Hi Josh,
Quite possibly a good idea, but note that the my original report
occurred with a local filesystem, not a remote filesystem.
Are you absolutely sure that it happened on a local filesystem in your
case and not on a home directory mounted over NFS?
I'm having a hard time to believe
On Wed, Feb 06, 2013 at 09:10:07AM +0100, John Paul Adrian Glaubitz wrote:
Quite possibly a good idea, but note that the my original report
occurred with a local filesystem, not a remote filesystem.
Are you absolutely sure that it happened on a local filesystem in
your case and not on a
Hi,
AIUI, GDM considers that an X server that has lasted more than 3 seconds
has not failed. The fact that it respawns it indefinitely is therefore
an intended and desirable behavior (one could discuss whether 3 seconds
is enough, but I think this is a different topic). This is what Neil's
debug
Pre-approval request: http://bugs.debian.org/699882
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Package: debian-cd
Severity: critical
Tags: d-i
Justification: breaks the whole system
Hi,
the current i386 weekly builds 2013-02-04 are unable to boot:
Failed to load ldlinux.c32
Boot failed: press a key to retry
I created the first DVD and the first CD image using jigdo.
Package: bouncycastle
Severity: serious
Tags: security
Hi,
Nadhem Alfardan and Kenny Paterson have discovered a weakness in the handling
of CBC ciphersuites in SSL, TLS and DTLS. Their attack exploits timing
differences arising during MAC processing. Details of this attack can be
found at:
Package: mysql-5.5
Severity: serious
Tags: security
Hi,
Nadhem Alfardan and Kenny Paterson have discovered a weakness in the handling
of CBC ciphersuites in SSL, TLS and DTLS. Their attack exploits timing
differences arising during MAC processing. Details of this attack can be
found at:
Package: polarssl
Severity: serious
Tags: security
Hi,
Nadhem Alfardan and Kenny Paterson have discovered a weakness in the handling
of CBC ciphersuites in SSL, TLS and DTLS. Their attack exploits timing
differences arising during MAC processing. Details of this attack can be
found at:
Package: nss
Severity: serious
Tags: security
Hi,
Nadhem Alfardan and Kenny Paterson have discovered a weakness in the handling
of CBC ciphersuites in SSL, TLS and DTLS. Their attack exploits timing
differences arising during MAC processing. Details of this attack can be
found at:
Package: openssl
Severity: serious
Tags: security
Hi,
Several issues were announced in the OpenSSL security advisory of 05 Feb 2013
(http://www.openssl.org/news/secadv_20130205.txt):
SSL, TLS and DTLS Plaintext Recovery Attack (CVE-2013-0169)
TLS 1.1 and 1.2 AES-NI crash (CVE-2012-2686)
On Wed, Feb 06, 2013 at 11:34:55AM +0100, Andreas Stempfhuber wrote:
Package: debian-cd
Severity: critical
Tags: d-i
Justification: breaks the whole system
Hi,
the current i386 weekly builds 2013-02-04 are unable to boot:
Failed to load ldlinux.c32
Boot failed: press a key to
On Wed, 26 Dec 2012 01:47:30 +0100
Rolf Leggewie debian-b...@rolf.leggewie.biz wrote:
Christoph, thank you for the report and patch. I've only become aware
of it now. I've had a look and intend to fix the issue in both
experimental and unstable with only a slight difference to what you
Hi,
On 02/06/2013 11:49 AM, Thijs Kinkhorst wrote:
Package: polarssl Severity: serious Tags: security
Hi,
Nadhem Alfardan and Kenny Paterson have discovered a weakness in
the handling of CBC ciphersuites in SSL, TLS and DTLS. Their attack
exploits timing differences arising during MAC
Package: cdimage.debian.org
Version: weekly-image
Severity: grave
Tags: d-i
syslinux in unstable is broken (#699382) and this means current sid
builds of debian-installer for i386 and amd64 are broken for BIOS
booting. This ripples through to Debian CD images too.
Don't use the current daily-sid
On Wed, 2 Jan 2013 20:07:28 +0100
Joachim Wiedorn ad_deb...@joonet.de wrote:
I am back from holiday. At first I will look for an update of
capi4hylafax.
I see that you have uploaded a new version of capi4hylafax to mentors.
Do you need a sponsor for that? What’s the current status?
Thanks.
