Processed: bug 677650 is forwarded to https://bugs.launchpad.net/unhide.rb/+bug/1077573

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 677650 https://bugs.launchpad.net/unhide.rb/+bug/1077573 Bug #677650 [unhide.rb] unhide.rb: in `': uninitialized constant DL::Importable (NameError) Set Bug forwarded-to-address to 'https://bugs.launchpad.net/unhide.rb/+bug/1077573'. >

Processed (with 1 errors): tagging 677650

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 677650 - d-i + upstream Bug #677650 [unhide.rb] unhide.rb: in `': uninitialized constant DL::Importable (NameError) Removed tag(s) d-i. Bug #677650 [unhide.rb] unhide.rb: in `': uninitialized constant DL::Importable (NameError) Added tag(s)

Bug#692791: [oss-security] Privilege escalation (lpadmin -> root) in cups

2012-11-10 Thread Kurt Seifried
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/10/2012 05:49 AM, Yves-Alexis Perez wrote: > Hi, > > a Debian user reported a bug in our BTS concerning cupsd. The bug > is available at > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 and > upstream bug at http://www.cups.org/str.php

Processed: retitle 692471 to ncpfs - Fails two build to times

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > retitle 692471 ncpfs - Fails two build to times Bug #692471 [ncpfs] ncpfs - Fails to build to times Changed Bug title to 'ncpfs - Fails two build to times' from 'ncpfs - Fails to build to times' > thanks Stopping processing here. Please contact

Bug#691535: undefined symbol: glPopClientAttrib

2012-11-10 Thread Ron
On Sat, Nov 10, 2012 at 09:40:39PM +0100, gregor herrmann wrote: > I've tried this now, both with > MUMBLE_OVERLAY_DEBUG=1 LD_PRELOAD=/usr/lib/mumble/libmumble.so.1.2.4 glxgears > and > MUMBLE_OVERLAY_DEBUG=1 mumble-overlay glxgears > > What I get is a short flicker, and the following output: >

Processed: Re: "No remote address supplied" after a while

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 692936 > https://code.google.com/p/openvpn-auth-ldap/issues/detail?id=4 Bug #692936 [openvpn-auth-ldap] "No remote address supplied" after a while Set Bug forwarded-to-address to 'https://code.google.com/p/openvpn-auth-ldap/issues/deta

Processed: Re: "No remote address supplied" after a while

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 692936 + patch Bug #692936 [openvpn-auth-ldap] "No remote address supplied" after a while Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 692936: http://bugs.debian.org/cgi-bin/bugreport.c

Bug#692936: "No remote address supplied" after a while

2012-11-10 Thread Antoine Beaupré
tags 692936 + patch thanks Here's the patch I have submitted upstream. Description: move address checks further down to avoid certain failures this tries to avoid certain failures with the LDAP plugin where it doesn't get passed the remoteAddress in certain cases. since we do may not care abou

Bug#692937: openmpi1.6-doc and mpich2-doc: error when trying to install together

2012-11-10 Thread Ralf Treinen
Package: mpich2-doc,openmpi1.6-doc Version: mpich2-doc/1.4.01-4 Version: openmpi1.6-doc/1.6.3-2 Severity: serious User: trei...@debian.org Usertags: edos-file-overwrite Date: 2012-11-11 Architecture: amd64 Distribution: sid Hi, automatic installation tests of packages that share a file and at th

Bug#692936: "No remote address supplied" after a while

2012-11-10 Thread Antoine Beaupré
Package: openvpn-auth-ldap Version: 2.0.3-1 Severity: grave After using this plugin for a while and seeing a few connexions (from less than 10 clients at a time!), I get this: Nov 10 21:40:25 vpn0 ovpn-public-auth[10087]: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_C

Bug#691074: marked as done (gcc-doc: Depends on docs for wrong gcc version)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sun, 11 Nov 2012 09:03:54 +0800 with message-id <509ef97a.4020...@gmail.com> and subject line gcc-doc-defaults migrated to wheezy has caused the Debian Bug report #691074, regarding gcc-doc: Depends on docs for wrong gcc version to be marked as done. This means that you claim th

