On binary compatibility

2006-02-23 Thread Michael Gilbert
I've read a lot about the binary incompatibility concern between Debian and Ubuntu. I have an idea, but I don't have the skill to implement it myself. I figured it would be useful to throw it out there for you all to scrutinize, determine the implementation feasibility, and perhaps run with. Fir

supporting navigation mouse buttons in Debian

2006-03-11 Thread Michael Gilbert
Hello, I was recently browsing the web on a windows box and realized that over the last 4 years, I had forgotten how nice it is to be able browse back/forward with a single button click. So I set about enabling this functionality on my Debian box. I found this gentoo doc (http://gentoo-wiki.com/

Re: supporting navigation mouse buttons in Debian

2006-03-12 Thread Michael Gilbert
On 3/12/06, David Nusinow wrote: > Please note that the usual way to do this is by > filing a wishlist bug against the package, and I'd appreciate it if you use > this mechanism so I can keep track of it easily. ok, will do. i didn't think that this discussion fit nicely under a single package.

Re: Talk: Reflections of a bigtime Debian bug reporter

2009-09-15 Thread Michael Gilbert
On Tue, 15 Sep 2009 13:46:31 +0530, Kartik Mistry wrote: > On Tue, Sep 15, 2009 at 1:39 PM, Petter Reinholdtsen wrote: > > Especially the 'what did you expect' is important, as it often make it > > possible to differentiate between software bugs, documentation bugs > > and plan simple user expectat

Re: Packages that download/install unsecured files

2009-09-18 Thread Michael Gilbert
On Fri, 18 Sep 2009 19:06:21 +0300, Tom Feiner wrote: > Philipp Kern wrote: > > On 2009-09-18, Tom Feiner wrote: > >> Looks like this method works well for clamav-data and other similar > >> packages > >> which needs to update databases frequently on stable/oldstable. > > > > clamav-data is sched

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 21:34:28 +0200, Adam Borowski wrote: > On Wed, Oct 14, 2009 at 07:27:07PM +, Florian Weimer wrote: > > > I could just put up a site with CC porn, then. Aren't we supposed > > > not to discriminate against fields of endeavour? > > > > A software which requires access to non-

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 21:48:19 +0200, Mehdi Dogguy wrote: > Florian Weimer a écrit : > > > > A software which requires access to non-free documents over the > > network to work at all shouldn't go into main. It seems that gnaughty > > is currently in that category. > > > rtm (from awn-applets-pyth

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 22:27:25 +0200, Yves-Alexis Perez wrote: > On mer, 2009-10-14 at 16:23 -0400, Michael Gilbert wrote: > > the key litmus test is: does the application depend solely on non-free > > information to function properly. these google applications fail > >

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 16:57:19 -0400, James Vega wrote: > On Wed, Oct 14, 2009 at 4:43 PM, Michael Gilbert > wrote: > > On Wed, 14 Oct 2009 22:27:25 +0200, Yves-Alexis Perez wrote: > >> On mer, 2009-10-14 at 16:23 -0400, Michael Gilbert wrote: > >> > the key lit

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 17:13:10 -0400, Michael Gilbert wrote: > On Wed, 14 Oct 2009 16:57:19 -0400, James Vega wrote: > > On Wed, Oct 14, 2009 at 4:43 PM, Michael Gilbert > > wrote: > > > On Wed, 14 Oct 2009 22:27:25 +0200, Yves-Alexis Perez wrote: > > >> On mer

Re: Bug#550860: ITP: gnaughty -- downloader for adult content

2009-10-14 Thread Michael Gilbert
On Wed, 14 Oct 2009 23:28:14 +0200, Mike Hommey wrote: > On Wed, Oct 14, 2009 at 05:18:33PM -0400, Michael Gilbert wrote: > > On Wed, 14 Oct 2009 17:13:10 -0400, Michael Gilbert wrote: > > > On Wed, 14 Oct 2009 16:57:19 -0400, James Vega wrote: > > > > On Wed, Oc

Re: Proposed mass prototypejs bug filing for multiple security issues

2009-10-18 Thread Michael Gilbert
On Mon, 19 Oct 2009 10:02:59 +0800 Paul Wise wrote: > On Mon, Oct 19, 2009 at 8:43 AM, Michael S Gilbert > wrote: > > > Let me know if this is OK, and whether there is anything else I should > > be aware of. > > Excellent, please go ahead. > > See also the lintian warning (you seem to miss a f

Re: Proposed mass prototypejs bug filing for multiple security issues

2009-10-19 Thread Michael Gilbert
On Mon, 19 Oct 2009 10:52:18 -0500, Gunnar Wolf wrote: > Michael S Gilbert dijo [Sun, Oct 18, 2009 at 08:43:35PM -0400]: > > Hi, > > > > The prototypejs script has been found to be vulnerable to a couple > > security issues [0],[1]. This script is embedded in about 32 other > > packages and I wou

