Bug#687993: gelemental: wrong name for francium discoverer

2012-09-17 Thread Logan Rosen
Package: gelemental
Version: 1.2.0-8ubuntu1
Severity: minor
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu quantal

Dear Maintainer,

This bug report was also filed in Ubuntu and can be found at
http://launchpad.net/bugs/1051992
The description, from Guillaume F, follows:

gElemental gives the wrong name for the woman who discovered francium. Her name
was Marguerite Perey and not Derey.
I use the French version, and I can't be sure whether it is a translation
problem or if it's present in English as well.
I can't access the French translation in Launchpad, so I can't just propose
another translation. But I'd be happy to help in any way I can!

I use Ubuntu 12.04.1 32bits and gelemental 1.2.0-7ubuntu1 (the one in the
repos).

-- System Information:
Debian Release: wheezy/sid
  APT prefers quantal-updates
  APT policy: (500, 'quantal-updates'), (500, 'quantal-security'), (500,
'quantal'), (100, 'quantal-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.5.0-14-generic (SMP w/1 CPU core)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#654764: Apache and BEAST

2012-09-17 Thread Christoph Anton Mitterer
Hi Stefan :)


On Sun, 2012-09-16 at 10:31 +0200, Stefan Fritsch wrote:
 Browsers now have a workaround that splits/inserts TLS records that 
 cause the IV to be changed. So this works also with CBC ciphers.
Yeah I new,...


 This 
 is basically the same what openssl does since before 0.9.6.
... I just looked at it from the perspective of the server operator...
and from that I also want to enforce, that things are secured when a
user would use a browser without that workaround :)


 http://my.opera.com/securitygroup/blog/2011/12/11/opera-11-60-and-new-
 problems-with-some-secure-servers
Thanks... nice post.


 Unless you forbid CBC ciphers, I don't think you can do anything on 
 the server.
Uhm... I thought openssl =0.9.6. alone would already secure things?


 But 
 forbidding the CBC ciphers gives up perfect forward secrecy
Yep...


 The fix/workaround needs to be done by the browser.
Ah... I see... so what openssl did was with respect to it acting as a
SS/TLS1.0 client?!


I guess in principle one could deactivate SSLv3 and TLS1.0 on the
browser side,... to force things being secure (with respect to BEAST at
least), right?


Cheers,
Chris.


smime.p7s
Description: S/MIME cryptographic signature


Bug#687968: New upstream version

2012-09-17 Thread Carlos Borroto
Sure I'll work on this today.

On Mon, Sep 17, 2012 at 4:26 PM, Andreas Tille andr...@an3as.eu wrote:
 Hi Carlos,

 could you merge this with your changes in Git?

 Kind regards

 Andreas.

 - Forwarded message from Alessandro -oggei- Ogier 
 alessandro.og...@ieo.eu -

 Date: Mon, 17 Sep 2012 13:42:59 +0200
 From: Alessandro -oggei- Ogier alessandro.og...@ieo.eu
 To: Debian Bug Tracking System sub...@bugs.debian.org
 Subject: Bug#687968: New upstream version
 X-Debian-PR-Message: report 687968
 X-Debian-PR-Package: cufflinks
 X-Debian-PR-Keywords: patch
 X-Debian-PR-Source: cufflinks
 X-Spam_score: -2.8

 Package: cufflinks
 Version: 1.3.0-2
 Severity: wishlist
 Tags: patch

 Hi team,

 here at European Institute of Oncology we managed to upgrade
 cufflinks packaging to 2.0.2 version (current stable), starting
 from your good work.
 Here is the changelog:

  * New upstream release
  * Adding libeigen3-dev to Build-Depends
  * Hardened build
  * Fixed autoconf stuff (eigen-related)
  * Parallel compile

 We attach the relevant patch, we would be glad if you could
 consider to adopt and release new version in debian.

 Bests,

 ale

 -- System Information:
 Debian Release: wheezy/sid
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
 (500, 'stable'), (1, 'experimental')
 Architecture: amd64 (x86_64)

 Kernel: Linux 3.2.0-3-amd64 (SMP w/4 CPU cores)
 Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash

 Versions of packages cufflinks depends on:
 ii  dpkg   1.16.8
 ii  libboost-thread1.49.0  1.49.0-3.1
 ii  libc6  2.13-35
 ii  libgcc11:4.7.1-8
 ii  libstdc++6 4.7.1-8
 ii  python 2.7.3-2
 ii  zlib1g 1:1.2.7.dfsg-13

 cufflinks recommends no packages.

 cufflinks suggests no packages.

 -- no debconf information

 Index: packages/cufflinks/trunk/debian/control
 ===
 --- packages/cufflinks/trunk/debian/control (revision 38)
 +++ packages/cufflinks/trunk/debian/control (revision 43)
 @@ -8,5 +8,6 @@
   Charles Plessy ple...@debian.org
  Build-Depends: debhelper (= 8), autotools-dev, libboost-dev (=1.38.0),
 - libboost-thread-dev, libbam-dev (=0.1.16), zlib1g-dev, dh-autoreconf, 
 python (=2.6.6-3~)
 + libboost-thread-dev, libbam-dev (=0.1.16), zlib1g-dev, dh-autoreconf, 
 python (=2.6.6-3~),
 + hardening-wrapper, libeigen3-dev
  Standards-Version: 3.9.3
  Homepage: http://cufflinks.cbcb.umd.edu/
 Index: packages/cufflinks/trunk/debian/changelog
 ===
 --- packages/cufflinks/trunk/debian/changelog   (revision 38)
 +++ packages/cufflinks/trunk/debian/changelog   (revision 43)
 @@ -1,2 +1,13 @@
 +cufflinks (2.0.2-0ieo1) unstable; urgency=low
 +
 +  [ Alessandro -oggei- Ogier ]
 +  * New upstream release
 +  * Adding libeigen3-dev to Build-Depends
 +  * Hardened build
 +  * Fixed autoconf stuff (eigen-related)
 +  * Parallel compile
 +
 + -- oggei og...@oggei.ieo  Mon, 17 Sep 2012 13:31:47 +0200
 +
  cufflinks (1.3.0-2) unstable; urgency=low

 Index: packages/cufflinks/trunk/debian/patches/series
 ===
 --- packages/cufflinks/trunk/debian/patches/series  (revision 38)
 +++ packages/cufflinks/trunk/debian/patches/series  (revision 43)
 @@ -3,2 +3,3 @@
  0003-fix_includes_path.patch
  gcc-4.7.patch
 +wrong-assumptions
 Index: packages/cufflinks/trunk/debian/patches/wrong-assumptions
 ===
 --- packages/cufflinks/trunk/debian/patches/wrong-assumptions   (revision 43)
 +++ packages/cufflinks/trunk/debian/patches/wrong-assumptions   (revision 43)
 @@ -0,0 +1,32 @@
 +Description: wrong assumptions on user intelligence
 + If I describe my eigen path to $dir, i don't really mean $dir/include
 + .
 + cufflinks (2.0.2-1) UNRELEASED; urgency=low
 + .
 +   * New upstream release
 +Author: oggei og...@oggei.ieo
 +
 +---
 +The information above should follow the Patch Tagging Guidelines, please
 +checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
 +are templates for supplementary fields that you might want to add:
 +
 +Origin: vendor|upstream|other, url of original patch
 +Bug: url in upstream bugtracker
 +Bug-Debian: http://bugs.debian.org/bugnumber
 +Bug-Ubuntu: https://launchpad.net/bugs/bugnumber
 +Forwarded: no|not-needed|url proving that it has been forwarded
 +Reviewed-By: name and email of someone who approved the patch
 +Last-Update: -MM-DD
 +
 +--- cufflinks-2.0.2.orig/ax_check_eigen.m4
  cufflinks-2.0.2/ax_check_eigen.m4
 +@@ -50,7 +50,7 @@ succeeded=no
 +
 + dnl first we check the system location for eigen libraries
 + if test $ac_eigen_path != ; then
 +-EIGEN_CPPFLAGS=-I$ac_eigen_path/include
 

Bug#639565:

2012-09-17 Thread gregor herrmann
On Mon, 17 Sep 2012 22:27:24 +0200, Alessandro Ghedini wrote:

  So this should be libcurl4-*-dev (and not -nss-) for the HTTPS
  communication, and libnss3-dev for the OAuth hash things, right? (And
  the fix for #646485 would have been to just add libnss3-dev, and not
  to switch the curl flavour.)
 Yep. Note that -openssl- is not really a good choice either because of the
 possible OpenSSL licensing issues, which makes -gnutls- pretty much the only
 choice.

Right, that's why I've choosen, as you proposed, libcurl4-gnutls-dev
| libcurl4-dev, i.e. the only sane default and the option for users
to do something else :)

Cheers,
gregor
 
-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT  SPI, fellow of the Free Software Foundation Europe
   `-   NP: Hans Theessink/Peter Ratzenbeck: If I Only Knew Her


signature.asc
Description: Digital signature


Bug#686970: Inconsistent ipv6 handling of localhost in netbase and netcfg

2012-09-17 Thread Philipp Kern
On Fri, Sep 07, 2012 at 09:44:12PM +0200, Christoph Berg wrote:
 From my point of view, localhost should be handled like any other
 multi-homed host, that is, it should have both addresses. It might
 have been different in 2010, wenn netcfg 1.57 was uploaded, but
 nowadays applications really need to cope with ipv6 being present.

True, but somehow I feel that freeze time is not the time to change this.
This should already affect stable?