Bug#691535: undefined symbol: glPopClientAttrib

2012-11-10 Thread Chris Knadle
On Friday, November 09, 2012 11:18:06, Ron wrote: > On Thu, Nov 08, 2012 at 11:33:09PM -0500, Chris Knadle wrote: ... > > The fact that the /documentation/ is wrong or that the program doesn't > > follow what the documentation says -- yes I agree that needs fixing. > > That's not a fact, it's a fa

Bug#692926: marked as done (i3lock: Doesn't unlock screen in normal pam_unix environment)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 16:07:22 -0800 with message-id <87k3ttf1dx@foolinux.dyndns.org> and subject line Re: Bug#692926: i3lock: Doesn't unlock screen in normal pam_unix environment has caused the Debian Bug report #692926, regarding i3lock: Doesn't unlock screen in normal pam_unix

Bug#692926: i3lock: Doesn't unlock screen in normal pam_unix environment

2012-11-10 Thread Ian Zimmerman
Well, this is embarassing - it turned out my /etc/shadow wasn't readable by group shadow. Sorry for the noise. -- Ian Zimmerman gpg public key: 1024D/C6FF61AD fingerprint: 66DC D68F 5C1B 4D71 2EE5 BD03 8A00 786C C6FF 61AD http://www.gravatar.com/avatar/c66875cda51109f76c6312f4d4743d1e.png Rule

Bug#677097: mountall-bootclean.sh nukes udev's data in /run

2012-11-10 Thread Jakub Wilk
* Roger Leigh , 2012-11-08, 22:32: Would it be possible to debug this in a bit more detail on your system? /lib/init/bootclean.sh's clean function must be failing all these checks: Thu Nov 8 12:17:30 2012: Cleaning up temporary files Thu Nov 8 12:17:30 2012: BEFORE BOOTMISC: [ .tmpfs dhc

Bug#533009: lib32ffi5: missing Conflicts: libc6-i386 (<= 2.9-18)

2012-11-10 Thread Andreas Beckmann
Control: found -1 3.0.9-3 Hi, I just noticed the Conflicts: libc6-i386 (<= 2.9-18) that was supposedly added in 3.0.7-2 has disappeared later on again, causing incorrect updates from lenny to squeeze by installing the library over the /usr/lib32 -> /emul/... symlink before that gets replaced

Processed: lib32ffi5: missing Conflicts: libc6-i386 (<= 2.9-18)

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > found -1 3.0.9-3 Bug #533009 {Done: Matthias Klose } [lib32ffi5] lib32ffi5: /emul/ia32-linux deprecated Marked as found in versions libffi/3.0.9-3 and reopened. -- 533009: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533009 Debian Bug Tracking System Contact o

Bug#692472: ncpfs - Fails with Cannot convert kernel release "3.6-trunk-amd64" to number

2012-11-10 Thread Bastian Blank
On Sat, Nov 10, 2012 at 10:33:56PM +0100, Arthur de Jong wrote: > Attached is a patch, suitable for being dropped in debian/patches that > short-circuits the test altogether. I haven't tested it because I > haven't used IPX in a few years. I'm preparing a fixed package. Bastian -- Ahead warp fa

Bug#692929: ncpfs - ncpmount is suid root

2012-11-10 Thread Bastian Blank
Package: ncpfs Severity: serious ncpmount is suid root. A quick check through last patches for security problems and the code itself don't make me believe this is save. The code uses weird checks including calls to clone(2). As ncp is mostly dead this is unlikely to change. I think it is best to

Bug#687407: xdotool: FTBFS: cannot load such file -- xdo_test_helper

2012-11-10 Thread Daniel Kahn Gillmor
On 11/09/2012 07:30 PM, Tobias Hansen wrote: > some bugs are only reproducable with sbuild. Did you try using sbuild > yourself? No, i have not tried with sbuild myself yet. are you able to reproduce these bugs with sbuild? --dkg signature.asc Description: OpenPGP digital signature

Processed: user debian...@lists.debian.org, affects 689121, notfixed 692757 in 1:12-8-1~exp, unarchiving 533009

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > user debian...@lists.debian.org Setting user to debian...@lists.debian.org (was deb...@abeckmann.de). > affects 689121 + swi-prolog Bug #689121 {Done: Євгеній Мещеряков } [swi-prolog-nox] swi-prolog-nox: should not ship /usr/lib/swi-prolog/librar

