Bug#781566: COPYING2 contains some armchair licensing

2015-03-31 Thread Jerome BENOIT
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear All, I forwarded the bug report to the upstream maintainer: please find below his answer. On 31/03/15 05:08, Paul Tagliamonte wrote: > Package: apophenia Severity: serious User: paul...@debian.org > Usertags: ftp X-Debbugs-CC: ftpmas...@ftp-mas

Bug#781640: Signature bypass via "alg=none" and HMAC/RSA confusion

2015-03-31 Thread Luke Faraone
Package: pyjwt Version: 0.2.1-1 Severity: grave Tags: security See http://www.openwall.com/lists/oss-security/2015/04/01/4 Relevant upstream commit: https://github.com/jpadilla/pyjwt/commit/88a9fc56.patch However, I was not able to get this commit to apply cleanly on the version packaged in

Processed: user release.debian....@packages.debian.org, usertagging 780429, tagging 780429

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > user release.debian@packages.debian.org Setting user to release.debian@packages.debian.org (was ni...@thykier.net). > usertags 780429 jessie-can-defer There were no usertags set. Usertags are now: jessie-can-defer. > tags 780429 + jessie-i

Processed: fixed 741738 in 1.28.1-1

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 741738 1.28.1-1 Bug #741738 {Done: Debian FTP Masters } [zoneminder] zoneminder: stream sock error: No such file or directory Marked as fixed in versions zoneminder/1.28.1-1. > thanks Stopping processing here. Please contact me if you need

Bug#767040: Superblock time check causes problems for fsck in initramfs

2015-03-31 Thread Janis Hamme
On Tue, 31 Mar 2015 03:14:53 +0100 Ben Hutchings wrote: > By the way, Lennart Poettering told me that other distributions have > done that, though I haven't checked whether it is done with a > configuration file or a patch to the code. > > > it wouldn't be better to just skip the fsck of / (and /u

Bug#753442: debootstrap: host's /run/shm gets unmounted after debootstrap run

2015-03-31 Thread Daniel Reichelt
Hi, Commit a1d5ddea5b fixed this. http://anonscm.debian.org/cgit/d-i/debootstrap.git/commit/?id=a1d5ddea5b7db00548173cee8236aaad61cf5961 cu Daniel -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.or

Bug#659015: marked as done (apt-build: disables apt's signature checking)

2015-03-31 Thread Debian Bug Tracking System
Your message dated Wed, 01 Apr 2015 01:18:38 + with message-id and subject line Bug#659015: fixed in apt-build 0.12.45 has caused the Debian Bug report #659015, regarding apt-build: disables apt's signature checking to be marked as done. This means that you claim that the problem has been dea

Bug#780591: marked as done (ltsp-client-builder fails when installing Debian Edu combined server in virtualbox environment)

2015-03-31 Thread Debian Bug Tracking System
Your message dated Wed, 01 Apr 2015 00:03:45 + with message-id and subject line Bug#780591: fixed in ltsp 5.5.4-4 has caused the Debian Bug report #780591, regarding ltsp-client-builder fails when installing Debian Edu combined server in virtualbox environment to be marked as done. This mean

Bug#659015: apt-build disables apt's signature verification

2015-03-31 Thread Axel Beckert
Control: tag -1 + pending Hi, Ansgar Burchardt wrote: > Axel Beckert writes: > > I've though observed two possibly minor issues with it: > > > > * An existing /etc/apt/sources.list.d/apt-build.list is not updated to > > add "[trusted=yes]". > > Could probably be added in postinst (apt-build.l

Processed: Re: Bug#659015: apt-build disables apt's signature verification

2015-03-31 Thread Debian Bug Tracking System
Processing control commands: > tag -1 + pending Bug #659015 [apt-build] apt-build: disables apt's signature checking Added tag(s) pending. -- 659015: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659015 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE

Bug#781524: fcgiwrap: socket is not created and service is not up, but it works after a reboot

2015-03-31 Thread Santiago Vila
On Wed, Apr 01, 2015 at 12:05:05AM +0200, Jordi Mallach wrote: > On Mon, Mar 30, 2015 at 03:18:25PM +0200, Santiago Vila wrote: > > On a qemu virtual machine with minimal packages installed I do this: > > > > apt-get install fcgiwrap > > ls -l /run/fcgiwrap.socket > > ls: cannot access /run/fcgiwr

Bug#781024: quassel: Denial of service (no CVE yet)

