Source: libxalan2-java
Severity: grave
Tags: security upstream fixed-upstream
Hi,
the following vulnerability was published for libxalan2-java, could
you please verify.
CVE-2014-0107[0]:
Xalan-Java insufficient secure processing
If you fix the vulnerability please also make sure to include the
Your message dated Tue, 25 Mar 2014 05:33:23 +
with message-id
and subject line Bug#741755: fixed in ca-certificates-java 20140324
has caused the Debian Bug report #741755,
regarding ca-certificates-java: FTBFS: Tests failures
to be marked as done.
This means that you claim that the problem
Your message dated Tue, 25 Mar 2014 04:34:16 +
with message-id
and subject line Bug#724922: fixed in geda-gaf 1:1.8.2-3
has caused the Debian Bug report #724922,
regarding geda-gaf: FTBFS: dh_auto_test fork bombs
to be marked as done.
This means that you claim that the problem has been dealt
Package: geda-gaf
Version: 1:1.8.2-2
Followup-For: Bug #724922
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu trusty ubuntu-patch
In Ubuntu, the attached patch was applied to achieve the following:
* Switch to dh_autoreconf to update libtool macros for new ports.
* Re-enable tes
tags 742189 + pending
thanks
On Thu, 20 Mar 2014, Holger Levsen wrote:
> dpkg: error processing archive
> /var/cache/apt/archives/texlive-omega_2013.20140314-1_all.deb (--unpack):
> trying to overwrite '/usr/share/texlive/texmf-dist/omega/ocp/misc/id.ocp',
> which is also in package texlive-bas
Package: src:gnat-4.6
Followup-For: Bug #713124
Control: tag -1 pending
gcc-4.6.4-6 resolves both dependency problems. Next gnat-4.6 upload
will contain the changes.
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...
Processing commands for cont...@bugs.debian.org:
> severity 742113 serious
Bug #742113 [rsyslog] rsyslog: logs many "rsyslogd-2007: action 'action 17'
suspended" messages
Bug #742143 [rsyslog] rsyslogd-2007: action 'action 17' suspended, next retry
is ...
Severity set to 'serious' from 'normal'
Source: libdispatch
Version: 0~svn197-3.3
Severity: serious
Justification: FTBFS
[ Last two NMUers in X-D-Cc. ]
Hi,
your package FTBFS on powerpc, where it seems to have built by luck
in 0~svn197-3.2 on porpora:
https://buildd.debian.org/status/logs.php?pkg=libdispatch&arch=powerpc
Log excerp
In the absence of any other suggestions, I've filed
http://bugs.debian.org/742544 to request removal of the binaries from
the architectures where zookeeper fails to build. Once that's done,
I'll drop the severity of this bug.
Kind regards,
On 24 March 2014 06:29, Ivo De Decker wrote:
> Hi Tim,
On Wed, Mar 19, 2014 at 08:59:44 +0100, Mathieu Malaterre wrote:
> Will be fixed when 1.5.2 comes out.
Is there an ETA? It'd be nice to not wait too long to fix this bug, as
currently this blocks the transition of openjpeg and its rdeps to
jessie.
Cheers,
Julien
signature.asc
Description: Dig
Control: tags -1 + patch pending
Dear Maintainer,
Le mardi 04 mars 2014 à 21:02 +0100, Sébastien Villemot a écrit :
> Le mardi 04 mars 2014 à 18:07 +0100, Julien Cristau a écrit :
> > On Tue, Mar 4, 2014 at 17:55:23 +0100, Sébastien Villemot wrote:
> >
> > > There seem to be several package (a
Processing control commands:
> tags -1 + patch pending
Bug #740620 [src:scalapack] scalapack: should not silently change the library
SONAME when MPI implementation changes
Added tag(s) pending and patch.
--
740620: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740620
Debian Bug Tracking Syst
Hi!
As a workaround, update to mate-desktop-common >= 1.8, i.e. the version
from sid.
So the smaller bug here is a missing version dependency between the two.
I'd say a larger bug is that such a failure mode exists - the actual
error printed by mate-settings-daemon is
(mate-settings-dae
This thread on international user list might serve as reference:
https://lists.debian.org/debian-user/2014/03/msg01313.html
This system is a mix of jessie and sid, grub2 was on version
2.02~beta2-7, same as OP. Filesystem is ext4. System installed using
default guided lvm partition scheme with /b
Processing commands for cont...@bugs.debian.org:
> reassign 742405 src:zookeeper 3.4.5+dfsg-1
Bug #742405 [zookeeper] zookeeper: ftbfs on kfreebsd
Bug reassigned from package 'zookeeper' to 'src:zookeeper'.