Bug#689791: marked as done (php5-xdebug: modifies conffiles during distupgrade from squeeze (policy 10.7.3): /etc/php5/mods-available/xdebug.ini)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 22:47:28 + with message-id and subject line Bug#689791: fixed in xdebug 2.2.1-2 has caused the Debian Bug report #689791, regarding php5-xdebug: modifies conffiles during distupgrade from squeeze (policy 10.7.3): /etc/php5/mods-available/xdebug.ini to be ma

Bug#689791: #689791 php5-xdebug: modifies conffiles during distupgrade from squeeze (policy 10.7.3): /etc/php5/mods-available/xdebug.ini

2012-11-10 Thread Lior Kaplan
On Sun, Oct 14, 2012 at 1:05 AM, Stuart Prescott wrote: > * the path in squeeze's xdebug.ini probably should not have been there to > begin with; it needs to be removed in a policy compliant fashion during the > squeeze->wheezy upgrade. > I wish this was true, but the full path is an upstream re

Processed: Re: libqglviewer-qt4-2: copyright file missing after upgrade (policy 12.5)

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > found -1 2.3.4-4 Bug #691441 [libqglviewer-qt4-2] libqglviewer-qt4-2: copyright file missing after upgrade (policy 12.5) Marked as found in versions libqglviewer/2.3.4-4. > affects -1 + libqglviewer2 Bug #691441 [libqglviewer-qt4-2] libqglviewer-qt4-2: copyright fi

Bug#691441: libqglviewer-qt4-2: copyright file missing after upgrade (policy 12.5)

2012-11-10 Thread Andreas Beckmann
Control: found -1 2.3.4-4 Control: affects -1 + libqglviewer2 Control: tag -1 experimental On Thursday, 25. October 2012 19:34:58 Andreas Beckmann wrote: > a test with piuparts revealed that your package misses the copyright > file after an upgrade from sid to experimental, which is a violation o

Bug#692791: [Pkg-cups-devel] Bug#692791: Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Jeff Licquia
[Re-adding security team to CC.] On 11/10/2012 07:44 AM, Martin Pitt wrote: > Didier 'OdyX' Raboud [2012-11-10 12:48 +0100]: >> * Have cupsd run as lp user > > We had done that in Debian for several years for security reasons. We > had a huge patch to make most of cups work as user "lp", but at s

Bug#692926: i3lock: Doesn't unlock screen in normal pam_unix environment

2012-11-10 Thread Ian Zimmerman
Package: i3lock Version: 2.4.1-1 Severity: grave Justification: renders package unusable Dear Maintainer, * What led up to the situation? I typed "i3lock -c 00" in a terminal emulator window. After the screen went black as expected, I typed my password followed by the Enter key.

Bug#692471: ncpfs - Fails to build to times

2012-11-10 Thread Arthur de Jong
Control: tags -1 + patch On Tue, 2012-11-06 at 16:24 +0100, Bastian Blank wrote: > | dpkg-source: info: local changes detected, the modified files are: > | ncpfs-2.2.6/include/private/libncp-atomic.h Attached is a trivial patch which fixes this issue. -- -- arthur - adej...@debian.org - http:/

Processed: Re: Bug#692471: ncpfs - Fails to build to times

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch Bug #692471 [ncpfs] ncpfs - Fails to build to times Added tag(s) patch. -- 692471: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692471 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bu

Processed: Re: Bug#692472: ncpfs - Fails with Cannot convert kernel release "3.6-trunk-amd64" to number

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch Bug #692472 [ncpfs] ncpfs - Fails with Cannot convert kernel release "3.6-trunk-amd64" to number Added tag(s) patch. -- 692472: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692472 Debian Bug Tracking System Contact ow...@bugs.debian.org with pr

Bug#692472: ncpfs - Fails with Cannot convert kernel release "3.6-trunk-amd64" to number

2012-11-10 Thread Arthur de Jong
Control: tags -1 + patch On Tue, 2012-11-06 at 16:25 +0100, Bastian Blank wrote: > ncpmount fails on current Debian kernels with: > | Cannot convert kernel release "3.6-trunk-amd64" to number > > It expects three digits, but this is not longer the case. Attached is a patch, suitable for being dr