Kind regards
Philipp Kern


signature.asc
Description: Digital signature


Bug#685130: xrdp: sesman connect ok

2012-09-17 Thread Stepan Yakovenko
On Fri, Aug 31, 2012 at 10:35:26PM +0200, Vincent Bernat wrote:
  ❦ 31 août 2012 22:28 CEST, Stepan Yakovenko st...@skryb.info :
 
  That's pretty odd to not have logs. Maybe you could strace xrdp-sesman
  process to see if it is running PAM correctly. As root:
  
   strace -p $(pidof xrdp-sesman)
 
  Please take a look at strace output (in attach).
 
 OK, everything seems normal. It seems to be writing to syslog and to a
 log file. Check the log file with ls -l /proc/$(pidof
 xrdp-sesman)/fd/3 or your system log files (maybe in /var/log/syslog or
 /var/log/debug) for a clue.
Here is what is shown in xrdp-sesman log
[20120917-21:13:38] [INFO ] scp thread on sck 8 started successfully
[20120917-21:13:39] [INFO ] login denied for user steve

How can I fix that?
Thanx in advance.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687994: RM: libumberlog -- ROM; outdated, unused, no maintainer interest

2012-09-17 Thread Gergely Nagy
Package: ftp.debian.org
Severity: normal

Please remove the libumberlog source package and all binaries from
unstable. It has no reverse dependencies, and an almost non-existent
popcon value.

The main reason for the removal request is that I handed over upstream
maintainership, and have neither interest nor desire to maintain it
for Debian. It's not part of testing (already requested removal from
there a while ago), the current package is out of date compared to
upstream, people should NOT be using this version at all.

If there turns out to be interest in having it in Debian, it can
always be reintroduced.

I see no point in orphaning something with such a low popcon value, so
please nuke it from the archive.

Thanks!

--
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#686970: Inconsistent ipv6 handling of localhost in netbase and netcfg

2012-09-17 Thread Marco d'Itri
On Sep 17, Philipp Kern pk...@debian.org wrote:

 True, but somehow I feel that freeze time is not the time to change this.
I disagree, netcfg should be fixed. There is plenty of time to look at 
any fallback, and even reverting the change if needed.
This is 2012, Europe and Asia are out of IPv4 networks and we cannot 
afford substandard IPv6 support anymore.

-- 
ciao,
Marco


signature.asc
Description: Digital signature


Bug#687307: [php-maint] Updating php5 to 5.4.4-5 broke FastCGI setup on my machine

2012-09-17 Thread Christoph Anton Mitterer
On Mon, 2012-09-17 at 22:50 +0200, Matthias Urlichs wrote:
  AFAIU, it doesn't really enable anything... it just sets a different
  handler, which may take away handling from what you've set up.
 Your understanding is incomplete.
 The postinst script specifically calls a2enable.
It does,... but there is no LoadModule directive in the respective
config files; just the config snippets for the handler assignments and
some comments, as I've said before.
(We're still talking about php5-cgi's php5-cgi.conf/.load files, are
we?)


  As said above, we don't do this anyway there is not even a php5_cgi
  _module_... this is just a trick ;)
 I know. But the trick backfired.
Yeah,... well... to be honest I don't think there's an automatic fix
to get everything working as it was.
We should add another bunch of notes to the release files, that the
SetHandler definitions from php5-cgi's config snippets may override
other Handler definitions.

But as I said, Apache configs may be just way to complex to handle this
all out of the box; at least I don't see a way currently.

Perhaps one should also add note, that these fake module config files
are added and that admins are expected to have a look at it.


At least I don't see a way to take these fake module config files as
this would not only break sites, but also cause security issues (php
files being exposed).


Questions for those who are affected by this bug:
1) So you have both, php5-cgi AND libapache2-mod-fcgid installed, right?
2) Then what happens is, the Handler from php5_cgi.conf overrides the
way (whatever you did) to get .php files interpreted, right?
3) Obviously, .php files are then neither interpreted by normal CGI,
as Action directives are missing (and perhaps ScriptAlias and other
things), right?

So we definitely get broken services (which by itself may cause security
issues - but no one could really ever cannot cover these kinds of
issues).
Big problem though is, are the files then served as normal files by
Apache?


Cheers,
Chris.


smime.p7s
Description: S/MIME cryptographic signature


Bug#687995: piuparts: better dependency resolving needed for experimental or backports

2012-09-17 Thread Andreas Beckmann
Package: piuparts
Version: 0.45
Severity: normal

For the partial distributions (experimental, backports) dependency
solution is more complicated because one probably needs to mix the
packages from the base distribution (sid, squeeze) with the addon
distribution (experimental, squeeze-backports), sometimes it's
neccessary to get packages from the base instead of the addon ... and
apt-get does a bad job in that respect. IIRC pbuilder and sbuild have a
better way to solve dependencies in this case.

These partial distros are meant for cherry-picking, not newer-is-better
as apt does it.

E.g. there is a new perl in experimental, only very few package were
built against this, the majority of packages in experimental is built
against the perl in sid and cannot be installed with the perl in
experimental. Just using perl/sid would be fine ...


Andreas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#679545: [RFC/PATCH] ia64, SR870, EFI bug breaks ata_piix, uninitialized ICH4 IDE EXBAR mem resource

2012-09-17 Thread Bjorn Helgaas
On Sun, Sep 16, 2012 at 10:39 AM, Stephan Schreiber i...@fs-driver.org wrote:

 [0.065516] pci :00:1f.1: [8086:24cb] type 0 class 0x000101
 [0.065530] pci :00:1f.1: reg 10: [io  0x-0x0007]
 [0.065541] pci :00:1f.1: reg 14: [io  0x-0x0003]
 [0.065552] pci :00:1f.1: reg 18: [io  0x-0x0007]
 [0.065563] pci :00:1f.1: reg 1c: [io  0x-0x0003]
 [0.065574] pci :00:1f.1: reg 20: [io  0x1000-0x100f]
 [0.065585] pci :00:1f.1: reg 24: [mem 0x-0x03ff]
 ...
 [1.640965] libata version 3.00 loaded.
 [1.641656] ata_piix :00:1f.1: version 2.13
 [1.641671] ata_piix :00:1f.1: device not available (can't reserve
 [mem 0x-0x03ff])
 [1.641747] ata_piix: probe of :00:1f.1 failed with error -22
 ...

 lspci -vvxxx reports:

 00:1f.1 IDE interface: Intel Corporation 82801DB (ICH4) IDE Controller (rev
 02) (prog-if 8a [Master SecP PriP])
 Subsystem: Intel Corporation Device 3404
 Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
 Stepping- SERR- FastB2B- DisINTx-
 Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium TAbort-
 TAbort- MAbort- SERR- PERR- INTx-
 Latency: 0
 Interrupt: pin A routed to IRQ 0
 Region 0: I/O ports at 01f0 [size=8]
 Region 1: I/O ports at 03f4 [size=1]
 Region 2: I/O ports at 0170 [size=8]
 Region 3: I/O ports at 0374 [size=1]
 Region 4: I/O ports at 1000 [size=16]
 00: 86 80 cb 24 05 00 80 02 02 8a 01 01 00 00 00 00
 10: 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00
 20: 01 10 00 00 00 00 00 00 00 00 00 00 86 80 04 34
 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00

I agree that we should have a generic way to do this rather than an
ia64-specific way.  In this case you have EFI, but the same thing
could happen with BIOS.

The firmware left the memory BAR at 0x24 cleared (0x), but it
also left the MEM bit in the command register disabled.  So it seems
like a Linux bug that we're trying to use that zero address from the
BAR.  If the firmware left the MEM or IO decode enable bit cleared,
why would we assume it put anything useful in the corresponding BARs?

What would break if we paid attention to the command register enables
in the PCI core and just cleared the resource flags for MEM BARs if
the MEM-decode bit was off, and those for IO BARs if the IO-decode bit
was off?

I don't know much of the ancient history here, so maybe there's a good
reason why this works the way it currently does.

Bjorn


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#686970: Inconsistent ipv6 handling of localhost in netbase and netcfg

2012-09-17 Thread Philipp Kern
On Mon, Sep 17, 2012 at 11:30:58PM +0200, Marco d'Itri wrote:
 On Sep 17, Philipp Kern pk...@debian.org wrote:
  True, but somehow I feel that freeze time is not the time to change this.
 I disagree, netcfg should be fixed. There is plenty of time to look at 
 any fallback, and even reverting the change if needed.
 This is 2012, Europe and Asia are out of IPv4 networks and we cannot 
 afford substandard IPv6 support anymore.

It affects services listening on localhost. Not services connected to the
internetwork. I disagree that there is plenty of time to look at any
fallback.

AIUI if one changes the listening host it will correctly listen on IPv4 and
IPv6 by default (if applicable).

If you are against substandard IPv6 support, you can test the upcoming d-i
daily. Possibly not the one of tonight but the next one. That should enable
IPv6 installation support for the first time.

Kind regards
Philipp Kern


signature.asc
Description: Digital signature


Bug#687925: diff for NMU version 1.4.20.2-10.1

2012-09-17 Thread Ritesh Raj Sarraf
Hello Arne / Ross,

This debian bug, 687925, is release critical for the OpenStack suite.
OpenStack uses iscsitarget as its storage sub-module.

As is explained in this bug report, the ietd daemon does not seem to be
releasing the sparse files that it exposes to the initiator, even after
the initiator has logged out the sessions.

This fix, in revision 478, is not part of the stable 1.4.20 branch.

Debian is in freeze now, and the iscsitarget version that will ship with
Wheezy is the 1.4.20.2 stable branch.

Is it safe to pick this one fix against the stable branch?


