Bug#551550: marked as done (general: many Java packages needlessly depend on java?-runtime)

[Debian Bug Tracking System]

Your message dated Mon, 19 Oct 2009 10:46:52 +0200
with message-id <200910191046.52727.hol...@layer-acht.org>
and subject line Re: Bug#551550: general: many Java packages needlessly depend 
on java?-runtime
has caused the Debian Bug report #551550,
regarding general: many Java packages needlessly depend on java?-runtime
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
551550: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551550
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: general
Severity: normal

Many Java packages work successfully with a headless JRE; that is, one
that does not support graphics.  However, some of these packages depend
on java?-runtime instead of java?-runtime-headless.  As a consequence,
graphical JREs are installed when they are not needed (such as on
servers).

Java applications and libraries that correctly function with a headless
JRE should depend only on such a JRE, possibly with a recommends or
suggests on a graphical JRE if the program can benefit from it.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187


signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Hi Brian,

On Montag, 19. Oktober 2009, brian m. carlson wrote:
> Many Java packages work successfully with a headless JRE; that is, one
> that does not support graphics.  However, some of these packages depend
> on java?-runtime instead of java?-runtime-headless.  As a consequence,
> graphical JREs are installed when they are not needed (such as on
> servers).
>
> Java applications and libraries that correctly function with a headless
> JRE should depend only on such a JRE, possibly with a recommends or
> suggests on a graphical JRE if the program can benefit from it.

Please file bugs against the specific packages, filing a broad bug against the 
general package is quite useless, thus closing. 


regards,
Holger


signature.asc
Description: This is a digitally signed message part.
--- End Message ---

Re: lintian error weak-library-dev-dependency

[Emilio Pozuelo Monfort]

Dominic Hargreaves wrote:
> Not only that, but weak-library-dev-dependency and
> not-binnmuable-all-depends-any seem to be fighting! The latter suggests
> Depends: arch_any (>= ${source:Version}), arch_any (<< ${source:Version}.1~)
> which triggers the former...
> 
> What's correct in this case?

You can change the -dev package to arch:any.

Emilio



signature.asc
Description: OpenPGP digital signature

Re: Bug#551386: Per-package link to upstreams bugtracker

[Joachim Breitner]

Hi,

Am Montag, den 19.10.2009, 11:20 +0200 schrieb Olivier Berger:
> Le samedi 17 octobre 2009 à 23:27 +0200, Joachim Breitner a écrit :
> > just an idea that occured to me right now when filing a bug against a
> > package where I already know that it’s an upstream bug, but I don’t want
> > to spend time finding out
> >  * where the upstream bugtracker is
> >  and
> >  * how to properly list all upstream bugs.
> 
> Such information is already used by bts-link to track changes on remote
> bugs linked with the 'forwarded' tag from Debian bugs.
> 
> The sources of bts-link ('s configuration file) contain already a
> description of many bugtrackers of source packages.
> 
> More details at : http://bts-link.alioth.debian.org/
> 
> Hope this helps.

I thought about bts-link as well, of course, but there are some
differences in what is tried to achieve:

bts-link is
 * per-bug.
 * thus can and needs to handle different trackers per package
 * needs manual intervention once (by setting the forwarded field)
 * aim for high-level technical integration.

my proposal is
 * per-package
 * should be present and visible _before_ the user files a bug
 * aims not for technical integration, but just lowering the effort for 
   the user to check the upstream bug tracker first

Also, just specifying a simple URL somewhere in the Package file, the
copyright file or somewhere else is sufficiently simple to be actually
implemented :-)

Also note that the information, like Homepage, should be set and stored
in the package first, and not, for example, in a list in the BTS. The
information is everything but Debian-specific and will be valid even
downstream.


I guess this could just be tried out by having early adopters add
XBS-Upstream-BTS: http://bugzilla.gnome.org/...
to some of their packages’ debian/control, add support to
bugs.debian.org, and see how it goes. If it goes well, debian-policy can
be amended and the XBS- prefix dropped. If not, it was worth a try and
did not hurt :-)

@dons: What are your requirements until you will accept this feature on
bugs.d.o, in terms of number of packages or clear consensus on d-devel
or such or actual inclusion in the policy?

Greetings,
Joachim


-- 
Joachim "nomeata" Breitner
Debian Developer
  nome...@debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil

Bug#551613: ITP: libmecab-perl -- mecab binding for Perl

[TANIGUCHI Takaki]

Package: wnpp
Owner: tak...@debian.org
Severity: wishlist

* Package name: libmecab-perl
  Version : 0.98
  Upstream Author : Taku Kudo  
* URL or Web page : http://sourceforge.net/projects/mecab/
* License : GPL | LGPL | BSD
  Description : mecab binding for Perl

 Mecab is a morphological analysis system.  It reads Japanese
 sentences from the standard input, segments them into morpheme
 sequences, and outputs them to the standard output with many
 additional pieces of information (pronunciation, semantic
 information, etc).