2015-03-31 Thread Olly Betts
On Wed, Apr 01, 2015 at 12:07:12AM +0200, Steinar H. Gunderson wrote: > On Tue, Mar 31, 2015 at 11:03:01PM +0200, Steinar H. Gunderson wrote: > > I took the patch from upstream and backported it to the version in sid; > > this was a fair amount of work as the patch uses C++11 lambdas heavily > > (a

Bug#781024: quassel: Denial of service (no CVE yet)

2015-03-31 Thread Steinar H. Gunderson
On Tue, Mar 31, 2015 at 11:03:01PM +0200, Steinar H. Gunderson wrote: > I took the patch from upstream and backported it to the version in sid; > this was a fair amount of work as the patch uses C++11 lambdas heavily > (and the version in jessie is compiled in C++03 mode; I thought changing > this

Bug#781524: fcgiwrap: socket is not created and service is not up, but it works after a reboot

2015-03-31 Thread Jordi Mallach
On Mon, Mar 30, 2015 at 03:18:25PM +0200, Santiago Vila wrote: > On a qemu virtual machine with minimal packages installed I do this: > > apt-get install fcgiwrap > ls -l /run/fcgiwrap.socket > ls: cannot access /run/fcgiwrap.socket: No such file or directory > > service fcgiwrap restart > ls -l

Bug#781567: libgps22: upgrade failure

2015-03-31 Thread Bernd Zeimetz
forcemerge 779286 781567 thanks hi pabs, libgpsd will be gone in one of the next uploads, so I do not bother for now. People who want to use stuff from experimental should be able to install it anyway :) cheers, Bernd On 31.03.2015 05:18, Paul Wise wrote: Package: libgps22 Version: 3.12-1

Bug#781497: marked as done (musl: CVE-2015-1817: stack-based buffer overflow in ipv6 literal parsing)

2015-03-31 Thread Debian Bug Tracking System
Your message dated Tue, 31 Mar 2015 21:50:03 + with message-id and subject line Bug#781497: fixed in musl 1.1.5-2 has caused the Debian Bug report #781497, regarding musl: CVE-2015-1817: stack-based buffer overflow in ipv6 literal parsing to be marked as done. This means that you claim that

Processed (with 1 errors): same bug

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 779081 > reassign 781586 open-vm-dkms Bug #781586 [open-vm-tools] open-vm-tools: seems related to bug #779081 but my kernel version is 3.2.0-4-amd64 Bug reassigned from package 'open-vm-tools' to 'open-vm-dkms'. No longer marked as foun

Processed: Re: Bug#781567: libgps22: upgrade failure

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forcemerge 779286 781567 Bug #779286 [libgps22] libgps22: fails to upgrade from 'sid' - trying to overwrite /usr/lib/x86_64-linux-gnu/libgpsd.so.22.0.0 Bug #781567 [libgps22] libgps22: upgrade failure Added indication that 781567 affects gpsd-db

Processed (with 2 errors): same bug

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 779081 > forcemerge 779081 781586 Bug #779081 {Done: Bernd Zeimetz } [open-vm-dkms] open-vm-dkms: vmhfgs module fails to compile with kernel 3.2.65-1+deb7u2 Unable to merge bugs because: package of #781586 is 'open-vm-tools' not 'open-v

Bug#781570: marked as done (ruby-version-sorter and rake: error when trying to install together)

2015-03-31 Thread Debian Bug Tracking System
Your message dated Tue, 31 Mar 2015 21:23:12 + with message-id and subject line Bug#781570: fixed in ruby-version-sorter 2.0.0+dfsg-2 has caused the Debian Bug report #781570, regarding ruby-version-sorter and rake: error when trying to install together to be marked as done. This means that y

Processed: Re: Bug#781024: quassel: Denial of service (no CVE yet)

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 781024 + patch Bug #781024 [quassel] quassel: Denial of service (CVE-2015-2778 CVE-2015-2779) Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 781024: http://bugs.debian.org/cgi-bin/bugrepo

Bug#781024: quassel: Denial of service (no CVE yet)

2015-03-31 Thread Steinar H. Gunderson
tags 781024 + patch thanks On Tue, Mar 31, 2015 at 10:48:08AM +0200, Thomas Müller wrote: > NMU upload is more then welcome - I lack the time to take care of this at > the moment. I took the patch from upstream and backported it to the version in sid; this was a fair amount of work as the patch u