Re: Proposed mass prototypejs bug filing for multiple security issues

2009-10-26 Thread Michael Gilbert
On Mon, 26 Oct 2009 14:04:06 -0500, Adam Majer wrote: > On Sun, Oct 18, 2009 at 08:43:35PM -0400, Michael S Gilbert wrote: > > Here are the affected source packages: > > - rails (embed) > > ~$ apt-file list rails | grep prototype.js > rails: > /usr/share/rails/actionpack/test/fixtures/pub

Re: Iceweasel and Firefox compatibility

2009-11-09 Thread Michael Gilbert
On 11/9/09, John Goerzen wrote: > Here are some sites/apps that break, at least in part, because of our > API claiming to be Iceweasel: > > Zimbra admin console > BlackBoard (used by thousands of universities) > http://browserplus.yahoo.com/ (claims the browser isn't supported) > http://gears.goo

Re: Bug#559802: CVE-2009-3736 local privilege escalation

2009-12-07 Thread Michael Gilbert
On Mon, 07 Dec 2009 08:56:07 +0100, Stefan Hornburg (Racke) wrote: > Michael Gilbert wrote: > > Package: courier-authlib > > Severity: grave > > Tags: security > > > > Hi, > > > > The following CVE (Common Vulnerabilities & Exposures) id was &

Re: Bug#559802: CVE-2009-3736 local privilege escalation

2009-12-08 Thread Michael Gilbert
On Tue, 8 Dec 2009 03:13:06 +1100, Steffen Joeris wrote: > > > > The following CVE (Common Vulnerabilities & Exposures) id was > > > > published for libtool. I have determined that this package embeds a > > > > vulnerable copy of the libtool source code. However, since this is a > > > > mass bug

Re: unzip.h and unzip.c files in source packages.

2009-12-15 Thread Michael Gilbert
On Tue, 15 Dec 2009 23:50:43 +0900, Charles Plessy wrote: > Dear all, > > while reviewing an Ubuntu package that we are considering to submit to the NEW > queue for inclusion in Debian, I found a copy of source files from the > ‘minizip’ package, that was not mentionned in debian/copyright. [...]

Suggested improvements to the release-critical bug tracker

2008-09-13 Thread Michael Gilbert
Hello, I've noticed that most issues tracked on the release-critical bug tracker [1] are actually already fixed in unstable. This is leading to the perception there are an enormous number of unfixed release-critical issues for lenny (298 currently). And it makes it harder to figure out which iss

Direction on foo2zjs and web fetching scripts

2008-11-03 Thread Michael Gilbert
the bug severity command and control authority [5] on my part). Where do we go from here to make sure the issue gets the appropriate level of thought and consideration that it deserves (after lenny gets released of course)? Best wishes, Michael Gilbert [1] http://lists.debian.org/debian-release

Direction on foo2zjs and web fetching scripts

2008-11-03 Thread Michael Gilbert
ourse)? Best wishes, Michael Gilbert [1] http://lists.debian.org/debian-release/2008/11/msg00106.html [2] http://bugs.debian.org/449497 [3] http://bugs.debian.org/503813 [4] http://bugs.debian.org/503814 [5] http://lists.debian.org/debian-ctte/2008/10/msg6.html P.S. Please CC me on any responses

Re: Direction on foo2zjs and web fetching scripts

2008-11-03 Thread Michael Gilbert
I appologize for the double post. Please disregard the first message, which was send mid-thought due to an errant click. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#440607: ITP: steam-powered -- Valve's steam game content delivery system

2007-09-02 Thread Michael Gilbert
Package: wnpp Severity: wishlist Owner: Michael Gilbert <[EMAIL PROTECTED]> * Package name: steam-powered Version : 6 Upstream Author : Michael Gilbert * URL : no website * License : GPL Programming Lang: shell Description : Valve's steam g

Re: Switch on compiler hardening defaults

2010-01-05 Thread Michael Gilbert
On Wed, 6 Jan 2010 11:01:01 +0800 Paul Wise wrote: > On Wed, Jan 6, 2010 at 9:20 AM, Kees Cook wrote: > > > There is a maintained (by RedHat) patch for dealing with PIE.  I already > > maintain a delta for this in Ubuntu, but as you can see in the gdb bug, > > the gdb maintainer doesn't want it

Re: #560778 apt-listchanges: depends on things in optional, which depend on things in extra

2010-01-26 Thread Michael Gilbert
On Tue, 26 Jan 2010 13:33:32 +0100, Stefano Zacchiroli wrote: > All in all (and unless I've missed something), the choice seems to be > relatively self contained. We would "just" need to promote to standard > python-support and python-apt. For reference, on amd64 the total > installed-size of the 2

Re: correct/ideal way to obtain root from a shell script

2010-01-31 Thread Michael Gilbert
On Sat, 30 Jan 2010 22:58:20 + Jon Dowland wrote: > Hi folks, > > I need to run a command as the superuser inside > game-data-packager (gdp). Up until now, I've been > hardcoding a sudo invocation and depending on sudo. maybe packaging isn't the best solution to the underlying problem? woul