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#551611: ITP: libmecab-java -- mecab binding for Java

[TANIGUCHI Takaki]

Package: wnpp
Owner: tak...@debian.org
Severity: wishlist

* Package name: libmecab-java
  Version : 0.98
  Upstream Author : Taku Kudo  
* URL or Web page : http://sourceforge.net/projects/mecab/
* License : GPL | LGPL | BSD
  Description : mecab binding for Java

 Mecab is a morphological analysis system.  It reads Japanese
 sentences from the standard input, segments them into morpheme
 sequences, and outputs them to the standard output with many
 additional pieces of information (pronunciation, semantic
 information, etc).



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#551615: ITP: g2ipmsg -- IP messenger clone for GNOME2 environments

[TANIGUCHI Takaki]

Package: wnpp
Owner: tak...@debian.org
Severity: wishlist

* Package name: g2ipmsg
  Version : 0.9.6
  Upstream Author : Takeharu KATO 
* URL or Web page : http://www.ipmsg.org/
* License : BSD
  Description : IP messenger clone for GNOME2 environments

 IP messsenger is one of popular win-popup style message exchanger in Japan.
 G2ipmsg is a kind of IP messenger clone for GNOME2 environments.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Something like Pre-Depends for Suggests

[Michal Čihař]

Hi

I think this problem is common to more packages, but I hit this at
phpMyAdmin. The problem is that it Suggests mysql-server because it can
also work with remote server. In the same time it uses dbconfig-common
to configure the database. However dbconfig-common fails for obvious
reasons when the server is not yet configured (and running). If it would
be strict dependency, Pre-Depends would solve the issue, but there is
not something like "I can use this package, but it has to be configured
prior to installation".

Any suggestions how to solve this problem?

-- 
Michal Čihař | http://cihar.com | http://blog.cihar.com


signature.asc
Description: PGP signature

Re: Something like Pre-Depends for Suggests

[Mike Hommey]

On Mon, Oct 19, 2009 at 04:37:03PM +0200, Michal Čihař wrote:
> Hi
> 
> I think this problem is common to more packages, but I hit this at
> phpMyAdmin. The problem is that it Suggests mysql-server because it can
> also work with remote server. In the same time it uses dbconfig-common
> to configure the database. However dbconfig-common fails for obvious
> reasons when the server is not yet configured (and running). If it would
> be strict dependency, Pre-Depends would solve the issue, but there is
> not something like "I can use this package, but it has to be configured
> prior to installation".
> 
> Any suggestions how to solve this problem?

Suggest a dummy package that pre-depends on mysql-server ?

Mike


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Something like Pre-Depends for Suggests

[Josselin Mouette]

Le lundi 19 octobre 2009 à 16:37 +0200, Michal Čihař a écrit : 
> I think this problem is common to more packages, but I hit this at
> phpMyAdmin. The problem is that it Suggests mysql-server because it can
> also work with remote server. In the same time it uses dbconfig-common
> to configure the database. However dbconfig-common fails for obvious
> reasons when the server is not yet configured (and running). If it would
> be strict dependency, Pre-Depends would solve the issue, but there is
> not something like "I can use this package, but it has to be configured
> prior to installation".

Pre-Depends would certainly not solve the issue. Actually, a simple
Depends would be enough, since the server would be started by
mysql-server.postinst, always executed before phpmyadmin.postinst.

Furthermore, it is a common mistake to believe that Pre-Depends can make
a package available at debconf time; IT WILL NOT be available at that
time. Only essential packages can be used from .config scripts.


A possible solution to this kind of issue is to create a package
available-mysql-server, which Depends: mysql-server |
dummy-mysql-server. The dummy-mysql-server could simply drop a note
indicating that you need to configure the remote server. Not very simple
for the user, I’m afraid, but more reliable.

Cheers, 
-- 
 .''`.  Josselin Mouette
: :' :
`. `'   “I recommend you to learn English in hope that you in
  `- future understand things”  -- Jörg Schilling


signature.asc
Description: Ceci est une partie de message numériquement signée

Informative addendum to policy clarifying dpkg/maintainer script interface

[Manoj Srivastava]

Hi,

I have created a document to clarify the interaction between
 maintainer scripts and dpkg, and examines the state changes for a
 package when a user interacts with the packaging system. The dynamic
 interactions between the packaging system and the package's maintainer
 scripts are described formally using UML diagrams. This document does
 not attempt to describe what the maintainer scripts can or can not do,
 concentrating instead mostly one the packaging system interface. It
 also provides a call graph of the maintainer scripts.

This document is meant to be informative, not normative, at this
 point, and is presented here mostly since the maintainer scripts
 interaction section of policy is one of the more opaque
 segments. However, it also is trying to formally define the packaging
 system interface formally, and is meant to become normative at some
 point in the future, once it has buy in from the interested parties and
 has been checked for correctness.

An early draft was sent over to the debian policy mailing list,
 but I thought the time has come to widen the audience a bit. Any
 feedback is appreciated. Please follow up to the policy list
 (debian-pol...@lists.debian.org mailing.) Especially welcome would be
 any feedback from the dpkg folk about correctness of the interactions
 depicted. 

