Bug#687407: #687407 xdotool: FTBFS: cannot load such file -- xdo_test_helper

2012-11-28 Thread Axel Beckert
Hi Daniel, Daniel Kahn Gillmor wrote: > since i cannot seem to get upstream to consider these test suite > failures seriously, and i haven't seen them affect real-world > deployments of xdotool, i've just commented out those unit tests as > well, and am preparing a -6 upload :( -6 is in Sid and j

Bug#679198: bash: [on native FreeBSD] unable to set FD_CLOEXEC flag

2012-11-28 Thread Jonathan Nieder
Nicolas Boulenguez wrote: > If I understand well fcntl(2), the following patch may solve this bug. > Stefan, would you please try to rebuild and test? > > --- bash.preinst-lib.c 2012-11-28 15:56:04.0 +0100 > +++ bash.preinst-lib.c.new 2012-11-28 17:07:09.0 +0100 > @@ -60,8 +6

Bug#606268: [Pkg-utopia-maintainers] Bug#606268: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Michael Biebl
On 29.11.2012 00:46, Maximiliano Curia wrote: > I would like to hear opinions about this script from the maintainers or other > interested parties. In the case that I don't get any replies, I would do the > NMU in a couple of days. Just a quick comment from skimming over the patch: As you can se

Bug#690204: NMU diff for 690204

2012-11-28 Thread Don Armstrong
Attached please find the NMU diff which fixes #690204. Don Armstrong -- "That is why I am still tyrant of [Ankh-Morpork]. The way to retain power, I have always thought, is to ensure the absolute unthinkability of oneself not being there." -- Terry Pratchett _Unseen Academicals_ p391 http://w

Bug#694684: cityhash: Fix for FTBFS on PowerPC, ARM, and S/390

2012-11-28 Thread Adam Conrad
Package: cityhash Version: 1.1.0-1 Severity: serious Tags: patch User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu raring ubuntu-patch In Ubuntu, I've worked around the FTBFS on arches with unsigned chars with the following patch. The correct solution would be to hunt down everywhere i

Processed: Re: Bug#667995: cupsd configuration: "cupsdAuthorize: Empty Basic password!"

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 667995 + fixed-upstream patch Bug #667995 [python-cups] cupsd configuration: "cupsdAuthorize: Empty Basic password!" Added tag(s) fixed-upstream and patch. > severity 667995 grave Bug #667995 [python-cups] cupsd configuration: "cupsdAuthoriz

Bug#606268: [Pkg-utopia-maintainers] Bug#690987: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Michael Biebl
Hi Maximiliano, thanks for your work on this! On 29.11.2012 00:46, Maximiliano Curia wrote: > > The script that is used to comment out the interfaces in > /etc/network/interfaces was so buggy that I had to write it completly from > scratch to make it work properly. Nod, the existing script is i

Processed: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tag 606268 + patch Bug #606268 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #609072 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #611281 [network-manager] Network in

Processed: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tag 606268 + patch Bug #606268 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #609072 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #611281 [network-manager] Network in

Bug#606268: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Maximiliano Curia
Control: tag 606268 + patch Control: tag 688355 + patch Control: tag 690987 + patch Hi, The script that is used to comment out the interfaces in /etc/network/interfaces was so buggy that I had to write it completly from scratch to make it work properly. I have added a number of tests, to verify

Processed: Debdiff with new script to handle /etc/network/interfaces

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tag 606268 + patch Bug #606268 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #609072 [network-manager] Network interface used for installation is configured as unmanaged by NM Bug #611281 [network-manager] Network in

Bug#690128: inn2: conffile disappearing during squeeze->wheezy upgrade: /etc/news/motd.news

2012-11-28 Thread Russ Allbery
m...@linux.it (Marco d'Itri) writes: > On Nov 28, Russ Allbery wrote: >> Marco, do you want to handle this update? I'm happy to help here, but >> don't want to tromp on you if you'd rather take care of it. > Yes. I would appreciate if you could list any other patches that you > think should be

Bug#694641: icinga-web: CVE-2012-5475

2012-11-28 Thread Markus Frosch
tags 694641 + pending tags 694262 + pending thanks Update to unstable coming soon. The flash component has been removed and the feature disabled. In addition a upstream patch was applied to allow the user to re-enable it when he wants -Markus -- mar...@lazyfrosch.de http://www.lazyfrosch.de

