Bug#378849: akregator: does not correctly handle comments link

2006-07-19 Thread Marc Haber
Package: akregator
Version: 3.5.3-2
Severity: normal

Hi,

in the article pane, akregator shows a "Comments" link, which
incorrectly shows the contents of the  field of the RSS
field (which is the link for automatically API-submitted comment)
instead of the  field, which akregator should use.

liferea does this correctly.

Greetings
Marc


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17.6-zgsrv
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#378902: konqueror: upgrade of GB2312 charset to GB18030 when necessary

2006-07-19 Thread Ambrose Li
Package: konqueror
Version: 4:3.5.3-2
Severity: wishlist
Tags: l10n


See http://www.chinesecj.com

The page identifies itself as GB2312, but it's actually in GB18030,
which is a superset of GB2312. The result is that the page is
partially garbled.

For the GB2312-compatible encodings, Konqueror only supports GB2312
and GB18030.

The user can work around this by manually switching to GB18030, BUT
if the user proceeds with clicking a link to the "traditional
Chinese" version of the site, the pages switches to the Big5 charset,
and the site now becomes completely garbled.

It might be helpful if the charset is automatically upgraded to
GB18030 if a GB2312 characters are seen on a page which claims to be
GB2312.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.28-ow1
Locale: LANG=zh_TW.Big5, LC_CTYPE=zh_TW.Big5 (charmap=BIG5)

Versions of packages konqueror depends on:
ii  kcontrol4:3.5.3-2control center for KDE
ii  kdebase-kio-plugins 4:3.5.3-2core I/O slaves for KDE
ii  kdelibs4c2a 4:3.5.3-1core libraries and binaries for al
ii  kdesktop4:3.5.3-2miscellaneous binaries and files f
ii  kfind   4:3.5.3-2file-find utility for KDE
ii  libacl1 2.2.39-1 Access control list shared library
ii  libart-2.0-22.3.17-1 Library of functions for 2D graphi
ii  libattr12.4.32-1 Extended attribute shared library
ii  libaudio2   1.8-1The Network Audio System (NAS). (s
ii  libc6   2.3.6-15 GNU C Library: Shared libraries
ii  libfam0 2.7.0-10 Client library to control the FAM 
ii  libfontconfig1  2.3.2-7  generic font configuration library
ii  libfreetype62.2.1-2  FreeType 2 font engine, shared lib
ii  libgcc1 1:4.1.1-5GCC support library
ii  libice6 1:1.0.0-3X11 Inter-Client Exchange library
ii  libidn110.6.5-1  GNU libidn library, implementation
ii  libjpeg62   6b-13The Independent JPEG Group's JPEG 
ii  libkonq44:3.5.3-2core libraries for Konqueror
ii  libpng12-0  1.2.8rel-5.1 PNG library - runtime
ii  libqt3-mt   3:3.3.6-2Qt GUI Library (Threaded runtime v
ii  libsm6  1:1.0.0-4X11 Session Management library
ii  libstdc++6  4.1.1-5  The GNU Standard C++ Library v3
ii  libx11-62:1.0.0-7X11 client-side library
ii  libxcursor1 1.1.5.2-5X cursor management library
ii  libxext61:1.0.0-4X11 miscellaneous extension librar
ii  libxft2 2.1.8.2-8FreeType-based font drawing librar
ii  libxi6  1:1.0.0-5X11 Input extension library
ii  libxinerama11:1.0.1-4X11 Xinerama extension library
ii  libxrandr2  2:1.1.0.2-4  X11 RandR extension library
ii  libxrender1 1:0.9.0.2-4  X Rendering Extension client libra
ii  libxt6  1:1.0.0-5X11 toolkit intrinsics library
ii  zlib1g  1:1.2.3-13   compression library - runtime

konqueror recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#378908: kdebindings: missing comma in Uploaders list causes webpage misformatting

2006-07-19 Thread Florian Ernst
Package: kdebindings
Version: 4:3.5.3-1
Severity: minor

Hi folks,

*g*, sometimes curious things may happen: such a tiny typo actually
leads to malformed HTML on the Debian website:
| *** /org/www.debian.org/www/devel/people.en.html
| line 2666 column 190 - Warning:  attribute "iki.fi>" lacks 
value
| line 2666 column 190 - Warning:  missing '>' for end of tag
| line 2666 column 190 - Error:  is not recognized!
| line 2666 column 190 - Warning: discarding unexpected 
| line 2666 column 81 - Warning:  escaping malformed URI reference
(In detail, a list of maintainers gets extracted from the various
Source / Packages files and will be included in webwml for generating
this webpage.)

