Bug#512839: marked as done (xine-ui: xdg-screensaver broke XVDR plugin)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Sat, 31 Jan 2009 04:02:05 + with message-id and subject line Bug#512839: fixed in xine-ui 0.99.5+cvs20070914-2.1~lenny2 has caused the Debian Bug report #512839, regarding xine-ui: xdg-screensaver broke XVDR plugin to be marked as done. This means that you claim that the p

Processed: setting package to xine-console xine-ui xine-dbg, tagging 512839

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > #xine-ui (0.99.5+cvs20070914-2.1~lenny2) testing; urgency=medium > # > # * Update screensaver control code to match version 0.99.5+cvs20070914-2.1 > #as intended, fixing process and file handle leak (Closes: #512839) > # > package xine-consol

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
On Sat, 2009-01-31 at 02:25 +, Ben Hutchings wrote: > > Just as a remark regarding your intended fix: I haven't yet seen the > > place where xine does a wait() or waitpid() for those forked childs to > > clean up the zombies. If there is a place, ok, I just havn't seen it > > yet. > > I added

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
gark...@mailueberfall.de wrote > I understand that you don't agree with the bug being grave. The point is > that I use it mainly for watching TV. > This is practically not possible anymore now since the VDR playback > breaks on every channel switch due to xdg-screensaver hogging the audio > handle.

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Raphael Geissert
2009/1/30 Raphael Geissert : [...] > > [1]http://cognifty.com/blog.entry/id=6/addslashes_dont_call_it_a_comeback.html Here's[2] another reference as to what mysql_real_escape_string does. On a side note, while the conclusion in [1] "partially" true, it misses the part of real input encoding, which

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Raphael Geissert
On Friday 30 January 2009 15:09:34 Nico Golde wrote: > Hi, > > * Nelson A. de Oliveira [2009-01-30 19:06]: > > glpi versions prior to 0.71.4 are affected by a SQL injection > > vulnerability. See the upstream announce [1] and SecurityFocus [2]. > > > > [1] > > http://www.glpi-project.org/spip.php

Bug#513531: marked as done (CVE-2008-4770: Arbitrary code execution via crafted RFB protocol data)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 23:02:26 + with message-id and subject line Bug#513531: fixed in vnc4 4.1.1+X4.3.0-31 has caused the Debian Bug report #513531, regarding CVE-2008-4770: Arbitrary code execution via crafted RFB protocol data to be marked as done. This means that you claim

Bug#495683: marked as done (sshguard: Current implementation skip any other iptables rules)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 22:17:12 + with message-id and subject line Bug#495683: fixed in sshguard 1.3-1 has caused the Debian Bug report #495683, regarding sshguard: Current implementation skip any other iptables rules to be marked as done. This means that you claim that the prob

Bug#442125: marked as done (xmove assert: SaveVisuals() couldn't find the default visual)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 21:58:50 GMT with message-id <200901302158.n0ulwoq7025...@kmos.homeip.net> and subject line xmove has been removed from Debian, closing #442125 has caused the Debian Bug report #442125, regarding xmove assert: SaveVisuals() couldn't find the default visual to be

Bug#512839: Depends on what you use xine for

2009-01-30 Thread garkein
Ben, I understand that you don't agree with the bug being grave. The point is that I use it mainly for watching TV. This is practically not possible anymore now since the VDR playback breaks on every channel switch due to xdg-screensaver hogging the audio handle. For that usage it is definately a g

Bug#506353: marked as done (CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 21:17:05 + with message-id and subject line Bug#506353: fixed in mailscanner 4.74.16-1 has caused the Debian Bug report #506353, regarding CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack to be marked a

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Nico Golde
Hi, * Nelson A. de Oliveira [2009-01-30 19:06]: > glpi versions prior to 0.71.4 are affected by a SQL injection vulnerability. > See the upstream announce [1] and SecurityFocus [2]. > > [1] http://www.glpi-project.org/spip.php?page=annonce&id_breve=161&lang=en > [2] http://www.securityfocus.com/b

