Bug#699724: radicale: Insufficient dependency on python-radicale

2013-02-10 Thread Salvatore Bonaccorso
Hi Jonas On Mon, Feb 11, 2013 at 05:37:06AM +0100, Jonas Smedegaard wrote: > Quoting Salvatore Bonaccorso (2013-02-10 21:26:46) > > Hi Jonas, Hi Martin > > > > On Mon, Feb 04, 2013 at 04:12:00AM +0100, Cyril Brulebois wrote: > > > Package: radicale > > > Version: 0.7-1 > > > Severity: serious > >

Bug#700050: closed by Kumar Appaiah (Bug#700050: fixed in flickcurl 1.23-1)

2013-02-10 Thread Kumar Appaiah
Hi. On Sun, Feb 10, 2013 at 08:25:10PM +0100, Jose Carlos Garcia Sogo wrote: > Thanks for taking care of this bug so soon. Only one question, > shouldn't have the name of the package have been changed? Hasn't the > soname of the lib changed? It has a new ABI. That is a good point. I have only upl

Bug#699724: radicale: Insufficient dependency on python-radicale

2013-02-10 Thread Jonas Smedegaard
Quoting Salvatore Bonaccorso (2013-02-10 21:26:46) > Hi Jonas, Hi Martin > > On Mon, Feb 04, 2013 at 04:12:00AM +0100, Cyril Brulebois wrote: > > Package: radicale > > Version: 0.7-1 > > Severity: serious > > Tags: patch > > Justification: dependency issue > > > > Hi, > > > > radicale depends on

Bug#698440: ruby-rack: CVE-2012-6109 CVE-2013-0184 CVE-2013-0183

2013-02-10 Thread Satoru KURASHIKI
hi, (CC: pkg-ruby-extras-maintainers) > > > BTW, I don't know these issues affect stable packages, > > > librack-ruby{,1.8,1.9.1}, ver. 1.1.0-4. > > > > I seem to need 0003-Reimplement-auth-scheme-fix.patch. > > Please consult about this to security team. > > Ok. I prepared a patch for stable ve

Bug#700226: Bug#700173: ruby-rack: CVE-2013-0262 and CVE-2013-0263

2013-02-10 Thread Satoru KURASHIKI
hi, (CC: pkg-ruby-extras-maintainers) I've contacted Youhei SASAKI (maintainer of ruby-rack, successor of librack-ruby), and acknowledged about preparing NMU for this bug. Please audit this patch, after that I will prepare NMU for squeeze. (and after that t-p-u, unstable, ...) On Sun, Feb 10, 20

Processed: Re: Bug#696386: makedumpfile fails with elf_readall error : more information

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 696386 1.5.1-1 Bug #696386 {Done: John Wright } [makedumpfile] makedumpfile fails with elf_readall error Marked as fixed in versions makedumpfile/1.5.1-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 696

Processed: Back to important

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 695221 important Bug #695221 [xcp-xapi] xcp-xapi: xe pif-reconfigure-ip doesn't work with non 255.255.255.0 subnet netmask Severity set to 'important' from 'serious' > End of message, stopping processing here. Please contact me if you n

Bug#695221: [Pkg-xen-devel] Bug#695221: confirmed bug, serious

2013-02-10 Thread Thomas Goirand
I don't think it's useful to bikeshed about the severity of an issue but... On 02/10/2013 11:45 PM, Daniel Pocock wrote: > It is serious because > > a) it makes the package and the whole system unusable for all but one > very specific network configuration (users with a /24) Using a /24 is all b

Bug#700268: marked as done (libhttpclient-java: overly broad certificate wildcard match)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Mon, 11 Feb 2013 01:32:32 + with message-id and subject line Bug#700268: fixed in httpcomponents-client 4.2.1-2 has caused the Debian Bug report #700268, regarding libhttpclient-java: overly broad certificate wildcard match to be marked as done. This means that you claim th

Processed: your mail

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tag 685812 + pending Bug #685812 {Done: Sébastien Villemot } [python-numpy] ABI change in 1.6.1 version Added tag(s) pending. > tag 685812 + pending Bug #685812 {Done: Sébastien Villemot } [python-numpy] ABI change in 1.6.1 version Ignoring requ