No longer marked as found in versions zookeeper/3.4.5+dfsg-1.
Ignoring request to alter fix
On Mon, Mar 24, 2014 at 04:46:02PM -0300, Miguel Landaeta wrote:
> I believe a DSA is not necessary for those CVEs.
>
I want to rectify on this. I think a DSA is necessary because the fix
for CVE-2014-0054 addresses an incomplete fix for CVE-2013-4152 /
CVE-2013-6429 and some of those vulnerabili
Your message dated Mon, 24 Mar 2014 21:24:03 +
with message-id
and subject line Bug#741604: fixed in libspring-java 3.0.6.RELEASE-13
has caused the Debian Bug report #741604,
regarding libspring-java: Multiple security issues
to be marked as done.
This means that you claim that the problem ha
Source: resiprocate
Version: 1.9.3-1
Severity: serious
Hi,
the amd64 build of resiprocate, which you uploaded, is linked against
libdb5.1++. That means it was built against libdb++-dev predating the
upload of db-defaults 5.3.0 to unstable, which happened two months ago.
This is not ok. Please a
Hi,
El Lunes, 24 de marzo de 2014 19:44:53 Alastair McKinstry escribió:
> Hi David,
>
> I cannot reproduce this error on AMD64, even in pbuilder.
> From the logs, it appears as though it must get different output from tclsh
> than I see. Can you reproduce this? If so, can you create a chroot
> I
David Coutadeur wrote:
> Package: liblasso-perl
> Version: 2.3.6-2
> Severity: grave
> Justification: renders package unusable
>
> When using perl Lasso binding on Debian wheezy 32bits,
> I get this error message:
> PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e"
> "test_harness(0,
Hi David,
I cannot reproduce this error on AMD64, even in pbuilder.
>From the logs, it appears as though it must get different output from tclsh
than I see. Can you reproduce this? If so, can you create a chroot
I can test, etc?
The configure I have (appears to be the same as in the logs) shows
Processing commands for cont...@bugs.debian.org:
> owner 741604 !
Bug #741604 [libspring-java] libspring-java: Multiple security issues
Owner recorded as Miguel Landaeta .
> tags 741604 + confirmed
Bug #741604 [libspring-java] libspring-java: Multiple security issues
Added tag(s) confirmed.
> than
owner 741604 !
tags 741604 + confirmed
thanks
On Fri, Mar 14, 2014 at 01:24:47PM +0100, Moritz Muehlenhoff wrote:
> Package: libspring-java
> Severity: grave
> Tags: security
> Justification: user security hole
>
> http://www.gopivotal.com/security/cve-2014-0054
> http://www.gopivotal.com/securit
Thanks, it works with ownclouds://. Is there any documentation about
this URL scheme?
Meutel
Le 21/03/2014 16:09, Sandro Knauß a écrit :
Hey,
it is a upstream bug. But is should work if you use the correct url :)
instead of:
https://cloud.meutel.net/index.php/apps/files?dir=/Sync/
use thi
Package: liblasso-perl
Version: 2.3.6-2
Severity: grave
Justification: renders package unusable
When using perl Lasso binding on Debian wheezy 32bits,
I get this error message:
PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0,
'blib/lib', 'blib/arch')" t/*.t
t/Lasso.
I can confirm this bug as well. STARTTLS is broken, IMAP over SSL (993)
works ok. Rolling back to stable did the trick for the moment.
Best,
Paul
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
tag 739809 + pending
thanks
Some bugs in the libgtk2-perl package are closed in revision
23993de23de2728ebd8c2aae4235567e56d66fc7 in branch 'master' by gregor
herrmann
The full diff can be seen at
http://anonscm.debian.org/gitweb/?p=pkg-perl/packages/libgtk2-perl.git;a=commitdiff;h=23993de
Commi
On Mon, 24 Mar 2014 12:03:27 +, Colin Watson wrote:
> On Mon, Feb 24, 2014 at 12:25:26PM +0100, intrigeri wrote:
> > Both distributions have the same version of libgtk2, but testing has
> > gdk-pixbuf 2.28.2, while unstable has 2.30.5. I suspect the gdk-pixbuf
> > update is the cause of the is
Your message dated Mon, 24 Mar 2014 18:03:41 +
with message-id
and subject line Bug#739809: fixed in libgtk2-perl 2:1.249-2
has caused the Debian Bug report #739809,
regarding libgtk2-perl: FTBFS: Test failure
to be marked as done.