Thanks,
Ritesh


On Monday 17 September 2012 11:48 PM, Loic Dachary wrote:
 On 09/17/2012 07:41 PM, Ritesh Raj Sarraf wrote:
 On Monday 17 September 2012 10:28 PM, Ritesh Raj Sarraf wrote:
 On Monday 17 September 2012 08:41 PM, Loic Dachary wrote:
 The proposed NMU was based on the assumption that it would be easier to 
 fix the release critical bug first and 
 then advocate for other changes:

 Agreed. Just that the other bug, that the one in experimental fixes, is
 related to a kernel panic. It is still a minor bug though.

 I also would have preferred to see this fix in the 1.4.20 stable branch
 upstream. When I pulled in the bits yesterday, this fix was not in the
 stable branch. Have you asked this upstream?

 Hi,
 
 I'm not familiar with the iscsitarget upstream. The patch comes from this 
 upstream revision
 
 http://iscsitarget.svn.sourceforge.net/viewvc/iscsitarget?revision=478view=revision
 
 and the rationale for applying it is described in detail in
 
 https://launchpad.net/bugs/967984
 
 Does that answer your question ?
 
 Cheers
 


-- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System



signature.asc
Description: OpenPGP digital signature


Bug#686106: 1.2.3-4/ Actually caused by change in dak

2012-09-17 Thread Don Armstrong
Control: -1 tag confirmed pending


This change was caused by a change in dak; I'm communicating with
Ansgar about whether that change was intentional or not. [I will hack
around it temporarily too.]


Don Armstrong

-- 
You have many years to live--do things you will be proud to remember
when you are old.
 -- Shinka proverb. (John Brunner _Stand On Zanzibar_ p413)

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687307: [php-maint] Updating php5 to 5.4.4-5 broke FastCGI setup on my machine

2012-09-17 Thread Matthias Urlichs
Hi,

Christoph Anton Mitterer:

 1) So you have both, php5-cgi AND libapache2-mod-fcgid installed, right?

fastcgi, but yes.

 2) Then what happens is, the Handler from php5_cgi.conf overrides the
 way (whatever you did) to get .php files interpreted, right?

Right.

 3) Obviously, .php files are then neither interpreted by normal CGI,
 as Action directives are missing (and perhaps ScriptAlias and other
 things), right?
 
Right.

 Big problem though is, are the files then served as normal files by
 Apache?

Yes. The file gets served as-is, with a mimetype of
application/x-whatever-php.

If there's a database password / server secret in there,
$WORLD now knows it.

In an ideal world, your server cannot serve the include file
which has the actual secret sauce that's used by index.php.

Most people choose not to live in an ideal world. ;-)

-- 
-- Matthias Urlichs


signature.asc
Description: Digital signature


Bug#687925: diff for NMU version 1.4.20.2-10.1

2012-09-17 Thread Ross S. W. Walker
I have been so busy at my day job I have been negligent of the IET code base.

The bug was fixed in HEAD and not ported to 1.4.20 branch?

If we release 1.4.20.3 you can probably push that through as an update as it's 
bug-fix only?

Otherwise what you propose is less-stable that an official bug release.

-Ross


 -Original Message-
 From: Ritesh Raj Sarraf [mailto:r...@researchut.com] On Behalf Of Ritesh
 Raj Sarraf
 Sent: Monday, September 17, 2012 4:49 PM
 To: Arne Redlich; Ross S. W. Walker
 Cc: Loic Dachary; 687...@bugs.debian.org
 Subject: Re: Bug#687925: diff for NMU version 1.4.20.2-10.1
 
 Hello Arne / Ross,
 
 This debian bug, 687925, is release critical for the OpenStack suite.
 OpenStack uses iscsitarget as its storage sub-module.
 
 As is explained in this bug report, the ietd daemon does not seem to be
 releasing the sparse files that it exposes to the initiator, even after
 the initiator has logged out the sessions.
 
 This fix, in revision 478, is not part of the stable 1.4.20 branch.
 
 Debian is in freeze now, and the iscsitarget version that will ship with
 Wheezy is the 1.4.20.2 stable branch.
 
 Is it safe to pick this one fix against the stable branch?
 
 
 Thanks,
 Ritesh
 
 
 On Monday 17 September 2012 11:48 PM, Loic Dachary wrote:
  On 09/17/2012 07:41 PM, Ritesh Raj Sarraf wrote:
  On Monday 17 September 2012 10:28 PM, Ritesh Raj Sarraf wrote:
  On Monday 17 September 2012 08:41 PM, Loic Dachary wrote:
  The proposed NMU was based on the assumption that it would be
  easier to fix the release critical bug first and then advocate for
 other changes:
 
  Agreed. Just that the other bug, that the one in experimental fixes,
  is related to a kernel panic. It is still a minor bug though.
 
  I also would have preferred to see this fix in the 1.4.20 stable
  branch upstream. When I pulled in the bits yesterday, this fix was
  not in the stable branch. Have you asked this upstream?
 
  Hi,
 
  I'm not familiar with the iscsitarget upstream. The patch comes from
  this upstream revision
 
  http://iscsitarget.svn.sourceforge.net/viewvc/iscsitarget?revision=478
  view=revision
 
  and the rationale for applying it is described in detail in
 
  https://launchpad.net/bugs/967984
 
  Does that answer your question ?
 
  Cheers
 
 
 
 --
 Ritesh Raj Sarraf | http://people.debian.org/~rrs Debian - The Universal
 Operating System

__
This e-mail, and any attachments thereto, is intended only for use by
the addressee(s) named herein and may contain legally privileged
and/or confidential information. If you are not the intended recipient
of this e-mail, you are hereby notified that any dissemination,
distribution or copying of this e-mail, and any attachments thereto,
is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender and permanently delete the
original and any copy or printout thereof.


Bug#687797: RM: ipset-source -- NBS; not built anymore

2012-09-17 Thread Alexander Reichle-Schmehl
tags 687797 +moreinfo
thanks

Hi Arno!

* Arno Töll a...@debian.org [120916 00:11]:

 please remove the ipset-source binary package. It is not built anymore by any
 source package. It's original producer was the ipset source package, which 
 stopped
 doing so as of ipset (6.11-1) uploaded Sat, 04 Feb 2012 14:44:50 +0700.

Maybe I'm missing something, but I can find ipset-source only in stable:

tolimar@franck:~$ dak ls -S ipset-source 
ipset-source |2.5.0-1 |stable | all



Best regards.
  Alexander


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#685268: Your isc-dhcp 4.2.2.dfsg.1-5+wheezy1 upload

2012-09-17 Thread Michael Gilbert
On Fri, Sep 14, 2012 at 7:46 PM, Raphael Geissert wrote:
 Hi,

 I'm rejecting your isc-dhcp upload to the security archive for the following
 reasons:

 * Uploads must be coordinated and ACKed by the security team. Unless I'm
 missing something, it didn't happen this way.
 * Incorrect version numbering. For Wheezy the +debNuX schema will be used.
 * The testing-security queue is not functional. Any security update for
 wheezy, during its freeze, must go through testing-proposed-updates if it
 can't go through sid.

I just uploaded version 4.2.2.dfsg.1-5+deb70u1 to
testing-proposed-updates.  It contains only the security patches that
were included in version 4.2.4-2 uploaded to unstable a few days ago.

Please review and thanks in advance,
Mike


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687797: RM: ipset-source -- NBS; not built anymore

2012-09-17 Thread Arno Töll
Hi Alexander,

On 18.09.2012 00:02, Alexander Reichle-Schmehl wrote:
 Maybe I'm missing something, but I can find ipset-source only in stable:
 
 tolimar@franck:~$ dak ls -S ipset-source 
 ipset-source |2.5.0-1 |stable | all

there appears to be an arch:all package in Sid at that version. At
least, that's what [1] suggests. That said, I cannot find it in the
Packages.gz file on mirrors either. This looks weird to me, maybe you
can help me, to tell what's going on here.

Could it be, the packages.d.o site lists an obsolete arch:all package
from a Debian port?


[1] http://packages.debian.org/sid/ipset-source


-- 
with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D



signature.asc
Description: OpenPGP digital signature


Bug#687840: qbittorrent: Turns off after started

2012-09-17 Thread Cristian Greco
On Mon, 17 Sep 2012 14:18:00 +0300
Nikolaj Sa. ahoba...@gmail.com wrote:

 Hello Cristian,
 
 Now I have installed qbittorrent-dbg package but it still turns off. How
 make stacktrace
 I have checked my ram and I have enought to run.

Here is an example:

$ sudo aptitude install qbittorrent-dbg
[...]
$ gdb qbittorrent
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
[...]
Reading symbols from /usr/bin/qbittorrent...Reading symbols from 
/usr/lib/debug/usr/bin/qbittorrent...done.
done.
(gdb) set pagination 0
(gdb) thread apply all bt
(gdb) run
Starting program: /usr/bin/qbittorrent
[...]

If qbittorrent crashes, you should see the backtrace now.

Thanks,
--
Cristian Greco
GPG key ID: 0xCF4D32E4


signature.asc
Description: PGP signature


Bug#687920: RM: phy-spread -- ROM; Package es renamed in unstable (only!)

2012-09-17 Thread Alexander Reichle-Schmehl
tags 687920 +moreinfo
thanks

Hi Andreas!

* Andreas Tille ti...@debian.org [120917 08:49]:
[..]
 The package should *not* be removed from testing.  If this request is
 hard to fullfill with dak I do not see any problem to close this bug
 after the release.

Sorry, but package removals in unstable propagate to automatically to
testing, unless something in testing depends the removed package.  As
that doesn't seem to be the case here, I tag this bug moreinfo.  So it
will appear from our immediate removal radar.


