrote: According to this blog post by Stewart Smith: http://www.mysqlperformanceblog.com/2013/01/13/cve-2012-4414-in-mysql-5-5-29

Bug#698068: mysql-server-5.5: Serious regression in replication caused by fix for CVE-2012-4414

2013-01-13 Thread Clint Byrum
Package: mysql-server-5.5 Version: 5.5.29+dfsg-1 Severity: grave Tags: upstream Justification: causes non-serious data loss According to this blog post by Stewart Smith: http://www.mysqlperformanceblog.com/2013/01/13/cve-2012-4414-in-mysql-5-5-29-and-percona-server-5-5-29/ It looks like 5.5.29

Bug#695001: I believe these are addressed upstream with 5.2.29

2013-01-02 Thread Clint Byrum
I have verified at least CVE-2012-5612 is fixed in 5.5.29. Will upload the new upstream version to unstable soon after some testing. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#694748: php5-ps segmentation fault on ps_setfont (64bit)

2012-11-29 Thread Clint Byrum
Package: php5-ps Version: 1.3.6-7 Severity: grave Tags: patch upstream Justification: renders package unusable Forwarding Ubuntu bug report: http://pad.lv/1024207 This was seen on Ubuntu and FreeBSD systems. Upstream has not acknowledged the bug (perhaps dead upstream?) -- System Information:

Bug#692871: mysql-server-5.5: Regression in privileges of mysql debian-sys-maint user

2012-11-09 Thread Clint Byrum
Package: mysql-server-5.5 Version: 5.5.28+dfsg-1 Severity: serious Justification: important This bug was originally reported in Ubuntu: https://bugs.launchpad.net/ubuntu/+source/mysql-5.5/+bug/1062716 Basically, the debian-sys-maint user, which is inserted via raw INSERT, is missing a new

Bug#684831: (no subject)

2012-08-25 Thread Clint Byrum
Looking into this FTBFS, it looks like this is an apt resolver bug. If I build w/ sbuild --build-dep-resolver=aptitude , libphonon-dev installs just fine and the package builds. I'm not sure what the correct course of action is though, as I'd like to close this RC bug if we can. -- To

Bug#685728: juju: Communication with store.juju.ubuntu.com is not authenticated

2012-08-23 Thread Clint Byrum
Package: juju Version: 0.5.1+bzr563-0juju2~quantal1 Severity: grave Tags: security patch upstream Justification: user security hole This problem with juju has been fixed in upstream trunk and so can be considered disclosed. When using juju with the built in charm store at store.juju.ubuntu.com,

Bug#685728: Packages pending

2012-08-23 Thread Clint Byrum
Will upload soon, but at the moment they FTBFS because of issues with argparse. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#674267: [debian-mysql] facing upto #674267

2012-06-20 Thread Clint Byrum
Excerpts from Matthias Klose's message of 2012-06-20 02:46:19 -0700: On 19.06.2012 17:54, Nicholas Bamber wrote: 1.) compile against gcc-4.5 and g++-4.5 2.) set the magic TAOCRYPT_DISABLE_X86ASM thingy causing SSL connections on those platforms to be slower. 3.) compile against gcc-4.4

Bug#675304: [debian-mysql] reassigning

2012-06-01 Thread Clint Byrum
Excerpts from Nicholas Bamber's message of 2012-06-01 02:17:01 -0700: reassign 675304 amarok thanks I am much clearer about this now. This bug is clearly a duplicate of #672207. That said I think we could have instead of changing language= /usr/share/mysql/english to

Bug#675304: [debian-mysql] Bug#675304: amarok

2012-05-31 Thread Clint Byrum
Excerpts from Nicholas Bamber's message of 2012-05-31 14:05:36 -0700: Modestas, I would be very grateful if you could advise us on this bug: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675304 I presume what has happpened is that the user is on testing and did an apt-get

Bug#674122: [debian-mysql] Fwd: Re: Bug#674122: otrs2: fails to upgrade from squeeze: Can't create table 'otrs2.#sql-1712_71

2012-05-25 Thread Clint Byrum
Excerpts from Patrick Matthäi's message of 2012-05-25 13:13:05 -0700: Hi Sean, Debian-MySQL team and the rest of the world first thanks to the MySQL team and sean for doing a good job with mysql and dbconfig-common But now we have got a critical issue with upgrades from Squeeze to Wheezy,

Bug#673162: handlersocket: FTBFS: configure: error: MySQL source version does not match MySQL binary version

2012-05-21 Thread Clint Byrum
Excerpts from gregor herrmann's message of Mon May 21 11:47:48 -0700 2012: On Wed, 16 May 2012 16:47:25 +0200, Christoph Egger wrote: Your package failed to build on the buildds Full build log at

Bug#660206: [debian-mysql] Bug#660206: Bug#660206: This is a regression

2012-04-10 Thread Clint Byrum
Excerpts from Olaf van der Spek's message of Tue Apr 10 10:23:27 -0700 2012: On Tue, Apr 10, 2012 at 5:59 PM, micah anderson mi...@riseup.net wrote: I agree. However, the reality is that the security upgrade brought in unrelated changes to the security upgrade and caused unrelated software

Bug#660206: [debian-mysql] Bug#660206: This is a regression

2012-04-09 Thread Clint Byrum
Excerpts from micah anderson's message of Sun Apr 08 10:13:40 -0700 2012: severity 660206 serious thanks This is actually a regression, the only way to get things to work again is to downgrade package like such: apt-get install mysql-server-5.1=5.1.49-3 mysql-client-5.1=5.1.49-3

Bug#631820: gearman-interface: FTBFS: SWIG version = 1.3.31 is required. You have 2.0.4.