Bug#692916: marked as done (wicd-daemon: Using non-Essential tools in config script)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 21:18:03 + with message-id and subject line Bug#692916: fixed in wicd 1.7.2.4-4 has caused the Debian Bug report #692916, regarding wicd-daemon: Using non-Essential tools in config script to be marked as done. This means that you claim that the problem has

Bug#687943: marked as done (gnarwl: modifies conffiles (policy 10.7.3): /etc/gnarwl.cfg)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 21:17:34 + with message-id and subject line Bug#687943: fixed in gnarwl 3.6.dfsg-6.2 has caused the Debian Bug report #687943, regarding gnarwl: modifies conffiles (policy 10.7.3): /etc/gnarwl.cfg to be marked as done. This means that you claim that the pro

Bug#690409: closed by Michal Čihař (Bug#690409: fixed in xcache 2.0.0-3)

2012-11-10 Thread Michal Čihař
Hi Dne Sat, 10 Nov 2012 18:53:58 +0100 intrigeri napsal(a): > Michal Čihař wrote (10 Nov 2012 17:50:39 GMT) : > > I'm not sure what it is expected to do in such case, I'd expect at > > least having .dgpk-* files laying around. > > I did expect having the .dpkg-dist file available, > but I have

Processed: found 692916 in 1.6.0-1

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 692916 1.6.0-1 Bug #692916 [wicd-daemon] wicd-daemon: Using non-Essential tools in config script There is no source info for the package 'wicd-daemon' at version '1.6.0-1' with architecture '' Unable to make a source version for version '1

Processed: limit source to wicd, tagging 692916

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > #wicd (1.7.2.4-4) unstable; urgency=low > # > # * Move user-adding code from debconf-config to wicd-daemon postinst > #(Closes: #692916) > # > limit source wicd Limiting to bugs with field 'source' containing at least one of 'wicd' Limit curr

Bug#691535: undefined symbol: glPopClientAttrib

2012-11-10 Thread gregor herrmann
On Sat, 10 Nov 2012 13:28:28 +1030, Ron wrote: > > On Fri, 09 Nov 2012 09:51:05 +1030, Ron wrote: > > The term "trivial" triggered me into trying it myself. > I'd hoped so :) I've got a small mountain of backlog still to dig through > right now, and this still isn't anywhere near the top of it ju

Processed: tagging 682013

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 682013 + pending Bug #682013 [fai-server] fai-server: fai-setup failing on dracut setup Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 682013: http://bugs.debian.org/cgi-bin/bugreport.c

Processed: Re: [Pkg-cups-devel] Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > found -1 1.4.4-7+squeeze1 Bug #692791 [cups] members of lpadmin can read every file on server via cups Ignoring request to alter found versions of bug #692791 to the same values previously set -- 692791: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 Debi

Bug#692791: [Pkg-cups-devel] Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Jeff Licquia
Control: found -1 1.4.4-7+squeeze1 On 11/10/2012 06:48 AM, Didier 'OdyX' Raboud wrote: > I have successfully used your exploit script on the Sid version, tagging as > found there. Just to complete the picture, I tried the exploit on squeeze, and it works there too. -- To UNSUBSCRIBE, email to

Bug#692916: wicd-daemon: Using non-Essential tools in config script

2012-11-10 Thread Tollef Fog Heen
Package: wicd-daemon Severity: serious Version: 1.7.2.4-3 (possibly also older versions) from wicd-daemon.config: # Add selected users for u in $users; do hasuser=$((getent passwd | grep -w $u) || true) if [ -n "$hasuser" ]; then adduser --quiet $u netdev

Bug#634930: gpa: GPA unusable due to "General Assuan error"

2012-11-10 Thread Cia Watson
Package: gpa Version: 0.9.3-1 Followup-For: Bug #634930 Dear Maintainer, I have v0.9.3 of GPA and am getting this error also, so I'm adding myself to the bug report. -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing'), (1, 'experimental') Arch

Bug#690409: closed by Michal Čihař (Bug#690409: fixed in xcache 2.0.0-3)

2012-11-10 Thread intrigeri
Hi, Michal Čihař wrote (10 Nov 2012 17:50:39 GMT) : > I'm not sure what it is expected to do in such case, I'd expect at > least having .dgpk-* files laying around. I did expect having the .dpkg-dist file available, but I have none. I can easily believe the bugfix would be perfect if it had been