Processed: tagging 665199

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 665199 + squeeze Bug #665199 {Done: Michael Gilbert } [slapd] slapd: fails to install, remove, distupgrade, and install again Added tag(s) squeeze. > thanks Stopping processing here. Please contact me if you need assistance. -- 665199: htt

Bug#698582: [pkg-dhcp-devel] Bug#698582: isc-dhcp-client: prompting due to modified conffiles which were not modified by the user: /etc/dhcp/dhclient.conf

2013-02-10 Thread Andreas Beckmann
On 2013-02-10 22:55, Michael Gilbert wrote: > Thanks for the triage. i think the postinst in squeeze should have > been more careful: it should have copied dhcp3/dhclient.conf only if > it differed from lenny's default. So, shouldn't this get fixed in > squeeze-proposed-updates instead? That wil

Processed: fixed 697406 in 0.4.0-1

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 697406 0.4.0-1 Bug #697406 {Done: Javi Merino } [python-greenlet] python-greenlet FTBFS on armel in testing Marked as fixed in versions python-greenlet/0.4.0-1. > thanks Stopping processing here. Please contact me if you need assistance. -

Bug#699251: marked as done (python-eventlet: FTBFS: build-dependency not installable: python-greenlet (>= 0.3.1-2.1))

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 23:08:39 +0100 with message-id and subject line Re: python-eventlet: FTBFS: build-dependency not installable: python-greenlet (>= 0.3.1-2.1) has caused the Debian Bug report #699251, regarding python-eventlet: FTBFS: build-dependency not installable: python-g

Bug#698582: [pkg-dhcp-devel] Bug#698582: isc-dhcp-client: prompting due to modified conffiles which were not modified by the user: /etc/dhcp/dhclient.conf

2013-02-10 Thread Michael Gilbert
> Note that /etc/dhcp/dhclient.conf has the same md5sum as > /etc/dhcp3/dhclient.conf in the upgrade case, and a different one on > fresh squeeze installs. This is probably caused by > > if [ -z "$2" ]; then > if [ -e /etc/dhcp3/dhclient.conf ]; then > cp /etc/dhcp3/dhclient

Bug#699255: ruby-activeresource-2.3: diff for NMU version 2.3.14-2.1

2013-02-10 Thread Sebastian Ramacher
Control: tags -1 + patch pending Dear maintainer, I've prepared an NMU for ruby-activeresource-2.3 (versioned as 2.3.14-2.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. -- Sebastian Ramacher diff -Nru ruby-activeresource-2.3-2.3.14/debian/chan

Processed: ruby-activeresource-2.3: diff for NMU version 2.3.14-2.1

2013-02-10 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch pending Bug #699255 [src:ruby-activeresource-2.3] ruby-activeresource-2.3: FTBFS: test_load_yaml_array(BaseTest) fails Added tag(s) pending and patch. -- 699255: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699255 Debian Bug Tracking System Con

Bug#698910: zoneminder: arbitrary command execution vulnerability

2013-02-10 Thread Salvatore Bonaccorso
Hi James Disclaimer: Only did a quick check. On Sun, Feb 10, 2013 at 10:25:27AM -0500, James McCoy wrote: > Control: tag -1 patch > > On Sun, Jan 27, 2013 at 05:43:13PM +0100, Salvatore Bonaccorso wrote: > > Some additional information: In most usual cases where zoneminder is > > set up, there s

Bug#685812: marked as done (ABI change in 1.6.1 version)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 21:03:19 + with message-id and subject line Bug#685812: fixed in python-numpy 1:1.6.2-1.1 has caused the Debian Bug report #685812, regarding ABI change in 1.6.1 version to be marked as done. This means that you claim that the problem has been dealt with. I

Processed: Re: Security bugs affecting kfreebsd-8 in squeeze-backports

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # CVE-2012-4576 > found 694096 8.2-15~bpo60+1 Bug #694096 {Done: Christoph Egger } [kfreebsd-8] kfreebsd-8: CVE-2012-4576 There is no source info for the package 'kfreebsd-8' at version '8.2-15~bpo60+1' with architecture '' Unable to make a sour