Processed: your mail

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reassign 781570 ruby-version-sorter 2.0.0+dfsg-1 Bug #781570 [rake,ruby-version-sorter] ruby-version-sorter and rake: error when trying to install together Bug reassigned from package 'rake,ruby-version-sorter' to 'ruby-version-sorter'. Ignoring

Bug#781586: fixed in Jessie

2015-03-31 Thread Jonathan Lane
Dear Maintainer, There are no 3.2.x kernels available in Jessie, and this bug is no longer present with the default 3.16 kernel from Jessie-main. Please remove this as an RC bug for Jessie. Thanks, Jonathan Lane -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subj

Bug#755202: [Pkg-utopia-maintainers] Bug#755202: network-manager: keeps creating and using new connection "eth0" that does not work

2015-03-31 Thread Fitzcarraldo
Original Message *Subject: *Re: [Pkg-utopia-maintainers] Bug#755202: network-manager: keeps creating and using new connection "eth0" that does not work *From: *Michael Biebl *To: *Fitzcarraldo , 755...@bugs.debian.org *Date: *31/03/15 07:49 > Am 19.03.2015 um 18:59 schrieb Fitzca

Bug#775541: NFS mounts from /etc/fstab works for me

2015-03-31 Thread Paul van der Vlis
Hello, I don't see real problems with NFS mounts from /etc/fstab, I am using it with homedirs on about 14 clients with NFS4 and MIT Kerberos. NFS is not needed for booting. After booting /home is mounted. Maybe NFS comes up before the network is accessabel, it does not wait. The only point is a

Processed: Re: libssh2-1: changelog.gz is different between i386 and amd64 packages

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 781603 serious Bug #781603 [libssh2-1] libssh2-1: changelog.gz is different between i386 and amd64 packages Severity set to 'serious' from 'important' > thanks Stopping processing here. Please contact me if you need assistance. -- 7816

Bug#776744: marked as done (policykit-1: FTBFS: unsatisfiable B-D: libmozjs-17.0-dev)

2015-03-31 Thread Debian Bug Tracking System
Your message dated Tue, 31 Mar 2015 18:48:36 + with message-id and subject line Bug#776744: fixed in policykit-1 0.112-5 has caused the Debian Bug report #776744, regarding policykit-1: FTBFS: unsatisfiable B-D: libmozjs-17.0-dev to be marked as done. This means that you claim that the proble

Bug#780940: hdparm freeze's bug information

2015-03-31 Thread Niels Thykier
On 2015-03-31 19:50, Niels Thykier wrote: > [...] > The list of changes between the Debian version and the Ubuntu version is > fairly short. I have attached the diff (minus d/changelog) here and we > are down to: > > [...] > > Given you suggest that compiling the new upstream also works for you,

Bug#741464: grub-pc-bin: hangs after displaying boot menu

2015-03-31 Thread Marco Gamberoni
In data lunedì 23 marzo 2015 15:17:56, Colin Watson ha scritto: > On Sun, Feb 01, 2015 at 11:16:59PM +0100, Marco Gamberoni wrote: > > Having read > > > > http://web.archive.org/web/20040604041507/http://panda.cs.ndsu.nodak.edu/~achapwes/PICmicro/keyboard/atkeyboard.html > > it is obvious what

Bug#780940: hdparm freeze's bug information

2015-03-31 Thread Niels Thykier
On Mon, 30 Mar 2015 22:25:17 -0300 =?ISO-8859-1?Q?V=EDctor_Cana_Ben=EDtez?= wrote: > Dear maintainers, > > I have installed the hdparm package version 9.43-1ubuntu3 from ubuntu "vivid" > repository and it works fine. The package is the following: > http://packages.ubuntu.com/vivid/hdparm > > Re

Bug#755202: network-manager: keeps creating and using new connection "eth0" that does not work

2015-03-31 Thread Michael Biebl
Talked to upstream about this problem. Attached is the IRC log. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? dcbw: this bug report is a mess: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755202 do you have any idea what thi

Processed: retitle

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > retitle 780386 freeipa: missing depends on systemd-sysv Bug #780386 [freeipa-server] missing Depends Changed Bug title to 'freeipa: missing depends on systemd-sysv' from 'missing Depends' > End of message, stopping processing here. Please contac

Processed: Re: Bug#781604: `journalctl /dev/sda` shows empty log

2015-03-31 Thread Debian Bug Tracking System
Processing control commands: > severity -1 normal Bug #781604 [systemd] `journalctl /dev/sda` shows empty log Severity set to 'normal' from 'serious' -- 781604: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781604 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To