Bug#690409: closed by Michal Čihař (Bug#690409: fixed in xcache 2.0.0-3)

2012-11-10 Thread Michal Čihař
Hi Dne Sat, 10 Nov 2012 13:59:41 +0100 intrigeri napsal(a): > Hi, > > Debian Bug Tracking System wrote (08 Nov 2012 09:21:06 GMT) : > > #690409: php5-xcache: upgrades clobber local changes to xcache.ini > > It has been closed by Michal Čihař . > > I'm a bit unsure about the bugfix: > > I just

Bug#666334: gnustep-back: FTBFS: build-arch doesn't apply patches

2012-11-10 Thread Salvatore Bonaccorso
Hi On Thu, Oct 25, 2012 at 08:14:48AM +0200, Ralf Treinen wrote: > Hi, > > On Wed, Oct 24, 2012 at 10:53:17PM +0200, Salvatore Bonaccorso wrote: > > > @Yavor, so this still affects wheezy. I can try to help and provide a > > patch and/or do an NMU (time permitting), in case Ralf cannot do right

Processed: Re: Bug#692873: unblock: epydoc/3.0.1-13

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > tags 692733 + fixed pending Bug #692733 {Done: prono...@debian.org (Kenneth J. Pronovici)} [src:epydoc] src:epydoc: non-free files in main (CC-BY-NC-SA) Added tag(s) pending. -- 692733: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692733 692873: http://bugs.de

Bug#692733: marked as done (src:epydoc: non-free files in main (CC-BY-NC-SA))

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 16:32:28 + with message-id and subject line Bug#692733: fixed in epydoc 3.0.1+dfsg-1 has caused the Debian Bug report #692733, regarding src:epydoc: non-free files in main (CC-BY-NC-SA) to be marked as done. This means that you claim that the problem has be

Bug#682752:

2012-11-10 Thread Arthur de Jong
Control: tags -1 + patch On Sat, 2012-11-03 at 01:47 -0400, Michael Gilbert wrote: > reopen 682752 > thanks > > This still affects unstable. The change that was meant to fix this bug is in http://anonscm.debian.org/loggerhead/pkg-cups/cups-filters/debian-trunk/revision/62/debian/copyright how

Processed: Re:

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch Bug #682752 [src:cups-filters] cups-filters: debian/copyright is misleading/incomplete Added tag(s) patch. -- 682752: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=682752 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -

Bug#692904: tilda cannot use any show/hide hotkey with Ctrl ("")

2012-11-10 Thread Krylov Ivan
Package: tilda Version: 0.09.6-2 Severity: grave Justification: renders package unusable Dear Maintainer, After last update the following problem was discovered: Steps to reproduce: Open up the settings dialog and enter any hotkey with Ctrl (for exmaple, Space or Escape). Expected behaviour: Til

Processed: jsxgraph bugs fixed

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 689763 + fixed pending Bug #689763 [jsxgraph] jsxgraph: includes non-free jsmin code Added tag(s) fixed and pending. > tags 691493 + fixed pending Bug #691493 [src:jsxgraph] missing source for *.jar Added tag(s) fixed and pending. > thanks St

Bug#692800: marked as done (libnet-server-coro-perl: Net::Server::Coro isn't useable without libnet-server-perl)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 15:02:26 + with message-id and subject line Bug#692800: fixed in libnet-server-coro-perl 1.2-3 has caused the Debian Bug report #692800, regarding libnet-server-coro-perl: Net::Server::Coro isn't useable without libnet-server-perl to be marked as done. Thi

Processed: mysql-5.5

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 692871 5.5.24+dfsg-9 Bug #692871 [mysql-server-5.5] mysql-server-5.5: Regression in privileges of mysql debian-sys-maint user Marked as found in versions mysql-5.5/5.5.24+dfsg-9. > tag 692871 +patch Bug #692871 [mysql-server-5.5] mysql-serv

Bug#692871: mysql-5.5

2012-11-10 Thread Nicholas Bamber
found 692871 5.5.24+dfsg-9 tag 692871 +patch thanks This is clearly not introduced in 5.5.28+dfsg-1 and I am marking it as such. I'd like to get 5.5.28++dfsg-1 into testing before looking at this. ANd then I would like to check what we can close as a result of fixing this. -- To UNSUBSCRIBE, em