Processed: Re: Security bugs affecting kfreebsd-8 in squeeze-backports

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 686961 Bug #686961 {Done: Christoph Egger } [kfreebsd-8] CVE-2012-3549: kfreebsd SCTP DoS Unarchived Bug 686961 > unarchive 677297 Bug #677297 {Done: GNU/kFreeBSD Maintainers } [kfreebsd-8] kfreebsd-8: cve-2012-0217 Unarchived Bug 6772

Bug#699724: radicale: Insufficient dependency on python-radicale

2013-02-10 Thread Salvatore Bonaccorso
Hi Jonas, Hi Martin On Mon, Feb 04, 2013 at 04:12:00AM +0100, Cyril Brulebois wrote: > Package: radicale > Version: 0.7-1 > Severity: serious > Tags: patch > Justification: dependency issue > > Hi, > > radicale depends on python-radicale, without a version. Partial upgrades > from squeeze can le

Processed (with 2 errors): Security bugs affecting kfreebsd-8 in squeeze-backports

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # CVE-2012-4576 > found 694096 8.2-15~bpo60+1 Bug #694096 {Done: Christoph Egger } [kfreebsd-8] kfreebsd-8: CVE-2012-4576 There is no source info for the package 'kfreebsd-8' at version '8.2-15~bpo60+1' with architecture '' Unable to make a sour

Bug#700050: closed by Kumar Appaiah (Bug#700050: fixed in flickcurl 1.23-1)

2013-02-10 Thread Jose Carlos Garcia Sogo
Thanks for taking care of this bug so soon. Only one question, shouldn't have the name of the package have been changed? Hasn't the soname of the lib changed? It has a new ABI. Thanks On Sun, Feb 10, 2013 at 8:21 PM, Debian Bug Tracking System wrote: > This is an automatic notification regarding

Bug#700050: marked as done (libflickcurl0: New version available (and needed for new oAuth scheme))

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 19:17:33 + with message-id and subject line Bug#700050: fixed in flickcurl 1.23-1 has caused the Debian Bug report #700050, regarding libflickcurl0: New version available (and needed for new oAuth scheme) to be marked as done. This means that you claim that

Processed: your mail

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reassign 697172 src:webkit Bug #697172 [libwebkitgtk-3.0-0] ia64 (Itanium), sporadic crashes of epiphany browser due to a thread-unsafe favicon database Bug reassigned from package 'libwebkitgtk-3.0-0' to 'src:webkit'. No longer marked as found i

Bug#679347: marked as done (evolution: Local mbox files inaccessible after upgrade/migration)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 19:02:50 + with message-id and subject line Bug#640851: fixed in evolution-data-server 3.4.4-3 has caused the Debian Bug report #640851, regarding evolution: Local mbox files inaccessible after upgrade/migration to be marked as done. This means that you cla

Bug#640851: marked as done (evolution: Local mbox files inaccessible after upgrade/migration)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 19:02:50 + with message-id and subject line Bug#640851: fixed in evolution-data-server 3.4.4-3 has caused the Debian Bug report #640851, regarding evolution: Local mbox files inaccessible after upgrade/migration to be marked as done. This means that you cla

Processed (with 2 errors): your mail

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forcemerge 651636 673469 688640 Bug #651636 [libwebkitgtk-1.0-0] GtkLauncher segfaults on mipsel, JavaScript-related Unable to merge bugs because: package of #673469 is 'libwebkitgtk-3.0-0' not 'libwebkitgtk-1.0-0' package of #688640 is 'libjavas

Processed: bug 700268 is forwarded to https://issues.apache.org/jira/browse/HTTPCLIENT-1255

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 700268 https://issues.apache.org/jira/browse/HTTPCLIENT-1255 Bug #700268 [libhttpclient-java] libhttpclient-java: overly broad certificate wildcard match Set Bug forwarded-to-address to 'https://issues.apache.org/jira/browse/HTTPCLIENT