Best regards,
  Alexander


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#631295: This is RC-quality

2012-09-17 Thread Michael Biebl
severity 631295 important
thanks

On 17.09.2012 21:27, Rolf Leggewie wrote:
 severity 631295 critical
 thanks
 
 I'm setting this to critical as given sufficiently large files the bug
 has the potential to crash other processes on the system or at least
 severely slow them down.  One can easily see that a 4GB file which is
 fairly common these days would crash either the gvfs daemon or other
 processes or both on one of the common netbooks.  This problem seems to
 be a flawed design decision made by upstream and it may not be possible
 to get a fix in time for wheezy.  Nonetheless, I think this is RC.  The

I don't think so. Downgrading to the original severity.



-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#687901: unable to use gtk2-engines

2012-09-17 Thread Joe
Boris,

Thanks a lot for pointing me to bug #685456, these two are really related.

On Mon, Sep 17, 2012 at 12:16 AM, Boris Pek tehnic...@yandex.ru wrote:

 Hi,

  There is no such package in repository (kde-config-gtk-style), at least
  at testing branch.

 You could help Release Team to make decision about including it into
 Wheezy:
 http://bugs.debian.org/685456

  Even if we will have such package, we should to put
  it to gtk2-engines-* dependencies list.

 This is bad idea. But gtk2-engines-oxygen may recommend
 kde-config-gtk-style
 I think.

 Best regards,
 Boris




-- 
Best regards,
  Sam Protsenko


Bug#619799: reproduction recipe

2012-09-17 Thread Shai Berger
found 619799 3.4.3-1
notfixed 619799 3.4.3-1
tags 619799 - unreproducible
thanks

This is definitely a BiDi issue. To reproduce:

In Evolution, 

0. Start composing a new message.

1. Type or paste this line of text:

אני כותב 12345 והכל נתקע

2. Go to the end of the text. Notice Hebrew is RTL, so the end of text is on 
the left side.

3. Press and hold the right arrow key to go back. Note how the cursor loops 
over the number, and never goes past it.

4. Hit the home key. Evolution freezes.

Thanks for your efforts,

Shai.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#685456: related bug

2012-09-17 Thread Sam Protsenko

Hi All,

I have created bug (#687901) that related with this one.

Regarding this bug: I think we need to get kde-gtk-config package to 
wheezy, because it's very inconvenient now to make GTK applications 
look'n'feel native for KDE w/o this package. I've shown workaround at 
687901 description, but it still ugly hack and user should not acting 
that way.


So I think as soon kde-gtk-config will be included to wheezy, #687901 
can be closed too.


--
Best regards,
  Sam Protsenko


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#685456: Freeze exception for kde-gtk-config

2012-09-17 Thread Boris Pek
Hi,

Updated package (version 3:2.1-1) was uploaded 11 days ago [1] and was built
fine [2]. And there are no new bug reports.

So unblock this version of package please.

While Wheezy is not released yet, some users already faced with problem that
kde-config-gtk-style is absent in testing [3].

Best regards,
Boris

[1] http://packages.qa.debian.org/k/kde-gtk-config.html
[2] https://buildd.debian.org/status/package.php?p=kde-gtk-config
[3] For example, see: http://bugs.debian.org/687901


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687996: sweethome3d: Please package version 3.6.

2012-09-17 Thread Bernhard Reiter
Package: sweethome3d
Version: 3.4+dfsg-1
Severity: wishlist

SH3D version 3.6 is out (since Sept 6, 2012) and has a couple of nice new
features, so I'd be grateful if the maintainer(s) could take the time to bump
the Debian package to that new upstream version.



-- System Information:
Debian Release: wheezy/sid
  APT prefers precise-updates
  APT policy: (500, 'precise-updates'), (500, 'precise-security'), (500, 
'precise-proposed'), (500, 'precise')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-31-generic (SMP w/2 CPU cores)
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages sweethome3d depends on:
ii  icedtea-netx-common 1.2-2ubuntu1.2
ii  java-wrappers   0.1.24
ii  java3ds-fileloader  1.2+dfsg-1
ii  libbatik-java   1.7.ubuntu-8ubuntu1
ii  libfreehep-graphicsio-svg-java  2.1.1-3
ii  libitext-java   2.1.7-2
ii  libjava3d-java  1.5.2+dfsg-5
ii  libsunflow-java 0.07.2.svn396+dfsg-9
ii  openjdk-6-jre   6b24-1.11.4-1ubuntu0.12.04.1
ii  sun-java6-bin   6.26-1natty1
ii  sun-java6-jre   6.26-1natty1

sweethome3d recommends no packages.

sweethome3d suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#684489: gksu-polkit: CVE-2011-0703

2012-09-17 Thread Moritz Mühlenhoff
On Sun, Sep 16, 2012 at 01:39:06PM +0200, Kai Lüke wrote:
 As far as I can see, the problem was not solved upstream:
 https://live.gnome.org/gksu
 http://anonscm.debian.org/gitweb/?p=users/kov/gksu-polkit.git;a=summary
 
 So either one is stepping in for a patch or it's ignored...(?) maybe wontfix

Since the Debian maintainer is also upstream, this rather calls for
removal from testing.

Cheers,
Moritz 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687223: [Pkg-xfce-devel] Bug#687223: lightdm: affects the LXDE desktop font settings?

2012-09-17 Thread Bob Bib
control: reassign -1 gdm3 3.4.1-2

Yves-Alexis Perez,
 Ok, I had confirmation that gdm3 is somehow responsible for that: gdm3
 runs gnome-session which sets the Xft.dpi property to 96. But it
 shouldn't make a difference since X.org default is 96 anyway, but maybe
 you change somehow, or nvidia binary driver overrides it, I have no
 idea.
 
 In any case, it's not a bug in lightdm. If you don't like the
 gdm3/gnome-session behavior, I'll let you reassign.

Well, running startx (configured to start LXDE session) without any desktop 
managers
results in the same environment as when LightDM is used.

Thus, I'm reassigning this to gdm3.

One more detail (it's the same in both cases, LightDM and GDM3):

$ xdpyinfo | grep dot
  resolution:86x84 dots per inch

Bug#687797: RM: ipset-source -- NBS; not built anymore

2012-09-17 Thread Alexander Reichle-Schmehl
reassing 687797 www.debian.org
tags 687797 -moreinfo
retitle 687797 ipset-source package listed for unstable although it has been 
removed
thanks

Hi Arno!

* Arno Töll a...@debian.org [120918 00:06]:

 there appears to be an arch:all package in Sid at that version. At
 least, that's what [1] suggests. That said, I cannot find it in the
 Packages.gz file on mirrors either. This looks weird to me, maybe you
 can help me, to tell what's going on here.
 
 Could it be, the packages.d.o site lists an obsolete arch:all package
 from a Debian port?
 
 [1] http://packages.debian.org/sid/ipset-source

Sorry, I have no idea, how packages.debian.org works, so I can't be of
help here.  Best thing I can do is to reassign this bug to the web team.


Best regards,
  Alexander


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#678289: (no subject)

2012-09-17 Thread Jonas Baggett
Hi,

The frequency of the crashes seems to highly depend on the sensivity of the 
mouse. Before I switched
to a very sensible mouse, it crashed once in a while when I inadvertently move 
a little the move
during a double-click, but after the switching, it crashes every 2 or 3 
double-clicks. Before I
did an upgrade to the 1.0 version, I had to end opening my folders with 
single-click + enter.
Just in case, here is the bug report I posted some time ago on sourceforge :
http://sourceforge.net/tracker/?func=detailatid=801864aid=3473087group_id=156956

Jonas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687997: linux-2.6: First line on boot gives me this message: ata1.00: failed to resume link (SControl 0) , but on the kernel log everithing is recognized right without errors so i think is a minor

2012-09-17 Thread giancarlo cuzzolin
Package: linux-2.6
Severity: minor



-- System Information:
Debian Release: 6.0.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687307: [php-maint] Updating php5 to 5.4.4-5 broke FastCGI setup on my machine

2012-09-17 Thread Christoph Anton Mitterer
On Tue, 2012-09-18 at 00:00 +0200, Matthias Urlichs wrote:
 fastcgi, but yes.
Well... we have to expect both causing troubles...


  Big problem though is, are the files then served as normal files by
  Apache?
 Yes. The file gets served as-is, with a mimetype of
 application/x-whatever-php.
This is really strange... I mean that it gets this MIME type.
Does anyone have an explanation for this? Cause I've always thought
Apache considers handlers and MIME types to be different classes.


 If there's a database password / server secret in there,
 $WORLD now knows it.
 In an ideal world, your server cannot serve the include file
 which has the actual secret sauce that's used by index.php.
 Most people choose not to live in an ideal world. ;-)
Of course,... the main reason why I opened the other bugs about the very
same problem, when MIME Types were dropped from mime-support.


Anyway... right now I have no real ideas how to go on, except perhaps
one...

Ondrej?


Chris.


smime.p7s
Description: S/MIME cryptographic signature


Bug#687968: [Debian-med-packaging] Bug#687968: New upstream version

2012-09-17 Thread Dmitrijs Ledkovs
On 17 September 2012 12:42, Alessandro -oggei- Ogier
alessandro.og...@ieo.eu wrote:

 Package: cufflinks
 Version: 1.3.0-2
 Severity: wishlist
 Tags: patch

 Hi team,

 here at European Institute of Oncology we managed to upgrade
 cufflinks packaging to 2.0.2 version (current stable), starting
 from your good work.
 Here is the changelog:

  * New upstream release
  * Adding libeigen3-dev to Build-Depends
  * Hardened build
  * Fixed autoconf stuff (eigen-related)
  * Parallel compile

 We attach the relevant patch, we would be glad if you could
 consider to adopt and release new version in debian.


