Bug#643457: pidgin-librvp: diff for NMU version 0.9.7-1.2

2011-11-20 Thread Devin Carraway
On Sun, Nov 20, 2011 at 02:18:14PM +0100, gregor herrmann wrote: > I've prepared an NMU for pidgin-librvp (versioned as 0.9.7-1.2) and > uploaded it to DELAYED/2. Please feel free to tell me if I > should delay it longer. Nope, thanks for the upload. I've just moved and the build machine with my

Bug#607472: Bug#606000: libmail-spf-query-perl: Incorrect query results with IPv6 addresses; should warn about missing IPv6 support and/or fail graciously

2010-12-23 Thread Devin Carraway
On Thu, Dec 23, 2010 at 03:36:42PM +0100, Julien Cristau wrote: > I see this is now uploaded. Unblocked, should migrate in 5 days if no > new RC bugs appear; and removal hint added for libmail-spf-query-perl. I submitted a freeze exception request for qpsmtpd_0.84-5. Thanks for doing the advance

Bug#606000: libmail-spf-query-perl: Incorrect query results with IPv6 addresses; should warn about missing IPv6 support and/or fail graciously

2010-12-21 Thread Devin Carraway
On Sun, Dec 19, 2010 at 12:35:32PM +0100, gregor herrmann wrote: > Right, I set #607472 to grave under the assumption that we want to > drop libmail-spf-query-perl which would leave qpsmtpd without a > dependency. > > I'm cc'ing the release team to get an opinion if this plan is ok. I've deployed

Bug#606000: libmail-spf-query-perl: Incorrect query results with IPv6 addresses; should warn about missing IPv6 support and/or fail graciously

2010-12-19 Thread Devin Carraway
I'll try to take a look at this this weekend. Not severity=grave for qpsmtpd, but will let it stay on the presumption that it's blocking another grave bug. Devin -- Devin \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com Carraway \ 1024D/E9ABFCD2: 13E7 199E DD1E 65F0 8905 2E43 5395 CA0D

Bug#574557: qpsmtpd: diff for NMU version 0.83-2.1

2010-04-08 Thread Devin Carraway
On Wed, Apr 07, 2010 at 10:37:31PM +0200, Stefano Zacchiroli wrote: > I did the DELAYED NMU just in case you won't have time to fix this by a > proper upload anytime soon; if this is the case, you can just let the > NMU flow in and later on do a proper upload ack-ing the NMU and adding > extra chan

Bug#574557: Package version is wrong in bug report

2010-03-21 Thread Devin Carraway
On Sun, Mar 21, 2010 at 07:54:13AM +0100, Petter Reinholdtsen wrote: > I picked the version number when the bug was introduced according to > the changelog, to make sure it is registered against all version where > it is present. > > Are you saying that it is fixed in a later version and reintrodu

Bug#526254: CVE-2008-4456: mysql client does not escape strings in --html mode

2009-04-30 Thread Devin Carraway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: mysql-client-5.0 Version: 5.0.51a-24 Severity: grave Tags: security Justification: cross-site scripting vulnerability Upstream is tracking a security flaw in the mysql commandline client, identified as CVE-2008-4456: http://bugs.mysql.co

Bug#499277: Fix for Etch

2008-09-21 Thread Devin Carraway
On Wed, Sep 17, 2008 at 02:30:43PM -0400, Scott Kitterman wrote: > Here is a debdiff for Etch. In addition to fixing this regression, I also > switched DNS/Base.py to use the upstream fix for the DNS cache poisoning > problem. Their fix is more robust. If you'd rather just deal with this > ex

Bug#499277: python-dns security update breaks existing applications

2008-09-17 Thread Devin Carraway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Sep 17, 2008 at 05:28:37PM +0200, Fabio Tranchitella wrote: > > transaction ID randomization. If instead of reverted to the package that > > has > > neither, you change 'self.tid' to '0' in line 199 > > of /var/lib/python-support/python2.4/

Bug#492252: Stable fix for CVE-2008-2713 wasn't

2008-07-24 Thread Devin Carraway
Package: clamav Version: 0.90.1dfsg-3etch13 Severity: grave I released clamav 0.90.1dfsg-3etch13 to fix CVE-2008-2713, the DoS exposure via the Petite unpacker. However, I screwed up the build and didn't actually include the patch. I'll be releasing a fixed build shortly. This bug only applies

Bug#490271: #490271

2008-07-24 Thread Devin Carraway
A tentative fix to refpolicy is here: http://klecker.debian.org/~devin/refpolicy/ Martin, can you test these to confirm that they address the problem and check for trouble during the upgrade? -- Devin \ aqua(at)devin.com, IRC:Requiem; http://www.devin.com Carraway \ 1024D/E9ABFCD2: 13E