2012-03-03 Thread Clint Byrum
Thanks, I have not been able to spend much time on gearman-interface lately. Thanks for the heads up. Note that the Vcs-Bzr in the package is more or less correct, and you may want to consider tacking my pending changes on top of this as one of them is an RC bug fix. Excerpts from coldtobi's

Bug#659687: Debian RT - Fix for mysql CVE's needs sponsorship

2012-03-03 Thread Clint Byrum
Hello! I have prepared fixed packages for stable-security and unstable for mysql-5.1. They are available in SVN here (these are tagged and ready to upload): http://anonscm.debian.org/viewvc/pkg-mysql/mysql-5.1/branches/ Or I can upload the raw source packages somewhere if that is preferred.

Bug#631820: Fix found, awaiting upstream feedback

2011-07-13 Thread Clint Byrum
The problem here is just that the autoconf ac_pkg_swig.m4 snippet used in the m4 dir of gearman-interface is broken and cannot detect swig versions greater than 1.x. There is an updated macro available in the latest version of autoconf-archive, which I've asked upstream to include (they do not

Bug#620469: [Python-modules-team] Bug#620469: Bug#620496

2011-06-08 Thread Clint Byrum
Excerpts from Piotr Ożarowski's message of Tue Apr 19 03:27:05 -0700 2011: FYI: if this package doesn't use setuptools/distribute's namespace_packages.txt, you can add --namespace gearman to dh_python2's call and let the helper handle namespace issue Hi Piotr. If I understand the suggestion

Bug#620469: Bug#620496

2011-04-18 Thread Clint Byrum
Excerpts from Oxan van Leeuwen's message of Mon Apr 18 11:49:18 -0700 2011: Hi Clint, On 03-04-11 18:53, Clint Byrum wrote: I think the way to go is to drop __init__.py from python-gearman.libgearman, and make it depend on python-gearman, since it is a sub-module of the gearman namespace

Bug#620469: Bug#620496

2011-04-03 Thread Clint Byrum
Excerpts from Oxan van Leeuwen's message of Sun Apr 03 05:43:27 -0700 2011: # wheezy not affected as this bug blocks python-gearman from migrating tag 620469 + sid thanks I see three solutions for this problem: (A) Add Conflicts against each other. This prevents users from installing

Bug#599127: Reported in Ubuntu as well

2011-01-06 Thread Clint Byrum
https://bugs.launchpad.net/debian/+source/libdbi/+bug/673307 There is a fix pending in the merge proposal there. As you'll see, this was also reported and fixed in Fedora. This is a simple fix Thomas, I suggest just tacking '-fno-fast-math' onto the CFLAGS. Since this is marked release

Bug#602222: Should bacula-sd have an OR in the recommends?

2010-11-20 Thread Clint Byrum
Would it fix the problem if bacula-sd had Recommends: mt-st, bacula-sd-sqlite3 (= 5.0.2-2) | bacula-sd-tools Similar to the way bacula-server depends on bacula-sd-tools? -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#595120: suggstion for resolution to bug#595120 - skip-name-resolve in mysql-server-5.1

2010-10-07 Thread Clint Byrum
+++ mysql-5.1-5.1.49/debian/changelog @@ -1,3 +1,10 @@ +mysql-5.1 (5.1.49-1.1) unstable; urgency=low + + * debian/mysql-server-5.1.mysql.init: Remove $named from + Should-Start/Should-Stop (closes: #595120) + + -- Clint Byrum cl...@ubuntu.com Thu, 07 Oct 2010 01:02:49 -0700 + mysql-5.1

Bug#590383: I believe this bug is fixed

2010-10-07 Thread Clint Byrum
I was able to build v1.8.1-1 using pbuilder and the latest updated testing dist. rabbitmq-server-build.log Description: Binary data

Bug#594607: Status in Ubuntu, and Experimental

2010-09-18 Thread Clint Byrum
I just wanted to share the status in Ubuntu 10.10 here as well. We've left libdbi v0.8.3 in 10.10. The rationale is that all of the affected packages in ubuntu test well, and do not use the enum that was changed between 0.8.2 and 0.8.3. This does mean things compiled by 3rd parties that do use

Bug#594607: libdbi upload to SID reverted (was: Freeze exception for libdbi and libdbi-drivers)

2010-08-31 Thread Clint Byrum
to libdbi-dev, and rebuild them. As far as squeeze goes, this probably won't happen. But it should be doable for Ubuntu 10.10. Markus, thanks for pushing this out quickly! On Aug 31, 2010, at 4:46 PM, Markus Hoenicka wrote: Clint Byrum writes: I believe all that is needed is to bump 'LIB_CURRENT

Bug#594607: libdbi upload to SID reverted (was: Freeze exception for libdbi and libdbi-drivers)

2010-08-28 Thread Clint Byrum
version of the 0.8.x series, and upload it to experimental (so that Ubuntu gets a chance to have the new package we've been working on before 10.10 is out in few month, which was the motivation of Clint Byrum). Markus, it would be great if an 0.8.4 or 0.8.3.1 release arrived with soname bumped. We

Bug#593642: python-gearman.libgearman: gearman.libgearman module missing

2010-08-20 Thread Clint Byrum
Hi Jakub, Indeed, it would seem that the amd64 binary package that ccheney built and uploaded was not built clean. If the clean step is run before the build step, python/libgearman.py gets created. Since autobuilders don't run clean before build, a missing libgearman.py is the result. To fix

Bug#571220: upstream not going to fix deprecation errors

2010-08-13 Thread Clint Byrum
According to this upstream bug https://sourceforge.net/tracker/?func=detailaid=2954087group_id=37132atid=418980 phppgadmin 4.x isn't supposed to work on php 5.3. I'd suggest patching Misc.php as Alan suggests. That is what I've done as well to make phppgadmin work, and it doesn't change the