Processed: icinga-web: CVE-2012-5475

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694641 + pending Bug #694641 [icinga-web] yui: CVE-2012-5475 - YUI 2.x security issue regarding embedded SWF files Added tag(s) pending. > tags 694262 + pending Bug #694262 [icinga-web] icinga-web: includes sourceless swf files Added tag(s)

Processed: Re: Bug#693472: emacsen-common, emacs23: many emacs addons fail to install if emacs22 (lenny) is still installed

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > affects 693472 = Bug #693472 [emacsen-common,emacs23] emacsen-common, emacs23: many emacs addons fail to install if emacs22 (lenny) is still installed Removed indication that 693472 affects emms, mhc, speechd-el, and devscripts-el > clone 693472

Bug#675495: downgrading the severity of #675495 (openjdk-6 in, wheezy)

2012-11-28 Thread Steven Chamberlain
Hi, Related to this issue, at least the following packages depend on openjdk-6 rather than java6-runtime or something less specific. As such, I found them listed on edos.d.o as uninstallable on kfreebsd-*, and they would remain so even after we can get openjdk-7 built for those arches (probably t

Bug#682212: marked as done (CVE-2012-0540 CVE-2012-1734 CVE-2012-1689)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 14:39:51 -0800 with message-id <1354142272-sup-5...@fewbar.com> and subject line This was closed by the update to 5.1.63 has caused the Debian Bug report #682212, regarding CVE-2012-0540 CVE-2012-1734 CVE-2012-1689 to be marked as done. This means that you claim

Bug#694440: [moodle-packaging] Bug#694440: moodle: fails to upgrade lenny -> squeeze -> wheezy

2012-11-28 Thread Tomasz Muras
Thanks for reporting it Andreas. I have tried to reproduce it several times with the chroot and I think this is a non-issue. For some reason your database was not created - possibly because on of the mysql packages was not installed (moodle depends on mysql or postgresql). This is what I was

Processed: your mail

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 589731 http://projects.scipy.org/scipy/ticket/1780 Bug #589731 [src:python-scipy] python-scipy: missing source for Cython-generated files Set Bug forwarded-to-address to 'http://projects.scipy.org/scipy/ticket/1780'. > End of message, s

Bug#618968: Do not use ffmpeg in netgen

2012-11-28 Thread Francesco Poli
On Wed, 28 Nov 2012 21:48:20 +0100 Anton Gladky wrote: > 2012/11/28 Francesco Poli : > > libav-0.8.4/libavcodec/x86/idct_mmx.c > > which is licensed under the GNU GPL v2 or later. > > > > Does this file get compiled into a library that is linked with netgen? > > Unfortunately yes [1]. I see...

Processed: missing files again

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 589731 0.10.1+dfsg1-1 Bug #589731 {Done: Varun Hiremath } [src:python-scipy] python-scipy: missing source for Cython-generated files Marked as found in versions python-scipy/0.10.1+dfsg1-1 and reopened. > thanks Stopping processing here. P

Bug#589731: missing files again

2012-11-28 Thread Julian Taylor
found 589731 0.10.1+dfsg1-1 thanks $ head debian/changelog python-scipy (0.10.1+dfsg1-4) unstable; urgency=low $ grep -rl 'Generated by Cython' . | sed -e 's,\.c,\.pyx,g' | xargs ls -1 ls: cannot access ./scipy/io/matlab/mio_utils.pyx: No such file or directory ls: cannot access ./scipy/io/matla

Bug#693076: gatling: Gatling 0.12 has two direcory traversal vulns that were fixed in 0.13

2012-11-28 Thread Moritz Mühlenhoff
On Wed, Nov 28, 2012 at 05:22:30PM +0100, Roland Stigge wrote: > On 11/28/2012 05:10 PM, Moritz Muehlenhoff wrote: > >>> gatling 0.12 has two directory traversal vulns (one in the handling of > >>> Host headers, one > >>> in the ftp code) that have been fixed in Gatling 0.13. > >> > >> Which ones