Re: Downgrading a package to get it into upcoming release

2010-02-16 Thread Michael Gilbert
On Tue, 16 Feb 2010 18:23:39 +0100 Jean-Christophe Dubacq wrote: > On 16/02/2010 17:04, Antonin Kral wrote: > > Hi all, > > > > I am looking for some advise / opinions. I am working with guys from > > MongoDB project to get stable package in Debian. We have currently > > version 1.3.1 in unstable

Re: Downgrading a package to get it into upcoming release

2010-02-16 Thread Michael Gilbert
On Tue, 16 Feb 2010 12:52:34 -0500 Michael Gilbert wrote: > On Tue, 16 Feb 2010 18:23:39 +0100 Jean-Christophe Dubacq wrote: > > > On 16/02/2010 17:04, Antonin Kral wrote: > > > Hi all, > > > > > > I am looking for some advise / opinions. I am working with

Re: Downgrading a package to get it into upcoming release

2010-02-16 Thread Michael Gilbert
On 2/16/10, Sven Joachim wrote: > On 2010-02-16 18:55 +0100, Michael Gilbert wrote: > >>> all of these seem like rather complicated solutions. wouldn't it be a >>> bit simpler to ask for removal from both testing and unstable, then once >>> that happens, up

Re: md5sums files

2010-03-03 Thread Michael Gilbert
On Wed, 03 Mar 2010 21:58:11 +0100, Frank Lin PIAT wrote: > On Tue, 2010-03-02 at 18:21 -0800, Russ Allbery wrote: > > Wouter Verhelst writes: > > > > > Or is it useful to be able to say "if it doesn't check out, it's > > > certainly corrupt, and if it does check out, it may be corrupt"? Didn't >

Re: including full package source code in the debian release

2010-03-06 Thread Michael Gilbert
On Sat, 06 Mar 2010 19:29:22 -0800 Jamie Morken wrote: > so including compressed package source code would have a very minor impact on > the overall file size of the debian release. you can achieve your goal by burning the isos and having them on hand. or you can create less physical waste by loo

source.debian.net

2010-03-13 Thread Michael Gilbert
Does anyone know who maintains source.debian.net? It's a really great service, but its been down for about a month now. I would like to to make sure they're aware of the problem. Thanks. Best wishes, Mike -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "un

Re: Preparing a Debian "e500" port/derivative (ABI-incompatible PowerPC variant)

2010-03-23 Thread Michael Gilbert
On Tue, 23 Mar 2010 13:04:04 -0500, Moffett, Kyle D wrote: > [Note: I'm not authorized to speak "on behalf of" my employer, but this > represents (to the best of my knowledge) our current plans and goals] > > Please maintain the CC list, all of us here at eXMeritus are interested in > comments an

Re: A Look In the Mirror: Attacks on Package Managers

2010-06-05 Thread Michael Gilbert
On Sun, 6 Jun 2010 12:28:27 +1000 Erik de Castro Lopo wrote: > Hi All, > > Did anyone see this paper: > > A Look In the Mirror: Attacks on Package Managers > http://www.cs.arizona.edu/~jhh/papers/ccs08.pdf > > It suggests that anyone who has control of a mirror can cause client > machin

Re: xulrunner 1.9.2 into sid?

2010-06-28 Thread Michael Gilbert
On Mon, 28 Jun 2010 13:54:28 +0200 Mike Hommey wrote: > On Mon, Jun 28, 2010 at 05:36:11AM -0600, Aaron Toponce wrote: > > Ah yes, Iceape. Their releases are so few and far between, this could > > possibly mean that we won't see Iceweasel 3.6 or Icedove 3.1 for some > > time, correct? Upstream Sea

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 11:57:20 +0200, Adam Borowski wrote: > On Tue, Jun 29, 2010 at 02:57:32AM -0400, Michael Gilbert wrote: > > and engage in poor supportability/secuirity practices (using embedded > > code copies instead of system libraries) [0]. This path is > > unn

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 09:37:46 +0200, Mike Hommey wrote: > On Tue, Jun 29, 2010 at 02:57:32AM -0400, Michael Gilbert wrote: > > Mozilla actively makes it hard to stay up to date > > (by providing as little information as possible in their advisories); > > webkit (for the most

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 17:39:57 +0200, Mike Hommey wrote: > On Tue, Jun 29, 2010 at 11:35:28AM -0400, Michael Gilbert wrote: > > On Tue, 29 Jun 2010 09:37:46 +0200, Mike Hommey wrote: > > > On Tue, Jun 29, 2010 at 02:57:32AM -0400, Michael Gilbert wrote: > > > > Mozilla

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 17:29:20 +0200, Mike Hommey wrote: > On Tue, Jun 29, 2010 at 11:24:00AM -0400, Michael Gilbert wrote: > > No, my proposal is to move the package to a better home: backports. > > Same question as for Md with volatile: > > apt-cache rdepends xulrunner-1.9.1