This means that you claim that the problem has been dealt wit
Processing commands for cont...@bugs.debian.org:
> tag 739809 + pending
Bug #739809 [src:libgtk2-perl] libgtk2-perl: FTBFS: Test failure
Added tag(s) pending.
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
739809: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
Package: tesseract-ocr
Version: 3.03.02-3
I can't reproduce this. Please run ldd and md5sum on /usr/bin/tesseract
and report the results.
===
$ curl
http://ftp.us.debian.org/debian/pool/main/t/tesseract/tesseract-ocr_3.03.02-3_i386.deb>
foo.deb
$ ar x foo.deb
$ tar xJvf data.tar.xz
$ ldd usr/bin
Your message dated Mon, 24 Mar 2014 17:03:38 +
with message-id
and subject line Bug#742259: fixed in dynare 4.4.2-2
has caused the Debian Bug report #742259,
regarding dynare-matlab: Missing dependency libmatio-dev
to be marked as done.
This means that you claim that the problem has been deal
Processing commands for cont...@bugs.debian.org:
> tag 742259 pending
Bug #742259 [dynare-matlab] dynare-matlab: Missing dependency libmatio-dev
Added tag(s) pending.
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
742259: http://bugs.debian.org/cgi-bin/bugreport.
Package: blktap-dkms
Version: 2.0.93-0.1
Severity: serious
Justification: fails to build from source (but built successfully in the past)
blktap fails to build on kernel 3.13 and probably older kernels as well.
According to this bug:
https://bugs.launchpad.net/ubuntu/+source/blktap-dkms/+bug/12
tag 742259 pending
thanks
Date: Mon Mar 24 17:41:15 2014 +0100
Author: Sébastien Villemot
Commit ID: 69980ea62ab2fd67f397881ee39c0d2ccaf5df49
Commit URL:
http://anonscm.debian.org/gitweb/?p=pkg-octave/dynare.git;a=commitdiff;h=69980ea62ab2fd67f397881ee39c0d2ccaf5df49
Patch URL:
http://anonscm.
Your message dated Mon, 24 Mar 2014 16:49:31 +
with message-id
and subject line Bug#741811: fixed in libfreemarker-java 2.3.20-2
has caused the Debian Bug report #741811,
regarding libfreemarker-java: FTBFS:java.io.FileNotFoundException:
/sbuild-nonexistent/.ivy2/cache/resolved-org.freema
Processing control commands:
> severity -1 serious
Bug #742259 [dynare-matlab] dynare-matlab: Missing dependency libmatio-dev
Severity set to 'serious' from 'important'
--
742259: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742259
Debian Bug Tracking System
Contact ow...@bugs.debian.org wit
Your message dated Mon, 24 Mar 2014 16:19:07 +
with message-id
and subject line Bug#741819: fixed in gcl 2.6.10-2
has caused the Debian Bug report #741819,
regarding gcl: FTBFS: gcl_readline.d:472:39: error: 'CPPFunction' undeclared
(first use in this function)
to be marked as done.
This mea
Your message dated Mon, 24 Mar 2014 16:04:52 +
with message-id
and subject line Bug#742506: fixed in resiprocate 1.9.3-1
has caused the Debian Bug report #742506,
regarding fails to send any outbound media on non-TURN sockets
to be marked as done.
This means that you claim that the problem ha
On Mon, Mar 24, 2014 at 11:06 AM, Olivier Berger
wrote:
> Hi.
>
> On Mon, Nov 11, 2013 at 12:58:00PM +1100, Darren Tucker wrote:
>> Workaround: comment out this line in /etc/pam.d/ssh:
>>
>> session required pam_loginuid.so
>
> Would you care commenting on how this helps, and what the side effects
Your message dated Mon, 24 Mar 2014 15:38:31 +
with message-id
and subject line Bug#738403: fixed in oauth-signpost 1.2.1.2-1.2
has caused the Debian Bug report #738403,
regarding oauth-signpost: FTBFS: Install errors
to be marked as done.
This means that you claim that the problem has been d
Processing commands for cont...@bugs.debian.org:
> tags 687082 moreinfo
Bug #687082 [ca-certificates-java] ca-certificates-java: NoClassDefFounderror
during installation
Added tag(s) moreinfo.
> tags 539283 - moreinfo + wontfix
Bug #539283 [ca-certificates-java] ca-certificates-java: keytool fail
Package: python-rgain
Version: 1.2-1
Severity: serious
Dear Maintainer,
collectiongain (amd replaygain) doesn't work at all :
Dispatching jobs ...
