Your message dated Thu, 10 Jan 2008 13:32:05 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#408867: fixed in gforge 4.6.99+svn6330-1 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: gforge Version: 4.5.14-19 Severity: normal Tags: patch While translating your debconf template to German, I noticed some problems with the english template, partially given in the pseude-patch format below; partially in a description of the problem. First, you sometime write "Gforge", sometimes "GForge" (captial F vs. lower case f). This should be consistent. "The connecton to the DB system requires a password. Please choose a " "The connection to the DB system requires a password. Please choose a " For the next question (and their following) the meaning is not fully clear: msgid "LDAP password used to add users from the web" Do you mean a) That this password is required to add users while the connection is comming from the web (vs. shell access) or b) That this password is used to add web users (vs. shell account users). This should be clarified. For the translation, I opted for b). The next one should be a little more formal, IMHO: "Known good values are: LDAP protocol version=3, make root database " "admin=yes, root login account=\"cn=admin,dc=<your-dc-here>\", crypt to use " "for passwords=crypt. Make sure that you type the same password for the " As I understood it, the values are in pseudo format, hence can be translated. If they are, however, directly taken from a config file (and hence must be typed in english) then this should be clearly stated. -"or a complex setup wich allows you to have many servers as project web " +"or a complex setup wich allows you to have as many servers as project web " In the first part of the template, you use (as recommended by the best practices for debconf) indirect questions when communicating with the user, e.g.: msgid "Do you want ${file} to be updated?" Later on, however, you switch to the use of "I" and "you", as if the programm/computer talks to the user, like in "I can either do them for you (and backup the current version in ${file}." or, more strikingly, in Very well, I have not changed it. I strongly recommend you to refrain from using "I" as suggested by best practices. -"Members of the news admin group can approve news for the Gforge main page. " +"Members of the news admin group can approve news for the Gforge main page. " Here I am again unsure what exactly you want to state: "Gforge. Once you have installed this package and the one it depends on " "(gforge-sourceforge-transition), your data have been saved, and you can " "safely uninstall the \"sourceforge\" package and proceed to install Gforge." First, "your data HAS been saved." But more imprtantly, who saves the data? Here it sounds to me as if this was a step required by the admin post installation, while it would make more sense to run the backup before the upgrade and hence from the logical stand point the update procedure in gforge-sourceforge-transition performs the backup. This should be clarified. The following does not really make sense: msgid "Here is the default language for web pages." Probably "Here you select the default langauge for web pages."? Same as before: "Here is the default theme for web pages, be carreful to enter a valid name." Probably "Here you enter the default theme ..."? Also spelling "careful" (one "r" only) -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing') Architecture: powerpc (ppc) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.17.7-grsec-cz01 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=UTF-8) -- Dr. Helge Kreutzmann [EMAIL PROTECTED] Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software "libre": http://www.ffii.de/
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---Source: gforge Source-Version: 4.6.99+svn6330-1 We believe that the bug you reported is fixed in the latest version of gforge, which is due to be installed in the Debian FTP archive: gforge-common_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-common_4.6.99+svn6330-1_all.deb gforge-db-postgresql_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-db-postgresql_4.6.99+svn6330-1_all.deb gforge-dns-bind9_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-dns-bind9_4.6.99+svn6330-1_all.deb gforge-ftp-proftpd_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-ftp-proftpd_4.6.99+svn6330-1_all.deb gforge-lists-mailman_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-lists-mailman_4.6.99+svn6330-1_all.deb gforge-mta-courier_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-mta-courier_4.6.99+svn6330-1_all.deb gforge-mta-exim4_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-mta-exim4_4.6.99+svn6330-1_all.deb gforge-mta-postfix_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-mta-postfix_4.6.99+svn6330-1_all.deb gforge-plugin-scmcvs_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-plugin-scmcvs_4.6.99+svn6330-1_all.deb