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 11:03:19 +0200, Josselin Mouette wrote: > Le mardi 29 juin 2010 à 02:57 -0400, Michael Gilbert a écrit : > > Losing mozilla wouldn't be that significant of an loss since there > > are plenty of other good options nowadays (webkit, konquerer, chromium, >

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 18:31:09 +0200, Mike Hommey wrote: > On Tue, Jun 29, 2010 at 12:06:04PM -0400, Michael Gilbert wrote: > > On Tue, 29 Jun 2010 17:29:20 +0200, Mike Hommey wrote: > > > On Tue, Jun 29, 2010 at 11:24:00AM -0400, Michael Gilbert wrote: > > > > No, my p

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 12:35:19 -0400, Joey Hess wrote: > Mike Hommey wrote: > > On Tue, Jun 29, 2010 at 11:51:47AM -0400, Michael Gilbert wrote: > > > The point I was trying to make in that paragraph is that there are two > > > browser codebases (webkit and mozilla) that

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 20:58:11 +0200, Alexander Reichle-Schmehl wrote: > Hi! > > Am 29.06.2010 17:24, schrieb Michael Gilbert: > > > No, my proposal is to move the package to a better home: backports. > > You don't know the current policies WRT packages in backport

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 22:25:06 +0200, Gerfried Fuchs wrote: > Hi! > > * Michael Gilbert [2010-06-29 21:50:31 CEST]: > > On Tue, 29 Jun 2010 20:58:11 +0200, Alexander Reichle-Schmehl wrote: > > > Am 29.06.2010 17:24, schrieb Michael Gilbert: > > > >

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
d to do, and are doing, is a recent trend that I really > > don't understand. > > Amen. > > > On Tue, Jun 29, 2010 at 01:34:46PM -0400, Michael Gilbert wrote: > > I really hope I haven't come across this way. It was certainly not > > my intention. Lik

Re: xulrunner 1.9.2 into sid?

2010-06-29 Thread Michael Gilbert
On Tue, 29 Jun 2010 17:07:27 -0400 Michael Gilbert wrote: > Hopefully restating clearly this time: my proposal is to no longer > distribute mozilla packages in the main stable repository; instead they > can be maintained in backports (or volatile) at the choosing of the > maintain

Re: xulrunner 1.9.2 into sid?

2010-07-04 Thread Michael Gilbert
On Wed, 30 Jun 2010 09:08:36 +0200 Mike Hommey wrote: > > Disadvantages of maintaining the status quo: > > - part way through the release, security support will end and many > > users won't even notice (unless they're subscribed to > > debian-security); leaving a lot of the Debian user base vul

Re: How to make Debian more attractive for users, was: Re: The number of popcon.debian.org-submissions is falling

2010-07-22 Thread Michael Gilbert
On Thu, 22 Jul 2010 15:30:36 +0100, Steve McIntyre wrote: > On Thu, Jul 22, 2010 at 04:25:34PM +0200, Alexander Reichle-Schmehl wrote: > >Hi! > > > >Am 22.07.2010 09:21, schrieb Josselin Mouette: > > > >>> I think with our next release, we will have got less users. Why? > >>> We stripped out all bi

Re: How to make Debian more attractive for users, was: Re: The number of popcon.debian.org-submissions is falling

2010-07-26 Thread Michael Gilbert
On Mon, 26 Jul 2010 12:49:00 +0100, Ian Jackson wrote: > Brian May writes ("Re: How to make Debian more attractive for users, was: Re: > The number of popcon.debian.org-submissions is falling"): > > I would really like to see a HTML/HTTP browser based interface for the > > BTS. I would have sever

Re: How to make Debian more attractive for users

2010-07-26 Thread Michael Gilbert
On Mon, 26 Jul 2010 17:05:19 +0100, Russell Gadd wrote: > I spotted this topic in Debian Project News. I am a non-technical Debian > user (Lenny AMD 64 bit) - I have tried Ubuntu a couple of times but came > back to Debian because of its stability. The main problem I have is lack of > up to date

Re: Bug#592839: dpkg-source option to remove files on unpack: debian/source/remove-files

2010-08-13 Thread Michael Gilbert
On Fri, 13 Aug 2010 09:58:07 -0700, Russ Allbery wrote: > Raphael Hertzog writes: > > > As suggested by Ian on -devel (see attachment), it would be nice to have > > a way to remove files during unpack of a source package to hide non-free > > files from our users without stripping them from the or

Re: Bugs in Backported Packages

2010-09-07 Thread Michael Gilbert
On Tue, 7 Sep 2010 21:56:21 +0200, Sebastian Harl wrote: > Hi, > > On Tue, Sep 07, 2010 at 12:46:12PM -0700, Don Armstrong wrote: > > An alternative solution is to just have reportbug mail the backport > > bug reporting mailing list, and have people bounce messages as > > appropriate to the BTS. >

