Re: Bug#583634: evince: Insecure ghostscript invocation
reassign 583634 libspectre1 0.2.0.ds-1 thanks Le samedi 29 mai 2010 à 11:55 +1000, Paul Szabo a écrit : > Please see > http://bugs.debian.org/583183 > for details: evince seems to use ghostscript in an insecure way > when viewing PS files. Thanks for your report. Both evince and okular rely on libspectre for gs invocation, so this should be fixed there. Cheers, -- .''`. Josselin Mouette : :' : `. `' “If you behave this way because you are blackmailed by someone, `-[…] I will see what I can do for you.” -- Jörg Schilling signature.asc Description: This is a digitally signed message part
Processed: Re: Bug#583634: evince: Insecure ghostscript invocation
Processing commands for cont...@bugs.debian.org: > reassign 583634 libspectre1 0.2.0.ds-1 Bug #583634 [evince] evince: Insecure ghostscript invocation Bug reassigned from package 'evince' to 'libspectre1'. Bug No longer marked as found in versions evince/2.22.2-4~lenny1. Bug #583634 [libspectre1] evince: Insecure ghostscript invocation Bug Marked as found in versions libspectre/0.2.0.ds-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 583634: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583634 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/handler.s.c.127512400921746.transcr...@bugs.debian.org
Re: kdenetwork: FTBFS: ld: cannot find -lsrtp - please binNMU linphone on amd64
reassign 583008 libortp-dev 3.3.0-1 affects 583008 kdenetwork retitle 583008 -lsrtp and crypto friends should be Libs.private in ortp.pc? severity 583008 important thanks Hello, the kdenetwork FTFBS below is due to the fact that linphone 3.3.0-1 was built in an unclean environment on amd64 (so it is uploader's fault). Just look how libortp8 3.3.0-1 depends on libsrtp0 only on amd64 [1]. So I'm CC'ing debian- wb-team in order to ask for amd64 binNMU of linphone to fix this problem. However, lets assume maintainers decide to build with srtp support (btw, libsrtp does not build everywhere at the moment). In that case, I don't think that "-lsrtp -lssl -lcrypto" belongs to "Libs" in ortp.pc. In my opinion it should be in "Libs.private" as it is probably only needed for static linking. So either ortp.pc.in should be fixed or libortp-dev should be made to depend on libsrtp0-dev and libssl-dev if they are really needed for dynamic linking. So this bug is a reminder for the future in case you decide to enable srtp support (so you may close or keep it open at your discretion). However, at the moment binNMU on amd64 will be enough to fix current breakage. 1. http://packages.debian.org/sid/libortp8 On antradienis 25 Gegužė 2010 09:44:54 Lucas Nussbaum wrote: > During a rebuild of all packages in sid, your package failed to build on > amd64. > > Relevant part: > > /usr/bin/g++ -g -O2 -g -Wall -O2 -Wnon-virtual-dtor -Wno-long-long > > -ansi -Wundef -Wcast-align -Wchar-subscripts -Wall -W -Wpointer-arith > > -Wformat-security -fno-exceptions -DQT_NO_EXCEPTIONS -fno-check-new > > -fno-common -Woverloaded-virtual -fno-threadsafe-statics > > -fvisibility=hidden -fvisibility-inlines-hidden -DNDEBUG -DQT_NO_DEBUG > > -Wl,--enable-new-dtags -Wl,--no-undefined -Wl,--as-needed > > CMakeFiles/call.dir/call_main.o CMakeFiles/call.dir/callclient.o > > CMakeFiles/call.dir/console.o -o googletalk-call -rdynamic > > -L../../../../../../../../lib > > ../../../../../../../../lib/libcricketexampleslogin.a > > ../../../../../../../../lib/libcricketsessionphone.a > > ../../../../../../../../lib/libcricketp2pclient.a > > ../../../../../../../../lib/libcricketp2pbase.a > > ../../../../../../../../lib/libcricketxmpp.a > > ../../../../../../../../lib/libcricketxmllite.a > > ../../../../../../../../lib/libcricketbase.a -lexpat -lortp -lpthread > > -lssl -lcrypto -lmediastreamer -lortp -lpthread -lsrtp -lssl -lcrypto > > -lssl -lcrypto -lmediastreamer -lortp -lsrtp -lssl -lcrypto Building CXX > > object > > kopete/protocols/yahoo/libkyahoo/CMakeFiles/kyahoo.dir/coreprotocol.o cd > > kopete/protocols/yahoo/libkyahoo && /usr/bin/g++ -DMAKE_KYAHOO_LIB > > -D_BSD_SOURCE -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -DQT_NO_STL > > -DQT_NO_CAST_TO_ASCII -D_REENTRANT -DKDE_DEPRECATED_WARNINGS -g -O2 -g > > -Wall -O2 -Wnon-virtual-dtor -Wno-long-long -ansi -Wundef -Wcast-align > > -Wchar-subscripts -Wall -W -Wpointer-arith -Wformat-security > > -fno-exceptions -DQT_NO_EXCEPTIONS -fno-check-new -fno-common > > -Woverloaded-virtual -fno-threadsafe-statics -fvisibility=hidden > > -fvisibility-inlines-hidden -DNDEBUG -DQT_NO_DEBUG -fPIC -I. > > -I../../../../../kopete/protocols/yahoo/libkyahoo -I../../../../.. > > -I../../../.. -I../../.. -I../../../../../kopete/libkopete > > -I../../../libkopete -I../../../../../kopete/libkopete/ui > > -I../../../libkopete/ui -I../../../../../kopete/libkopete/private > > -I../../../../../kopete/libkopete/contactlist > > -I../../../../../kopete/libkopete/tasks -I/usr/include/KDE > > -I/usr/include/qt4/phonon -I/usr/include/qt4/QtXmlPatterns > > -I/usr/include/qt4/QtXml -I/usr/include/qt4/QtWebKit > > -I/usr/include/qt4/QtUiTools -I/usr/include/qt4/QtTest > > -I/usr/include/qt4/QtSvg -I/usr/include/qt4/QtSql > > -I/usr/include/qt4/QtScriptTools -I/usr/include/qt4/QtScript > > -I/usr/include/qt4/QtNetwork -I/usr/include/qt4/QtMultimedia > > -I/usr/include/qt4/QtHelp -I/usr/include/qt4/QtDesigner > > -I/usr/include/qt4/QtDBus -I/usr/include/qt4/QtAssistant > > -I/usr/include/qt4/Qt3Support -I/usr/include/qt4/QtGui > > -I/usr/include/qt4/QtCore -I/usr/include/qt4/Qt > > -I/usr/share/qt4/mkspecs/default -I/usr/include/qt4 -D_GNU_SOURCE > > -D_LARGEFILE64_SOURCE -o CMakeFiles/kyahoo.dir/coreprotocol.o -c > > ../../../../../kopete/protocols/yahoo/libkyahoo/coreprotocol.cpp > > Building CXX object > > kopete/protocols/jabber/libiris/CMakeFiles/iris_kopete.dir/iris/xmpp/cut > > estuff/bsocket.o cd kopete/protocols/jabber/libiris && /usr/bin/g++ > > -D_BSD_SOURCE -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -DQT_NO_STL > > -DQT_NO_CAST_TO_ASCII -D_REENTRANT -DKDE_DEPRECATED_WARNINGS > > -DQT3_SUPPORT -DQT3_SUPPORT_WARNINGS -DIRIS_XMPP_JID_DEPRECATED > > -DIRISNET_STATIC -g -O2 -g -Wall -O2 -Wnon-virtual-dtor -Wno-long-long > > -ansi -Wundef -Wcast-align -Wchar-subscripts -Wall -W -Wpointer-arith > > -Wformat-security -fno-exceptions -DQT_NO_EXCEPTIONS -fno-check-new > > -fno-common -Woverloaded-virtual -fno-threadsafe-statics >
Processed: Re: kdenetwork: FTBFS: ld: cannot find -lsrtp - please binNMU linphone on amd64
Processing commands for cont...@bugs.debian.org: > reassign 583008 libortp-dev 3.3.0-1 Bug #583008 [src:kdenetwork] kdenetwork: FTBFS: ld: cannot find -lsrtp Bug reassigned from package 'src:kdenetwork' to 'libortp-dev'. Bug No longer marked as found in versions kdenetwork/4:4.4.3-2. Bug #583008 [libortp-dev] kdenetwork: FTBFS: ld: cannot find -lsrtp Bug Marked as found in versions linphone/3.3.0-1. > affects 583008 kdenetwork Bug #583008 [libortp-dev] kdenetwork: FTBFS: ld: cannot find -lsrtp Added indication that 583008 affects kdenetwork > retitle 583008 -lsrtp and crypto friends should be Libs.private in ortp.pc? Bug #583008 [libortp-dev] kdenetwork: FTBFS: ld: cannot find -lsrtp Changed Bug title to '-lsrtp and crypto friends should be Libs.private in ortp.pc?' from 'kdenetwork: FTBFS: ld: cannot find -lsrtp' > severity 583008 important Bug #583008 [libortp-dev] -lsrtp and crypto friends should be Libs.private in ortp.pc? Severity set to 'important' from 'serious' > thanks Stopping processing here. Please contact me if you need assistance. -- 583008: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583008 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/handler.s.c.12751585906523.transcr...@bugs.debian.org
Processed: tags 582023 + patch
Processing commands for cont...@bugs.debian.org: > tags 582023 + patch Bug #582023 [dolphin] dolphin: Navigation with keyboard broken in "Column view" mode Added tag(s) patch. > End of message, stopping processing here. Please contact me if you need assistance. -- 582023: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582023 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/handler.s.c.127516557525178.transcr...@bugs.debian.org
Bug#582023: dolphin: Fixed upstream, Patch available.
Package: dolphin Version: 4:4.4.3-1 Severity: normal Tags: patch This bug was just fixed upstream: http://websvn.kde.org/?view=rev&revision=1132120 3 files are updated : http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnview.cpp?r1=1109228&r2=1132120&pathrev=1132120 http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnviewcontainer.cpp?r1=1109228&r2=1132120&pathrev=1132120 http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnviewcontainer.h?r1=1109228&r2=1132120&pathrev=1132120 So, I think this can be fixed in this current version in Squeeze because the previous revision is old. Patch for kdebase/apps/dolphin/src/dolphincolumnview.cpp : http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnview.cpp?r1=1109228&r2=1132120&pathrev=1132120&view=patch Patch for kdebase/apps/dolphin/src/dolphincolumnviewcontainer.cpp : http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnviewcontainer.cpp?r1=1109228&r2=1132120&pathrev=1132120&view=patch Patch for kdebase/apps/dolphin/src/dolphincolumnviewcontainer.h : http://websvn.kde.org/trunk/KDE/kdebase/apps/dolphin/src/dolphincolumnviewcontainer.h?r1=1109228&r2=1132120&pathrev=1132120&view=patch Best regards, Thomas PIERSON -- To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201005292229.05930.web.pier...@gmail.com