Processed: unarchiving 589731

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 589731 Bug #589731 {Done: Varun Hiremath } [src:python-scipy] python-scipy: missing source for Cython-generated files Unarchived Bug 589731 > thanks Stopping processing here. Please contact me if you need assistance. -- 589731: http:/

Bug#537051: marked as done (ca-certificates 20090709: installation error)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 21:32:27 + with message-id and subject line Bug#537051: fixed in ca-certificates 20121114 has caused the Debian Bug report #537051, regarding ca-certificates 20090709: installation error to be marked as done. This means that you claim that the problem has b

Bug#694670: kscd does not play any CD

2012-11-28 Thread Rainer Dorsch
Package: kscd Version: 4:4.8.4-2 Severity: grave Justification: renders package unusable Dear Maintainer, whatever CD I try to play with kscd player, it does not play anything. Since vlc can play all track, audex can rip them, I think it is a problem with kscd. kscd can still read out the track l

Processed: severity of 694658 is important

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 694658 important Bug #694658 [links2] links2: still silently accepts bad SSL certificates Severity set to 'important' from 'grave' > thanks Stopping processing here. Please contact me if you need assistance. -- 694658: http://bugs.debia

Bug#618968: Do not use ffmpeg in netgen

2012-11-28 Thread Anton Gladky
2012/11/28 Francesco Poli : > libav-0.8.4/libavcodec/x86/idct_mmx.c > which is licensed under the GNU GPL v2 or later. > > Does this file get compiled into a library that is linked with netgen? Unfortunately yes [1]. It gets compiled into libavcodec.so.53 and possibly other shared libs. Anton [1

Processed: Re: Bug#679198: bash: [on native FreeBSD] unable to set FD_CLOEXEC flag

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tags -1 patch Bug #679198 [bash] bash: [on native FreeBSD] unable to set FD_CLOEXEC flag Bug #683271 [bash] [bash] preinst failing on kfreebsd Added tag(s) patch. Added tag(s) patch. -- 679198: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679198 683271: http://

Bug#679198: bash: [on native FreeBSD] unable to set FD_CLOEXEC flag

2012-11-28 Thread Steven Chamberlain
Control: tags -1 patch On 03/07/12 17:47, Jonathan Nieder wrote: > F_GETFL is 3, so fcntl is being called correctly. But why does > fcntl(F_GETFL) return 1 (== FD_CLOEXEC)? This looks like a bug. On 28/11/12 16:17, Nicolas Boulenguez wrote: > - int flags = fcntl(fd, F_GETFL); > - if

Bug#694646: mldonkey: Package depends on dpkg-dev >= 1.16.1

2012-11-28 Thread Adam D. Barratt
Control: severity -1 normal On Wed, 2012-11-28 at 17:18 +0100, Gabriele wrote: > I tried to backport this package to squeeze amd64, but build failed. A > Debian developer suggested me that it needs dkpk-dev from backports > dkg-dev >= 1.16.1. Using this version, build was succesfull. Packages fro

Processed: Re: Bug#694646: mldonkey: Package depends on dpkg-dev >= 1.16.1

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > severity -1 normal Bug #694646 [mldonkey] mldonkey: Package depends on dpkg-dev >= 1.16.1 Severity set to 'normal' from 'serious' -- 694646: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694646 Debian Bug Tracking System Contact ow...@bugs.debian.org with proble

Bug#687398: rhash: diff for NMU version 1.2.9-7.1

2012-11-28 Thread Aleksey Kravchenko
Gentlemen, thank you for investigating such twisted issue! When building in parallel, sometime librhash.a was created prior to librhash.so and rhash_shared binary. The command 'mv rhash_shared rhash' preserved timestamp. Then wrong static 'rhash' binary was re-built by command 'make test' (as requ

Bug#694372: marked as done (python-novaclient: missing Breaks+Replaces: simh (<< 3.8.1-3))

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 19:10:37 + with message-id and subject line Bug#694372: fixed in python-novaclient 1:2012.1-4 has caused the Debian Bug report #694372, regarding python-novaclient: missing Breaks+Replaces: simh (<< 3.8.1-3) to be marked as done. This means that you claim t