Please, in your next upload re-add a comma in front of Riku Voipos's
name in debian/control -> Uploaders. :)

Thanks a lot in advance,
cheers,
Flo


signature.asc
Description: Digital signature


Bug#378915: qt4-designer should support Desktop Environments

2006-07-19 Thread Andreas Pakulat
Package: qt4-designer
Version: 4.1.4-1
Severity: wishlist

Hi,

I think the qt4-designer package should integrate better with DE's,
providing a .desktop file and a menu entry via the menu system.

Andreas

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'experimental'), (500, 'testing'), (500, 
'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages qt4-designer depends on:
ii  libaudio2   1.8-1The Network Audio System (NAS). (s
ii  libc6   2.3.6-15 GNU C Library: Shared libraries
ii  libfontconfig1  2.3.2-7  generic font configuration library
ii  libfreetype62.2.1-2  FreeType 2 font engine, shared lib
ii  libgcc1 1:4.1.1-9GCC support library
ii  libice6 1:1.0.0-3X11 Inter-Client Exchange library
ii  libmysqlclient15off 5.0.22-3 mysql database client library
ii  libpng12-0  1.2.8rel-5.2 PNG library - runtime
ii  libpq4  8.1.4-4  PostgreSQL C client library
ii  libqt4-core 4.1.4-1  Qt 4 core non-GUI functionality ru
ii  libqt4-dev  4.1.4-1  Qt 4 development files
ii  libqt4-gui  4.1.4-1  Qt 4 core GUI functionality runtim
ii  libqt4-qt3support   4.1.4-1  Qt 3 compatibility library for Qt 
ii  libqt4-sql  4.1.4-1  Qt 4 SQL database module
ii  libsm6  1:1.0.0-4X11 Session Management library
ii  libsqlite0  2.8.16-1 SQLite shared library
ii  libstdc++6  4.1.1-9  The GNU Standard C++ Library v3
ii  libx11-62:1.0.0-7X11 client-side library
ii  libxcursor1 1.1.5.2-5X cursor management library
ii  libxext61:1.0.0-4X11 miscellaneous extension librar
ii  libxinerama11:1.0.1-4X11 Xinerama extension library
ii  libxrandr2  2:1.1.0.2-4  X11 RandR extension library
ii  libxrender1 1:0.9.0.2-4  X Rendering Extension client libra
ii  libxt6  1:1.0.0-5X11 toolkit intrinsics library
ii  zlib1g  1:1.2.3-13   compression library - runtime

qt4-designer recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#378958: kdebase-kio-plugins: webdav support is missing

2006-07-19 Thread Adriano Bonat
Package: kdebase-kio-plugins
Version: 4:3.5.3-2
Severity: normal

I tried to use the URL schema 'webdav' and it does'nt work. So I checked out 
why, and detect that kdebase-kio-plugins doesn't have the plugin for webdav, 
just 2 docbook files. How can I use webdav through KDE/Konqueror?

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.2bonat
Locale: LANG=pt_BR, LC_CTYPE=pt_BR (charmap=ISO-8859-1) (ignored: LC_ALL set to 
pt_BR)

Versions of packages kdebase-kio-plugins depends on:
ii  kdelibs4c2a 4:3.5.3-1core libraries and binaries for al
ii  libc6   2.3.6-15 GNU C Library: Shared libraries
ii  libdbus-1-2 0.62-4   simple interprocess messaging syst
ii  libdbus-qt-1-1c20.62-4   simple interprocess messaging syst
ii  libgcc1 1:4.1.1-4GCC support library
ii  libhal-storage1 0.5.7-2  Hardware Abstraction Layer - share
ii  libhal1 0.5.7-2  Hardware Abstraction Layer - share
ii  libldap22.1.30-13OpenLDAP libraries
ii  libopenexr2c2a  1.2.2-4.3runtime files for the OpenEXR imag
ii  libqt3-mt   3:3.3.6-2Qt GUI Library (Threaded runtime v
ii  libsasl22.1.19.dfsg1-0.2 Authentication abstraction library
ii  libsasl2-modules2.1.19.dfsg1-0.2 Pluggable Authentication Modules f
ii  libsmbclient3.0.22-1 shared library that allows applica
ii  libstdc++6  4.1.1-4  The GNU Standard C++ Library v3
ii  libxcursor1 1.1.5.2-5X cursor management library
ii  zlib1g  1:1.2.3-13   compression library - runtime

