Package: clamav
Version: 0.103.7+dfsg-0+deb11u1
Severity: important
Dear Maintainer,
ClamAV/Cisco have released a security advisory concerning 2 potential-RCE
bugs in ClamAV:
https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html
According to the the security tracker, all versions
On Thu, 06 Jan 2022 22:26:53 -0800, Ross Vandegrift writes:
>On Thu, Jan 06, 2022 at 12:32:44AM +0100, Robert Waldner wrote:
>> F'rex, switching to VTY1 (text console) works as expected, but after
>> switching back to Enlightenment on VTY7 E crashes.
>> Same after switch
Package: enlightenment
Version: 0.24.2-8
Severity: normal
Dear Maintainer,
after upgrading from Debian 10 to 11.2, I can no longer seamlessly switch
to different VTYs/Window Managers and then back to Enlightenment.
F'rex, switching to VTY1 (text console) works as expected, but after
switching ba
On Sun, 26 Dec 2021 10:47:42 -0500, Simon Deziel writes:
>What's in /etc/default/named? Chroot'ing could cause some issues.
This is stock, AFAICT:
---
#
# run resolvconf?
RESOLVCONF=no
# startup options for the server
OPTIONS="-u bind"
---
>Since you are hitting permission issues, I'd
On Sun, 26 Dec 2021 14:20:21 +0100, =?utf-8?Q?Ond=C5=99ej_Sur=C3=BD?= writes:
>Well, what is your working directory and is it writeable by user:group
> under which named runs at your system?
root@fsckv2:~# grep direct /etc/bind/named.conf.options
directory "/etc/bind";
root@fsckv2:~# ls
Package: bind9
Version: 1:9.16.22-1~deb11u1
Severity: important
Dear Maintainers,
I upgraded my nameserver from buster to bullseye, afterwards named wouldn't
start anymore.
Looking at syslog, the relevant part seems to be:
...
Dec 26 11:36:01 fsck named[128029]: configuring command channel from
Package: nmh
Version: 1.7.1-4
Severity: normal
Tags: patch
Dear Maintainer (hi az!),
Upgraded jessie->strecch->buster, spost no longer coooperated. When used
via exmh I got
"/usr/lib/mh/spost: 13: exec: /usr/lib/mh/nmh/post: not found"
Fixed the path in spost to no longer contain the nmh part, e
Hi Alexander,
On Thu, 08 Sep 2016 23:40:11 +0200, Alexander Sack writes:
>sorry for ping on this old bug and for not getting earlier to you. Is
>this issue still something that should be looked into?
for me the problem was solved after creating some symlinks, see #110
(https://bugs.debian.org/c
I just noticed something else: when I switch to VT1 directly from the
initial lightdm login screen, and stop/start lightdm, X w/
Enlightenment comes up.
The whole sequence then would be:
* boot, watch boot messages scroll by
* lightdm login screen appears
* I switch to VT1 manually, log in as
On Thu, 21 May 2015 18:04:22 +0200, Yves-Alexis Perez writes:
>> >> Any hints very much appreciated - this is somewhat annoying.
>> >Can you check the .xsession-errors in both cases? Because it seems that
>> >the session is correctly started by the greeter, so something else
>> >might be happeni
On Thu, 21 May 2015 12:21:22 +0200, Yves-Alexis Perez writes:
>On jeu., 2015-05-21 at 06:01 +0200, Robert Waldner wrote:
>> Since this didn't happen with GDM3, I don't think (ICBW, of course) this is
>> a problem with Enlightenment. I also get the same behaviour on my b
Package: lightdm
Version: 1.10.3-3
Severity: normal
Dear Maintainer,
I have the following situation: after cold-booting lightdm comes up as
expected, I authenticate and then get a blank screen (no signal to the
monitor). I then have to manually switch to VT1, stop/start lightdm,
authenticate agai
On Tue, 06 May 2014 08:44:02 +0200, Aurelien Jarno writes:
>On Mon, May 05, 2014 at 10:13:51AM +0200, Robert Waldner wrote:
>>
>> Trying to upgrade to current Jessie, eg. from 2.17-97 to 2.18-5, got
>> libc6-amd64:i386 into a state where it seems impossible to continu
On Mon, 05 May 2014 10:13:51 +0200, Robert Waldner writes:
>Trying to upgrade to current Jessie, eg. from 2.17-97 to 2.18-5, got
> libc6-amd64:i386 into a state where it seems impossible to continue.
