Bug#295504: grub-install: fails to notice a segfault in $grub_shell

2005-02-16 Thread Michael Gold
Package: grub Version: 0.95+cvs20040624-14 /sbin/grub segfaults on my amd64 system when called from grub-install, due to bug #293722. The grub-install script doesn't notice this, states No error reported, and exits normally. Sample output: == iria:~# grub-install /dev/sda /sbin/grub-install:

Bug#296542: GRUB, IDE problems on amd64

2005-02-22 Thread Michael Gold
Package: installation-reports INSTALL REPORT Debian-installer-version: http://debian-amd64.alioth.debian.org/install-images/sid-amd64-netboot.iso This is a Debian sarge installation netboot image, built on 20050210. uname -a: Linux iria 2.6.10-9-amd64-k8 #1 Wed Feb 9 22:29:16 CET 2005

Bug#481445: 'screen -ls' doesn't use locale's date/time format

2008-05-16 Thread Michael Gold
Package: screen Version: 4.0.3-9 The patch added for bug 206572 (51EXP_session_creation_time.dpatch.diff) uses the hard-coded strftime format %d/%m/%Y %H:%M:%S. Please change this to use the proper date format for the user's locale, e.g. %c or %x %X. -- System Information: Debian Release:

Bug#504421: Upstream ticket #1456

2008-11-25 Thread Michael Gold
tags 504421 patch stop On Tue, Nov 11, 2008 at 19:14:33 -0500, Michael Gold wrote: I noticed the same patch exists in the libvorbis trunk, so I opened a ticket in the Xiph.org bug tracker: https://trac.xiph.org/ticket/1456 The bug is fixed by upstream changesets 15532 and 15533. This patch

Bug#504421: Upstream ticket #1456

2008-11-11 Thread Michael Gold
I noticed the same patch exists in the libvorbis trunk, so I opened a ticket in the Xiph.org bug tracker: https://trac.xiph.org/ticket/1456 -- Michael signature.asc Description: Digital signature

Bug#540446: panels.ini written when auto-save disabled

2009-08-07 Thread Michael Gold
Package: mc Version: 2:4.7.0-pre1-1 I have the auto save setup option disabled, but since the most recent update mc has been writing panels.ini on exit anyway. This causes it to start with the inactive panel showing whatever random directory was selected at the last exit, rather than the

Bug#540571: crashes when ':' typed

2009-08-08 Thread Michael Gold
Package: hexer Version: 0.1.4c-3 Severity: grave hexer segfaults whenever a colon is typed; this makes the package unusable since many important commands are prefixed with a colon. Older versions worked fine on the same system. - Michael -- System Information: Debian Release: squeeze/sid APT

Bug#540573: Falsely prints crc16 check passed

2009-08-08 Thread Michael Gold
Package: checkmp3 Version: 1.98-7 checkmp3 often prints crc16 check passed even if a file is corrupt, since the code to handle a crc16 error is commented out (search for BROKEN_CODE in mp3_check_misc.c). This can be confirmed by corrupting some data in a checksummed MP3 file. The passed message

Bug#540576: Toggle useless messages and similar links don't work unless Javascript is enabled

2009-08-08 Thread Michael Gold
Package: bugs.debian.org The web page for each bug report includes a link labelled Toggle useless messages that points to javascript:toggle_infmessages();. This link doesn't do anything on a browser with Javascript disabled. Either this link should be hidden (with the useless messages always

Bug#540571: Backtrace

2009-08-09 Thread Michael Gold
Here's the gdb output after rebuilding it with debug symbols: Program received signal SIGSEGV, Segmentation fault. strlen () at ../sysdeps/x86_64/strlen.S:48 48 ../sysdeps/x86_64/strlen.S: No such file or directory. ~ in ../sysdeps/x86_64/strlen.S Current language: auto; currently asm

Bug#540571: Backtrace

2009-08-22 Thread Michael Gold
On Fri, Aug 21, 2009 at 10:35:51 +0300, Peter Pentchev wrote: I've fixed it in my Subversion repository, and I'll release hexer-0.1.5 (adopting the upstream) soon. In the meantime, could you try dropping the attached file into debian/patches/ and adding it to series to see if it helps? I no

Bug#598050: ods-auditor fails if RP record specifies a relative domain

2010-09-25 Thread Michael Gold
Package: opendnssec-auditor Version: 1.1.3-1 ods-auditor doesn't expand the final domain field in an RP line. For example, with this line in the master file for rilmarder.org.: @ RP mgold.connect.carleton.ca. mgold the auditor fails with this output: 3: Output zone does not contain

Bug#598049: quicksorter fails on whitespace-only lines

2010-09-25 Thread Michael Gold
Package: opendnssec-signer-tools Version: 1.1.3-1 quicksorter fails when a zonefile has a line containing only whitespace, or whitespace followed by a comment. It displays an Unknown RR error for the line, e.g.: # /usr/lib/opendnssec/opendnssec/quicksorter -o rilmarder.org. -f rilmarder.org. -w