Bug#694658: links2: still silently accepts bad SSL certificates

2012-11-28 Thread ll lavander
Package: links2 Version: 2.3~pre1-1+squeeze1 Severity: grave Tags: security Justification: user security hole This is in response to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510417>Links2 does not validate certificates it receives; as a result, there is >no warning that one is visiti

Bug#618968: Do not use ffmpeg in netgen

2012-11-28 Thread Francesco Poli
On Wed, 28 Nov 2012 19:31:20 +0100 Francesco Poli wrote: [...] > I think this should be reported to the libav Debian package maintainers. For the record, I've just reported this bug: its number is #694657 -- http://www.inventati.org/frx/frx-gpg-key-transition-2010.txt New GnuPG key, see the

Bug#618968: Do not use ffmpeg in netgen

2012-11-28 Thread Francesco Poli
On Tue, 27 Nov 2012 20:06:16 +0100 Anton Gladky wrote: [...] > Francesco, could you, please, verify, whether the bug can be > closed? Hi Anton, it seems to me that http://packages.debian.org/changelogs/pool/main/liba/libav/libav_0.8.4-1/libavcodec53.copyright is no longer consistent with the actu

Bug#688847: Unclear status of CVE-2012-2774 CVE-2012-2783 CVE-2012-2791 CVE-2012-2797 CVE-2012-2803 CVE-2012-2804

2012-11-28 Thread anton
Hi, I've been working on fixing those bugs in Libav, but I was lacking samples for those remaining ones. Just yesterday I finally got a reply from the Google guy who found the bugs (I suppose it was triggered by you, thanks for that) so there is hope of seeing the samples soon. Then I might be abl

Bug#694006: marked as done (update-notifier-common: Missing dependency on lsb-release)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 17:03:35 + with message-id and subject line Bug#694006: fixed in update-notifier 0.99.3debian11 has caused the Debian Bug report #694006, regarding update-notifier-common: Missing dependency on lsb-release to be marked as done. This means that you claim tha

Bug#693076: gatling: Gatling 0.12 has two direcory traversal vulns that were fixed in 0.13

2012-11-28 Thread Roland Stigge
On 11/28/2012 05:10 PM, Moritz Muehlenhoff wrote: >>> gatling 0.12 has two directory traversal vulns (one in the handling of Host >>> headers, one >>> in the ftp code) that have been fixed in Gatling 0.13. >> >> Which ones do you mean? (e.g. CVS commits/fixes?) How does it justify >> grave/securit

Bug#694646: mldonkey: Package depends on dpkg-dev >= 1.16.1

2012-11-28 Thread Gabriele
Package: mldonkey Version: 3.1.2-1 Severity: serious Tags: squeeze sid Justification: fails to build from source (but built successfully in the past) I tried to backport this package to squeeze amd64, but build failed. A Debian developer suggested me that it needs dkpk-dev from backports dkg-dev >

Bug#675495: downgrading the severity of #675495 (openjdk-6 in wheezy)

2012-11-28 Thread Julien Cristau
On Tue, Aug 28, 2012 at 17:43:57 +0200, Moritz Muehlenhoff wrote: > OpenJDK Security support has always been a nightmare for the security > team because there was no support from the maintainers. Security support > s primarily the responsibility of the maintainer. > > If you dump two packages in

Bug#679198: bash: [on native FreeBSD] unable to set FD_CLOEXEC flag

2012-11-28 Thread Nicolas Boulenguez
Package: bash Followup-For: Bug #679198 If I understand well fcntl(2), the following patch may solve this bug. Stefan, would you please try to rebuild and test? --- bash.preinst-lib.c 2012-11-28 15:56:04.0 +0100 +++ bash.preinst-lib.c.new 2012-11-28 17:07:09.0 +0100 @@ -60,8

Bug#693076: gatling: Gatling 0.12 has two direcory traversal vulns that were fixed in 0.13

2012-11-28 Thread Moritz Muehlenhoff
On Mon, Nov 12, 2012 at 08:40:56PM +0100, Roland Stigge wrote: > Hi! > > Thanks for reporting! > > On 12/11/12 20:26, Jann Horn wrote: > > Package: gatling > > Version: 0.12cvs20120114-2 > > Severity: grave > > Tags: upstream security > > Justification: user security hole > > > > gatling 0.12 ha