> Removing libc6-amd64:i386 fails because the package is "in a bad
> sta
Trying to upgrade to current Jessie, eg. from 2.17-97 to 2.18-5, got
libc6-amd64:i386 into a state where it seems impossible to continue.
Removing libc6-amd64:i386 fails because the package is "in a bad
state", reinstalling doesn't work, either, nor das apt-get -f install:
At first failure,
Werner Koch, , wrote:
>On Tue, 18 Feb 2014 18:26, r...@debian.org said:
>
>> 10240-bit RSA key, ID 4A11C97A, created 2009-09-23
> ^^ !!!
>
>> gpg: (this may be caused by too many secret keys used simultaneously
>> or due to excessive large key sizes)
>
>
Package: kuvert
Version: 2.0.10
Severity: normal
Hi az,
another bug (well, I guess).
Preface:
~ $ ls -l /var/log/kuvert
-rw-r--r-- 1 user user 0 Jan 28 22:11 /var/log/kuvert
~ $ echo foo >>/var/log/kuvert
~ $ cat /var/log/kuvert
foo
So far, so good.
~ $ grep ^logfile .kuvert
logfile /var/log/
Package: kuvert
Version: 2.0.9
Severity: normal
Hi az,
after upgrading to Jessie, kuvert doesn't start anymore:
~ $ kuvert
Can't locate Net/SMTPS.pm in @INC (@INC contains: /etc/perl
/usr/local/lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5
/usr/share/perl5 /usr/lib/perl/5.14 /usr
On Mon, 20 Jan 2014 23:36:17 -0700, Adam Conrad writes:
>On Sun, Jan 19, 2014 at 06:55:49PM +0100, Robert Waldner wrote:
>>
>> The problem is that as soon as ld.so.cache is gone, dpkg-deb stops working
>> because it can't find libz.so.1 anymore. At the moment I don
ry: Shared li
ii libc6:i386 2.13-38 i386 Embedded GNU C Library: Shared li
ii libc6-amd642.13-38 i386 Embedded GNU C Library: 64bit Sha
Kind regards,
Robert Waldner
-- System Information:
Debian Release: 7.0
APT prefers stable
APT policy: (990, 'stab
, again.
Thanks for pointing this out!
Kind regards,
Robert Waldner
signature.asc
Description: Digital Signature
_x86_64-gcc3/components/libenigmime-x86_64-gcc3.so':
(80004005) libplds4.so.0d: cannot open shared object file: No such file or
directory
Failed to load native module at path
'/usr/lib/mozilla/extensions/{3550f703-e582-4d05-9a08-453d09bdfdc6}/{847b3a00-7ab1-11d4-8f02-006008948af5}/platfor
uld then forward this bug to upstream
>again.
Attached.
Kind regards,
Robert Waldner
ld.so.tar
Description: ld.so.tar
signature.asc
Description: Digital Signature
ibm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x7f08f876)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1
(0x7f08f8548000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x7f08f81b8000)
/lib64/ld-linux-x86-64.so.2 (0x7f08f935)
Kind regards,
Robert Waldner
signature.asc
Description: Digital Signature
86 to amd64 when the problem started.
Kind regards,
Robert Waldner
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version
member from checking your enigmail debug output).
