Package: verilator
Version: 5.030-1
Severity: serious
Attempting to build actual verilated executables always crashes with
python3: can't open file '/usr/share/verilator/bin/verilator_includer'
How to reproduce:
On a system with git build-essential verilator installed,
git clone https://githu
Debian friends -
Bug #1069424 yosys: FTBFS on armhf appears to be documentation-related,
and found in version yosys/0.33-5.
I note that there is a changelog item for yosys-0.40: Major documentation
overhaul.
It would make sense to try updating to that version -- or 0.44, as
noted on the Debian
Alexis Murzeau wrote:
> See here: https://news.ycombinator.com/item?id=19826903
Which instructs people to install
https://storage.googleapis.com/moz-fx-normandy-prod-addons/extensions/hotfix-update-xpi-intermediate%40mozilla.com-1.0.2-signed.xpi
For me at least, that download resulted in a file
I reviewed the pmw-4.24 code, and Thorsten Glaser's patch.
His analysis and patch is correct. After the patch, the code
is correct even in the presence of ASLR.
At least every Debian system, and probably every POSIX system,
will unmap page zero to make sure null pointer dereferences
are trapped.
block 510033 512821
severity 510033 important
thanks
Since nobody has put in a rebuttal of my analysis, or offered
another suggestion, ...
Policy 10.7.4 says "The related packages _must_ use the provided
program", which I suppose is the justification for the original
"serious" severity level. Bu
Sune Vuorela reported
>Runit does cat/sed magic on /etc/inittab on installation and removal.
True.
> it looks like a clear violation of 10.4.7.
ITIYM 10.7.4
My analysis:
/etc/inittab is not a Debian 10.7.1 conffile, it is rather a
configuration file, owned and managed (cough) by sysvinit.
The
Josselin -
> Is there anything that is possible to help fixing this before the
> release?
My reading of header files shows that libc6-dev in etch, lenny,
and sid does not suffer from the original problem. The files
that include a workaround (ugly, but apparently functional) for
possible namespac
Hi Alexander,
I can't reproduce this on my Sid box. My amd64 is not SMP,
and the kernel is 2.6.26-8 instead of 2.6.25.4.
Could that make a difference?
- Larry
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
you don't like me acting as a messenger in this case, tough
noogies. I didn't write the DFSG. The real blame here lies with
Linus's historical sloppiness in accepting non-DFSG-free code.
I hear he has improved his process this past couple of years.
- Larry Doolittle
[*] and yes
This is Icarus bug 1890393
https://sourceforge.net/tracker/index.php?func=detail&aid=1890393&group_id=149850&atid=775997
Solution given (by me) on 2008-04-11:
> It should also work to remove the # include
> line from vvp/main.cc.
>
> That include (and the surrounding if defined(LINUX)/endif) s
The origin of the problem is a change (between fltk1.1-1.1.7 and
fltk1.1-1.1.8~rc1) in the output of fltk-config.
With libfltk1.1{,-dev} version 1.1.7-7 installed, I get
$ fltk-config --use-gl --libs
/usr/lib/libfltk.a /usr/lib/libfltk_gl.a
$
but with revision 1.1.8~rc1-2 I get
$ fltk-config --
The runit-1.8.0-3 changelog includes
* debian/runit.preinst, debian/runit.postinst: move away from /var/service/
to /etc/service/; restart runsvdir; retain backward compatibility symlink
/var/service -> /etc/service until rdepends have adopted (#461478).
which presumably triggers the effect
Package: runit
Version: 1.8.0-4
Severity: critical
Justification: breaks unrelated software
Upgrading from runit 1.8.0-2 to 1.8.0-4 fails.
It seems to restart user processes, including the
one that is doing the upgrade. The first time it
kicked me out of X. It leaves dpkg/apt in an unusable
and
To me, youtube-dl is the epitome of a package that
belongs in volatile. Putting it in stable invites
bugs like this.
I have no idea if it can be switched to etch-volatile
at this time.
Personally, I run a copy built from upstream source.
Its build requirements and resource needs are trivial.
Package: linux-2.6
Severity: serious
Justification: Policy 2.1
The following 59 files, found in Debian's linux-2.6_2.6.17.orig.tar.gz,
apparently contain software in binary form, for which Debian has no
corresponding source code. Debian policy states that "The program
must include source code, a
Package: cpio
Version: 2.6-14
Severity: grave
Justification: renders package unusable
cpio_2.6-14 fails to install with apt-get upgrade.
Preparing to replace cpio 2.6-13 (using .../archives/cpio_2.6-14_amd64.deb) ...
dpkg: error processing /var/cache/apt/archives/cpio_2.6-14_amd64.deb (--unpack)
I summarized my "research" with:
> [T]his might not apply to debian at all.
Michelle Konzack chimed in with:
> It does not affect Debian, but Mandrake and Redhat... :-)
Florian Weimer asked:
> Can you rule out that it's not reproducible with some other charset?
I can't rule anything out. If I
I read the full-disclosure post, and its reply.
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0600.html
Two example mailboxes are given (one in each post),
and it is suggested that the problem is triggered
by a library runtime version mismatch.
I tried both examples on
debian s
Package: htmldoc
Severity: grave
Justification: renders package unusable
# apt-get install libfltk1.1c102
Reading package lists... Done
Building dependency tree... Done
Package libfltk1.1c102 is not available, but is referred to by another package.
This may mean that the package is missing, has b
es are CVS tags and some trailing spaces in the source.
Tested, works. 2005-05-23 Larry Doolittle <[EMAIL PROTECTED]>
diff -ur xc~/extras/Xpm/lib/RdFToI.c xc/extras/Xpm/lib/RdFToI.c
--- xc~/extras/Xpm/lib/RdFToI.c 2005-05-23 10:12:01.211131000 -0700
+++ xc/extras/Xpm/lib/RdFToI.c
On Mon, May 23, 2005 at 11:20:52AM -0700, Larry Doolittle wrote:
> [chop]
> I noticed you changed the semantics of compressed file detection.
Sorry for the brainless chatter. I jumped to conclusions after
reading the patch, not looking at or testing the final code.
Both versions of th
Thomas -
I just read your patch to RdFToI.c titled
October 2004, source code review by Thomas Biege <[EMAIL PROTECTED]>
where you replaced calls to popen with the new routine xpmPipeThrough().
That is a big improvement, and debian needs to incorporate that
improvement in the upcoming sarge release
Daniel et al. -
On Mon, May 23, 2005 at 11:32:19AM +1000, Daniel Stone wrote:
> > I might play around with option 2. There are two strategies
> > that make technical sense:
>
> Why would you do this when there's already a version upstream that fixes
> this? I don't like the idea of having yet a
Branden Robinson asked:
> Could I get a second opinion (or more than one) from you guys as to
> whether this is actually an exploitable security problem?
I can't answer this in the affirmative, but then I only spent
about 15 minutes looking for a way to exploit it. I note that
apt-rdepends finds
Presumably this error was caused by a missing /etc/network
in your chroot. Is it appropriate to add
mkdir -p /etc/network
to ifupdown.postinst before line 95
: > /etc/network/ifstate
? Or maybe earlier in the script?
- Larry
signature.asc
Description: Digital signature
25 matches
Mail list logo