Bug#675971: Bug#691098: unblock: mumble/1.2.3-349-g315b5f5-2.1 [pre-approval request]

2012-11-10 Thread Adam D. Barratt
On Mon, 2012-10-22 at 19:22 +0200, gregor herrmann wrote: > On Mon, 22 Oct 2012 13:39:24 +0200, Julien Cristau wrote: > > I guess I don't consider this a complicated situation. Either the new > > version is ok, or we release without mumble. Neither the current > > version in sid nor the current v

Bug#692899: zope2.12: [CVE-2012-5485 to 5508] Multiple vectors corrected within 20121106 fix

2012-11-10 Thread Luciano Bello
Package: zope2.12 Severity: grave Tags: security Justification: user security hole Hi, please see : http://seclists.org/oss-sec/2012/q4/249 Can you confirm if any of the Debian packages are affected? Cheers, luciano -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a su

Bug#692523: closed by Norbert Preining (Bug#692523: fixed in cm-super 0.3.4-7)

2012-11-10 Thread Norbert Preining
Hi all, thanks Adam for making things clear, I agree 100% that at the current stage only critical things should be fixed, that is the reason why I didn't change anything else. Best wishes Norbert Norbert Preining

Bug#680917: marked as done (roundcube-core: Symbolic link not allowed or link target not accessible: js/jquery-ui.min.js)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 13:32:34 + with message-id and subject line Bug#680917: fixed in roundcube 0.7.2-6 has caused the Debian Bug report #680917, regarding roundcube-core: Symbolic link not allowed or link target not accessible: js/jquery-ui.min.js to be marked as done. This m

Bug#692076: Needs sponsor?

2012-11-10 Thread Kartik Mistry
Hi Nick, Do let me know if you need sponsor for this bug fix upload. Thanks! -- Kartik Mistry | IRC: kart_ {0x1f1f, kartikm}.wordpress.com -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#690409: closed by Michal Čihař (Bug#690409: fixed in xcache 2.0.0-3)

2012-11-10 Thread intrigeri
Hi, Debian Bug Tracking System wrote (08 Nov 2012 09:21:06 GMT) : > #690409: php5-xcache: upgrades clobber local changes to xcache.ini > It has been closed by Michal Čihař . I'm a bit unsure about the bugfix: I just upgraded php5-xcache 2.0.0-2 from testing to 2.0.0-3 from sid. My own /etc/php5

Bug#692791: Privilege escalation (lpadmin -> root) in cups

2012-11-10 Thread Yves-Alexis Perez
Hi, a Debian user reported a bug in our BTS concerning cupsd. The bug is available at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 and upstream bug at http://www.cups.org/str.php?L4223 (restricted because it's tagged security). I'm unsure right now if it's an upstream issue or specific

Bug#692791: [Pkg-cups-devel] Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Martin Pitt
Didier 'OdyX' Raboud [2012-11-10 12:48 +0100]: > * Have cupsd run as lp user We had done that in Debian for several years for security reasons. We had a huge patch to make most of cups work as user "lp", but at some point I gave up: it caused too many bugs, didn't work with a lot of third-party dr

Processed: Re: Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > forwarded -1 https://www.cups.org/str.php?L4223 Bug #692791 [cups] members of lpadmin can read every file on server via cups Set Bug forwarded-to-address to 'https://www.cups.org/str.php?L4223'. -- 692791: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791 Deb

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Didier 'OdyX' Raboud
Control: forwarded -1 https://www.cups.org/str.php?L4223 Le samedi, 10 novembre 2012 12.48:39, Didier 'OdyX' Raboud a écrit : > * Report bug to upstream tracker (I'll do it) This has now been done, to STR #4223, currently hidden from public view as it is tagged as "security". Cheers, OdyX si

Bug#692890: fbdesk: no icons on desktop

2012-11-10 Thread Yury Stankevich
Package: fbdesk Version: 1.4.1-10 Severity: grave Justification: renders package unusable once i run fbdesk - nothing changes it doesnt draw any icons on a desktop i run fluxbox 1.3.2-4 my fbdesk.icons in [Desktop Entry] Icon=/usr/share/pixmaps/xterm_48x48.xpm Name=xterm Exec=xterm Pos=64 64 [en