Bug#694498: python-djblets: missing Breaks+Replaces: python-django-djblets

2012-11-28 Thread Dmitry Nezhevenko
On Tue, Nov 27, 2012 at 12:43:52AM +0100, Andreas Beckmann wrote: > Selecting previously deselected package python-djblets. > Unpacking python-djblets (from > .../python-djblets_0.7~git20120402+dfsg-1_all.deb) ... > dpkg: error processing > /var/cache/apt/archives/python-djblets_0.7~git2012

Bug#688847: Unclear status of CVE-2012-2774 CVE-2012-2783 CVE-2012-2791 CVE-2012-2797 CVE-2012-2803 CVE-2012-2804

2012-11-28 Thread Moritz Muehlenhoff
On Mon, Nov 26, 2012 at 08:01:03PM +0100, Arne Wichmann wrote: > I just had a look at the above mentioned problems and I am a bit unsure > about their status. As far as I can see the fixes are not applied, the > status in http://security-tracker.debian.org/tracker/source-package/libav > still lists

Bug#675495: openjdk-6: Should not be released with Wheezy

2012-11-28 Thread Moritz Muehlenhoff
On Sun, Nov 18, 2012 at 01:26:20AM -0500, Michael Gilbert wrote: > > We have three options: > > > > - Drop openjdk6 from Wheezy (and proceed with the needed changes to allow > > that) > > - The Java maintainers take up the responsibility and step up to support > > openjdk6 in stable- and oldsta

Processed: cloning 692434, reassign -1 to icinga-web, reassign -2 to glpi

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > clone 692434 -1 -2 Bug #692434 [yui] yui: CVE-2012-5475 - YUI 2.x security issue regarding embedded SWF files Bug 692434 cloned as bugs 694641-694642 > reassign -1 icinga-web Bug #694641 [yui] yui: CVE-2012-5475 - YUI 2.x security issue regarding

Bug#694521: marked as done (libxml2: CVE-2012-5134)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 16:02:55 + with message-id and subject line Bug#694521: fixed in libxml2 2.9.0+dfsg1-4 has caused the Debian Bug report #694521, regarding libxml2: CVE-2012-5134 to be marked as done. This means that you claim that the problem has been dealt with. If this i

Bug#692129: Preliminar patch, test needed

2012-11-28 Thread Maximiliano Curia
¡Hola René! I've just uploaded the fixes to the 3 day delayed queue. Feel free to do your own upload if you prefer. I'm attaching a debdiff with the changes. Happy hacking, -- “There are two ways of constructing a software design. One way is to make it so simple that there are obviously no de

Bug#689268: linux-image-3.2.0-3-amd64: Intel HD 4000 (Ivy Bridge) graphics freeze

2012-11-28 Thread Jonathan Nieder
Riku Voipio wrote: > Is there any updates since early november? I have a Ivy bridge PC now > with PH8H77-V LE motherboard and 3570K cpu showing the mentioned > symptomps. I can work on bisecting the issue if nobody else is already > on it. If you can bisect to find the first unaffected kernel be

Bug#689268: linux-image-3.2.0-3-amd64: Intel HD 4000 (Ivy Bridge) graphics freeze

2012-11-28 Thread Riku Voipio
Hi, Is there any updates since early november? I have a Ivy bridge PC now with PH8H77-V LE motherboard and 3570K cpu showing the mentioned symptomps. I can work on bisecting the issue if nobody else is already on it. Riku -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with

Bug#694474: libmasonx-request-withapachesession-perl: diff for NMU version 0.30-3.1

2012-11-28 Thread Salvatore Bonaccorso
Hi Attached patch should also solve the .packlist issue by issue'ing the perl Build.PL call with create_packlist=0. Regards, Salvatore diff -u libmasonx-request-withapachesession-perl-0.30/debian/patches/00list libmasonx-request-withapachesession-perl-0.30/debian/patches/00list --- libmasonx-requ

Processed: tagging 694446, severity of 694446 is critical

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694446 - upstream Bug #694446 [im-config] im-config should setting environment variable in 70im-config_launch instead of im-launch Removed tag(s) upstream. > severity 694446 critical Bug #694446 [im-config] im-config should setting environme