Bug#513611: glpi: 'ID' Parameter Multiple SQL Injection Vulnerabilities

2009-01-30 Thread Nelson A. de Oliveira
Package: glpi Version: 0.71.2-2 Severity: grave Tags: security Justification: user security hole Hi! glpi versions prior to 0.71.4 are affected by a SQL injection vulnerability. See the upstream announce [1] and SecurityFocus [2]. [1] http://www.glpi-project.org/spip.php?page=annonce&id_breve=16

Bug#513594: marked as done (invalid code in libgsf)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 17:47:03 + with message-id and subject line Bug#513594: fixed in libgsf 1.14.11-2 has caused the Debian Bug report #513594, regarding invalid code in libgsf to be marked as done. This means that you claim that the problem has been dealt with. If this is no

Bug#513604: linux-libc-dev: drm headers conflict with libdrm-dev

2009-01-30 Thread Julien Cristau
Package: linux-libc-dev Version: 2.6.28-1~experimental.1~snapshot.12651 Severity: serious Justification: undeclared file conflict Hi, the kernel started installing drm headers which previously came with libdrm-dev. If we decide to do things this way for squeeze, linux-libc-dev will need to Repla

Processed: invalid code in libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 513594 + upstream fixed-upstream pending Bug#513594: invalid code in libgsf Tags were: patch upstream Tags added: upstream, fixed-upstream, pending > forwarded 513594 > http://svn.gnome.org/viewvc/libgsf?view=revision&revision=1039 Bug#5135

Bug#513602: [compiz] Blank screen when load compiz

2009-01-30 Thread Julien Cristau
On Fri, 2009-01-30 at 17:35 +0100, Claudio F Filho wrote: > Package: compiz > Version: 0.7.6-7 > Severity: serious > this is probably the wrong severity for this bug, but anyway.. > --- Please enter the report below this line. --- > Hi > > I am using KDE 4.x and Debian Sid. I tried get some effe

Bug#513602: [compiz] Blank screen when load compiz

2009-01-30 Thread Claudio F Filho
Package: compiz Version: 0.7.6-7 Severity: serious --- Please enter the report below this line. --- Hi I am using KDE 4.x and Debian Sid. I tried get some effects and could change by compiz, but when tried to change got a error: a white screen. I sent this doubt to debian-kde list, and others pe

Bug#513594: [patch] invalid code in libgsf

2009-01-30 Thread Petr Salinger
notforwarded 513594 tags 513594 +patch The patch from GCC upstream report: http://gcc.gnu.org/bugzilla/attachment.cgi?id=17213&action=view --- libgsf-1.14.11/gsf/gsf-output-csv.c.jj +++ libgsf-1.14.11/gsf/gsf-output-csv.c +0100 @@ -182,7 +182,7 @@ gsf_output_csv_quoting_mode_get_type (vo

Processed (with 5 errors): [patch] invalid code in libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > notforwarded 513594 Bug#513594: invalid code in libgsf Removed annotation that Bug had been forwarded to http://gcc.gnu.org/PR39015. > tags 513594 +patch Bug#513594: invalid code in libgsf Tags were: upstream Tags added: patch > The patch from G

Bug#513594: gcc-4.3 4.3.3-3

2009-01-30 Thread Matthias Klose
gcc-4.3 4.3.3-3 does not expose this bug, GCC packages for lenny+1 will like to expose it. patch is in the GCC upstream report. Matthias -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Processed: reopening and reassigning gcc report to libgsf

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > clone 513420 -1 Bug#513420: Breaks building libgsf from source Bug 513420 cloned as bug 513594. > reopen -1 Bug#513594: Breaks building libgsf from source 'reopen' may be inappropriate when a bug has been closed with a version; you may need to us

Bug#513490: marked as done (cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 12:32:02 + with message-id and subject line Bug#513490: fixed in cdebootstrap 0.5.4 has caused the Debian Bug report #513490, regarding cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze to be marked as done. This means that you claim tha

Bug#495228: Intent to NMU: #495228: Synaptic much less usable without icon theme available

2009-01-30 Thread Cyril Brulebois
Phil Miller (28/01/2009): > Package: synaptic > Version: 0.62.5 > Tags: confirmed > Followup-For: Bug #495228 > > I just tested this by forcibly removing hicolor-icon-theme, and can > confirm that synaptic is drastically less usable under that condition. Thanks Phil, please maintainer & release