Oh, and before I forget, this is where the document lives currently:

 http://people.debian.org/~srivasta/MaintainerScripts.html

Thanks in advance,

manoj
-- 
Today is a good day to bribe a high-ranking public official.
Manoj Srivastava    
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Proposed mass prototypejs bug filing for multiple security issues

[Gunnar Wolf]

Michael S Gilbert dijo [Sun, Oct 18, 2009 at 08:43:35PM -0400]:
> Hi,
> 
> The prototypejs script has been found to be vulnerable to a couple
> security issues [0],[1].  This script is embedded in about 32 other
> packages and I would like to file bugs against all of those that are
> affected. Since this would probably be considered a mass filing, I am
> running it past -devel first.
> (…)

Just for the record, I agree with your mass filing (which is not
massive anyway). 

However, I'd also suggest your bugs (and as a matter of general
policy) should invite said maintainers to depend on libjs-prototype
and symlink it instead of shipping the package's own versions, except
if there is a _real_ need to do so (i.e. upstream-modified versions of
prototype or dependance on specific API versions). 

As those packages are currently shipping, they are basically worse off
than if they were statically linking a library: It leads to code
duplication and cases such as this, where it becomes a serious and
hard to fix security liability which not only must be hand-corrected,
but must be hand-spotted.

-- 
Gunnar Wolf • gw...@gwolf.org • (+52-55)5623-0154 / 1451-2244


signature.asc
Description: Digital signature

Bug#551631: ITP: ossim -- The OSSIM library

[Francesco Paolo Lovergine]

Package: wnpp
Severity: wishlist
Owner: Debian GIS Project 

* Package name: ossim
  Version : 1.7.21
  Upstream Author : Garrett Potts et al.
* URL : http://www.ossim.org/OSSIM/OSSIM_Home.html
* License : LGPL
  Programming Lang: C++
  Description : The OSSIM library

 Open Source Software Image Map (OSSIM) is a high performance engine for
 remote sensing, image processing, geographical information systems and
 photogrammetry. It has been actively developed since 1996.
 .
 Designed as a series of high performance software libraries, it is
 written in C++ employing the latest techniques in object-oriented
 software design.
 .
 The library provides advanced remote sensing, image processing, and
 geo-spatial functionality. A quick summary of OSSIM functionality
 includes ortho-rectification, precision terrain correction, rigorous
 sensor models, very large mosaics, and cross sensor fusions, a wide
 range of map projections anddatums, and a large range of commercial
 and government data formats. The architecture of the library supports
 parallel processing with mpi, a dynamic plugin architecture, and
 dynamically connectable objects allowing rapid prototyping of custom
 image processing chains.

 This package include the core OSSIM library and the basic command-line
 tools. Other related package (such as Ossim Planet or Imagelinker) 
 will come as successive packages.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Proposed mass prototypejs bug filing for multiple security issues

[Michael Gilbert]

On Mon, 19 Oct 2009 10:52:18 -0500, Gunnar Wolf wrote:
> Michael S Gilbert dijo [Sun, Oct 18, 2009 at 08:43:35PM -0400]:
> > Hi,
> > 
> > The prototypejs script has been found to be vulnerable to a couple
> > security issues [0],[1].  This script is embedded in about 32 other
> > packages and I would like to file bugs against all of those that are
> > affected. Since this would probably be considered a mass filing, I am
> > running it past -devel first.
> > (…)
> 
> Just for the record, I agree with your mass filing (which is not
> massive anyway). 
> 
> However, I'd also suggest your bugs (and as a matter of general
> policy) should invite said maintainers to depend on libjs-prototype
> and symlink it instead of shipping the package's own versions, except
> if there is a _real_ need to do so (i.e. upstream-modified versions of
> prototype or dependance on specific API versions). 

I think I'll have this covered.  As I mentioned in the original
message, I am submitting two bugs for each package.  The second bug is
a request for the maintainer to link to the system prototypejs, which is
the source package for libjs-prototype.

Mike


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#551629: ITP: ui-auto -- A set of shell tools to manage software project development

[Stephan Sürken]

Package: wnpp
Severity: wishlist
Owner: "Stephan Sürken" 

* Package name: ui-auto
  Version : 1.1.9
  Upstream Author : Stephan Sürken 
* URL : https://sourceforge.net/projects/ui-auto/
* License : GPL
  Programming Lang: Shell
  Description : A set of shell tools to manage software project development

1. Release automation

First of all, there is support for automation of software
release around the 'ui-auto-release' tool; it currently (Oct
2009) supports the build systems autotools and cmake and the
version control systems cvs, svn and git. Its basic goal is to
automate the reoccurring administrative duties around software
releases (like NEWS/ChangeLog files, VC tagging, uploading,
...). It also has a non-interactive mode that makes it suitable
for automated snaphot builds from cron, and a special Debian
mode to automate Debian package builds.

