Bug#488696: comedi-source build fails (m-a a-i comedi)

2008-08-24 Thread Gudjon I. Gudjonsson
Hi I can confirm that Comedi works on my amd64 computer with kernel 2.6.26. I have tested it with Adlink PCI-9111 AD converter card, reading from it with xoscope. Please don't remove Comedi from Lenny. Cheers Gudjon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsub

Bug#496492: Acknowledgement (iceweasel-itsalltext can't work)

2008-08-24 Thread Ding Honghui
Debian Bug Tracking System wrote: Thank you for filing a new Bug report with Debian. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will re

Bug#494773: This is #495575

2008-08-24 Thread Ariel
forcemerge 495575 494773 thanks This is #495575 and upgrading solved it. -Ariel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#496410: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dmitry E. Oboukhov
tags 496410 security thanks On 13:15 Sun 24 Aug , Steve Langasek wrote: SL> severity 496410 important SL> thanks You are mistake :) Your script places in /usr/sbin, ie it runs with root privs. If I create symlink /etc/shadow -> /tmp/eglog and You start this script, then your system 'll damag

Bug#496125: libxml2 problem confirmed on different platform: etch ppc

2008-08-24 Thread Emmanuel Kasper
Package: libxml2 Followup-For: Bug #496125 Hello Sorry for the me-too of this report, but I can confirm this bug on debian etch running on a single processor ppc (G4) 32 bits platform. It happens I also use the Gorilla theme, and the symptoms were exactly those reported in message 39 of this bug r

Bug#496492: iceweasel-itsalltext can't work

2008-08-24 Thread Ding Honghui
Package: iceweasel-itsalltext Version: 0.8.5-1 Severity: important After install the extension, it is total can't work. I try to set the preferences of this extension, and the error message is: XML Parsing Error: undefined entity Location: chrome://itsalltext/content/preferences.xul Line Number

Bug#395272: Doesn't seem to be a bug

2008-08-24 Thread Martín Ferrari
tags 395272 + unreproducible thanks As Steve pointed out, this seems to be a problem in Lucas' configuration. I have just built it with disabled networking (a reject rule in iptables), and everything went fine. Lucas, please recheck this, so we can close the bug. -- Martín Ferrari -- To UNSUB

Bug#496490: adolc_1.10.2-3(sparc/unstable): FTBFS, fails while dpkg-gensymbols

2008-08-24 Thread Martin Zobel-Helas
Package: adolc Version: 1.10.2-3 Severity: serious There was an error while trying to autobuild your package: > Automatic build of adolc_1.10.2-3 on spontini by sbuild/sparc 99.99 > Build started at 20080819-1358 [...] > ** Using build dependencies supplied by package: > Build-Depends: debhelpe

Bug#496489: ucf(1) incorrectly claims that ucf has bugs

2008-08-24 Thread Steve Langasek
Package: ucf Version: 3.007 Severity: minor The ucf manpage currently claims under "BUGS" that ucf templates will fail to be automatically reloaded in the case of debconf database corruption. But this is no longer true: this was fixed in bug #424926, so the BUGS section is buggy. :-) -- System

Bug#496488: MODULE_FALLBACK not used if bad FREQDRIVER specified (patch)

2008-08-24 Thread Andrea Iacovitti
Package: cpufrequtils Version: 004-2 Severity: normal Hi, actually if the user specify FREQDRIVER in /etc/default/loadcpufreq and this one is unloadable (because of a typo or because doesn't match the real device) no cpu frequency driver are loaded at all. I attach the patch that make it possibl

Bug#496491: brctl: can't set stp on when using 32bit app on 64bit kernel

2008-08-24 Thread Jiro SEKIBA
Package: bridge-utils Version: 1.4-4 Severity: normal When invoke "brctl stp on" on 64bit kernel with 32bit brctl, it failed by "Operation not support" althought it is supported. I can "echo 1 > /sys/class/net//bridge/stp_state" and check the result by "brctl show ". It looks like that brctl i

Bug#443322: login: immediate 'Login incorrect' after unknown user name

2008-08-24 Thread Steve Langasek
On Sun, Aug 24, 2008 at 03:01:41PM +0200, Nicolas François wrote: > On Sat, Aug 23, 2008 at 10:30:59PM -0700, [EMAIL PROTECTED] wrote: > > I just upgraded one of my sid machines that had a modified /etc/pam.d/login, > > and was quite surprised to see the conffile prompt from this change, > > speci

Bug#496487: evince: Wacky MIME error for non-existant files

2008-08-24 Thread Brett Nash
Package: evince Version: 2.22.2-2 Severity: normal Firing up evince with a non-existent file gives the bizarre result of: Unable to open document Unknown MIME Type This is rather surprising (and rather annoying if you make a typo on the file name and don't realise it for a while).

