Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 04:27:44PM -0400, Fungi4All wrote: > Are all the bug reports going to bugs.debian.whoreg? No, they shouldn't, as you can see here: http://bugs.devuan.org Which version of reportbug are you using? On which release? HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ -

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

On Tue, Jul 18, 2017 at 03:10:13PM -0400, Ismael L. Donis Garcia wrote: [cut] > >>No Arnt, there is actually an error in the Release file generated by > >>dak for experimental, and apparently this mistake bothers debmirror > >>(but not apt & Co., otherwise we would have noticed this before). It

Re: [DNG] I apologize, but I lost my email somehow with the, packages needed for openrc

On 170718-18:00-0400, zap wrote: > I want to install it on another laptop with ascii... > > util-linux > > sysvinit-util > > and one other package needed? i forget which though... (You've already found your own packages, as you say in your other messages, all three of different subject

[DNG] nevermind, my messages,

I found my openrc packages and it is on again! hehe ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] svante, do you still have those three packages,

i forgot to save them, i need them for a different laptop... ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] I apologize, but I lost my email somehow with the, packages needed for openrc

I want to install it on another laptop with ascii... util-linux sysvinit-util and one other package needed? i forget which though... svante, can you send those three packages directly to me one more time? I thought I had them saved somewhere... alas.

Re: [DNG] VBScript Injection via GNOME Thumbnailer

On Tue, Jul 18, 2017 at 10:07:35PM +0200, Adam Borowski wrote: > Actually, imagemagick is one of worst offenders here. The version in Jessie > is at deb8u9, and every security update tends to mention ~20 CVEs. ... nd, just hours later, here comes deb8u10: # Package: imagemagick #

Re: [DNG] VBScript Injection via GNOME Thumbnailer

On 2017-07-18 20:07, Adam Borowski wrote: > On Tue, Jul 18, 2017 at 06:15:20PM +, Daniel Abrecht wrote: >> Since thumbnails have to be generated somehow, they need some kind of >> generator. To use plugins, which are resembled by executables in this >> case, is a perfectly fine approach for

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

> On Tue, 18 Jul 2017 15:14:41 -0400, fungi4...@protonmail.com>: >> > From: sli...@natio.co.cu >> > To: dng@lists.dyne.org >> > - Original Message - >> > From: "Arnt Karlsen" >> >> >> >> ..ok, we have found a debmirror bug. :o) >> > I do not think so, I think it"s an

Re: [DNG] VBScript Injection via GNOME Thumbnailer

On Tue, Jul 18, 2017 at 06:15:20PM +, Daniel Abrecht wrote: > Since thumbnails have to be generated somehow, they need some kind of > generator. To use plugins, which are resembled by executables in this > case, is a perfectly fine approach for this. Uhm, but why? I can understand a

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

> From: sli...@natio.co.cu > To: dng@lists.dyne.org > - Original Message - > From: "Arnt Karlsen" >> >> ..ok, we have found a debmirror bug. :o) > I do not think so, I think it"s an insect that generates the Release file. >> ..med vennlig hilsen = with Kind Regards from

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 2:48 PM Subject: Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 18:13:09 +0100, KatolaZ wrote in message

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

On Tue, 18 Jul 2017 18:13:09 +0100, KatolaZ wrote in message <20170718171309.gk15...@katolaz.homeunix.net>: > On Tue, Jul 18, 2017 at 07:06:46PM +0200, Arnt Karlsen wrote: > > [cut] > > > > error al abrir fichero > > > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > > >

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 1:06 PM Subject: Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 09:36:10 -0400, Ismael wrote in message

Re: [DNG] VBScript Injection via GNOME Thumbnailer

Since thumbnails have to be generated somehow, they need some kind of generator. To use plugins, which are resembled by executables in this case, is a perfectly fine approach for this. The real problem is that despite it's well known that thumbnail generators have a really big attack surface,

Re: [DNG] VBScript Injection via GNOME Thumbnailer

Quoting Adam Borowski (kilob...@angband.pl): > But _why_ would you say this is an excuse? Wine is an unrelated piece of > software, and it's not a bug in Wine. I agree with your well-stated take on this. I'm merely pointing out that the original statement that GNOME's thumbnailer displays the