Looks good, here is review of the proposed patch:

* All other patches are named something.patch, please follow suite
(minor nitpicking ;-) )
* the patch, ideally should have the template DEP3 tags filled in with
useful comments about the patch, please remove boiler plate (minor,
confusing)
* parallel build (important, mustfix):
- you should not export DEB_BUILD_OPTIONS, as this is variable for
users  buildd maintainers to export information for the
./debian/rules script
- you should simply pass --parallel option to the dh or dh_auto_build
(at your choise) and you can pass the maximum # ob jobs to the
--parallel option for safeguarding.
I do recommend not to hard-code limits, if I choose to do -j16 on my
single core machine, I am doing it for stress-testing reasons for
example =) and I don't want to be fooled by your packaging.

* debian/changelog (important, confusing):
- The version number you used is not suitable for target release 'unstable'.
- Unstable is frozen, you should target experimental  use appropriate
version number.
- Please use real maintainer name  working email address, e.g.
 -- Alessandro -oggei- Ogier alessandro.og...@ieo.eu Mon, 32 Sep
2012 25:31:63 +0200

(read dch about significant environmnet variables, e.g. DEBEMAIL  DEBFULLNAME)

Please fix above and resubmit. You can use mentors.debian.net to
submit debian source package, as it is easier to review. It allows
uploading the upstream source tarball.

I have not yet tried to download a source package nor build it.

Regards,

Dmitrijs.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#681426: NMU Uploaded to DELAYED/3

2012-09-17 Thread Paul Tagliamonte
Hello, Maintainer,

A NMU has been uploaded to DELAYED/3, please find the debdiff attached.
Please note the binary file changes are not representable, and dgetting
the source might be the best way to re-introduce the changes.

Thank you, Mika!

-- 
 .''`.  Paul Tagliamonte paul...@debian.org
: :'  : Proud Debian Developer
`. `'`  4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
 `- http://people.debian.org/~paultag
diff -Nru syslinux-themes-debian-11/debian/changelog 
syslinux-themes-debian-11/debian/changelog
--- syslinux-themes-debian-11/debian/changelog  2012-06-30 08:39:50.0 
-0400
+++ syslinux-themes-debian-11/debian/changelog  2012-09-16 09:13:39.0 
-0400
@@ -1,3 +1,13 @@
+syslinux-themes-debian (11-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix paths to extlinux themes, allowing systems using extlinux to boot.
+(Closes: #681426)
+Thanks to Frank Chung for the patches.
+  * Update wheezy artwork to the Joy theme.
+
+ -- Mika Pflüger deb...@mikapflueger.de  Sat, 15 Sep 2012 22:32:45 +0200
+
 syslinux-themes-debian (11-1) unstable; urgency=low
 
   * Using compression level 9 also for binary packages.
diff -Nru 
syslinux-themes-debian-11/debian/patches/fix-extlinux-cfg-wheezy-paths 
syslinux-themes-debian-11/debian/patches/fix-extlinux-cfg-wheezy-paths
--- syslinux-themes-debian-11/debian/patches/fix-extlinux-cfg-wheezy-paths  
1969-12-31 19:00:00.0 -0500
+++ syslinux-themes-debian-11/debian/patches/fix-extlinux-cfg-wheezy-paths  
2012-09-15 16:42:46.0 -0400
@@ -0,0 +1,62 @@
+Description: Fix paths for themes in extlinux configuration
+Author: Frank Chung chu...@gmail.com
+Reviewed-By: Mika Pflüger deb...@mikapflueger.de
+Bug-Debian: http://bugs.debian.org/681426
+
+--- syslinux-themes-debian-11.orig/themes/debian-wheezy/extlinux/other.cfg
 syslinux-themes-debian-11/themes/debian-wheezy/extlinux/other.cfg
+@@ -1,13 +1,13 @@
+ label hdt
+   menu label ^Hardware Detection Tool (HDT)
+-  kernel themes/debian-squeeze/hdt.c32
++  kernel themes/debian-wheezy/hdt.c32
+   text help
+HDT displays low-level information about the systems hardware.
+   endtext
+ 
+ label memtest
+   menu label ^Memory Failure Detection (memtest86+)
+-  linux themes/debian-squeeze/memtest.bin
++  linux themes/debian-wheezy/memtest.bin
+   text help
+   memtest86+ detects memory hardware failures.
+   endtext
+--- syslinux-themes-debian-11.orig/themes/debian-wheezy/extlinux/stdmenu.cfg
 syslinux-themes-debian-11/themes/debian-wheezy/extlinux/stdmenu.cfg
+@@ -1,4 +1,4 @@
+-menu background themes/debian-squeeze/splash.png
++menu background themes/debian-wheezy/splash.png
+ menu color title  * # *
+ menu color border * # # none
+ menu color sel* # #76a1d0ff *
+--- syslinux-themes-debian-11.orig/themes/debian-wheezy/extlinux/theme.cfg
 syslinux-themes-debian-11/themes/debian-wheezy/extlinux/theme.cfg
+@@ -1,4 +1,4 @@
+-include themes/debian-squeeze/menu.cfg
+-default themes/debian-squeeze/vesamenu.c32
++include themes/debian-wheezy/menu.cfg
++default themes/debian-wheezy/vesamenu.c32
+ prompt 0
+ timeout 50
+--- syslinux-themes-debian-11.orig/themes/debian-wheezy/extlinux/menu.cfg
 syslinux-themes-debian-11/themes/debian-wheezy/extlinux/menu.cfg
+@@ -2,16 +2,16 @@ menu hshift 0
+ menu width 82
+ 
+ menu title Boot menu
+-include themes/debian-squeeze/stdmenu.cfg
++include themes/debian-wheezy/stdmenu.cfg
+ include linux.cfg
+ include memdisk.cfg
+ include os-prober.cfg
+ menu separator
+ menu begin other
+   menu title Other options
+-  include themes/debian-squeeze/stdmenu.cfg
++  include themes/debian-wheezy/stdmenu.cfg
+   label mainmenu
+   menu label ^Back..
+   menu exit
+-  include themes/debian-squeeze/other.cfg
++  include themes/debian-wheezy/other.cfg
+ menu end
diff -Nru syslinux-themes-debian-11/debian/patches/series 
syslinux-themes-debian-11/debian/patches/series
--- syslinux-themes-debian-11/debian/patches/series 1969-12-31 
19:00:00.0 -0500
+++ syslinux-themes-debian-11/debian/patches/series 2012-09-15 
16:39:10.0 -0400
@@ -0,0 +1 @@
+fix-extlinux-cfg-wheezy-paths
diff -Nru syslinux-themes-debian-11/debian/source/include-binaries 
syslinux-themes-debian-11/debian/source/include-binaries
--- syslinux-themes-debian-11/debian/source/include-binaries1969-12-31 
19:00:00.0 -0500
+++ syslinux-themes-debian-11/debian/source/include-binaries2012-09-16 
09:23:24.0 -0400
@@ -0,0 +1,3 @@
+themes/debian-wheezy/extlinux/splash.png
+themes/debian-wheezy/isolinux-live/splash.png
+themes/debian-wheezy/syslinux-live/splash.png
Binary files 
/tmp/Kb1F4kNruc/syslinux-themes-debian-11/themes/debian-wheezy/extlinux/splash.png
 and 
/tmp/8bebUGTLQL/syslinux-themes-debian-11/themes/debian-wheezy/extlinux/splash.png
 differ
Binary files 

Bug#515793:

2012-09-17 Thread Sander van Zoest
It seems like there was some work done on creating a cgit debian package by
Stefan Bühler.
See http://stbuehler.de/debianserver/cgit.html


Bug#687673: (no subject)

2012-09-17 Thread Jonas Baggett
Would the upgrade to 1.0 still be unlikely to occur soon if there exists a bug 
that makes the 0.9
version almost unusable ? Or will the bug fixes of 1.0 be backported to the 0.9 
version ?
Because there is a bug that makes pcmanfm 0.9 crash when double-clicking a 
folder while moving the
mouse a little (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678289), and 
since I switched to a
very sensible mouse, it crashes every 2 or 3 double-clicks. So I was forced to 
upgrade to 1.0
because I just could not use pcmanfm 0.9 normally.

Jonas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687998: OptiPNG Palette Reduction Use-After-Free Vulnerability

2012-09-17 Thread Luciano Bello
Package: optipng
Severity: grave
Tags: security patch

The following vulnerability has been reported against optipng.
http://seclists.org/oss-sec/2012/q3/499

It's fixed in 0.7.3. The link include a patch too.

Cheers, luciano


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687968: [Debian-med-packaging] Bug#687968: Bug#687968: New upstream version

2012-09-17 Thread Charles Plessy
Le Tue, Sep 18, 2012 at 12:14:55AM +0100, Dmitrijs Ledkovs a écrit :
 
 Please fix above and resubmit. You can use mentors.debian.net to
 submit debian source package, as it is easier to review. It allows
 uploading the upstream source tarball.

Dear Alessandro,

alternatively, you can work directly from the Git repository where the source
package is managed.  The 2.0.2 source tree is already checked in there:

  http://anonscm.debian.org/gitweb/?p=debian-med/cufflinks.git;a=summary

Sending your patches against that tree will ease our work.

By the way, one of the reasons why we have not updated cufflinks in Unstable is
that version 2.0.2 is still marked beta on the upstream home page.  If you have
arguments that this version is anyway superior to version 1.3, or that both
should be distributed in parallel, please let us know.