Re: Bugs in Backported Packages

2010-09-07 Thread Michael Gilbert
On Tue, 7 Sep 2010 22:27:47 +0200, Sebastian Harl wrote: > Hi, > > On Tue, Sep 07, 2010 at 04:18:48PM -0400, Michael Gilbert wrote: > > On Tue, 7 Sep 2010 21:56:21 +0200, Sebastian Harl wrote: > > > On Tue, Sep 07, 2010 at 12:46:12PM -0700, Don Armstrong wrote: > >

Re: Bugs in Backported Packages

2010-09-07 Thread Michael Gilbert
On Tue, 7 Sep 2010 13:48:09 -0700, Steve Langasek wrote: > On Tue, Sep 07, 2010 at 04:18:48PM -0400, Michael Gilbert wrote: > > Doing a quick look at the backports mailing list archive, there are less > > than 10 bugs reported per month on average. That is for hundreds of > >

Re: Bugs in Backported Packages

2010-09-07 Thread Michael Gilbert
On Tue, 7 Sep 2010 15:03:56 -0700 Steve Langasek wrote: > On Tue, Sep 07, 2010 at 05:13:14PM -0400, Michael Gilbert wrote: > > > > Backports has now been declared "officially" supported by the project > > > > as a whole. That made it the collective responsibi

Re: Summary of CUT discussions (Was: unstable/testing/[pending/frozen/]stable)

2010-09-23 Thread Michael Gilbert
On Thu, 23 Sep 2010 14:30:30 +0200, Raphael Hertzog wrote: > Personally I would like to have snapshots every 2 or 3 months. Colin > Watson pointed out in an LWN comment (http://lwn.net/Articles/406597/): > | There's a good chance that CUT could serve a dual purpose of making it > | easier to prepar

Re: Bits from the Security Team (for those that care about bits)

2011-01-26 Thread Michael Gilbert
On Wed, 26 Jan 2011 14:47:52 +0100, Goswin von Brederlow wrote: > Thijs Kinkhorst writes: > > > * Issues in specific packages > > > > We further discussed some specific problematic packages. One example is > > ia32-libs, which is difficult because it includes 100+ other source > > packages. This

Re: Upstream "stable" branches and Debian freeze

2011-01-31 Thread Michael Gilbert
On Mon, 31 Jan 2011 15:25:11 +0100, Max Kellermann wrote: > Hi, > > I'm the upstream maintainer of the Music Player Daemon project, and > receive a number of support requests / bug reports from Debian users > who use the outdated version 0.15.12 of "mpd", currently in testing. > These bugs were al

Re: The future of m-a and dkms

2011-02-13 Thread Michael Gilbert
On Sun, 13 Feb 2011 23:52:22 +0100 Christoph Anton Mitterer wrote: > On Sun, 2011-02-13 at 23:21 +0100, Patrick Matthäi wrote: > > since we have got a stable release with dkms now, I am asking myself, if > > it is still necessary to support module-assistant. > > dkms is IMHO the better system and

Re: Release file changes

2011-02-21 Thread Michael Gilbert
On Mon, 21 Feb 2011 18:55:13 +0100, Florian Weimer wrote: > * Joerg Jaspert: > > > I additionally opened a bug with apt to add support for SHA512SUM, so > > we can start using them. As soon as that is possible I intend to drop > > SHA256 and end up with SHA1/SHA512 only. > > Please don't. I have

Re: Release file changes

2011-02-21 Thread Michael Gilbert
On Mon, Feb 21, 2011 at 3:05 PM, Joerg Jaspert wrote: > On 12398 March 1977, Joey Hess wrote: > >>> until today our Release files included 3 Hashes for all their entries: >>> MD5SUM, SHA1, SHA256. I just modified the code to no longer include >>> MD5SUM in *all* newly generated Release files. >> Wh

Re: maintainer ignores bug

2011-02-26 Thread Michael Gilbert
On Sat, 26 Feb 2011 17:52:02 +0200 Dmitry Baryshev wrote: > Hello guys. > > I've filed a bug on reportbug, but its maintainer ignores it, and continues > to close it without any troubleshooting or debug. I did a simple > troubleshooting by myself, but maintainer ignored it and closed the bug > ag

Call for Testing: Unofficial Debian Monthly Testing Snapshot Release Candidate (version 2011.03rc1)

2011-02-28 Thread Michael Gilbert
Hello world, I am pleased to announce the very first unofficial Debian monthly testing snapshot release candidate (version 2011.03rc1). This release is currently available in two flavors, i386 and amd64, as mini iso images (16 MiB each) downloadable from: http://alioth.debian.org/~gilbert-guest/sn

Unofficial Debian Monthly Testing Snapshot Release (version 2011.03 final)

2011-03-06 Thread Michael Gilbert
Hi all, I am pleased to announce the very first unofficial Debian monthly testing snapshot release (version 2011.03). It is currently available in two flavors as mini iso images (for i386 and amd64 at 16 MiB each) downloadable from: http://alioth.debian.org/~gilbert-guest/snapshots/2011.03/debian-

Re: let missing-debian-source-format lintian tag be a warning!