Bug#496272: xserver-xorg: fonts and menu icons are blank in pristine lenny install

2008-08-24 Thread Brice Goglin
Mark Hedges wrote: > But I just re-installed and now it is fine. Weird. > What did you reinstall? The whole machine? Can you send the corresponding config and log? Brice -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#496486: synce-kpm: Program does not do anything

2008-08-24 Thread Alex Hermann
Package: synce-kpm Version: 0.11.1-1 Severity: grave Justification: renders package unusable After installing I started the program. It just sits around doing absolutely nothing. ActiveSync Status says: "Make sure Sync-Engine is running...". (No hint as to how to make it running) Connecting the P

Bug#496272: xserver-xorg: fonts and menu icons are blank in pristine lenny install

2008-08-24 Thread Mark Hedges
Actually it happened whether I used the intel driver or the generic driver, framebuffer or not. But I just re-installed and now it is fine. Weird. Mark On Sun, 24 Aug 2008, Brice Goglin wrote: > Mark Hedges wrote: > > Package: xserver-xorg > > Version: 1:7.3+15 > > Severity: grave > > Justifi

Bug#292733: linuxlogo: does not detect processor and bogomips on m68k

2008-08-24 Thread Daniel Baumann
tags 292733 +moreinfo thanks Hi, please recheck with a current (5.x) version of linuxlogo. Regards, Daniel -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ -- To UNS

Bug#496483: Use git-buildpackage & alioth/collab-maint.

2008-08-24 Thread Trent W. Buck
Package: midori Version: 0.0.20~git-1twb Severity: wishlist Guys, It seems to me that using git-buildpackage[0] is a Good Thing; it makes it clear who changed what, and why, for the debian/ tree. Currently I'm still at the "reading the manual" stage with this. Secondly, if we're going to version

Bug#496481: wireless-tools: garbage output from iwlist scan

2008-08-24 Thread Marcus Better
Package: wireless-tools Version: 30~pre6-1 Severity: important "iwlist scan" gives complete garbage output, along with a message to report platform details, so here goes. In particular the ESSID is always shown as "off/any/hidden" even for public networks which broadcast SSID, and it says "Encryp

Bug#496484: gnu-smalltalk_3.1~rc3-1(experimental/alpha/ds10): Testsuite failure (118: ROE)

2008-08-24 Thread Marc 'HE' Brockschmidt
Package: gnu-smalltalk Version: 3.1~rc3-1 Severity: serious Tags: experimental Heya, Building your package failed on my alpha buildd: | Automatic build of gnu-smalltalk_3.1~rc3-1 on ds10 by sbuild/alpha 98-farm | Build started at 20080824-0856

Bug#496477: ecasound: new upstream version 2.5.2

2008-08-24 Thread Eric Dantan Rzewnicki
Package: ecasound Version: 2.4.6.1-2 Severity: normal There is a new release of ecasound available. Here is the latest release announcement: http://eca.cx/relnotes/ecasound_v2_5_2_relnotes.txt -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing') A

Bug#412291: linuxlogo: installation instructions missing for upstart

2008-08-24 Thread Daniel Baumann
Hi, I have no system with upstart, please send a patch against README.Debian what should be added. Thanks, Daniel -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ --

Bug#496480: openoffice.org_1:3.0.0~ooo300m3-2(experimental/i386/demosthenes): gcj-dbtool: command not found

2008-08-24 Thread Marc 'HE' Brockschmidt
Package: openoffice.org Version: 1:3.0.0~ooo300m3-2 Severity: serious Tags: experimental Heya, Building OO.org on i386 failed: | Automatic build of openoffice.org_1:3.0.0~ooo300m3-2 on demosthenes.ayous.org by sbuild/i386 98-farm | Build started at 20080824-1338

Bug#496482: neon25 transitional packages not installable

2008-08-24 Thread Luk Claes
Package: neon27 Version: 0.28.2-3 Severity: serious Hi libneon25, libneon25-dbg and libneon25-dev transitional packages are not installable as the neon27 counterparts conflict with them. You should version the conflict to solve this bug as otherwise the package won't transition to testing beca

Bug#415801: reportbug: SOAP support now more important due to BTS changes

2008-08-24 Thread Paul Wise
severity 415801 important thanks Lack of SOAP support in reportbug now more important due to the latest HTML changes in the bug tracking system. Some packages do not show the list of bugs, despite saying that there are bugs. One example is exiftran (reportbug says 7 bugs found, but doesn't show th