Bug#598051: Auditor fails if domain name configured with trailing dot

2010-09-25 Thread Michael Gold
Package: opendnssec-auditor Version: 1.1.3-1 ods-auditor fails for domains listed with a trailing . in zonelist.xml, e.g.: Zone name=rilmarder.org. The error shown is: Sep 25 16:32:10 iria ods-auditor[8685]: SOA name (rilmarder.org) is different to the configured zone name (rilmarder.org.) -

Bug#508518: command line tools leak activity to local users

2008-12-11 Thread Michael Gold
Package: gnunet-client Version: 0.8.0b-4 The command line tools gnunet-search, gnunet-download, and gnunet-insert only accept search terms, filenames, etc. as command line parameters. This means that other users on the same system could monitor gnunet activity by running ps or top. Since gnunet

Bug#508622: Aggregate plugin shouldn't set last update time on network failure

2008-12-12 Thread Michael Gold
Package: ikiwiki Version: 2.70 Tags: patch The ikiwiki aggregate plugin was unable to update some feeds due to a network misconfiguration; after fixing the network, I tried to re-run the aggregation, but ikiwiki treated all feeds as up to date (as it had set each lastupdate timestamp before

Bug#508623: Package description refers to codecs incorrectly

2008-12-12 Thread Michael Gold
Package: streamripper Version: 1.63.5-2 Severity: minor The package description reads: This command-line tool can be used to record MPEG III and OGG online radio-streams into track-separated audio files. There is no MPEG III standard -- this should be MP3 (short for MPEG 1 layer 3). Also

Bug#536683: Info received (bash execution trace)

2009-09-15 Thread Michael Gold
On Mon, Sep 14, 2009 at 18:28:27 -0300, Rogério Brito wrote: OK, now that I just sent the workaround in the earlier message, I dug in a little further. The problem seems to be related to the embedded awk script in the configure script of the package. In its stock version, when fed with my

Bug#540576: Toggle useless messages and similar links don't work unless Javascript is enabled

2009-08-26 Thread Michael Gold
On Wed, Aug 26, 2009 at 09:16:34 -0700, Don Armstrong wrote: The reasonable default is to not display the useless messages at all. If for some reason you actually want to see them, you can either enable javascript, munge the CSS yourself, or view the source. Disabling stylesheets is an easy

Bug#533604: oidentd

2009-08-29 Thread Michael Gold
On Sat, Aug 29, 2009 at 13:16:21 +0200, Stefan Bauer wrote: Michael, could you please try to set /proc/sys/net/ipv6/bindv6only to 1 and post the output of lsof -itcp:113 without setting -a :: in /etc/default/oidentd? Here on debian unstable, oident binds correctly to all available

Bug#533604: oidentd

2009-08-29 Thread Michael Gold
On Sat, Aug 29, 2009 at 13:16:21 +0200, Stefan Bauer wrote: Here on debian unstable, oident binds correctly to all available interface if bindv6only is set. A modify of -a to :: was not required. Maybe the correct fix would be to set that option on the socket; see

Bug#533604: Doesn't bind to IPv6 addresses by default

2009-06-19 Thread Michael Gold
Package: oidentd Version: 2.0.8-1.2 The oidentd man page states, in the description for the -a option, that The default is to listen for connections on all configured IP addresses -- but the program actually only listens on IPv4 addresses by default. I had to set OIDENT_OPTIONS=-a :: in

Bug#640738: ntpd segfaults when using -i option (chroot jail)

2011-09-06 Thread Michael Gold
Package: ntp Version: 1:4.2.6.p3+dfsg-1 I recently upgraded to a new ntp package; later I found that ntpd had stopped running and would segfault at startup. I traced it to this line in /etc/default/ntp: NTPD_OPTS='-i /var/lib/ntp/' After removing the line, ntpd runs properly. This

Bug#640746: Iceweasel wouldn't run after xulrunner upgrade

2011-09-06 Thread Michael Gold
Package: iceweasel Version: 6.0-4 Severity: important After upgrading some packages I was unable to start Iceweasel. It would just show these messages on the console and exit: Error: Platform version '6.0.2' is not compatible with minVersion = 6.0 maxVersion = 6.0 This looks like a xulrunner

Bug#639728: Dell Latitude E6520: bad fstab entry, unsupported network controller

2011-08-29 Thread Michael Gold
Package: installation-reports Version: 2.45 Severity: wishlist -- Package-specific info: Boot method: USB Image version: debian-6.0.1a-amd64-i386-netinst.iso (SHA1 fec4209384a78f304817ee8f6a4ce89acbb57e21) Date: 2011-07-14T09:41-0400 Machine: Dell Latitude E6520 Partitions: Disk /dev/sda:

Bug#639728: Dell Latitude E6520: bad fstab entry, unsupported network controller

2011-08-29 Thread Michael Gold
On Mon, Aug 29, 2011 at 19:55:38 +0100, Miguel Figueiredo wrote: I wanted to install Debian unstable, but there are no cryptographic signatures on the unstable installer snapshots, so I installed the newest stable release and upgraded. [...] The daily images, and the checksums, can be