Bug#694521: marked as done (libxml2: CVE-2012-5134)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 15:32:38 + with message-id and subject line Bug#694521: fixed in libxml2 2.8.0+dfsg1-7 has caused the Debian Bug report #694521, regarding libxml2: CVE-2012-5134 to be marked as done. This means that you claim that the problem has been dealt with. If this i

Processed: libmasonx-request-withapachesession-perl: diff for NMU version 0.30-3.1

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694474 + patch Bug #694474 [libmasonx-request-withapachesession-perl] MasonX::Request::WithMultiSession needs Digest::SHA1 Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 694474: http://b

Bug#694474: libmasonx-request-withapachesession-perl: diff for NMU version 0.30-3.1

2012-11-28 Thread Salvatore Bonaccorso
tags 694474 + patch thanks Hi Krzysztof I have prepared a patch for it, versioned as 0.30-3.1. Note that I have not yet uploaded to a delayed queue. Do you plan to upload yourself? Only changing the occurences of Digest::SHA1 with Digest::SHA is enough. *But*: it still needs some work, as the re

Processed: Re: Preliminar patch, test needed

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tags 692129 - help Bug #692129 [pptpd] pptpd: PPTP Connections Drop Ignoring request to alter tags of bug #692129 to the same tags previously set -- 692129: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692129 Debian Bug Tracking System Contact ow...@bugs.debian

Bug#692129: Preliminar patch, test needed

2012-11-28 Thread Maximiliano Curia
Control: tags 692129 - help ¡Hola! El 2012-11-24 a las 19:12 +0100, Maximiliano Curia escribió: > I'll try to contact upstream and ask for their input. No reply so far. I've tested the problem using libfiu, fiu-utils and two virtual machines: ## Server /etc/init.d/pptpd stop fiu-run -x /etc/in

Processed: Re: Preliminar patch, test needed

2012-11-28 Thread Debian Bug Tracking System
Processing control commands: > tags 692129 - help Bug #692129 [pptpd] pptpd: PPTP Connections Drop Removed tag(s) help. -- 692129: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692129 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-b

Bug#694631: oss4-base: 4.2-build2007-1+nmu1 adds clicking sounds into audio

2012-11-28 Thread Nach
Package: oss4-base Version: 4.2-build2007-1+nmu1 Severity: grave Justification: renders package unusable I just upgraded to 4.2-build2007-1+nmu1 from 4.2-build2007-1. Now playing audio in MPlayer has all kinds of clicking sounds heard in the audio output. Audio output was fine in the same files

Processed: severity of 693136 is grave

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 693136 grave Bug #693136 [pptpd] pptpd: Binary trash when launching ppp Severity set to 'grave' from 'important' > thanks Stopping processing here. Please contact me if you need assistance. -- 693136: http://bugs.debian.org/cgi-bin/bugr

Processed: tags 694521 + pending

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694521 + pending Bug #694521 [libxml2] libxml2: CVE-2012-5134 Added tag(s) pending. > -- Stopping processing here. Please contact me if you need assistance. -- 694521: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694521 Debian Bug Track

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-28 Thread Marc Deslauriers
On 12-11-27 11:38 PM, Michael Sweet wrote: > After looking at this patch in detail, it doesn't actually prevent users in > the lpadmin group from modifying cupsd.conf and performing the specified > privilege escalation. > > An alternate fix for cups-1.5 and earlier that specifically addresses th

Processed: Re: Bug#622652: alsa-driver: fails to build on powermac

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # This isn't an issue on stable even though it has the same version > tags 622652 + wheezy sid Bug #622652 {Done: Debian FTP Masters } [alsa-source] alsa-driver: fails to build on powermac Added tag(s) sid and wheezy. > thanks Stopping processing

Bug#694534: sec: bad defaults

2012-11-28 Thread Daniel Echeverry
tags 694534 + patch thanks Hi Patch to fix the problem. Regards. -- Epsilon http://wiki.debian.org/DanielEcheverry http://www.rinconinformatico.net http://enchulatucelu.com http://www.todopdf.net http://www.fitnessdeportes.com http://www.dragonjar.org Linux user: #477840 Debian user 01_fix_b