Now waiting for results ...
Unfortunately, there were some errors:
10cc - The original soundtrack: Calculating Replay Gain information ...
Musique/
Hi.
On Mon, Nov 11, 2013 at 12:58:00PM +1100, Darren Tucker wrote:
> Workaround: comment out this line in /etc/pam.d/ssh:
>
> session required pam_loginuid.so
>
Would you care commenting on how this helps, and what the side effects could be
?
FWIW, I'm experiencing a similar issue inside a do
Package: libresiprocate-turn-client-1.9
Version: 1.9.2-2
Severity: serious
When reTurn client sockets are used in an application where TURN is not
always required (e.g. with ICE), the TURN socket object is still used
for sending/receiving with a non-TURN peer.
In these situations, it fails to sen
control: tags -1 +unreproducible
Hi,
I cannot reproduce this FTBFS on i386/amd64 cowbuilder, so tag it.
--
Regards,
Hideki Yamane henrich @ debian.or.jp/org
http://wiki.debian.org/HidekiYamane
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsu
Processing control commands:
> tags -1 +unreproducible
Bug #741849 [src:aolserver4-nsmysql] aolserver4-nsmysql: FTBFS:
nsthread.h:129:17: fatal error: tcl.h: No such file or directory
Added tag(s) unreproducible.
--
741849: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741849
Debian Bug Trac
severity 705319 normal
Am 24.03.2014 15:48, schrieb Debian Bug Tracking System:
> Processing commands for cont...@bugs.debian.org:
>
>> #Breaks gnome-control-center, can't change hostname
>> severity 705319 critical
> Bug #705319 [systemd] systemd: Recommend or depend on libnss-myhostname
> Severi
Hi,
Just set "Build-Depends: python3-all" would avoid this FTBFS but I'm
not sure it's enough or not...
--
Regards,
Hideki Yamane henrich @ debian.or.jp/org
http://wiki.debian.org/HidekiYamane
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsu
Processing commands for cont...@bugs.debian.org:
> severity 705319 normal
Bug #705319 [systemd] systemd: Recommend or depend on libnss-myhostname
Severity set to 'normal' from 'critical'
> Am 24.03.2014 15:48, schrieb Debian Bug Tracking System:
Unknown command or malformed arguments to command.
>
Processing commands for cont...@bugs.debian.org:
> #Breaks gnome-control-center, can't change hostname
> severity 705319 critical
Bug #705319 [systemd] systemd: Recommend or depend on libnss-myhostname
Severity set to 'critical' from 'normal'
>
End of message, stopping processing here.
Please con
LaMont Jones (2014-03-24):
> tag 741285 + moreinfo
> --
>
> I'll need someone with kfreebsd to provide a patch.
>
> lamont
Quoting my initial report:
> Please direct any questions to debian-bsd@ (X-d-cc'd), I was just
> passing by. :)
so adding debian-bsd@ to the loop…
Topic is bind9's FTBFS:
Your message dated Mon, 24 Mar 2014 13:00:07 +
with message-id
and subject line Bug#639993: fixed in pydot 1.0.28-1
has caused the Debian Bug report #639993,
regarding python-pydot: Crash during DOT string conversion
to be marked as done.
This means that you claim that the problem has been de
Processing commands for cont...@bugs.debian.org:
> tag 741285 + moreinfo
Bug #741285 [src:bind9] bind9: FTBFS on kfreebsd: linking errors
Added tag(s) moreinfo.
> --
Stopping processing here.
Please contact me if you need assistance.
--
741285: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=74
tag 741285 + moreinfo
--
I'll need someone with kfreebsd to provide a patch.
lamont
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Processing commands for cont...@bugs.debian.org:
> found 742493 2.1.2-1+b1
Bug #742493 [postgresql-9.3-pgmemcache] Segfault with libmemcached11
Ignoring request to alter found versions of bug #742493 to the same values
previously set
> thanks
Stopping processing here.