Bug#633508: Can't search for octets = 128

2011-07-10 Thread Michael Gold
Package: hexer Version: 0.1.6-2 Searches like /\xff in which the high bit is set now return no match even when such a string is present. They worked in 0.1.4c. It's still possible to search for values less than 128. - Michael -- System Information: Debian Release: wheezy/sid APT prefers

Bug#648253: Torbutton ignores port setting and uses 9050 instead

2011-11-09 Thread Michael Gold
Package: xul-ext-torbutton Version: 1.4.4.1-1 Tags: security I run Tor on a low SocksPort to prevent non-root accounts from impersonating the server. The latest version of Torbutton silently resets the port to 9050 on every startup. This normally prevents it from working, but also introduces a

Bug#718186: git-annex: git annex find writes status message to stdout

2013-07-28 Thread Michael Gold
Package: git-annex Version: 4.20130723 Sometimes when I issue a git annex find command, git-annex writes this message to stdout: (merging synced/git-annex into git-annex...) When I'm piping the command to xargs -d '\n' cp --target=..., it produces an annoying error: cp: cannot stat ‘(merging

Bug#718185: git-annex: Can't add directories starting with :

2013-07-28 Thread Michael Gold
Package: git-annex Version: 4.20130723 If a directory name starts with :, git-annex add will issue an invalid git command: michael@terra:~/x$ mkdir annex-test michael@terra:~/x$ cd annex-test/ michael@terra:~/x/annex-test$ git init Initialized empty Git repository in

Bug#671174: vidir: interact with version control systems

2013-07-28 Thread Michael Gold
On Wed, May 02, 2012 at 12:21:56 -0400, Joey Hess wrote: This may fall under my general TODO of making vidir be able to run arbitrary commands intelligently based on properties of the files, compressing/uncompressing/converting/moving/etc. I have never yet sat down and came up with a

Bug#718191: moreutils: vidir loses changes on error

2013-07-28 Thread Michael Gold
Package: moreutils Version: 0.49 Severity: grave vidir will abort, discarding the edited name list, on a parsing error: michael@terra:~/x$ mkdir vidir-test michael@terra:~/x$ cd vidir-test/ michael@terra:~/x/vidir-test$ ls michael@terra:~/x/vidir-test$ touch a b c d e

Bug#718194: molly-guard: prints ungrammatical shutdown warning

2013-07-28 Thread Michael Gold
Package: molly-guard Version: 0.4.5-1 Severity: minor molly-guard prints a message like this when catching a shutdown request: W: molly-guard: SSH session detected! Please type in hostname of the machine to shutdown: shutdown isn't a verb; the message should say shut down. I'd also suggest

Bug#646031: theunarchiver: creates $HOME/GNUstep/Library directory

2013-07-28 Thread Michael Gold
On Wed, Jan 11, 2012 at 16:25:07 +0100, Jakub Wilk wrote: When I unpack RAR archives with unar, it creates $HOME/GNUstep/Library directory: ... I took another approach to work around this problem: I created a LD_PRELOAD'able library that overrides the mkdir() function. I think the same

Bug#718191: moreutils: vidir loses changes on error

2013-07-28 Thread Michael Gold
severity 718191 normal thanks On Sun, Jul 28, 2013 at 18:40:25 -0400, Joey Hess wrote: Grave severity means that this is so important that it would be better to remove moreutils entirely than leave it as-is. Sorry, I wasn't aware of that; the documentation[1] states that data loss alone is

Bug#737361: higan: nall::directory doesn't handle symlinks/DT_UNKNOWN correctly

2014-02-01 Thread Michael Gold
Package: higan Version: 094-2 Severity: important Tags: patch The game library and import dialog don't work at all on my system with the packaged version of higan: * I'm not able to navigate to the directories I want to use, because I have symlinks pointing to them: symlinks to directories

Bug#737365: higan: should look for libraries in LD_LIBRARY_PATH

2014-02-01 Thread Michael Gold
Package: higan Version: 094-2 Severity: wishlist This patch makes library::open try a dlopen call with no specified path before looking in /usr/lib/higan/lib. This is more convenient for debugging, because I can use LD_LIBRARY_PATH to load a new libananke without installing it as root. -

Bug#737364: higan: should support DEB_BUILD_OPTIONS='noopt nostrip'

2014-02-01 Thread Michael Gold
Package: higan Version: 094-2 Severity: minor Tags: patch This patch adds support for DEB_BUILD_OPTIONS=noopt and DEB_BUILD_OPTIONS=nostrip, which are convenient for debugging. - Michael -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable')

Bug#737363: higan: crashes when importing or loading unheadered NES ROM

2014-02-01 Thread Michael Gold
Package: higan Version: 094-2 When I try to import an NES ROM without an iNES header, higan segfaults. I don't see any mention in the user guide about preferred ROM formats (headered/unheadered, zipped, etc.), but anything unsupported should fail with a clear error message. Details follow. -