Have a nice day,

-- 
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#682308: libcairo2: Slow tab switching in chromium w/ nvidia

2012-09-17 Thread Przemysław Pawełczyk
Final follow-up for my bug report: http://bugs.debian.org/682308
A bit late one. Sorry for that.

On Sat, Aug 4, 2012 at 12:35 AM, Przemysław Pawełczyk prze...@gmail.com wrote:
 Just a follow-up. According to the comment of Pierre-Loup A. Griffais at

 cairo: [nvidia-302] Slow chromium tab switching with cairo-1.12.0
 https://bugs.freedesktop.org/49534

 the issue should be resolved with the driver 304.30. Copy-pasting
 relevant part of debian changelog:

   - Fixed a problem where RENDER Glyphs operations would exhibit severe
 performance issues in certain cases, such as when used with gradients
 by Cairo and Chromium.

 It's not yet in unstable, but when it'll get there, I'll try to check
 this and confirm. Jindrich Makovicka already confirmed at the
 mentioned bugtracker that new driver fixes the problem.

Jesse Davis already confirmed that 304.37 worked fine for him.

I have:
1. installed libcairo2 1.12.2-2 from wheezy
   (was using custom build with a workaround before),
2. rechecked that my Chrome browsing experience is in no way bearable,
3. installed nvidia-* stuff in version 304.48-1 from sid,
4. noticed that browser is responsive again!

So it just works. No need to build your own libcairo2 and pin it anymore.

 The issue affects a lot of people, thus I think that the best solution
 would be the new nvidia driver hitting wheezy before it'll be released
 as a stable.

I believe that Wheezy will have nvidia stuff in 304.x version.

Regards.

P.S. Just in case, I'm CCing all participants of this bug discussion.

-- 
Przemysław 'Przemoc' Pawełczyk
http://przemoc.net/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687999: gmpc: Russian translation volume

2012-09-17 Thread Mikhail A Antonov
Package: gmpc
Version: 11.8.16-4
Severity: minor

Wrong translation.
Here volume means Sound volume, not Disk volume.
Screen: http://www.6rw.ru/pic/volume.png

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (660, 'testing'), (650, 'stable'), (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gmpc depends on:
ii  gmpc-data   11.8.16-4
ii  libc6   2.13-35
ii  libcairo2   1.12.2-2
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-02.32.3-1
ii  libgtk2.0-0 2.24.10-2
ii  libmpd1 0.20.0-1.1
ii  libpango1.0-0   1.30.0-1
ii  libsoup2.4-12.38.1-2
ii  libsqlite3-03.7.13-1
ii  libunique-1.0-0 1.1.6-4
ii  libx11-62:1.5.0-1
ii  libxml2 2.8.0+dfsg1-5
ii  zlib1g  1:1.2.7.dfsg-13

gmpc recommends no packages.

Versions of packages gmpc suggests:
pn  gmpc-plugins  none
pn  mpd   none

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688001: pekwm: infinite loop run on psuedocolor visual

2012-09-17 Thread Kevin Ryde
Package: pekwm
Version: 0.1.14-2
Severity: normal
File: /usr/bin/pekwm

If the screen's default visual is PseudoColor then pekwm goes into a
100% cpu infinite loop.  This happens for example with the xvfb test
server,

xvfb-run -a pekwm
= 100% cpu

Putting a debug build under gdb (xvfb-run -a gdb --args src/pekwm)
says it's in X11::PVisual::getShiftPrecFromMask() with mask==0 from the
PseudoColor and looping endlessly looking for shift and prec.

I don't know if pekwm is supposed to work on PseudoColor, StaticGray,
etc where red,green,blue masks are 0.  If it can't run I hoped it would
abort rather than go into an infloop.


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-486
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages pekwm depends on:
ii  libc6 2.13-10
ii  libgcc1   1:4.6.1-3
ii  libjpeg8  8d-1
ii  libpng12-01.2.49-3
ii  libstdc++64.6.1-3
ii  libx11-6  2:1.5.0-1
ii  libxext6  2:1.3.1-2
ii  libxft2   2.3.1-1
ii  libxinerama1  2:1.1.2-1
ii  libxpm4   1:3.5.10-1
ii  libxrandr22:1.3.2-2
ii  menu  2.1.46
ii  x11-utils 7.6+4

pekwm recommends no packages.

Versions of packages pekwm suggests:
pn  zenity  none

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688002: Ruby 1.9.x pkg-config file is not packaged

2012-09-17 Thread Timothy Pearson
Package: ruby1.9.1-dev
Version: 1.9.3.194-1

The ruby.pc (or ruby-1.9.pc, depending on exactly which Ruby sources you
look at) pkg-config information file that comes as part of the upstream
Ruby sources is not part of the ruby1.9.1-dev package.  This makes it
difficult for third party build systems to determine exactly where various
Ruby files are located.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688003: winbind4: libwbclient.so.0 no version information available

2012-09-17 Thread Matyashov Andrey
Package: winbind4
Version: 4.0.0~beta2+dfsg1-3
Severity: normal
Tags: upstream



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages winbind4 depends on:
ii  libbsd00.4.2-1
ii  libc6  2.13-35
ii  libgensec0 4.0.0~beta2+dfsg1-3
ii  libpam0g   1.1.3-7.1
ii  libpopt0   1.16-7
ii  libsamba-credentials0  4.0.0~beta2+dfsg1-3
ii  libsamba-hostconfig0   4.0.0~beta2+dfsg1-3
ii  libsamba-util0 4.0.0~beta2+dfsg1-3
ii  libtalloc2 2.0.7+git20120207-1
ii  libwbclient0   2:3.6.6-3
ii  samba4 4.0.0~beta2+dfsg1-3

winbind4 recommends no packages.

winbind4 suggests no packages.

-- no debconf information

root@sdc01:~# wbinfo -u
wbinfo: /usr/lib/x86_64-linux-gnu/libwbclient.so.0: no version information 
available (required by wbinfo)
Error looking up domain users


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688004: samba-tool: need display warning, if time is not correct

2012-09-17 Thread Matyashov Andrey
Package: samba4-common-bin
Version: 4.0.0~beta2+dfsg1-3
Severity: wishlist
Tags: upstream



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba4-common-bin depends on:
ii  python2.7.3~rc2-1
ii  python-samba  4.0.0~beta2+dfsg1-3
ii  samba-common  2:3.6.6-3

samba4-common-bin recommends no packages.

samba4-common-bin suggests no packages.

-- no debconf information


If the time on the domain controller and the current host is different, get an 
error connecting to ldap:

root@sdc:~# samba-tool domain join mydomain.net RODC -U admin
Finding a writeable DC for domain 'mydomain.net'
Found DC pdc.mydomain.net
Password for [MYDOMAIN\admin]:
Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER
Failed to connect to 'ldap://pdc.mydomain.net' with backend 'ldap': (null)
ERROR(ldb): uncaught exception - None
  File /usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py, line 160, 
in _run
return self.run(*args, **kwargs)
  File /usr/lib/python2.7/dist-packages/samba/netcmd/domain.py, line 190, in 
run
machinepass=machinepass, use_ntvfs=use_ntvfs)
  File /usr/lib/python2.7/dist-packages/samba/join.py, line 890, in join_RODC
machinepass, use_ntvfs)
  File /usr/lib/python2.7/dist-packages/samba/join.py, line 70, in __init__
credentials=ctx.creds, lp=ctx.lp)
  File /usr/lib/python2.7/dist-packages/samba/samdb.py, line 56, in __init__
options=options)
  File /usr/lib/python2.7/dist-packages/samba/__init__.py, line 114, in 
__init__
self.connect(url, flags, options)
  File /usr/lib/python2.7/dist-packages/samba/samdb.py, line 71, in connect
options=options)


I would like instead to see a warning, may time not correct.

Thanks! ;-)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687307: [php-maint] Updating php5 to 5.4.4-5 broke FastCGI setup on my machine

2012-09-17 Thread Konstantin Khomoutov
On Mon, Sep 17, 2012 at 11:30:46PM +0200, Christoph Anton Mitterer wrote:

[...]
 Questions for those who are affected by this bug:
 1) So you have both, php5-cgi AND libapache2-mod-fcgid installed, right?
Yes.

 2) Then what happens is, the Handler from php5_cgi.conf overrides the
 way (whatever you did) to get .php files interpreted, right?
Yes, but not that straightforward: libapache2-mod-fcgid's configuration
file only installs this snippet:

IfModule mod_fcgid.c
  AddHandlerfcgid-script .fcgi
  FcgidConnectTimeout 20
/IfModule

Obviously, at this point there's no conflict with php5_cgi.conf settings
yet.

So to get it interpret PHP scripts one needs to provide another
directory.  Personally, I read a couple of random HOWTOs on the topic,
and all they happened to suggest adding

IfModule mod_fcgid.c
  AddHandlerfcgid-script .php
  FcgidWrapperScript /usr/bin/php5-cgi .php
/IfModule

with minor variations, so I did this.

Now the newly introduced settings from php5_cgi.conf override this
snippet (if it's placed in a file under /etc/apache2/conf.d -- dunno if
that matters or not).

And now I'm a bit lost as
1) You have clearly demonstrated the snippet like the one I used
   to enable FastCGI for PHP scripts is broken security-wise anyway
   (I dunno why -- never thought it could try to interpret .php.jpeg!);
2) Looks like changing the handler for PHP files (to fcgid-script)
   in the newly provided snippet in php5_cgi.conf is the right
   thing anyway to setup FastCGI for PHP so I don't really see a
   conflict there, it just has to be properly documented somewhere --
   in the libapache2-mod-fcgid docs supposedly, probably with
   appropriate hints in php5-common (or whatever).