gforge-plugin-scmsvn_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-plugin-scmsvn_4.6.99+svn6330-1_all.deb gforge-plugins-extra_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-plugins-extra_4.6.99+svn6330-1_all.deb gforge-shell-postgresql_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-shell-postgresql_4.6.99+svn6330-1_all.deb gforge-web-apache2_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-web-apache2_4.6.99+svn6330-1_all.deb gforge-web-apache_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge-web-apache_4.6.99+svn6330-1_all.deb gforge_4.6.99+svn6330-1.diff.gz to pool/main/g/gforge/gforge_4.6.99+svn6330-1.diff.gz gforge_4.6.99+svn6330-1.dsc to pool/main/g/gforge/gforge_4.6.99+svn6330-1.dsc gforge_4.6.99+svn6330-1_all.deb to pool/main/g/gforge/gforge_4.6.99+svn6330-1_all.deb gforge_4.6.99+svn6330.orig.tar.gz to pool/main/g/gforge/gforge_4.6.99+svn6330.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Roland Mas <[EMAIL PROTECTED]> (supplier of updated gforge package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 10 Jan 2008 13:59:45 +0100 Source: gforge Binary: gforge-plugin-scmsvn gforge-plugin-scmcvs gforge-lists-mailman gforge-db-postgresql gforge-web-apache2 gforge-plugins-extra gforge-mta-postfix gforge gforge-common gforge-web-apache gforge-mta-courier gforge-ftp-proftpd gforge-shell-postgresql gforge-mta-exim4 gforge-dns-bind9 Architecture: source all Version: 4.6.99+svn6330-1 Distribution: unstable Urgency: high Maintainer: Roland Mas <[EMAIL PROTECTED]> Changed-By: Roland Mas <[EMAIL PROTECTED]> Description: gforge - collaborative development tool - meta-package gforge-common - collaborative development tool - shared files gforge-db-postgresql - collaborative development tool - database (using PostgreSQL) gforge-dns-bind9 - collaborative development tool - DNS management (using Bind9) gforge-ftp-proftpd - collaborative development tool - FTP management (using ProFTPd) gforge-lists-mailman - collaborative development tool - mailing-lists (using Mailman) gforge-mta-courier - collaborative development tool - mail tools (using Courier) gforge-mta-exim4 - collaborative development tool - mail tools (using Exim 4) gforge-mta-postfix - collaborative development tool - mail tools (using Postfix) gforge-plugin-scmcvs - collaborative development tool - CVS plugin gforge-plugin-scmsvn - collaborative development tool - Subversion plugin gforge-plugins-extra - collaborative development tool - extra plugins gforge-shell-postgresql - collaborative development tool - shell accounts (using PostgreSQL gforge-web-apache - transition package to gforge-web-apache2 gforge-web-apache2 - collaborative development tool - web part (using Apache) Closes: 408867 456504 Changes: gforge (4.6.99+svn6330-1) unstable; urgency=high . * Finished removing all references to LDAP from the Debconf templates and maintainer scripts (closes: #408867). * Also updated German debconf template translation (closes: #456504). * Fixed SQL injection vulnerability due to insufficient input sanitizing (CVE-2008-0173). Files: a32913d3b5130f371b80c7663e2231f9 1091 devel optional gforge_4.6.99+svn6330-1.dsc 9f0436dc28f8312191dd15e1b9f2debe 10145016 devel optional gforge_4.6.99+svn6330.orig.tar.gz b650056844f338a6a87547814351ec24 97233 devel optional gforge_4.6.99+svn6330-1.diff.gz c9863138ef14f51a715d7dfe97b08f0f 88878 devel optional gforge_4.6.99+svn6330-1_all.deb cd5513b3f9764c00410057348aebc0a4 1110376 devel optional gforge-common_4.6.99+svn6330-1_all.deb 757523536c153ec43835c3dcb89975e5 5272036 devel optional gforge-plugins-extra_4.6.99+svn6330-1_all.deb 1873b2122f46770b009d25f7d28789c9 1381936 devel optional gforge-web-apache2_4.6.99+svn6330-1_all.deb 82e48cd53579b6e011d841c840516eae 84456 devel optional gforge-web-apache_4.6.99+svn6330-1_all.deb 1816679bcb5deef87f885b9f7511971b 225710 devel optional gforge-db-postgresql_4.6.99+svn6330-1_all.deb 4a52cf65580de3612ffdb0b598a79359 96478 devel optional gforge-mta-exim4_4.6.99+svn6330-1_all.deb afab7c2c28ed21ec3f8393525efb23cc 97304 devel optional gforge-mta-postfix_4.6.99+svn6330-1_all.deb 4f9381429a426238ef3f6c6deb913550 84724 devel optional gforge-mta-courier_4.6.99+svn6330-1_all.deb 295f15521302dd1d003f748a1c1822af 92198 devel optional gforge-shell-postgresql_4.6.99+svn6330-1_all.deb 29e7b952a965e477bab6feb142ea877b 95932 devel optional gforge-ftp-proftpd_4.6.99+svn6330-1_all.deb 481287ad44b184c996ebaf80241622ec 102412 devel optional gforge-dns-bind9_4.6.99+svn6330-1_all.deb 30ef9cfd67d534c1ae59ceb6ef9849ea 90692 devel optional gforge-lists-mailman_4.6.99+svn6330-1_all.deb 23d54ffacb216799113eaa1aa396cccb 124702 devel optional gforge-plugin-scmcvs_4.6.99+svn6330-1_all.deb eaa234b6ed02fd413bac896554902a14 117968 devel optional gforge-plugin-scmsvn_4.6.99+svn6330-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHhhlADqdWtRRIQ/URAih/AJ0ZZ96zZArbg4BTf9NZ/d49WrmMKgCgoUif oFo8v70BB28luY44gpmXM7M= =JzXg -----END PGP SIGNATURE-----
--- End Message ---