Bug#737363: higan: crashes when importing or loading unheadered NES ROM

2014-02-02 Thread Michael Gold
On Sun, Feb 02, 2014 at 13:24:30 +0100, Tobias Hansen wrote: Hi Michael, thanks for all those nice bug reports! I'm quite sure that higan can only import NES games with iNES headers because I saw byuu say they contain crucial information that is needed to generate the manifests. If you can

Bug#737363: higan: crashes when importing or loading unheadered NES ROM

2014-02-06 Thread Michael Gold
On Thu, Feb 06, 2014 at 23:41:27 +0100, Tobias Hansen wrote: Thank you very much Michael! byuu has quite high standards regarding the databases so I don't want to mess with that and deviate from what he puts in. You could ask him to put it in the next release but I doubt he will because the

Bug#738270: higan: should use $XDG_CONFIG_HOME

2014-02-08 Thread Michael Gold
Package: higan Version: 094-2 Severity: wishlist Tags: patch higan stores its config files in ~/.config. This patch makes it use XDG_CONFIG_HOME instead, if set. - Michael -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture:

Bug#738359: xorrisofs: -follow-links fails on valid symlinks

2014-02-09 Thread Michael Gold
Package: xorriso Version: 1.3.2-1 Severity: important I have a tree of symlinks, pointing into git-annex repositories, that causes xorrisofs to fail when using the -follow-links option. strace shows that it uses lstat and then tries to resolve the link itself, incorrectly. It shouldn't be

Bug#738365: gdisk: should allow sector size to be changed

2014-02-09 Thread Michael Gold
Package: gdisk Version: 0.8.8-1 Severity: wishlist It would be useful to have a command that rewrites the partition table with an alternate sector size. I opened a Seagate Expansion 3 TB USB3 drive enclosure I'd been using, and connected the ST3000DM001 drive directly via SATA. The GPT was no

Bug#729396: libpoppler19: segfaults after J2K image decode failure

2014-01-13 Thread Michael Gold
On Tue, Nov 12, 2013 at 10:50:07 -0500, Michael Gold wrote: Package: libpoppler19 Version: 0.18.4-8 When I load the attached file in an application like evince or the GIMP that uses libpoppler, I get a segfault after seeing these messages on the console: Error: tcd_decode: incomplete

Bug#738359: xorrisofs: -follow-links fails on valid symlinks

2014-02-10 Thread Michael Gold
On Mon, Feb 10, 2014 at 13:20:53 +0100, Thomas Schmitt wrote: Hi, Linux semantics is that component .. hops up to the parent directory of the link-resolved current tree node. xorriso hopped up to the previous path component. I have uploaded a new development snapshot. Please test

Bug#739004: samba: can't save into a write-only directory

2014-02-14 Thread Michael Gold
Package: samba Version: 2:4.0.11+dfsg-1 Samba clients used to be able to copy files into write-only directories, but at some point in the last year this stopped working. To reproduce, create a write-only directory on the Samba server: mkdir -m 733 writeonly Then mount it from a client and try

Bug#739649: mkvtoolnix: should map language iw to heb

2014-02-20 Thread Michael Gold
Package: mkvtoolnix Version: 6.7.0-1 Severity: wishlist I sometimes see subtitles using the language code iw for Hebrew (e.g., id: iw, index: 6 in a .idx file). mkvmerge treats this as an unknown language. It would be more convenient if it were treated as an alias for heb. - Michael --

Bug#738270: higan: should use $XDG_CONFIG_HOME

2014-02-25 Thread Michael Gold
On Tue, Feb 25, 2014 at 00:01:23 +0100, Tobias Hansen wrote: Hi Michael, I would prefer if this patch would go upstream directly. Did you send it upstream? If yes, what was the response? I sent it on 2014-02-10 (with you CC'd) and didn't get a response. -- Michael signature.asc

Bug#746719: gimp: no longer detects BMP alpha channel

2014-05-02 Thread Michael Gold
Package: gimp Version: 2.8.10-1 The GIMP loads the attached bitmap without displaying its transparency. The following steps show the alpha channel as a solid colour: - use CTRL+L to open the layer window - right-click on the only layer in the list - select Add layer mask - select Layer's

Bug#746719: gimp: no longer detects BMP alpha channel

2014-05-02 Thread Michael Gold
On another system this is working fine. The information for that system is shown below. On the system where GIMP's transparency is broken, chromium still shows the image as transparent. - Michael -- System Information: Debian Release: 7.5 APT prefers stable APT policy: (500, 'stable'),

Bug#751585: systemd: opens emergency shell after prompting for unnecessary dm-crypt passwords

2014-06-14 Thread Michael Gold
Package: systemd Version: 204-10 Severity: critical After installing systemd today and rebooting, I saw a few lines (not errors) about systemd-fsck on xfs filesystems, and then I was prompted for dm-crypt passwords for 4 disks that are not necessary to boot the system. I pressed enter to bypass