Bug#496478: New upstream version needed for padre

2008-08-24 Thread Damyan Ivanov
Package: libfile-srahedir-perl Version: 0.05-1.1 Severity: wishlist Hi, apart from fixing the release-critical changed layout problem (#496122), version 1.00 (released on Jul 17th) is also required from padre (ITP #492696). It would be much apreciated if you can upgrade the package to 1.00. Alte

Bug#496204: samba-common: package description overhaul

2008-08-24 Thread Steve Langasek
On Sat, Aug 23, 2008 at 01:55:35PM +0100, Justin B Rye wrote: > Current package description: > # Description: Samba common files used by both the server and the client > # The Samba software suite is a collection of programs that > # implements the SMB/CIFS protocol for unix systems, all

Bug#449209: libchm-bin: chm_http craches due to segmentation fault on massive fetching

2008-08-24 Thread Kartik Mistry
Hi Jed, Any update on this bug? Just ping :) Thanks. On Wed, Nov 28, 2007 at 4:30 AM, Jed Wing <[EMAIL PROTECTED]> wrote: > On Nov 27, 2007 1:04 PM, Jed Wing <[EMAIL PROTECTED]> wrote: >> I'm investigating it now. I'll let you know what I find. I've given it >> a quick test, and the bug seems

Bug#496200: Bug#496201: samba-dbg: package description overhaul

2008-08-24 Thread Steve Langasek
reassign 496201 samba forcemerge 496200 496201 thanks Merging the samba-dbg and samba reports, since the descriptions for the two should be very similar. > And one problem unique to this package: > * documentation bitrot already? samba-dbg covers the whole suite, > not just "the samba and

Bug#496476: hugin: 'Add images' dialog needs a preview pane and thumbnail view

2008-08-24 Thread Paul Wise
Package: hugin Version: 0.7.0~svn3191+beta5-1 Severity: wishlist It would be nice if the 'Add images' dialog had a preview pane, like the GIMP file open dialog does. Also nice would be the addition of a thumbnail view. These would both make it easier to select the right images to create a new pano

Bug#496361: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Rene Engelhard
Hi again, Rene Engelhard wrote: > I so far thought mktemp was safe enough? (of course, we get > senddoc.mutt., but... Sorry, missed the final sentence: What do you propose instead? Regards, Rene -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact

Bug#496361: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Rene Engelhard
Hi, Dmitry E. Oboukhov wrote: > For example if a script uses in its work a temp file which is created > in /tmp directory, then every user can create symlink with the same > name in this directory in order to destroy or rewrite some system > or user file. Symlink attack may also lead n

Bug#496366: [Debian-med-packaging] Bug#496366: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Charles Plessy
tag 496366 help thanks Le Sun, Aug 24, 2008 at 10:05:28PM +0400, Dmitry E. Oboukhov a écrit : > Package: mafft > Severity: grave > > In some packages I've discovered scripts with errors which may be used > by a user for damaging important system files or user's files. Hi all, I have not followe

Bug#496475: anki: new upstream version (0.9.7.2) available; required for online sync

2008-08-24 Thread Nicholas Breen
Package: anki Version: 0.9.6-1 Severity: wishlist Please consider packaging the new anki release. As of 0.9.7, the sync protocol changed, meaning that the current 0.9.6-1 packages can no longer communicate with the anki server. Thanks. -- Nicholas Breen [EMAIL PROTECTED] -- To UNSUBSCRIBE

Bug#495353: gdal-bin: gdalinfo segfaults on a 6.2Mib netCDF file

2008-08-24 Thread Petter Reinholdtsen
merge 495353 495354 thanks [Paulo Marcondes] > when trying gdalinfo 3n24s47w14w.grd, I get a segmentation fault. > data was downloaded from > http://www.bodc.ac.uk/data/online_delivery/gebco/select/ Please try to rund the same command under valgrind, ie valgrind gdalinfo 3n24s47w14w.grd and

Bug#496457: libpam-modules: user cannot unlock screen with correct password

2008-08-24 Thread Steve Langasek
On Sun, Aug 24, 2008 at 03:23:26PM -0700, Steve Lane wrote: > So, I'm guessing that we need: > -r--r- 1 root shadow 14050 Aug 24 15:13 /etc/shadow Yes, that would also work. It's rather unusual to have the file mode 0440 instead of mode 0640, but that won't break KDE. :) -- Steve Langasek

Bug#496474: w3c-markup-validator: no soap output for explanation tag defined in check cgi script

2008-08-24 Thread Matthew Ryder
Package: w3c-markup-validator Version: 0.7.4-5.1 Severity: minor add in to both sections of soap_output.tmpl -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-xen

