Package: trac-mastertickets
Severity: critical
The dependency graph view of a ticket does not do any permission checks.
This is a security problem on private trac sites since it creates a
channel through which sensitive information about tickets (existence,
dependencies and ticket titles) is r
Hi Steve,
Steve Kemp wrote:
On Wed Jul 09, 2008 at 12:04:01 +0200, Wichert Akkerman wrote:
I see CVE-2008-2960 reported in the BTS as #489756 but I see no mention
of a fix for stable. Is someone working on a DSA for stable?
There isn't one in progress. Tonight there will
I see CVE-2008-2960 reported in the BTS as #489756 but I see no mention
of a fix for stable. Is someone working on a DSA for stable?
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/ It is hard to make things
seen a hotfix for
Plone 3.0 and are fixed in Plone 3.1. They will not be fixed in Plone 2.5.
Wichert.
--
Wichert Akkerman<[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
--
To UNSUBSCRIBE, email to [EMAIL PROT
As a workaround this works:
dpkg -P --force-depends python2.4-minimal
dpkg -i python2.4-minimal_2.4.4-7_i386.deb
This seems to remove the bad site.py from /etc/python2.4 and restores
correct behaviour.
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things
Package: python2.4-dbg
Version: 2.4.4-8
Severity: grave
I upgraded my unstable machine today and suddenly almost every python
application broke. A quick check shows that this is due to eggs in
/usr/local no longer appearing in sys.path. This is from a machine using
an older version of python:
[''
n needed to do backports
> for Etch.
>
> Thanks.
>
> [1] http://ftp-master.debian.org/removals.txt
> [2] http://lists.debian.org/debian-devel/2005/06/msg00500.html
>
> --
> Lior Kaplan
> [EMAIL PROTECTED]
>
--
Wichert Akkerman <[EMAIL PROTECTED]>It is s
d] Error 2
| **
| Build finished at 20070604-1209
| FAILED [dpkg-buildpackage died]
Full build log(s):
http://experimental.ftbfs.de/build.php?&ver=1.4.0-1&pkg=libnss-pgsql&arch=hppa
Gruesse,
--
Wichert Akk
bin(_ZN6Window11RequestHelpERK9HelpEvent+0x31)[0x8060831]
/usr/lib/openoffice/program/soffice: line 250: 13438 Aborted
"$sd_prog/$sd_binary" "$@"
** (process:13411): WARNING **: Unknown error forking main binary / abnormal
early exit ...
--
Wichert Akkerman <[EMAIL PROT
Package: hplip
Version: 0.9.11-2
Severity: grave
hplip fails to install:
Setting up hplip (0.9.11-2) ...
Creating/updating hplip user account...
useradd: invalid numeric argument 'lp'
adduser: `/usr/sbin/useradd -d /var/run/hplip -g lp -s /bin/false -u 107 hplip'
returned error code 3. Exiting.
eed fixes this.
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Package: gaim
Version: 1:1.5.0+1.5.1cvs20051015-3
Severity: grave
Since yesterdays upgrade to unstable (first in a week or so) gaim
immediately quits when I try to send someone a message. strace reveals
this:
[pid 4098] open("/home/wichert/.mcoprc", O_RDONLY|O_LARGEFILE) = 19
[pid 4098] read(19
t regards
> Frederik Schueler
>
> --
> ENOSIG
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Package: pornview
Version: 0.2pre1-5
Severity: grave
pornview does nothing but segfault for me:
[snow;/local/rac]-16> pornview
xine_thread: init threads
xine_thread: open display
zsh: segmentation fault (core dumped) pornview
The backtrace is:
#0 0xb7a11dc4 in pthread_mutex_lock () from /lib/
Package: libunit++-dev
Version: 1.2.3-2
Severity: grave
libunit++ is compiled with an ancient c++ library making it impossible
to use on current systems. I haven't tested this, but it might be broken
for sarge as well.
Wichert.