Bug#751589: sysvinit-core: /sbin/init missing after switching from systemd to sysvinit

2014-06-14 Thread Michael Gold
Package: sysvinit-core Version: 2.88dsf-53.2 Severity: critical After a failed switch to systemd today (Debian bug #751585), I tried to switch back to sysvinit but found /sbin/init missing after a reboot, which of course prevented the system from booting. /sbin was available in the emergency

Bug#751585: systemd: opens emergency shell after prompting for unnecessary dm-crypt passwords

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 16:27:36 +0200, Michael Biebl wrote: Am 14.06.2014 16:04, schrieb Michael Gold: Package: systemd Version: 204-10 Severity: critical After installing systemd today and rebooting, I saw a few lines (not errors) about systemd-fsck on xfs filesystems, and then I

Bug#751589: [Pkg-sysvinit-devel] Bug#751589: sysvinit-core: /sbin/init missing after switching from systemd to sysvinit

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 16:47:45 +0200, Petter Reinholdtsen wrote: [Michael Gold] /sbin was available in the emergency shell and contained some files, but 'init' wasn't there. 'dpkg -L sysvinit-core' ended at the line '/sbin' (i.e., it was missing /sbin/shutdown, /sbin/init, etc.). I

Bug#751585: systemd: opens emergency shell after prompting for unnecessary dm-crypt passwords

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 17:14:35 +0200, Michael Biebl wrote: Just install the systemd package (but not systemd-sysv) and keep sysvinit-core installed. Then you can easily boot with systemd by specifying the kernel command line parameter init=/lib/systemd/systemd This allows you to test

Bug#751589: sysvinit-core: /sbin/init missing after switching from systemd to sysvinit

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 17:34:21 +0200, Michael Biebl wrote: That said, I can not reproduce the sequence of events which make /sbin/init dissappear. I've installed systemd-sysv in a VM, then ran apt-get install sysvinit-core and /sbin/init was available afterwards. So something else must

Bug#751585: systemd: opens emergency shell after prompting for unnecessary dm-crypt passwords

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 17:30:30 +0200, Michael Biebl wrote: I noticed that you don't have those crypt devices marked as noauto (or nofail) in /etc/fstab. This means, if they fail to show up during boot systemd will drop you in an emergency shell (which is what happened in your case). Try

Bug#751589: sysvinit-core: /sbin/init missing after switching from systemd to sysvinit

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 18:31:25 +0200, Michael Biebl wrote: Did you try apt-get remove systemd? According to apt-history that was the first command I ran after installing it. You can't remove the systemd package while systemd is still the active init. How did you force the removal? I

Bug#751585: systemd: opens emergency shell after prompting for unnecessary dm-crypt passwords

2014-06-14 Thread Michael Gold
severity 751585 normal clone 751585 -1 -2 -3 retitle -1 systemd: shows unnecessary password prompts for encrypted disks severity -1 normal retitle -2 systemd: should print reason for starting emergency shell severity -2 wishlist retitle -3 systemd: emergency shell takes several minutes to start

Bug#751624: [systemd]: emergency shell takes several minutes to start

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 18:50:02 -0400, Michael Gold wrote: On Sat, Jun 14, 2014 at 23:44:42 +0200, Michael Biebl wrote: Am 14.06.2014 22:41, schrieb Michael Gold: * after printing Welcome to emergency mode!, it took a minute or two before a password prompt was shown; but that prompt

Bug#751624: [systemd]: emergency shell takes several minutes to start

2014-06-14 Thread Michael Gold
On Sat, Jun 14, 2014 at 23:44:42 +0200, Michael Biebl wrote: Am 14.06.2014 22:41, schrieb Michael Gold: * after printing Welcome to emergency mode!, it took a minute or two before a password prompt was shown; but that prompt died (I guess) without accepting any keyboard input

Bug#741138: iceweasel: Warn me when closing multiple tabs broken in private browsing mode

2014-03-08 Thread Michael Gold
Package: iceweasel Version: 24.3.0esr-1 The Tabs / Warn me when closing multiple tabs preference doesn't do anything in private browsing mode. To reproduce, open several private tabs in a window, then close the window. No warning is shown. Setting browser.showQuitWarning to any string will

Bug#691099: iceweasel: resolves symlinks for local files and breaks relative links

2014-03-08 Thread Michael Gold
On Sun, Oct 21, 2012 at 16:01:23 +0200, Dominik George wrote: When opening local URLs and the file is a symbolic link, iceweasel resolves them to their target before opening. This breaks relative links in the document and also deviates from the behaviour when using symbolic links on a

Bug#632868: base-files: derive PATH in /etc/profile from /etc/login.defs

2015-01-24 Thread Michael Gold
On Wed, Jul 06, 2011 at 19:19:03 +0300, Georgios M. Zarkadas wrote: This is a solution to bug #571086 (now closed) which keeps /etc/login.defs as the only place to set PATH, by computing the set there value on the fly using only grep and coreutils (both essential packages and thus guaranteed to