 3) Obviously, .php files are then neither interpreted by normal CGI,
 as Action directives are missing (and perhaps ScriptAlias and other
 things), right?
Seems to be the case.

 So we definitely get broken services (which by itself may cause security
 issues - but no one could really ever cannot cover these kinds of
 issues).
 Big problem though is, are the files then served as normal files by
 Apache?
Yes.
In my case, Apache did not set any Content-type HTTP header field for
these files when serving them (checked using the Live HTTP Headers
extensions for FireFox).

I'm not sure, but may be it's possible to not only set a handler for PHP
script files, but also provide some null implementation for this
handler by default?

Something like

FilesMatch .+\.ph(p[345]?|t|tml)$
SetHandler application/x-httpd-php
/FilesMatch

AddHandler application/x-httpd-php null

From [1], I gather it's not really possible, but I'm not an expert in
this field.

1. http://httpd.apache.org/docs/2.2/handler.html


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688005: unblock: poppler-data/0.4.5-10

2012-09-17 Thread Hideki Yamane
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock


Hi,

 Please unblock poppler-data package since it significantly reduce memory
 usage when it is installed. It would help CJK desktop users who uses PCs
 that has not enough memory.




diff -Nru poppler-data-0.4.5/debian/changelog 
poppler-data-0.4.5/debian/changelog
--- poppler-data-0.4.5/debian/changelog 2012-06-21 09:11:09.0 +0900
+++ poppler-data-0.4.5/debian/changelog 2012-08-04 11:46:26.0 +0900
@@ -1,3 +1,19 @@
+poppler-data (0.4.5-10) unstable; urgency=low
+
+  * debian/rules
+- use default xz compression rate is better result than -z9 -Sextream
+  (Closes: #679774) 
+
+ -- Hideki Yamane henr...@debian.org  Sat, 04 Aug 2012 11:46:18 +0900
+
+poppler-data (0.4.5-9) unstable; urgency=low
+
+  * debian/control
+- improve description (Closes: #674569)
+  Thanks to Justin B Rye j...@edlug.org.uk for help.
+
+ -- Hideki Yamane henr...@debian.org  Thu, 02 Aug 2012 21:10:56 +0900
+
 poppler-data (0.4.5-8) unstable; urgency=low
 
   * debian/rules
diff -Nru poppler-data-0.4.5/debian/control poppler-data-0.4.5/debian/control
--- poppler-data-0.4.5/debian/control   2012-06-21 06:52:33.0 +0900
+++ poppler-data-0.4.5/debian/control   2012-08-03 14:42:39.0 +0900
@@ -31,10 +31,11 @@
   fonts-japanese-gothic | fonts-ipafont-gothic, 
   fonts-arphic-ukai, fonts-arphic-uming, fonts-unfonts-core
 Enhances: ghostscript
-Description: Encoding data for the poppler PDF rendering library
- This package contains the encoding data needed to view some PDF documents 
- with libpoppler, and also that was provided by cmap-adobe-{gb1,cns1,korea1,
- japan1,japan2} and gs-cjk-resource pacakges.
+Description: encoding data for the poppler PDF rendering library
+ This package provides the CMap tables required to display PDF documents
+ containing CJK characters with libpoppler. They were previously provided
+ by the packages cmap-adobe-{cns1,gb1,japan1,japan2,korea1} and
+ gs-cjk-resource.
  .
- If CJK users want to view/create PDF files that contain their language, 
- this package will help you.
+ Users who want to view or create PDF files in Chinese, Japanese, or
+ Korean without embedded fonts will need this package.
diff -Nru poppler-data-0.4.5/debian/rules poppler-data-0.4.5/debian/rules
--- poppler-data-0.4.5/debian/rules 2012-06-01 10:02:30.0 +0900
+++ poppler-data-0.4.5/debian/rules 2012-08-04 11:44:03.0 +0900
@@ -11,4 +11,4 @@
install -m644 $(CURDIR)/ai0/CMap/* 
$(CURDIR)/debian/poppler-data/usr/share/poppler/cMap/
 
 override_dh_builddeb:
-   dh_builddeb -- -Zxz -Sextreme -z9
+   dh_builddeb -- -Zxz


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687967: darkstat: No start when IPv6 disabled

2012-09-17 Thread Emil Mikulic
On Tue, Sep 18, 2012 at 2:59 AM, nutzteil nutzt...@web.de wrote:

 I have ipv6 disabled via kernel-commandline:
  ipv6.disable=1

 With this setting darkstat does not start:
 
 # darkstat -i br0 --chroot /var/lib/darkstat --import darkstat.db --export
 darkstat.db
 14801: error: http_listen_one(::, 667): socket(10 (AF_INET6), 1, 6)
 failed: Address family not supported by protocol


This should be fixed by:
http://unix4lyfe.org/gitweb/darkstat/commitdiff/2149b21ad285a7f4f9e7c2fdf214c5d365992a3d

Unfortunately, I haven't done a release since. :(


Bug#688006: unblock: krb5-sync/2.2-3

2012-09-17 Thread Russ Allbery
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package krb5-sync for the fix to RC bug #687346.
Changelog:

  * Apply upstream commit to silently ignore password changes with a NULL
password, only new keys.  This represents a key randomization, such as
from addprinc -randkey, which is outside the synchronization scope of
this package.  Without this change, the plugin would segfault on that
operation.  (Closes: #687346)

The debdiff adds a debian patch, the effect of which is to apply the
following patch:

--- a/plugin/mit.c
+++ b/plugin/mit.c
@@ -81,6 +81,15 @@ chpass(krb5_context ctx, kadm5_hook_modinfo *data, int stage,
 size_t length;
 int status = 0;
 
+/*
+ * If password is NULL, we have a new key set but no password (meaning
+ * this is an operation such as addprinc -randkey).  We can't do anything
+ * without a password, so ignore these cases.
+ */
+if (password == NULL)
+return 0;
+
+/* Dispatch to the appropriate function. */
 length = strlen(password);
 if (stage == KADM5_HOOK_STAGE_PRECOMMIT)
 status = pwupdate_precommit_password(data, princ, password, length,

unblock krb5-sync/2.2-3

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687853: linux-image-3.2.0-3-amd64: Fan speed freezes, and hotkeys stop working. Laptop Lenovo Thinkpad L512 (2597AB2)

2012-09-17 Thread Ben Hutchings
On Mon, 2012-09-17 at 11:15 +0400, evol wrote:
 16.09.2012 22:12, Ben Hutchings пишет:
  On Sun, 2012-09-16 at 21:32 +0400, Igor wrote:
[...]
  Please test withou the fglrx driver installed.
 
  Ben.
 
 
 without fglrx too most
 thus not what information it is not displayed in syslog

I don't understand what you're saying.  If you uninstall fglrx and
reboot, does the same problem happen again?

Ben.

-- 
Ben Hutchings
The world is coming to an end.  Please log off.


signature.asc
Description: This is a digitally signed message part


Bug#540701: Questions and patches: new official Debian package for wbar

2012-09-17 Thread Yadickson Soto
Hello

That's all for now
Check the new release 2.3.2

Regards


2012/9/8 Markus Koschany a...@gambaru.de:
 On 07.09.2012 05:01, Rodolfo Granata wrote:
 Hey Markus,

 * Added wbar.png back
 * Updated make-conf.sh to take multiple search directories
 * I wanna keep the font even though it may not exist, if I'm not
 mistaken, wbar will start anyway and it will get a default if it does.
 * Added your latest patches.
 * removed the debian dir.

 TODO: promote wbar-config.


 Hi Rodolfo,


 thank you! I think i'm really done now. We need a new release. :)

 I've updated the README and added some paragraphs about wbar-config and
 make-conf.sh and removed some old lines and cleaned up a little. Patch
 is attached, let me know what you think about it.

 Forget about my suggestion to reintroduce the old icons. Although i know
 about the original authors now, it is much easier if i handle a default
 configuration by myself within the Debian system. It also makes the
 source package of wbar smaller and easier to maintain if you don't have
 to bother with external ressources.

 I've checked the fonts again and indeed, it seems wbar will start anyway
 even without a correct font path. Done!

 I've discovered another typo in wbar-config (licence - license) and the
 version of wbar-config should be updated to 2.3.2 for your next release)

 And it was necessary to patch Makefile.am in the pixmaps folder to copy
 wbar.png to the right place again. Patch is attached.

 Last but not least: The COPYING file states that Wbar is licensed under
 the GPL-2+ (the + is important) which means you grant everyone the right
 to redistribute and modify wbar either under the GPL-2 or any later
 version. I personally think that's a good idea, but i wanted to ask
 again if that's your intention. If yes, great, no changes are needed but
 i guess you should change the license on the official homepage, too.