Bug#781604: `journalctl /dev/sda` shows empty log

2015-03-31 Thread Michael Biebl
Control: severity -1 normal Am 31.03.2015 um 16:08 schrieb Chris Bainbridge: > Package: systemd > Version: 215-12 > Severity: serious > > `man journalctl` says: > > Show all logs of the kernel device node /dev/sda: > >journalctl /dev/sda > > But: > > debian # journalctl /dev/sda >

Bug#781604: `journalctl /dev/sda` shows empty log

2015-03-31 Thread Chris Bainbridge
Package: systemd Version: 215-12 Severity: serious `man journalctl` says: Show all logs of the kernel device node /dev/sda: journalctl /dev/sda But: debian # journalctl /dev/sda -- Logs begin at Tue 2015-03-31 11:57:43 BST, end at Tue 2015-03-31 14:43:04 BST. -- debian # It does no

Bug#781594: pybit: disables apt's signature checking (and uses remote repository)

2015-03-31 Thread Neil Williams
severity 781594 normal thanks On Tue, 31 Mar 2015 14:30:06 +0200 Ansgar Burchardt wrote: > Package: src:pybit > Version: 1.0.0-2.1 > Severity: grave > Tags: security > > pybit disables apt's signature checks when retrieving source packages: The apt backend is not enabled by default - the princ

Processed: Re: Bug#781594: pybit: disables apt's signature checking (and uses remote repository)

2015-03-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 781594 normal Bug #781594 [src:pybit] pybit: disables apt's signature checking (and uses remote repository) Severity set to 'normal' from 'grave' > thanks Stopping processing here. Please contact me if you need assistance. -- 781594: h

Bug#781595: xdeb: disables apt's signature checks

2015-03-31 Thread Ansgar Burchardt
Package: src:xdeb Version: 0.6.6 Severity: grave Tags: security According to xdeb's documentation it uses apt to download source packages and defaults to using the system's sources.list, that is usually remote repositories. However xdeb disables apt's signature checking: +--- | apt_pkg.confi

Bug#781594: pybit: disables apt's signature checking (and uses remote repository)

2015-03-31 Thread Ansgar Burchardt
Package: src:pybit Version: 1.0.0-2.1 Severity: grave Tags: security pybit disables apt's signature checks when retrieving source packages: +--- | url = "deb-src http://cdn.debian.net/debian %s main " % buildreq.get_suite() | os.write(src_list, url) | cfg_str

Bug#728777: libcolt-free-java

2015-03-31 Thread Anton Gladky
Hi Andreas, thanks for letting it know! Anton 2015-03-31 13:02 GMT+02:00 Andreas Tille : > Hi Anton, > > just a hint: We now have libcolt-free-java in main which is > libcolt-java with stripped of non-free code. The Debian Med > reverse depends are building fine and hopefully are running > fi

Bug#728777: libcolt-free-java

2015-03-31 Thread Andreas Tille
Hi Anton, just a hint: We now have libcolt-free-java in main which is libcolt-java with stripped of non-free code. The Debian Med reverse depends are building fine and hopefully are running fine (needs testing in practice). May be this is helpful for sumo as well. Kind regards Andreas.

Bug#781586: open-vm-tools: seems related to bug #779081 but my kernel version is 3.2.0-4-amd64

2015-03-31 Thread step
Package: open-vm-tools Version: 2.8.8.0+2012.05.21-724730-1+nmu2 Severity: grave Justification: renders package unusable Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? compiling against 3.2.0-4-amd64 kernel does make an err

Bug#781024: quassel: Denial of service (no CVE yet)

2015-03-31 Thread Thomas Müller
NMU upload is more then welcome - I lack the time to take care of this at the moment. Thanks a lot, Thomas -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#781577: openjdk-7-doc: empty package

2015-03-31 Thread Peter De Wachter
Package: openjdk-7-doc Version: 7u75-2.5.4-3 Severity: grave Justification: renders package unusable Dear Maintainer, This version of openjdk-7-doc doesn't contain any files other than the copyright file and the changelog. The version in testing (7u75-2.5.4-2) is ok. -- System Information: Debi

Bug#659015: apt-build disables apt's signature verification

2015-03-31 Thread Ansgar Burchardt
Axel Beckert writes: > I've though observed two possibly minor issues with it: > > * An existing /etc/apt/sources.list.d/apt-build.list is not updated to > add "[trusted=yes]". Could probably be added in postinst (apt-build.list is not a conffile), e.g. something like sed -i 's/^deb file:/de