Bug#776160: bash-completion: /etc/profile.d/bash_completion causes warnings with '-o nounset'

2015-01-24 Thread Michael Gold
Package: bash-completion Version: 1:2.1-4 Tags: patch /etc/profile.d/bash_completion accesses some variables like $BASH and $PS1 that may be unset, which will produce a warning or error if the (POSIX-standard) 'nounset' option is enabled. See #776154 for details. E.g., $ set -u $

Bug#778480: gpg-connect-agent: percent+ function doesn't encode '+'

2015-02-15 Thread Michael Gold
Package: gnupg-agent Version: 2.0.26-4 The 'percent+' function URL-encodes its argument and replaces spaces with plus signs. But it doesn't encode plus signs in its argument; e.g., gpg-connect-agent --subst '/echo ${percent+ foo+ bar}' /bye prints foo++bar which would decode to foo bar

Bug#776154: base-files: /etc/profile causes warnings with '-o nounset'

2015-01-24 Thread Michael Gold
Package: base-files Version: 8 Tags: patch /etc/profile accesses some variables like $BASH and $PS1 that may be unset, which will produce a warning or error if the (POSIX-standard) 'nounset' option is enabled. To reproduce, run a login shell with '-u' from a user account with no custom

Bug#792639: apt-listbugs: should use https to access bug tracking system

2015-07-30 Thread Michael Gold
On Thu, Jul 30, 2015 at 22:35:17 +0200, Francesco Poli wrote: I have examined your second patch and I have made some modifications/simplifications to it. The main behavioral difference with respect to your patch is that I decided that all the command-line options are to be treated as equally

Bug#792639: apt-listbugs: should use https to access bug tracking system

2015-07-16 Thread Michael Gold
On Fri, Jul 17, 2015 at 04:17:40 +0200, Christoph Anton Mitterer wrote: apt-listbugs uses an unencrypted connection to communicate with the BTS, leaking information about installed packages and versions. You shouldn't expect that much more security by just switching to TLS.

Bug#792639: apt-listbugs: should use https to access bug tracking system

2015-07-16 Thread Michael Gold
Package: apt-listbugs Version: 0.1.16 Severity: wishlist Tags: patch security apt-listbugs uses an unencrypted connection to communicate with the BTS, leaking information about installed packages and versions. (Note that apt can talk https--and I see 26 Debian mirrors with valid certificates,

Bug#792639: apt-listbugs: should use https to access bug tracking system

2015-07-17 Thread Michael Gold
On Fri, Jul 17, 2015 at 20:20:16 +0200, Francesco Poli wrote: On Thu, 16 Jul 2015 20:44:14 -0400 Michael Gold wrote: Well, more packages than versions, I would say, but anyway I fully acknowledge that some information is leaked. In some scenarios, one would prefer to keep these data

Bug#792639: apt-listbugs: should use https to access bug tracking system

2015-07-20 Thread Michael Gold
On Sun, Jul 19, 2015 at 15:58:47 +0200, Francesco Poli wrote: Thank you very much, your helpfulness is really appreciated! I am looking forward to seeing your updated patch. Please send it as soon as it's ready. Here it is. -- Michael diff --git a/bin/apt-listbugs b/bin/apt-listbugs index

Bug#804512: systemd: typo in reportbug output ("analzye")

2015-11-08 Thread Michael Gold
Package: systemd Version: 227-2 Severity: minor When I run "reportbug --template systemd", it includes this text: > state of running services and units (output of systemd-analzye dump). The command is "systemd-analyze", not "systemd-analzye". - Michael -- Package-specific info: -- System

Bug#804511: systemd: won't let me mount /media/dvd after plugging in a USB optical drive

2015-11-08 Thread Michael Gold
Package: systemd Version: 227-2 I have an optical drive in my PC, with an fstab entry: /dev/dvd /media/dvd udf,iso9660 user,noauto 0 0 Today I plugged in another optical drive via USB; and since unplugging it, systemd won't let me use /media/dvd for a loopback mount. For example, I run "mount

Bug#804511: systemd: won't let me mount /media/dvd after plugging in a USB optical drive

2015-11-08 Thread Michael Gold
On Mon, Nov 09, 2015 at 03:41:44 +0100, Michael Biebl wrote: > Am 09.11.2015 um 03:22 schrieb Michael Gold: > > For example, I run "mount -o loop test.iso /media/dvd; ls -l /media/dvd" > > and can see the contents. But systemd immediately unmounts it: ... > >

Bug#804511: systemd: won't let me mount /media/dvd after plugging in a USB optical drive

2015-11-10 Thread Michael Gold
On Mon, Nov 09, 2015 at 05:06:56 +0100, Michael Biebl wrote: > Am 09.11.2015 um 04:49 schrieb Michael Gold: > > On Mon, Nov 09, 2015 at 03:41:44 +0100, Michael Biebl wrote: > >> Is the behaviour reproducible? If so, what are the exact steps? > > > > It's still