Tools: ui-auto-release, ui-auto-ubs, ui-auto-uvc, ui-auto-release-multi

2. Development help

Secondly, there is also a set of tools to help develop from VC
checkouts (simply via environment variables). This is useful if
you develop on several projects at the same time having
inter-dependencies.

Tools: ui-auto-env, ui-auto-shell, ui-auto-update

3. cmake and autotools library

There is small library for autotools (m4 macros) and cmake
(tests) to avoid redundancies per project for ui-auto
project. Using any of these is totally optional, though.

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)



--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#551645: ITP: ps3-media-server -- DLNA UPnP Media Server, dedicated to PS3

[Ritesh Raj Sarraf]

Package: wnpp
Severity: wishlist
Owner: Ritesh Raj Sarraf 

* Package name: ps3-media-server
  Version : 1.10.5
  Upstream Author : PMS Developers
* URL : http://code.google.com/p/ps3mediaserver/
* License : GPLv2
  Programming Lang: Java
  Description : DLNA UPnP Media Server, dedicated to PS3

PS3 Media Server is a DLNA compliant Upnp Media Server for the PS3,
written in Java, with the purpose of streaming or transcoding any kind
of media files, with minimum configuration. It's backed up with the
powerful Mplayer/FFmpeg packages.

Current features

* Ready to launch and play. No codec packs to install. No folder 
configuration and pre-parsing or this kind of annoying thing. All your folders 
are directly browsed by the PS3, there's an automatic refresh also.
* Real-time video transcoding of MKV/FLV/OGM/AVI, etc.
* Direct streaming of DTS / DTS-HD core to the receiver
* Remux H264/MPEG2 video and all audio tracks to AC3/DTS/LPCM in real time 
with tsMuxer when H264 is PS3/Level4.1 compliant
* Full seeking support when transcoding
* DVD ISOs images / VIDEO_TS Folder transcoder
* OGG/FLAC/MPC/APE audio transcoding
* Thumbnail generation for Videos
* You can choose with a virtual folder system your audio/subtitle language 
on the PS3!
* Simple streaming of formats PS3 natively supports: MP3/JPG/PNG/GIF/TIFF, 
all kind of videos (AVI, MP4, TS, M2TS, MPEG)
* Display camera RAWs thumbnails (Canon / Nikon, etc.)
* ZIP/RAR files as browsable folders
* Support for pictures based feeds, such as Flickr and Picasaweb
* Internet TV / Web Radio support with VLC, MEncoder or MPlayer
* Podcasts audio/ Video feeds support
* Basic Xbox360 support
* FLAC 96kHz/24bits/5.1 support
* Windows Only: DVR-MS remuxer and AviSynth alternative transcoder support 



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

piuparts-MBF: owned and unowned files after purge

[Holger Levsen]

Hi,

I'd like to file bugs with the severity "important" against all packages 
leaving owned and unowned files after purge. 

Reasoning: "a piuparts clean archive" is a release-goal for squeeze (and was 
for lenny) and this is prohibited per debian-policy. As the impact of the 
bugs ain't that high (except that we break our quality promise with it and 
blatantly violate policy), I think "important" is the right severity.

http://piuparts.debian.org/sid/owned_files_after_purge_error.html shows which 
packages need to remove owned files after purge, see 
http://www.debian.org/doc/debian-policy/ch-files.html#s10.7.3

http://piuparts.debian.org/sid/unowned_files_after_purge_error.html shows
packages with unowned files after purge (violating policy 6.8) see 
http://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-removedetails

I am currently _not_ proposing filing bugs against packages with owned files 
after purge, which belong to more than one package (those which you can see 
at http://piuparts.debian.org/sid/owned_files_by_many_packages_error.html) 
because #454694 needs to be fixed in dpkg first.

204 packages are affected by this, a ddlist of the affected packages is below.


regards,
Holger


Daniel Leidert (dale) 
   avogadro (U)

Adam Cécile (Le_Vert) 
   audacious-plugins (U)

 Marcelo Jorge Vieira (metal) 
   javascript-common (U)

Masayuki Hatta (mhatta) 
   cedet (U)
   ebnetd

Stefan Hornburg (Racke) 
   courier

Richard A Nelson (Rick) 
   sendmail

Michael W. Olson (GNU address) 
   cedet

Russ Allbery 
   xfonts-jmk

Ryuichi Arafune 
   mpg123-el

Ben Armstrong 
   xpilot-ng

Don Armstrong 
   spamass-milter

Jeff Bailey 
   inetutils (U)

Michael Banck 
   avogadro (U)

Daniel Baumann 
   ecryptfs-utils (U)
   gnunet (U)
   openerp-server (U)

 Daniel Baumann 
   tftp-hpa (U)

Daniel Baumann 
   ecryptfs-utils

Romain Beauxis 
   liquidsoap (U)

John V. Belmonte 
   lua5.1

Jon Bernard 
   xfonts-knickers

Vincent Bernat 
   balazar3
   xrdp

Marcus Better 
   libxalan2-java (U)