--
Hi Steve,
Am Mittwoch, 6. Februar 2013 schrieb Steve McIntyre:
On Wed, Feb 06, 2013 at 11:34:55AM +0100, Andreas Stempfhuber wrote:
Package: debian-cd
Severity: critical
Tags: d-i
Justification: breaks the whole system
Hi,
the current i386 weekly builds 2013-02-04 are unable to boot:
Package: pan
Version: 0.139-1
Severity: serious
Justification: undistributable
pan links against libgnutls28, which is LGPLv3+. However pan itself is
licensed GPLv2 (without a or later-clause)[1]. These two licenses are
incompatible, the program is not distributable.
cu andreas
--
To
Processing commands for cont...@bugs.debian.org:
found 699890 daily-image-20130130
Bug #699890 [cdimage.debian.org] syslinux breakage causes i386/amd64 boot
failure
There is no source info for the package 'cdimage.debian.org' at version
'daily-image-20130130' with architecture ''
Unable to
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: tpu
Hello,
I would like to upload clang/3.0-6.1+deb7u0 to testing-proposed-updates
to fix #693208 in wheezy. At the moment, 3.0-6 is in testing, 3.1-8 is
in unstable.
#693208 is about clang
Processing commands for cont...@bugs.debian.org:
tags 699877 + pending
Bug #699877 [src:postfix] postfix: maintainer address bounces
Added tag(s) pending.
thanks
Stopping processing here.
Please contact me if you need assistance.
--
699877:
On 06/02/2013 14:27, Michael Stapelberg wrote:
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: tpu
Hello,
I would like to upload clang/3.0-6.1+deb7u0 to testing-proposed-updates
to fix #693208 in wheezy. At the moment, 3.0-6 is in
On 05.02.2013 17:12, Josh Triplett wrote:
On Tue, Feb 05, 2013 at 03:06:06PM +, Debian Bug Tracking System wrote:
gvfs (1.12.3-4) unstable; urgency=low
.
* 06_metadata_nfs.patch: new patch. Disable gvfsd-metadata entirely on
remote filesystems. It is better to miss functionality
Processing commands for cont...@bugs.debian.org:
forwarded 699825 https://bugzilla.gnome.org/show_bug.cgi?id=693214
Bug #699825 {Done: Simon McVittie s...@debian.org} [gnome-online-accounts]
CVE-2013-0240: fails to verify SSL certificates when creating accounts
Set Bug forwarded-to-address to
tag 699884 patch
thanks
you might want to apply the following patch on debian-cd.
--
Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email: daniel.baum...@progress-technologies.net
Internet: http://people.progress-technologies.net/~daniel.baumann/
diff --git
Processing commands for cont...@bugs.debian.org:
tag 699884 patch
Bug #699884 [debian-cd] debian-cd: 2013-02-04 i386 weekly builds are unable to
boot
Added tag(s) patch.
thanks
Stopping processing here.
Please contact me if you need assistance.
--
699884:
On Sun, 2 Dec 2012 23:47:37 +
Roger Leigh rle...@codelibre.net wrote:
Please don't apply it just yet--we'll presumably need to get
approval from the release team to change this in initscripts
at the same time. I'll have a patch for initscripts shortly;
might be a bit later in the week to
Hi Dominic,
On 04/02/2013 21:28, Dominic Hargreaves wrote:
I had no replies about this, so I think it's time to bite the bullet
and decide whether we should target this fix at
- stable-security
- stable
- neither of the above.
I think I'm leaning towards stable on the basis that that's
On Wed, Feb 06, 2013 at 04:59:04PM +0100, Michael Stapelberg wrote:
On Sun, 2 Dec 2012 23:47:37 +
Roger Leigh rle...@codelibre.net wrote:
Please don't apply it just yet--we'll presumably need to get
approval from the release team to change this in initscripts
at the same time. I'll
Your message dated Wed, 06 Feb 2013 17:17:36 +
with message-id e1u38cq-0006eb...@franck.debian.org
and subject line Bug#697787: fixed in jenkins-job-builder 0.4.0-1
has caused the Debian Bug report #697787,
regarding jenkins-job-builder: FTBFS with python3-sphinx: ImportError: No
module named
Not happening on icedove 10.0.12
Processing control commands:
tags -1 + patch
Bug #699820 [imview] stack smashing when reading ics file
Added tag(s) patch.