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

On Tue, Jul 18, 2017 at 07:06:46PM +0200, Arnt Karlsen wrote: [cut] > > error al abrir fichero > > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > > 541922FB gpgv: Imposible comprobar la firma: clave pública no > > encontrada Release gpg signature does not verify. > > [ 23%]

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

On Tue, 18 Jul 2017 09:36:10 -0400, Ismael wrote in message : > - Original Message - > From: "Arnt Karlsen" > To: > Sent: Tuesday, July 18, 2017 9:04 AM > Subject: [DNG] ..experimental mirror is fixed

[DNG] Hello says 'idonis'

Package: amprolla Create the Release file of the experimental branch with the line: Codename: none And should have the name of the branch Codename: experimental This prevents me from downloading the repositories to my PC. Which prevents me from using devuan in places where there is no Internet

Re: [DNG] VBScript Injection via GNOME Thumbnailer

On 18.07.2017 08:45, Rick Moen wrote: Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but merely use it if it's present. The fact that it silently starts proprietary executables (eg. the windows scripting host), just because they're there, indeed is a huge bug, more

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 11:26:42AM -0400, Ismael L. Donis Garcia wrote: [cut] > > If I understand it very well to you. > > The problem is that I do not know how to proceed since it is not a package. > The problem is the release file, which must have the name of the codename and > not have

Re: [DNG] udev replacement

- Original Message - From: "Antony Stone" To: Sent: Tuesday, July 18, 2017 11:01 AM Subject: Re: [DNG] udev replacement > On Tuesday 18 July 2017 at 15:59:01, Ismael L. Donis Garcia wrote: > >> >- Original Message - >>

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 10:59:01AM -0400, Ismael L. Donis Garcia wrote: > >- Original Message - From: "KatolaZ" > >To: > >Sent: Tuesday, July 18, 2017 10:32 AM > >Subject: Re: [DNG] udev replacement > > > >And also, could you please file a bug

Re: [DNG] udev replacement

On Tuesday 18 July 2017 at 15:59:01, Ismael L. Donis Garcia wrote: > >- Original Message - > >From: "KatolaZ" > >To: > >Sent: Tuesday, July 18, 2017 10:32 AM > >Subject: Re: [DNG] udev replacement > > > >And also, could you please file a bug

Re: [DNG] udev replacement

- Original Message - From: "KatolaZ" To: Sent: Tuesday, July 18, 2017 10:32 AM Subject: Re: [DNG] udev replacement And also, could you please file a bug report on bugs.devuan.org? I have never used it and I do not know how to do it. I do not

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 09:46:40AM -0400, Ismael L. Donis Garcia wrote: > > English is not my native language, so I may not explain it well. > Try the following script and you will notice the error that is giving me > when trying to download the repository for my pc. > That does not happen to me

Re: [DNG] udev replacement

- Original Message - From: "KatolaZ" To: Sent: Tuesday, July 18, 2017 9:29 AM Subject: Re: [DNG] udev replacement ___ Dng mailing list Dng@lists.dyne.org

Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement

- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 9:04 AM Subject: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 09:22:11AM -0400, Ismael L. Donis Garcia wrote: [cut] > > I'm trying to download it locally because I use it without internet access. > > Where I live very few people have access to the internet and in their homes > practically nobody, that is why usually the one who

Re: [DNG] udev replacement

- Original Message - From: "KatolaZ" To: Sent: Tuesday, July 18, 2017 8:56 AM Subject: Re: [DNG] udev replacement ___ Dng mailing list Dng@lists.dyne.org

[DNG] ..experimental mirror is fixed now?, was: udev replacement

On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message <137df52c5546401899313d3793aa3...@natio.co.cu>: > - Original Message - > From: "Arnt Karlsen" > To: > Sent: Monday, July 17, 2017 5:35 PM > Subject: Re: [DNG] udev replacement ... > >

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 08:56:11AM -0400, Ismael L. Donis Garcia wrote: [cutting-off-a-whole-bunch-of-irrelevant-lines] > > The problem is that try to download > http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz > > And should download: >