Bug#700268: libhttpclient-java: overly broad certificate wildcard match

2013-02-10 Thread Helmut Grohne
Package: libhttpclient-java Version: 4.2.1-1 Severity: grave Tags: security In the version above the common name match of the certificate check was rewritten. So the versions in squeeze and wheezy are not affected. The rewritten version contains a bug (uses length of wrong object) and thereby acce

Processed: Re: Bug#700261: live-config-systemd: fails to install: Operation failed: Invalid argument

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tag 700261 pending Bug #700261 [live-config-systemd] live-config-systemd: fails to install: Operation failed: Invalid argument Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 700261: http://

Processed: bug 640851 is forwarded to https://bugzilla.gnome.org/show_bug.cgi?id=692315

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 640851 https://bugzilla.gnome.org/show_bug.cgi?id=692315 Bug #640851 [evolution] evolution: Local mbox files inaccessible after upgrade/migration Bug #679347 [evolution] evolution: Local mbox files inaccessible after upgrade/migration

Bug#700076: [Pkg-ime-devel] Bug#700076: Bug#700076: Bug#700076: Bug#700076: ibus: non-functional, setup breaks

2013-02-10 Thread Aron Xu
On Mon, Feb 11, 2013 at 02:32:28AM +0900, Changwoo Ryu wrote: > > It depends on the behavior of python-gobject 3.4.x in experimental. > > A workaround is to use the patch by Fedora guys: > > https://bugzilla.redhat.com/show_bug.cgi?id=854161 > https://bugzilla.redhat.com/attachment.cgi?id=61168

Bug#700261: live-config-systemd: fails to install: Operation failed: Invalid argument

2013-02-10 Thread Daniel Baumann
tag 700261 oending thanks this has been fixed in git yesterday already, just not uploaded yet.. -- Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern Email: daniel.baum...@progress-technologies.net Internet: http://people.progress-technologies.net/~daniel.baumann/ --

Bug#700261: live-config-systemd: fails to install: Operation failed: Invalid argument

2013-02-10 Thread Andreas Beckmann
Package: live-config-systemd Version: 3.0.19-1 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package failed to install. As per definition of the release team this makes the package too buggy for a release, thus the severity.

Bug#700076: [Pkg-ime-devel] Bug#700076: Bug#700076: Bug#700076: ibus: non-functional, setup breaks

2013-02-10 Thread Changwoo Ryu
2013/2/9 Aron Xu : > Hi Norbert, > > Can you please try to run "dconf update" as root? As to see whether a > file named /etc/dconf/db/ibus get created. After running "dconf update" I got a new kind of crash: $ ibus-setup Traceback (most recent call last): File "/usr/share/ibus/setup/main.py", l

Bug#698582: isc-dhcp-client: prompting due to modified conffiles which were not modified by the user: /etc/dhcp/dhclient.conf

2013-02-10 Thread gregor herrmann
Control: tag -1 + confirmed patch On Sun, 20 Jan 2013 18:42:41 +0100, Andreas Beckmann wrote: > >>From the attached log (scroll to the bottom...): > > Setting up isc-dhcp-client (4.2.2.dfsg.1-5+deb70u2) ... > Installing new version of config file > /etc/dhcp/dhclient-enter-hooks.d/debug ...

Processed: Re: Bug#698582: isc-dhcp-client: prompting due to modified conffiles which were not modified by the user: /etc/dhcp/dhclient.conf

2013-02-10 Thread Debian Bug Tracking System
Processing control commands: > tag -1 + confirmed patch Bug #698582 [isc-dhcp-client] isc-dhcp-client: prompting due to modified conffiles which were not modified by the user: /etc/dhcp/dhclient.conf Added tag(s) confirmed and patch. -- 698582: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=6

Bug#700076: [Pkg-ime-devel] Bug#700076: Bug#700076: Bug#700076: ibus: non-functional, setup breaks

2013-02-10 Thread YunQiang Su
This will happen when ibus-daemon is running while ibus-dconf not. On Sun, Feb 10, 2013 at 4:09 PM, Aron Xu wrote: > On Sun, Feb 10, 2013 at 2:21 AM, Norbert Preining wrote: >> On Sa, 09 Feb 2013, Aron Xu wrote: >>> > But there are still three problems I see: >>> > - when *left*clicking on the i