Doesn't make much difference - at least none that I can see (debug
output attached). For the sake of completeness, I also did this under
a more "standard" window manager (XFCE4 instead of my usual E17). I
_did_ copy ~/,gnupg to
grep icedove | grep -i enig
>
>and
>
>debsums enigmail
>
>and send me the output.
Attached.
(And thanks for taking the time to help me!)
Kind regards,
Robert Waldner
/usr/lib/xul-ext/enigmail/chrome.manifest OK
/usr/lib/xul-ext/enigmail/chrome/eni
Hi!
On Thu, 21 Mar 2013 23:17:35 +0100, Robert Waldner writes:
>On Thu, 21 Mar 2013 18:56:23 +0100, Willi Mann writes:
>>>ii enigmail 2:1.4.1-2amd64GPG support for Thunderbird
>>> ii icedove10.0.12-1amd64mail/news client with
>>
obalOverlay.js:96
oncommand([object
XULCommandEvent])@chrome://messenger/content/messengercompose/messengercompose.xul:1
>Did you ever install enigmail from upstream's homepage?
I don't think so, though I'm using Icedove for something like 5 years
now, and am not sure if Enigmai
||/ Name Version Architecture Description
+++-==---=
ii enigmail 2:1.4.1-2amd64GPG support for Thunderbird and D
ii icedove10.0.12-1amd64mail/news client with RSS and int
Kind regards,
aving to save each message and decrypting it on
the command line is rather making enigmail useless ;)
Please advise.
Kind regards,
Robert Waldner
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'testing-proposed-updates'
Package: snmpd
Version: 5.4.3~dfsg-2.7
Severity: normal
Dear Maintainer,
when querying the system for running processes, like, f'rex, apache2, with
OID iso.3.6.1.2.1.25.4.2.1.2.$PID, the resulting string is truncated to 15
characters (16-byte fixed-size buffer, thinking of 0-terminated strings in
ly stopped working properly after installing
dvb-apps.)
Kind regards,
Robert Waldner
-- System Information:
Debian Release: 6.0.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.39-bpo.2-686-pae (SMP w/6 CPU cores)
Locale: LANG=de_AT@euro,
Package: cpuburn
Version: 1.4a-1
Severity: normal
Aloha,
I have here a "QNAP TS-410", which boasts an ARM CPU:
~# cat /proc/cpuinfo
Processor : Feroceon 88FR131 rev 1 (v5l)
BogoMIPS: 799.53
Features: swp half thumb fastmult edsp
CPU implementer : 0x56
CPU architecture: 5T
://wwws.clamav.net/bugzilla/show_bug.cgi?id=2818
Patch:
http://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=4842733eb3f09be61caeed83778bb6679141dbc5
Kind regards,
Robert Waldner
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Software settings
v/null', because it has correct dev_t
Nov 25 17:33:23 gcv udevd-event[20819]: pass_env_to_socket: passed -1 bytes to
socket '@/org/kernel/udev/monitor',
Nov 25 17:33:23 gcv udevd-event[20819]: udev_event_run: seq 1226 finished
Nov 25 17:33:23 gcv udevd[20173]: udev_done: se
On Tuesday 25 November 2008 16:21:51 Marco d'Itri wrote:
> On Nov 25, Robert Waldner <[EMAIL PROTECTED]> wrote:
>
> > > > -rw-r--r-- 1 root root 1083 2008-07-17 11:53 65_dmsetup.rules
> > > > lrwxrwxrwx 1 root root 20 2007-04-09 00:41 z60_xen-b
: found a symlink as db file
udev_device_event: device '/class/mem/null' already in database, validate curren
tly present symlinks
udev_node_add: creating device node '/dev/null', major = '1', minor = '3', mode
= '0660', uid = '0', gid
Package: kuvert
Version: 2.0.0
Severity: normal
Hi az,
the manpage states for tempdir: "The directory is created if necessary,"
:) [EMAIL PROTECTED]>~ $ kuvert -o -d
reading config file
got config mail-on-error=waldner
got config identify=1
got config interval=20
got config can-detach=0
got con
nt to.
