Bug#481186: CVE-2008-2149: buffer overflows

[Nico Golde]

Hi Andreas,
* Andreas Tille <[EMAIL PROTECTED]> [2008-05-16 15:53]:
> On Fri, 16 May 2008, Nico Golde wrote:
> 
> >>-   sprintf(tmpbuf, "wn: invalid search option: %s\n", av[j]);
> >>+   /* Fix CVE-2008-2149: buffer overflows Andreas Tille <[EMAIL 
> >>PROTECTED]> */
> >>+   sprintf(tmpbuf, "wn: invalid search option: %.200s\n", av[j]);
> >
> >Please use snprintf(tmpbuf, sizeof(tmpbuf), ... instead of this.
> 
> I just followed
>https://buildsecurityin.us-cert.gov/daisy/bsi-rules/home/g1/840.html
> and unfortuantely it is to late now because the package just hit unstable.
> Feel free to NMU if there are any reasons to do so.
> 
> Just for the sake of interest: What is the essential difference between
> the patch above and snprintf()?

I first thought the buffer you write into is also 200 bytes 
big then the 0 byte sprintf writes at the end would cause an 
off-by-one. I just saw that its 256 bytes big so this should 
be no problem. However I still prefer clean fixes and 
snprintf is the clean fix for boundary problems of sprintf.

Anyway, nothing that needs to be fixed with an additional 
upload.

Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.


pgpGZgtkYZDom.pgp
Description: PGP signature

Bug#481493: battery: After power off, something not turn-off and consume power.

[Renato S. Yamane]

Raphael Hertzog wrote:

On Fri, 16 May 2008, Renato S. Yamane wrote:

When I poweroff my laptop Toshiba M45-S355 I can see that something is
not fully power-off because when I start laptop is possible check in
battery LED that is not full (I poweroff my laptop when battery is
100%).

After 1 day, I loss 3% of battery.

This same laptop have WindowsXP and when I poweroff it by Windows,
nothing happenned with battery. If it have 100% when I poweroff, it have
the same charge when I turn-on.


How do you verify the battery level in each case?


On Lenny, I check by Kpowersave, by /proc/acpi/battery/BAT1/state, and 
by LED of my laptop that show me different collors (blue is full 
charged, and yellow is not fully charged).


On Windows I check it in Control Pannel and with LED of my laptop.


And in general, I can't see how acpi-support has anything to do with this
problem. Are you suspending to disk when you say "poweroff"? How are you
doing it?


K Menu --> Close section --> Shutdown.
NOT suspending.


Have you tried on sid/lenny with an etch kernel? Because if anything is
responsible of this, it would rather be the kernel...


No, I use only Kernel available on Lenny.

Regards,
Renato



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481361: xserver-xorg-video-ati: No display on DVI output

[Francois Gouget]

On Fri, 16 May 2008, Alex Deucher wrote:
[...]
> 1920x1200 is probably a bit much for your card bandwidth-wise.

Sure, this graphics card is pretty old and not very powerful. However:
 * I used it to drive the VGA output in 1920x1440x75Hz for 7 years with 
   my 21" CRT.
 * About 6 months ago I switched to an LCD screen and used it to drive 
   the DVI output at 1920x1200x60Hz without trouble.
 * It's only last wednesday when I upgraded that the DVI output stopped 
   working at all.
 * I have since downgraded the driver to and I'm using the DVI output in 
   1920x1200x60Hz (as confirmed by both xrandr 1.1 and my LCD screen).

So it's not a hardware problem.


> Do lower resolutions work ok?  (1680x1050 or 1024x768) You might try 
> reducing your color depth to 16 bits. 

I thought about an issue with the single-link DVI bandwidth limit too. 
So I tried 1600x1200x60Hz and 1024x768x60Hz and neither worked. I did 
not try 16 bits mode.


> The following options may also 
> help: Option "DefaultTMDSPLL" "TRUE" Option "DisplayPriority" "HIGH"
> 
> If that doesn't help, try a modeline with a reduced refresh rate (50
> hz rather than 60):
> Modeline "1920x1200_50.00_rb"  127.75  1920 1968 2000 2080  1200 1203
> 1209 1229  +HSync -Vsync

I will try this tonight. Do these correspond to driver settings that 
changed between 6.6.3 and 6.8.0?

-- 
Francois Gouget <[EMAIL PROTECTED]>  http://fgouget.free.fr/
 Avoid the Gates of Hell - use Linux.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#476441: libgnutls26: chooses AES128 over AES256 (again)

[brian m. carlson]

clone 476441 -1 -2
reassign -1 mutt
retitle -1 mutt: should provide options for cipher selections
severity -1 wishlist
retitle -2 libgnutls26: use the same names for ciphers as OpenSSL
severity -2 normal
kthxbye

On Fri, May 16, 2008 at 10:41:20AM +0200, Simon Josefsson wrote:

Given the discussion so far at:

http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2792


I think it's silly to intentionally weaken part of the cryptosystem.
The weakest part of the cryptosystem is currently the symmetric cipher.
If you used AES256, the weakest part would be the either the MAC or the
public key.  That means that the strength of the cryptosystem lies in
the public key, where it belongs.  Any performance hit from the four
extra rounds in AES256 is only really relevant on very old
architectures, like m68k, which already takes two minutes to log in over
ssh.

You said that "to match a 256 bit symmetric key size, you need a ~15kb
large RSA key or a ~500b large DSA key."  500 bits is not a large key.
I can generate keys that are much larger than that, depending on the
protocol.  1024 bits is the standard, and some applications allow much
larger keys (OpenPGP and P.1363, for example).  If I used a 8192-bit p,
then I could even make q a 512-bit prime.  8000-bit keys are not that
far off in the future for high security applications.

Also, AES256 was the default in libgnutls13, so this change is a
regression.


I'm inclined to close this as a wontfix report.


Please don't close it.  If you don't want to implement it, you may tag
it as wontfix.


You may want to review our documentation on key sizes:

http://www.gnu.org/software/gnutls/manual/html_node/Selecting-cryptographic-key-sizes.html


I'm aware that symmetric and asymmetric keys have different sizes for
the same strength.  I've read Applied Cryptography cover to cover,
several times.


That table is based on research in:

http://citeseer.ist.psu.edu/lenstra99selecting.html


I take exception to this data.  The lower bound for 2008 is 1279 bits,
which is way, way too low.  An appropriate minimum key size for anything
that will last more than a year is 2048.  I wouldn't even dream of using
anything symmetric with less than 128 bits these days, unless it was
3DES-EDE3 (which is equivalent to 112 bits).


We are open for discussion if you can provide better justification why
changing to AES-256 is warranted.

Note that changing the default for all programs is different from
_allowing_ AES-256 to be used in each program.  I believe you should be
able to use AES-256 with all programs that use GnuTLS.  If a program
using GnuTLS doesn't allow you to use AES-256, please file a bug on that
program.


Unfortunately mutt doesn't have that knob, and even if it did, it would
be hard to use, since GnuTLS doesn't have the same names for ciphers and
doesn't have the same categories either.  I think this solution is only
acceptable if the names are the same, because otherwise, the config
files break, depending on how the programs are compiled.

Note that this happens with OpenLDAP, too.

--
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
troff on top of XML: http://crustytoothpaste.ath.cx/~bmc/code/thwack
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187


signature.asc
Description: Digital signature

Bug#481417: duplicate bug - x264/h264 playback is broken in 0.8.6.e-2.1

[Nico Golde]

Hi Pier,
* Pier Luigi Pau <[EMAIL PROTECTED]> [2008-05-16 13:03]:
> This sounds like just a duplicate of #478971, which is a regression
> from 0.8.6.e-2 to 0.8.6.e-2.1 due to incomplete patching to fix
> #478140. Please find the details (and a solution that has worked for
> me so far) at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478971
> 
> The same issue exists in the corresponding testing-security upload, so
> lenny needs fixing, too.

Thanks, I am working to fix #480724 and #480370 as well at 
the moment. I'll fix this bug as well in an NMU that should 
follow soon.
Thanks for pointing this out.

Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.


pgpvGB5fYCHb7.pgp
Description: PGP signature

Bug#481077: nslcd: error writing to client

[Petter Reinholdtsen]

[Arthur de Jong]
> I had thought that this was a good enough upper limit but apparently
> there are environments out there with many more users per
> group. What would be a reasonable upper limit?

Well, I have seen groups with about 6500 members, and suspect I will
run into larger groups (like the all users group) with 12 members
soon. :)

What about reading it in bulks, instead of having a buffer capable of
storing a maximum number of users?

Also, just teminating the 'getent group' call because if run into a
large group seem like a bad idea.  Can't the client and the server
negotiate on a good buffer size, and let nslcd skip groups that are
too large for the client?  Also, it is strange that 'getent group
largegroup' work, but 'getent group' terminate when it run into the
same group.

Happy hacking,
-- 
Petter Reinholdtsen



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481361: xserver-xorg-video-ati: No display on DVI output

[Alex Deucher]

On Fri, May 16, 2008 at 10:16 AM, Francois Gouget <[EMAIL PROTECTED]> wrote:
> On Fri, 16 May 2008, Alex Deucher wrote:
>  [...]
>  > 1920x1200 is probably a bit much for your card bandwidth-wise.
>
>  Sure, this graphics card is pretty old and not very powerful. However:
>   * I used it to drive the VGA output in 1920x1440x75Hz for 7 years with
>my 21" CRT.
>   * About 6 months ago I switched to an LCD screen and used it to drive
>the DVI output at 1920x1200x60Hz without trouble.
>   * It's only last wednesday when I upgraded that the DVI output stopped
>working at all.
>   * I have since downgraded the driver to and I'm using the DVI output in
>1920x1200x60Hz (as confirmed by both xrandr 1.1 and my LCD screen).
>

The the driver was substantially rewritten for xrandr 1.2 support.
The mode handling has changed a lot.

>  So it's not a hardware problem.
>
>
>  > Do lower resolutions work ok?  (1680x1050 or 1024x768) You might try
>  > reducing your color depth to 16 bits.
>
>  I thought about an issue with the single-link DVI bandwidth limit too.
>  So I tried 1600x1200x60Hz and 1024x768x60Hz and neither worked. I did
>  not try 16 bits mode.
>
>
>  > The following options may also
>  > help: Option "DefaultTMDSPLL" "TRUE" Option "DisplayPriority" "HIGH"
>  >
>  > If that doesn't help, try a modeline with a reduced refresh rate (50
>  > hz rather than 60):
>  > Modeline "1920x1200_50.00_rb"  127.75  1920 1968 2000 2080  1200 1203
>  > 1209 1229  +HSync -Vsync
>
>  I will try this tonight. Do these correspond to driver settings that
>  changed between 6.6.3 and 6.8.0?

The DefaultTMDSPLL is new, but the default behavior should be the
same.  displaypriority exists in both versions.

Alex



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481502: gtwitter: doesn't display XML entities properly

[brian m. carlson]

Package: gtwitter
Version: 1.0~beta-6
Severity: minor

When someone I'm following posts "<3", gtwitter displays it as "<3".
Obviously, it's not handling XML entities properly.  It should support
at least the four standard XML entities, in addition to numerical
entities (both hexadecimal and decimal).

If you need more information, please let me know.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gtwitter depends on:
ii  libgconf2.0-cil 2.20.1-1 CLI binding for GConf 2.20
ii  libglib2.0-cil  2.12.1-1 CLI binding for the GLib utility l
ii  libgnome-vfs2.0-cil 2.20.1-1 CLI binding for GnomeVFS 2.20
ii  libgnome2.0-cil 2.20.1-1 CLI binding for GNOME 2.20
ii  libgtk2.0-cil   2.12.1-1 CLI binding for the GTK+ toolkit 2
ii  libmono-cairo1.0-cil1.9.1+dfsg-1 Mono Cairo library
ii  libmono-corlib2.0-cil   1.9.1+dfsg-1 Mono core library (2.0)
ii  libmono-system-web2.0-cil   1.9.1+dfsg-1 Mono System.Web Library
ii  libmono-system2.0-cil   1.9.1+dfsg-1 Mono System libraries (2.0)
ii  libmono2.0-cil  1.9.1+dfsg-1 Mono libraries (2.0)
ii  libsexy20.1.11-2 collection of additional GTK+ widg
ii  mono-runtime1.9.1+dfsg-1 Mono runtime

gtwitter recommends no packages.

-- no debconf information

--
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
troff on top of XML: http://crustytoothpaste.ath.cx/~bmc/code/thwack
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187


signature.asc
Description: Digital signature

Bug#473168: enigmail: The severity of this bug should (not) be set to Important

[Alexander Sack]

OK, I don't see anything that is really serious ... except the fact
that the enigmail strings are not translated ... which is important I
agree, but it doesn't break icedove ...

On Fri, May 16, 2008 at 02:27:10PM +0200, Yves Lambert wrote:
> Hi,
>
> Alexander Sack wrote:
>> What are the symptoms of not working here?  
> some problems but it seems to work...
>
> (launching thunderbird^W icedove) and following steps on  
> http://enigmail.mozdev.org/documentation/ (assuming latest enigmail  
> shipped by debian is installed, it is.)
>
> Self sending signed then encrypted message : OK.
> In fact some earlier versions of enigmail did not work without  
> appropriate locale installed. Forget it
>
> Problems abstract (are they open bugs?)
>
> *Not an enigmail bug (or else a typo in mozdev page)
> - enigmail needs a version of pgp that is not shipped by debian
> Debian specific bugs
> - enigmail package description reference to thunderbird rather than icedove
> - enigmail does not work with iceape (and therefore should not depend on  
> icedove OR iceape).
>
> 1st/  
> http://enigmail.mozdev.org/documentation/quickstart-ch1.php#id2532886  
> requires GnuPG 1.4.9 (or some later version), and debian/sid ships  
> 1.4.6-2-2 (typo on enigmail.mozdev.org page?)
> 2nd/ package description is "Enigmail GPG support for Thunderbird"  
> instead of Icedove
> 3rd/ package depends on iceape or icedove though I can't find any  
> symptom of presence of enigmail on iceape (previous version of enigmail  
> *used to* work on both thunderbird and mozilla suite, but its page on  
> mozdev seems to say it works on thunderbird only - anyway the xpi cannot  
> be installed on seamonkey^W iceape
>
>>  - Alexander
>

 - Alexander




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481186: CVE-2008-2149: buffer overflows

[Andreas Tille]

On Fri, 16 May 2008, Nico Golde wrote:


I first thought the buffer you write into is also 200 bytes
big then the 0 byte sprintf writes at the end would cause an
off-by-one. I just saw that its 256 bytes big so this should
be no problem.


Yes, I left some space.  You have to add the fix format string
to 200 which is all in all something less than the allocated size
of 256.


However I still prefer clean fixes and
snprintf is the clean fix for boundary problems of sprintf.


Fully ACK.


Anyway, nothing that needs to be fixed with an additional
upload.


OK.  Just learned some lession about security anyway

Andreas.

--
http://fam-tille.de



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#374195: Can't figure out what file to patch

[tyranorl]

Hello,

I just tried to upgrade a quite old PC, and I have this bug too.
I've been downloading the patch, but I can't find the file (errors.c) to patch,
and how.
Is there some tricks I don't know (there are many, by the way!!), or what.

Thanks a lot.

Regards



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#480003: gbgoffice: Crashes when choosing "Make a test" from the menu

[Damyan Ivanov]

tags 480003 confirmed
thanks

The problem seems to be that the "Test" function works only with either
Bulgarian<->English dictionary or the Synonymuous dictionary. Both are
not available in Debian (downloadable via bgoffice-dict-downloader in
contrib).

I think the test function should either be disabled or emit a proper
error message if there are no dictionaries that support it.

-- 
damJabberID: [EMAIL PROTECTED]


signature.asc
Description: Digital signature

Bug#481361: xserver-xorg-video-ati: No display on DVI output

[Alex Deucher]

On Fri, May 16, 2008 at 10:23 AM, Alex Deucher <[EMAIL PROTECTED]> wrote:
> On Fri, May 16, 2008 at 10:16 AM, Francois Gouget <[EMAIL PROTECTED]> wrote:
>  > On Fri, 16 May 2008, Alex Deucher wrote:
>  >  [...]
>  >  > 1920x1200 is probably a bit much for your card bandwidth-wise.
>  >
>  >  Sure, this graphics card is pretty old and not very powerful. However:
>  >   * I used it to drive the VGA output in 1920x1440x75Hz for 7 years with
>  >my 21" CRT.
>  >   * About 6 months ago I switched to an LCD screen and used it to drive
>  >the DVI output at 1920x1200x60Hz without trouble.
>  >   * It's only last wednesday when I upgraded that the DVI output stopped
>  >working at all.
>  >   * I have since downgraded the driver to and I'm using the DVI output in
>  >1920x1200x60Hz (as confirmed by both xrandr 1.1 and my LCD screen).
>  >
>
>  The the driver was substantially rewritten for xrandr 1.2 support.
>  The mode handling has changed a lot.
>
>
>  >  So it's not a hardware problem.
>  >
>  >
>  >  > Do lower resolutions work ok?  (1680x1050 or 1024x768) You might try
>  >  > reducing your color depth to 16 bits.
>  >
>  >  I thought about an issue with the single-link DVI bandwidth limit too.
>  >  So I tried 1600x1200x60Hz and 1024x768x60Hz and neither worked. I did
>  >  not try 16 bits mode.
>  >
>  >
>  >  > The following options may also
>  >  > help: Option "DefaultTMDSPLL" "TRUE" Option "DisplayPriority" "HIGH"
>  >  >
>  >  > If that doesn't help, try a modeline with a reduced refresh rate (50
>  >  > hz rather than 60):
>  >  > Modeline "1920x1200_50.00_rb"  127.75  1920 1968 2000 2080  1200 1203
>  >  > 1209 1229  +HSync -Vsync

if none of that helps can you try the attached patches and let me know
which, if any, help?

Alex
diff --git a/src/legacy_crtc.c b/src/legacy_crtc.c
index 489fecf..a4031ee 100644
--- a/src/legacy_crtc.c
+++ b/src/legacy_crtc.c
@@ -1708,7 +1708,7 @@ legacy_crtc_mode_set(xf86CrtcPtr crtc, DisplayModePtr mode,
 RADEONInfoPtr info = RADEONPTR(pScrn);
 int i = 0;
 double dot_clock = 0;
-int pll_flags = RADEON_PLL_LEGACY;
+int pll_flags = RADEON_PLL_LEGACY | RADEON_PLL_DCE3 | RADEON_PLL_USE_REF_DIV;
 Bool update_tv_routing = FALSE;
 Bool tilingChanged = FALSE;
 
diff --git a/src/legacy_crtc.c b/src/legacy_crtc.c
index 489fecf..f1894df 100644
--- a/src/legacy_crtc.c
+++ b/src/legacy_crtc.c
@@ -1708,7 +1708,7 @@ legacy_crtc_mode_set(xf86CrtcPtr crtc, DisplayModePtr mode,
 RADEONInfoPtr info = RADEONPTR(pScrn);
 int i = 0;
 double dot_clock = 0;
-int pll_flags = RADEON_PLL_LEGACY;
+int pll_flags = RADEON_PLL_LEGACY | RADEON_PLL_DCE3;
 Bool update_tv_routing = FALSE;
 Bool tilingChanged = FALSE;
 
diff --git a/src/legacy_crtc.c b/src/legacy_crtc.c
index 489fecf..937d269 100644
--- a/src/legacy_crtc.c
+++ b/src/legacy_crtc.c
@@ -1708,7 +1708,7 @@ legacy_crtc_mode_set(xf86CrtcPtr crtc, DisplayModePtr mode,
 RADEONInfoPtr info = RADEONPTR(pScrn);
 int i = 0;
 double dot_clock = 0;
-int pll_flags = RADEON_PLL_LEGACY;
+int pll_flags = RADEON_PLL_LEGACY | RADEON_PLL_USE_REF_DIV;
 Bool update_tv_routing = FALSE;
 Bool tilingChanged = FALSE;
 

Bug#481503: autocompletion for crossref fields

[martin f krafft]

Package: jabref
Version: 2.3.1-3
Severity: wishlist

I tried turning crossref autocompletion on via the field in the
prefs Entry editor dialog, but to no avail. It would be nice if
crossref fields would be autocompleted with bibtex keys...