Bug#496473: tangogps: please include convert2gpx script

2008-08-24 Thread Paul Wise
Package: tangogps Version: 0.9.2-1 Severity: wishlist Please include this script to convert the tangogps log to GPX files that can be used with JOSM and other GPS systems. http://psung.blogspot.com/2008/07/sharing-gps-tracks-from-tangogps-on.html If it isn't included upstream then it would be ni

Bug#496472: fdupes: option to not traverse filesystems

2008-08-24 Thread Paul Wise
Package: fdupes Version: 1.50-PR2-1 Severity: wishlist It would be nice if fdupes had an option to not traverse filesystem boundaries, like the -xdev argument to find. -- bye, pabs http://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part

Bug#495963: python-coverage: code coverage shows 0% cover on linked files

2008-08-24 Thread Nicolas Évrard
* Ben Finney [2008-08-22 08:21 +0200]: On 22-Aug-2008, Nicolas Évrard wrote: * Ben Finney [2008-08-22 01:25 +0200]: On 21-Aug-2008, Nicolas Évrard wrote: % nosetests --cover-erase --with-coverage --cover-package=relatorio And it shows the following table after the tests has runned:

Bug#496471: uboot-mkimage: Typo in the package's long description

2008-08-24 Thread Nicolas FRANCOIS (Nekral)
Package: uboot-mkimage Version: 0.4 Severity: minor Tags: patch Hello, There is a typo in the uboot-mkimage's long description. "kerel" should be "kernel". Best Regards, -- Nekral -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTE

Bug#496470: IOError: [Errno 22] Invalid argument

2008-08-24 Thread Marco d'Itri
Package: ajaxterm Version: 0.10-2 Severity: important It's totally broken for me, when I open the web page the terminal is not displayed and I get a backtrace from the daemon for each request. This pseudo-patch fixes it: -fcntl.ioctl(fd, struct.unpack('i',struct.pack('I',termios.TIOCSWINSZ))[0],

Bug#496469: Examples not decompressed in opencascade-examples

2008-08-24 Thread [EMAIL PROTECTED]
Package:opencascade-examples Version:6.2.dfsg-1 Priority: standard Most of the files in the /usr/share/doc/opencascade-examples are in a compressed format. Please look into a debconf provision which, if the user checks a box, automatically uncompresses all of the files during installation, and

Bug#496363: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dirk Eddelbuettel
On 25 August 2008 at 04:11, Nico Golde wrote: | Hi Dirk, | * Dirk Eddelbuettel <[EMAIL PROTECTED]> [2008-08-25 03:07]: | > I think it is a false positive: | > | > # test functionality of the compiler | > javac_works='not present' | > if test -n "$JAVAC"; then | > javac_works='not functional'

Bug#496468: Please update maradns to fix MX bug

2008-08-24 Thread Rodrigo Campos
Package: maradns Version: 1.3.07.08-1 Severity: normal There is a bug in maradns that prevents exim4 sending mail when a domain does not have an MX record. This bug is also reported in ubuntu: https://bugs.launchpad.net/ubuntu/+source/maradns/+bug/261002 As the ubuntu bug says, there are new sta

Bug#264367: isolinux fails to boot on AOpen AX6BC motherboard with "Disk error"

2008-08-24 Thread Daniel Baumann
tags 264367 +moreinfo thanks Please retry with a current syslinux version. -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTE

Bug#495954: libldap bug - related to replaces/conflicts, but no provides?

2008-08-24 Thread David Hall (coding)
I'm wondering if this is related to the issues I had when installing wine from winehq.org (which also involved libldap breakage). The following is from a discussion with Scott Ritchie: David Hall (coding) wrote: > The current problem seems to be due to libldap2 (which is a dependency of > wine). T

Bug#264474: sarge-i386-netinst.iso failed to boot

2008-08-24 Thread Daniel Baumann
tags 264474 +moreinfo thanks Please retry with a current syslinux version. -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ -- To UNSUBSCRIBE, email to [EMAIL PROTECT

Bug#412682: Netinst CD-image locks keyboard at boot on Macbook (Intel)

2008-08-24 Thread Daniel Baumann
tags 412682 +moreinfo thanks Please retry with a current syslinux version. -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTE

Bug#496363: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Nico Golde
Hi Dirk, * Dirk Eddelbuettel <[EMAIL PROTECTED]> [2008-08-25 03:07]: > I think it is a false positive: > > # test functionality of the compiler > javac_works='not present' > if test -n "$JAVAC"; then > javac_works='not functional' > rm -rf /tmp/A.java /tmp/A.class ## <- note the

Bug#494574: apt issue affecting apticron

2008-08-24 Thread Tiago Bortoletto Vaz
retitle 494574: apt-get installs recommends from installed packages during dist-upgrade, affecting apticron behavior reassign 494574 apt 0.7.14+b1 merge 494574 485943 thanks Hi Thue, Thanks for reporting this bug. In fact apticron is listing new recommended packages on its daily email. I could