Versions of packages kdebase-kio-plugins recommends:
ii  hal   0.5.7-2Hardware Abstraction Layer
ii  kamera4:3.5.3-1  digital camera io_slave for Konque
ii  kdemultimedia-kio-plugins 4:3.5.3-2  enables the browsing of audio CDs 
ii  kdesktop  4:3.5.3-2  miscellaneous binaries and files f
ii  pmount0.9.11-1   mount removable devices as normal 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#378962: konqueror: CVE-2006-3672: remote denial of service (crash)

2006-07-19 Thread Alec Berryman
Package: konqueror
Version: 4:3.5.3-2
Severity: serious
Tags: security

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

CVE-2006-3672: "KDE Konqueror 3.5.1 and earlier allows remote attackers
to cause a denial of service (application crash) by calling the
replaceChild method on a DOM object, which triggers a null dereference,
as demonstrated by calling document.replaceChild with a 0 (zero)
argument."

I have reproduced this with 4:3.5.3-2 using [1].  A backtrace is
attached.

I have not yet confirmed if this issue affects sarge.

Please mention the CVE in your changelog.

Thanks,

Alec

[1] http://metasploit.com/users/hdm/tools/browserfun/mobb_014.html

- -- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.17-1-amd64-k8-smp
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages konqueror depends on:
ii  kcontrol4:3.5.3-2control center for KDE
ii  kdebase-kio-plugins 4:3.5.3-2core I/O slaves for KDE
ii  kdelibs4c2a 4:3.5.3-1core libraries and binaries for al
ii  kdesktop4:3.5.3-2miscellaneous binaries and files f
ii  kfind   4:3.5.3-2file-find utility for KDE
ii  libacl1 2.2.39-1 Access control list shared library
ii  libart-2.0-22.3.17-1 Library of functions for 2D graphi
ii  libattr12.4.32-1 Extended attribute shared library
ii  libaudio2   1.8-1The Network Audio System (NAS). (s
ii  libc6   2.3.6-15 GNU C Library: Shared libraries
ii  libfam0 2.7.0-10 Client library to control the FAM 
ii  libfontconfig1  2.3.2-7  generic font configuration library
ii  libfreetype62.2.1-2  FreeType 2 font engine, shared lib
ii  libgcc1 1:4.1.1-9GCC support library
ii  libice6 1:1.0.0-3X11 Inter-Client Exchange library
ii  libidn110.6.5-1  GNU libidn library, implementation
ii  libjpeg62   6b-13The Independent JPEG Group's JPEG 
ii  libkonq44:3.5.3-2core libraries for Konqueror
ii  libpng12-0  1.2.8rel-5.2 PNG library - runtime
ii  libqt3-mt   3:3.3.6-2Qt GUI Library (Threaded runtime v
ii  libsm6  1:1.0.0-4X11 Session Management library
ii  libstdc++6  4.1.1-9  The GNU Standard C++ Library v3
ii  libx11-62:1.0.0-7X11 client-side library
ii  libxcursor1 1.1.5.2-5X cursor management library
ii  libxext61:1.0.0-4X11 miscellaneous extension librar
ii  libxft2 2.1.8.2-8FreeType-based font drawing librar
ii  libxi6  1:1.0.0-5X11 Input extension library
ii  libxinerama11:1.0.1-4X11 Xinerama extension library
ii  libxrandr2  2:1.1.0.2-4  X11 RandR extension library
ii  libxrender1 1:0.9.0.2-4  X Rendering Extension client libra
ii  libxt6  1:1.0.0-5X11 toolkit intrinsics library
ii  zlib1g  1:1.2.3-13   compression library - runtime

konqueror recommends no packages.