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1+scoflowctrl.1-686 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages jabref depends on:
ii  antlr   2.7.7-5  language tool for constructing rec
ii  antlr3  3.0.1+dfsg-2 language tool for constructing rec
ii  libglazedlists-java 1.7.0.dfsg-3 java list transformation library
ii  libjempbox-java 0.2.0.dfsg-1 XMP Compatible Java Library
ii  libjgoodies-forms-java  1.2.0-1  Framework to lay out and implement
ii  libjgoodies-looks-java  2.1.4-1  library with Swing look&feel imple
ii  libmicroba-java 1:0.4.4.2-1  set of JFC (Swing) components
ii  libpdfbox-java  0.7.3.dfsg-2 PDF library for Java
ii  libspin-java1.5-1transparent threading solution for
ii  sun-java6-jre   6-06-1   Sun Java(TM) Runtime Environment (

jabref recommends no packages.

-- no debconf information


-- 
 .''`.   martin f. krafft <[EMAIL PROTECTED]>
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#481496: Date has undocumented '@' parameter

[Lucas Nussbaum]

On 16/05/08 at 14:36 +0100, Roberto Sarrionandia wrote:
> From: Roberto Sarrionandia <[EMAIL PROTECTED]>
> To: Debian Bug Tracking System <[EMAIL PROTECTED]>
> Subject: Date has undocumented '@' parameter
> Date: Fri, 16 May 2008 14:29:58 +0100
> Package: coreutils
> Version: 6.10-3ubuntu2

Please report bugs in the Debian version, not the Ubuntu version.

> Severity: minor
> User: [EMAIL PROTECTED]
> Usertags: origin-ubuntu intrepid
> 
> The date program in package 'coreutils' accepts an undocumented
> parameter.
> 
> date followed by @ and a UNIX timestamp gives the date.
> EG:
> $ date -d @1210937386
> Fri May 16 13:29:46 CEST 2008
> 
> This is not mentioned anywhere in the Man page. From Launchpad
> 
> https://bugs.launchpad.net/231058

It's mentioned in the info documentation, which is itself mentioned in
the man page. I'm wondering whether we should move the "SEE ALSO"
section of the man page higher in the man page, so it gets more visible.
I'm sure many coreutils users don't know about the info documentation.
Upstream devs, what do you think?
-- 
| Lucas Nussbaum
| [EMAIL PROTECTED]   http://www.lucas-nussbaum.net/ |
| jabber: [EMAIL PROTECTED] GPG: 1024D/023B3F4F |



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#479607: Works

[Eugen Dedu]

Sebastien Cevey wrote:

Selon Eugen Dedu <[EMAIL PROTECTED]>:

I have just found that the MODULES variable is in the /etc/initramfs/... 
file.  So I changed it and the kernel boots!


I had the initial problem too and I tried to change MODULES. Now the boot
process does find the root fs and starts initializing stuff, however it gets
stuck after loading ata_piix:

ata_piix :00:1f.2: MAP [ P0 P2 P1 P3 ]
scsi0 : ata_piix
scsi1 : ata_piix


Seems like something is still missing, and I have not figured out what yet..


My machine prints:
[...]
[0.657884] ata_piix :00:1f.2: MAP [ P0 P2 P1 P3 ]
[0.684065] PCI: Setting latency timer of device :00:1f.2 to 64
[0.684121] scsi0 : ata_piix
[0.684256] scsi1 : ata_piix
[0.685195] ata1: SATA max UDMA/133 cmd 0x60f8 ctl 0x6114 bmdma 
0x6020 irq 18
[0.685283] ata2: SATA max UDMA/133 cmd 0x60f0 ctl 0x6110 bmdma 
0x6028 irq 18

[0.500118] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[0.704055] ata1.00: ATA-8: FUJITSU MHW2120BH, 00810013, max UDMA/100
[0.704055] ata1.00: 234441648 sectors, multi 16: LBA48 NCQ (depth 0/32)
[0.508045] ata1.00: configured for UDMA/100
[0.544092] ata2: SATA link down (SStatus 0 SControl 0)
[0.716056] scsi 0:0:0:0: Direct-Access ATA  FUJITSU MHW2120B 
0081 PQ: 0 ANSI: 5


HTH,
--
Eugen



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481506: python-pygame: pygame.image.frombuffer raises TypeError: char buffer type not available

[Sam Morris]

Package: python-pygame
Version: 1.7.1release-4.1
Severity: normal

The attached code does not work with Python 2.5. It does work with
previous Python versions.

$ python pyg2.py 
Traceback (most recent call last):
  File "pyg2.py", line 7, in 
i = pygame.image.frombuffer (s.get_data (), (256, 192), 'RGBA')
TypeError: char buffer type not available

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (530, 'testing'), (520, 'unstable'), (510, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages python-pygame depends on:
ii  libc62.7-10  GNU C Library: Shared libraries
ii  libjpeg626b-14   The Independent JPEG Group's JPEG 
ii  libpng12-0   1.2.27-1PNG library - runtime
ii  libsdl-image1.2  1.2.6-3 image loading library for Simple D
ii  libsdl-mixer1.2  1.2.8-3 mixer library for Simple DirectMed
ii  libsdl-ttf2.0-0  2.0.9-1 ttf library for Simple DirectMedia
ii  libsdl1.2debian  1.2.13-2Simple DirectMedia Layer
ii  libsmpeg00.4.5+cvs20030824-2 SDL MPEG Player Library - shared l
ii  libx11-6 2:1.0.3-7   X11 client-side library
ii  python   2.5.2-1 An interactive high-level object-o
ii  python-central   0.6.6   register and build utility for Pyt
ii  python-numeric   24.2-8.2Numerical (matrix-oriented) Mathem

python-pygame recommends no packages.

-- no debconf information
#!/usr/bin/python

import cairo
import pygame

s = cairo.ImageSurface (cairo.FORMAT_ARGB32, 256, 192)
i = pygame.image.frombuffer (s.get_data (), (256, 192), 'RGBA')

Bug#481505: please distribute usr/lib/libmarc-charset-perl/Table.pag as a sparse file

[Daniel Kahn Gillmor]

Package: libmarc-charset-perl
Version: 0.98-2
Severity: normal

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I tried to install libmarc-charset-perl on a machine with a small
disk, and it wants to chew up a full 410MB.  If
/usr/lib/libmarc-charset-perl/Table.pag was distributed as a sparse
file, it would be no more than 30MB.  This is a huge difference.
Here's a demonstration of a very crude attempt to make the file
sparse, and a comparison of the 380MB saved:

[0 [EMAIL PROTECTED] ~]$ dpkg --extract 
/var/cache/apt/archives/libmarc-charset-perl_0.98-2_i386.deb 
tmp/libmarc-charset-perl
[0 [EMAIL PROTECTED] ~]$ cp --sparse=always 
tmp/libmarc-charset-perl/usr/lib/libmarc-charset-perl/Table.pag{,.sparse}
[0 [EMAIL PROTECTED] ~]$ du -sh 
tmp/libmarc-charset-perl/usr/lib/libmarc-charset-perl/Table.pag{,.sparse}
391Mtmp/libmarc-charset-perl/usr/lib/libmarc-charset-perl/Table.pag
7.7Mtmp/libmarc-charset-perl/usr/lib/libmarc-charset-perl/Table.pag.sparse
[0 [EMAIL PROTECTED] ~]$

I don't know how to distribute a file as a sparse file within the .deb
framework, but if it's possible, i'd like to learn.

Thanks for packaging MARC::Charset for debian!

Regards,

--dkg

- -- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libmarc-charset-perl depends on:
ii  libclass-accessor-perl   0.31-2  Automated accessor generator
ii  libxml-sax-perl  0.16+dfsg-3 Perl module for using and building
ii  perl 5.8.8-12Larry Wall's Practical Extraction 

libmarc-charset-perl recommends no packages.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
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=dosN
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481491: debian-policy: please add LPPL v1.3a to Policy

[Hilmar Preusse]

On 16.05.08 Bas Wijnen ([EMAIL PROTECTED]) wrote:
> On Fri, May 16, 2008 at 03:19:55PM +0200, Hilmar Preusse wrote:

Hi,

> Not every acceptable license needs to be in policy.  In fact none of
> them do.  The only place in policy where licenses are mentioned, is
> about /usr/share/common-licenses.  You mean it should be in there?
> 
Exactly. Then I read the FAQ of the package, which said a license
must be mentioned in the policy to get there. Hence I filed a bug
against debian-policy.

> > Actually the # of packages under this license is rather medium:
> > 
> > [EMAIL PROTECTED]:~ $ apt-cache search --names-only texlive|wc -l
> > 93
> > 
> > which should make > 100, as there are a lot of other packages beside
> > TeX Live under this license.
> 
> If this is a good idea depends not only on the number of packages. 
> We had some discussion about a good metric for deciding this, but
> didn't come to a conclusion.
> 
> However, this doesn't sound like it qualifies IMO.  The reason is
> that while TeX Live consists of a lot of packages, there are many
> installations where none of them are installed.  Putting them in
> /usr/share/common-licenses means it is also installed on embedded system
> which are really short on storage (and which will certainly not install
> any TeX packages).
> 
In the moment we have the situation that we are requested to add the
license to all TL packages, instead of just adding it to one and put
only referers into the others (#473216). This gives us 1.8 MB of
license files, which could be saved of the LPPL would be in
base-files.
Further the TeX Live packages are often build depends for other
packages and could be smaller if the license would be at a central
place instead of every single package.

Thanks,
  Hilmar
-- 
sigmentation fault



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481077: nslcd: error writing to client

[Arthur de Jong]

On Fri, 2008-05-16 at 15:32 +0200, Bas van der Vlies wrote:
> thanks, Have just installed the patch and did some testing. The  
> strange thing is that it is now fixed for the root user. I only saw it  
> once. When i run it without the patch i get it every time when i do  
> the command:
>   - getent group lisa
>
> When i run it as ordinary user, eg bas. I still get the error message.  
> I have check ulimits but could not find anything weird

If you use nscd you should restart it because otherwise it keeps the
old /lib/libnss_ldap.so.2 loaded. Other than that, I can't think of
anything that would work differently for root processes than non-root
processes.

Could you give an indication of the size of the group, e.g.:
  getent group lisa | wc
  getent group lisa | sed 's/,/\n/g' | wc -l

-- 
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --


signature.asc
Description: This is a digitally signed message part

Bug#382074: Works OK now - Re: Bug#382074: drivemount_applet2: should prompt for passphrase when mounting LUKS crypted partitions

[Olivier Berger]

fixed 382074 2.20.1-3
thanks

On Tue, Aug 08, 2006 at 06:45:44PM +0200, Olivier Berger wrote:
> 
> When mounting a LUKS crypted partition, pmount is launched by the
> applet, and hangs forever, waiting for a passphrase in the background.
> 
> It would be great to have the applet work the same as
> gnome-volume-manager... or having both programs to communnicate ?
> 
> Hope this helps.
> 

This seems to be working as expected now in 2.20.1-3 (and probably since some 
earlier versions).

Best regards,



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481506: pygame vs python2.5: pygame.image.frombuffer raises TypeError: char buffer type not available

[Sam Morris]

I've run into a problem with pygame 1.7.1 when using Python 2.5, but not
prior versions.

>>> import cairo
>>> import pygame
>>> s = cairo.ImageSurface (cairo.FORMAT_ARGB32, 256, 192)
>>> i = pygame.image.frombuffer (s.get_data (), (256, 192), 'RGBA')
Traceback (most recent call last):
  File "", line 1, in 
TypeError: char buffer type not available

I also tried this with pygame 1.8, with no luck.

Can anyone say whether this is likely to be a problem with Python, or
pygame, or my code? :)

-- 
Sam Morris <[EMAIL PROTECTED]>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#479420: auth2db: [INTL:ru] Russian debconf templates translation

[Yuri Kozlov]

2008/5/16 UlisesVitulli <[EMAIL PROTECTED]>:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Yuri Kozlov escribió:
>> Package: auth2db
>> Version: 0.2.4+dfsg-1
>> Severity: wishlist
>> Tags: l10n patch
>>
>>
>> Russian debconf templates translation is attached.
>>
>> -- System Information:
>> Debian Release: 4.0
>>   APT prefers stable
>>   APT policy: (500, 'stable')
>> Architecture: amd64 (x86_64)
>> Shell:  /bin/sh linked to /bin/bash
>> Kernel: Linux 2.6.23-1-amd64
>> Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
> (ignored: LC_ALL set to ru_RU.UTF-8)
> I found you didn't put correct data on po-file header:
>
> # translation of ru.po to Russian
> # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
> # This file is distributed under the same license as the PACKAGE package.
> #
> # Yuri Kozlov <[EMAIL PROTECTED]>, 2008.
> msgid ""
> msgstr ""
>
> that's would need to be changed to:
>
> # translation of ru.po to Russian
> # Copyright (C) 2008 Yuri Kozlov <[EMAIL PROTECTED]>
> # This file is distributed under the same license as the auth2db package.
> #
> msgid ""
> msgstr ""
>
>
> Please replace that and send it to me CC'ed to [EMAIL PROTECTED]
> I can't change that "legally" :-)

Ok.

-- 
Regards,
Yuri Kozlov


ru.po
Description: Binary data

Bug#481077: nslcd: error writing to client

[Arthur de Jong]

On Fri, 2008-05-16 at 15:40 +0200, Bas van der Vlies wrote:
> > I had thought that this was a good enough upper limit but apparently
> > there are environments out there with many more users per group.
> > What would be a reasonable upper limit?
>
> can this be configurable in nss-ldapd.conf. I assume if you increase  
> more memory is used and it is only needed in environments where there 
> are many group members

This can't be made configurable easily because this is about memory
allocated in the NSS module. The NSS module doesn't parse the config
file and doesn't hold any state (apart from the connection to nslcd for
multi-call requests like {set,get,end}pwent()). The path to the socket,
timing settings and buffer sizes are all compiled-in.

The good part is that the module will only grow the memory as needed so
it will only allocate a lot of memory if it's actually used (it doubles
the allocated buffer on every filled up buffer).

The limit is in place to work around LDAP directories with too many
entries, a misbehaving nslcd, a problem in the communication or some
other problem (it's more of a sanity check).

-- 
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --


signature.asc
Description: This is a digitally signed message part

Bug#383403: Doesn't seem to be fixed

[Markus Laire]

maximilian attems wrote:
> On Thu, May 15, 2008 at 06:57:32PM +0300, Markus Laire wrote:
> > It doesn't seem like this has been fully fixed.
> > 
> > Source package linux-2.6_2.6.25-3 still contains e.g. 
> > 
> > drivers/char/drm/mga_ucode.h
> > drivers/char/drm/r128_cce.c
> > drivers/char/drm/radeon_cp.c
> 
> ohh great a new stupid voice appearing.
>
> as told in the message that you seeminlgy read,
> file a new bug with supporting evidence.
> 
> oh and on inspect you are even wrong so just wasting time.
> mga_ucode.h is BSD licensed thus distributable.

Yes, sorry about that. I forgot to check the license.

I just went through the files mentioned in first message for source
package linux-2.6_2.6.25-3, and the following GPL-licensed files are
still present:

drivers/char/dsp56k.c
drivers/media/dvb/ttpci/av7110_hw.c
drivers/media/video/usbvideo/vicam.c
drivers/net/cassini.h
drivers/net/e100.c
drivers/net/pcmcia/ositech.h
drivers/net/starfire_firmware.h
drivers/scsi/advansys.c
drivers/scsi/ql1040_fw.h
drivers/scsi/ql12160_fw.h
drivers/usb/serial/io_fw_boot2.h
drivers/usb/serial/io_fw_boot.h
drivers/usb/serial/io_fw_down2.h
drivers/usb/serial/io_fw_down.h
drivers/usb/serial/ti_fw_3410.h
drivers/usb/serial/ti_fw_5052.h
drivers/usb/serial/whiteheat_fw.h
sound/isa/sb/sb16_csp_codecs.h  # different location

Also following 2 files are present without any explicit license:

drivers/net/usb/kawethfw.h  # different location
drivers/usb/serial/io_fw_down3.h


So it seems clear that this bug hasn't been fixed yet.


ps. I don't know whether this bug should be reopened (which
you oppose), or whether this should be reported in new bug
(which you seem to want).

-- 
Markus Laire



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#479607: Works

[Eugen Dedu]

Sebastien Cevey wrote:

Selon Eugen Dedu <[EMAIL PROTECTED]>:


My machine prints:
[...]
[0.657884] ata_piix :00:1f.2: MAP [ P0 P2 P1 P3 ]
[0.684065] PCI: Setting latency timer of device :00:1f.2 to 64
[0.684121] scsi0 : ata_piix
[0.684256] scsi1 : ata_piix
[0.685195] ata1: SATA max UDMA/133 cmd 0x60f8 ctl 0x6114 bmdma 
0x6020 irq 18
[0.685283] ata2: SATA max UDMA/133 cmd 0x60f0 ctl 0x6110 bmdma 
0x6028 irq 18

[0.500118] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[0.704055] ata1.00: ATA-8: FUJITSU MHW2120BH, 00810013, max UDMA/100
[0.704055] ata1.00: 234441648 sectors, multi 16: LBA48 NCQ (depth 0/32)
[0.508045] ata1.00: configured for UDMA/100
[0.544092] ata2: SATA link down (SStatus 0 SControl 0)
[0.716056] scsi 0:0:0:0: Direct-Access ATA  FUJITSU MHW2120B 
0081 PQ: 0 ANSI: 5


That's also the kind of output I get with my working 2.6.24 kernel, but the
2.6.25-2-amd64 kernel freezes after "scsi1 : ata_piix". I'm running Debian
x86_64 on a macbookpro (Core 2 Duo Penryn).


Mine is macbookpro Merom (mid 2007).


Did you add anything to the /etc/initramfs/modules list, or change anything
apart MODULES=dep?


No.


Does the fix work for other people, or does anyone experience the same issue as
I do?





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#468069: linux-image-2.6.24-1-686: e1000 hangs often with enabled NAPI

[Bozhan Boiadzhiev]

Package: linux-image-2.6.24-1-686
Version: 2.6.24-6
Followup-For: Bug #468069

I have same problem, with NAPI my server hangs

-- Package-specific info:

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.24 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages linux-image-2.6.24-1-686 depends on:
ii  debconf [debconf-2.0] 1.5.21 Debian configuration management sy
ii  initramfs-tools [linux-initra 0.92a  tools for generating an initramfs
ii  module-init-tools 3.4-1  tools for managing Linux kernel mo

Versions of packages linux-image-2.6.24-1-686 recommends:
ii  libc6-i6862.7-10 GNU C Library: Shared libraries [i

-- debconf-show failed



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481451: Btw, add some explanation on snakeoil, which is a bit cryptic for end users

[Olivier Berger]

On Fri, May 16, 2008 at 10:22:39AM +0200, Olivier Berger wrote:
> 
> Please add some documentation for the generate-default-snakeoil option.
> 

Also, the package's README may add some explanation on that "snakeoil" which 
seems a bit cryptic for (non eglish-speaking native) end users.

Thanks in advance.

Best regards,



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481404: please maintain suite -> codename symlinks in dists/

[Bernhard R. Link]

package reprepro
tags 481404 + pending
thanks

* martin f krafft <[EMAIL PROTECTED]> [080516 16:09]:
> In that case, the manpage is off:
> 
>   reprepro [ options ] command [ per-command-arguments ]
>   [...]
>   createsymlinks [ --delete ] [ codenames ]

indeed. Thanks for catching this. Fixed in cvs, will be in the next
upload.

Hochachtungsvoll,
Bernhard R. Link
-- 
"Never contain programs so few bugs, as when no debugging tools are available!"
Niklaus Wirth



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481415: dcmd: options to select files to process/pass on

[Adam D. Barratt]

martin f krafft wrote, Friday, May 16, 2008 7:59 AM
also sprach Adam D. Barratt <[EMAIL PROTECTED]> [2008.05.16.0052 
+0100]:

Were you envisaging the options being mutually exclusive, or combinable?
(e.g. "dcmd --diff --orig scp foo.changes")


Combineable.


I had a feeling that might be your answer, and yet hoped it wouldn't be. ;-)

I've got an updated script that makes "dcmd --diff --orig scp foo.changes" 
work, but it only errors if the expansion produced no files /of any type/; 
unfortunately if there is a diff but not an orig, it doesn't currently 
complain. I'm still thinking as to whether there's an elegant way of 
checking each type individually that doesn't involve silly amounts of 
repitition in the code (particularly given that dcmd is shell).


Adam 





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#382074: Works OK now - Re: Bug#382074: drivemount_applet2: should prompt for passphrase when mounting LUKS crypted partitions

[Emilio Pozuelo Monfort]

Version: 2.20.1-3

Olivier Berger wrote:
> This seems to be working as expected now in 2.20.1-3 (and probably since some 
> earlier versions).

Ok, closing. (Note that to close bugs you should mail [EMAIL PROTECTED])



signature.asc
Description: OpenPGP digital signature

Bug#481507: wu-ftpd: [INTL:fi] Finnish translation of the debconf templates

[Esko Arajärvi]

Package: wu-ftpd
Severity: wishlist
Tags: l10n patch

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Please include attached translation fi.po to the package.

I also found couple things which could be fixed in the templates.

#. Type: text
#. Description
#: ../templates:2001
msgid ""
"Your ${ftpusers} file is currently a symbolic link. Due to new restrictions "
"in the PAM package, this is no longer allowed."
msgstr ""

The package name "pam" should be written in lower case.

#. Type: text
#. Description
#: ../templates:9001
msgid ""
"If you want to install it manually, it should be placed in ${homedir}/lib "
"owned by root, and with permissions of 444 (r--r--r--)"
msgstr ""

Period is missing from the end of the string.

Additionally the Word "FTP" was sometimes written in upper case and 
sometimes in lower case. These should be unified.

If you change these things, please unfuzzy all complete translations.
Instructions how to do this can be found at:
http://www.debian.org/doc/developers-reference/ch-best-pkging-practices.en.html#s6.5.2.3

Regards,
Esko Arajärvi

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFILaKkejjRZhTfFSwRAuvuAJ41nlhGwM9Ufq+O64R8gzFFRwCzDwCfd1km
0wd9QRDzHRQh7R7JdRUk+5g=
=mBxS
-END PGP SIGNATURE-
msgid ""
msgstr ""
"Project-Id-Version: wu-ftpd\n"
"Report-Msgid-Bugs-To: [EMAIL PROTECTED]"
"POT-Creation-Date: 2007-07-21 12:21+0100\n"
"PO-Revision-Date: 2008-05-16 17:59+0200\n"
"Last-Translator: Esko Arajärvi <[EMAIL PROTECTED]>\n"
"Language-Team: Finnish <[EMAIL PROTECTED]>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Poedit-Language: Finnish\n"
"X-Poedit-Country: FINLAND\n"

#. Type: select
#. Choices
#: ../templates:1001
msgid "inetd, standalone"
msgstr "inetd, itsenäinen"

#. Type: select
#. Description
#: ../templates:1002
msgid "Mode of running wu-ftpd:"
msgstr "Tapa, jolla wu-ftpd:tä ajetaan:"

#. Type: select
#. Description
#: ../templates:1002
msgid "wu-ftpd can now be run as a standalone daemon instead of being called from inetd. This means wu-ftpd can respond slightly faster to a new connection, especially under high load."
msgstr "wu-ftpd voidaan ajaa itsenäisenä taustaohjelmana sen sijaan, että sitä kutsuttaisiin inetdistä. Tämä tarkoittaa, että wu-ftpd voi vastata hieman nopeammin uusiin yhteyksiin, erityisesti kuormitetulla palvelimella."

#. Type: text
#. Description
#: ../templates:2001
msgid "Copying ${target} to make ${ftpusers} a regular file."
msgstr "Tiedostosta ${ftpusers} tehdään tavallinen tiedosto kopioimalla ${target}."

#. Type: text
#. Description
#: ../templates:2001
msgid "Your ${ftpusers} file is currently a symbolic link. Due to new restrictions in the PAM package, this is no longer allowed."
msgstr "Tiedosto ${ftpusers} on nykyään symbolinen linkki. Tämä ei ole nykyään enää sallittua johtuen paketin pam uusista rajoituksista."

#. Type: boolean
#. Description
#: ../templates:3001
msgid "Update out-of-date binaries in ${ftphome}?"
msgstr "Päivitetäänkö hakemiston ${ftphome} vanhentuneet binääritiedostot?"

#. Type: boolean
#. Description
#: ../templates:3001
msgid "Your binaries and libraries in ${ftphome} are out-of-date. This could break your anonymous FTP services."
msgstr "Hakemistossa ${ftphome} olevat binääri- ja kirjastotiedostot ovat vanhentuneet. Tämä saattaa rikkoa anonyymit FTP-palvelut."

#. Type: boolean
#. Description
#: ../templates:4001
msgid "Do you want to allow anonymous ftp access?"
msgstr "Tulisiko anonyymit FTP-yhteydet sallia?"

#. Type: boolean
#. Description
#: ../templates:4001
msgid "Anonymous FTP allows users to log in to the server using the username \"anonymous\" and their e-mail address as a password. This is usually used to give people access to public files."
msgstr "Anonyymi FTP sallii käyttäjien kirjautua palvelimelle tunnuksella ”anonymous” antamalla sähköpostiosoitteensa salasanana. Tätä käytetään yleensä julkisten tiedostojen jakamiseen."

#. Type: boolean
#. Description
#: ../templates:4001
msgid "If you accept here, a user called 'ftp' will be created, along with a home directory (which will be the root of the anonymous FTP area). The home directory will be populated with the binaries, libraries and configuration files necessary for anonymous FTP to work."
msgstr "Jos tämä valitaan, luodaan käyttäjä ”ftp”, jolle luodaan kotihakemisto (jota käytetään anonyymin FTP-alueen juurena). Kotihakemistoon siirretään anonyymin FTP:n tarvitsemat binääri-, kirjasto- ja asetustiedostot."

#. Type: string
#. Description
#: ../templates:5001
msgid "Location of the FTP home directory:"
msgstr "FTP-kotihakemiston sijainti:"

#. Type: string
#. Description
#: ../templates:5001
msgid "This is the directory where the anonymous FTP area will be created, and the home directory for the \"ftp\" user. It must be an absolute path (ie: it must begin with a '/')."
msgstr "Tämä hakemisto on käyttäjän ”ftp” kotihakemisto ja sinne luodaan anonyymi FTP-a

Bug#125887: Probably solved

[Christoph Egger]

Hi

As I have taken over responsibility for glademm in Debian I am going
through the open Bug reports.

This particular Bug (autogen.sh copies symlinks instead of files) seems
to be no longer reproducible (this may be the case for about 5 years
now) I'll close it.

If you are still interested in glademm please try to confirm that this
bug is no longer present.

Regards

  Christoph
-- 
GPG-Key ID: 0x0372275D

/"\  ASCII Ribbon
\ /Campaign
 X   against HTML
/ \   in eMails



signature.asc
Description: OpenPGP digital signature

Bug#481077: nslcd: error writing to client

[Petter Reinholdtsen]

[Arthur de Jong]
> This can't be made configurable easily because this is about memory
> allocated in the NSS module. The NSS module doesn't parse the config
> file and doesn't hold any state (apart from the connection to nslcd for
> multi-call requests like {set,get,end}pwent()). The path to the socket,
> timing settings and buffer sizes are all compiled-in.

Well, the NSS part talk to the nslcd daemon, which do read the config
file and keep state, so the NSS module could fetch the configuration
over the socket. :)

Still, I would prefer it if there was no hard coded upper limit on the
number of group members handled.  Or at least a syslog message
explaining what is going on when the limit is reached.

Happy hacking,
-- 
Petter Reinholdtsen



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#400586: libcv-dev: opencv1.0 for Etch

[Daniel Leidert]

tags 400586 + wontfix
thanks

Hi Luis,

There is no way to upgrade packages in stable to a new version number.
If there is a need to have the latest opencv version for Etch (stable),
maybe one offers to maintain a backport of it?

Regards, Daniel




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481508: perl-modules: duplicates files from the unicode-data package

[Paul Wise]

Package: perl-modules
Version: 5.10.0-10
Severity: normal

perl-modules duplicates the Unicode data from the unicode-data package,
and what is more, it is outdated. Please ask upstream to depend on the
data instead of embedding it.

$ head /usr/share/perl/5.10.0/unicore/ReadMe.txt /usr/share/unicode/ReadMe.txt
==> /usr/share/perl/5.10.0/unicore/ReadMe.txt <==
2005 March 30

Welcome to the Unicode Character Database

This directory contains contributory data files
for the Unicode Character Database of the Unicode Standard. 

Copyright (c) 1991-2005 Unicode, Inc.
For terms of use, see http://www.unicode.org/terms_of_use.html


==> /usr/share/unicode/ReadMe.txt <==
# Date: 2008-03-31, 13:48:00 PDT [KW]
#
# Unicode Character Database
# Copyright (c) 1991-2008 Unicode, Inc.
# For terms of use, see http://www.unicode.org/terms_of_use.html
#
# For documentation, see UCD.html, NamesList.html,
# UAX #38, "Unicode Han Database (Unihan)," and
# UAX #44, "Unicode Character Database."
#
$ dpkg -L perl-modules  | grep unicore | grep txt
/usr/share/perl/5.10.0/unicore/Jamo.txt
/usr/share/perl/5.10.0/unicore/PropValueAliases.txt
/usr/share/perl/5.10.0/unicore/Scripts.txt
/usr/share/perl/5.10.0/unicore/HangulSyllableType.txt
/usr/share/perl/5.10.0/unicore/Blocks.txt
/usr/share/perl/5.10.0/unicore/BidiMirroring.txt
/usr/share/perl/5.10.0/unicore/SpecialCasing.txt
/usr/share/perl/5.10.0/unicore/StandardizedVariants.txt
/usr/share/perl/5.10.0/unicore/PropertyAliases.txt
/usr/share/perl/5.10.0/unicore/UnicodeData.txt
/usr/share/perl/5.10.0/unicore/PropList.txt
/usr/share/perl/5.10.0/unicore/LineBreak.txt
/usr/share/perl/5.10.0/unicore/ReadMe.txt
/usr/share/perl/5.10.0/unicore/NamedSequences.txt
/usr/share/perl/5.10.0/unicore/NormalizationCorrections.txt
/usr/share/perl/5.10.0/unicore/EastAsianWidth.txt
/usr/share/perl/5.10.0/unicore/NamesList.txt
/usr/share/perl/5.10.0/unicore/NamedSqProv.txt
/usr/share/perl/5.10.0/unicore/ArabicShaping.txt
/usr/share/perl/5.10.0/unicore/Index.txt
/usr/share/perl/5.10.0/unicore/CaseFolding.txt
/usr/share/perl/5.10.0/unicore/CompositionExclusions.txt
$ dpkg -L unicode-data | grep txt
/usr/share/unicode/ReadMe.txt
/usr/share/unicode/PropertyValueAliases.txt
/usr/share/unicode/EastAsianWidth.txt
/usr/share/unicode/DerivedAge.txt
/usr/share/unicode/Unihan.txt.bz2
/usr/share/unicode/DerivedNormalizationProps.txt
/usr/share/unicode/LineBreak.txt
/usr/share/unicode/NormalizationTest.txt.bz2
/usr/share/unicode/Blocks.txt
/usr/share/unicode/StandardizedVariants.txt
/usr/share/unicode/Index.txt
/usr/share/unicode/SpecialCasing.txt
/usr/share/unicode/ArabicShaping.txt
/usr/share/unicode/CaseFolding.txt
/usr/share/unicode/NamesList.txt
/usr/share/unicode/NameAliases.txt
/usr/share/unicode/PropList.txt
/usr/share/unicode/DerivedCoreProperties.txt
/usr/share/unicode/UnicodeData.txt
/usr/share/unicode/PropertyAliases.txt
/usr/share/unicode/HangulSyllableType.txt
/usr/share/unicode/Jamo.txt
/usr/share/unicode/extracted/DerivedNumericValues.txt
/usr/share/unicode/extracted/DerivedLineBreak.txt
/usr/share/unicode/extracted/DerivedEastAsianWidth.txt
/usr/share/unicode/extracted/DerivedJoiningType.txt
/usr/share/unicode/extracted/DerivedJoiningGroup.txt
/usr/share/unicode/extracted/DerivedDecompositionType.txt
/usr/share/unicode/extracted/DerivedGeneralCategory.txt
/usr/share/unicode/extracted/DerivedBinaryProperties.txt
/usr/share/unicode/extracted/DerivedNumericType.txt
/usr/share/unicode/extracted/DerivedCombiningClass.txt
/usr/share/unicode/extracted/DerivedBidiClass.txt
/usr/share/unicode/NormalizationCorrections.txt
/usr/share/unicode/NamedSequencesProv.txt
/usr/share/unicode/NamedSequences.txt
/usr/share/unicode/auxiliary/WordBreakTest.txt
/usr/share/unicode/auxiliary/GraphemeBreakProperty.txt
/usr/share/unicode/auxiliary/SentenceBreakTest.txt
/usr/share/unicode/auxiliary/GraphemeBreakTest.txt
/usr/share/unicode/auxiliary/WordBreakProperty.txt
/usr/share/unicode/auxiliary/LineBreakTest.txt
/usr/share/unicode/auxiliary/SentenceBreakProperty.txt
/usr/share/unicode/CompositionExclusions.txt
/usr/share/unicode/BidiMirroring.txt
/usr/share/unicode/Scripts.txt



-- 
bye,
pabs

http://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part

Bug#481436: closed by maximilian attems <[EMAIL PROTECTED]> (Re: Bug#481436: linux-image-2.6.24-1-686: Unable to use wireless with Intel iwl3945 module.)

[洪任諭]

2008/5/16 maximilian attems <[EMAIL PROTECTED]>:
> On Fri, 16 May 2008, 洪任諭 wrote:
>
>> I have read  last week, but that
>> didn't help at all.
>> After reading your suggestion, I've upgrade to debian sid with kernel
>> 2.6.25-2-686.
>> However, 'iwlist wlan0 scan' still shows: no scan result. Network
>> manager still got no AP.
>
> you have to make sure the link is up aka
>
> ip link set wlan0 up
Of course I did it, for several times.
Upgrading to the latest kernel slightly improved the problem.
It's still hard to get connected, but better than before.

> also network-manager is known buggy, nothing we can do there..
>> Upgrading to the latest kernel didn't help much.
>> Besides, my debian lenny system was built from clean install, not
>> upgraded from etch.
>> I haven't use the old ipw3945 on this newly installed system.
>>
>> Furthermore, I have Windows Vista on this laptop, too.
>> The card works perfectly and can get connected very fast under Vista.
>> So, apparantly it's not a hardware problem.
>
> yeah i assume so, also your report features a tainted module.
> you are killing kittens.
>
> --
> maks
>

Bug#446226: martian-modem: Integration into linux-modules-nonfree-2.6

[UlisesVitulli]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

>Package: martian-modem
>Severity: wishlist
>User: [EMAIL PROTECTED]
>Usertags: conglomeration
>
>Hi,
>
>In short: Please consider letting your module be integrated into the
>conglomeration package, so that the users can install prebuild module
>binary packages for the Debian default kernel flavours.
>
>In some more words, look at this:
>http://blog.daniel-baumann.ch/2006/12/10#20061210_kernel-modules-packaging

>
>The good thing about it: You only need to tell me 'Yes, please do so'
>and I'll have a look at your module package in the next days and provide
>a patch for it in case something needs to be adjusted.
>
>Note that this is only possible, if your license terms of the non-free
>module do allow autobuilding as well as binary distribution (which is
>'normally' both the case, nevertheless, you need to check that; if you
>need help finding it out, tell me and I'll have a look).
>
>Regards,
>Daniel


Hi Daniel!

I've checked license and though it's a little confusing, it seems to
allow autobuilding and binary distribution[1].

What license strictly restricts is the modification of any of this files:
ltmarsmodem.c
linuxif.h
ltmdmobj.o
Makefile
ltinst
ltuninst
README


Current martian-modem driver is patched to work perfectly with 2.6.24
as it was "focused" on Lenny release
 (I've not checked if It correctly builds against, for example, 2.6.25).

If it's possible for you, I would be pleased if you do so, but don't
give it a high relevance over others, this drivers is most for old
hardware support.

Thanks for your work and care.



Greetings,

- --
ref.
1. (2.3) Redistribution and Usage: Agere permits use and limited
redistribution of this Licensed Software in source and binary forms,
with or without modification (...
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFILaUkGcNpEq4d/XQRAuESAJ0Uyadxiy3YqhWk9eYcsQ39pc0ekgCdH64v
0TkZb44IC1TlK6uQejnynK4=
=WVvN
-END PGP SIGNATURE-




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481511: purge leaves behind group

[Thijs Kinkhorst]

Package: puppet
Version: 0.24.4-6
Severity: normal

When purging puppet, the user "puppet" is removed but the group "puppet" is 
not. This
seems inconsistent with me. The cause is probably that the preinst script calls 
adduser
with the --group option, but the postrm doesn't do the same of deluser.

Here's a transcript showing a warning that an empty group remains.


cheers,
Thijs

volta:~# dpkg -P puppet
(Database inlezen ... 16 bestanden en mappen geïnstalleerd.)
puppet wordt verwijderd ...
Stopping puppet configuration management toolstart-stop-daemon: warning: failed 
to kill 
8022: No such process



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481513: php5: preg_match dont find a match on a bit larger string

[Bernd Hanisch]

Package: php5
Version: 5.2.0-8+etch11
Severity: normal



-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1)

after updating from php4 to php5 i run in problems with a few php scripts using 
preg_match. 

preg_match( "/.*<\/head>/is", $content, $matches );

nothing special in $content. only  {a few chars}  { a lot of chars 
}. This only occur, if the string is larger.
I dont found the exact limit, my test file is around 126kb large. i will upload 
the testscript and the testfile later.
i simplified the testfile. so only the matchstrings and spaces are in.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481514: Poor mouse configuration with debian-installer

[Stephen Powell]

Package: installation-reports

Boot method: CD-ROM
Image version: etch 4.0r1
Date: May 3, 2008

Machine: Dell Inspiron 4400
Processor: Intel Pentium 4
Memory: 512M
Partitions: 4 (1 Windows NTFS, 1 Linux swap, 1 root
(/), 1 home (/home))

Output of lspci -nn and lspci -vnn: N/A

Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] =
didn't try it

Initial boot:   [O]
Detect network card:[O]
Configure network:  [ ]
Detect CD:  [O]
Load installer modules: [O]
Detect hard drives: [O]
Partition hard drives:  [O]
Install base system:[O]
Clock/timezone setup:   [O]
User/password setup:[O]
Install tasks:  [O]
Install boot loader:[O]
Overall install:[O]

Comments/Problems:

I took the default for priority (i.e. no boot
parameters) and in tasksel I selected only "standard
system" and "desktop environment".  The mouse was a
PS/2-style mouse, was detected, and was installed for
use in the X Window System.  But the X server was
configured to drive the mouse directly rather than
through the gpm daemon.  In my opinion, gpm should
have been installed automatically and the X server
should have been configured to use /dev/gpmdata as the
mouse device.  This would allow the mouse to be used
both in X and in regular virtual consoles.  This
provides maximum flexibility.

In my opinion, the user has everything to gain and
nothing to lose by using gpm instead of direct control
of the mouse by the X server.  Even if the user does
not ever use the mouse in a virtual console, using gpm
provides more flexibility in the X server.  For
example, when using gpm, one can unplug the mouse and
plug in a different one without restarting the X
server.  Simply restart the gpm daemon.  All the X
aplications keep running without missing a beat.

gpm should be installed by default when the user
requests a desktop environment, and the X server
should be configured to use gpm.  Indeed, one could
even make a case that gpm should be installed by
default even when the user requests only a "standard
system", if a mouse is detected.

gpm should also be on CD number 1, particularly if it
is going to be installed by default.



  



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481512: libmagic1: "couldn't open file" doesn't say which file or why

[Martin Dorey]

Package: file
Version: 4.24-2
Severity: normal
Tags: patch


This change in magic.c, introduced between 4.23 and 4.24, caused a
backup job of ours to produce a large number of mysterious messages
saying "couldn't open file".  It took quite some digging to work out
(from find /usr/lib -type f | xargs strings | grep) what was producing
such a message.

@@ -296,10 +297,12 @@
 errno = 0;
 if ((fd = open(inname, flags)) < 0) {
 #ifdef __CYGWIN__
+/* FIXME: Do this with EXEEXT from autotools */
 char *tmp = alloca(strlen(inname) + 5);
 (void)strcat(strcpy(tmp, inname), ".exe");
 if ((fd = open(tmp, flags)) < 0) {
 #endif
+fprintf(stderr, "couldn't open file\n");
 if (info_from_stat(ms, sb.st_mode) == -1)
 goto done;
 rv = 0;

I wanted to submit a patch, so I changed the fprintf line to:

fprintf(stderr, "couldn't open file `%s': %s\n", inname,
strerror(errno));

But then I tripped over a regression with file_error_core.
I'll submit that as a separate Debian bug.

Upstream's response to the above moan was (from Christos):

"I just removed the printf, thanks."

So perhaps we could do that in Debian?
I'm happy to wait for upstream.
Really, then, I'm just raising this Debian bug for the benefit of anyone
else baffled by the same error message, so that they might stand a small
chance of getting a relevant google-hit for it.

-- System Information:
Debian Release: lenny/sid
  APT prefers oldstable
  APT policy: (500, 'oldstable'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libmagic1 depends on:
ii  libc6  2.7-11GNU C Library: Shared
libraries
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library -
runtime

libmagic1 recommends no packages.

Versions of packages file depends on:
ii  libc6 2.7-11 GNU C Library: Shared
libraries

-- no debconf information
--- magic.c.old 2008-05-16 08:26:22.0 -0700
+++ magic.c 2008-05-16 08:26:35.0 -0700
@@ -302,7 +302,6 @@
(void)strcat(strcpy(tmp, inname), ".exe");
if ((fd = open(tmp, flags)) < 0) {
 #endif
-   fprintf(stderr, "couldn't open file\n");
if (info_from_stat(ms, sb.st_mode) == -1)
goto done;
rv = 0;

Bug#481494: Edited blog posts show up as new in planets.

[Joey Hess]

Daniel Burrows wrote:
>   I don't know if this is ikiwiki's fault or the planet's fault.
> 
>   It's been pointed out to me that when I edit my blog posts, they
> appear again on planet.debian.org as if they were new.  The creation
> date isn't changed: I use [[!meta date=...]] to set it manually, and I
> can see on the page and in both the RSS and the Atom feeds that it's
> correct.
> 
>   ikiwiki does include an  tag in its Atom feed; I wonder if
> that could be confusing the planet?  Is there any way to disable
> generation of this tag in the feed?

Based on the atom spec, I think ikiwiki is using atom:updated correctly,
since it sets it to the mtime of the file.

The relevant field that planet should be looking at if it wants 
a static publication date is atom:published. Ikiwiki sets that to the initial
page creation date, and never changes it.

Here is an example from my latest blog entry, which I posted and then
edited. (But planet debian uses my rss feed, and seem to be happy with
what ikiwiki does there.)

http://kodama.kitenet.net/~joey/blog/entry/fiber_installation/
2008-05-16T15:42:29Z
2008-05-16T15:13:16Z

I suspect that planet is doing the wrong thing..

Relevant spec:

  4.2.15 The "atom:updated" Element
  
  The "atom:updated" element is a Date construct indicating the most recent
  instant in time when an entry or feed was modified in a way the publisher
  considers significant. Therefore, not all modifications necessarily result in
  a changed atom:updated value.
  
  atomUpdated = element atom:updated { atomDateConstruct}
  
  Publishers MAY change the value of this element over time.

  4.2.9 The "atom:published" Element

  The "atom:published" element is a Date construct indicating an instant in time
  associated with an event early in the life cycle of the entry.

  atomPublished = element atom:published { atomDateConstruct}

  Typically, atom:published will be associated with the initial creation or
  first availability of the resource.

  4.2.6.1 Comparing atom:id

  Instances of atom:id elements can be compared to determine whether an
  entry or feed is the same as one seen before. [...]

-- 
see shy jo


signature.asc
Description: Digital signature

Bug#481491: debian-policy: please add LPPL v1.3a to Policy

[Russ Allbery]

Hilmar Preusse <[EMAIL PROTECTED]> writes:

> In the moment we have the situation that we are requested to add the
> license to all TL packages, instead of just adding it to one and put
> only referers into the others (#473216). This gives us 1.8 MB of license
> files, which could be saved of the LPPL would be in base-files.

More relevantly than the total size, IMO (1.8MB isn't really very much) is
that according to popcon, one-seventh of our systems have at least
texlive-base installed.  If every texlive-base installation would benefit
from having LPPL in common-licenses and most installations involve more
than one package with the LPPL, that looks like a fairly reasonable case
for common-licenses to me.

It's not as strong of a case as the Apache 2.0 license had (nearly half of
our popcon-reporting systems have at least apache2.2-common installed),
but one-seventh is still a lot of systems.

Manoj's suggested guide was 5% of the binary packages; that's probably a
higher bar, and I'm not sure if TL meets that one; that would be about
4000 binary packages using the license, and we added the Apache license
based on only about 250.  I wonder if something like 10% of
popcon-reporting systems having at least two packages using that license
installed would be a better metric.

-- 
Russ Allbery ([EMAIL PROTECTED])   



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481442: sane-utils: Using xinetd, reportd with set -x in the postinst script

[Jean-Luc Coulon (f5ibh)]

Package: sane-utils
Version: 1.0.19-9
Followup-For: Bug #481442

Hi,

I've the same error.
I use xinetd, as before.

I've edited the postinst script to add "set -x"
Please find attached the output of the script.

Regards

Jean-Luc

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-k8-3 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sane-utils depends on:
ii  adduser  3.107   add and remove users and groups
ii  debconf [debconf-2.0]1.5.22  Debian configuration management sy
ii  libavahi-client3 0.6.22-3Avahi client library
ii  libavahi-common3 0.6.22-3Avahi common library
ii  libc62.7-11  GNU C Library: Shared libraries
ii  libieee1284-30.2.11-4cross-platform library for paralle
ii  libsane  1.0.19-9API library for scanners
ii  libusb-0.1-4 2:0.1.12-11 userspace USB programming library
ii  update-inetd 4.30inetd configuration file updater

Versions of packages sane-utils recommends:
ii  avahi-daemon  0.6.22-3   Avahi mDNS/DNS-SD daemon

-- debconf information:
  sane-utils/saned_run: false
  sane-utils/saned_scanner_group: true
[EMAIL PROTECTED] % sudo dpkg --configure -a
Setting up sane-utils (1.0.19-9) ...
+ '[' configure = configure ']'
+ getent passwd
+ grep -q '^saned:'
+ '[' -x /usr/sbin/update-inetd ']'
+ update-inetd --add '## 
sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned'
- IMPORTANT INFORMATION FOR XINETD USERS --
The following line will be added to your /etc/inetd.conf file:

## sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned

If you are indeed using xinetd, you will have to convert the
above into /etc/xinetd.conf format, and add it manually. See
/usr/share/doc/xinetd/README.Debian for more information.
Suggested entry (automatically converted using itox):

---

+ SANED_DEFAULT=/etc/default/saned
+ . /usr/share/debconf/confmodule
++ '[' '!' '' ']'
++ PERL_DL_NONLAZY=1
++ export PERL_DL_NONLAZY
++ '[' '' ']'
++ exec /usr/share/debconf/frontend /var/lib/dpkg/info/sane-utils.postinst 
configure 1.0.19-6
+ '[' configure = configure ']'
+ getent passwd
+ grep -q '^saned:'
+ '[' -x /usr/sbin/update-inetd ']'
+ update-inetd --add '## 
sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned'
- IMPORTANT INFORMATION FOR XINETD USERS --
The following line will be added to your /etc/inetd.conf file:

## sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned

If you are indeed using xinetd, you will have to convert the
above into /etc/xinetd.conf format, and add it manually. See
/usr/share/doc/xinetd/README.Debian for more information.
Suggested entry (automatically converted using itox):

---

+ SANED_DEFAULT=/etc/default/saned
+ . /usr/share/debconf/confmodule
++ '[' '!' 1 ']'
++ '[' -z '' ']'
++ exec
++ '[' '' ']'
++ exec
++ DEBCONF_REDIR=1
++ export DEBCONF_REDIR
+ db_get sane-utils/saned_run
+ _db_cmd 'GET sane-utils/saned_run'
+ IFS=' '
+ printf '%s\n' 'GET sane-utils/saned_run'
+ IFS='
'
+ read -r _db_internal_line
+ RET='20 Unsupported command "" (full line was "") received from confmodule.'
+ case ${_db_internal_line%%[   ]*} in
+ return 20
dpkg: error processing sane-utils (--configure):
 subprocess post-installation script returned error exit status 20
Errors were encountered while processing:
 sane-utils
[EMAIL PROTECTED] %

Bug#481442: sane-utils: does not configure

[Julien BLACHE]

Marc Haber <[EMAIL PROTECTED]> wrote:

Hi,

>> It'd help if you could pinpoint the exact issue; looks like it could
>> be update-inetd failing here.
>
> What exactly do you want me to do?

Running the postinst set -x should be enough to know what's failing.

Thanks,

JB.

-- 
 Julien BLACHE - Debian & GNU/Linux Developer - <[EMAIL PROTECTED]> 
 
 Public key available on  - KeyID: F5D6 5169 
 GPG Fingerprint : 935A 79F1 C8B3 3521 FD62 7CC7 CD61 4FD7 F5D6 5169 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#480370: intent to NMU

[Nico Golde]

Hi,
Uploading a 0-day NMU with permission of xtophe, he checked 
the debdiff.

debdiff attached and also archived on:
http://people.debian.org/~nion/nmu-diff/vlc-0.8.6.e-2.1_0.8.6.e-2.2.patch

Kind regards
Nico

-- 
Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
diff -u vlc-0.8.6.e/debian/changelog vlc-0.8.6.e/debian/changelog
--- vlc-0.8.6.e/debian/changelog
+++ vlc-0.8.6.e/debian/changelog
@@ -1,3 +1,17 @@
+vlc (0.8.6.e-2.2) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix regression introduced by latest security upload which
+did not properly define FREENULL (Closes: #478971,#481417,#477734).
+  * Fix untrusted search path vulnerability by not loading libraries
+from plugins and modules directories in the current working
+directory (CVE-2008-2147; Closes: #480724).
+  * Fix arbitrary file overwriting via a crafted playlist or an EXTLVLCOPT
+statement in an mp3 file by partially disabling this functionality
+for the browser plugin (CVE-2007-6683; Closes: #480370).
+
+ -- Nico Golde <[EMAIL PROTECTED]>  Fri, 16 May 2008 16:18:04 +0200
+
 vlc (0.8.6.e-2.1) unstable; urgency=high
 
   * Non-maintainer upload by the Security Team.
diff -u vlc-0.8.6.e/debian/patches/series vlc-0.8.6.e/debian/patches/series
--- vlc-0.8.6.e/debian/patches/series
+++ vlc-0.8.6.e/debian/patches/series
@@ -14,0 +15,2 @@
+405-CVE-2007-6683-plugin.diff
+406-CVE-2008-2147.diff
diff -u vlc-0.8.6.e/debian/patches/404-CVE-2008-1768.diff vlc-0.8.6.e/debian/patches/404-CVE-2008-1768.diff
--- vlc-0.8.6.e/debian/patches/404-CVE-2008-1768.diff
+++ vlc-0.8.6.e/debian/patches/404-CVE-2008-1768.diff
@@ -13,6 +13,15 @@
 diff -Nurad vlc-0.8.6.e.orig/modules/demux/mp4/libmp4.c vlc-0.8.6.e/modules/demux/mp4/libmp4.c
 --- vlc-0.8.6.e.orig/modules/demux/mp4/libmp4.c	2008-04-27 15:53:59.0 +0200
 +++ vlc-0.8.6.e/modules/demux/mp4/libmp4.c	2008-04-27 16:16:02.0 +0200
+@@ -37,6 +37,8 @@
+  *  *look* at the code.
+  *
+  */
++#define FREENULL( p ) do { free( p ); p = NULL; } while(0)
++
+ #define MP4_BOX_HEADERSIZE( p_box ) \
+   ( 8 + ( p_box->i_shortsize == 1 ? 8 : 0 ) \
+   + ( p_box->i_type == FOURCC_uuid ? 16 : 0 ) )
 @@ -1641,9 +1641,19 @@
  FREE( p_box->data.p_stdp->i_priority )
  }
only in patch2:
unchanged:
--- vlc-0.8.6.e.orig/debian/patches/406-CVE-2008-2147.diff
+++ vlc-0.8.6.e/debian/patches/406-CVE-2008-2147.diff
@@ -0,0 +1,15 @@
+diff -Nurad vlc-0.8.6.e.orig/src/misc/modules.c vlc-0.8.6.e/src/misc/modules.c
+--- vlc-0.8.6.e.orig/src/misc/modules.c	2008-05-16 14:19:36.0 +0200
 vlc-0.8.6.e/src/misc/modules.c	2008-05-16 16:09:27.0 +0200
+@@ -751,9 +751,9 @@
+ {
+ /* Yes, there are two NULLs because we replace one with "plugin-path". */
+ #if defined( WIN32 ) || defined( UNDER_CE )
+-char *path[] = { "modules", "", "plugins", 0, 0 };
++char *path[] = { 0, 0 };
+ #else
+-char *path[] = { "modules", PLUGIN_PATH, "plugins", 0, 0 };
++char *path[] = { PLUGIN_PATH, 0, 0 };
+ #endif
+ 
+ char **ppsz_path = path;
only in patch2:
unchanged:
--- vlc-0.8.6.e.orig/debian/patches/405-CVE-2007-6683-plugin.diff
+++ vlc-0.8.6.e/debian/patches/405-CVE-2007-6683-plugin.diff
@@ -0,0 +1,57 @@
+diff -Nurad vlc-0.8.6.e.orig/src/libvlc.c vlc-0.8.6.e/src/libvlc.c
+--- vlc-0.8.6.e.orig/src/libvlc.c	2008-05-16 16:51:10.0 +0200
 vlc-0.8.6.e/src/libvlc.c	2008-05-16 17:07:42.0 +0200
+@@ -1054,6 +1054,7 @@
+ int VLC_VariableSet( int i_object, char const *psz_var, vlc_value_t value )
+ {
+ vlc_t *p_vlc = vlc_current_object( i_object );
++module_config_t *p_item;
+ int i_ret;
+ 
+ if( !p_vlc )
+@@ -1064,38 +1065,15 @@
+ /* FIXME: Temporary hack for Mozilla, if variable starts with conf:: then
+  * we handle it as a configuration variable. Don't tell Gildas :) -- sam */
+ if( !strncmp( psz_var, "conf::", 6 ) )
+-{
+-module_config_t *p_item;
+-char const *psz_newvar = psz_var + 6;
+-
+-p_item = config_FindConfig( VLC_OBJECT(p_vlc), psz_newvar );
+-
+-if( p_item )
+-{
+-switch( p_item->i_type )
+-{
+-case CONFIG_ITEM_BOOL:
+-config_PutInt( p_vlc, psz_newvar, value.b_bool );
+-break;
+-case CONFIG_ITEM_INTEGER:
+-config_PutInt( p_vlc, psz_newvar, value.i_int );
+-break;
+-case CONFIG_ITEM_FLOAT:
+-config_PutFloat( p_vlc, psz_newvar, value.f_float );
+-break;
+-default:
+-config_PutPsz( p_vlc, psz_newvar, value.psz_string );
+-break;
+-}
+-if( i_object ) vlc_object_release( p_vlc );
+-return VLC_SUCCESS;
+-}
+-

Bug#478717: killing left-over processes from ruby1.9 build failures crashes the kernel on hppa (Was: Bug#478717: ruby1.9: FTBFS on hppa: make[1]: *** [all] Segmentation fault)

[Lucas Nussbaum]

Hi,

(release-team: skip to the last paragraph)

I made some tests on simonides.ayous.org, running a 2.6.18 kernel, in a
sid chroot.

Building ruby1.9 simply blocks, leaving 2 miniruby processes running
using 100% CPU.

Killing those processes (with -9) crashes the system (I don't have
access to the console).

This clearly indicates a kernel problem (at least with 2.6.18). I need
access to a sparc box running 2.6.24 or 2.6.25 to try to reproduce this
issue. In the meantime, I can't do anything more.

The ruby1.9 version in testing fails to build with the make segfault
problem in a sid chroot on ayous. (Obviously, it built fine previously,
since it's in testing).

Couldn't we force ruby1.9 into testing, even if hppa is out of sync?
At this point I really don't think it's a ruby1.9 issue, and ruby1.9 is
tied to another transition (perl5.10, I think).
-- 
| Lucas Nussbaum
| [EMAIL PROTECTED]   http://www.lucas-nussbaum.net/ |
| jabber: [EMAIL PROTECTED] GPG: 1024D/023B3F4F |



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481496: Date has undocumented '@' parameter

[Bob Proulx]

Lucas Nussbaum wrote:
> It's mentioned in the info documentation, which is itself mentioned in
> the man page. I'm wondering whether we should move the "SEE ALSO"
> section of the man page higher in the man page, so it gets more visible.
> I'm sure many coreutils users don't know about the info documentation.
> Upstream devs, what do you think?

Quick comments.

1. The man pages are generated by help2man and so it is help2man that
   would need to be modified.

2. I pessimistically don't think it would help any to change the man
   page section order and move the see also section up.

Perhaps it would be good to say a few specific things about the -d
format and in that description point people to the info page?

Bob



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#443209: Some more info

[s . db]

Hello,

the bug is related to syntax change of smbpasswd: starting from samba version 
3.0.8 it no longer accepts password on command line, like kcmsamba seems to 
call it when adding new user or changing user password.

A quick and dirty workaround could be:

dpkg-divert --add --rename --divert /usr/bin/smbpasswd.real /usr/bin/smbpasswd

and place in /usr/bin/smbpasswd this script:

8<-8<-8<-8<-8<-8<-8<-
#!/bin/bash

if [ "$#" -eq 3 -a "$1" = "-a" -a -n "$2" -a -n "$3" ]; then
# Wrap
/bin/echo -e "$3\n$3\n" | /usr/bin/smbpasswd.real -s -a "$2"
else
# No wrap
/usr/bin/smbpasswd.real "$@"
fi

exit $?
8<-8<-8<-8<-8<-8<-8<-

Except for security considerations about passing passwords on command line 
(you warned!), in this way kcmsamba should work

HTH,
S.
-- 

AETHIA srl - Power Computing Solutions
via Ribes, 5 - 10010 Colleretto Giacosa (TO)
Tel +39 0125 538824
FAX +39 0125 538621
Email   [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481510: discover: [INTL:pt_BR] Brazilian Portuguese debconf templates translation

[Marcelo Jorge Vieira (metal)]

Package: discover
Severity: wishlist
Tags: l10n patch

Hi,

Please find the initial Brazilian Portuguese Translation
for discover attached. It is UTF-8 encoded and it is tested
with msgfmt and podebconf-display-po.

Could you please include it with the package?

Kind regards,


-- 
Marcelo Jorge Vieira (metal)
metaldot - http://metaldot.alucinados.com
jabber - [EMAIL PROTECTED]
# discover Brazilian Portuguese translation 
# Copyright (C) 2007 THE discover's COPYRIGHT HOLDER
# This file is distributed under the same license as the discover package.
# Marcelo Jorge Vieira (metal) <[EMAIL PROTECTED]>, 2007.
#
msgid ""
msgstr "pt_BR utf-8\n"
"Project-Id-Version: discover 2.1.2-2\n"
"Report-Msgid-Bugs-To: Petter Reinholdtsen <[EMAIL PROTECTED]>\n"
"POT-Creation-Date: 2007-02-16 22:44+0100\n"
"PO-Revision-Date: 2008-05-02 11:13-0300\n"
"Last-Translator: Marcelo Jorge Vieira (metal) <[EMAIL PROTECTED]>\n"
"Language-Team: l10n portuguese <[EMAIL PROTECTED]>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"

#. Type: multiselect
#. Description
#: ../discover.templates:1001
msgid "Packages to install:"
msgstr "Pacotes para instalar:"

#. Type: multiselect
#. Description
#: ../discover.templates:1001
msgid ""
"Some packages were found to be useful with your hardware. Please select "
"those you want to install."
msgstr ""
"Alguns pacotes encontrados podem ser úteis com o seu hardware. Por Favor, "
"selecione aqueles que você deseja instalar."


signature.asc
Description: This is a digitally signed message part

Bug#481426: [Pkg-cups-devel] Bug#481426: marked as done (cupsys: SSL Certs Insecure (DSA-1571))

[Martin Pitt]

Roger Leigh [2008-05-16 14:01 +0100]:
> Doesn't CUPS automatically generate SSL keys?  If so, the existing keys
> will be insecure.  

No, because it uses GnuTLS for this. However, by default will use the
ssl-cert snakeoil certificate, which will get updated on its own (it
already got in Ubuntu, anyway, and it needs an update in Debian, too).

Martin
-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)


signature.asc
Description: Digital signature

Bug#477839: Handled via the kernel package's initramfs-hook

[Guido Günther]

Hi,
the kernel's initramfs hook handles this well on kernel upgrades, etc.
So there's IMHO no need to also do this on package installs/upgrades.
Cheers,
 -- Guido



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#431931: cyrus-imapd: Mailbox autocreate patch

[amg1127]

I also need this feature.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481517: libgeoip1: Please provide backport for etch

[Sergey B Kirpichev]

Package: libgeoip1
Version: 1.4.4.dfsg-1
Severity: wishlist

Could you provide a backport for Etch?  The package compiles as-is on
Etch and works for me.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#474278: xserver-xorg-input-mouse: buggy clicks

[Leopold Palomo Avellaneda]

Please,

could you be more explicit? 

I have had to put:


Section "InputDevice"
Identifier "Configured Mouse"
Driver "mouse"
Option "CorePointer" "true"
Option "Device" "/dev/psaux"
Option "Protocol" "ImPS/2"
Option "ZAxisMapping" "4 5"
Option "SendCoreEvents" "false"
EndSection


SendCoreEvents to false because if I commented the line or set it to true, the 
mouse was buggy. And I didn't understand the :

> Replacing SendCoreEvents by CorePointer fixed my mouse.

regards,

Leo

-- 
--
Linux User 152692
PGP: 0xF944807E
Catalonia


signature.asc
Description: This is a digitally signed message part.

Bug#478822: util-linux: Don't reinstall init script on upgrades

[Vincent Lefevre]

On 2008-05-01 11:25:14 +0200, Jörg Sommer wrote:
> Policy 10.7.3 says you must preserve user changes during upgrades,
> but on upgrade (or reinstall) the init script level gets changed.

Unfortunately, the change of an init script level consists of changing
symbolic links and Policy 10.7.3 doesn't apply on symbolic links. See
bug 412668.

So, the severity should probably be lowered.

-- 
Vincent Lefèvre <[EMAIL PROTECTED]> - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481509: [washngo] post installation returns error 1

[Immanuel Normann]

Package: washngo
Version: 2.12-5
Severity: serious

--- Please enter the report below this line. ---
post installation returns error 1

--- System information. ---
Architecture: i386
Kernel:   Linux 2.6.22-14-generic

Debian Release: lenny/sid
  500 unstableftp.daum.net 
  500 gutsy-updates   de.archive.ubuntu.com 
  500 gutsy-security  security.ubuntu.com 
  500 gutsy-security  de.archive.ubuntu.com 
  500 gutsy   de.archive.ubuntu.com 

--- Package information. ---
Depends   (Version) | Installed
===-+-===
| 





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#467241: libwebkit-1.0-1: Flash works in trunk

[Kai Hendry]

Package: libwebkit-1.0-1
Version: 0~svn32442-1
Followup-For: Bug #467241

Plugin support came in on:
http://trac.webkit.org/changeset/32766

I just did a build from trunk today and GTK WebKit and Flash works:
http://www.flickr.com/photos/hendry/2496589867/

NPAPI support on GTK WebKit is quite a milestone. :)

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libwebkit-1.0-1 depends on:
ii  libc6  2.7-11GNU C Library: Shared libraries
ii  libcairo2  1.6.4-2   The Cairo 2D vector graphics libra
ii  libcurl3-gnutls7.18.1-1  Multi-protocol file transfer libra
ii  libfontconfig1 2.5.0-2   generic font configuration library
ii  libfreetype6   2.3.5-1+b1FreeType 2 font engine, shared lib
ii  libgcc11:4.3.0-4 GCC support library
ii  libglib2.0-0   2.16.3-2  The GLib library of C routines
ii  libgtk2.0-02.12.9-4  The GTK+ graphical user interface 
ii  libicu38   3.8.1-1   International Components for Unico
ii  libjpeg62  6b-14 The Independent JPEG Group's JPEG 
ii  libpango1.0-0  1.20.2-2  Layout and rendering of internatio
ii  libpng12-0 1.2.27-1  PNG library - runtime
ii  libsqlite3-0   3.5.8-4   SQLite 3 shared library
ii  libstdc++6 4.3.0-4   The GNU Standard C++ Library v3
ii  libxml22.6.32.dfsg-2 GNOME XML library
ii  libxslt1.1 1.1.23-1  XSLT processing library - runtime 

libwebkit-1.0-1 recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481077: nslcd: error writing to client

[Arthur de Jong]

On Fri, 2008-05-16 at 16:24 +0200, Petter Reinholdtsen wrote:
> [Arthur de Jong]
> > I had thought that this was a good enough upper limit but apparently
> > there are environments out there with many more users per
> > group. What would be a reasonable upper limit?
> 
> Well, I have seen groups with about 6500 members, and suspect I will
> run into larger groups (like the all users group) with 12 members
> soon. :)

That would require a buffer of around 1.5Mbyte (assuming user names are
in average around 8 characters).

> What about reading it in bulks, instead of having a buffer capable of
> storing a maximum number of users?
> 
> Also, just teminating the 'getent group' call because if run into a
> large group seem like a bad idea.  Can't the client and the server
> negotiate on a good buffer size, and let nslcd skip groups that are
> too large for the client?  Also, it is strange that 'getent group
> largegroup' work, but 'getent group' terminate when it run into the
> same group.

The problem here is the NSS interface:
  - all NSS module functions are called with a buffer (something like
in the getpwent_r() call)
  - if the buffer is too small, the function should return
NSS_STATUS_TRYAGAIN and the caller will grow the buffer and retry
the call
  - if the call was a simple one (e.g. getpwnam(), getpwuid()) the query
will just be resent to nslcd and the information is looked up again
  - if the call a part of a series of calls (e.g. setpwent(),
getpwent(), endpwent()) we cannot just retry the query because we
will get the earlier returned values again; this is where the read
buffer is used:
- before an entry is read from the stream the position in the stream
  is marked
- if the caller's buffer is too small the position is reset (this is
  why the buffer should be at least as large as one group entry)
- if the read buffer overflows and cannot be grown more, a permanent
  error is returned (actually this only happens when the attempt to
  reset the stream is made, not when the buffer is really full so in
  some circumstances you would be able to return larger groups than
  the max buffer size)

What can be done is limit the number of members that may be returned by
nslcd but I don't like that solution much.

Maybe I can try to make something that if the read buffer overflows the
other members of the group are just skipped, but I don't think that will
be easy to implement.

Another solution would be to retry filling the provided buffer at the
point we left off, but I don't know if it's guaranteed that the resized
buffer by the caller actually has the old content. This is also
non-trivial to implement.

Anyway, I've increased the maximum size of the read buffer to 2Mbyte to
support groups with up to around 15 members (usernames on average a
little onder 10 characters) (r737). Since this amount will only be used
when it's needed I don't think there is too much harm.

-- 
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --


signature.asc
Description: This is a digitally signed message part

Bug#481515: alsa-utils: 'alsactl restore' fails on ICE1724 soundcards

[Martin Roll]

Package: alsa-utils
Version: 1.0.16-1
Severity: normal


Invoking 'alsactl restore' on a system with an ICE1724 soundcard (Terratec 
Aureon 7.1 Universe in my case) leads to the following error messages:

alsactl: set_control:1300: incompatible field type for control #1
alsactl: set_control:1300: incompatible field type for control #56


At system boot it looks like this:

Setting up ALSA...warning: 'alsactl restore' failed with error message 
'alsactl: set_control:1300: incompatible field type for control #1
alsactl: set_control:1300: incompatible field type for control #56'...done.


It seems that this issue is specific to ICE1724 chipsets. I discovered the same 
issue on another machine with the same soundcard.
To verify this, I installed the same package versions on a third machine with 
an Intel AD1983 and got no errors.



-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.24 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages alsa-utils depends on:
ii  dialog1.1-20080316-1 Displays user-friendly dialog boxe
ii  libasound21.0.16-2   ALSA library
ii  libc6 2.7-10 GNU C Library: Shared libraries
ii  libncurses5   5.6+20080503-1 Shared libraries for terminal hand
ii  linux-sound-base  1.0.16-1.1 base package for ALSA and OSS soun
ii  lsb-base  3.2-12 Linux Standard Base 3.2 init scrip
ii  module-init-tools 3.4-1  tools for managing Linux kernel mo
ii  pciutils  1:3.0.0-4  Linux PCI Utilities
ii  python2.5.2-1An interactive high-level object-o
ii  whiptail  0.52.2-11.2Displays user-friendly dialog boxe

Versions of packages alsa-utils recommends:
ii  alsa-base 1.0.16-1.1 ALSA driver configuration files
ii  udev  0.114-2/dev/ and hotplug management daemo

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481516: openssh-client: ssh-vulnkey fails to detect dsa-1576 vulnerable keys when authorized_keys options are used.

[Brett Viren]

Package: openssh-client
Version: 1:4.3p2-9etch1
Severity: normal


When options are used in an authorized_keys file ssh-vulnkey fails to
identify the key as being vulnerable to dsa-1576.  This example
reproduces it with a known bad key:

gateway:~# ssh-vulnkey bad_key.pub
COMPROMISED: 2048 99:9c:fe:67:a5:eb:1f:54:06:85:a2:43:0e:ad:0b:c6 bad_key.pub
gateway:~# ssh-vulnkey bad_bad_key.pub
gateway:~# diff bad_key.pub bad_bad_key.pub
1c1
< ssh-rsa 
B3NzaC1yc2EBIwAAAQEArnzR8H6UAFTVWMmxYwbNaCRm656cPiskUPueovqGhzOtAErRQJxvmaoxDcyBBHVb0y7qUchVI4EWW0Z/lf20jppQIrIAFcLjUuU4y4mqaMVuU1RM0VdKj7jaM8JYvU1/8kGFMtFFQWcbRfihd2y+EbwxyRaNp6GCCC2EoqXZSy2RlrGtvMiUp41Lie50aV5Mj0DkLfICTNVxj20gedbYn6K45ybYe2lGDqwDCY9j6FWj9taUW7CIbVsV+oJWzZXhMuwbUwc6hNDqyqHaeTyaj2bmI6QyFJhlbiCyUtYIyOfgc0VO1dCuWr9/qPZxbAjY28T14lFHlS/0oambyA9how==
 [EMAIL PROTECTED]
---
> command="/usr/bin/cvs 
> server",no-port-forwarding,no-pty,no-X11-forwarding,no-agent-forwarding 
> ssh-rsa 
> B3NzaC1yc2EBIwAAAQEArnzR8H6UAFTVWMmxYwbNaCRm656cPiskUPueovqGhzOtAErRQJxvmaoxDcyBBHVb0y7qUchVI4EWW0Z/lf20jppQIrIAFcLjUuU4y4mqaMVuU1RM0VdKj7jaM8JYvU1/8kGFMtFFQWcbRfihd2y+EbwxyRaNp6GCCC2EoqXZSy2RlrGtvMiUp41Lie50aV5Mj0DkLfICTNVxj20gedbYn6K45ybYe2lGDqwDCY9j6FWj9taUW7CIbVsV+oJWzZXhMuwbUwc6hNDqyqHaeTyaj2bmI6QyFJhlbiCyUtYIyOfgc0VO1dCuWr9/qPZxbAjY28T14lFHlS/0oambyA9how==
>  [EMAIL PROTECTED]

Regards,
-Brett.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages openssh-client depends on:
ii  add 3.102Add and remove users and groups
ii  deb 1.5.11etch1  Debian configuration management sy
ii  dpk 1.13.25  package maintenance system for Deb
ii  lib 2.3.6.ds1-13etch4GNU C Library: Shared libraries
ii  lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library
ii  lib 2.9.cvs.20050518-2.2 BSD editline and history libraries
ii  lib 1.4.4-7etch4 MIT Kerberos runtime libraries
ii  lib 5.5-5Shared libraries for terminal hand
ii  lib 0.9.8c-4etch3SSL shared libraries
ii  pas 1:4.0.18.1-7 change and administer password and
ii  zli 1:1.2.3-13   compression library - runtime

openssh-client recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#242866: info that it has *not* been dealt with

[Markus Laire]

found 242866 2.6.24-6
found 242866 2.6.25-3
thanks

maximilian attems wrote:
> Version: 2.6.24-1
>
> the "offended" firmware is stripped in linux-2.6 since
> aboves metioned version.
>
> stop reopening that bug if you are not a MAINTAINER
> nor have any valid piece of info that it has *not* been
> dealt with.

File drivers/net/pcmcia/ositech.h (which is mentioned in first message
and marked as "nondistributable" at
http://wiki.debian.org/KernelFirmwareLicensing ) has *not* been dealt
with yet.

It is present in both 2.6.24-6 [*] and 2.6.25-3, under GPL-license and
containing binary firmware.

[*] This is earliest version >= 2.6.24-1 which I could find for
downloading

ps. I recently sent additional information to bug #383403 (merged with
this bug) which shows that is has *not* been dealt with either.

> if you find additional DFSG violations report a new bug.

This clearly isn't additional DFSG violation.

I hope you don't continue closing bugs which has *not* been dealt with
yet (unless you can show that such behaviour is acceptable by
Debian, which I doubt.)

-- 
Markus Laire



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#479276: Bad change

[Roman Mamedov]

Hello.

If the initial reporter does not want scripts to be executed by 
webserver users, he probably shouldn't store those scripts within his 
www tree, or should rename them to "...php.txt".


A point release shouldn't thoughtlessly break all PHP-based websites 
hosted on a server to "403 - Forbidden", because it silently "Installed 
a new version of 10-cgi.conf", with commented out CGI handling of PHP 
scripts.


Remember, conf files are being symlinked (and not copied) to 
conf-enabled by lighty-enable-mod, so any change in these files in 
conf-available/ (if they have not been modified otherwise) immediately 
goes "live" after upgrade and restart of lighttpd.


With respect,
Roman.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481402: let me include packages into suites, not only codenames

[Bernhard R. Link]

package reprepro
tags 481402 + pending
thanks

* martin f krafft <[EMAIL PROTECTED]> [080515 22:01]:
> Package: reprepro
> Version: 3.4.1-1
> Severity: wishlist
> 
> Since I told reprepro in conf/distributions that unstable == sid and
> etch == stable, I should be able to tell reprepro include to include
> files into unstable or stable, but I can't:
> 
> Cannot find definition of distribution 'unstable'!

Thanks for the suggestion. Implemented in CVS and will be in the next version.

Hochachtungsvoll,
Bernhard R. Link
-- 
"Never contain programs so few bugs, as when no debugging tools are available!"
Niklaus Wirth



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#426581: meshlab - anyone still working on this

[Yaroslav Halchenko]

ok -- upload is sponsored but for the next upload set a little more
precise dependencies since libqt4-opengl-dev is not available on
hurd-i386, sparc, and you have architecture any, thus it will be FTBFS
on those architectures. Now we should just hope that no major problems
will be detected by ftpmaster ;-)
also that would be great if you work out with upstream some nice plan
to define paths, so you could over-define them without hard-patching the
code/build system.

And I want to emphasize that you should use pbuilder with up-to-date
chroot any time you are building package to be sponsored. It should be a
must, ok? (I have a cron job which updates all my pbuilder chroots every
night and I advice you do setup the same thingie)

In any case -- thanks for a nice work and patience!

On Fri, 16 May 2008, Teemu Ikonen wrote:

> On Thu, May 15, 2008 at 6:13 PM, Yaroslav Halchenko
> <[EMAIL PROTECTED]> wrote:
> > got into problem with uptodate sid chroot for pbuilder, although it builds 
> > fine
> >  with mixed lenny/sid box (so some versions are from lenny) and it boils
> >  down to the recent split in libqt4-dev which now has opengl relevant 
> > headers in libqt4-opengl-dev...

> Sigh. Maybe some day I remember to run all these checks myself. I
> added the missing build-dep to libqt4-opengl-dev and uploaded the new
> version to mentors.

> Teemu


-- 
Yaroslav Halchenko
Research Assistant, Psychology Department, Rutgers-Newark
Student  Ph.D. @ CS Dept. NJIT
Office: (973) 353-5440x263 | FWD: 82823 | Fax: (973) 353-1171
101 Warren Str, Smith Hall, Rm 4-105, Newark NJ 07102
WWW: http://www.linkedin.com/in/yarik


signature.asc
Description: Digital signature

Bug#412950: Processed: info that it has *not* been dealt with

[Markus Laire]

maximilian attems wrote:
> On Fri, May 16, 2008 at 04:39:58PM +, Debian Bug Tracking System
> wrote:
> > Processing commands for [EMAIL PROTECTED]:
> > 
> > > found 242866 2.6.24-6
> > Bug#242866: drivers containing firmware blobs
> > Bug#243022: ymfpci_image.h: Sourceless microcode without permission
> > to redistribute Bug#383403: linux-2.6: includes nondistributable
> > and non-free binary firmware Bug#412950: linux-2.6: [legal] the
> > current kernel tarball doesn't respect the GR 2006-007 Bug marked
> > as found in version 2.6.24-6 and reopened.
> > 
> > > found 242866 2.6.25-3
> > Bug#242866: drivers containing firmware blobs
> > Bug#243022: ymfpci_image.h: Sourceless microcode without permission
> > to redistribute Bug#383403: linux-2.6: includes nondistributable
> > and non-free binary firmware Bug#412950: linux-2.6: [legal] the
> > current kernel tarball doesn't respect the GR 2006-007 Bug marked
> > as found in version 2.6.25-3.
> > 
> > > thanks
> > Stopping processing here.
> 
> stop this game or i get you blacklisted on debian bug tracking system.

I do not like such threats when I havn't done anything wrong (according
to my knowledge).

I was acting exactly as you requested. IMHO you said that
reopening should be done only by maintainer or by someone with info
that bug had not been dealt with.

I'm not a maintainer, but I did have info that bug had not been
dealt with, so I reopened the bug with that info.

I fail to see any reason to threaten me with blacklisting.

IMHO it is you who should've been threatened with blacklisting if
anyone, since you have insisted on closing bugs which clearly havn't
been fixed.

If I did something wrong, IMHO the right response would've been to point
out my mistake to me, and not to threaten with blacklisting without
giving any reason for it.

> it is up to the maintainer to decide if that is closed or not.

If maintainer decides that bug must not be reopened anymore, that
should be mentioned in the bug-report.

-- 
Markus Laire



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481417: closed by Nico Golde <[EMAIL PROTECTED]> (Bug#481417: fixed in vlc 0.8.6.e-2.2)

[Nick Ives]

Heh,

I started typing up my previous email & uploading the test file you
asked for a couple of mins before this popped into my inbox. Thanks
for the speedy resolution, I'm sure this new package will do the
trick.

Regards,

-- 
Nick

2008/5/16 Debian Bug Tracking System <[EMAIL PROTECTED]>:
>
> This is an automatic notification regarding your Bug report
> which was filed against the vlc package:
>
> #481417: vlc: x264/h264 playback is broken in 0.8.6.e-2.1
>
> It has been closed by Nico Golde <[EMAIL PROTECTED]>.
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Nico Golde <[EMAIL 
> PROTECTED]> by
> replying to this email.
>
>
> --
> 481417: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481417
> Debian Bug Tracking System
> Contact [EMAIL PROTECTED] with problems
>
>
> -- Forwarded message --
> From: Nico Golde <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Date: Fri, 16 May 2008 15:47:18 +
> Subject: Bug#481417: fixed in vlc 0.8.6.e-2.2
> Source: vlc
> Source-Version: 0.8.6.e-2.2
>
> We believe that the bug you reported is fixed in the latest version of
> vlc, which is due to be installed in the Debian FTP archive:
>
> libvlc0-dev_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/libvlc0-dev_0.8.6.e-2.2_amd64.deb
> libvlc0_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/libvlc0_0.8.6.e-2.2_amd64.deb
> mozilla-plugin-vlc_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/mozilla-plugin-vlc_0.8.6.e-2.2_amd64.deb
> vlc-nox_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-nox_0.8.6.e-2.2_amd64.deb
> vlc-plugin-alsa_0.8.6.e-2.2_all.deb
>  to pool/main/v/vlc/vlc-plugin-alsa_0.8.6.e-2.2_all.deb
> vlc-plugin-arts_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-arts_0.8.6.e-2.2_amd64.deb
> vlc-plugin-esd_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-esd_0.8.6.e-2.2_amd64.deb
> vlc-plugin-ggi_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-ggi_0.8.6.e-2.2_amd64.deb
> vlc-plugin-jack_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-jack_0.8.6.e-2.2_amd64.deb
> vlc-plugin-sdl_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-sdl_0.8.6.e-2.2_amd64.deb
> vlc-plugin-svgalib_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc-plugin-svgalib_0.8.6.e-2.2_amd64.deb
> vlc_0.8.6.e-2.2.diff.gz
>  to pool/main/v/vlc/vlc_0.8.6.e-2.2.diff.gz
> vlc_0.8.6.e-2.2.dsc
>  to pool/main/v/vlc/vlc_0.8.6.e-2.2.dsc
> vlc_0.8.6.e-2.2_amd64.deb
>  to pool/main/v/vlc/vlc_0.8.6.e-2.2_amd64.deb
> wxvlc_0.8.6.e-2.2_all.deb
>  to pool/main/v/vlc/wxvlc_0.8.6.e-2.2_all.deb
>
>
>
> A summary of the changes between this version and the previous one is
> attached.
>
> Thank you for reporting the bug, which will now be closed.  If you
> have further comments please address them to [EMAIL PROTECTED],
> and the maintainer will reopen the bug report if appropriate.
>
> Debian distribution maintenance software
> pp.
> Nico Golde <[EMAIL PROTECTED]> (supplier of updated vlc package)
>
> (This message was generated automatically at their request; if you
> believe that there is a problem with it please contact the archive
> administrators by mailing [EMAIL PROTECTED])
>
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Format: 1.8
> Date: Fri, 16 May 2008 16:18:04 +0200
> Source: vlc
> Binary: vlc vlc-nox libvlc0 libvlc0-dev vlc-plugin-esd vlc-plugin-alsa 
> vlc-plugin-sdl vlc-plugin-ggi vlc-plugin-glide vlc-plugin-arts 
> mozilla-plugin-vlc vlc-plugin-svgalib wxvlc vlc-plugin-jack
> Architecture: source all amd64
> Version: 0.8.6.e-2.2
> Distribution: unstable
> Urgency: high
> Maintainer: Debian multimedia packages maintainers <[EMAIL PROTECTED]>
> Changed-By: Nico Golde <[EMAIL PROTECTED]>
> Description:
>  libvlc0- multimedia player and streamer library
>  libvlc0-dev - development files for VLC
>  mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
>  vlc- multimedia player and streamer
>  vlc-nox- multimedia player and streamer (without X support)
>  vlc-plugin-alsa - dummy transitional package
>  vlc-plugin-arts - aRts audio output plugin for VLC
>  vlc-plugin-esd - Esound audio output plugin for VLC
>  vlc-plugin-ggi - GGI video output plugin for VLC
>  vlc-plugin-glide - Glide video output plugin for VLC
>  vlc-plugin-jack - Jack audio plugins for VLC
>  vlc-plugin-sdl - SDL video and audio output plugin for VLC
>  vlc-plugin-svgalib - SVGAlib video output plugin for VLC
>  wxvlc  - dummy transitional package
> Closes: 477734 478971 480370 480724 481417
> Changes:
>  vlc (0.8.6.e-2.2) unstable; urgency=high
>  .
>   * Non-maintainer upload by the Security Team.
>   * Fix regression introduced by latest security upload which
> did not properly define FREENULL (Closes: #478971,#481417,#477734).
>   * Fix untrusted search path vulnerability by not loading libraries
> from plugins and modules directories in the current working

Bug#481283: Separate distribution-provided and custom black-lists

[Roman Mamedov]

Hello.

In my opinion, there should be two separate blacklists:
- One is distribution-provided, which lists worldwide-known-weak or 
otherwise unusable keys (as in the current case).
That file could go into /usr/share/, and would not supposed to be 
modified by administrator.
- Another blacklist could be in /etc/, empty by default, and 
specifically designated for adding locally-blacklisted keys (i.e. by 
administrator of that particular machine).


The major benefit in such scheme, is that the admin wouldn't have to 
edit huge Debian-provided blacklists in order to add a key or two (and 
re-sort them, as these blacklists must be sorted currently, according to 
'man ssh-vulnkey'), s/he could simply add that line in a small local 
blacklist. As a consequence, there would be no need to deal with dpkg 
prompts about "Install newer version of this config file?" each time 
when Debian-provided blacklist updates for some reason - and no need to 
scrutinize the huge diffs to find out what the distribution's changes 
are, and how to not lose the locally-made ones.


With respect,
Roman.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481519: openssh-server: can not login after update to 4.3p2-9etch1

[Rafael Jesus Alcantara Perez]

Package: openssh-server
Version: 1:4.3p2-9etch1
Severity: normal

When the machine was upgraded to 4.3p2-9etch1, the installation script found
that the host key was blacklisted. I reinstalled many times the package but
with no success. Finally I ripped some pieces of the postinst script and I
tried to build the key, at least ten times, with again, no sucess. The keys
were newly created but they always were marked as blacklisted. The result
was that I was not able to login on the machine.

Finally, I put the next line on /etc/ssh/sshd_config:

PermitBlacklistedKeys yes

Now it starts saying the next message, but at least, I can login again:

Host key b5:9c:37:1c:42:ec:7e:ee:47:9e:20:dd:23:29:6b:d0 blacklisted (see 
ssh-vulnkey(1)); continuing anyway
Host key ec:4d:32:92:f6:0e:4b:0d:2b:b0:6f:32:d1:79:fb:64 blacklisted (see 
ssh-vulnkey(1)); continuing anyway
Restarting OpenBSD Secure Shell server: sshdHost key
b5:9c:37:1c:42:ec:7e:ee:47:9e:20:dd:23:29:6b:d0 blacklisted (see 
ssh-vulnkey(1)); continuing anyway
Host key ec:4d:32:92:f6:0e:4b:0d:2b:b0:6f:32:d1:79:fb:64 blacklisted (see 
ssh-vulnkey(1)); continuing anyway
.


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-6-686 (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openssh-server depends on:
ii  add 3.102Add and remove users and groups
ii  deb 1.5.13   Debian configuration management sy
ii  dpk 1.13.25  package maintenance system for Deb
ii  lib 2.3.6.ds1-13etch5GNU C Library: Shared libraries
ii  lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library
ii  lib 1.4.4-8  MIT Kerberos runtime libraries
ii  lib 0.79-5   Pluggable Authentication Modules f
ii  lib 0.79-5   Runtime support for the PAM librar
ii  lib 0.79-5   Pluggable Authentication Modules l
ii  lib 1.32-3   SELinux shared libraries
ii  lib 0.9.8e-4 SSL shared libraries
ii  lib 7.6.dbs-13   Wietse Venema's TCP wrappers libra
ii  ope 0.1.1list of blacklisted OpenSSH RSA an
ii  ope 1:4.3p2-9etch1   Secure shell client, an rlogin/rsh
ii  zli 1:1.2.3-13   compression library - runtime

openssh-server recommends no packages.

-- debconf information:
* ssh/vulnerable_host_keys:
  ssh/new_config: true
* ssh/use_old_init_script: true
  ssh/encrypted_host_key_but_no_keygen:
  ssh/disable_cr_auth: false



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481522: jwchat: [INTL:pt_BR] Brazilian Portuguese debconf templates translation

[Marcelo Jorge Vieira (metal)]

Package: jwchat
Severity: wishlist
Tags: l10n patch

Hi,

Please find the initial Brazilian Portuguese Translation
for jwchat attached. It is UTF-8 encoded and it is tested
with msgfmt and podebconf-display-po.

Could you please include it with the package?

Kind regards,


-- 
Marcelo Jorge Vieira (metal)
metaldot - http://metaldot.alucinados.com
jabber - [EMAIL PROTECTED]
# discover Brazilian Portuguese translation 
# Copyright (C) 2007 THE discover's COPYRIGHT HOLDER
# This file is distributed under the same license as the discover package.
# Marcelo Jorge Vieira (metal) <[EMAIL PROTECTED]>, 2007.
#
msgid ""
msgstr "pt_BR utf-8\n"
"Project-Id-Version: discover 2.1.2-2\n"
"Report-Msgid-Bugs-To: Petter Reinholdtsen <[EMAIL PROTECTED]>\n"
"POT-Creation-Date: 2007-02-16 22:44+0100\n"
"PO-Revision-Date: 2008-05-02 11:13-0300\n"
"Last-Translator: Marcelo Jorge Vieira (metal) <[EMAIL PROTECTED]>\n"
"Language-Team: l10n portuguese <[EMAIL PROTECTED]>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"

#. Type: multiselect
#. Description
#: ../discover.templates:1001
msgid "Packages to install:"
msgstr "Pacotes para instalar:"

#. Type: multiselect
#. Description
#: ../discover.templates:1001
msgid ""
"Some packages were found to be useful with your hardware. Please select "
"those you want to install."
msgstr ""
"Alguns pacotes encontrados podem ser úteis com o seu hardware. Por Favor, "
"selecione aqueles que você deseja instalar."


signature.asc
Description: This is a digitally signed message part

Bug#481525: linux-image-2.6.24-1-686: cdrom nonfunctional, spews errors on boot

[Zack Weinberg]

Package: linux-image-2.6.24-1-686
Version: 2.6.24-6
Severity: normal


I just upgraded from etch to lenny in order to get at some new software,
but now the CD/DVD drive doesn't work.  There is a flood of errors on
boot, including a couple of soft-lockup traces, all apparently having
something to do with hdc (the cdrom).  If I put a disc in the drive
and try to mount it, the command hangs and I get more IDE errors and
soft-lockup traces.  (The mount command does eventually give up; it's
not a permanent hang.)

I've chopped the dmesg down to what appear to be the critical pieces,
please let me know if you need more information.

-- Package-specific info:
** Version:
Linux version 2.6.24-1-686 (Debian 2.6.24-6) ([EMAIL PROTECTED]) (gcc version 
4.1.3 20080308 (prerelease) (Debian 4.1.2-21)) #1 SMP Sat Apr 19 00:37:55 UTC 
2008

** Command line:
auto BOOT_IMAGE=Linux ro root=301

** Not tainted

** Kernel log:
ATIIXP: IDE controller (0x1002:0x4349 rev 0x00) at  PCI slot :00:14.1
ACPI: PCI Interrupt :02:06.0[A] -> GSI 18 (level, low) -> IRQ 18
ACPI: PCI Interrupt :00:14.1[A] -> GSI 16 (level, low) -> IRQ 19
ATIIXP: not 100% native mode: will probe irqs later
ide0: BM-DMA at 0xf000-0xf007, BIOS settings: hda:DMA, hdb:pio
ide1: BM-DMA at 0xf008-0xf00f, BIOS settings: hdc:DMA, hdd:pio
Probing IDE interface ide0...
hda: WDC WD3200AAKB-00WHA0, ATA DISK drive
hda: host max PIO4 wanted PIO255(auto-tune) selected PIO4
hda: UDMA/100 mode selected
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
Probing IDE interface ide1...
hdc: ATAPI DVD DD 2X16X4X16, ATAPI CD/DVD-ROM drive
hdc: host max PIO4 wanted PIO255(auto-tune) selected PIO4
hdc: UDMA/33 mode selected
ide1 at 0x170-0x177,0x376 on irq 15
hda: max request size: 512KiB
hda: 625142448 sectors (320072 MB) w/16384KiB Cache, CHS=38913/255/63
hda: cache flushes supported
 hda: hda1 hda2
hdc: status timeout: status=0xd0 { Busy }
ide: failed opcode was: unknown
hdc: ATAPI CD-ROM drive, 0kB Cache
Uniform CD-ROM driver Revision: 3.20
hdc: status timeout: status=0xd0 { Busy }
ide: failed opcode was: unknown
hdc: drive not ready for command
BUG: soft lockup - CPU#0 stuck for 11s! [modprobe:659]

Pid: 659, comm: modprobe Not tainted (2.6.24-1-686 #1)
EIP: 0060:[] EFLAGS: 0212 CPU: 0
EIP is at ide_inb+0x3/0x7 [ide_core]
EAX: 01d0 EBX: 0282 ECX:  EDX: 0177
ESI: f88a75f8 EDI: f88a75a0 EBP: fffeee00 ESP: f66cfb30
 DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
CR0: 8005003b CR2: b7e6f040 CR3: 365c CR4: 06d0
DR0:  DR1:  DR2:  DR3: 
DR6: 0ff0 DR7: 0400
 [] __ide_wait_stat+0x91/0xee [ide_core]
 [] ide_wait_stat+0x45/0x72 [ide_core]
 [] ide_do_request+0x3ef/0x976 [ide_core]
 [] elv_queue_empty+0x1d/0x1e
 [] ide_do_request+0x7d/0x976 [ide_core]
 [] elv_drain_elevator+0x15/0x58
 [] elv_drain_elevator+0x15/0x58
 [] elv_insert+0x107/0x1ea
 [] elv_insert+0x107/0x1ea
 [] __blk_put_request+0x24/0x75
 [] ide_do_drive_cmd+0xb4/0xf8 [ide_core]
 [] cdrom_queue_packet_command+0x35/0xba [ide_cd]
 [] cdrom_queue_packet_command+0x35/0xba [ide_cd]
 [] vgacon_scroll+0x182/0x19d
 [] cdrom_read_capacity+0x57/0x85 [ide_cd]
 [] blk_end_sync_rq+0x0/0x23
 [] cdrom_read_toc+0x94/0x3ff [ide_cd]
 [] __ide_add_setting+0xb6/0xd3 [ide_core]
 [] ide_add_setting+0x48/0x4d [ide_core]
 [] ide_cd_probe+0x91a/0x947 [ide_cd]
 [] iput+0x39/0x62
 [] sysfs_addrm_finish+0x4a/0x194
 [] sysfs_add_one+0xaf/0xb8
 [] sysfs_addrm_start+0x50/0x81
 [] sysfs_create_link+0xb8/0xfd
 [] generic_ide_probe+0x1c/0x1d [ide_core]
 [] driver_probe_device+0xde/0x15c
 [] klist_next+0x4b/0x6c
 [] __driver_attach+0x0/0x79
 [] __driver_attach+0x46/0x79
 [] bus_for_each_dev+0x37/0x59
 [] driver_attach+0x16/0x18
 [] __driver_attach+0x0/0x79
 [] bus_add_driver+0x6d/0x197
 [] sys_init_module+0x15db/0x16f3
 [] vma_prio_tree_insert+0x17/0x2a
 [] msleep+0x0/0x12
 [] syscall_call+0x7/0xb
 ===
hdc: status timeout: status=0xd0 { Busy }
ide: failed opcode was: unknown
hdc: drive not ready for command
hdc: status timeout: status=0xd0 { Busy }
ide: failed opcode was: unknown
hdc: drive not ready for command
BUG: soft lockup - CPU#0 stuck for 11s! [modprobe:659]

Pid: 659, comm: modprobe Not tainted (2.6.24-1-686 #1)
EIP: 0060:[] EFLAGS: 0202 CPU: 0
EIP is at ide_inb+0x3/0x7 [ide_core]
EAX: 01d0 EBX: 0282 ECX:  EDX: 0177
ESI: f88a75f8 EDI: f88a75a0 EBP: fffef7c6 ESP: f66cfb38
 DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
CR0: 8005003b CR2: b7e6f040 CR3: 365c CR4: 06d0
DR0:  DR1:  DR2:  DR3: 
DR6: 0ff0 DR7: 0400
 [] __ide_wait_stat+0x91/0xee [ide_core]
 [] ide_wait_stat+0x45/0x72 [ide_core]
 [] ide_do_request+0x3ef/0x976 [ide_core]
 [] elv_queue_empty+0x1d/0x1e
 [] ide_do_request+0x7d/0x976 [ide_core]
 [] elv_queue_empty+0x1d/0x1e
 [] ide_do_request+0x7d/0x976 [ide_core]
 [] elv_drain_elevator+0x15/0x58
 [] elv_insert+0x107/0x1ea
 [] __blk_put_request+0x24/0x75
 [] ide_do_drive_cmd+0xb4/0xf8 [ide

Bug#481520: pidgin: rapidly allocates large swaths of memory when pulseaudio dies

[brian m. carlson]

Package: pidgin
Version: 2.4.1-1+b2
Severity: important

If I kill off pulseaudio when pidgin is running, pidgin starts
allocating large amounts of memory, enough to force serious swapping to
disk (with 3GB of memory in the machine).  If left unchecked, it will
probably trigger the OOM killer, although I've never let it get that
bad.

If you need more information, please let me know.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pidgin depends on:
ii  gconf2  2.22.0-1 GNOME configuration database syste
ii  libatk1.0-0 1.22.0-1 The ATK accessibility toolkit
ii  libc6   2.7-11   GNU C Library: Shared libraries
ii  libcairo2   1.6.4-2  The Cairo 2D vector graphics libra
ii  libdbus-1-3 1.2.1-2  simple interprocess messaging syst
ii  libdbus-glib-1-20.74-4   simple interprocess messaging syst
ii  libglib2.0-02.16.3-2 The GLib library of C routines
ii  libgstreamer0.10-0  0.10.19-3Core GStreamer libraries and eleme
ii  libgtk2.0-0 2.12.9-4 The GTK+ graphical user interface 
ii  libgtkspell02.0.10-4 a spell-checking addon for GTK's T

ii  libice6 2:1.0.4-1X11 Inter-Client Exchange library
ii  libpango1.0-0   1.20.2-2 Layout and rendering of internatio
ii  libpurple0  2.4.1-1+b2   multi-protocol instant messaging l
ii  libsm6  2:1.0.3-1+b1 X11 Session Management library
ii  libstartup-notification00.9-1library for program launch feedbac
ii  libx11-62:1.1.3-1X11 client-side library
ii  libxss1 1:1.1.3-1X11 Screen Saver extension library
ii  perl5.10.0-10Larry Wall's Practical Extraction 
ii  perl-base [perlapi-5.10.0]  5.10.0-10The Pathologically Eclectic Rubbis

ii  pidgin-data 2.4.1-1  multi-protocol instant messaging c

Versions of packages pidgin recommends:
ii  gstreamer0.10-plugins-base0.10.19-2  GStreamer plugins from the "base" 
ii  gstreamer0.10-plugins-good0.10.8-2   GStreamer plugins from the "good" 


-- no debconf information

--
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
troff on top of XML: http://crustytoothpaste.ath.cx/~bmc/code/thwack
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187


signature.asc
Description: Digital signature

Bug#481490: ITP: unionfs-fuse -- user-space directory concatenation

[Daniel Baumann]

how does it compare to funionfs?

-- 
Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email:  [EMAIL PROTECTED]
Internet:   http://people.panthera-systems.net/~daniel-baumann/



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481526: gnump3d: Content-length is always one byte too large.

[Glenn Y. Rolland]

Package: gnump3d
Version: 3.0-4
Severity: important



GnuMP3d reports a bad content-length to the http client. That makes some
clients try to resume the download.

Example:

   $ ls -l music.mp3
=> -rw-r--r-- 1 glenux glenux 6257859 aoû  1  2005   music.mp3
a 
   $ wget http://localhost:/music.mp3
   --2008-05-16 16:06:17--  http://localhost:/music.mp3
   Resolving localhost... 127.0.0.1
   Connecting to localhost|127.0.0.1|:... connected.
   HTTP request sent, awaiting response... 200 OK
=> Length: 6257860 (6.0M) [audio/mpeg]
b   Saving to: `music.mp3'

   99% [=> ] 6,257,859  
  111K/s   in 57s

=> 2008-05-16 16:07:16 (107 KB/s) - Connection closed at byte 6257859. Retrying.
c 
   --2008-05-16 16:07:17--  (try: 2)  http://localhost:/music.mp3
   Connecting to localhost|127.0.0.1|:... connected.
   HTTP request sent, awaiting response... 206 OK
   Length: 6257860 (6.0M), 1 remaining [audio/mpeg]
   Saving to: `music.mp3'

   99% [++ ] 6,257,859  
 --.-K/s   in 0s

   [...]

We clearly see the differences between the reported file length
in a), b) and c).


See attached patch for the fix.

Best regards,
Glenn.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.22.19-vs2.2.0.7 (PREEMPT)
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=UTF-8) (ignored: LC_ALL 
set to fr_FR.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnump3d depends on:
ii  adduser   3.107  add and remove users and groups
ii  debconf   1.5.21 Debian configuration management sy
ii  logrotate 3.7.1-3Log rotation utility
ii  netbase   4.32   Basic TCP/IP networking system
ii  perl  5.8.8-12   Larry Wall's Practical Extraction 
ii  perl-modules  5.8.8-12   Core Perl modules

gnump3d recommends no packages.

-- debconf information:
  gnump3d/user: gnump3d
  gnump3d/root: /var/music
  gnump3d/port: 
diff -Nur gnump3d-3.0/bin/gnump3d2 gnump3d-3.0.fix/bin/gnump3d2
--- gnump3d-3.0/bin/gnump3d22008-05-16 15:57:31.0 +0200
+++ gnump3d-3.0.fix/bin/gnump3d22008-05-16 16:36:57.0 +0200
@@ -1319,11 +1319,12 @@
$mtime = gmtime $mtime;
my ($day, $mon, $dm, $tm, $yr) =
($mtime =~ m/(...) (...) (..) (..:..:..) ()/);
+   my $last_byte_pos = $length - 1;
 
# matt: handle partial content
if (!$extra->{NoContentLength}) {
-   $header .= "Content-Range: bytes $range-$length/$length\n";
-   $length -= $range;
+   $header .= "Content-Range: bytes $range-$last_byte_pos/$length\n";
+   $length -= ($range + 1);
$header .= "Content-length: $length\n";
}
$header .= "Last-Modified: $day, $dm $mon $yr $tm GMT\n";

Bug#310968: segfault after starttls fixed upstream in libesmtp 1.0.4 since years

[Lars Ellenberg]

this bug is fixed upstream.
also see my bug report about the same issue in
https://bugs.launchpad.net/ubuntu/+source/libesmtp/+bug/227677

please upgrade to libesmtp 1.0.4.
(plus the one-line patch for set_sender provided in
https://bugs.launchpad.net/ubuntu/+source/libesmtp/+bug/227680)

Lars



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#373169: [Pkg-gnutls-maint] Bug#373169: please set permissions on key output to 600

[Daniel Kahn Gillmor]

On Fri 2008-05-16 08:44:35 -0400, martin f krafft wrote:

> also sprach Simon Josefsson <[EMAIL PROTECTED]> [2008.05.16.1328 +0100]:
>> Hi!  I've fixed this problem upstream in:
>> 
>> http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=1f808bbed485731d69a8c37509487632674c7d52
>
> Looks good. I am glad you chmod() before dumping the content. :)

It's defintely better to chmod before dumping content than not, but i
think this leaves an (admittedly small) window for an attacker to grab
a file descriptor before the file is chmodded.

Better would be to call umask(S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH) before
opening the output file (and set it back afterward, if you care).

in certtool.c, that seems to happen in the argument parser, though, so
i'm not sure if you can know what umask is needed before the output
file is opened (e.g. we don't know if we're generating a certificate
or a private key).  Maybe the file should be opened after all argument
processing to allow for setting a proper umask?

For an exaggerated demonstration of the problem: build and run
chmodvumask [0] with a non-existent filename as an argument, and hook
a tail -f process into that file as a different user within the 10
second window, the text written to the chmod'ed file will be readable
by the other user.

hth,

   --dkg

[0] http://cmrg.fifthhorseman.net/browser/trunk/test/chmodvumask/chmodvumask.c


pgpkqQbM4AWMw.pgp
Description: PGP signature

Bug#481523: libmagic1: file_error_core causes crash in vasprintf

[Martin Dorey]

Package: file
Version: 4.24-2
Severity: normal
Tags: patch


When I made my original change suggested in Bug#481512 (libmagic1:
"couldn't open file"  doesn't say which file or why), I ran into a crash
in strlen from vasprintf caused by a regression introduced between 4.23
and 4.24 upstream, in the file_error_core function in funcs.c.  As I
reported upstream (in a message entitled "distressingly obscure error
message on failing to open a file"), the file_printf(ms, f, va) line -
the one with the unusual indentation - is passing a va_list to a
printf-style function rather than a vprintf-style function.  I suggested
that file_printf should be renamed file_vprintf and given a va_list
argument and submitted a patch, which Christos accepted, saying:

"Thanks a lot, I applied your fix."

I didn't try very hard to reproduce this with an unpatched file but what
attempts I did make, failed.  So perhaps this is unimportant but, if
anyone else finds themselves with a more compelling reason to apply the
patch before 4.25 comes out, I have attached it here.

-- System Information:
Debian Release: lenny/sid
  APT prefers oldstable
  APT policy: (500, 'oldstable'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libmagic1 depends on:
ii  libc6  2.7-11GNU C Library: Shared
libraries
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library -
runtime

libmagic1 recommends no packages.

Versions of packages file depends on:
ii  libc6 2.7-11 GNU C Library: Shared
libraries

-- no debconf information
--- funcs.c	2008-03-07 07:00:07.0 -0800
+++ funcs.c	2008-05-16 09:55:16.0 -0700
@@ -45,18 +45,15 @@
  * Like printf, only we append to a buffer.
  */
 protected int
-file_printf(struct magic_set *ms, const char *fmt, ...)
+file_vprintf(struct magic_set *ms, const char *fmt, va_list ap)
 {
-	va_list ap;
 	size_t size;
 	int len;
 	char *buf, *newstr;
 
-	va_start(ap, fmt);
 	len = vasprintf(&buf, fmt, ap);
 	if (len < 0)
 		goto out;
-	va_end(ap);
 
 	if (ms->o.buf != NULL) {
 		len = asprintf(&newstr, "%s%s", ms->o.buf, buf);
@@ -73,6 +70,18 @@
 	return -1;
 }
 
+protected int
+file_printf(struct magic_set *ms, const char *fmt, ...)
+{
+	va_list ap;
+	int len;
+	
+	va_start(ap, fmt);
+	len = file_vprintf(ms, fmt, ap);
+	va_end(ap);
+	return len;
+}
+
 /*
  * error - print best error message possible
  */
@@ -89,7 +98,7 @@
 		ms->o.buf = NULL;
 		file_printf(ms, "line %u: ", lineno);
 	}
-file_printf(ms, f, va);
+	file_vprintf(ms, f, va);
 	if (error > 0)
 		file_printf(ms, " (%s)", strerror(error));
 	ms->haderr++;

Bug#464350: Same here

[Thomas Ihle]

Hi,

same here starting vmware-server-console on AMD64 (lenny):

||/ Name   Version
+++-==-==
ii  ia32-libs  2.4
ii  ia32-libs-gtk  2.2
ii  libgtk2.0-02.12.9-3

Unable to load image-loading module: 
/usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so: 
/usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so: wrong ELF class: 
ELFCLASS64


-> no icons

Best regards
Thomas



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481442: sane-utils: Using xinetd, reportd with set -x in the postinst script

[Jean-Luc Coulon (f5ibh)]

Le 16.05.2008 19:09:37, Julien BLACHE a écrit :
>"Jean-Luc Coulon (f5ibh)" <[EMAIL PROTECTED]> wrote:
>
>Hi,
>
>> ++ exec /usr/share/debconf/frontend
>/var/lib/dpkg/info/sane-utils.postinst configure 1.0.19-6

Why do I get 1.0.19-6 whiile configuring 1.0.19-9?


>
>Yeah, right. Must source the debconf confmodule right at the start of
>the postinst.
>
>Just so I don't make another upload for nothing, does it work OK if
>you move the confmodule sourcing right after the set -e ?
>

I've modified the postinst script according to you request and get the 
same (about) error.

Attached the output.

Regards

Jean-Luc
[EMAIL PROTECTED] % sudo dpkg --configure -a
Setting up sane-utils (1.0.19-9) ...
+ . /usr/share/debconf/confmodule
++ '[' '!' '' ']'
++ PERL_DL_NONLAZY=1
++ export PERL_DL_NONLAZY
++ '[' '' ']'
++ exec /usr/share/debconf/frontend /var/lib/dpkg/info/sane-utils.postinst 
configure 1.0.19-6
+ . /usr/share/debconf/confmodule
++ '[' '!' 1 ']'
++ '[' -z '' ']'
++ exec
++ '[' '' ']'
++ exec
++ DEBCONF_REDIR=1
++ export DEBCONF_REDIR
+ '[' configure = configure ']'
+ getent passwd
+ grep -q '^saned:'
+ '[' -x /usr/sbin/update-inetd ']'
+ update-inetd --add '## 
sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned'
- IMPORTANT INFORMATION FOR XINETD USERS --
The following line will be added to your /etc/inetd.conf file:

## sane-port\tstream\ttcp\tnowait\tsaned:saned\t/usr/sbin/saned saned

If you are indeed using xinetd, you will have to convert the
above into /etc/xinetd.conf format, and add it manually. See
/usr/share/doc/xinetd/README.Debian for more information.
Suggested entry (automatically converted using itox):

---

+ SANED_DEFAULT=/etc/default/saned
+ db_get sane-utils/saned_run
+ _db_cmd 'GET sane-utils/saned_run'
+ IFS=' '
+ printf '%s\n' 'GET sane-utils/saned_run'
+ IFS='
'
+ read -r _db_internal_line
+ RET='20 Unsupported command "" (full line was "") received from confmodule.'
+ case ${_db_internal_line%%[   ]*} in
+ return 20
dpkg: error processing sane-utils (--configure):
 subprocess post-installation script returned error exit status 20
Errors were encountered while processing:
 sane-utils
[EMAIL PROTECTED] %



pgpAplnbqq1IM.pgp
Description: PGP signature

Bug#481518: openoffice.org-writer: Some fonts display accented chars wrongly

[Jan Willem Stumpel]

Package: openoffice.org-writer
Version: 1:2.4.0-6
Severity: important


NOTE: this message is UTF-8 encoded

To reproduce this bug:
1) create a UTF-8 encoded text file containing some accented Latin characters, 
   like ø, ö, é, è.
2) start oo-writer, choose Insert File, insert the file you just made.
3) select the part with the accented letters, then choose various fonts.

Result: with some fonts (code2000, Freeserif, Century Schoolbook..) the accented
chars are displayed correctly.

With other fonts (FreeSans, CourierNew, FreeMono) the accented chars are 
changed:
e.g ø becomes ¯, ö becomes ^, é becomes È, è becomes Ë.

It appears to be a bug in oo, not in the fonts, because this does not happen 
in Abiword.

Regards, Jan


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openoffice.org-writer depends on:
ii  libc6  2.7-11GNU C Library: Shared libraries
ii  libgcc11:4.3.0-4 GCC support library
ii  libicu38   3.8.1-1   International Components for Unico
ii  libstdc++6 4.3.0-4   The GNU Standard C++ Library v3
ii  libstlport4.6ldbl  4.6.2-3.2 STLport C++ class library
ii  libwpd8c2a 0.8.14-1  Library for handling WordPerfect d
ii  libwps-0.1-1   0.1.2-1   Works text file format import filt
ii  libxml22.6.32.dfsg-2 GNOME XML library
ii  openoffice.org-base-co 1:2.4.0-6 OpenOffice.org office suite -- lib
ii  openoffice.org-core1:2.4.0-6 OpenOffice.org office suite archit
ii  python-uno 1:2.4.0-6 Python interface for OpenOffice.or
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime

Versions of packages openoffice.org-writer recommends:
ii  openoffice.org-filter-binfilt 1:2.4.0-6  Legacy filters (e.g. StarOffice 5.
ii  openoffice.org-java-common1:2.4.0-6  OpenOffice.org office suite Java s
ii  openoffice.org-writer2latex   0.5-6  Writer/Calc to LaTeX/XHTML convert
ii  sun-java6-jre [java2-runtime] 6-06-1 Sun Java(TM) Runtime Environment (

Versions of packages openoffice.org-core depends on:
ii  fontconfig 2.5.0-2   generic font configuration library
ii  libc6  2.7-11GNU C Library: Shared libraries
ii  libcairo2  1.6.4-2   The Cairo 2D vector graphics libra
ii  libcurl3   7.18.1-1  Multi-protocol file transfer libra
ii  libdb4.6   4.6.21-8  Berkeley v4.6 Database Libraries [
ii  libexpat1  1.95.8-4  XML parsing C library - runtime li
ii  libfreetype6   2.3.5-1+b1FreeType 2 font engine, shared lib
ii  libgcc11:4.3.0-4 GCC support library
ii  libglib2.0-0   2.16.3-2  The GLib library of C routines
ii  libgstreamer-plugins-b 0.10.19-2 GStreamer libraries from the "base
ii  libgstreamer0.10-0 0.10.19-3 Core GStreamer libraries and eleme
ii  libgtk2.0-02.12.9-4  The GTK+ graphical user interface 
ii  libhunspell-1.2-0  1.2.2-2   spell checker and morphological an
ii  libhyphen0 2.3.1-3   ALTLinux hyphenation library - sha
ii  libice62:1.0.4-1 X11 Inter-Client Exchange library
ii  libicu38   3.8.1-1   International Components for Unico
ii  libjpeg62  6b-14 The Independent JPEG Group's JPEG 
ii  libldap-2.4-2  2.4.7-6.3 OpenLDAP libraries
ii  libneon27  0.28.2-2  An HTTP and WebDAV client library
ii  libnspr4-0d4.7.1-1   NetScape Portable Runtime Library
ii  libnss3-1d 3.12.0~rc3-1  Network Security Service libraries
ii  libpam0g   0.99.7.1-6Pluggable Authentication Modules l
ii  libpango1.0-0  1.20.2-2  Layout and rendering of internatio
ii  libsm6 2:1.0.3-1+b1  X11 Session Management library
ii  libssl0.9.80.9.8g-10 SSL shared libraries
ii  libstdc++6 4.3.0-4   The GNU Standard C++ Library v3
ii  libstlport4.6ldbl  4.6.2-3.2 STLport C++ class library
ii  libx11-6   2:1.0.3-7 X11 client-side library
ii  libxaw72:1.0.4-1 X11 Athena Widget library
ii  libxext6   2:1.0.4-1 X11 miscellaneous extension librar
ii  libxinerama1   2:1.0.3-1 X11 Xinerama extension library
ii  libxml22.6.32.dfsg-2 GNOME XML library
ii  libxrender11:0.9.4-1 X Rendering Extension client libra
ii  libxslt1.1 1.1.23-1  XSLT processing libr

Bug#480935: This problem was already solved post-Etch

[Holger Wansing]

Just found out, that this problem was already existing in Etch,
and was assumed to be solved for Lenny (see #415992).

But with actual syslinux in testing (2:3.63+dfsg-1), the problem is
there, again.


-- 
Kind regards
Holger

==
Created with Sylpheed 2.3.0
under THE NEW DEBIAN GNU/LINUX 4.0 »Etch«
http://counter.li.org/,  Registered LinuxUser #311290
Try out OpenGL 3D-Desktop Beryl! www.beryl-project.org
=



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481516: openssh-client: ssh-vulnkey fails to detect dsa-1576 vulnerable keys when authorized_keys options are used.

[Colin Watson]

severity 481211 normal
forcemerge 481211 481516
thanks

On Fri, May 16, 2008 at 12:19:32PM -0400, Brett Viren wrote:
> When options are used in an authorized_keys file ssh-vulnkey fails to
> identify the key as being vulnerable to dsa-1576.  This example
> reproduces it with a known bad key:

Yep - this is also #481211. A fix is on its way in -9etch2.

Thanks,

-- 
Colin Watson   [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481524: cite completion does not properly capitalise bibtex keys

[martin f krafft]

Package: vim-latexsuite
Version: 20060325-5
Severity: normal

If I enter \citep{turoff, it finds TuroffEtAl:1996:CDP, which is
good (case-insensitive match on search). However, it then enters
\citep{turoffEtAl:1996:CDP, which is bad and causes bibtex to barf:

main.aux:463: [bibtex] Case mismatch error between cite keys
TuroffEtAl:1996:CDP

-- Package-specific info:
Vim related packages installed on this system:
 - vim-latexsuite
 - vim-runtime
 - vim-vimoutliner


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1+scoflowctrl.1-686 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages vim-latexsuite depends on:
ii  python   2.5.2-1 An interactive high-level object-o
ii  vim  1:7.1.293-3 Vi IMproved - enhanced vi editor
ii  vim-common   1:7.1.293-3 Vi IMproved - Common files
ii  vim-nox [vim-python] 1:7.1.293-3 Vi IMproved - enhanced vi editor

Versions of packages vim-latexsuite recommends:
ii  tetex-bin  2007-14   TeX Live: teTeX transitional packa
ii  texlive-base-bin   2007.dfsg.1-3 TeX Live: Essential binaries
ii  vim-addon-manager  0.4   manager of addons for the Vim edit

-- no debconf information


-- 
 .''`.   martin f. krafft <[EMAIL PROTECTED]>
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#467241: libwebkit-1.0-1: Flash works in trunk

[Mike Hommey]

On Fri, May 16, 2008 at 04:32:48PM +0100, Kai Hendry wrote:
> Package: libwebkit-1.0-1
> Version: 0~svn32442-1
> Followup-For: Bug #467241
> 
> Plugin support came in on:
> http://trac.webkit.org/changeset/32766
> 
> I just did a build from trunk today and GTK WebKit and Flash works:
> http://www.flickr.com/photos/hendry/2496589867/
> 
> NPAPI support on GTK WebKit is quite a milestone. :)

I know, I've been following the bug for quite some time ;)
But I'm busy with Mozilla stuff right now, and haven't decided what to
do for webkit in Lenny yet. I'll have to talk to Alp.

Mike



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#383403: Doesn't seem to be fixed

[maximilian attems]

On Fri, May 16, 2008 at 05:59:20PM +0300, Markus Laire wrote:
> I just went through the files mentioned in first message for source
> package linux-2.6_2.6.25-3, and the following GPL-licensed files are
> still present:
> 
> drivers/char/dsp56k.c
> drivers/media/dvb/ttpci/av7110_hw.c
> drivers/media/video/usbvideo/vicam.c
> drivers/net/cassini.h
> drivers/net/e100.c
> drivers/net/pcmcia/ositech.h
> drivers/net/starfire_firmware.h
> drivers/scsi/advansys.c
> drivers/scsi/ql1040_fw.h
> drivers/scsi/ql12160_fw.h
> drivers/usb/serial/io_fw_boot2.h
> drivers/usb/serial/io_fw_boot.h
> drivers/usb/serial/io_fw_down2.h
> drivers/usb/serial/io_fw_down.h
> drivers/usb/serial/ti_fw_3410.h
> drivers/usb/serial/ti_fw_5052.h
> drivers/usb/serial/whiteheat_fw.h
> sound/isa/sb/sb16_csp_codecs.h  # different location
> 
> Also following 2 files are present without any explicit license:
> 
> drivers/net/usb/kawethfw.h  # different location
> drivers/usb/serial/io_fw_down3.h
> 
> 
> So it seems clear that this bug hasn't been fixed yet.
> 
> 
> ps. I don't know whether this bug should be reopened (which
> you oppose), or whether this should be reported in new bug
> (which you seem to want).

you seem to have enough time at your hand, so open a new bug
with the corresponding material.

at a first glance you seem to have missed that e100 for example
is BSD licensed, see  http://wiki.debian.org/KernelFirmwareLicensing
that you seem to completly ignore.

so be more careful on your analysis.
enough time already wasted.

-- 
maks



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#468069: linux-image-2.6.24-1-686: e1000 hangs often with enabled NAPI

[maximilian attems]

On Fri, May 16, 2008 at 06:03:38PM +0300, Bozhan Boiadzhiev wrote:
> Package: linux-image-2.6.24-1-686
> Version: 2.6.24-6
> Followup-For: Bug #468069
> 
> I have same problem, with NAPI my server hangs

checkout 2.6.25 from unstable installs just fine in testing.
can you reporduce there!?



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#242866: info that it has *not* been dealt with

[maximilian attems]

On Fri, May 16, 2008 at 07:17:04PM +0300, Markus Laire wrote:
> 
> File drivers/net/pcmcia/ositech.h (which is mentioned in first message
> and marked as "nondistributable" at
> http://wiki.debian.org/KernelFirmwareLicensing ) has *not* been dealt
> with yet.

fine report a new bug against linux-2.6, we'll deal about it.
 
> It is present in both 2.6.24-6 [*] and 2.6.25-3, under GPL-license and
> containing binary firmware.
> 
> [*] This is earliest version >= 2.6.24-1 which I could find for
> downloading
> 
> ps. I recently sent additional information to bug #383403 (merged with
> this bug) which shows that is has *not* been dealt with either.
> 
> > if you find additional DFSG violations report a new bug.
> 
> This clearly isn't additional DFSG violation.
> 
> I hope you don't continue closing bugs which has *not* been dealt with
> yet (unless you can show that such behaviour is acceptable by
> Debian, which I doubt.)

stop playing with this bugs or i get your email blacklisted for the
Debian bug tracking system.  The bugs where about having a pruning
infrastructure aka disjointing the upstream linux-2.6 which is done.

file a separate report on each issue that you find and we'll analyse
your findings.

it be cooler if you'd asked the copyright holder of those firmware
files to license them under BSD. but i guess there your involvment
will not help out anymore.

over and out

-- 
maks



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#475561: linux-image-2.6.24-1-486 fails to mount ext3

[Juergen Kosel]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

maximilian attems schrieb:
> On Mon, 12 May 2008, Juergen Kosel wrote:
> 
>> This disk belongs to a _very_ old Laptop (> 10 years) which used only
>> for testing purposes. I don't worry if it doesn't run anymore.
>> So if this is the only one with this problem you could close the bug.
>> I only found it suspicious that the older kernel versions can use the
>> hard disk but not the new ones.
> 
> hmmm guess not many testers then ;)
> 
> could you please file a bug report upstream bugzilla.kernel.org
> the ide maintainer is quite active and they'll sort if that is
> really an hardware failure or just an wrong assumption in ide.
> 
> post their lspci -vv and dmesg
> 
> please let us know the upstream bug number so that we can mark it
> as forwarded.

the bug has the number 10723.
http://bugzilla.kernel.org/show_bug.cgi?id=10723


Greetings
Juergen
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFILbr+5JgLPmj5988RAm15AKDlNx5L+TPWOgNULuClXmyaGZ3dVACgnybc
hI4cnYkSQPtoF6d5GBlrPiM=
=KrTv
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#480197: nslcd: Fail to look up anything when the clock move backwards?

[Petter Reinholdtsen]

[Arthur de Jong]
> Is the problem reproducible in your environment (some testing in mine
> couldn't trigger the bug)? If you can reproduce this, can you run
>   strace -p 
> on some of the threads? You need to pass the -L option to ps to show
> the threads. Also stracing other processes could provide more
> information (nscd maybe?).

I do not quite know how to reproduce it easily.  Tested svn version
738 right now jumping 54 seconds backwards, and nslcd was still
working right after the time jump, so I hope it is solved. :)

Happy hacking,
-- 
Petter Reinholdtsen



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481417: vlc: x264/h264 playback is broken in 0.8.6.e-2.1

[Nick Ives]

Hi Nico,

As I didn't want to upload a large file I transcoded a snip of
something in my mythtv cache. I noticed, however, that 2.1 played the
raw x264 fine. The error appeared when the video was muxed into an
mkv.

I transcoded the same snip from dvb-t (mpeg2) to both xvid and x264
using mencoder and put it in an mkv container and the same bug appears
both times, so this is really a problem with 2.1 reading mkv files it
seems.

I've pasted the output from running VLC in a console below too. All
attempts I've made to play anything in an mkv container have resulted
in the below output, though larger files result in the "unknown track
header" running on a bit further.

All content works OK in 0.8.6.e-2.

http://www.wikiupload.com/download_page.php?id=33627

[EMAIL PROTECTED]:~/ndrive/mtmp$ vlc example.mkv
VLC media player 0.8.6e Janus
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x1549a966
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x1654ae6b
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x114d9b74
[matroska @ 0x2aaabe74b300]Unknown entry 0x73a4 in info header
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x55aa - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x23314f - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x55ee - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0xaa - ignoring
[0357] ffmpeg decoder error: more than 5 seconds of late video ->
dropping frame (computer too slow ?)
[0285] main playlist: nothing to play
[0285] main playlist: stopping playback
[EMAIL PROTECTED]:~/mtmp$ vlc 264/example.mkv
VLC media player 0.8.6e Janus
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x1549a966
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x1654ae6b
[matroska @ 0x2aaabe74b300]Ignoring seekhead entry for ID=0x114d9b74
[matroska @ 0x2aaabe74b300]Unknown entry 0x73a4 in info header
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x55aa - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x23314f - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0x55ee - ignoring
[matroska @ 0x2aaabe74b300]Unknown track header entry 0xaa - ignoring
[0357] ffmpeg decoder error: more than 5 seconds of late video ->
dropping frame (computer too slow ?)
[0285] main playlist: nothing to play
[0285] main playlist: stopping playback
[EMAIL PROTECTED]:~/mtmp$

Thanks for your work on this package,

-- 
Nick

2008/5/16 Nico Golde <[EMAIL PROTECTED]>:
> Hi Nick,
> * Nick Ives <[EMAIL PROTECTED]> [2008-05-16 08:35]:
>> X264/H264 playback is broken in 0.8.6.e-2.1. Any attemp to play back
>> video using this codec results in VLC just skipping through the whole
>> stream in a second or two. This works fine in 0.8.6.e-2.
>>
>> All files I've tried are in mkv containers. I don't have any x264
>> content in other container formats so cant test other containers.
>
> I did the 0.8.6.e-2.1 upload which was a security fix.
> Looking at the patch (which was assembled by upstream
> changes) I can't see any breakage:
> http://people.debian.org/~nion/nmu-diff/vlc-0.8.6.e-2_0.8.6.e-2.1.patch
>
> Could you upload one of these files somewhere?
>
> Kind regards
> Nico
> --
> Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
> For security reasons, all text in this mail is double-rot13 encrypted.
>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481521: RM: vflib2 -- RoQA; orphaned, out of date, superseded

[Barry deFreese]

Package: ftp.debian.org
Severity: normal


Hello,

Please see the following reasons for the removal request:

* Package is out of date.
* Package is orphaned.
* Superseded by vflib3.


Thank you,

Barry deFreese




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#481442: sane-utils: Using xinetd, reportd with set -x in the postinst script

[Julien BLACHE]

"Jean-Luc Coulon (f5ibh)" <[EMAIL PROTECTED]> wrote:

Hi,

> ++ exec /usr/share/debconf/frontend /var/lib/dpkg/info/sane-utils.postinst 
> configure 1.0.19-6

Yeah, right. Must source the debconf confmodule right at the start of
the postinst.

Just so I don't make another upload for nothing, does it work OK if
you move the confmodule sourcing right after the set -e ?

JB.

-- 
 Julien BLACHE - Debian & GNU/Linux Developer - <[EMAIL PROTECTED]> 
 
 Public key available on  - KeyID: F5D6 5169 
 GPG Fingerprint : 935A 79F1 C8B3 3521 FD62 7CC7 CD61 4FD7 F5D6 5169 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#411685: Package removed (pike7.7)

[Magnus Holmgren]

reopen 411685
retitie 411685 ITP: pike7.8 -- Powerful interpreted programming language, 
development version
owner !

On torsdagen den 1 maj 2008, you stated the following:
> pike7.7 was removed from the archive (see #477137).

pike7.7 was intended to be renamed pike7.8 anyway, because that's what the 
stable release
will eventually be called. Since I maintain pike7.6 I also intend to maintain 
pike7.8.
Since there hs never been a pike7.8 package in Debian yet, I call this an ITA, 
but since
it's essentially the same package as pike7.7 I reuse this bug.

-- 
Magnus Holmgren[EMAIL PROTECTED]
Debian Developer 


signature.asc
Description: This is a digitally signed message part.

Bug#480197: nslcd: Fail to look up anything when the clock move backwards?

[Arthur de Jong]

On Thu, 2008-05-08 at 22:13 +0200, Arthur de Jong wrote:
> On Thu, 2008-05-08 at 19:30 +0200, Petter Reinholdtsen wrote:
> > After stopping ntpd, running ntpdate adserver and restarting ntpd,
> > nslcd no longer worked.  The command 'getent passwd knownuser' did not
> > return any entry, and it was impossible to log in.
> >
> > Is nslcd unable to handle time going backwards?
> 
> This could very well be the case. I'll have to go over the code and see
> if any of it can't handle time going back. Some parts of the code have
> timeout handling that e.g. calculate time to sleep based on the time
> difference. That may fail (or sleep for an unreasonably long time) when
> the clock is moved back.

I went over the code and found two possible problems where a very long
sleep would be done or a very long select().

The first sleep would only be a problem if there are running retries
going on while the time is moved and would only completely lock nslcd if
there were 5 searches going on at the time step.

The second one is even less likely as 5 connections from the NSS library
need to hang and the time shift happens exactly at the right (wrong)
time in all 5 threads.

Anyway, these have been fixed (r738) but will likely not fix this
problem because the race conditions were very unlikely to hit all 5
threads simultaneously (unless you have less threads configured).

Is the problem reproducible in your environment (some testing in mine
couldn't trigger the bug)? If you can reproduce this, can you run
  strace -p 
on some of the threads? You need to pass the -L option to ps to show the
threads. Also stracing other processes could provide more information
(nscd maybe?).

-- 
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --


signature.asc
Description: This is a digitally signed message part

Bug#481527: libpam-mount: /etc/pam.d/common-pammount is difficult or impossible to integrate with standard pam configs

[Daniel Kahn Gillmor]

Package: libpam-mount
Version: 0.33-1
Severity: normal

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

/usr/share/doc/libpam-pammount/README.Debian.gz suggests that its
integration is as easy as appending "@include common-pammount" to the
PAM configs for relevant services.  However, it doesn't work with the
stock /etc/pam.d/gdm, and has the potential to cause problems with
other configurations as well.

The problem that i ran into was that gdm's stock PAM config contains
the gnome-keyring PAM module -- when this PAM module's session config
runs, it needs access to the user's homedir.  But if pam-mount is
required to mount the homedir, then it should be placed above the
gnome-keyring module, not appended to it.

Also, other PAM configs seem to be more often broken out by type
(i.e. auth listed together, session listed together, etc), and
common-pammount doesn't follow that convention.  This makes it
difficult to place the auth module in the right position relative to
other auth modules while still placing the session module in the right
position relative to other session modules.

Given these problems, the fact that there are only two lines in
common-pammount, and that administrators probably need to explicitly
decide between "required" and "optional", it seems to me like it would
be better to remove the common-pammount configuration file entirely,
and to rewrite /usr/share/doc/libpam-mount/README.Debian.gz with
slightly more complex (but actually functional) instructions, maybe
with an example for a recent GDM or other service config.

See the comments here for more discussion:

 https://www.debian-administration.org/users/dkg/weblog/30

Thanks for maintaining pam-mount in debian!

   --dkg

- -- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-mount depends on:
ii  debconf1.5.21Debian configuration management sy
ii  libc6  2.7-10GNU C Library: Shared libraries
ii  libhx101.15-1A library providing queue, tree, I
ii  libpam0g   0.99.7.1-6Pluggable Authentication Modules l
ii  libssl0.9.80.9.8g-10 SSL shared libraries
ii  libxml-writer-perl 0.604-1   Perl module for writing XML docume
ii  libxml22.6.32.dfsg-2 GNOME XML library
ii  mount  2.13.1.1-1Tools for mounting and manipulatin

libpam-mount recommends no packages.

- -- debconf information excluded

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
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=v/Uf
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#414140: Patch for the 1.0.13p-3.2 NMU of chdrv

[Christian Perrier]

Dear maintainer of chdrv,

On Monday, May 05, 2008 I sent you a notice announcing my intent to upload a
NMU of your package to fix its pending l10n issues, after an initial
notice sent on Thursday, April 24, 2008.

You either agreed for this NMU or did not respond to my notices.

I will now upload this NMU to DELAYED/2-DAY.

The NMU patch is attached to this mail.

The NMU changelog is:


Source: chdrv
Version: 1.0.13p-3.2
Distribution: unstable
Urgency: low
Maintainer: Christian Perrier <[EMAIL PROTECTED]>
Date: Thu, 24 Apr 2008 07:55:05 +0200
Closes: 414140 419243 448933 479505 479510 479839 480259
Changes: 
 chdrv (1.0.13p-3.2) unstable; urgency=low
 .
   * Non-maintainer upload to fix pending l10n issues.
   * Debconf translations:
 - Portuguese. Closes: #414140
 - Spanish. Closes: #419243
 - Dutch. Closes: #448933
 - Basque. Closes: #479505
 - Finnish. Closes: #479510
 - Galician. Closes: #479839
 - Russian. Closes: #480259
   * [Lintian] No longer ignore errors by "make clean"
   * [Lintian] Change menu section to "Applications/Shells"
   * [Lintian] Replace PWD variable by CURDIR in debian/rules

-- 


diff -Nru chdrv-1.0.13p.old/debian/changelog chdrv-1.0.13p/debian/changelog
--- chdrv-1.0.13p.old/debian/changelog	2008-04-22 23:13:52.674597728 +0200
+++ chdrv-1.0.13p/debian/changelog	2008-05-15 10:04:51.279854324 +0200
@@ -1,3 +1,20 @@
+chdrv (1.0.13p-3.2) unstable; urgency=low
+
+  * Non-maintainer upload to fix pending l10n issues.
+  * Debconf translations:
+- Portuguese. Closes: #414140
+- Spanish. Closes: #419243
+- Dutch. Closes: #448933
+- Basque. Closes: #479505
+- Finnish. Closes: #479510
+- Galician. Closes: #479839
+- Russian. Closes: #480259
+  * [Lintian] No longer ignore errors by "make clean"
+  * [Lintian] Change menu section to "Applications/Shells"
+  * [Lintian] Replace PWD variable by CURDIR in debian/rules
+
+ -- Christian Perrier <[EMAIL PROTECTED]>  Thu, 24 Apr 2008 07:55:05 +0200
+
 chdrv (1.0.13p-3.1) unstable; urgency=low
 
   * Non-maintainer upload to fix pending l10n issues.
diff -Nru chdrv-1.0.13p.old/debian/menu chdrv-1.0.13p/debian/menu
--- chdrv-1.0.13p.old/debian/menu	2008-04-22 23:13:52.670595070 +0200
+++ chdrv-1.0.13p/debian/menu	2008-04-24 09:03:36.517236234 +0200
@@ -1,2 +1,2 @@
-?package(chdrv):needs="vc" section="Apps/Shells"\
+?package(chdrv):needs="vc" section="Applications/Shells"\
   title="chdrv" command="/usr/bin/chdrv"
diff -Nru chdrv-1.0.13p.old/debian/po/es.po chdrv-1.0.13p/debian/po/es.po
--- chdrv-1.0.13p.old/debian/po/es.po	1970-01-01 01:00:00.0 +0100
+++ chdrv-1.0.13p/debian/po/es.po	2008-04-24 07:56:43.857238000 +0200
@@ -0,0 +1,78 @@
+# Translation of chdrv_1.0.13p-3.1_es.po to Spanish
+# Copyright (C) 2007 THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the chdrv package.
+#
+#  Traductores, si no conocen el formato PO, merece la pena leer la
+#  documentación de gettext, especialmente las secciones dedicadas a este
+#  formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+#
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+#
+# - El proyecto de traducción de Debian al español
+#   http://www.debian.org/intl/spanish/
+#   especialmente las notas y normas de traducción en
+#   http://www.debian.org/intl/spanish/notas
+#
+# - La guía de traducción de po's de debconf:
+#   /usr/share/doc/po-debconf/README-trans
+#   o http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+# Si tiene dudas o consultas sobre esta traducción consulte con el último
+# traductor (campo Last-Translator) y ponga en copia a la lista de
+# traducción de Debian al español (<[EMAIL PROTECTED]>)
+#
+# Enrique Matias Sanchez (aka Quique) <[EMAIL PROTECTED]>, 2007.
+msgid ""
+msgstr ""
+"Project-Id-Version: chdrv_1.0.13p-3.1_es\n"
+"Report-Msgid-Bugs-To: [EMAIL PROTECTED]"
+"POT-Creation-Date: 2007-01-27 09:10+0100\n"
+"PO-Revision-Date: 2007-04-14 16:46+0200\n"
+"Last-Translator: Enrique Matias Sanchez (aka Quique) <[EMAIL PROTECTED]>\n"
+"Language-Team: Spanish <[EMAIL PROTECTED]>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: boolean
+#. Description
+#: ../templates:1001
+msgid "Do you want /usr/bin/chdrv to be installed SUID root?"
+msgstr "¿Desea instalar «/usr/bin/chdrv» con SUID root?"
+
+#. Type: boolean
+#. Description
+#: ../templates:1001
+msgid ""
+"You have the option of installing the /usr/bin/chdrv binary with the SUID "
+"bit set.  By setting 'SUID root', non-root users may run chdrv directly."
+msgstr ""
+"Puede instalar el binario «/usr/bin/chdrv» con el bit SUID habilitado. Si "
+"habilita «SUID root», los usuarios sin privilegios de administración podrán "
+"ejecutar chdrv directamente."
+
+#. Type: boolean
+#. Description
+#: ../template

Bug#373169: [Pkg-gnutls-maint] Bug#373169: please set permissions on key output to 600

[martin f krafft]

also sprach Daniel Kahn Gillmor <[EMAIL PROTECTED]> [2008.05.16.1807 +0100]:
> Better would be to call umask(S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH)
> before opening the output file (and set it back afterward, if you
> care).

Why not rely on a tempfile() method to create a tempfile with
restrictive permissions, which is then moved into place?

Umask fiddling is, however, another possibility.

-- 
 .''`.   martin f. krafft <[EMAIL PROTECTED]>
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems
 
.   `___
(o-(o-(o-(o-   (o-(o-(o-   /\/| | |
//\//\//\//\   //\//\//\  `  /\/\/l-+-|
v_/_   v_/_   v_/_   v_/_  v_/_   v_/_   v_/_.`  /\/\/|_|_|


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#471848: tagging upstream

[Leo "costela" Antunes]

tag 471848 upstream
forwarded 471848 http://trac.transmissionbt.com/ticket/952
severity wishlist
thanks

Hi,

I don't believe it's a good idea to either generate the POT file only in
the debian diff or repack the original source, so I'm requesting
upstream to perform this small change.

Cheers


-- 
Leo "costela" Antunes
[insert a witty retort here]




signature.asc
Description: OpenPGP digital signature

Bug#411276: Announce of the upcoming NMU for the xbanner package

[Christian Perrier]

Quoting Jose Carlos Medeiros ([EMAIL PROTECTED]):
> Hi, Christian
> 
> I will update this package on this weekend.

Please read on the mail I sent.

Once the NMU announce was made, translators *will* work on more
translations. So, really, I suggest that you *wait* for the following
delay to end up.

> > Otherwise the following will happen (or already has):
> >
> >  Monday, May 05, 2008   : send the first intent to NMU notice to
> > the package maintainer.
> >  Friday, May 16, 2008   : send this notice
> >  Friday, May 23, 2008   : deadline for receiving translation updates
> >  Sunday, May 25, 2008   : build the package and upload it to 
> > DELAYED/2-day


I will then send you the final patch (or, anyway, you'll get updates
from the BTS) on 26th (I'm away on 25th actually).




signature.asc
Description: Digital signature