Bug#496467: screen-message: patch for better timeout handling

2008-08-24 Thread Paul Wise
Source: screen-message Version: 0.14-1 Severity: wishlist The attached patch adds better handling for hiding the edit widget on timeouts: * a command-line option to give a custom timeout * doesn't render text underneath the edit widget * timeout doesn't occur when the user is mo

Bug#496362: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Thomas Goirand
Dmitry E. Oboukhov wrote: > Package: dtc-common > Severity: grave > > Hi, maintainer! > > This message about the error concerns a few packages at once. I've > tested all the packages (for Lenny) on my Debian mirror. All scripts > of packages (marked as executable) were tested. > > In some

Bug#496418: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Stephen Gran
This one time, at band camp, Dirk Eddelbuettel said: > > On 25 August 2008 at 01:43, Stephen Gran wrote: > | This one time, at band camp, Dirk Eddelbuettel said: > | > > | > This is the same as the one I just answered for r-base-core-ra as > | > r-base-core-ra is an extension/specialisation of r-

Bug#496466: multiple memory leaks in libkeyutils1

2008-08-24 Thread Michael Gebetsroither
Package: libkeyutils1 Version: 1.2-7 Severity: minor Tags: patch typical c errors, e.g leak on failed realloc. patches attached and both inlined for easy review. diff --git a/keyutils.c b/keyutils.c index 891fee4..d6e7688 100644 --- a/keyutils.c +++ b/keyutils.c @@ -165,6 +165,24 @@ long keyctl_

Bug#491640: Configuration fails if postgresql is selected.

2008-08-24 Thread Elizabeth Bevilacqua
On Sun, Jul 20, 2008 at 10:02 PM, Daniel Burrows <[EMAIL PROTECTED]> wrote: > The webcalendar debconf script offers the user a choice between mysql > and postgres, but it doesn't actually work with postgres. When it tries > to create the database it runs into an error because it tries to create >

Bug#496418: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dirk Eddelbuettel
On 25 August 2008 at 01:43, Stephen Gran wrote: | This one time, at band camp, Dirk Eddelbuettel said: | > | > This is the same as the one I just answered for r-base-core-ra as | > r-base-core-ra is an extension/specialisation of r-base-core. | > | > So again: | > | > # test functionality of th

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André Luís Lopes escreveu: > Hello, > > André Luís Lopes escreveu: >>I'll be following up to this bug with the bug number of the removal >> request as soon as I receive it from BTS. > >As promised, the bug number of the removal request is 496

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, André Luís Lopes escreveu: > >I'll be following up to this bug with the bug number of the removal > request as soon as I receive it from BTS. As promised, the bug number of the removal request is 496432. Regards, !DSPAM:1,48b1edc510

Bug#496465: dpkg-dev: dpkg-source can't work with V3 format

2008-08-24 Thread Noel David Torres Taño
Package: dpkg-dev Version: 1.14.20 Severity: important $ dpkg-source --format=3 -b wmaker-data-0.9~2 dpkg-source: error: source package format `3' is not supported (Perl module Dpkg::Source::Package::V3 is required) /usr/share/perl5/Dpkg/Source/Package/V3.pm in fact does not exist. /usr/share/

Bug#332782: Release Notes: license clarification

2008-08-24 Thread W. Martin Borgert
On 2008-08-24 12:19, Steve Langasek wrote: > I was a release note editor for the last release only; my contributions are > far less than those of many others on that list, it's not really fair to > call me a "main" author... OK. > Legally, there is no reason to require GPG-signed email; and there

Bug#496464: RM: ibackup -- ROM; Multiple vulnerabilities, no interest to continue maintaining

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: ftp.debian.org Severity: normal Hello, As noted on bug number 496432, ibackup has a lot of symilink vulnerabilities. Besides that, I'm not interested in maintaining it anymore as I'm not using it since a long time. That said, I woul

Bug#496418: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Stephen Gran
This one time, at band camp, Dirk Eddelbuettel said: > > This is the same as the one I just answered for r-base-core-ra as > r-base-core-ra is an extension/specialisation of r-base-core. > > So again: > > # test functionality of the compiler > javac_works='not present' > if test -n "$JAVAC"; the

Bug#483671: libevent-dev: 1.4.4 available upstream

2008-08-24 Thread Aníbal Monsalve Salazar
On Fri, May 30, 2008 at 03:48:48PM +0400, Aleksey Midenkov wrote: >Package: libevent-dev >Version: 1.3e-3 >Severity: important > >1.3e-3 is kind of too old (2007-09-24). >There is 1.4.4 (2008-05-13). > >Please, consider releasing it. Thank you. I'll upload a new Debian version to experimental. >h

Bug#491644: Multi-day events only appear on their first day.