Bug#803780: ifupdown: systemd hangs for 2 minutes at "Raise network interfaces" while booting

2015-11-02 Thread Michael Gold
Package: ifupdown Version: 0.7.54 systemd has always been hanging on my laptop at "Starting LSB: Raise network interfaces", for about 2 minutes at each boot. Disabling dhcp and commenting some "allow-hotplug"/"auto" lines in the interfaces file didn't help, and booting with

Bug#803577: musl: x86_64 and mips packages not co-installable

2015-10-31 Thread Michael Gold
Package: musl Version: 1.1.9-1 I have musl installed for x86_64 and tried to install musl:mips to cross-compile software. The installation failed as shown below. -- Michael root@terra:~# apt-get install musl:mips Reading package lists... Done Building dependency tree Reading state

Bug#797337: [Pkg-anonymity-tools] Bug#797337: torbrowser-launcher: gives misleading error on SOCKS connection failure

2015-10-31 Thread Michael Gold
Control: tag -1 + patch On Sun, Aug 30, 2015 at 13:18:44 +0200, intrigeri wrote: > Michael Gold wrote (29 Aug 2015 16:35:00 GMT) : > > An strace reveals it was trying to connect to 127.0.0.1:9050, not to the > > internet; code inspection reveals this to be a hard-code

Bug#797339: [Pkg-anonymity-tools] Bug#797339: torbrowser-launcher: assumes a hard-coded (and insecure) SOCKS port

2015-10-31 Thread Michael Gold
Control: tag -1 + patch Hi intrigeri, Micah, On Sun, Aug 30, 2015 at 13:30:49 +0200, intrigeri wrote: > Michael Gold wrote (29 Aug 2015 16:55:28 GMT) : > > It is inappropriate to assume Tor is running on this port, as any local > > user could be running a service there (Deb

Bug#797341: tor: refuses to create AF_LOCAL SOCKS sockets accessible by other users

2015-10-19 Thread Michael Gold
On Mon, Oct 19, 2015 at 19:27:59 +0200, Peter Palfrader wrote: > I tend to agree. Do you want to file a ticket upstream at > https://trac.torproject.org/? If not, I can forward it. forwarded 797341 https://trac.torproject.org/projects/tor/ticket/17388 thanks I wasn't able to create an account

Bug#796931: gnupg-agent: no longer writes $GNUPGHOME/gpg-agent-info-$(hostname) file

2015-08-29 Thread Michael Gold
On Tue, 25 Aug 2015, Thorsten Glaser wrote: particular sharing now becomes impossible). It’s actually worse: when using startx or no X environment at all, I can no longer use gpg-agent: tglase@tglase-nb:~ $ eval $(gpg-agent --daemon --sh) tglase@tglase-nb:~ $ gpg --clearsign x ...

Bug#797334: gpg-connect-agent exits with status 0 when no agent running

2015-08-29 Thread Michael Gold
Package: gnupg-agent Version: 2.1.7-2 $ gpg-connect-agent --no-autostart -- NOP /bye gpg-connect-agent: no gpg-agent running in this session $ echo $? 0 $ The exit status should indicate an error if the connection fails, as it did before GnuPG 2.1. (My shell startup script runs gpg-agent for

Bug#797335: tor: should open a Unix-domain SOCKSPort by default

2015-08-29 Thread Michael Gold
Package: tor Version: 0.2.6.10-1 Severity: wishlist There are various Debian programs that assume tor is running on port 9050, and send data to it. This is inappropriate because the port can be bound by any unprivileged user if tor is not running (or they can crash it). I'll file bugs

Bug#797337: torbrowser-launcher: gives misleading error on SOCKS connection failure

2015-08-29 Thread Michael Gold
Package: torbrowser-launcher Version: 0.2.0-2 $ torbrowser-launcher Tor Browser Launcher By Micah Lee, licensed under MIT version 0.2.0 https://github.com/micahflee/torbrowser-launcher Updating over Tor Checking for update Downloading

Bug#797341: tor: refuses to create AF_LOCAL SOCKS sockets accessible by other users

2015-08-29 Thread Michael Gold
Package: tor Version: 0.2.6.10-1 I tried to use this option: SocksPort unix:/var/run/tor-socks (And also one in a directory owned by the Tor user with mode 0755.) But Tor refuses to create the socket: [warn] Before Tor can create a SOCKS socket in /var/run/tor-socks, the

Bug#797339: torbrowser-launcher: assumes a hard-coded (and insecure) SOCKS port

2015-08-29 Thread Michael Gold
Package: torbrowser-launcher Version: 0.2.0-2 After installing the torbrowser-launcher package and running the program without any arguments, I immediately saw a connection refused error. Code inspection reveals that the launcher assumes there's a SOCKS server at 127.0.0.1:9050 that connects to

Bug#796931: gnupg-agent: no longer writes $GNUPGHOME/gpg-agent-info-$(hostname) file