--
699820: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699820
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--
To UNSUBSCRIBE, email to
Control: tags -1 + patch
On 2013-02-05 11:01:39, Sang Kil Cha wrote:
imview has stack smashing vulnerability when parsing ics header @
io/readics.cxx:320
/* get the filename from the ICS file */
t = temp1;
while (*bp != delim2)
*t++ =
On Tue, 1 Jan 2013 19:38:46 +0100
Christian PERRIER bubu...@debian.org wrote:
Is there any chance that you work on another proposed upload?
Since there hasn’t been a reply for one month, I am taking this.
I have prepared an upload to t-p-u and will ask the release team for
approval. I will close
Processing commands for cont...@bugs.debian.org:
forwarded 699892 https://bugzilla.gnome.org/show_bug.cgi?id=693272
Bug #699892 [pan] pan: Incompatible license: GPLv2 binary linked against
LGPLv3+ library
Set Bug forwarded-to-address to
'https://bugzilla.gnome.org/show_bug.cgi?id=693272'.
OpenJDK Security support has always been a nightmare for the security
team because there was no support from the maintainers. Security support
is primarily the responsibility of the maintainer.
So what kind of responsibility does the security team take at all?
- In the past, the security
Le mercredi 6 février 2013 13:39:16, vous avez écrit :
pan links against libgnutls28, which is LGPLv3+. However pan itself is
licensed GPLv2 (without a or later-clause)[1]. These two licenses are
incompatible, the program is not distributable.
I'm on it. I'm trying to get upstream to add the
retitle 593607 source not erased when moving across filesystems
severity 593607 normal
thanks
On Sun, 6 Jan 2013 01:36:59 +0100
Nicolas Boulenguez nicolas.bouleng...@free.fr wrote:
I've prepared an NMU for libfm (versioned as 0.1.17-2.1) and uploaded
it to DELAYED/10, hoping to
- ask a freeze
Processing commands for cont...@bugs.debian.org:
retitle 593607 source not erased when moving across filesystems
Bug #593607 [libfm] pcmanfm wrongly deleted some files in a failed move
operation
Changed Bug title to 'source not erased when moving across filesystems' from
'pcmanfm wrongly
Hello Micheal,
Michael Stapelberg wrote on 2013-02-06 13:11:
I see that you have uploaded a new version of capi4hylafax to mentors.
Do you need a sponsor for that? What’s the current status?
After uploading (09.01.) to mentors [1] I have asked the release team about
pre-approval (28.01.)
On Mon, 14 Jan 2013 12:02:35 +0100
Peter Palfrader wea...@debian.org wrote:
so the postinst does effectively sed $file $file, and we all know
that this doesn't work and results in $file being empty at the end.
I can reproduce this issue.
Alexander, since you uploaded the last icinga packages,
Indeed that looping behaviour is not bound to occur only on remote file
systems, but it is caused by the current version of the database file
(like home) not referring to the redo log (like home-01234567.log)
that is currently opened by the gvfsd (because it was referred to by the
database at the
Le mercredi 06 février 2013 à 20:03 +0100, Michael Karcher a écrit :
There at least two different possible scenarios, how the mismatch could
arise on a local file system, too:
a) The local file system is exported, and the log has been rotated by a
remote machine.
b) The gvfs-metadata
On Wed, 28 Nov 2012 17:36:28 +0400
sergio mail...@sergio.spb.ru wrote:
Looks like nut-snmp is totally unusable:
# upsd -DD
Network UPS Tools upsd 2.6.5
0.00 fopen /var/run/nut/upsd.pid: No such file or directory
0.001154 listening on 127.0.0.1 port 3493
0.001658
Hi Sebastian,
thanks a lot for the patch! I could not also find any ics-images
to check it.
Anyway, I uploaded your fix including also a fix from Sune Vuorela.
Thank you,
Anton
2013/2/6 Sebastian Ramacher sramac...@debian.org:
Control: tags -1 + patch
On 2013-02-05 11:01:39, Sang Kil Cha
Your message dated Wed, 06 Feb 2013 20:47:36 +
with message-id e1u3bu4-0003bm...@franck.debian.org
and subject line Bug#699820: fixed in imview 1.1.9c-10
has caused the Debian Bug report #699820,
regarding stack smashing when reading ics file
to be marked as done.
This means that you claim
Your message dated Wed, 06 Feb 2013 20:47:46 +
with message-id e1u3bue-0003na...@franck.debian.org
and subject line Bug#699887: fixed in polarssl 1.2.5-1
has caused the Debian Bug report #699887,
regarding TLS timing attack in polarssl (Lucky 13)
to be marked as done.