Processed: Re: Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Debian Bug Tracking System
Processing control commands: > found -1 1.5.3-2.6 Bug #692791 [cups] members of lpadmin can read every file on server via cups Marked as found in versions cups/1.5.3-2.6. > found -1 1.5.3-2.4 Bug #692791 [cups] members of lpadmin can read every file on server via cups Marked as found in versions c

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-10 Thread Didier 'OdyX' Raboud
Control: found -1 1.5.3-2.6 Control: found -1 1.5.3-2.4 Hi Jörg, and thanks for your bugreport, as far as I understand your report, there are two seperate issues: a) members of the lpadmin group can login to the webinterface password-less, using the /var/run/cups/certs/0 file that they can read

Bug#692801: marked as done (espeak-gui: Fails to run with "ImportError: No module named xdg")

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 11:32:30 + with message-id and subject line Bug#692801: fixed in espeak-gui 0.4-3 has caused the Debian Bug report #692801, regarding espeak-gui: Fails to run with "ImportError: No module named xdg" to be marked as done. This means that you claim that the p

Bug#688197: marked as done (dovecot-managesieved: managesieve segfault in libc)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#688197: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #688197, regarding dovecot-managesieved: managesieve segfault in libc to be marked as done. This means that you claim that the problem has be

Bug#631257: marked as done (package rewrites SSL certificates)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#685896: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #685896, regarding package rewrites SSL certificates to be marked as done. This means that you claim that the problem has been dealt with. If

Bug#685896: marked as done (dovecot-core: Overwrites SSL certificate without warning)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#685896: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #685896, regarding dovecot-core: Overwrites SSL certificate without warning to be marked as done. This means that you claim that the problem

Bug#680035: marked as done (UTF8 incorrectly used in mailbox names.)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#680035: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #680035, regarding UTF8 incorrectly used in mailbox names. to be marked as done. This means that you claim that the problem has been dealt wi

Bug#665487: marked as done (dovecot-managesieved: Error upgrading dovecot with managesieved)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#665487: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #665487, regarding dovecot-managesieved: Error upgrading dovecot with managesieved to be marked as done. This means that you claim that the p

Bug#685896: marked as done (dovecot-core: Overwrites SSL certificate without warning)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#631257: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #631257, regarding dovecot-core: Overwrites SSL certificate without warning to be marked as done. This means that you claim that the problem

Bug#623440: marked as done (dovecot: autocreation of new mailboxes fails)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#623440: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #623440, regarding dovecot: autocreation of new mailboxes fails to be marked as done. This means that you claim that the problem has been dea

Bug#631257: marked as done (package rewrites SSL certificates)

2012-11-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Nov 2012 09:47:51 + with message-id and subject line Bug#631257: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #631257, regarding package rewrites SSL certificates to be marked as done. This means that you claim that the problem has been dealt with. If

Processed: Patch fixes the issue

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 692801 + patch Bug #692801 [espeak-gui] espeak-gui: Fails to run with "ImportError: No module named xdg" Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 692801: http://bugs.debian.org/cgi

Bug#692801: Patch fixes the issue

2012-11-10 Thread Anton Gladky
tags 692801 + patch thanks Hi, I confirm this problem. The attached patch fixes the issue. Cheers, Anton diff -Nru espeak-gui-0.4/debian/changelog espeak-gui-0.4/debian/changelog --- espeak-gui-0.4/debian/changelog 2012-02-13 18:13:46.0 +0100 +++ espeak-gui-0.4/debian/changelog

Processed: Re: Bug#691535: undefined symbol: glPopClientAttrib

2012-11-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 691535 serious Bug #691535 [mumble] Plugins: Failed to load libmumble.so: Cannot load library /usr/lib/mumble/libmumble.so: (/usr/lib/mumble/libmumble.so: undefined symbol: glPopClientAttrib) Severity set to 'serious' from 'normal' > th

Bug#692800: libnet-server-coro-perl: Net::Server::Coro isn't useable without libnet-server-perl

2012-11-10 Thread Salvatore Bonaccorso
Hi For the record: Confirmed on IRC in #debian-release by adsb that the debdiff between 1.2-1 and 1.2-2 looks okay for an unblock. So we need to only fix the dependencies for an -3 upload and ask for an unblock. Regards, Salvatore signature.asc Description: Digital signature