2014-07-15 Thread Michael Gilbert
On Tue, Jul 15, 2014 at 3:50 PM, Scott Kitterman wrote: > It would be nice, however, to have a way to specify the alternate behavior in > a consistent reliable way (meaning something I can put in the package when I > add source/format). Archive consistency is far more important than individual mai

Re: Reintroducing FFmpeg to Debian

2014-08-05 Thread Michael Gilbert
On Tue, Aug 5, 2014 at 11:45 AM, Wookey wrote: > I really don't see sufficient reasons why we shouldn't at least put it > experimental so that maintainers can easily test this stuff. The problem is an undermanned ftpmaster team [0], so help there is probably appreciated and the obvious way to brin

Re: Reverting to GNOME for jessie's default desktop

2014-08-07 Thread Michael Gilbert
On Fri, Aug 8, 2014 at 12:41 AM, Joey Hess wrote: >> Hardware: GNOME 3.12 will be one of the few desktop environments to support >> HiDPI displays, now very common on some laptop models. Lack of support for >> HiDPI means non-technical users will get an unreadable desktop by default, >> and >> no

Re: Reverting to GNOME for jessie's default desktop

2014-08-07 Thread Michael Gilbert
On Fri, Aug 8, 2014 at 1:52 AM, Michael Gilbert wrote: > The better question is whether the xfce switch had or has any > influence on slowing the general debian growth rate [0]? Is the > slight downtick over the last few months due to the default desktop, > or some other change that

Re: [Pkg-xfce-devel] Reverting to GNOME for jessie's default desktop

2014-08-08 Thread Michael Gilbert
On Fri, Aug 8, 2014 at 12:00 PM, Marco d'Itri wrote: >> If the xfce iso didn't exist, people in these situtations would >> not be able to install a usable Debian system. > I see a solution that would satisfy everybody: whoever is interested in > supporting this kind of situations could build CD ima

Re: Bug#729203: Reintroducing FFmpeg to Debian

2014-08-09 Thread Michael Gilbert
On Sat, Aug 9, 2014 at 7:34 AM, Andreas Cadhalpun wrote: > It's probably not necessary to make a new upload to the NEW queue for this > change. In the repository is a new upstream version anyway and it will be > uploaded, once the current version gets accepted. Based on the license review, you sho

Re: Bug#757555: pam: CVE-2014-2583 pam_timestamp directory traversal issues

2014-08-10 Thread Michael Gilbert
pam_timestamp module (closes: 757555) + + -- Michael Gilbert Sat, 09 Aug 2014 09:50:42 + + pam (1.1.8-3) unstable; urgency=low * debian/rules: On hurd, link libpam explicitly with -lpthread since glibc diff -u pam-1.1.8/debian/patches-applied/series pam-1.1.8/debian/patches-applied/ser

Re: Can a leaf package require SSE2 on i386?

2014-09-14 Thread Michael Gilbert
On Sun, Sep 14, 2014 at 2:47 AM, Sébastien Villemot wrote: > The bottom line is that julia needs SSE2 (and porting it to the x87 FPU > requires changes that are beyond what I am willing/able to do, see [1] > for more details). And the presence of SSE2 is not guaranteed on the > i386 architecture.

Re: Bug#752450: ftp.debian.org: please consider to strongly tighten the validity period of Release files

2014-10-29 Thread Michael Gilbert
On Thu, Oct 30, 2014 at 12:09 AM, Christoph Anton Mitterer wrote: > On Wed, 2014-10-29 at 19:39 -0700, Russ Allbery wrote: >> Packages appearing on mirrors is not how we notify Debian users of >> security updates. We do that by issuing a security advisory. > Aha,... well... sounds like nitpicking,

Re: Bug#752450: ftp.debian.org: please consider to strongly tighten the validity period of Release files

2014-10-29 Thread Michael Gilbert
On Thu, Oct 30, 2014 at 1:12 AM, Russell Stuart wrote: > On Wed, 2014-10-29 at 21:58 -0700, Russ Allbery wrote: >> Also, this means that you completely miss security advisories that *don't* >> involve changing a package in the archive, like "this thing is a disaster, >> so we're pulling it from the

Please more fish (was: so long and thanks for all the fish)

2014-11-08 Thread Michael Gilbert
On Sat, Nov 8, 2014 at 8:08 PM, Russ Allbery wrote: > zlatan writes: > >> In advance sorry for all spelling mistake that I will write as I am >> writing from my phone and I am not a native English speaker. > > [...] > > And yet, I don't see how it could have been said better. Thank you so > much f

Re: Please more fish

2014-11-08 Thread Michael Gilbert
On Sat, Nov 8, 2014 at 10:53 PM, Russ Allbery wrote: > I don't want this to be taken as asking for criticism to be shut down, so > I'm not asking this of anyone who wants to agree with Michael. If you > want to do that in public or private, please go ahead. But I would > greatly appreciate not be

Re: Please more fish (was: so long and thanks for all the fish)