Michael Biebl 
   hal (U)

Bastian Blank 
   xen-common (U)

Andreas Bombe 
   anki

Joachim Breitner 
   infon
   poldi

Denis Briand 
   flite (U)

Marcus Brinkmann 
   inetutils (U)

Rogério Brito 
   usbmount

Rob Browning 
   guile-1.6

Cyril Brulebois 
   liblouis (U)

Paul Cager 
   libgnumail-java (U)

Ondrej Certik 
   atlas (U)

Luk Claes 
   nagios3 (U)

ClamAV Team 
   clamav

Adam Conrad 
   ssl-cert (U)

Arnaud Cornet 
   bip
   ratbox-services

Julien Cristau 
   xdm (U)
   xfonts-100dpi (U)
   xfonts-75dpi (U)
   xfonts-base (U)
   xfonts-cyrillic (U)

Marco d'Itri 
   gup

Julien Danjou 
   xen-common (U)

Debian Accessibility Team 
   flite
   liblouis

Debian ACE+TAO maintainers 
   ace

Debian Apache Maintainers 
   ssl-cert

Debian Audacious Packagers 
   audacious-plugins

Debian BOINC Maintainers 
   boinc

Debian Cyrus SASL Team 
   cyrus-sasl2

Debian Firebird Group 
   firebird2.0
   firebird2.1

Debian Games Team 
   renpy

Debian GCC Maintainers 
   cloog-ppl
   gpc-4.1

Debian GGZ Maintainers 
   ggz-txt-client

Debian GIS Project 
   postgis

Debian GNU Smalltalk maintainers 

   gnu-smalltalk

Debian GnuTLS Maintainers 
   libtasn1-3

Debian GPM Team 
   gpm

Debian Java Maintainers 
   bouncycastle
   bsh
   libgnumail-java
   librepository
   libsaxon-java
   libxalan2-java

Debian Javascript Maintainers 
   javascript-common

Debian JED Group 
   jed

Debian Loop-AES Team 
   loop-aes-utils

Debian Multimedia Maintainers 

   libffado

Debian Nagios Maintainer Group 
   nagios3

Debian OCaml Maintainers 
   liquidsoap
   mldonkey

Debian Octave Group 
   octave3.0

Debian Python Modules Team 
   pyqwt3d (U)
   pyqwt5 (U)

Debian Qt/KDE Maintainers 
   kdebindings

Debian Science Team 
   ics

Debian Scientific Computing Team 
   atlas

Debian VoIP Team 
   mumble
   yate

Debian X Strike Force 
   xdm
   xfonts-100dpi
   xfonts-75dpi
   xfonts-base
   xfonts-cyrillic

Debian Xen Team 
   xen-common

Debian Zope team 
   zope-maildrophost

Debian/Ubuntu Zope Team 
   zope2.10
   zope2.11

Debichem Team 
   avogadro

Mehdi Dogguy 
   mldonkey (U)

Eric Dorland 
   libtasn1-3 (U)

Sebastian Dröge 
   hal (U)
   shared-mime-info (U)

Peter Eisentraut 
   ggz-txt-client (U)

Free Ekanayaka 
   libffado (U)

Zak B. Elep 
   cvs (U)

Rene Engelhard 
   librepository (U)

Fabian Fagerholm 
   cyrus-sasl2 (U)

John Francesco Ferlito 
   libkate

sean finney 
   nagios3 (U)

Anthony Fok 
   xfonts-cmex-big5p
   xfonts-wqy

Laurent Fousse 
   mpfi

Jochen Friedrich 
   pinball

Stefan Fritsch 
   ssl-cert (U)

Stephen Frost 
   postgis (U)

Charles Fry 
   bouncycastle (U)

Sylvain Le Gall 
   mldonkey (U)

Radovan Garabík 
   xtell

Daniel Kahn Gillmor 
   monkeysphere (U)

Thomas Girard 
   ace (U)
   gnu-smalltalk (U)

GNU Libc Maintainers 
   prelink (U)

John Goerzen 
   bacula
   libcdk5
   pygopherd

Brice Goglin 
   xfonts-cyrillic (U)

Thomas Goirand 
   dtc-xen
   

Re: Bug#551386: Per-package link to upstreams bugtracker

[Don Armstrong]

On Mon, 19 Oct 2009, Joachim Breitner wrote:
> @dons: What are your requirements until you will accept this feature on
> bugs.d.o, in terms of number of packages or clear consensus on d-devel
> or such or actual inclusion in the policy?

Depends on the complexity of me actually getting the information to
the bts,[0] but assuming that there's:

1) a clear consensus on the methodology to make/update the links[1]

2) a tab-delineated text file generated somewhere[2] with the source
package name in the first field, the link to the upstream bts in the
second, and the wiki page on wiki.debian.org for additional bug
reporting/triage information in the third

3) enough source packages implementing #1 for me to actually test it;
I imagine if we get at least a half dozen packages from different
maintainers it'll be enough to demonstrate that it's workable.

then I'll shove it into my queue to implement.