This means that you
Control: found -1 2:5.01+dfsg-1
On sam., 2013-02-02 at 10:13 +0100, Yves-Alexis Perez wrote:
Package: syslinux-common
Version: 2:5.01+dfsg-1
Severity: important
Please actually pay attention to the version used before merging. I have
no idea if this was actually the same bug, but it was
Processing control commands:
found -1 2:5.01+dfsg-1
Bug #699596 [syslinux-themes-debian] update for syslinux 5.x
Bug #699382 [syslinux-themes-debian] update for syslinux 5.x
There is no source info for the package 'syslinux-themes-debian' at version
'2:5.01+dfsg-1' with architecture ''
Unable
Hi,
On 06/02/13 11:49, Thijs Kinkhorst wrote:
Can you see to it that this issue is addressed in unstable and testing? And
are you available to create an update for stable-security?
I'm attaching (3.0 (quilt) formatted) patches, backported from upstreams
changes between 1.2.4 to 1.2.5, for the
Package: ruby1.9.1
Severity: grave
Tags: security, patch
Justification: user security hole
X-Debbugs-CC: t...@security.debian.org
Hi,
Ruby 1.9.3-p385 is released.
This contains the problem of CVE-2013-0256.
Please see these links for details:
On Wed, 06 Feb 2013, Michael Stapelberg wrote:
On Mon, 14 Jan 2013 12:02:35 +0100
Peter Palfrader wea...@debian.org wrote:
so the postinst does effectively sed $file $file, and we all know
that this doesn't work and results in $file being empty at the end.
I can reproduce this issue.
I forgot attaching patch
On Thu, Feb 7, 2013 at 7:02 AM, Nobuhiro Iwamatsu iwama...@debian.org wrote:
Package: ruby1.9.1
Severity: grave
Tags: security, patch
Justification: user security hole
X-Debbugs-CC: t...@security.debian.org
Hi,
Ruby 1.9.3-p385 is released.
This contains the
On Wed, 2013-02-06 at 22:28 +0100, Michael Stapelberg wrote:
Adam D. Barratt a...@adam-barratt.org.uk writes:
What's the status of getting this fixed in unstable, as already
requested by Julien in #693208?
Why is it necessary to fix this in unstable? This’d require introducing
an epoch. Let
Your message dated Wed, 06 Feb 2013 22:32:45 +
with message-id e1u3dxp-0001zg...@franck.debian.org
and subject line Bug#699018: fixed in freevo 1.9.2b2-4.2
has caused the Debian Bug report #699018,
regarding Depends on about-to-go-away youtube-dl
to be marked as done.
This means that you
On Wed, 06 Feb 2013, Alexander Wirt wrote:
On Wed, 06 Feb 2013, Michael Stapelberg wrote:
On Mon, 14 Jan 2013 12:02:35 +0100
Peter Palfrader wea...@debian.org wrote:
so the postinst does effectively sed $file $file, and we all know
that this doesn't work and results in $file being
On 03.02.2013 23:59, Moritz Mühlenhoff wrote:
On Sun, Jan 27, 2013 at 11:45:06AM +0200, Timo Aaltonen wrote:
On 26.01.2013 23:06, Salvatore Bonaccorso wrote:
Hi Timo
On Thu, Jan 24, 2013 at 08:46:43PM +0200, Timo Aaltonen wrote:
On 24.01.2013 20:30, Moritz Muehlenhoff wrote:
Package: sssd
Hi Joachim,
On 2013-02-06 18:21, Joachim Wiedorn wrote:
Michael Stapelberg wrote on 2013-02-06 13:11:
Do you need a sponsor for that? What’s the current status?
After uploading (09.01.) to mentors [1] I have asked the release team about
pre-approval (28.01.) [2] because we need this package
Hey Petter,
Are you still looking for an uploader? There's a typo in debian/rules,
btw - the quotes need to be closed on the line:
@echo Debug output for #672524
Cheers,
Scott
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact
Control: tags 699709 + pending
Andreas Beckmann, le Sun 03 Feb 2013 23:01:53 +0100, a écrit :
during a test with piuparts I noticed your package fails to upgrade from
'sid' to 'experimental'.
Right, I forgot to port the wheezy fix for that issue to experimental.
This should now be uploaded.