2008-08-24 Thread Elizabeth Bevilacqua
On Sun, Jul 20, 2008 at 10:44 PM, Daniel Burrows <[EMAIL PROTECTED]> wrote: > If I create a multi-day event (for instance, a "camping" event that > starts at 6:00 PM on Friday and lasts for 48 hours), the weekly view > only shows this event attached to the first day that it covers. I think > that

Bug#466767: php5 metapackage dependency unnecessary?

2008-08-24 Thread Raphael Geissert
retitle 466767 useless dependency on php5 severity 466767 important thanks I guess the maintainer didn't intend to Depend on both, but to use an ORed dependency. And since it is a kind of annoying bug I'm raising its severity (especially because having any of the web SAPIs won't be of any use as

Bug#496363: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dirk Eddelbuettel
I think it is a false positive: # test functionality of the compiler javac_works='not present' if test -n "$JAVAC"; then javac_works='not functional' rm -rf /tmp/A.java /tmp/A.class ## <- note the rm -rf echo "public class A { }" > /tmp/A.java if test -e /tmp/A.java; the

Bug#496418: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dirk Eddelbuettel
This is the same as the one I just answered for r-base-core-ra as r-base-core-ra is an extension/specialisation of r-base-core. So again: # test functionality of the compiler javac_works='not present' if test -n "$JAVAC"; then javac_works='not functional' rm -rf /tmp/A.java /tmp/A.class

Bug#494709: libevent FTBFS because of TIMEVAL_TO_TIMESPEC

2008-08-24 Thread Aníbal Monsalve Salazar
On Mon, Aug 11, 2008 at 09:42:14PM +0200, Luca Bruno wrote: >So it seems that adding AC_GNU_SOURCE to configure.in and removing >explicit definitions in those files upstream could be the right >solutions. I'll apply the patch submitted by Petr as it the simplest change to convince the release tea

Bug#496389: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Stephen Gran
This one time, at band camp, Dmitry E. Oboukhov said: > Hi, maintainer! > > This message about the error concerns a few packages at once. I've > tested all the packages (for Lenny) on my Debian mirror. All scripts > of packages (marked as executable) were tested. So, what is the error that

Bug#495257: [Pkg-utopia-maintainers] Bug#495257: dbus: System bus must not be restarted during package upgrades

2008-08-24 Thread Tyson Clugg
On Fri, 2008-08-22 at 22:11 +0200, Michael Biebl wrote: ... > As much as I disagree with upstream, that dbus should never be restarted > (I find the argument bogus, that a dbus restart is equivalent to a > kernel live-restart), I agree with Sam, that given the current > situation, and the many brea

Bug#491391: bootchart: Wrong ordering with dependency based booting

2008-08-24 Thread Luca Capello
Hi Jörg! On Fri, 22 Aug 2008 01:36:01 +0200, Jörg Sommer wrote: > Luca Capello schrieb am Wed 20. Aug, 14:10 (+0200): >> On Wed, 20 Aug 2008 12:45:11 +0200, Jörg Sommer wrote: >> > Luca Capello schrieb am Tue 19. Aug, 22:53 (+0200): >> >> According to [1], I'd say that bootchart is correct, since

Bug#491643: Silently allows the user to set a password that can't be used to log in.

2008-08-24 Thread Elizabeth Bevilacqua
package webcalendar severity 491643 normal thanks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#491391: bootchart: Wrong ordering with dependency based booting

2008-08-24 Thread Luca Capello
Hi all! On Sat, 23 Aug 2008 22:16:28 +0200, Jörg Sommer wrote: > Petter Reinholdtsen schrieb am Thu 21. Aug, 22:11 (+0200): [You = Luca Capello] >> You interpret $all differently from insserv, and it is not obvious to >> me which interpretation is correct. The definition I am aware of for >> $all

Bug#491643: Silently allows the user to set a password that can't be used to log in.