Processed: 686484 is important

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 686484 important Bug #686484 {Done: Simon Kelley } [dnsmasq] chowning pid directory and writing there as root may lead to security issue Severity set to 'important' from 'serious' > thanks Stopping processing here. Please contact me if

Processed: serious bug with networking

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 695221 serious Bug #695221 [xcp-xapi] xcp-xapi: xe pif-reconfigure-ip doesn't work with non 255.255.255.0 subnet netmask Severity set to 'serious' from 'normal' > thanks Stopping processing here. Please contact me if you need assistance

Bug#693208: Bug#699899: tpu: clang/3.0-6.1+deb7u0

2013-02-10 Thread Michael Stapelberg
Hi Adam, "Adam D. Barratt" writes: > Hmm, presumably it worked at some point, given there are armhf binaries > in unstable. :-( Ack. My guess is that it worked with gcc 4.6. > Given that 3.1 appears never to have managed to build on several > architectures in unstable (a regression in each case)

Bug#698910: zoneminder: arbitrary command execution vulnerability

2013-02-10 Thread James McCoy
Control: tag -1 patch On Sun, Jan 27, 2013 at 05:43:13PM +0100, Salvatore Bonaccorso wrote: > Some additional information: In most usual cases where zoneminder is > set up, there should be authentication first. So this limits somehow > the vulnerability. The attached patch should address the issu

Processed: Re: Bug#698910: zoneminder: arbitrary command execution vulnerability

2013-02-10 Thread Debian Bug Tracking System
Processing control commands: > tag -1 patch Bug #698910 [src:zoneminder] zoneminder: CVE-2013-0232: arbitrary command execution vulnerability Added tag(s) patch. -- 698910: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698910 Debian Bug Tracking System Contact ow...@bugs.debian.org with prob

Bug#699890: marked as done (syslinux breakage causes i386/amd64 boot failure)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699890: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699890, regarding syslinux breakage causes i386/amd64 boot failure to be marked as done. This means that you claim that the prob

Bug#699884: marked as done (debian-cd: 2013-02-04 i386 weekly builds are unable to boot)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699884: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699884, regarding debian-cd: 2013-02-04 i386 weekly builds are unable to boot to be marked as done. This means that you claim th

Bug#699382: marked as done (update for syslinux 5.x)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699596: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699596, regarding update for syslinux 5.x to be marked as done. This means that you claim that the problem has been dealt with.

Bug#699596: marked as done (update for syslinux 5.x)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699596: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699596, regarding update for syslinux 5.x to be marked as done. This means that you claim that the problem has been dealt with.

Bug#699596: marked as done (update for syslinux 5.x)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699382: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699382, regarding update for syslinux 5.x to be marked as done. This means that you claim that the problem has been dealt with.

Bug#699382: marked as done (update for syslinux 5.x)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:03:01 + with message-id and subject line Bug#699382: fixed in syslinux 3:4.05+dfsg-6+deb7u2 has caused the Debian Bug report #699382, regarding update for syslinux 5.x to be marked as done. This means that you claim that the problem has been dealt with.

Bug#699267: marked as done (ircd-hybrid: CVE-2013-0238 Denial of service vulnerability in hostmask.c:try_parse_v4_netmask())

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 15:02:05 + with message-id and subject line Bug#699267: fixed in ircd-hybrid 1:7.2.2.dfsg.2-6.2+squeeze1 has caused the Debian Bug report #699267, regarding ircd-hybrid: CVE-2013-0238 Denial of service vulnerability in hostmask.c:try_parse_v4_netmask() to b

Bug#547092: [Pkg-nagios-devel] Bug#547092: Bug#547092: Bug#547092: nrpe ssl security problem

2013-02-10 Thread Alexander Wirt
On Sun, 10 Feb 2013, Thijs Kinkhorst wrote: > Hi Alex, > > > > All agreed... but would you consider to add some big warnings about that > > > fact? :) > > Thats something for the release notes or readme.debian. Feel free to send a > > patch. > > I do not believe the issue should mean that NRPE

