Bug#137973: fastjar: static link to insecure zlib

[Colin Watson]

Package: fastjar
Version: 1:3.0.4-2
Severity: grave
Justification: user security hole
Tags: security

fastjar and grepjar both appear to link statically to zlib, so need to
be rebuilt against a zlib1g-dev not vulnerable to the recently announced
security hole.

(Actually, when I configured gcc-3.0 on auric it seemed to end up with
'ZLIBS = $(top_builddir)/../zlib/libz.a -L$(here)/../zlib/', despite the
use of --with-system-zlib. Perhaps src/zlib should be patched to be on
the safe side; diffing zlib_1.1.3-19.diff.gz and zlib_1.1.3-19.1.diff.gz
produces the patch.)

Thanks,

-- 
Colin Watson  [EMAIL PROTECTED]

Processed: Re: Bug#137959: blas: FTBFS: test failures on hppa

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> reassign 137959 g77
Bug#137959: blas: FTBFS: test failures on hppa
Bug reassigned from package `blas' to `g77'.

> severity 137959 normal
Bug#137959: blas: FTBFS: test failures on hppa
Severity set to `normal'.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Bug#136359: acknowledged by developer (Bug#136359: fixed in gcc-2.95 2.95.4.ds9-4)

[Adam C Powell IV]

reopen 136359
thanks
Thank you for your patience in this, I'm sorry to be such a pain in the 
neck.  But it still doesn't work, I'm still getting a SIGFPE in 
f__cabs() from cabs.c in libg2c...

Okay, I think I see what's going on.  In the alpha build log, there's 
build-native/alpha-linux/libf2c and 
build-native/alpha-linux/ieee/libf2c.  -mieee is being used in the 
latter, but not the former.

They are both installed, the former (without -mieee) in what will be 
/usr/lib/gcc-lib/alpha-linux and the latter in 
/usr/lib/gcc-lib/alpha-linux/ieee .

But it looks like only the former is actually moved into the binary 
package in rules2.  I don't see where the -mieee libg2c is used anywhere 
in a binary package.

Should there be an ieee subdir in the installed binary, with these 
-mieee-built libg2cs?

Thanks again,
--
-Adam P.
GPG fingerprint: D54D 1AEE B11C CE9B A02B  C5DD 526F 01E8 564E E4B6
Welcome to the best software in the world today cafe! 

Processed: Re: Bug#136359 acknowledged by developer (Bug#136359: fixed in gcc-2.95 2.95.4.ds9-4)

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> reopen 136359
Bug#136359: g77-2.95: [ALPHA] Please rebuild libg2c.a with -mieee
Bug reopened, originator not changed.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Bug#138038: g++: old diversion of c++filt?

[Julian Gilbey]

Package: g++
Version: sid

In my diversions file, I have just come across the following:

/usr/bin/c++filt
/usr/bin/c++filt.binutils
g++
/usr/man/man1/c++filt.1.gz
/usr/man/man1/c++filt.binutils.1.gz
g++

So ls -l /usr/bin/c++filt* gives the following:
-rwxr-xr-x1 root root26028 Jan 20  1999 /usr/bin/c++filt
-rwxr-xr-x1 root root54820 Feb 15 23:12 
/usr/bin/c++filt.binutils

That's weird.  Not sure why it's still there, but maybe something
could be done about it?

Thanks,

   Julian

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

 Julian Gilbey, Dept of Maths, Debian GNU/Linux Developer
  Queen Mary, Univ. of London see http://people.debian.org/~jdg/
   http://www.maths.qmul.ac.uk/~jdg/   or http://www.debian.org/
Visit http://www.thehungersite.com/ to help feed the hungry

Bug#136359: acknowledged by developer (Bug#136359: fixed in gcc-2.95 2.95.4.ds9-4)

[Matthias Klose]

Adam C Powell IV writes:
> reopen 136359
> thanks
> 
> Thank you for your patience in this, I'm sorry to be such a pain in the 
> neck.  But it still doesn't work, I'm still getting a SIGFPE in 
> f__cabs() from cabs.c in libg2c...
> 
> Okay, I think I see what's going on.  In the alpha build log, there's 
> build-native/alpha-linux/libf2c and 
> build-native/alpha-linux/ieee/libf2c.  -mieee is being used in the 
> latter, but not the former.
> 
> They are both installed, the former (without -mieee) in what will be 
> /usr/lib/gcc-lib/alpha-linux and the latter in 
> /usr/lib/gcc-lib/alpha-linux/ieee .
> 
> But it looks like only the former is actually moved into the binary 
> package in rules2.  I don't see where the -mieee libg2c is used anywhere 
> in a binary package.
> 
> Should there be an ieee subdir in the installed binary, with these 
> -mieee-built libg2cs?

please send a patch. I don't have access on an alpha and cannot easily
see the layout. Or maybe Chris could give it a try?

Re: Bug#136359: acknowledged by developer (Bug#136359: fixed in gcc-2.95 2.95.4.ds9-4)

[Christopher C. Chimelis]

On Tue, 12 Mar 2002, Matthias Klose wrote:

> please send a patch. I don't have access on an alpha and cannot easily
> see the layout. Or maybe Chris could give it a try?

I can try, but am VERY tight on time this week and possibly next.  Adam,
if you can look at it, please do.  If you run into a wall, let me know and
I'll see if I can free up some time to look at it.

C