2008-08-24 Thread Elizabeth Bevilacqua
package webcalendar Severity: normal tags 491643 upstream thanks Problem exists upstream in all versions, does not appear to be fixed upstream, fowarded bug: https://sourceforge.net/tracker/?func=detail&atid=103870&aid=2072443&group_id=3870 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Bug#492665: Uploaded: copher -- automatically make a SourceForge release

2008-08-24 Thread Jonathan Wiltshire
Uploaded to mentors.debian.net and awaiting sponsorship. If you want it sooner, the source package is at http://mentors.debian.net/debian/pool/main/c/copher -- Jonathan Wiltshire signature.asc Description: Digital signature

Bug#490034: ucf affecting apticron upgrade

2008-08-24 Thread Tiago Bortoletto Vaz
Hi, I'm reassigning this bug to ucf package. I'm pretty sure it's an ucf issue, although I couldn't figure out where's the problem. For some reason the diff argument here in ucf is coming empty: show_diff() { if [ -z "$1" ]; then echo >&2 "need a diff as argument" exit 1; I'v

Bug#494680: liburiparser1: New upstream package available

2008-08-24 Thread Daniel Baumann
Hi, any progress on this? Regards, Daniel -- Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist Email: [EMAIL PROTECTED] Internet: http://people.panthera-systems.net/~daniel-baumann/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscri

Bug#495257: [Pkg-utopia-maintainers] Bug#495257: dbus: System bus must not be restarted during package upgrades

2008-08-24 Thread Tyson Clugg
On Fri, 2008-08-22 at 22:11 +0200, Michael Biebl wrote: > Sam Morris wrote: > > On Tue, 19 Aug 2008 15:13:14 +1000, Tyson Clugg wrote: > > > > > > > Given the current release situation, I think we should just not restart > > the bus for now. > > ...snip. That statement should not have been at

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, Moritz Muehlenhoff escreveu: > retitle 496432 ibackup: Several symlinks vulnerabilities > thanks > > On Sun, Aug 24, 2008 at 10:05:28PM +0400, Dmitry E. Oboukhov wrote: >> Package: ibackup >> Severity: grave >> >> Hi, maintainer! > > ibackup

Bug#494227: xmlroff: diff for NMU version 0.6.0-1.1

2008-08-24 Thread W. Martin Borgert
On 2008-08-25 00:13, Thomas Viehmann wrote: > Unfortunately, Martin, it makes the Debian refcard look ugly. > Nonetheless, I believe moving from segfault to quirky output > warrants closing the RC bug here. As such, I'll upload in the > next days unless someone objects. No objection from my side.

Bug#332782: Release Notes: license clarification

2008-08-24 Thread W. Martin Borgert
On 2008-08-24 20:36, Luk Claes wrote: > I guess bug submitters and/or patch providers would also count as > contributor? Yes. There are 16 bugs with a "patch" tag: #404891 - patch by Steve Langasek <[EMAIL PROTECTED]> #339081, #363056 - Japanese translation fixes by Kobayashi Noritada <[EMAIL

Bug#495423: [Pkg-xfce-devel] Bug#495423: Bug#495423: xfce4-mailwatch-plugin: Please add an option so that mailwatch does not change status of mails

2008-08-24 Thread Tino Keitel
On Sun, Aug 17, 2008 at 12:37:17 +0200, Stephan Windmüller wrote: > On Sun, 17. Aug 2008, Yves-Alexis Perez wrote: > > > I don't get it. You're saying that, with an IMAP configured in mailwatch > > plugin, each time the plugin check the mails it only sees the new ones > > since the last time it ch

Bug#496378: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Moritz Muehlenhoff
On Sun, Aug 24, 2008 at 10:05:30PM +0400, Dmitry E. Oboukhov wrote: > Package: gdrae > Severity: grave > > Hi, maintainer! gdrae is indeed vulnerable to temp file attacks through /tmp/gdrae/palabra However, I have some doubts whether this should be fixed or gdrae rather be removed altogether: It

Bug#496345: Do not accept program options

2008-08-24 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, please forget my mail before. I did the mistake and use a -s in the STYLE variable too. So my mistake. Everything works well now. Thanks for the fast help. Regards Klaus - -- Klaus Ethgenhttp://www.ethgen.de/ pub

Bug#495530: [evolution] Evolution craches on startup

2008-08-24 Thread Marius Konitzer
On Sat, 2008-08-23 at 10:24 +0200, H.A.J. Koster wrote: > I did an strace, but my output looks different from that of the OP. I > don't want to hijack his bug report, so just ignore this message if you > think it doesn't relate. Same here. Looks like a quite similar problem with the same effect: Ev

Bug#496345: Do not accept program options

2008-08-24 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Vincent, Am So den 24. Aug 2008 um 22:39 schrieb Vincent Danjean: > Ok. So there is indeed a bug: the ADD-variables (see the doc) were not > defined in the context of indexes. > > The attached LaTeX.mk file fix the bug. You can install it (in /usr

Bug#496462: nvi: security vulnerability in creation of shared directory in postinst

2008-08-24 Thread Jan Christoph Nordholz
Hi Raphael, your report is correct, but if /var/tmp/vi.recover was really a symlink to some existing directory (like /), mkdir -p won't fail at all - in fact, it won't even be executed because the [ -d ] test will already succeed. I'll fix it properly - thanks for catching it. Regards, Jan -

Bug#496463: cappuccino: moving the cursor in the output window makes output appear there rather than at the end

2008-08-24 Thread Will Thompson
Package: cappuccino Version: 0.5.1-2 Severity: minor Cappuccino appears to write new text to the current location of the cursor in the output text area, rather than to the end of the window. Hence, if you click on some earlier line, garbage is produced there. -- System Information: Debian Release

Bug#475036: removal doesnt seem an option atm, or?