Bug#513490: back to RC

2009-01-30 Thread Martin Zobel-Helas
Hi, as this bug _really_ should make it into Lenny, i am upgrading this bug to RC again, thus release team keeps this issue on its radar. Greetings Martin -- Martin Zobel-Helas | Debian System Administrator Debian & GNU/Linux Developer | Debian Listmaster Public key http

Bug#512839: Your 'xine-ui' NMU introduced new RC bug #512839

2009-01-30 Thread Ben Hutchings
On Fri, 2009-01-30 at 12:28 +0200, Jonathan Quick wrote: > (re-sending with subject) > > Hi Ben > > I assume you're aware of the RC bug #512839 introduced by your NMU (and in > testing) xine-ui/0.99.5+cvs20070914-2.1 ? No, I missed that. The bug is clearly not grave; not sure whether it should

Bug#513438: libjack-dev: missing libjack.la

2009-01-30 Thread Reinhard Tartler
reassign 513438 libarts1c2a retitle 513438 please rebuild to drop reference on libjack.la severity 513438 serious stop Justification: breaks unrelated packages. Xavier Vello writes: > Le jeudi 29 janvier 2009 22:11:08, vous avez écrit : >> Xavier Vello writes: >> > The current unstable package

Bug#513576: octave-symbolic does not uninstall

2009-01-30 Thread Steve Cotton
Package: octave3.0 Version: 1:3.0.1-6lenny1 Severity: critical Justification: breaks unrelated software (the package system) Or Package: octave-symbolic Version: 1.0.6-2 Not sure if the bug's in octave-symbolic or octave3.0, please reassign if this is wrong. octave-symbolic fails to either re

Processed: severity of 513490 is important

2009-01-30 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 513490 important Bug#513490: cdebootstrap: version in Lenny needs to be able to bootstrap Squeeze Severity set to `important' from `grave' > End of message, stopping processing here. Please contact me if you need assistance. Debian bug

Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Yoram bar haim
The problem is not with building other packages. the problem is building glibc itself. there is a cotradiction between the definition by gcc and the code used in glibc assebler files. On יום שישי 30 ינואר 2009 11:25:20 Bastian Blank wrote: > On Fri, Jan 30, 2009 at 10:37:57AM +0200, Yoram bar ha

Bug#513540: marked as done (newpki-lib: Does not properly check the result of X509_REQ_verify())

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 10:17:05 + with message-id and subject line Bug#513540: fixed in newpki-lib 2.0.0+rc1-4 has caused the Debian Bug report #513540, regarding newpki-lib: Does not properly check the result of X509_REQ_verify() to be marked as done. This means that you claim

Bug#513534: isakmpd: Does not properly check the return value of X509_verify

2009-01-30 Thread Jochen Friedrich
Hi Kurt, > I was looking at return codes for applications making use of > openssl functions and found this in x509.c: > if (X509_verify(cert, key) == -1) { > log_print("x509_cert_validate: self-signed cert is bad"); > return 0; > } > > X509_verify r

Bug#513564: marked as done (glibc: Please redefine __i686 to work-around the infamous i686 compilation fail)

2009-01-30 Thread Debian Bug Tracking System
Your message dated Fri, 30 Jan 2009 10:36:27 +0100 with message-id <20090130093627.ga11...@artemis.corp> and subject line Re: Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail has caused the Debian Bug report #513564, regarding glibc: Please redefine __i6

Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Bastian Blank
On Fri, Jan 30, 2009 at 10:37:57AM +0200, Yoram bar haim wrote: > When compiling with gcc that uses march=i686 (or any sub-arch) gcc defines > __i686 to be 1, that causes instructions such as > ..ifndef __i686.get_pc_thunk.reg; > to fail as syntax error (because the prefix is 1). > if you force it

Bug#513564: glibc: Please redefine __i686 to work-around the infamous i686 compilation fail

2009-01-30 Thread Yoram bar haim
Package: glibc Version: 2.7-18 Severity: grave Justification: renders package unusable When compiling with gcc that uses march=i686 (or any sub-arch) gcc defines __i686 to be 1, that causes instructions such as ..ifndef __i686.get_pc_thunk.reg; to fail as syntax error (because the prefix is 1). i