Bug#681830: gdm3: spawns X continuously when gnome-session dies

2013-02-10 Thread Sébastien Villemot
Control: tags -1 + patch First, I verified that the bug is not present in vanilla GDM3. It is introduced by the patches about transient displays and switch_on_finish property. More precisely, the problem is introduced by 21_static_display_purge.patch. In the "finish" method of GdmStaticDisplay, t

Processed: Re: Bug#681830: gdm3: spawns X continuously when gnome-session dies

2013-02-10 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch Bug #681830 [gdm3] gdm3: spawns X continuously when gnome-session dies Added tag(s) patch. -- 681830: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681830 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE,

Processed: found 700002 in 7.26.0-1, found 700002 in 7.28.0-3, found 700002 in 7.28.1-1

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 72 7.26.0-1 Bug #72 [curl] curl: CVE-2013-0249 Marked as found in versions curl/7.26.0-1. > found 72 7.28.0-3 Bug #72 [curl] curl: CVE-2013-0249 Marked as found in versions curl/7.28.0-3. > found 72 7.28.1-1 Bug #72 [

Bug#700169: non-free license: requires to obey US export regulation even when not in the US

2013-02-10 Thread Ivo De Decker
Hi Ansgar, On Sat, Feb 09, 2013 at 01:30:12PM +0100, Ansgar Burchardt wrote: > Package: src:acpica-unix > Version: 20100528-1 > Severity: serious > > The last condition in debian/copyright looks non-free: The copyright file also states: "License: Dual GPLv2/ACPICA Licence" On the website (http

Bug#547092: [Pkg-nagios-devel] Bug#547092: Bug#547092: nrpe ssl security problem

2013-02-10 Thread Thijs Kinkhorst
Hi Alex, > > All agreed... but would you consider to add some big warnings about that > > fact? :) > Thats something for the release notes or readme.debian. Feel free to send a > patch. I do not believe the issue should mean that NRPE is so critically flawed that it should be removed from Wheez

Bug#694352: Bug#699915: tpu: lcdf-typetools/2.92+dfsg1-1.1

2013-02-10 Thread Michael Stapelberg
Hi, I have uploaded lcdf-typetools 2.92+dfsg1-0.1 to DELAYED/2, so that we have some time to cancel it depending on the reply to #699915 :). -- Best regards, Michael -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas..

Bug#699887: Security fix for #699887, CVE-2013-0169

2013-02-10 Thread Roland Stigge
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On 10/02/13 12:33, Giuseppe Iuculano wrote: > On 07/02/2013 22:58, Roland Stigge wrote: >> I prepared a security upload for stable (attached debdiff). >> Should I upload it to stable-security(security-master)? > > Thanks for contacting us. please

Bug#694301: marked as done (gnome-settings-daemon: ibus integration makes ibus useless)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 12:32:36 + with message-id and subject line Bug#694301: fixed in gnome-control-center 1:3.6.3-1 has caused the Debian Bug report #694301, regarding gnome-settings-daemon: ibus integration makes ibus useless to be marked as done. This means that you claim th

Bug#700237: packagekit: Please add a Breaks against libpackagekit-glib2-14

2013-02-10 Thread Matthias Klumpp
2013/2/10 Laurent Bigonville : > [...] > It seems that in the 0.8, the DBus API has changed in an incompatible > way from 0.7 series. > > The GetTid() method has been renamed to CreateTransaction() > > org.freedesktop.DBus.Error.UnknownMethod: No such method `GetTid' > > To handle this, you should

Bug#700234: CVE request: Transmission can be made to crash remotely

2013-02-10 Thread Yves-Alexis Perez
On dim., 2013-02-10 at 11:50 +0100, Josselin Mouette wrote: > Package: transmission-daemon > Version: 2.52-3 > Severity: grave > Tags: security patch upstream > Justification: user security hole > > The transmission-daemon package in wheezy crashes regularly. According > to upstream this is a rem

Bug#700202: [Pkg-utopia-maintainers] Bug#700202: avahi-daemon: Undeclared dbus dependency