Re: [DNG] udev replacement

On Tue, Jul 18, 2017 at 08:43:11AM -0400, Ismael L. Donis Garcia wrote: > - Original Message - From: "Arnt Karlsen" [a-276-lines-long-cut-of-mostly-irrelevant-stuff] Could I just encourage all of us to please have a fresh look at one of the links below: -

Re: [DNG] udev replacement

- Original Message - From: "Arnt Karlsen" To: Sent: Monday, July 17, 2017 5:35 PM Subject: Re: [DNG] udev replacement On Mon, 17 Jul 2017 10:08:02 -0400, Ismael wrote in message : - Original

Re: [DNG] udev replacement

- Original Message - From: "Arnt Karlsen" To: Sent: Monday, July 17, 2017 5:35 PM Subject: Re: [DNG] udev replacement On Mon, 17 Jul 2017 10:08:02 -0400, Ismael wrote in message : - Original

Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]

On Tue, 18 Jul 2017 10:32:58 + "Enrico Weigelt, metux IT consult" wrote: > On 18.07.2017 07:48, Fungi4All wrote: > > > Jus'b'cause lots of you want to go to bed with Poetering does not > > make this a gay distribution > > Is Lennart a man at all ? :o > Look,

Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]

On 18.07.2017 07:48, Fungi4All wrote: Jus'b'cause lots of you want to go to bed with Poetering does not make this a gay distribution Is Lennart a man at all ? :o --mtx ___ Dng mailing list Dng@lists.dyne.org

Re: [DNG] VBScript Injection via GNOME Thumbnailer

On Tue, Jul 18, 2017 at 12:39:45AM -0700, Rick Moen wrote: > Quoting Joachim Fahrner (j...@fahrner.name): > > > Another nice bug in Gnome: > > http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html > > I feel almost dirty making excuses for GNOME ;-> , but this bug in >

Re: [DNG] VBScript Injection via GNOME Thumbnailer

schrieblings From: j...@fahrner.name > That"s the point. All these things made by Poettering, Gnome Team, Read > Hat ... are rubbish monsters, too complex to make them safe. They put > all things in they can think of. A thumbnailer that depends on wine! > Unbelievable! That"s no good and clean

Re: [DNG] VBScript Injection via GNOME Thumbnailer

Quoting Joachim Fahrner (j...@fahrner.name): > That's the point. All these things made by Poettering, Gnome Team, > Read Hat ... are rubbish monsters, too complex to make them safe. > They put all things in they can think of. A thumbnailer that depends > on wine! Unbelievable! That's no good and

Re: [DNG] VBScript Injection via GNOME Thumbnailer

Am 2017-07-18 09:39, schrieb Rick Moen: OTOH, clearly the parser code in /usr/bin/gnome-exe-thumbnailer is rubbish, as it shouldn't be possible to fool it into processing embedded VBSCript in a filename. That's the point. All these things made by Poettering, Gnome Team, Read Hat ... are

[DNG] GVFS and dependants

In my initial installation with a live-xfce iso, there seem to have been some left overs. I am trying to find out what this group of running process does and how essential they may be. While trying to attempt to remove the 6 of the 7 installed pkgs (gvfs -- bin, is not installed) I would think

Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]

> From: jaro...@dyne.org >> 1. What does this have to do with Devuan? > perhaps just one thing, that the first image this project ever > released was a Valentine present, with attached a love declaration, > between two men. it may be defined a platonic dev relationship, but > definitely makes

Re: [DNG] VBScript Injection via GNOME Thumbnailer

Quoting Joachim Fahrner (j...@fahrner.name): > Another nice bug in Gnome: > http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html I feel almost dirty making excuses for GNOME ;-> , but this bug in /usr/bin/gnome-exe-thumbnailer appears to be exploitable only if WINE is

Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]

On Sun, 16 Jul 2017, Antony Stone wrote: > 1. What does this have to do with Devuan? perhaps just one thing, that the first image this project ever released was a Valentine present, with attached a love declaration, between two men. it may be defined a platonic dev relationship, but definitely

[DNG] VBScript Injection via GNOME Thumbnailer

Another nice bug in Gnome: http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html Jochen ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng