Bug#315703: cacti: vulnerable to remote exploit
Package: cacti Version: 0.8.6d-1 Severity: critical Tags: sarge Justification: root security hole Multiple Vendor Cacti Remote File Inclusion Vulnerability: http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability: http://www.idefense.com/application/poi/display?id=266&type=vulnerabilities Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities: http://www.idefense.com/application/poi/display?id=267&type=vulnerabilities note that these can not by themselves gain root access on a system, though they have been reported to be used to leverage root on sarge systems. an update has been sitting on my p.d.o site since last friday, but there has not yet been a security upload. i'll send the latest i mailed to folks as an update to this bug. sean -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.10-9-amd64-k8 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages cacti depends on: ii apache 1.3.33-6versatile, high-performance HTTP s ii apache-ssl 1.3.33-6versatile, high-performance HTTP s ii debconf 1.4.50 Debian configuration management sy ii libphp-adodb 4.52-1 The 'adodb' database abstraction l ii logrotate3.7-5 Log rotation utility ii mysql-client-4.1 [mysql-clie 4.1.11a-4 mysql database client binaries ii php4 4:4.3.10-15 server-side, HTML-embedded scripti ii php4-cli 4:4.3.10-15 command-line interpreter for the p ii php4-mysql 4:4.3.10-15 MySQL module for php4 ii php4-snmp4:4.3.10-15 SNMP module for php4 ii rrdtool 1.0.49-1Time-series data storage and displ ii snmp 5.1.2-6.1 NET SNMP (Simple Network Managemen ii ucf 1.18Update Configuration File: preserv -- debconf information excluded -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315700: findimagedupes: Missing dependency: libltdl3
Package: findimagedupes Version: 0.1.3-5 Severity: serious Justification: Policy 3.5 This tool requires libltdl3 to run, and does not depend on it: ~/pics % findimagedupes -v Can't load '/usr/lib/perl5/auto/Image/Magick/Magick.so' for module Image::Magick: libltdl.so.3: cannot open shared object file: No such file or directory at /usr/lib/perl/5.8/DynaLoader.pm line 225. at /usr/bin/findimagedupes line 38 Compilation failed in require at /usr/bin/findimagedupes line 38. BEGIN failed--compilation aborted at /usr/bin/findimagedupes line 38. zsh: 21477 exit 2 findimagedupes -v ~/pics % apt-cache search libltdl libguile-ltdl-1 - Guile's patched version of libtool's libltdl libltdl3 - A system independent dlopen wrapper for GNU libtool libltdl3-dev - A system independent dlopen wrapper for GNU libtool ~/pics % sudo apt-get install libltdl3 Reading Package Lists... Done Building Dependency Tree... Done The following NEW packages will be installed: libltdl3 (1.5.6-6) 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 155kB of archives. After unpacking 233kB of additional disk space will be used. Get:1 http://ftp.us.debian.org sid/main libltdl3 1.5.6-6 [155kB] Fetched 155kB in 0s (179kB/s) Selecting previously deselected package libltdl3. (Reading database ... 63097 files and directories currently installed.) Unpacking libltdl3 (from .../libltdl3_1.5.6-6_powerpc.deb) ... Setting up libltdl3 (1.5.6-6) ... ~/pics % findimagedupes -v Scanning fingerprints from . into ./imagedupes-db.txt. [0688/0688] 0%..100% Finding duplicates in ., threshold 90%. ./2519.jpg ./8688-1.jpg: seem to be 98.83% similar. ./38c2.jpg ./55da.jpg: seem to be 91.80% similar. [0686/0686] 0%..100% -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: powerpc (ppc) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.11-powerpc Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages findimagedupes depends on: ii imagemagick 6:6.2.3.0-2 Image manipulation programs ii perl 5.8.7-3 Larry Wall's Practical Extraction ii perlmagick 6:6.2.3.0-2 A perl interface to the libMagick findimagedupes recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315687: proftpd: Wrong permissions for ftp server
Package: proftpd Version: 1.2.10-17 Severity: critical Justification: root security hole In the most recent (1.2.10-17) version of proftpd, the permissions used by the daemon are somehome mixed up: both anonymous and authenticated connections are mapped to uid 0/gid 0 in the filesystem. New files and directories are created with uid 0/gid 0 (instead of the ftp/nogroup for anon connections resp. the authenticated user). In anon mode, you seem to be trapped in the anon enviroment and can't delete files. With authenticated connections, you also get root access to the whole system (visible to proftpd) and as your access is mapped to root/root, you can delete everything you like (thus the critical severity, as this opens root access to the ftp server's file system. This bug was not reproducable on 1.2.10-16, I had to install 1.2.10-17. The config file wasn't touched during the update to -17. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i586) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.4.26 Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages proftpd depends on: ii adduser 3.64 Add and remove users and groups ii debconf 1.4.51 Debian configuration management sy ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libpam0g0.76-22 Pluggable Authentication Modules l ii libssl0.9.7 0.9.7g-1 SSL shared libraries ii libwrap07.6.dbs-8Wietse Venema's TCP wrappers libra ii netbase 4.21 Basic TCP/IP networking system ii proftpd-common 1.2.10-17Versatile, virtual-hosting FTP dae ii ucf 1.18 Update Configuration File: preserv proftpd recommends no packages. -- debconf information: * shared/proftpd/anonymous: true shared/proftpd/run_inetd_or_standalone: standalone * shared/proftpd/edit_conffile: false * shared/proftpd/use_debconf: true shared/proftpd/anonymous_access: false * proftpd/edit_conffile: true shared/proftpd/file_changed: shared/proftpd/warning: * shared/proftpd/inetd_or_standalone: inetd * proftpd/run_inetd_or_standalone: inetd shared/proftpd/replace_file_install: false shared/proftpd/sql_statements: * proftpd/anonymous_access: true proftpd/sql_statements: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#312513: [ANDREW] Re: Bug#312513: winbind 3.0.14a-4 (sarge) breaks samba ADS member server
On Fri, Jun 24, 2005 at 07:20:19AM +0200, Christian Perrier wrote: > Steve, do you think it's worth for us to post a call for "Debian > developers/contributors with access to an ADS domain anhd willing to > help on Samba" in the Debian ML? That sounds like a good idea to me. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#315675: debian-keyring: Do not install / upgrade as of relative pathes
On Fri, Jun 24, 2005 at 07:49:03PM +0200, Klaus Ethgen wrote: > Package: debian-keyring > Version: 2004.07.05 > Severity: serious > Justification: Policy 9.1.1 > The package tryes to install to > './usr/share/keyrings/debian-keyring.pgp'. (Note the dot in front!) Uh? $ dpkg -c /var/cache/apt/archives/gstreamer0.8-a52dec_0.8.8-3_i386.deb drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./ drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./usr/ drwxr-xr-x root/root 0 2005-03-30 16:23:43 ./usr/share/ drwxr-xr-x root/root 0 2005-03-30 16:23:43 ./usr/share/doc/ drwxr-xr-x root/root 0 2005-03-30 16:24:20 ./usr/share/doc/gstreamer0.8-a52dec/ -rw-r--r-- root/root 3534 2005-03-30 16:15:39 ./usr/share/doc/gstreamer0.8-a52dec/README.Debian -rw-r--r-- root/root 1220 2005-03-30 16:15:39 ./usr/share/doc/gstreamer0.8-a52dec/copyright -rw-r--r-- root/root 10753 2005-03-07 08:39:35 ./usr/share/doc/gstreamer0.8-a52dec/NEWS.gz -rw-r--r-- root/root 8982 2005-03-30 16:15:39 ./usr/share/doc/gstreamer0.8-a52dec/changelog.Debian.gz drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./usr/lib/ drwxr-xr-x root/root 0 2005-03-30 16:24:20 ./usr/lib/gstreamer-0.8/ -rw-r--r-- root/root 18468 2005-03-30 16:24:20 ./usr/lib/gstreamer-0.8/libgsta52dec.so $ *all* Debian packages are packed with a leading ./ in the filename -- that's just how tar works. It's dpkg's job to unpack the deb correctly, and it has no problems doing so on any system that I've seen. Please send your error message to the BTS verbatim, so we can understand what you're talking about. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.
On Fri, Jun 24, 2005 at 08:40:42AM -0400, Lennart Sorensen wrote: > On Fri, Jun 24, 2005 at 02:29:19AM -0700, Steve Langasek wrote: > > So are there any porters alive out there on debian-arm? Being unable to use > > cp, mv, and install after upgrading from woody to sarge is a rather serious > > problem. If anyone has any ideas about this, or can test the problem with a > > woody vs. a sarge kernel, please speak up so that we can at the very least > > document this in the release notes if we need to. > Hmm, I started out with sarge testing on my arm systems, so I never did > a woody to sarge upgrade. > I know arm did have a problem testing this given how few systems you > could actually install woody on with an official debian kernel. Since > very few people had one of those systems around, testing the upgrade has > not been easy. > I do seem to recall there is something in the sarge release notes (or > was supposed to be) about how to upgrade arm from woody to sarge involving > getting a new kernel first, since something important changed. I > remember that happens for sure on mips, and also happens on true i386 > machines (since sarge's libc requried 486 instructions, so the new > kernel emulates the few missing instructions on i386 systems). Except there isn't anything in the sarge release notes about this, because the last thing the release team was told was that arm upgrades "should work". So if it doesn't work, I want to know what we need to put in the release notes. :) -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#315347: 10_cvs.dpatch.new attached
On Wed, Jun 22, 2005 at 02:56:12PM +0930, Arthur Marsh wrote: > Hi, this is the patch log where the error occurred. > can't find file to patch at input line 46475 > Perhaps you used the wrong -p or --strip option? > The text leading up to this was: > -- > |diff -urN -x CVS -x nptl -x nptl_db -x .cvsignore -x '*texi' -x '*manual*' > glibc-2.3.2/linuxthreads/ChangeLog > /home/jbailey/Programming/cvstree/libc/linuxthreads/ChangeLog > |--- glibc-2.3.2/linuxthreads/ChangeLog 2003-02-27 17:40:10.0 > -0500 > |+++ /home/jbailey/Programming/cvstree/libc/linuxthreads/ChangeLog > 2003-09-19 22:37:03.0 -0400 [...] All these errors are related to linuxthreads, which means that glibc-linuxthreads-2.3.2.tar.bz2 had not been unpacked. But buildd.debian.org shows that no such error occurs on buildds, so there is surely something wrong on your side. Denis -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 315676
Processing commands for [EMAIL PROTECTED]: > # Automatically generated email from bts, devscripts version 2.8.14 > tags 315676 sid Bug#315676: libapache2-mod-perl2: perl.conf incorrectly handled There were no tags set. Tags added: sid > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#314700: f2c: segfaults on i386 since last security update
Hi Steve Steve Langesek wrote: >It's not clear to me from your message whether this bug affects only the >version in woody, or if it also affects the version in sarge. Could you >please clarify, so that we can tag this bug correctly? The version in Sarge does not seem to be affected - only Woody ie. 3.0r6 is affected. The confusion comes from the other bug about it segfaulting on m68k which was in testing at the time. Unfortunately this bug is affecting the compilation of a control system used by many radio telescopes around the world to perform coordinated observing - a technique known as Very Long Baseline Interferometry (VLBI) and switching multiple machines owned by multiple observatories to sarge to fix it is a little bit beyond our capabilities right now !! Thanks for your attention (and indeed for all your work on sarge :-) Jon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315556: sound-juicer: sound-juicer does not start
On Sat, 2005-06-25 at 00:02 +0530, Ramakrishnan Muthukrishnan wrote: > I upgraded all gstreamer packages, still getting the same error. The > libgstaudioconvert.so file is part of gstreamer-misc which is also > latest version on my system.. I will keep experimenting and will keep > you posted. To confirm your versions, can you paste the output of: dpkg -l libgstreamer\* gstreamer\* (make the window wide so that the package names are readable) Thanks, Ross -- Ross Burton mail: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] www: http://www.burtonini.com./ PGP Fingerprint: 1A21 F5B0 D8D0 CFE3 81D4 E25A 2D09 E447 D0B4 33DF -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#314645: ssh delay
So, about that delay you're seeing. You said that there is a noticable delay on 8 servers. Are they using any kind of special account/authentication system? Can you reproduce it with, like, a fresh install? Or with some minimal change? Justin On Fri, Jun 24, 2005 at 02:28:41PM -0400, pryzbyj wrote: > Announcing the second installment of "SSH Username / Password Mapping > Used By Scanners". -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315556: sound-juicer: sound-juicer does not start
|| On Fri, 24 Jun 2005 17:56:09 +0100 || Ross Burton <[EMAIL PROTECTED]> wrote: ross> Where Sarge has gst-gconf 0.8.8-2. Can you do a full upgrade, including ross> upgrading any held back packages? I upgraded all gstreamer packages, still getting the same error. The libgstaudioconvert.so file is part of gstreamer-misc which is also latest version on my system.. I will keep experimenting and will keep you posted. -- Ramakrishnan(http://www.hackGNU.org/) Use Free Software (http://www.gnu.org/) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#314645: second installment
Announcing the second installment of "SSH Username / Password Mapping
Used By Scanners".
This list includes the previous list (which ends at "resin").
For my own reference, the script I am using to generate it:
grep -i 'ailed pass' auth.log |tail +4 |awk '{ if ($9 ~ /invalid/) { print $11
} else { print $9 } }' |paste - /tmp/ssh-log
Where tail +4 gets rid of stuff in auth.log but not in ssh-log, and
ssh-log must not contain blank lines (which for some reason appear
every time I log in with RSA).
rootadministrator
rootroot
rootrootroot
rootroot1
root123456
root1234567890
rootqwerty
rootadministrator1
rootadmin
rootbackup
rootadmin1
rootsecure
rootsecret
rootpasswd
rootpassword
rootpassword123
admin admin
administrator administrator
rootroot
admin admin
testtest
postgrespostgres
infoinfo123
alexalex
alexalex123
samba samba
guest guest
webmaster webmaster
mysql mysql
oracle oracle
library library
infoinfo
shell shell
linux linux
unixunix
webadminwebadmin
ftp ftp
testtest123
rootroot123
admin admin123
guest guest123
master master
apache apache
rootwebadmin
rootadmin
rootshell
rootlinux
roottest
rootwebmaster
rootmysql
admin root
admin administrator
admin 12345
admin 123456
root123456
root12345678
testtest12345
test123456
webmaster 123456
useruser
usernameusername
usernamepassword
userpassword
rootpassword
admin password
testpassword
rootmaster
rootapache
rootunix
rootredhat
danny danny
sharon sharon
aronaron
alexalex
brett brett
mikemike
alanalan
datadata
www-datawww-data
httphttp
httpd httpd
nobody nobody
rootlogin
backup backup
info123456
shopshop
sales sales
web web
www www
wwwrun wwwrun
adamadam
stephen stephen
richard richard
george george
michael michael
johnjohn
david david
paulpaul
newsnews
angel angel
games games
pgsql pgsql
pgsql pgsql123
mailmail
adm adm
ident ident
resin resin
rootroot
jackjack
marvin marvin
andres andres
barbara barbara
adine adine
rootroot
jackjack
su su
zeppelinzeppelin
danny danny
sharon sharon
aronaron
alexalex
brett brett
mikemike
alanalan
datadata
www-datawww-data
httphttp
httpd httpd
nobody nobody
rootlogin
backup backup
rootroot
rootrootroot
rootrootrootroot
root123root
root123root123
rootpassword
rootpasswd
rootpass
roottoor
rootnewpass
rootserver
root123
root1234
root12345
root123456
root1234567
root12345678
root123456789
rootroot123
root00
root1234qwer
rootq1w2e3r4
rootqwertyuiop
root123abc
root1a2b3c
root1p2o3i
root1q2w3e
root1qw23e
root[EMAIL PROTECTED]
root[EMAIL PROTECTED]
root[EMAIL PROTECTED]&
root[EMAIL PROTECTED]&*
root@#$%^&
rootabc123
rootasdfghjk
rootasdfghjkl
rootwebmaster
rootwebster
rootmaster
rootvalhalla
rootq1w2e3
rootqwaszx
rootqwert
rootqwerty
rootqwerty12
rootqwerty123
rootlibrary
roothacker
rootadministrator
rootadmin
rootr00t
rootzxcvbn
rootzxcvbnm
rootlinux
rootdebian
rootredhat
rootmandrake
rootdarwin
rootslackware
rootapache
rootunix
rootmyserver
rootshell
rootmysql
testtest
testtest1
testtest2
testtesttest
testtesttesttest
test123
test123test
testtest123test
test123test123
test1234
test12345
test123456
test1234567
test12345678
testtest123
testtest12345
test123456789
testtesting
testtester
testpassword
testq1w2e3
testabc123
testasdfghjkl
testqwertyuiop
testzxvbnm
admin root
admin admin
admin 123
admin 1234
admin 12345
admin 123456
admin 1234567
admin 12345678
admin 123456789
admin adminadmin
admin 123admin
admin adminadminadmin
admin 123admin123
admin administrator
admin admin123
admin admin12345
admin adminroot
admin admin1
admin admin2
admin admin01
admin admin02
admin password
admin adm1n
admin q1w2e3
admin abc123
admin qwertyuiop
admin asdfghjkl
admin zxcvbnm
guest guest
guest guest1
guest guest2
guest guess
guest guestguest
guest 123guest
guest 123
guest 1234
guest 123456
guest 12345
guest 1234567
guest 12345678
guest 123456789
guest guest12345
guest guest123
guest 123guest123
guest gu3st
guest pass
guest passwd
guest password
guest qwertyuiop
guest asdfghjkl
guest zxcvbnm
guest abc123
useruser
useruser1
useruser2
useruseruser
user123456
user123
user1234
user12345
user1234567
user12345678
user123456789
user
Bug#315556: sound-juicer: sound-juicer does not start
|| On Fri, 24 Jun 2005 17:56:09 +0100 || Ross Burton <[EMAIL PROTECTED]> wrote: ross> I've been told by a GStreamer developer that you'll only get this ross> message if you have mixed versions of gstreamer installed. ross> Indeed: >> ii libgstreamer-gconf0.8-0 0.8.2-3GConf support for GStreamer >> ii libgstreamer0.8-0 0.8.9-2Core GStreamer libraries, >> plugins, ross> Where Sarge has gst-gconf 0.8.8-2. Can you do a full upgrade, including ross> upgrading any held back packages? Ok. I will try that and keep you posted. Thanks. -- Ramakrishnan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315676: libapache2-mod-perl2: perl.conf incorrectly handled
Package: libapache2-mod-perl2 Version: 2.0.1-1 Severity: grave Justification: renders package unusable Hi, The new libapache2-mod-perl2 (which I thank you for) does not contain a perl.conf, yet it attempts to install one in rules: -install -m644 $(CURDIR)/debian/perl.conf debian/libapache2-mod-perl2/etc/apache2/mods-available That is a minor issue (I believe), but what is really a problem is that when upgrading, the old perl.conf is still present, and its contents are: PerlModule Apache2 which breaks apache (per bug #308503) if that module is enabled. Either a correct perl.conf should be installed, or the old one removed. cheers, Charles -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.8-2-386 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages libapache2-mod-perl2 depends on: ii apache2-common 2.0.54-4 next generation, scalable, extenda ii libapr0 2.0.54-4 the Apache Portable Runtime ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libdb4.24.2.52-19Berkeley v4.2 Database Libraries [ ii libdevel-symdump-perl 2.03-3 Perl module for inspecting perl's ii libexpat1 1.95.8-3 XML parsing C library - runtime li ii libldap22.1.30-10OpenLDAP libraries ii libperl5.8 5.8.7-3 Shared Perl library ii liburi-perl 1.35-1 Manipulates and accesses URI strin ii libwww-perl 5.803-4 WWW client/server library for Perl ii perl [libmime-base64-perl] 5.8.7-3 Larry Wall's Practical Extraction ii perl-base [perlapi-5.8.7] 5.8.7-3 The Pathologically Eclectic Rubbis libapache2-mod-perl2 recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315675: debian-keyring: Do not install / upgrade as of relative pathes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: debian-keyring Version: 2004.07.05 Severity: serious Justification: Policy 9.1.1 The package tryes to install to './usr/share/keyrings/debian-keyring.pgp'. (Note the dot in front!) - -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (800, 'unstable'), (700, 'testing'), (50, 'stable'), (1, 'pool') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.4.30 Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to de_DE) debian-keyring depends on no packages. Versions of packages debian-keyring recommends: ii gnupg 1.4.1-1GNU privacy guard - a free PGP rep - -- no debconf information - -- Klaus Ethgenhttp://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <[EMAIL PROTECTED]> Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) iQEVAwUBQrxHj5+OKpjRpO3lAQL3SAgAn1K8VbJGdhXQ2E7EwZF/F12AVo6058P0 7X+ZonjVTyoWPsDWWAB9CQL6lVmyDwSBE66qPtZu1vv4kPYcSFbeNqdrzjJhIAe2 skIUZVSISQBOKRbA2N9gR5dJeMxychRBdx6bmtYy87L39qittIu9dpLRSkTqz64l UAy2VdAs3q8rqBW/xGCGMBZtwiac5Nf1K78u/X0itX3JDTg632a0AYCRLoCFTcJ1 /A+nm2hepXm/CHR7AMpkydNQlD9prigBFO8nxTxwib1VFlTuH3GfogWPEA1nbUKC Hxdvs1qdsXgBW5q0VSLXAH6/yWxnodBAjdlJaGqlJLer6a+9e+s0YQ== =iSGM -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315556: sound-juicer: sound-juicer does not start
On Thu, 2005-06-23 at 19:28 +0530, Ramakrishnan Muthukrishnan wrote: > sound-juicer: relocation error: /usr/lib/gstreamer-0.8/libgstaudioconvert.so: > undefined symbol: gst_audio_set_caps_channel_positions_list I've been told by a GStreamer developer that you'll only get this message if you have mixed versions of gstreamer installed. Indeed: > ii libgstreamer-gconf0.8-0 0.8.2-3GConf support for GStreamer > ii libgstreamer0.8-0 0.8.9-2Core GStreamer libraries, > plugins, Where Sarge has gst-gconf 0.8.8-2. Can you do a full upgrade, including upgrading any held back packages? Ross -- Ross Burton mail: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] www: http://www.burtonini.com./ PGP Fingerprint: 1A21 F5B0 D8D0 CFE3 81D4 E25A 2D09 E447 D0B4 33DF -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315671: webcalendar: New upstream version with security fixes available
Package: webcalendar
Version: 0.9.45-4
Severity: grave
Tags: security
Justification: user security hole
According to http://freshmeat.net/projects/webcalendar there is a new
version 1.0.0 available, which includes "major security fixes" of
version 1.0RC3 ("all users should upgrade").
Regards
Herbert.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages webcalendar depends on:
ii apache2-mpm-prefork [httpd] 2.0.53-5 traditional model for Apache2
ii debconf [debconf-2.0] 1.4.30.11 Debian configuration management sy
ii php4 4:4.3.10-8 server-side, HTML-embedded scripti
ii php4-cgi 4:4.3.10-8 server-side, HTML-embedded scripti
ii php4-cli 4:4.3.10-8 command-line interpreter for the p
ii php4-mysql4:4.3.10-8 MySQL module for php4
-- debconf information excluded
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#312947: Bug a cause of bug in perl
Hey blarson, The bug you submitted, 312947, I believe to be upstream in perl. (bod is perl's maintainer) Check and the bug reports linked from: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=312419 Try and build it again. It should work fine now. -jay signature.asc Description: This is a digitally signed message part
Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.
On Fri, Jun 24, 2005 at 02:29:19AM -0700, Steve Langasek wrote: > So are there any porters alive out there on debian-arm? Being unable to use > cp, mv, and install after upgrading from woody to sarge is a rather serious > problem. If anyone has any ideas about this, or can test the problem with a > woody vs. a sarge kernel, please speak up so that we can at the very least > document this in the release notes if we need to. Hmm, I started out with sarge testing on my arm systems, so I never did a woody to sarge upgrade. I know arm did have a problem testing this given how few systems you could actually install woody on with an official debian kernel. Since very few people had one of those systems around, testing the upgrade has not been easy. I do seem to recall there is something in the sarge release notes (or was supposed to be) about how to upgrade arm from woody to sarge involving getting a new kernel first, since something important changed. I remember that happens for sure on mips, and also happens on true i386 machines (since sarge's libc requried 486 instructions, so the new kernel emulates the few missing instructions on i386 systems). Len Sorensen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#312958: FTBFS on ia64
tags 312958 sid thanks I don't seem to be able to reproduce this bug on merulo in a testing chroot, only in unstable. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Processed: Re: FTBFS on ia64
Processing commands for [EMAIL PROTECTED]: > tags 312958 sid Bug#312958: FTBFS on ia64 There were no tags set. Tags added: sid > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#314408: libc6: Fix pthread_rwlock_wrlock hang with nptl
severity 314408 important thanks Given that this bug is specific to amd64, it is not actually a release-critical bug for Debian (yet); there's no sense in letting this bug block glibc updates from reaching testing when amd64 isn't even in the archive... Does http://sources.redhat.com/ml/libc-hacker/2004-02/msg00022.html suggest that the fix is already included in glibc 2.3.5? Thanks, -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Processed: Retagging Bugs
Processing commands for [EMAIL PROTECTED]: > package ipkungfu Ignoring bugs not assigned to: ipkungfu > # Bug 315076 is in my opinion not a RC Bug > severity 315076 important Bug#315076: initscript attempts to source defaults, but sources directory instead Severity set to `important'. > # Bugs 315074 & 315076 are in both etch (testing) & sid (unstable), confirmed > # and both are also fixed and are pending upload. > tags 315074 = pending confirmed etch sid Bug#315074: ipkungfu: Renders system inaccessible There were no tags set. Tags set to: pending, confirmed, etch, sid > tags 315076 = pending confirmed etch sid Bug#315076: initscript attempts to source defaults, but sources directory instead There were no tags set. Tags set to: pending, confirmed, etch, sid > # Bug 311880 has now been indirectly fixed by the upcoming upload too. > tags 311880 = pending Bug#311880: ipkungfu: Possible Description Misunderstanding Tags were: sid moreinfo Tags set to: pending > thanks control Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processed: Re: libc6: Fix pthread_rwlock_wrlock hang with nptl
Processing commands for [EMAIL PROTECTED]: > severity 314408 important Bug#314408: libc6: Fix pthread_rwlock_wrlock hang with nptl Severity set to `important'. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#311712: kwifimanager: Does not have a versioned dependency on libmad0
tags 311712 sarge thanks The practical impact of this bug is limited to partial upgrades from woody to sarge; tagging appropriately. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Processed: Re: kwifimanager: Does not have a versioned dependency on libmad0
Processing commands for [EMAIL PROTECTED]: > tags 311712 sarge Bug#311712: kwifimanager: Does not have a versioned dependency on libmad0 Tags were: sarge-ignore Tags added: sarge > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#313390: quanta crashes by pressing the preview button
severity 313390 important retitle 313390 quanta crashes when previewing frame sets thanks Well, if the worst that happens is that quanta crashes when using HTML *frames*, then this doesn't sound grave to me -- indeed, it seems quite usable as long as you avoid certain ugly and deprecated HTML tags? -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Processed: Re: quanta crashes by pressing the preview button
Processing commands for [EMAIL PROTECTED]: > severity 313390 important Bug#313390: quanta crashes by pressing the preview button Severity set to `important'. > retitle 313390 quanta crashes when previewing frame sets Bug#313390: quanta crashes by pressing the preview button Changed Bug title. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#311357: via-rhine still not working...
Hi I tried your latest patched 2.6.8 and 2.6.11 kernels on my home firewall. (The home firewall was working fine with a 2.4 kernel last week, and had been for many months. The hard disk failed, so I thought I would test the new distribution and 2.6 kernel with the new disk. Apart from a replacement hda, the hardware is exactly the same. I am now *using* raid !) The via rhine driver in the new kernel is much better in that it actually appears as an eth* device, and it works by itself. As previously reported, this was not the case with the 2.6 kernel in the 3.1r0 distribution. BUT When you have the via-rhine sharing an interrupt with another netcard as I have, it dies horribly. The via-rhine is my private network, and the dec tulip the internet. Both kernels fail, here I am running your 2.6.11 == [EMAIL PROTECTED]:~$ uname -a Linux wiggle 2.6.11-1-386 #1 Fri May 27 16:55:08 JST 2005 i586 GNU/Linux [EMAIL PROTECTED]:~$ [EMAIL PROTECTED]:~$ apt-cache showpkg kernel-image-2.6.11-1-386 Package: kernel-image-2.6.11-1-386 Versions: 2.6.11-5.hls.2005052700(/var/lib/apt/lists/debian.vergenet.net_testing_kernel-image-2.6.11-i386_._Packages)(/var/lib/dpkg/status) Reverse Depends: Dependencies: 2.6.11-5.hls.2005052700 - initrd-tools (2 0.1.76) coreutils (16 (null)) fileutils (2 4.0) module-init-tools (2 0.9.13) lilo (18 19.1) grub (0 (null)) fdutils (0 (null)) kernel-doc-2.6.11 (16 (null)) kernel-source-2.6.11 (0 (null)) hotplug (3 0.0.20040105-1) Provides: 2.6.11-5.hls.2005052700 - kernel-image-2.6 kernel-image Reverse Provides: [EMAIL PROTECTED]:~$ == Here is output from lspci == [EMAIL PROTECTED]:~$ lspci -tv -[00]-+-00.0 ALi Corporation M1541 +-01.0-[01]00.0 Cirrus Logic GD 5465 [Laguna] +-02.0 ALi Corporation USB 1.1 Controller +-07.0 ALi Corporation M1533 PCI to ISA Bridge [Aladdin IV] +-08.0 Promise Technology, Inc. 20269 +-09.0 VIA Technologies, Inc. VT86C100A [Rhine] +-0a.0 Digital Equipment Corporation DECchip 21041 [Tulip Pass 3] \-0f.0 ALi Corporation M5229 IDE [EMAIL PROTECTED]:~$ [EMAIL PROTECTED]:~$ lspci -v :00:00.0 Host bridge: ALi Corporation M1541 (rev 04) Subsystem: ALi Corporation ALI M1541 Aladdin V/V+ AGP System Controller Flags: bus master, slow devsel, latency 32 Capabilities: :00:01.0 PCI bridge: ALi Corporation M1541 PCI to AGP Controller (rev 04) (prog-if 00 [Normal decode]) Flags: bus master, slow devsel, latency 32 Bus: primary=00, secondary=01, subordinate=01, sec-latency=32 Memory behind bridge: d000-d3ff :00:02.0 USB Controller: ALi Corporation USB 1.1 Controller (rev 03) (prog-if 10 [OHCI]) Flags: bus master, medium devsel, latency 32, IRQ 11 Memory at d6004000 (32-bit, non-prefetchable) [size=4K] Capabilities: :00:07.0 ISA bridge: ALi Corporation M1533 PCI to ISA Bridge [Aladdin IV] (rev c3) Flags: bus master, medium devsel, latency 0 Capabilities: :00:08.0 Unknown mass storage controller: Promise Technology, Inc. 20269 (rev 02) (prog-if 85) Subsystem: Promise Technology, Inc. Ultra133TX2 Flags: bus master, 66MHz, slow devsel, latency 32, IRQ 5 I/O ports at 2c00 [size=8] I/O ports at 3000 [size=4] I/O ports at 3400 [size=8] I/O ports at 3800 [size=4] I/O ports at 2000 [size=16] Memory at d600 (32-bit, non-prefetchable) [size=16K] Capabilities: :00:09.0 Ethernet controller: VIA Technologies, Inc. VT86C100A [Rhine] (rev 06) Subsystem: D-Link System Inc DFE-530TX rev A Flags: bus master, medium devsel, latency 32, IRQ 9 I/O ports at 2400 [size=128] Memory at d6005000 (32-bit, non-prefetchable) [size=128] :00:0a.0 Ethernet controller: Digital Equipment Corporation DECchip 21041 [Tulip Pass 3] (rev 21) Subsystem: D-Link System Inc DE-530+ Flags: bus master, medium devsel, latency 32, IRQ 9 I/O ports at 2800 [size=128] Memory at d6006000 (32-bit, non-prefetchable) [size=128] :00:0f.0 IDE interface: ALi Corporation M5229 IDE (rev c2) (prog-if fa) Flags: bus master, medium devsel, latency 32, IRQ 10 I/O ports at 3c00 [size=16] Capabilities: :01:00.0 VGA compatible controller: Cirrus Logic GD 5465 [Laguna] (rev 03) (prog-if 00 [VGA]) Subsystem: Cirrus Logic: Unknown device Flags: bus master, 66MHz, medium devsel, latency 32, IRQ 10 Memory at d000 (32-bit, non-prefetchable) [size=32M] Memory at d300 (32-bit, non-prefetchable) [size=64K] Capabilities: == Here is a log for a controlled experiment: unload (with modprobe -r) the via-rhine, unload the de2104x, load (with modprobe) the via-rhine, load the de2104x, up eth0, (you can now do stuff on the private ne
Bug#311710: kdelibs: Does not have a versioned dependency on libmad0
tags 311710 sarge thanks The practical impact of this bug is not release-critical for etch, since partial upgrades from sarge->etch will not be affected: only partial upgrades from woody to sarge can be. Tagging it appropriately. Thanks, -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.
So are there any porters alive out there on debian-arm? Being unable to use cp, mv, and install after upgrading from woody to sarge is a rather serious problem. If anyone has any ideas about this, or can test the problem with a woody vs. a sarge kernel, please speak up so that we can at the very least document this in the release notes if we need to. -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Processed: tagging 314700
Processing commands for [EMAIL PROTECTED]: > # Automatically generated email from bts, devscripts version 2.8.14 > tags 314700 woody Bug#314700: f2c: segfaults on i386 since last security update There were no tags set. Tags added: woody > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processed: Re: kdelibs: Does not have a versioned dependency on libmad0
Processing commands for [EMAIL PROTECTED]: > tags 311710 sarge Bug#311710: kdelibs: Does not have a versioned dependency on libmad0 Tags were: sarge-ignore Tags added: sarge > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#314700: f2c: segfaults on i386 since last security update
Hi Jonathan, It's not clear to me from your message whether this bug affects only the version in woody, or if it also affects the version in sarge. Could you please clarify, so that we can tag this bug correctly? Thanks, -- Steve Langasek postmodern programmer signature.asc Description: Digital signature
Bug#315539: gphpedit: exits at start up.
Thanks for the info. I'll try to talk with upstream on this.
I'm putting the relevant part here:
0x2d633a26 in waitpid () from /lib/libpthread.so.0
#0 0x2d633a26 in waitpid () from /lib/libpthread.so.0
#1 0x2ac1eeae in libgnomeui_module_info_get ()
from /usr/lib/libgnomeui-2.so.0
#2
#3 0x00447cc9 in gtk_scintilla_load_lexer_library ()
#4 0x2d11c591 in gtk_marshal_VOID__INT_INT ()
from /usr/lib/libgtk-x11-2.0.so.0
#5 0x2df7b056 in g_closure_invoke () from
/usr/lib/libgobject-2.0.so.0
#6 0x2df8a8ce in g_signal_emit_by_name ()
from /usr/lib/libgobject-2.0.so.0
#7 0x2df89906 in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
#8 0x2d15c45c in gtk_signal_emit () from
/usr/lib/libgtk-x11-2.0.so.0
#9 0x00449dd5 in ScintillaGTK::NotifyParent ()
#10 0x0045c737 in Editor::NotifySavePoint ()
#11 0x004508a7 in Document::NotifySavePoint ()
#12 0x004618a7 in Editor::WndProc ()
#13 0x0045399e in ScintillaBase::WndProc ()
#14 0x7faed4a0 in ?? ()
#15 0x00706dc0 in ?? ()
#16 0x0044bbe9 in scintilla_send_message ()
#17 0x00441d63 in gtk_scintilla_set_save_point ()
Manolo Díaz wrote:
> Lior Kaplan wrote:
>
>
>>Hi Manolo,
>>
>>You don't need to send reports for the two bugs you reported, they have
>>been merged.
>>
>>I see many error about your theme: SphereCrystal. But that doesn't
>>what's crashing the program.
>>
>>I'm not sure about what's crashing it:
>>open("/usr/X11R6/lib/X11/icons/default/index.theme", O_RDONLY) = 16
>>fstat(16, {st_mode=S_IFREG|0644, st_size=27, ...}) = 0
>>mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
>>0) = 0x2aaab04ea000
>>read(16, "[Icon Theme]\nInherits=core\n", 131072) = 27
>>close(16) = 0
>>munmap(0x2aaab04ea000, 131072) = 0
>>brk(0) = 0x883000
>>brk(0x8a4000) = 0x8a4000
>>getcwd("/home/mdiaz", 4096) = 12
>>brk(0) = 0x8a4000
>>brk(0) = 0x8a4000
>>brk(0x8a3000) = 0x8a3000
>>brk(0) = 0x8a3000
>>getcwd("/home/mdiaz", 4096) = 12
>>--- SIGSEGV (Segmentation fault) @ 0 (0) ---
>>
>>Do you have an option to 'inform developers'? It usauly available if you
>>have bug-buddy package isntalled. It can give some usuful trace.
>>
>>
>>
>
> I've set theme to default. I hope it makes easier for you.
> The result is attached.
>
> Regards
>
> Manolo Díaz
>
>
>>Manolo Díaz wrote:
>>
>>
>>
>>>Lior Kaplan wrote:
>>>
>>>
>>>
>>>
>>>
Hi,
1. Please run gphpedit in the console to see if any messages appear.
>>>
>>>No, it does not appear
>>>
>>>
>>>
>>>
>>>
2. Please provid an strace of the problem ('strace gphpedit 2>
/tmp/gphpedit_bugreport').
>>>
>>>I've run
>>>
>>>strace gphpedit 2> gphpedit.strace.txt
>>>
>>>when the dialog box asked me whether exit or restart I answerd restart
>>>
>>>Please, see the attached file
>>>
>>>
>>>
>>>
>>>
Manolo Díaz wrote:
>Package: gphpedit
>Version: 0.9.50-2
>Severity: grave
>Justification: renders package unusable
>
>
>
>-- System Information:
>Debian Release: testing/unstable
>APT prefers testing
>APT policy: (500, 'testing')
>Architecture: amd64 (x86_64)
>Shell: /bin/sh linked to /bin/bash
>Kernel: Linux 2.6.12.1
>Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
>
>Versions of packages gphpedit depends on:
>ii libart-2.0-2 2.3.17-1Library of functions for 2D
>graphi
>ii libatk1.0-0 1.10.1-2The ATK accessibility toolkit
>ii libaudiofile00.2.6-6 Open-source version of SGI's
>audio
>ii libbonobo2-0 2.8.1-2 Bonobo CORBA interfaces
>library
>ii libbonoboui2-0 2.8.1-2 The Bonobo UI library
>ii libc62.3.2.ds1-22GNU C Library: Shared
>libraries an
>ii libesd0 0.2.35-2Enlightened Sound Daemon -
>Shared
>ii libgail-common 1.8.4-1 GNOME Accessibility
>Implementation
>ii libgail171.8.4-1 GNOME Accessibility
>Implementation
>ii libgcc1 1:4.0.0-9 GCC support library
>ii libgconf2-4 2.10.0-2GNOME configuration database
>syste
>ii libgcrypt11 1.2.0-11.1 LGPL Crypto library - runtime
>libr
>ii libglib2.0-0 2.6.4-1 The GLib library of C routines
>ii libgnome-keyring00.4.2-1 GNOME keyring services library
>ii libgnome2-0 2.8.1-2
Bug#315076: Bug#315074: ipkungfu: Renders system inaccessible
Bug#315074: > Simplest fix: add /etc/default/ipkungfu with ENABLED=false, source the > file in the init script and only start if ENABLED is not "false". After the last upload I have been planning to create something like this, as well as using debconf for default values which would indeed stop this from happening Bug#315076 > Side note: > > [EMAIL PROTECTED]:~# grep -A3 Include /etc/init.d/ipkungfu > # Include ipkungfu defaults if available > if [ -f /etc/ipkungfu ] ; then > . /etc/ipkungfu > fi > [EMAIL PROTECTED]:~# file /etc/ipkungfu > /etc/ipkungfu: directory > [EMAIL PROTECTED]:~# Should be fixed as well in next version. General: I'll try and get Bug#315074 fixed in the next few hours (sidenotes: 1: hopefully... 2: of course it won't be on the archives right away). If Bug#315076 is not fixed in the same build, then it will go in the next build that will have debconf (hopefully). The debconf work I was planning can go up in a seperate upload in about 2 weeks time (if not beforehand). -- N Jones Blogging @ http://nigelj.blogspot.com Proud Debian & FOSS User Debian Maintainer of: html2ps & ipkungfu
Bug#308897: backup-manager security fixes, pending upload.
tags 315582 + pending tags 315582 + pending thanks Those two security issues are pending upload. The security team has been contacted for uploading a fixed package to stable. Thanks for the report and the patches. For testers, pending packages are available here: For sarge: http://www.sukria.net/debian/binary/backup-manager_0.5.7-2sarge1_all.deb For sid/etch: http://www.sukria.net/debian/binary/backup-manager_0.5.8-2_all.deb You'll can find the sources of those packages here: http://www.sukria.net/debian/source/ Regards. -- Alexis Sukrieh <[EMAIL PROTECTED]> http://www.sukria.net « Quidquid latine dictum sit, altum sonatur. » Whatever is said in Latin sounds profound.
Bug#315539: gphpedit: exits at start up.
Hi Manolo,
You don't need to send reports for the two bugs you reported, they have
been merged.
I see many error about your theme: SphereCrystal. But that doesn't
what's crashing the program.
I'm not sure about what's crashing it:
open("/usr/X11R6/lib/X11/icons/default/index.theme", O_RDONLY) = 16
fstat(16, {st_mode=S_IFREG|0644, st_size=27, ...}) = 0
mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2aaab04ea000
read(16, "[Icon Theme]\nInherits=core\n", 131072) = 27
close(16) = 0
munmap(0x2aaab04ea000, 131072) = 0
brk(0) = 0x883000
brk(0x8a4000) = 0x8a4000
getcwd("/home/mdiaz", 4096) = 12
brk(0) = 0x8a4000
brk(0) = 0x8a4000
brk(0x8a3000) = 0x8a3000
brk(0) = 0x8a3000
getcwd("/home/mdiaz", 4096) = 12
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
Do you have an option to 'inform developers'? It usauly available if you
have bug-buddy package isntalled. It can give some usuful trace.
Manolo Díaz wrote:
> Lior Kaplan wrote:
>
>
>>Hi,
>>
>>1. Please run gphpedit in the console to see if any messages appear.
>>
>>
>
> No, it does not appear
>
>
>>2. Please provid an strace of the problem ('strace gphpedit 2>
>>/tmp/gphpedit_bugreport').
>>
>>
>
> I've run
>
> strace gphpedit 2> gphpedit.strace.txt
>
> when the dialog box asked me whether exit or restart I answerd restart
>
> Please, see the attached file
>
>
>>Manolo Díaz wrote:
>>
>>
>>
>>>Package: gphpedit
>>>Version: 0.9.50-2
>>>Severity: grave
>>>Justification: renders package unusable
>>>
>>>
>>>
>>>-- System Information:
>>>Debian Release: testing/unstable
>>> APT prefers testing
>>> APT policy: (500, 'testing')
>>>Architecture: amd64 (x86_64)
>>>Shell: /bin/sh linked to /bin/bash
>>>Kernel: Linux 2.6.12.1
>>>Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
>>>
>>>Versions of packages gphpedit depends on:
>>>ii libart-2.0-2 2.3.17-1Library of functions for 2D
>>>graphi
>>>ii libatk1.0-0 1.10.1-2The ATK accessibility toolkit
>>>ii libaudiofile00.2.6-6 Open-source version of SGI's
>>>audio
>>>ii libbonobo2-0 2.8.1-2 Bonobo CORBA interfaces library
>>>ii libbonoboui2-0 2.8.1-2 The Bonobo UI library
>>>ii libc62.3.2.ds1-22GNU C Library: Shared libraries
>>>an
>>>ii libesd0 0.2.35-2Enlightened Sound Daemon -
>>>Shared
>>>ii libgail-common 1.8.4-1 GNOME Accessibility
>>>Implementation
>>>ii libgail171.8.4-1 GNOME Accessibility
>>>Implementation
>>>ii libgcc1 1:4.0.0-9 GCC support library
>>>ii libgconf2-4 2.10.0-2GNOME configuration database
>>>syste
>>>ii libgcrypt11 1.2.0-11.1 LGPL Crypto library - runtime
>>>libr
>>>ii libglib2.0-0 2.6.4-1 The GLib library of C routines
>>>ii libgnome-keyring00.4.2-1 GNOME keyring services library
>>>ii libgnome2-0 2.8.1-2 The GNOME 2 library - runtime
>>>file
>>>ii libgnomecanvas2-02.8.0-1 A powerful object-oriented
>>>display
>>>ii libgnomeui-0 2.8.1-3 The GNOME 2 libraries (User
>>>Interf
>>>ii libgnomevfs2-0 2.8.4-4 The GNOME virtual file-system
>>>libr
>>>ii libgnutls11 1.0.16-13.1 GNU TLS library - runtime
>>>library
>>>ii libgpg-error01.0-1 library for common error values
>>>an
>>>ii libgtk2.0-0 2.6.4-3 The GTK+ graphical user
>>>interface
>>>ii libgtkhtml2-02.6.3-1 HTML rendering/editing library
>>>- r
>>>ii libice6 4.3.0.dfsg.1-14 Inter-Client Exchange library
>>>ii libjpeg626b-10 The Independent JPEG Group's
>>>JPEG
>>>ii liborbit21:2.12.2-1 libraries for ORBit2 - a CORBA
>>>ORB
>>>ii libpango1.0-01.8.1-1 Layout and rendering of
>>>internatio
>>>ii libpopt0 1.7-5 lib for parsing cmdline
>>>parameters
>>>ii libsm6 4.3.0.dfsg.1-14 X Window System Session
>>>Management
>>>ii libstdc++5 1:3.3.5-13 The GNU Standard C++ Library v3
>>>ii libtasn1-2 0.2.10-4Manage ASN.1 structures
>>>(runtime)
>>>ii libx11-6 4.3.0.dfsg.1-14 X Window System protocol client
>>>li
>>>ii libxml2 2.6.16-7GNOME XML library
>>>ii xlibs4.3.0.dfsg.1-14 X Keyboard Extension (XKB)
>>>configu
>>>ii zlib1g 1:1.2.2-4 compression library - runtime
>>>
>>>-- no debconf information
>>>
>>>Fails to restart af
Processed: backup-manager security fixes, pending upload.
Processing commands for [EMAIL PROTECTED]: > tags 315582 + pending Bug#315582: backup-manager: insecure handling of temporary files Tags were: etch sarge security patch Tags added: pending > tags 315582 + pending Bug#315582: backup-manager: insecure handling of temporary files Tags were: pending etch sarge security patch Tags added: pending > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#315582: unmerging
unmerge 315582 thanks That's not the same problem as the one in #308897. -- Alexis Sukrieh <[EMAIL PROTECTED]> http://www.sukria.net « Quidquid latine dictum sit, altum sonatur. » Whatever is said in Latin sounds profound.
Processed: unmerging
Processing commands for [EMAIL PROTECTED]: > unmerge 315582 Bug#315582: backup-manager: insecure handling of temporary files Bug#308897: backup-manager: insecure default configuration Disconnected #315582 from all other report(s). > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#251182: FTBFS - Please rebuild ttf2pt1 with libt1-dev instead of t1lib-dev
Hi Anthony, I've prepared an NMU for this issue, which I have uploaded to the DELAYED/4-day queue on gluck. Please find the (trivial) diff attached. Cheers, -- Steve Langasek postmodern programmer diff -u ttf2pt1-3.4.4/debian/control ttf2pt1-3.4.4/debian/control --- ttf2pt1-3.4.4/debian/control +++ ttf2pt1-3.4.4/debian/control @@ -2,7 +2,7 @@ Section: text Priority: optional Maintainer: Anthony Fok <[EMAIL PROTECTED]> -Build-Depends: debhelper (>> 3.0.0), libfreetype6-dev (>> 2.0.2), t1lib-dev +Build-Depends: debhelper (>> 3.0.0), libfreetype6-dev (>> 2.0.2), libt1-dev Standards-Version: 3.6.1 Package: ttf2pt1 diff -u ttf2pt1-3.4.4/debian/changelog ttf2pt1-3.4.4/debian/changelog --- ttf2pt1-3.4.4/debian/changelog +++ ttf2pt1-3.4.4/debian/changelog @@ -1,3 +1,11 @@ +ttf2pt1 (3.4.4-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Build against libt1-dev instead of the deprecated t1lib-dev. +Closes: #251182. + + -- Steve Langasek <[EMAIL PROTECTED]> Thu, 23 Jun 2005 23:49:54 -0700 + ttf2pt1 (3.4.4-1) unstable; urgency=low * New upstream release. signature.asc Description: Digital signature