Don Armstrong

0: the more complexity, the longer it'll take; the actual code change
to debbugs is relatively trivial.

1: probably a good idea to also have a draft for inclusion in
devel-reference

2: where this is depends on the method, but probably ftpmaster is the
ideal place; dunno, though.

-- 
Some pirates achieved immortality by great deeds of cruelty or
derring-do. Some achieved immortality by amassing great wealth. But
the captain had long ago decided that he would, on the whole, prefer
to achieve immortality by not dying.
 -- Terry Pratchet _The Color of Magic_

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: piuparts-MBF: owned and unowned files after purge

[Julien Cristau]

On Mon, Oct 19, 2009 at 20:14:12 +0200, Holger Levsen wrote:

> 204 packages are affected by this, a ddlist of the affected packages is below.
> 
Please hold off on the xfonts-* ones.  These are most likely due to a
bug in xfonts-utils, so don't need to have individual bugs.

Cheers,
Julien


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Bug#549990: dh_makeshlibs: Please use ldconfig -X

[Joey Hess]

Josselin Mouette wrote:
> currently the postinst in dh_makeshlibs calls ldconfig. However, when 
> called without arguments, it updates symbolic links, which is useless 
> since they are already correct in the packages themselves.
> 
> It can also trigger bugs like #549714; here the user has a file he 
> shouldn’t have, but it would not have broken his system without calling 
> ldconfig.
> 
> Therefore, please call ldconfig -X instead of ldconfig. It will still 
> rebuild the cache, but not update the symlinks. This might save a few 
> disk seeks during upgrades as well. I have discussed this with the glibc 
> maintainers, and they agreed with the idea of this change.

I did some investigation last week to see what unwanted effects this
might have:


http://lintian.debian.org/tags/ldconfig-symlink-missing-for-shlib.html

usr/lib/libgnuintl.so.8 usr/lib/preloadable_libintl.so libgnuintl.so.8

This seems to be a false positive; gettext provides
preloadable_libintl.so, but ldconfig does not make a symlink to
libgnuintl.so.8.


http://lintian.debian.org/tags/ldconfig-symlink-referencing-wrong-file.html

usr/lib/libXaw.so.7 -> libXaw7.so.7 instead of libXaw7.so.7.0.0

Another false positive; in libxaw7, libXaw7.so.7.0.0 is the file, and 
libXaw7.so.7 is the symlink.


Policy currently says this:

 The run-time library package should include the symbolic link that
 `ldconfig' would create for the shared libraries.  For example, the
 `libgdbm3' package should include a symbolic link from
 `/usr/lib/libgdbm.so.3' to `libgdbm.so.3.0.0'.  This is needed so that
 the dynamic linker (for example `ld.so' or `ld-linux.so.*') can find
 the library between the time that `dpkg' installs it and the time that
 `ldconfig' is run in the `postinst' script.[3]

That should not prevent use of ldconfig -X, but it will be out of date
once ldconfig -X is in use.


If *everything* used ldconfig -X this could in theory fix #224450 for
new installs. There are more practical ways to fix that bug though.


At the moment, I'm leaning toward making this change.

-- 
see shy jo


signature.asc
Description: Digital signature

Bug#551668: ITP: python-distribute -- Easily download, build, install, upgrade, and uninstall Python packages

[Carl Chenet]

Package: wnpp
Severity: wishlist
Owner: Carl Chenet 


* Package name: python-distribute
  Version : 0.6.6
  Upstream Author : The fellowship of the packaging 
* URL : http://pypi.python.org/pypi/distribute
* License : PSF or ZPL
  Programming Lang: Python
  Description : Easily download, build, install, upgrade, and uninstall 
Python packages

 Distribute is a fork of the Setuptools project. Distribute is 
 intended to replace Setuptools as the standard method for 
 working with Python module distributions.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Bug#551668: ITP: python-distribute -- Easily download, build, install, upgrade, and uninstall Python packages

[Mauro Lizaur]

2009-10-19, Carl Chenet:

> Package: wnpp
> Severity: wishlist
> Owner: Carl Chenet 
> 
> 
> * Package name: python-distribute
>   Version : 0.6.6
>   Upstream Author : The fellowship of the packaging 
> * URL : http://pypi.python.org/pypi/distribute
> * License : PSF or ZPL
>   Programming Lang: Python
>   Description : Easily download, build, install, upgrade, and uninstall 
> Python packages
> 

There's already an ITP filled for distribute, see: http://bugs.debian.org/546452

Saludos,
Mauro

--
JID: lavaram...@jabber.org | http://lizaur.github.com/
2B82 A38D 1BA5 847A A74D 6C34 6AB7 9ED6 C8FD F9C1


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: piuparts-MBF: owned and unowned files after purge

[Nicholas Breen]

On Mon, Oct 19, 2009 at 20:14:12 +0200, Holger Levsen wrote:
> 204 packages are affected by this, a ddlist of the affected packages is below.

There are many false positives in that list.  For example, of the first five
packages I checked, four of them (anki, audacious-plugins, avogadro, babiloo)
do not leave any files themselves, but are affected by indirect dependencies on
shared-mime-info and #527063.


-- 
Nicholas Breen
nbr...@ofb.net


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: piuparts-MBF: owned and unowned files after purge

[Guillem Jover]

Hi!

On Mon, 2009-10-19 at 20:14:12 +0200, Holger Levsen wrote:
> Reasoning: "a piuparts clean archive" is a release-goal for squeeze (and was 
> for lenny) and this is prohibited per debian-policy. As the impact of the 
> bugs ain't that high (except that we break our quality promise with it and 
> blatantly violate policy), I think "important" is the right severity.
> 
> http://piuparts.debian.org/sid/owned_files_after_purge_error.html shows which 
> packages need to remove owned files after purge, see 
> http://www.debian.org/doc/debian-policy/ch-files.html#s10.7.3

> Guillem Jover 
>inetutils

This include inetutils-ping and inetutils-syslogd, which are false
positives.

For inetutils-ping it lists files having disappeared which belong to
iputils-ping, a package which Conflicts ang gets removed when installing
inetutils-ping. The log incorrectly lists /bin/ping and /bin/ping6
belonging to inetutils-ping when they should belong to iputils-ping (the
one present before the test run, and for which those files disappeared
at the end of the run, as it didn't get reinstalled).

For inetutils-syslogd, there's left over files from rsyslogd which
again Conflicts and gets removed when installing the former. And the
rest of disappearing files also from rsyslogd.

So it seems piuparts needs to get fixed to take into account packages
being removed due to Conflcits. And probably should purge those
packages which got removed, or reinstall them at the end of the run.

regards,
guillem


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Bits from the kernel team

[Rogério Brito]

Hi, Vincent and others,

On Oct 19 2009, Vincent Sanders wrote:
> IDE to libata decision
> --
> 
> Debian will perform this transition using the udev packages in a
> similar way to Ubuntu. The Ubuntu developers have offered their
> assistance with this transition.

There are some blocking bugs that still need to be worked on, really.

For instance, I have here a pdc controller whose ide driver works
flawlessly, but for which the corresponding libata driver is not really
ready for prime time.

http://lkml.org/lkml/2009/4/20/211
http://lkml.org/lkml/2009/4/20/311
http://lkml.org/lkml/2009/4/20/298
http://lkml.org/lkml/2009/4/20/319
http://lkml.org/lkml/2009/4/23/611
http://lkml.org/lkml/2009/5/1/53
http://lkml.org/lkml/2009/5/11/452

The Linux IDE people are amazingly great, but some bugs are still there.
This one persists, in particular. :-(

It's very visible with Ubuntu's kernel for many releases (since it uses
libata). The way that I'm working with that computer is that I'm
hand-compiling my own kernels, for the moment, but I'm not always there
to support my parents using it and the distribution kernels don't work
satisfactorily. (Unfortunately).


Regards,

-- 
Rogério Brito : rbr...@{mackenzie,ime.usp}.br : GPG key 1024D/7C2CAEB8
http://www.ime.usp.br/~rbrito : http://meusite.mackenzie.com.br/rbrito
Projects: algorithms.berlios.de : lame.sf.net : vrms.alioth.debian.org


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Submitting bugs for manpage improvements

[Frank Lin PIAT]

Hi all,

I have written a small script to make it easy to submit manpage
improvements (it's attached).
I believe that it much more effective to submit a patch, rather than
explaining what needs to be improved. The tool works like quilt, dpatch
& co. One would just invoke:

  $man-reportbug chfn

The script simply invoke man to dump the manpage as plain text, then open
it in the user's prefered text editor.
After editing the text, report-bug is automatically launched against the
appropriate package, and a diff of the manpage is attached.
(By mistake, I have submitted http://bugs.debian.org/551681, so you can
have a look:-/ )

There is one issue: most of the bugs will have to be forwarded upstream.
(I suppose that in a perfect world, each upstream would have a vcs which
could be used to pull/commit pages...)

I would get your opinions on how to make this useful/convenient.

Thanks,

Franklin


man-reportbug
Description: application/shellscript


signature.asc
Description: This is a digitally signed message part

Re: piuparts-MBF: owned and unowned files after purge

[Manoj Srivastava]

On Mon, Oct 19 2009, Holger Levsen wrote:

> I'd like to file bugs with the severity "important" against all packages 
> leaving owned and unowned files after purge. 

> Manoj Srivastava 
>vm

Can you point to me what files vm is leaving behind?  I'll
 certainly fix the bug once it is pointed out to me.