2014-11-08 Thread Michael Gilbert
On Sat, Nov 8, 2014 at 10:57 PM, Christoph Anton Mitterer wrote: > On Sat, 2014-11-08 at 22:32 -0500, Michael Gilbert wrote: >> You are one of four >> complicit in the act that finally pushed Joey over the edge [0]. > > Don't you think it goes a bit far to personally accu

Re: Please more fish (was: so long and thanks for all the fish)

2014-11-08 Thread Michael Gilbert
On Sun, Nov 9, 2014 at 12:01 AM, Christoph Anton Mitterer wrote: > On Sat, 2014-11-08 at 23:30 -0500, Michael Gilbert wrote: >> No accusation, just a statement of fact. Four ctte members were >> complicit in the vote [0] > > Well maybe I read that ruling wrong, but didn&

Re: Please more fish (was: so long and thanks for all the fish)

2014-11-09 Thread Michael Gilbert
On Sun, Nov 9, 2014 at 10:10 AM, Ralf Jung wrote: > I read Joey's message over and over without getting any more clues. He > said the CTTE has "Decided it should make a decision", which it seems to > me it did not. So I probably misunderstood something more fundamental here. Read all of #762194 ve

Re: state of security hardening build flag efforts

2012-04-07 Thread Michael Gilbert
On Sat, Apr 7, 2012 at 5:50 AM, Julien Cristau wrote: > On Sat, Apr 7, 2012 at 11:27:46 +0200, Raphael Hertzog wrote: > > > Hi, > > > > On Sat, 07 Apr 2012, Julien Cristau wrote: > > > On Sat, Apr 7, 2012 at 02:17:21 +0200, Kurt Roeckx wrote: > > > > > > > However, I wonder why bindnow isn't on

Re: what to do is maintainer is lacking? (was: wine-unstable in Debian)

2012-04-18 Thread Michael Gilbert
On Wed, Apr 18, 2012 at 10:21 AM, Stefano Zacchiroli wrote: > On Wed, Apr 18, 2012 at 10:00:43AM -0400, Chris Knadle wrote: >> Debian has NMUs (Non-Maintainer Uploads) -- however this is mainly meant for >> uploading critical bug fixes without having to resort to hijacking the >> package, and AFAI

Volunteer-initiated team maintenance as a solution for packages with low activity

2012-04-18 Thread Michael Gilbert
Hi, I would like to throw out an idea for constructively combating low activity in strongly maintained packages. Across the Debian package ecosystem team maintainership has been seen as the strongest antidote for package stagnation. This process "just works" because as one team member becomes le

Re: Volunteer-initiated team maintenance as a solution for packages with low activity

2012-04-18 Thread Michael Gilbert
On Wed, Apr 18, 2012 at 2:12 PM, Moray Allan wrote: > On Wed, 2012-04-18 at 13:10 -0400, Michael Gilbert wrote: >> So anyway, enough explanation, on to my proposed solution.  Seeing as >> team spirit has been a quite effective antidote to stagnation, lets go >> ahead and

Re: Volunteer-initiated team maintenance as a solution for packages with low activity

2012-04-18 Thread Michael Gilbert
On Wed, Apr 18, 2012 at 2:51 PM, Colin Watson wrote: > Nowhere in this process seems to be the notion that you should > contribute actual effort first before adding yourself as an uploader.  I > think that's important, particularly in the many situations where it's > not lack of packaging of a new

Re: wine-unstable in Debian

2012-04-25 Thread Michael Gilbert
On Wed, Apr 25, 2012 at 5:27 AM, Goswin von Brederlow wrote: > Jonas Smedegaard writes: > >> On 12-04-18 at 07:17pm, Simon McVittie wrote: >>> I hesitate to suggest this if there's a possibility that the main wine >>> package can come up to date before we freeze, but one way to have Wine >>> 1.4

Re: Licenses not in /usr/share/common-licenses

2012-05-07 Thread Michael Gilbert
On Mon, May 7, 2012 at 6:33 AM, Andrea Veri wrote: > Hi, > > while packaging a few extensions (mainly licensed under the MPL) > within the pkg-mozext team we received a few rejects from the FTP Team > having the following rationale: > > "the MPL license is not installed under /usr/share/common-lice

Re: Licenses not in /usr/share/common-licenses

2012-05-07 Thread Michael Gilbert
On Mon, May 7, 2012 at 11:55 AM, Michael Gilbert wrote: > Would it be unreasonable if someone were to start an > "uncommon-licenses" package?  Then any package depending on that could > use a reference to the license instead of including the full text in > debian/copyright

Re: Licenses not in /usr/share/common-licenses

2012-05-11 Thread Michael Gilbert
On Tue, May 8, 2012 at 1:49 PM, Matthew Woodcraft wrote: > Russ Allbery wrote: >> I think the core question is: why is base-files special? Yes, it's >> essential and all, but that doesn't address the case of packages being >> downloaded separate from Debian, or unpacked by hand, in which case we >>

Re: Wheezy release: CDs are not big enough any more...