Processed: Re: sec: bad defaults

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694534 + patch Bug #694534 [src:sec] sec: bad defaults Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 694534: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694534 Debian Bug Tracking S

Bug#694622: nut-snmp

2012-11-28 Thread sergio
Package: nut-snmp Version: 2.4.3-1.1squeeze2 Severity: grave Justification: renders package unusable Looks like nut-snmp is totally unusable: # upsd -DD Network UPS Tools upsd 2.6.5 0.00 fopen /var/run/nut/upsd.pid: No such file or directory 0.001154 listening on 127.0.0.1 port

Processed: Re: Processed: notfound

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > notfound #619007 2.4.9+dfsg1-3+squeeze1 Bug #619007 {Done: Patrick Matthäi } [otrs2] otrs2: fails to install - otrs.RebuildConfig.pl fails No longer marked as found in versions otrs2/2.4.9+dfsg1-3+squeeze1. > notfound #619007 2.4.9+dfsg1-4 Bug #

Processed: notfound

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > notfound #619007 249+dfsg1-3+squeeze1 Bug #619007 {Done: Patrick Matthäi } [otrs2] otrs2: fails to install - otrs.RebuildConfig.pl fails There is no source info for the package 'otrs2' at version '249+dfsg1-3+squeeze1' with architecture '' Unab

Bug#619367: Bug#677191: Bug#132355: Bug#677191: emacsen-common: errors while upgrading to wheezy(some time ago) => wheezy(today)

2012-11-28 Thread intrigeri
Hi, Agustin Martin wrote (28 Nov 2012 12:11:20 GMT) : > Since #670292 seems indeed the same problem as #619367 and #677191 > and is fixed in sid xemacs21 21.4.22-4 (and so should be #619367 and > #677191) I am reassing all those bugs to xemacs21 package and > forcibly merging them to get all close

Processed: Setting some found and fixed versions

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 670292 xemacs21/21.4.22-4 Bug #670292 {Done: OHURA Makoto } [xemacs21] xemacs21-gnome-{, no-}mule{, -canna-wnn}: fails to upgrade from squeeze: apt-get dist-upgrade hangs forever Bug #619367 {Done: OHURA Makoto } [xemacs21] xemacs21: inst

Processed: Re: Bug#677191: Bug#132355: Bug#677191: emacsen-common: errors while upgrading to wheezy(some time ago) => wheezy(today)

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 670292 Bug #670292 {Done: OHURA Makoto } [xemacs21-gnome-mule,xemacs21-gnome-nomule,xemacs21-gnome-mule-canna-wnn] xemacs21-gnome-{, no-}mule{, -canna-wnn}: fails to upgrade from squeeze: apt-get dist-upgrade hangs forever Unarchived

Bug#677191: Bug#132355: Bug#677191: emacsen-common: errors while upgrading to wheezy(some time ago) => wheezy(today)

2012-11-28 Thread Agustin Martin
unarchive 670292 reassign 670292 xemacs21 reassign 677191 xemacs21 forcemerge 670292 619367 677191 thanks On Mon, Nov 26, 2012 at 06:23:57PM +0100, Agustin Martin wrote: > On Tue, Nov 20, 2012 at 06:07:46PM +0100, Agustin Martin wrote: > > On Tue, Nov 20, 2012 at 05:28:23PM +0100, intrigeri wrote:

Bug#694601: marked as done (unzip uses memcpy with overlapping buffers)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 12:02:36 + with message-id and subject line Bug#694601: fixed in unzip 6.0-8 has caused the Debian Bug report #694601, regarding unzip uses memcpy with overlapping buffers to be marked as done. This means that you claim that the problem has been dealt with.