.SH BUGS
The author of this man page doesn't know what he's talking about.
See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=409461
.SH AUTHOR
Robert Waldner
.SH "SEE ALSO"
.BR bash (1)
-- Hardware: built to fail.
-- Software: fails to build.
pgpW3UQ3ESAbU.pgp
Description: PGP signature
Package: bash
Version: 3.1dfsg-8
Severity: minor
The Debian policy states in 12.1
"Each program, utility, and function should have an associated manual
page included in the same package."
Which, in my reading, suggests that even a small utility like bashbug
should have its own man-page, even if
Package: installation-reports
Version: 2.20
Severity: normal
Installation worked as expected.
cheers,
&rw
-- Package-specific info:
Boot method: netboot
Image version:
http://people.debian.org/~stappers/d-i/images/daily/sparc32/netboot/2.6/boot.img,
20061019
Date: 20061019 - 20061021
Machin
Package: jpilot
Version: 0.99.7-0.99.8-pre8-1
Severity: important
Hi!
When starting jpilot, it immediately crashes with a glibc error:
:) [EMAIL PROTECTED]>~ $ jpilot
*** glibc detected *** free(): invalid pointer: 0x080fd8e8 ***
Aborted
As a workaround it's possible to run jpilot with "less e
On Wed, 26 Jul 2006 02:14:14 EDT, sean finney writes:
>very interesting. i won't have a amd64 machine handy for another 2
>weeks, so if you could provide a little more help, it'd be appreciated.
>could you try rebuilding the package with debug symbols (make sure
>there's a -g somewhere in debian/
Package: backuppc
Version: 2.1.1-2sarge2
Severity: normal
Hi!
One of my users every now and then manages to create files with CR
and/or LF in the name, and BackupPC is stopped dead in its tracks wrt.
to this file, as it relies on proper line-by-line output from the
rsyncp module.
For now I j
Package: libamazon-ruby
Version: 0.9.0-1
Severity: important
Hi!
While hunting for a bug that prevents alexandria from looking up books,
I discovered that it's actually libamazon-ruby that's at fault.
The reason for all that is that libamazon-ruby tries to look up
information via xml.amazon.com
On Thu, 24 Nov 2005 12:29:46 +0100, Achim Bohnet writes:
>> digikam: WARNING: [void AlbumFolderView::loadAlbumState()] Failed to
>> open albumtreestate.bin
>the album widget saves the state of the tree in this file. When you
>never run digikam it can't exist. No problem.
>No package installs f
Package: digikam
Version: 0.7.2-2
Severity: normal
As the subject says:
:) [EMAIL PROTECTED]>~ $ digikam
digikam: WARNING: [void AlbumFolderView::loadAlbumState()] Failed to
open albumtreestate.bin
(according to strace it tries to open
29036 open("/home/waldner/.kde/share/apps/digikam/albumtrees
Package: vlc
Version: 0.8.1.svn20050314-1
Severity: normal
Hi!
In helping me tracking down problems with exmh and mailcap, Alex
Zangerl found out that vlc adds broken entries to /etc/mailcap[0].
>From mailcap(5):
Each individual mailcap entry consists of a content-type specification,
a c
Hi az!
On Tue, 22 Nov 2005 20:32:50 +1000, Alexander Zangerl writes:
>>This is MPEG Audio
>>It can be displayed with
>>"nametemplate=/tmp/waldner/1.0=1=2.20424.exmh.mp3".
>*sigh* not here :-(
I seem to be good at finding unreproducible bugs in exmh, eh?
>i tried your mailcap fragment verbatim i
Package: exmh
Version: 1:2.7.2-7
Severity: normal
Hi!