2012-05-13 Thread Michael Gilbert
On Sat, May 12, 2012 at 12:04 PM, Steve McIntyre wrote: > Hey folks, > > Remembering the fun that we had during the Squeeze release with trying > to make single-CD installations work well, it's time to consider what > we're going to *claim* to support in Wheezy. We've had a history of > supporting

Re: Licenses not in /usr/share/common-licenses

2012-05-13 Thread Michael Gilbert
On Fri, May 11, 2012 at 10:25 PM, Russ Allbery: >> So, I think [0] is the most astute message in that thread. > >> [0] http://lists.debian.org/debian-policy/2000/11/msg00251.html > > I thought that too when I first read it, but later in the thread are very > cogent arguments for why it's wrong and

Re: Wheezy release: CDs are not big enough any more...

2012-05-14 Thread Michael Gilbert
On Mon, May 14, 2012 at 6:39 AM, Michael Biebl wrote: > On 14.05.2012 12:30, Jonas Smedegaard wrote: >> Let's keep providing CDs as install medium, because it is still relevant >> for some (and, I vaguely feel, not only exotically few) real use cases >> to install non-bloated desktop at places with

Re: this bug .. bugs me

2012-06-05 Thread Michael Gilbert
On Tue, Jun 5, 2012 at 11:52 AM, Joey Hess wrote: > 10 Jun 2010  a bug was filed wanting wine 1.2 packaged in time for squeeze. > 12 Aug 2010  packages of 1.2 were available .. but not in Debian. >  6 Feb 2011  squeeze shipped with the same wine version that shipped in lenny. >  7 Mar 2012  wine 1.

Re: this bug .. bugs me

2012-06-05 Thread Michael Gilbert
On Tue, Jun 5, 2012 at 1:25 PM, Andrey Rahmatullin wrote: > On Tue, Jun 05, 2012 at 12:46:46PM -0400, Michael Gilbert wrote: >> Not sure what to say other than when I became a DD and gained the >> power to NMU, I started fixing this.  Before that, Ove's contributor >> rej

Re: this bug .. bugs me

2012-06-05 Thread Michael Gilbert
On Tue, Jun 5, 2012 at 1:17 PM, Christian PERRIER wrote: > You mean, besides completely hijacking the package? > > The last maintainer upload is dated 2010/05/23. > > So, from my POV, you (Michael) and Hilko Bengen seem to be the real > package maintainers for wine. > > My suggestion: do a maintain

Re: this bug .. bugs me

2012-06-05 Thread Michael Gilbert
> They are members of pkg-wine already, so I think they can make changes > that can improve the status but not limited to minimal changes for > NMU. If Mike don't want to "hijack" at least for now, team upload is > good enough. Hopefully this will make some people happy: I pushed the first team up

Migration path for 'Multi-Arch:allowed' packages

2012-06-11 Thread Michael Gilbert
Hi, We've been getting a few bug reports from users attempting to install multiarch wine who have yet to manually enable multiarch itself. Obviously that is a failure on their part, and is easily correctable. However, I wonder if we can't make such migrations a bit more straightforward? In partic

Re: Migration path for 'Multi-Arch:allowed' packages

2012-06-12 Thread Michael Gilbert
On Tue, Jun 12, 2012 at 11:45 AM, David Kalnischkies wrote: > On Mon, Jun 11, 2012 at 9:40 PM, Michael Gilbert wrote: >> In particular, I filed a bug against dpkg requesting that it produce >> more informative error messages in these cases [0], but I wonder if a >> part of t

Re: Maintainers, teams, Uploaders, DMs, DDs, etc.

2012-06-13 Thread Michael Gilbert
On Wed, Jun 13, 2012 at 1:35 PM, Arno Töll wrote: > Hi, > > as a clarification, because I was pointed to it: > > On 13.06.2012 18:54, Arno Töll wrote: >> Drive-by sponsoring makes this even more complicated and is not helping >> anybody. We should stop advocating drive-by sponsoring at all. > > ...

Re: [xml/sgml-pkgs] Bug#676686: libxslt1.1: libxslt1.1 binNMU broke multi-arch installability

2012-06-14 Thread Michael Gilbert
On Fri, Jun 8, 2012 at 6:17 PM, Philipp Kern wrote: > On Sat, Jun 09, 2012 at 04:36:40AM +0800, Aron Xu wrote: >> Does this mean M-A:same packages should be prevented from being >> binNMUed, but only source upload can be accepted? > > You cannot deprive the Release Team of this tool. Also multiarch

Re: [xml/sgml-pkgs] Bug#676686: libxslt1.1: libxslt1.1 binNMU broke multi-arch installability

2012-06-14 Thread Michael Gilbert
On Thu, Jun 14, 2012 at 12:40 PM, Cyril Brulebois wrote: > Michael Gilbert (14/06/2012): >> package (version) sid; urgency=low >> >>   * Binary-only non-maintainer upload; no source changes. >> >>  -- Debian Release Team  Tue, 05 Jun >> 2012 16:33:05 +

  1   2   3   >