2015-08-30 Thread Michael Gold
On Mon, Aug 31, 2015 at 00:22:06 +0200, Thorsten Glaser wrote: On Sat, 29 Aug 2015, Michael Gold wrote: This seems to work for gpg1 and gpg2: : ${GPG_AGENT_INFO=${GNUPGHOME-$HOME/.gnupg}/S.gpg-agent:0:1} export GPG_AGENT_INFO I assume this needs to be written after the eval? I

Bug#800608: mapiprofile: has no secure way to accept password

2015-10-01 Thread Michael Gold
Package: openchangeclient Version: 1:2.2-7 Severity: wishlist mapiprofile and openchangeclient want the password to be passed on the command line, which in most systems is visible to other users (e.g. in "ps aux" output). It's secure on Linux if /proc is mounted with the hidepid option, but

Bug#799476: libc6: strftime should allow extended-format timezone (ISO 8601)

2015-09-19 Thread Michael Gold
Package: libc6 Severity: wishlist For a date in ISO 8601 extended format with "Difference between local time and UTC of day" (§4.2.5.1), the timezone can be written only as ±hh:mm or ±hh. §4.3.3d says (http://dotat.at/tmp/ISO_8601-2004_E.pdf#): "the expression shall either be completely in basic

Bug#799479: date --iso-8601=m does not use ISO 8601 format as documented

2015-09-19 Thread Michael Gold
Package: coreutils Version: 8.23-4 Severity: minor The manual page for 'date' says --iso-8601 will "output date/time in ISO 8601 format", but I don't believe the format actually complies with that standard when a time is included. §4.3.3d says (http://dotat.at/tmp/ISO_8601-2004_E.pdf#): "the

Bug#799476: libc6: strftime should allow extended-format timezone (ISO 8601)

2015-09-19 Thread Michael Gold
On Sat, Sep 19, 2015 at 12:20:39 -0400, Michael Gold wrote: > strftime should be able to output the timezone with a colon > [...] Perhaps a new flag could be used, e.g. "%:z". > > A way to output ±hh if mm==00, or ±hh:mm otherwise, may be useful too. > Maybe "%

Bug#806644: git-annex: can't add files with names >= 127 characters

2015-11-29 Thread Michael Gold
Package: git-annex Version: 5.20151116-1 'git annex add' no longer works for filenames of 127 characters or more. I have longer names in my repository, so it must be a recent regression. A workaround is to add with a shorter name and use 'git mv'. $ touch

Bug#825974: [Pkg-mc-devel] Bug#825974: mc: subshell no longer sees correct terminal size

2016-06-06 Thread Michael Gold
On Wed, Jun 01, 2016 at 14:07:01 +0200, Yury V. Zaytsev wrote: > On Tue, 31 May 2016, Michael Gold wrote: > > > When I press CTRL-O in mc to use the subshell, and resize the terminal, > > applications no longer see the new size (as they used to)--they always > > see th

Bug#825974: mc: subshell no longer sees correct terminal size

2016-05-31 Thread Michael Gold
Package: mc Version: 3:4.8.17-1 When I press CTRL-O in mc to use the subshell, and resize the terminal, applications no longer see the new size (as they used to)--they always see the original size. E.g., open a urxvt window, run mc, press CTRL-O, and run "stty size"; then resize the window and

Bug#810727: msmtp: should be able to pull hostname from server greeting (for gssapi)

2016-01-11 Thread Michael Gold
Package: msmtp Version: 1.6.3-1 Severity: wishlist My company's mail server is normally accessed through a round-robin DNS alias; but, for gssapi (krb5) authentication to work, I had to put one of the actual hostnames in .msmtprc (and set dns_canonicalize_hostname to false in krb5.conf because

Bug#810741: gsasl: produces unhelpful error message on Kerberos failure

2016-01-11 Thread Michael Gold
Package: gsasl Version: 1.8.0-8 As I noted in Debian bug #810727, I need to use the proper hostname to connect to my SMTP server; otherwise Kerberos authentication will fail. But this wasn't easy to figure out, as the message returned by msmtp is kind of useless (it seems to just print whatever

Bug#810727: msmtp: should be able to pull hostname from server greeting (for gssapi)

2016-01-20 Thread Michael Gold
On Mon, Jan 11, 2016 at 11:42:53 -0500, Michael Gold wrote: > The server greeting ("220" line) includes the canonical hostname: > 220 HOSTNAME.example Microsoft ESMTP MAIL Service ready at Mon, 11 Jan 2016 > 11:21:25 -0500 > Please consider using this value, instead of t

Bug#824277: openpgpkey fails with "Unexpected fingerprint collision"

2016-05-14 Thread Michael Gold
Package: hash-slinger Version: 2.7-1 I have "keyring /usr/share/keyrings/debian-keyring.gpg" in my gpg.conf, and always get an error when trying to encode a key with the openpgpkey tool: $ openpgpkey --output rfc mich...@bitplane.org Traceback (most recent call last):

  1   2   >