Processing control commands:
tags 699709 + pending
Bug #699709 [python3-pyatspi2] python3-pyatspi2: fails to upgrade from 'sid' -
trying to overwrite /usr/lib/python3/dist-packages/pyatspi/utils.py
Added tag(s) pending.
--
699709: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699709
Debian
Your message dated Thu, 07 Feb 2013 01:02:48 +
with message-id e1u3ft2-0006bt...@franck.debian.org
and subject line Bug#699709: fixed in pyatspi 2.7.2+dfsg-2
has caused the Debian Bug report #699709,
regarding python3-pyatspi2: fails to upgrade from 'sid' - trying to overwrite
Package: src:linux
Version: 3.2.35-2
Severity: critical
-- Package-specific info:
** Version:
Linux version 3.2.0-4-amd64 (debian-ker...@lists.debian.org) (gcc version 4.6.3
(Debian 4.6.3-14) ) #1 SMP Debian 3.2.35-2
** Command line:
BOOT_IMAGE=/boot/vmlinuz-3.2.0-4-amd64
Your message dated Thu, 07 Feb 2013 01:47:37 +
with message-id e1u3gap-0006re...@franck.debian.org
and subject line Bug#663009: fixed in sysvinit 2.88dsf-40
has caused the Debian Bug report #663009,
regarding sysvinit: (chroot) .init: timeout opening/writing control channel
/run/initctl
to be
Your message dated Thu, 07 Feb 2013 01:47:37 +
with message-id e1u3gap-0006rh...@franck.debian.org
and subject line Bug#699523: fixed in sysvinit 2.88dsf-40
has caused the Debian Bug report #699523,
regarding sysvinit: postinst fails if several 'init' process are running (LXC)
to be marked as
Your message dated Thu, 07 Feb 2013 01:47:37 +
with message-id e1u3gap-0006rk...@franck.debian.org
and subject line Bug#699566: fixed in sysvinit 2.88dsf-40
has caused the Debian Bug report #699566,
regarding sysvinit: handle ischroot more gracefully
to be marked as done.
This means that you
forcemerge 696321 699937
quit
Hi Mark,
Mark A. Hershberger wrote:
If I remove the USB headset while sound is playing, the screen goes
blank and a kernel trace is displayed.
Please attach a photograph of the kernel trace.
Thanks for writing and sorry for the trouble,
Jonathan
--
To
Processing commands for cont...@bugs.debian.org:
forcemerge 696321 699937
Bug #696321 [src:linux] fatal exception in snd_complete_urb unplugging USB
audio device
Bug #699937 [src:linux] linux-image-3.2.0-4-amd64: crash caused by
disconnecting usb audio device
Severity set to 'important' from
Your message dated Wed, 6 Feb 2013 23:47:23 -0500
with message-id 20130207044723.ga12...@amissah.com
and subject line Re: Bug#699541: Maintainer address bounces
has caused the Debian Bug report #699541,
regarding Maintainer address bounces
to be marked as done.
This means that you claim that the
Your message dated Wed, 6 Feb 2013 23:51:45 -0500
with message-id 20130207045145.ga13...@amissah.com
and subject line Re: Bug#699727: src:sisu: maintainer address bounces
has caused the Debian Bug report #699727,
regarding src:sisu: maintainer address bounces
to be marked as done.
This means that
Hello,
Andreas Beckmann a...@debian.org writes:
during a test with piuparts I noticed your package fails to upgrade
from 'lenny' to 'squeeze' to 'wheezy'. It installed fine in 'lenny',
and upgraded to 'squeeze' successfully, but then the upgrade to
'wheezy' failed.
[...]
[Scott Howard]
Hey Petter,
Are you still looking for an uploader?
I am waiting for feedback from the maintainer(s) if I should upload or
wait for the maintainer(s) to do it.
There's a typo in debian/rules, btw - the quotes need to be closed
on the line:
@echo Debug output for #672524
Ah,
Processing commands for cont...@bugs.debian.org:
# Thursday 7 February 07:03:11 UTC 2013
# Tagging as pending bugs that are closed by packages in NEW
# http://ftp-master.debian.org/new.html
#
# Source package in NEW: a
href=http://packages.qa.debian.org/ecere-sdk;ecere-sdk/a
tags 697697
On 02/06/2013 10:03 PM, Yves-Alexis Perez wrote:
There's no such thing as libcom32.c32 in /boot so that'd explain why.
you might want to look at the bug it was merged with, specifically:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699382#40
--
Address:Daniel Baumann,
73 matches
Mail list logo