-- System Information:
Debian Release: testing/unstable
APT prefer
Package: zope-psycopgda
Version: 1.1.19-1
Severity: grave
(This is different from the other install bugreport)
On install I get this:
Setting up zope-psycopgda (1.1.19-1) ...
cp: cannot stat `/usr/share/zope/ZPsycopgDA': No such file or directory
dpkg: error processing zope-psycopgda (--configur
Previously Christoph Ulrich Scholler wrote:
> I can not reproduce this on Sarge. I noticed that the version of
> openssl in unstable is 0.9.7g, whereas Sarge has 0.9.7e. Maybe this
> causes the bug?
Looks like it; downgrading openssl to the sarge version seems to fix it.
Wichert.
--
Previously Wichert Akkerman wrote:
> Use of uninitialized value in pattern match (m//) at
> /usr/lib/tinyca/OpenSSL.pm line 502.
Looking at the code this is in the CRL parsing routines. It looks for
revoked certificates in the openssl output, however the output is
binary, not text (the c
Package: tinyca
Version: 0.6.8-1
Severity: grave
If I start tinyca it creates the main window and then proceeds to output
this line endlessly:
Use of uninitialized value in pattern match (m//) at /usr/lib/tinyca/OpenSSL.pm
line 502.
Wichert.
-- System Information:
Debian Release: 3.1
APT pre
Package: slapd
Version: 2.1.30-3
Severity: grave
Justification: renders package unusable
It seems the default value for slapd/dump_database_destdir is set
incorrectly: I just hit enter in debconf to accept the default value
and as a result it is now set to the empty string:
--
:
ValueError: unpack tuple of wrong size
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Package: mailman
Version: 2.1.5-7
Severity: serious
An upgrade from woody to sarge breaks with this error:
Updating Mailman 2.0 pending_subscriptions.db database
Traceback (most recent call last):
File "/usr/lib/mailman/bin/update", line 753, in ?
errors = main()
File "/usr/lib/mailman/bi
anymore.
I tried the other approach (removing the extra template) and that got
things working again. I did get a broken LaTeX tabular but haven't
investigated yet if that was due to removing that template or some other
reason.
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is
Package: db2latex-xsl
Version: 0.8pre1-3
Severity: grave
I get this with the new version:
xsltproc --output manual.tex manual.xsl manual.xml
compilation error: file
file:///usr/share/xml/docbook/stylesheet/db2latex/latex/docbook.xsl line 66
element import
xsltParseStylesheetTop: ignoring mispla
definition of the
+question.answer.label template. Fix from Mike Hommey.
+
+ -- Wichert Akkerman <[EMAIL PROTECTED]> Mon, 07 Feb 2005 21:40:55 +0100
+
db2latex-xsl (0.8pre1-2) unstable; urgency=low
* debian/control: removed spurious newline from Build-Depends
diff -wur org/db2latex-xsl-0.8pre1/xsl/do
would be somewhat unfortunate to have stricter
checking in libxslt1.1 break db2latex while there is no fix for it yet.
Alternatively, is there a hinting option to do that instead?
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wiggy.net/
eekend.
> A workaround for the time being is to use xsltprc from "sarge".
And this bugreport should prevent the now broken version in unstable
from entering testing. To be precise, the package to be downgraded is
libxslt1.1, not xsltproc.
Wichert.
--
Wichert Akkerman <[EMAIL PROTEC
Package: db2latex-xsl
Version: 0.8pre1-2
Severity: grave
I am suddenly getting this on every run:
[typhoon;..nTest/trunk/newdoc]-100> make manual.tex
xsltproc --output manual.tex manual.xsl manual.xml
compilation error: file
file:///usr/share/xml/docbook/stylesheet/db2latex/latex/qandaset.mod.xs
. check the partition data with fdisk again
In step four you will see that the head and cylinder counts have
suddenly reverted to what they where before you made the changes in
step 2.
Wichert.
--
Wichert Akkerman <[EMAIL PROTECTED]>It is simple to make things.
http://www.wig
Package: gaim
Version: 1:1.1.2-1
Severity: serious
Topic says all. Marked serious since this means obligatory files like
changelogs and the copyright are missing.
Wichert.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architec
30 matches
Mail list logo