Please contact me if you ne
Package: postgresql-9.3-pgmemcache
Version: 2.1.2-1+b1
Severity: grave
The binnum to update the dependency from libmemcached10 to
libmemcached11 seems to have broken the PostgreSQL module:
http://ci.debian.net/data/unstable-amd64/packages/p/pgmemcache/2014-03-23.log
Also in my chroot:
test init
Hi,
On Thu, Mar 20, 2014 at 04:00:03PM +, Ximin Luo wrote:
> On 20/03/14 15:32, Guido Günther wrote:
> > Hi,
> > On Thu, Mar 20, 2014 at 12:17:16PM +, Ximin Luo wrote:
> >> Hi,
> >>
> >> This is a bit weird - I am also running iceweasel 24.3.0 and it works
> >> fine for me. Those warnings y
On Mon, Feb 24, 2014 at 12:25:26PM +0100, intrigeri wrote:
> Salvatore Bonaccorso wrote (23 Feb 2014 07:14:09 GMT) :
> > One further information: The build does not fail (yet) in jessie.
>
> Both distributions have the same version of libgtk2, but testing has
> gdk-pixbuf 2.28.2, while unstable ha
Processing commands for cont...@bugs.debian.org:
> tags 739789 + upstream
Bug #739789 [php5-xcache] causes Apache segfaults
Ignoring request to alter tags of bug #739789 to the same tags previously set
> forwarded 739789 http://xcache.lighttpd.net/ticket/338
Bug #739789 [php5-xcache] causes Apache
On 03/17/2014 03:25 AM, Thomas L Marshall wrote:
> Package: courier-maildrop
> Version: 0.73.1-1
> Severity: grave
> Tags: d-i
> Justification: renders package unusable
>
> Dear Maintainer,
>
> After upgrading to courier-maildrop_0.73.1-1_amd64.deb, my email server begin
> bouncing messages with
Processing commands for cont...@bugs.debian.org:
> tags 740995 + sid jessie
Bug #740995 [gimp-plugin-registry] gimp-plugin-registry: depends on unavailble
packages
Added tag(s) sid and jessie.
> tags 740988 + sid jessie
Bug #740988 {Done: Debian FTP Masters }
[src:vavoom] vavoom fails to run if
tag 729553 pending
thanks
Hello,
Bug #729553 reported by you has been fixed in the Git repository. You can
see the changelog below, and you can check the diff of the fix at:
http://git.debian.org/?p=debian-edu/pkg-team/shutdown-at-night.git;a=commitdiff;h=bfd3c69
---
commit bfd3c69dfb95c3b
Processing commands for cont...@bugs.debian.org:
> tag 729553 pending
Bug #729553 {Done: Petter Reinholdtsen } [shutdown-at-night]
shutdown-at-night: Shuts down machines with the user still active
Added tag(s) pending.
> thanks
Stopping processing here.
Please contact me if you need assistance.
Processing control commands:
> severity -1 important
Bug #742432 [quilt] Malformed patch results in deletion of already-patched files
Severity set to 'important' from 'grave'
--
742432: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742432
Debian Bug Tracking System
Contact ow...@bugs.debian.o
Control: severity -1 important
On Sun, 23 Mar 2014, Ben Hutchings wrote:
> Package: quilt
> Version: 0.61-1
> Severity: grave
It seems to me that important is better suited. There might be data loss
but it's only when the patch is broken and it's usually for files that do
exist in multiple places
On Tue, 2014-02-04 at 09:57 +, Steve Hnizdur wrote:
> FATAL: Failed to initialize dom0 state: iappropriate ioctl for device.
IME this is usually down to a mismatch between the dom0 userspace tools
and the hypervisor, but if this is a fresh system then I see no reason
for that to be the case. P
Hi
Dne Sat, 22 Mar 2014 23:10:20 +
Ben Hutchings napsal(a):
> I've pushed the changes in my NMU to the git repository, so assume that
> there is no need to send a diff here.
Thanks for fixing this issue, I was just too busy to give it deeper
look.
--
Michal Čihař | http://cihar.co
Your message dated Mon, 24 Mar 2014 07:33:43 +
with message-id
and subject line Bug#737315: fixed in buildbot 0.8.8-1.1
has caused the Debian Bug report #737315,
regarding buildbot: FTBFS with Sphinx 1.2.1: Malformed option description
to be marked as done.
This means that you claim that the
Processing control commands:
> tags -1 + patch
Bug #741848 [src:gst-plugins-ugly0.10] gst-plugins-ugly0.10: FTBFS: dh_install:
gstreamer0.10-plugins-ugly missing files
(debian/tmp/usr/lib/*/gstreamer-0.10/libgsta52dec.so), aborting
Added tag(s) patch.
--
741848: http://bugs.debian.org/cgi-bin/
Control: tags -1 + patch
patch at
http://launchpadlibrarian.net/170529709/gst-plugins-ugly0.10_0.10.19-2ubuntu4_0.10.19-2ubuntu5.diff.gz
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
71 matches
Mail list logo