- -- no debconf information

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEvvC8Aud/2YgchcQRAo/2AKChFs6+E6k4GV9JMwPiHPv3DyxySQCeM+zY
EZadE1TP020YZSiSut77Q34=
=NET8
-END PGP SIGNATURE-
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 47085047916336 (LWP 22488)]
[KCrash handler]
#5  0x2ad2d906d9ef in DOM::Node::replaceChild (
this=, [EMAIL PROTECTED], 
oldChild=)
at /tmp/buildd/kdelibs-3.5.3/./khtml/dom/dom_node.cpp:276
#6  0x2ad2d9045517 in KJS::DOMNodeProtoFunc::tryCall (
this=, exec=0x7fffd7e9b520, 
thisObj=, args=)
at /tmp/buildd/kdelibs-3.5.3/./khtml/ecma/kjs_dom.cpp:518
#7  0x2ad2d9011894 in KJS::DOMFunction::call (this=0x0, exec=0x0, 
[EMAIL PROTECTED], [EMAIL PROTECTED])
at /tmp/buildd/kdelibs-3.5.3/./khtml/ecma/kjs_binding.cpp:114
#8  0x2ad2d92b5f27 in KJS::Object::call (this=, 
exec=0x7fffd7e9b520, [EMAIL PROTECTED], [EMAIL PROTECTED])
at /tmp/buildd/kdelibs-3.5.3/./kjs/object.cpp:73
#9  0x2ad2d92c18de in KJS::FunctionCallNode::evaluate (
this=, exec=0x7fffd7e9b520)
at /tmp/buildd/kdelibs-3.5.3/./kjs/nodes.cpp:870
#10 0x2ad2d92c36b0 in KJS::ExprStatementNode::execute (this=0xd31470, 
exec=0x7fffd7e9b520) at /tmp/buildd/kdelibs-3.5.3/./kjs/nodes.cpp:1980
#11 0x2ad2d92c7325 in KJS::SourceElementsNode::execute (this=0xd31240, 
exec=0x7fffd7e9b520) at /tmp/buildd/kdelibs-3.5.3/./kjs/nodes.cpp:3091
#12 0x2ad2d92c351e in KJS::Block

Bug#378962: konqueror: CVE-2006-3672: not found in sarge

2006-07-19 Thread Alec Berryman
Package: konqueror
Version: 4:3.3.2-1sarge1
Followup-For: Bug #378962

I am unable to reproduce this in Sarge with the previously-mentioned
sample exploit.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-386
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages konqueror depends on:
ii  kcontrol   4:3.3.2-1sarge1   KDE Control Center
ii  kdebase-kio-plugin 4:3.3.2-1sarge1   KDE I/O Slaves
ii  kdelibs4   4:3.3.2-6.4   KDE core libraries
ii  kdesktop   4:3.3.2-1sarge1   KDE Desktop
ii  kfind  4:3.3.2-1sarge1   KDE File Find Utility
ii  libart-2.0-2   2.3.17-1  Library of functions for 2D graphi
ii  libc6  2.3.2.ds1-22sarge3GNU C Library: Shared libraries an
ii  libfam0c1022.7.0-6sarge1 client library to control the FAM 
ii  libgcc11:3.4.3-13GCC support library
ii  libice64.3.0.dfsg.1-14sarge1 Inter-Client Exchange library
ii  libidn11   0.5.13-1.0GNU libidn library, implementation
ii  libjpeg62  6b-10 The Independent JPEG Group's JPEG 
ii  libkonq4   4:3.3.2-1sarge1   Core libraries for KDE's file mana
ii  libpcre3   4.5-1.2sarge1 Perl 5 Compatible Regular Expressi
ii  libpng12-0 1.2.8rel-1PNG library - runtime
ii  libqt3c102-mt  3:3.3.4-3 Qt GUI Library (Threaded runtime v
ii  libsm6 4.3.0.dfsg.1-14sarge1 X Window System Session Management
ii  libstdc++5 1:3.3.5-13The GNU Standard C++ Library v3
ii  libx11-6   4.3.0.dfsg.1-14sarge1 X Window System protocol client li
ii  libxext6   4.3.0.dfsg.1-14sarge1 X Window System miscellaneous exte
ii  libxrender10.8.3-7   X Rendering Extension client libra
ii  xlibs  4.3.0.dfsg.1-14sarge1 X Keyboard Extension (XKB) configu
ii  zlib1g 1:1.2.2-4.sarge.2 compression library - runtime

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]