2008-08-24 Thread Bastian Blank
On Mon, Aug 25, 2008 at 12:00:23AM +0200, Holger Levsen wrote: > linux-2.6 build-depends on kernel-package (>= 10.063). If the code still uses > kernel-package, and I have no reason to not believe the control file, removal > of kernel-package is not really an option at this time. This code is s

Bug#489666: tkcvs: bashism in /bin/sh script

2008-08-24 Thread Tim Cutts
On 24 Aug 2008, at 8:49 am, Chris Lamb wrote: tags 489666 + patch thanks Many thanks - I'll add that shortly. Fortunately, the script in question is not actually part of the tkcvs program as installed; it is just an example shipped with the program. But I'll pass your patch upstream to

Bug#496424: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Moritz Muehlenhoff
severity 496424 wishlist retitle 496424 Generate temporary directory with mktemp thanks Dmitry E. Oboukhov wrote: > Package: firehol > Severity: grave > > Hi, maintainer! > Even if you create files or directories with help of function 'RANDOM' > or pid(), then your system is not protected. Attac

Bug#494441: xserver-xorg-video-intel: X server crashes with "lockup" on G45 (X4500HD) chipset

2008-08-24 Thread Eric Sharkey
> I just uploaded 2.4.1 to experimental. Let me know if you have better > luck with that version; if it's still broken, we'll have to report it > upstream. Thanks, I'll try it shortly. > For lenny, we'll make X choose the vesa driver for the new intel > chipsets, as that's more likely to work th

Bug#496456: Acknowledgement (kdebase-bin: user cannot unlock screen with correct password)

2008-08-24 Thread Steve Lane
Problem solved - please see Bug#496457. Please close. Thank you, -- Steve Lane System, Network and Security Administrator Doudna Lab Biomolecular Structure and Mechanism Group UC Berkeley -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL

Bug#496455: Acknowledgement (kdesktop: user cannot unlock screen with correct password)

2008-08-24 Thread Steve Lane
Problem solved - please see Bug#496457. Please close. Thank you, -- Steve Lane System, Network and Security Administrator Doudna Lab Biomolecular Structure and Mechanism Group UC Berkeley -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL

Bug#491245: silc client crashes unexpectedly - More info

2008-08-24 Thread Mike Forbes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Attached is a dump of the core file, which may help in fixing this bug. - -- /* Mike Forbes GPG: BFC7 3F32 2CCF D91F 53E1 DF88 1578 B2E4 1399 6844 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: http://getfiregpg.org

Bug#496457: libpam-modules: user cannot unlock screen with correct password

2008-08-24 Thread Steve Lane
The machines that have *not* been patched look like this: -r 1 root root 14050 Aug 24 15:13 /etc/shadow -rwsr-xr-x 1 root root 19632 Jul 22 17:35 /sbin/unix_chkpwd The ones that have look like this: -r 1 root root 14050 Aug 24 15:13 /etc/shadow -rwxr-sr-x 1 root shadow 26372 Aug

Bug#496462: nvi: security vulnerability in creation of shared directory in postinst

2008-08-24 Thread Raphael Geissert
Package: nvi Version: 1.79-25 Severity: grave Tags: security patch Hi everyone, Going through the list of packages listed at [1] I noticed the overrides are completely wrong and it *is* a security issue. I verified versions 1.79-25 and 1.81.6-3 (etch and lenny, respectively) of the package and

Bug#494227: xmlroff: diff for NMU version 0.6.0-1.1

2008-08-24 Thread Thomas Viehmann
tags 494227 + patch pending thanks Hi, The following is the diff for my proposed xmlroff 0.6.0-1.1 NMU. Unfortunately, Martin, it makes the Debian refcard look ugly. Nonetheless, I believe moving from segfault to quirky output warrants closing the RC bug here. As such, I'll upload in the next day

Bug#496461: azureus: does not bind to tcp/udp4

2008-08-24 Thread Achim Schaefer
Package: azureus Version: 3.1.1.0-3 Severity: normal azureus binds only to the tcp version 6 interface, but not to the tcp version 4 one. This way my port forwarding (tcp version 4) do not work. -- System Information: Debian Release: lenny/sid Architecture: i386 (i686) Kernel: Linux 2.6.26-1-op

  1   2   3   4   5   >