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-28 Thread Didier 'OdyX' Raboud
Le mercredi, 28 novembre 2012 12.41:27, Michael Sweet a écrit : > Indeed, we can add additional directory checks to the "simple" fix, or for > purposes of the Debian packages just disable certain directives if they > should not be configured from their defaults. Sure; sounds good. > WRT setting S

Bug#639405: marked as done (python2.X/3.X-dev ships windows binaries which are not built at build time)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 11:48:27 + with message-id and subject line Bug#639405: fixed in python2.6 2.6.8-1 has caused the Debian Bug report #639405, regarding python2.X/3.X-dev ships windows binaries which are not built at build time to be marked as done. This means that you clai

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-28 Thread Michael Sweet
Didier, Indeed, we can add additional directory checks to the "simple" fix, or for purposes of the Debian packages just disable certain directives if they should not be configured from their defaults. WRT setting SystemGroup, that /is/ a valid configuration change that some sites make; disabli

Bug#694500: marked as done (nordugrid-arc-hed: missing Breaks+Replaces: nordugrid-arc-nox-client)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 11:32:54 + with message-id and subject line Bug#694500: fixed in nordugrid-arc 2.0.0-4 has caused the Debian Bug report #694500, regarding nordugrid-arc-hed: missing Breaks+Replaces: nordugrid-arc-nox-client to be marked as done. This means that you claim t

Bug#694601: unzip uses memcpy with overlapping buffers

2012-11-28 Thread Santiago Vila
On Wed, 28 Nov 2012, M Joonas Pihlaja wrote: > Package: unzip > Version: 6.0-7 > Severity: grave > Tags: upstream > Justification: causes non-serious data loss > > Dear Maintainer, > > Unzipping an archive gives me CRC errors and corrupt files. Please consider > adding -DNOMEMCPY to the compile

Processed: Re: Bug#690128: inn2: conffile disappearing during squeeze->wheezy upgrade: /etc/news/motd.news

2012-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tag 690128 +patch Bug #690128 [inn2] inn2: conffile disappearing during squeeze->wheezy upgrade: /etc/news/motd.news Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 690128: http://bugs.debian.

Bug#690128: inn2: conffile disappearing during squeeze->wheezy upgrade: /etc/news/motd.news

2012-11-28 Thread Marco d'Itri
On Nov 28, Russ Allbery wrote: > Marco, do you want to handle this update? I'm happy to help here, but > don't want to tromp on you if you'd rather take care of it. Yes. I would appreciate if you could list any other patches that you think should be backported to the wheezy package. -- ciao,

Bug#692013: marked as done (php5-* modules: fails to install and uninstall if the config file was removed by user)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 10:04:55 + with message-id and subject line Bug#692013: fixed in php5 5.4.9-1 has caused the Debian Bug report #692013, regarding php5-* modules: fails to install and uninstall if the config file was removed by user to be marked as done. This means that yo

Bug#690128: inn2: conffile disappearing during squeeze->wheezy upgrade: /etc/news/motd.news

2012-11-28 Thread Nick Leverton
tag 690128 +patch thanks On Tue, Nov 27, 2012 at 10:42:37PM -0800, Russ Allbery wrote: > Marco, do you want to handle this update? I'm happy to help here, but > don't want to tromp on you if you'd rather take care of it. Herewith the debdiff in the hope it makes reviewing easier - meant to appen

Bug#694601: unzip uses memcpy with overlapping buffers

2012-11-28 Thread M Joonas Pihlaja
Package: unzip Version: 6.0-7 Severity: grave Tags: upstream Justification: causes non-serious data loss Dear Maintainer, Unzipping an archive gives me CRC errors and corrupt files. Please consider adding -DNOMEMCPY to the compile line. I was merrily unzipping an archive when I came across CRC

Bug#692791: members of lpadmin can read every file on server via cups

2012-11-28 Thread Didier 'OdyX' Raboud
Le mercredi, 28 novembre 2012 05.38:58, Michael Sweet a écrit : > After looking at this patch in detail, it doesn't actually prevent users in > the lpadmin group from modifying cupsd.conf and performing the specified > privilege escalation. > > An alternate fix for cups-1.5 and earlier that specif

Bug#694284: marked as done (libconcord-dev: missing Breaks+Replaces: libconcord1-dev)

2012-11-28 Thread Debian Bug Tracking System
Your message dated Wed, 28 Nov 2012 09:32:30 + with message-id and subject line Bug#694284: fixed in concordance 0.24-1.1 has caused the Debian Bug report #694284, regarding libconcord-dev: missing Breaks+Replaces: libconcord1-dev to be marked as done. This means that you claim that the probl