2013-02-10 Thread Bjartur Thorlacius
On 02/09/2013 10:34 PM, Michael Biebl wrote: Just a guess: you disabled the service from starting at boot? Theoretically, the service should still start on demand. What does ls -la/etc/rc?.d/???dbus say? lrwxrwxrwx 1 root root 14 Oct 9 21:03 /etc/rc2.d/K01dbus -> ../init.d/dbus lrwxrwxrwx 1 r

Bug#700237: packagekit: Please add a Breaks against libpackagekit-glib2-14

2013-02-10 Thread Laurent Bigonville
Package: packagekit Version: 0.8.4-1 Severity: serious Hi, It seems that in the 0.8, the DBus API has changed in an incompatible way from 0.7 series. The GetTid() method has been renamed to CreateTransaction() org.freedesktop.DBus.Error.UnknownMethod: No such method `GetTid' To handle this, yo

Bug#699887: Security fix for #699887, CVE-2013-0169

2013-02-10 Thread Giuseppe Iuculano
Hi Roland, On 07/02/2013 22:58, Roland Stigge wrote: > I prepared a security upload for stable (attached debdiff). Should I > upload it to stable-security(security-master)? Thanks for contacting us. please upload to security-master (please make sure to include the .orig.tar.gz in the upload, -sa

Bug#700234: transmission-daemon: Transmission can be made to crash remotely

2013-02-10 Thread Josselin Mouette
Package: transmission-daemon Version: 2.52-3 Severity: grave Tags: security patch upstream Justification: user security hole The transmission-daemon package in wheezy crashes regularly. According to upstream this is a remote security hole (at least a remote DoS, but most probably there is a way

Bug#687952: ffgtk: does not start

2013-02-10 Thread Bernd Knorke
Hello Rolf, today I got the same issues in sid, as I tried to install and use ffgtk. Could you please send me the update? Is there any workaround? Like using ffgtk out of Experimental or testing? Thanks and kind regards, Bernd Knorke -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@list

Bug#675295: marked as done (matanza: FTBFS in experimental: format not a string literal and no format arguments)

2013-02-10 Thread Debian Bug Tracking System
Your message dated Sun, 10 Feb 2013 09:47:34 + with message-id and subject line Bug#675295: fixed in matanza 0.13+ds1-3 has caused the Debian Bug report #675295, regarding matanza: FTBFS in experimental: format not a string literal and no format arguments to be marked as done. This means tha

Processed: archiving 686764

2013-02-10 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > archive 686764 Bug #686764 {Done: Bastian Blank } [xen] xen: Multiple security issues archived 686764 to archive/64 (from 686764) > thanks Stopping processing here. Please contact me if you need assistance. -- 686764: http://bugs.debian.org/cgi

Bug#695422: ntop: links with both libssl and libgdbm and is mainly GPL-licensed without linking exception

2013-02-10 Thread Francesco Poli
On Sun, 10 Feb 2013 09:57:02 +0100 Giovanni Rapagnani wrote: [...] > On 09/02/13 19:04, Francesco Poli wrote: > > I hope that the package is still significantly useful without SSL > > support. I assume you checked that, of course... > > I asked the Ntop mailing list if using the --wihtout-ssl wou

Bug#695422: ntop: links with both libssl and libgdbm and is mainly GPL-licensed without linking exception

2013-02-10 Thread Giovanni Rapagnani
Dear Francesco, On 09/02/13 19:04, Francesco Poli wrote: > I hope that the package is still significantly useful without SSL > support. I assume you checked that, of course... I asked the Ntop mailing list if using the --wihtout-ssl would only turn off the https option for accessing the Ntop web

Bug#700076: [Pkg-ime-devel] Bug#700076: Bug#700076: ibus: non-functional, setup breaks

2013-02-10 Thread Aron Xu
On Sun, Feb 10, 2013 at 2:21 AM, Norbert Preining wrote: > On Sa, 09 Feb 2013, Aron Xu wrote: >> > But there are still three problems I see: >> > - when *left*clicking on the icon in the gnome top bar, a window pops up >> > which has two part: >> > upper part: configuration for the input