Bug#254615: Bug#451932: Tar 1.27 supports ACL's

2014-01-14 Thread Markus Steinborn
Yes, tar 1.27 supports ACLs, but that implementation needs bug fixes to bugs that make a reliable backup and restore more or less impossible. See https://bugzilla.redhat.com/show_bug.cgi?id=1052876 or http://lists.gnu.org/archive/html/bug-tar/2013-03/msg00021.html I would be happy to see a f

Bug#627471: [bug-gv] heisenbug disabling BBox

2011-08-03 Thread Markus Steinborn
Hi Bernhard, Bernhard R. Link wrote: I've finally found the bug: Excellent work. Thank you very much. I've just applied your patches from yesterday and I updated every call of sec_sscanf having %s in its format descriptor to include the buffer length. Greetings Markus Ste

Bug#567673: gs: /rangecheck error opening GSM_WorldPoster2009A.pdf

2011-04-23 Thread Markus Steinborn
ow_bug.cgi?id=689734 Greetings from Germany Markus Steinborn GNU gv maintainer PS: If you have to work with an unfixed version of ghostscript, setting "-dMaxBitmap=" is reported to help. Index: trunk/gs/base/gdevxini.c ==

Bug#602601: ghostscript-cups: Printing a pdf-file inverts color of images

2011-01-09 Thread Markus Steinborn
Ho Jonas, for a reproducer and a patch see the upstream bug report: http://bugs.ghostscript.com/show_bug.cgi?id=691759 Greetimgs Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Troubl

Bug#602759: Ghostscript 9.0 segfaus, therefore breaks GNU gv (all versions)

2010-11-07 Thread Markus Steinborn
king commit, found the commit listed above. Noticed that SVN HEAD works again, and searched the repairing commit by another binary search. The Subversion comment of the commit 11808 (the repairing one) mentions the upstream bug number, so it is quite easy to find the upstream bug. Greetings fr

Bug#602751: Upstream Ghostscript 9.0: Breaks Printing

2010-11-07 Thread Markus Steinborn
Package: ghostscript Version: 9.00~dfsg-1 Please note that I do not use debian, but the debian package maintainer Jonas Smedegaard's asked me to report a debian bug for the following bug found in upstream ghostscript 9.00: As visible on my system and documented on http://bugs.ghostscript.co

Bug#584663: ghostscript: insecure defaults for path searching

2010-08-11 Thread Markus Steinborn
I just cherrypicked r11499, r11500, r11510, r11514 and r11515 to my private (non debian) ghostscript installation. These should fix the regressions mentioned in the upstream bug report. Works fine. I already had cherrypicked r11352 (the backported version, see bug 584653), r11468+11494 (attach

Bug#592569: Patch to make -dSAFER the default

2010-08-11 Thread Markus Steinborn
package ghostscript tags 592569 + patch thanks The patch has been written by Didier Link , maintainer of GNU ghostscript. Hope setting the tag works, IÄve never done that before. Greetings Markus diff -u -r1.2 gs_init.ps --- Resource/Init/gs_init.ps 10 Jul 2010 22:02:13 - 1.2 +++ Resou

Bug#584663: ghostscript: insecure defaults for path searching

2010-08-07 Thread Markus Steinborn
Moritz Muehlenhoff wrote: On Sat, Aug 07, 2010 at 11:19:06AM +0200, Markus Steinborn wrote: Have there also been fixes to deal with the various regressions in resource loading as described in http://bugs.ghostscript.com/show_bug.cgi?id=691350 (Comment 17) The svn commit message of

Bug#584663: ghostscript: insecure defaults for path searching

2010-08-07 Thread Markus Steinborn
paul.sz...@sydney.edu.au wrote: Yes. All those who wish to call gs in unsafe ways, can (should!) explicitly use -P (and -NOSAFER). You surely ment "-dNOSAFER", not "-NOSAFEE". -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Conta

Bug#584653: ghostscript: does not honor -P- option

2010-08-07 Thread Markus Steinborn
The attached patches are taken from the upstream repository. r11352 has been backported to GPL ghostscript 8.71. The other patch file contains the documentation update done by upstream. Greetings Markus Steinborn GNU gv maintainer diff -u trunk/gs/man/gs.1 trunk/gs/man/gs.1 --- trunk/gs/man

Bug#584663: ghostscript: insecure defaults for path searching

2010-08-07 Thread Markus Steinborn
a filepath check as suggested by Werner Fink is the best course of action. That patch has been reverted by upstream with release e11494 (yes, the same as above). Greetings Markus Steinborn only in patch2: unchanged: --- trunk/gs/psi/msvc32.mak (Revision 11493) +++ trunk/gs/psi/msvc32.mak

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
ript.com. Note that the search path begins with ".". Thanks Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
ather old version of GNU gv. As upstream maintainer, I did my test with an up to date verasion of GNU gv (because that is what I need for the development of GNU gv). The following commit contains the fix (you see it is rather old): commit a17416c462e5b6c9cc7c98c5ea01f580152f2da9 Author: Markus

Bug#583668: Temporary file issues

2010-05-29 Thread Markus Steinborn
disfunctional configure changes. So this patch works. Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
paul.sz...@sydney.edu.au schrieb: Would it be possible to give the "unsafe" gs invocations an explicit -dNOSAFER or somesuch argument, to override whatever I may set in my wrapper, and to handle gs changing their defaults to secure settings? Dunno. But currently ghostscript upstream says: WO

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
Markus Steinborn schrieb: Well, then I can close the bug upstream. But for debian, it has to be kept open - as lenny is vulnerable. Addendum: Of cause only the part of the original bug report that addresses file handling, not the options "-P-", "-dSAFE" and related. -- T

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
Bernhard R. Link schrieb: * Markus Steinborn [100529 12:49]: Well, the DSC parsing seems to be "-dSAFER"-incompatible. But with the following settings I can open ps and pdf files - and pdf to postscript conversion has sucessfully been tested on an example. Looking at the c

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
c quit So "-P-" may work with GNU gv - but some testing would help before changing the defaults. BTW: I have done my test with ghostscript 8.71. Greetings from Germany Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
mkstemp to create the file (assuming mkstemp is available on your system, which is the case on GNU/Linux). Have verified that the permissions are 600 after getTmpfilename(). Greetungs from Germany Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.

Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

2010-05-29 Thread Markus Steinborn
in "State - Ghostscript options", you can add the requested "-P-" quite easy: Add "-P-" to arguments and to the beginning of "Scan PDF" and "Convert PDF". Let's start with this and test if this breaks something. Greetings from Germany Mar

Bug#573115: ghostscript: all PDF files give Error: /undefined

2010-03-09 Thread Markus Steinborn
leaving this bug open but marked as invalid so it is as easy to find as possible. This also explains why it works on Fedora: They have fixed the bug in Ghostscripzt 8.71. Greetimngs from Germany Markus Steinborn GNU gv maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.de

Bug#499076: CVE-2009-4411: Physical walk no longer ignores all symlinks

2009-12-27 Thread Markus Steinborn
Just for your information: version 2.2.49 improves the situation, that's right. But it does not fix the bug. For a test case that does not work and a working patch that I contributed see https://savannah.nongnu.org/bugs/?28131 Additional information is on: https://bugzilla.redhat.com/sho

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2009-11-30 Thread Markus Steinborn
Markus Steinborn schrieb: Yet I did not test it but from a rough look they did it in almost the same way as I did. Well, the standard situations seem to work now. But once again I managed to construct a situation where the SUID-Bit is lost using setfacl version 2.2.49: -- cut

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2009-11-30 Thread Markus Steinborn
x other::r-x Before closing this bug, you may want to notice that version 2.2.49 does not contain some option like "--keep-smodes" from my fix. IMHO it makes sence to port this option to acl 2.2.49 (there may and probably will be backups created with old acl versions and GNU tar!). Gr

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2009-04-05 Thread Markus Steinborn
Hi Nathan, I've not heard, but agr...@suse.de might be able to shed some more light for you. I'm sorry to tell you, bat Andreas Grienbacher (that's obviously one of his email addresses) has not responded since a year or so. So I do not expect an answer from hom any more. -- To UNSUBS

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2009-04-05 Thread Markus Steinborn
Nathan Scott wrote: I've informed upstream, will wait to get their thoughts Are there any news from upstream? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#518409: gv resources incompatible

2009-03-23 Thread Markus Steinborn
essage which has been fixed in GNU gv 3.6.7. IMHO we should leave this bug open, because the real bug is a lack of documentation. Adding the single "GV.version"-line isn't a problem if the user knows that he should do that. Greetings from Germany Markus Steinborn GNU gv upst

Bug#516995: Misleading error message when .gv file is not present

2009-02-27 Thread Markus Steinborn
lacing ~/.gv by the file that is actually used and an additional text if XUSERFILESEARCHPATH is set. Furthermore I'll enhace gv-update-userconfig to accept an optional parameter. If it is given, it'll be used instead of ~/.gv. Greetings from Germany Markus Steinborn upstream GNU

Bug#516995: Misleading error message when .gv file is not present

2009-02-25 Thread Markus Steinborn
eeds to be updated. Greetings from Germany Markus Steinborn GNU gv upstream maintainer -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#512531: [gv] Zooming dezooming a file provoke error

2009-01-21 Thread Markus Steinborn
Hello Bastien ROUCARIES, this is actually a bug in ghostscript, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419183 According to this bug report, this buf should be fixed in GPL Ghostscript 8.63, Greetings from Germany Markus Steinborn -- To UNSUBSCRIBE, email to debian-bugs

Bug#250653: Reverse order printing

2008-11-12 Thread Markus Steinborn
ool for this purpose already exists (which is even more flexible), GNU gv will not be enhanced to support reverse order printing in the near future. The main advantage is that gtklp can be used with many applications, not just with GNU gv. Greetings from Germany Markus Steinborn GNU gv maintainer (u

Bug#419183: Patch

2008-11-11 Thread Markus Steinborn
http://bugs.ghostscript.com/show_bug.cgi?id=689547 contains a working patch for a more recent version of gpl ghostscript. Current GNU gv versions (beginning with 3.6.2 (first workaround) resp.- 3.6.3 (improved workaround)) are containing a quite good workaround for this bug. Note that this bug h

Bug#142228: Patch

2008-11-11 Thread Markus Steinborn
http://bugs.ghostscript.com/show_bug.cgi?id=688943 contains a working patch. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2008-10-22 Thread Markus Steinborn
package: acl tags: 270099 + patch severity: important thanks An additional remark: Please note that the patch for version 2.2.39 works with 2.2.23. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#270099: getfacl doesn't show setuid/setgid/sticky bits

2008-10-22 Thread Markus Steinborn
tags: patch severity: important (The original posting contained the "severity: important" header with a little misspelling, so I am repeating it.) A german discussion concerning this bug can be read here (http://tinyurl.com/442evz). The link is pointing to google groups. That discussion lead to