I can't seem to run piuparts locally here, since it fails trying
 to chroot with this cryptic error message while trying to install, for
 some reason, debfoster:
,
| 1m20.6s DEBUG: Command ok: ['chroot', '/tmp/tmp68P5ZC', 'apt-get', 'install', 
'debfoster']
| 1m20.6s DEBUG: Starting command: ['chroot', '/tmp/tmp68P5ZC', 'debfoster', 
'-o', 'MaxPriority=required', '-o', 'UseRecommends=no', '-f', '-n', 'apt', 
'debfoster']
| 1m21.6s DUMP: 
|   Reading package lists...
|   Building dependency tree...
|   Reading state information...
|   The following packages will be REMOVED:
| adduser* apt-utils* aptitude* bsdmainutils* cpio* cron* dhcp3-client*
| dhcp3-common* dmidecode* ed* gcc-4.2-base* gcc-4.3-base* groff-base*
| ifupdown* info* install-info* iproute* iptables* iputils-ping* 
libcwidget3*
| libdb4.8* libdevmapper1.02.1* libept0* libgdbm3* libncursesw5* 
libnewt0.52*
| libpopt0* libreadline5* libsigc++-2.0-0c2a* libssl0.9.8* libtasn1-3*
| libunwind7* libwrap0* libxapian15* logrotate* man-db* manpages*
| module-init-tools* nano* net-tools* netbase* netcat-traditional* procps*
| rsyslog* tasksel* tasksel-data* traceroute* udev* vim-common* vim-tiny*
| wget* whiptail*
|   WARNING: The following essential packages will be removed.
|   This should NOT be done unless you know exactly what you are doing!
| install-info (due to util-linux)
|   0 upgraded, 0 newly installed, 52 to remove and 0 not upgraded.
|   After this operation, 49.0MB disk space will be freed.
|   E: There are problems and -y was used without --force-yes
| 1m21.6s ERROR: Command failed (status=100): ['chroot', '/tmp/tmp68P5ZC', 
'debfoster', '-o', 'MaxPriority=required', '-o', 'UseRecommends=no', '-f', 
'-n', 'apt', 'debfoster']
|   Reading package lists...
|   Building dependency tree...
|   Reading state information...
|   The following packages will be REMOVED:
| adduser* apt-utils* aptitude* bsdmainutils* cpio* cron* dhcp3-client*
| dhcp3-common* dmidecode* ed* gcc-4.2-base* gcc-4.3-base* groff-base*
| ifupdown* info* install-info* iproute* iptables* iputils-ping* 
libcwidget3*
| libdb4.8* libdevmapper1.02.1* libept0* libgdbm3* libncursesw5* 
libnewt0.52*
| libpopt0* libreadline5* libsigc++-2.0-0c2a* libssl0.9.8* libtasn1-3*
| libunwind7* libwrap0* libxapian15* logrotate* man-db* manpages*
| module-init-tools* nano* net-tools* netbase* netcat-traditional* procps*
| rsyslog* tasksel* tasksel-data* traceroute* udev* vim-common* vim-tiny*
| wget* whiptail*
|   WARNING: The following essential packages will be removed.
|   This should NOT be done unless you know exactly what you are doing!
| install-info (due to util-linux)
|   0 upgraded, 0 newly installed, 52 to remove and 0 not upgraded.
|   After this operation, 49.0MB disk space will be freed.
|   E: There are problems and -y was used without --force-yes
`

I am leaning towards thinking this is a false positive.

manoj
-- 
What we need is either less corruption, or more chance to participate in
it.
Manoj Srivastava    
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

[Ampache updated] packages that use deprecated SQL escape functions

[Charlie Smotherman]

On Thu, 2009-10-15 at 13:26 +1100, Steffen Joeris wrote:
> Hi everyone
> 
> We had a few issues in the past with insufficient database escaping, which 
> lead 
> to possible SQL injections due to the use of the deprecated functions 
> mysql_escape_string() and PQescapeString().
> These functions do not take the encoding of the established connection into 
> account, which can lead to insufficient escaping, if the encoding of this 
> connection can be set to certain multibyte character encodings (such as GBK).
> I found the explanation given in this email[0] quite useful to elaborate on 
> the thread.
> 
> In order to prevent this issue, the new functions mysql_real_escape_string()
> [1] and PQescapeStringConn()[2] have been added, which honour the specific 
> encoding of the connection.
> 
[snip]
> 
> ampache: Charlie Smotherman   
>  
>  ./ampache-3.5.1/modules/getid3/extension.cache.mysql.php:
> $filenam2 
> = mysql_escape_string($filename);  
>  ./ampache-3.5.1/modules/getid3/extension.cache.mysql.php:$res2 = 
> mysql_escape_string(serialize($result)); 
> 
Steffen,

Thanks for the mail.  I have patched ampache to use
mysql_real_escape_string().  I would appreciate it if someone would
sponsor this fix.

http://mentors.debian.net/debian/pool/main/a/ampache/ampache_3.5.1-2.dsc 

Thank you 
Charlie Smotherman



signature.asc
Description: This is a digitally signed message part

Re: Something like Pre-Depends for Suggests

[Tollef Fog Heen]

]] Michal Čihař 

| Any suggestions how to solve this problem?

Get dbconfig-common fixed to allow you to configure a database that's
not yet set up.  I guess you can do this by asking the questions, then
having a trigger fire when the database is configured?

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org