Bug#490271: #490271

2008-07-15 Thread Devin Carraway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Jul 11, 2008 at 10:59:13PM +0200, Bastian Blank wrote: > I'm currently not able to see the problem to push a _fix_, not a > _workaround_, through stable-security. Please explain. Pushing a fix to stable-security is easy -- we can patch the nee

Bug#490271: bind9: security update breaks named running with selinux

2008-07-11 Thread Devin Carraway
On Fri, Jul 11, 2008 at 08:26:53AM +0200, Martin Godisch wrote: > bind9 security update 9.3.4-2etch3 breaks named running in a selinux > enabled (enforcing) environment: > > audit(1215756426.448:248): avc: denied { name_bind } for pid=16218 > comm="named" src=12949 scontext=user_u:system_r:name

Bug#480292: CVE-2008-2079: mysql allows local users to bypass certain privilege checks

2008-07-07 Thread Devin Carraway
tags 480292 +patch quit Here's a patch I'm building for an Etch update to address the problem. It's pretty close to the same one used in the first fix to this bug, except that it adds a call to realpath() to resolve all components of the path, and fixes the argument passing so as not to throw the

Bug#480292: CVE-2008-2079: mysql allows local users to bypass certain privilege checks

2008-07-06 Thread Devin Carraway
On Fri, Jul 04, 2008 at 02:56:00PM +0200, Tomas Hoger wrote: > Looks like upstream patch is incomplete. Have you already notified > upstream about the problem? Not yet -- I still need to hand verify it against a pristine upstream; it's reproducible with 5.0.51a from Sid, but the implementation of

Bug#480292: CVE-2008-2079: mysql allows local users to bypass certain privilege checks

2008-07-03 Thread Devin Carraway
reopen 480292 quit I don't believe that the patch applied to address this bug was sufficient. In preparing the stable update I initially applied it, before finding two things: First, fn_format() only calls readlink() once on the entire path, not on any component thereof; hence it will only actua

Bug#430894: NMU patch

2007-08-25 Thread Devin Carraway
On Fri, Aug 24, 2007 at 09:03:52PM -0400, Ari Pollak wrote: > I plan to NMU gaim-librvp package to fix this bug. Attached is the patch > to do so. Go ahead, thanks. Been totally slagged under with work and everytime I try to detach it gets worse. Sorry if I held up the migration. -- Devin \ a

Bug#404297: Bug#404927: DPT/Adaptec udev info

2007-01-06 Thread Devin Carraway
Here's udevinfo from an etch/sid install with an old Adaptec 2940 (since Dann asked): looking at device '/block/sr0': KERNEL=="sr0" SUBSYSTEM=="block" SYSFS{stat}==" 000000 00000" SYSFS{size}=="

Bug#398125: gaim-librvp will not run or build with gaim 2.0.0beta5

2006-11-11 Thread Devin Carraway
tags 398125 +pending quit On Sat, Nov 11, 2006 at 04:33:31PM -0500, Ari Pollak wrote: > With the upload of gaim 2.0.0beta5, gaim-librvp will not build or run > due to a gaim ABI change. Attached is a patch which will fix the > problem. Splendid timing for it. Thanks for the warning, I've integra

Bug#391242: patch for building on gaim

2006-10-06 Thread Devin Carraway
On Fri, Oct 06, 2006 at 07:04:05PM +0100, peter green wrote: > making this build against 2.0.0beta3.1 in my sid chroot was pretty easy, i > just nicked some headers that are no longer in the official public interface > of gaim from the gaim source package (yes eliminating the dependance on non > pu

Bug#379559: Info received (refpolicy: FTBFS: tmp/generated_definitions.conf:597:ERROR 'syntax error' at token '' on line 3416:)

2006-08-14 Thread Devin Carraway
I tried forcing the build over to use a plain awk command (mawk, on my machine), but this produces the same build failure -- mawk produces no output when run in the build, while gawk does. I don't know enough awk to sort this out, so here's the obvious patch to build-depend on gawk again. -- Dev

Bug#379559: refpolicy: FTBFS: tmp/generated_definitions.conf:597:ERROR 'syntax error' at token '' on line 3416:

2006-08-14 Thread Devin Carraway
I think this may be caused by an undeclared build dependency on gawk; accoding to the changelog, gawk was added as a build-dep in 20060224-1 by Erich, but doesn't appear there now. Without gawk installed, the build includes this error, which isn't treated as fatal: echo "define(\`base_per_userdom