It seems that exmh doesn't understand the Debian format of /etc/mailcap,
which is best explained via example:
/etc/mailcap:
audio/mpeg; beep-media-player '%s'; nametemplate=%s.mp3; test=test
"$DISPLAY" != ""
Would lead exmh to try to
Package: siege
Version: 2.61-1
Severity: normal
Tags: patch
Multiple bugs. First about not having understood how HTTP headers are
contructed ("=" instead of ":" as separator). Checking the validity of
values is, of course, beyond the thought anyway.
--- siege_orig/siege-2.61/src/http.c2004-1
Package: ecartis
Version: ecartis-1.0.0+cvs.20030911
Severity: wishlist
Since ecartis-1.0.0+cvs.20030911 quite some patches have made it into
upstream, some security relevant. A new snapshot should be out today.
Please either update to a new upstream or drop the package from Debian.
cheers,
&rw
Package: postgrey
Version: 1.17-2
Severity: wishlist
Hi!
At the moment it doesn't seem possible to pass an argument with spaces
via /etc/default/postgrey to postgrey, because the shell doesn't expand
an argument multiple times.
To be more specifix, I'm unable to find a way to pass
--greylist-te
Package: exmh
Version: 1:2.7.2-2
Severity: minor
Hi (az)!
(This is a follow-up to bug# 293560, where I reported multiple bugs)
--
- 2.7.2 completely ignores the mailcap file
--
My previous observation was not entirely correct, though, exmh doesn't /ignore/
the mailcap, it rather seems
a request for comments;
>can you please leave your screenshots alive for a couple more days?
They're not going to vanish any time soon.
cheers,
&rw
--
/ Ing. Robert Waldner | Security Engineer | CoreTec IT-Security \
\ <[EMAIL PROTECTED]> | T +43 1 503 72 73 | F +43 1 503 72 73 x99 /
pgpHkPGRBdNgt.pgp
Description: PGP signature
Package: exmh
Version: 1:2.7.2-2
Severity: important
Hi (az)!
(This is a follow-up to bug# 293560, where I reported multiple bugs)
--
- numerous other errors when opening GnuPG-signes messages, for example
--
Another example is that when starting exmh and the current message is encrypte
;what version of gpg do you have installed?
1.2.3-1, I noticed today that this only affects the first signed
message I open after starting exmh, though, subsequent ones are
handled just fine.
cheers,
&rw
--
/ Ing. Robert Waldner | Security Engineer | CoreTec IT-Security \
\ <[EMAIL PROTECTED]> | T +43 1 503 72 73 | F +43 1 503 72 73 x99 /
pgpmGXOv8cmqb.pgp
Description: PGP signature
Package: exmh
Version: 1:2.7.2-2
Severity: minor
Hi (az)!
(This is a follow-up to bug# 293560, where I reported multiple bugs)
---
> - a openened message is marked like a selected one
what do you mean? i don't see any difference to 2.5 wrt. message
marking.
---
See http://www.waldner.p
Package: exmh
Version: 1:2.7.2-2
Severity: normal
(Hi az!)
Thanks for packaging 2.7.2. There a couple bugs, though:
- a openened message is marked like a selected one
- passphrase prompting for GnuPG-encrypted messages pretty much locks the
keyboard, but leaves the focus on the (in this case
Package: kdelibs-data
Version: 4:3.1.5-1
Severity: serious
Justification: unkown
Whilst installing amarok, I encountered the following error:
Unpacking kdelibs-data (from .../kdelibs-data_4%3a3.3.2-1_all.deb) ...
dpkg: error processing
/var/cache/apt/archives/kdelibs-data_4%3a3.3.2-1_all.deb (--
Package: exmh
Version: 1:2.5-1
Severity: wishlist
Brent Welch announced exmh 2.7.2 on 11 Jan. 2005, which supposedly fixes
several of the problems in 2.6+, especially wrt. performance.
This would be very nice having in Debian.
cheers,
&rw
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a
62 matches
Mail list logo