Bug#381666: libselinux: FTBFS on powerpc (refers to PAGE_SIZE not supplied by ppc kernel-headers)

2006-08-09 Thread Devin Carraway
If this were a perf-critical path I'd be more concerned about the cost of calling a function, but it isn't and I'm not. In most of these cases, right after malloc()ing a page-sized buffer it then makes a string of syscalls. In the ones I see, what's really going on is that it's just trying to all

Bug#381666: libselinux: FTBFS on powerpc (refers to PAGE_SIZE not supplied by ppc kernel-headers)

2006-08-06 Thread Devin Carraway
Package: libselinux Severity: serious Justification: no longer builds from source This may be the fault of linux-kernel-headers more than libselinux, but as of linux-kernel-headers 2.6.17-6-1, I can't build libselinux due to undefined symbol errors concerning the use of PAGE_SIZE in a number of p

Bug#358926: qpsmtpd: FTBFS: cp: cannot stat `/qpsmtpd-0.32/debian/plugins/*': No such file or directory

2006-03-25 Thread Devin Carraway
On Sat, Mar 25, 2006 at 10:49:38AM +0100, Andreas Jochens wrote: > # install the plugins > install -m 755 -d /qpsmtpd-0.32/debian/qpsmtpd/usr/share/qpsmtpd/plugins > cp -a /qpsmtpd-0.32/plugins/* > /qpsmtpd-0.32/debian/qpsmtpd/usr/share/qpsmtpd/plugins/ > cp -a /qpsmtpd-0.32/debian/plugins/* > /q

Bug#326378: please rebuild with libreadline5-dev as build dependency

2006-01-24 Thread Devin Carraway
On Tue, Jan 24, 2006 at 06:58:12PM +1100, Daniel Stone wrote: > On Mon, Jan 23, 2006 at 11:35:03PM -0800, Devin Carraway wrote: > > dbtcp builds just fine with libreadline5-dev. Tentative patch attached. > > Please NMU the package if you have absolutely no interest in it and t

Bug#326378: please rebuild with libreadline5-dev as build dependency

2006-01-24 Thread Devin Carraway
/control: + + Fix libreadline build-dependency (Closes: #326378) + * debian/rules: + + Fix PHP API determination (Closes: #336311) + + -- Devin Carraway <[EMAIL PROTECTED]> Mon, 23 Jan 2006 23:26:46 -0800 + dbtcp (0.1.17-4.2) unstable; urgency=medium * NMU diff -aruN orig/dbtcp-

Bug#336311: php4-dbtcp: rebuild required for PHP ABI change

2006-01-24 Thread Devin Carraway
s: #336311) + + -- Devin Carraway <[EMAIL PROTECTED]> Mon, 23 Jan 2006 23:26:46 -0800 + dbtcp (0.1.17-4.2) unstable; urgency=medium * NMU diff -aruN orig/dbtcp-0.1.17/debian/control dbtcp-0.1.17/debian/control --- orig/dbtcp-0.1.17/debian/control2006-01-23 23:30:07.0 -0800 +++ dbt

Bug#326378: please rebuild with libreadline5-dev as build dependency

2006-01-23 Thread Devin Carraway
-dependency (Closes: #326378) + + Update standards-version + + -- Devin Carraway <[EMAIL PROTECTED]> Mon, 23 Jan 2006 23:26:46 -0800 + dbtcp (0.1.17-4.2) unstable; urgency=medium * NMU diff -aruN orig/dbtcp-0.1.17/debian/control dbtcp-0.1.17/debian/control --- orig/dbtcp-0.1.17/debian/c

Bug#337942: dpkg: s-s-d --stop --exec is an unreliable misfeature

2005-11-18 Thread Devin Carraway
[ unrelated maintainer who just found this behavior trying to test another package entirely ] I don't believe the /proc/pid/exe symlink contents will change; the (deleted) convention is lsof's, AFAIK. Although the argument made in Bug#256790 is plausible, matching the exact executable doesn't s

Bug#322896: quelcom: FTBFS (amd64): cast from 'qwavsample::sample*' to 'int' loses precision

2005-08-14 Thread Devin Carraway
On Sat, Aug 13, 2005 at 01:50:42PM +0200, Andreas Jochens wrote: > g++ -g -DNLS -Wall -fPIC -o qwavsample.o -c qwavsample.cc > qwavsample.cc: In constructor 'qwavsample::qwavsample(qwav*, u_int32_t)': > qwavsample.cc:29: error: cast from 'qwavsample::sample*' to 'int' loses > precision > qwavsampl