 That's all for now

 Regards
 Markus





-- 
Ing. Yadickson Soto
Linux User #497718


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688007: monkey: Fails to drop supplemental groups when lowering privileges

2012-09-17 Thread John Lightsey
Package: monkey
Version: 0.9.3-1
Severity: grave
Tags: security
Justification: user security hole

Monkey webserver fails to drop supplemental groups when lowering privileges.
This allows any local user on the system to read any fine that root's
supplemental
groups can access. Monkey does perform a filesystem access check to make sure
that its EUID/EGID can access the target file, but this check is subject to
TOCTOU flaws.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688008: monkey: CGI scripts executed without dropping RUID/RGID root

2012-09-17 Thread John Lightsey
Package: monkey
Version: 0.9.3-1
Severity: grave
Tags: security
Justification: user security hole

The Monkey webserver retains RUID/RGID root so that it can regain root as
needed to perform privileged operations. Unfortunately, monkey does not drop
RUID/RGID root before executing CGI scripts. This allows any user with write
access to a cgi-bin directory to gain local root. It would also allow a remote
attacker to do the same in combination with a CGI/PHP script that has any
remote code execution bug.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688009: monkey: All requests generate segfaults on AMD64 systems

2012-09-17 Thread John Lightsey
Package: monkey
Version: 0.9.3-1
Severity: important

In testing the 0.9.3-1 monkey package on an AMD64 KVM VM, all requests to the
server resulted in segfaults in the thread trying to handle the request. A 386
test VM did not have the same problem. The segfault occurs when
m_build_buffer_from_buffer() calls vsnprintf() while building up the response
headers.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688010: dh_sphinxdoc: to recursively detect docs in /usr/share/{packagename}

2012-09-17 Thread Dmitry Smirnov
Package: sphinx-common
Version: 1.1.3+dfsg-4
Severity: wishlist

Dear Jakub,

Thank you for a lovely dh_sphinxdoc helper that you've made.

Let me share one little improvement suggestion with you.

Recently I was packaging a software installing different sphinx-generated 
translations to /usr/share/{packagename}/help/{cs,en,fr,ja}

I've noticed that even if I pass usr/share/{packagename}/help as argument to 
dh_sphinxdoc it can't find documentation so I have to pass 
usr/share/{packagename}/help/{lang} as many times as I have translations to 
process.

At the moment to avoid passing multiple arguments to dh_sphinxdoc I've changed 
location for docs files to usr/share/doc/{packagename}/help where 
dh_sphinxdoc found all the translations automatically without any additional 
arguments.

Perhaps you would agree that it is a bit inconvenient to change docs install 
location together with introducing a compatibility symlink just to overcome 
this little limitation in dh_sphinxdoc.

I hope it will be relatively easy to add support for recursive processing of 
usr/share/{packagename} locations (if given as argument to dh_sphinxdoc), 
similar to how usr/share/doc/{packagename} locations are being scanned.

Thank you.

Regards,
Dmitry.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688011: fcitx-m17n : no pinyin input window

2012-09-17 Thread Jos van Wolput
Package: fcitx-m17n
Version: 0.1.2-1
Severity: normal

System Information:
Debian Release: wheezy/sid
Architecture: amd64 (x86_64)
Kernel: Linux 3.5.0-4.dmz.3-liquorix-amd64
Input method: fcitx version 4.2.5

In package fcitx-m17n the pinyin input methods zh-pinyin, zh-py,
zh-tonepy, zh-quick
can't be used, they don't show any input window.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687990: logcheck-database: bind: updating zone...PTR and signer...approved

2012-09-17 Thread Paul Muster
Update:

 (1) please change
 
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: client
 [.:[:xdigit:]]+#[[:digit:]]+: updating zone '[-._[:alnum:]]+/IN':
 (adding an RR|deleting rrset) at '[._[:alnum:]-]+' A$
 
 to
 
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: client
 [.:[:xdigit:]]+#[[:digit:]]+: updating zone '[-._[:alnum:]]+/IN':
 (adding an RR|deleting rrset|deleting an RR) at '[._[:alnum:]-]+' (A|PTR|TXT)$


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688007: CVE

2012-09-17 Thread Henri Salo
Does this issue have CVE-identifier?

- Henri Salo


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688008: CVE

2012-09-17 Thread Henri Salo
Does this issue have CVE-identifier?

- Henri Salo


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#685679: mpg321: New buffered output feature makes mpg321 unusable

2012-09-17 Thread Bart Martens
Hello Nanakos,

I tried the -b option and I can confirm that it is easy to reproduce at least
one of the described problems with version 0.3.2-1.1.

   mpg321 -b 100 song.mp3

The program almost immediately ended with exit code 0 without playing the song.

In my opinion the severity of this bug is at least serious.

I see that mpg321 already had the -b option in version 0.2.12-1, and I cannot
reproduce the problem with that version.

Disabling the -b option seems a good idea at first sight.  The program seems to
be usable without -b option.

I suggest to write a warning to standard error about the disabled -b option
when the -b option is tried, so that command line users immediately see that
the -b option is disabled.

I suggest to update the usage() function in mpg321.c to hide the -b option or
to mention that -b is disabled.

I suggest to alert the maintainers of packages in Debian using mpg321 so that
they can verify whether disabling the -b option can cause problems in their
packages.

Regards,

Bart Martens


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#688011: [Pkg-ime-devel] Bug#688011: fcitx-m17n : no pinyin input window

2012-09-17 Thread YunQiang Su
can it work with fcitx 4.2.4.1?

On Tue, Sep 18, 2012 at 12:26 PM, Jos van Wolput
j.van.wol...@onsneteindhoven.nl wrote:
 Package: fcitx-m17n
 Version: 0.1.2-1
 Severity: normal

 System Information:
 Debian Release: wheezy/sid
 Architecture: amd64 (x86_64)
 Kernel: Linux 3.5.0-4.dmz.3-liquorix-amd64
 Input method: fcitx version 4.2.5

 In package fcitx-m17n the pinyin input methods zh-pinyin, zh-py,
 zh-tonepy, zh-quick
 can't be used, they don't show any input window.

 ___
 Pkg-ime-devel mailing list
 pkg-ime-de...@lists.alioth.debian.org
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-ime-devel



-- 
YunQiang Su


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687991: [stegfs] stegfs is a Fuse based file system which provides absolute security

2012-09-17 Thread Bart Martens
Hi,

Is this a request for packaging (RFP) or is it an intent to package (ITP) ?
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687991

Regards,

Bart Martens


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687885: opendnssec: diff for NMU version 1:1.3.9-1.1

2012-09-17 Thread Salvatore Bonaccorso
tags 687885 + patch
thanks

Hi!

(note: severity should also be reaised again to serious)

The attached patch should do it. It is done like David Pr??votdid it
for blackbox in #687859.

Hope that helps!

Regards,
Salvatore
diff -Nru opendnssec-1.3.9/debian/changelog opendnssec-1.3.9/debian/changelog
--- opendnssec-1.3.9/debian/changelog	2012-06-28 11:27:28.0 +0200
+++ opendnssec-1.3.9/debian/changelog	2012-09-18 07:03:20.0 +0200
@@ -1,3 +1,14 @@
+opendnssec (1:1.3.9-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Replace documentation directory with symlink.
+Replace the documentation directory for opendnssec with a symlink. When
+updating from Squeeze to Wheezy /usr/share/doc/opendnssec resulted in an
+empty directory with no copyright file violating Debian policy 10.5.
+(Closes: #687885)
+
+ -- Salvatore Bonaccorso car...@debian.org  Tue, 18 Sep 2012 07:03:11 +0200
+
 opendnssec (1:1.3.9-1) unstable; urgency=low
 
   * Imported Upstream version 1.3.9
diff -Nru opendnssec-1.3.9/debian/opendnssec.postinst opendnssec-1.3.9/debian/opendnssec.postinst
--- opendnssec-1.3.9/debian/opendnssec.postinst	1970-01-01 01:00:00.0 +0100
+++ opendnssec-1.3.9/debian/opendnssec.postinst	2012-09-18 07:03:20.0 +0200
@@ -0,0 +1,18 @@
+#!/bin/sh
+
+set -e
+
+# Replace documentation directory with symlink
+docdir=/usr/share/doc/opendnssec
+if [ -d $docdir ]  [ ! -L $docdir ]; then
+if rmdir $docdir 2/dev/null; then
+ln -sf opendnssec-common $docdir
+fi
+fi
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0


signature.asc
Description: Digital signature


Bug#688012: anjuta project wizard skips to summary page

2012-09-17 Thread Pari Kannan
Package: anjuta
Version: 2:2.32.0.0-5
Severity: normal

Start anjuta. File - New Project - [C, GTK+] - Forward. Hitting Forward
immediately jumps to the summary page of the wizard. Intermediate steps that
take additional input about project (name, etc) are completely skipped. Same
behavior for all project types.



-- System Information:
Debian Release: 6.0.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages anjuta depends on:
ii  anjuta-common  2:2.32.0.0-5  A GNOME development IDE, for C/C++
ii  libanjuta0 2:2.32.0.0-5  A GNOME development IDE, for C/C++
ii  libapr11.4.2-6+squeeze4  The Apache Portable Runtime Librar
ii  libc6  2.11.3-3  Embedded GNU C Library: Shared lib
ii  libcairo2  1.8.10-6  The Cairo 2D vector graphics libra
ii  libdevhelp-1-1 2.30.1-1  Library providing documentation br
ii  libgcc11:4.4.5-8 GCC support library
ii  libgconf2-42.28.1-6  GNOME configuration database syste
ii  libgda-4.0-4   4.0.12-1  data abstraction library based on 
ii  libgdl-1-3 2.30.1-1  GNOME DevTool libraries
ii  libgladeui-1-9 3.6.7-1+b1GTK+ User Interface Build core lib
ii  libglib2.0-0   2.24.2-1  The GLib library of C routines
ii  libgraph4  2.26.3-5  rich set of graph drawing tools - 
ii  libgtk2.0-02.20.1-2  The GTK+ graphical user interface 
ii  libgtksourceview2. 2.10.4-1  shared libraries for the GTK+ synt
ii  libgvc52.26.3-5  rich set of graph drawing tools - 
ii  libpango1.0-0  1.28.3-1+squeeze2 Layout and rendering of internatio
ii  libstdc++6 4.4.5-8   The GNU Standard C++ Library v3
ii  libsvn11.6.12dfsg-6  Shared libraries used by Subversio
ii  libunique-1.0-01.1.6-1.1 Library for writing single instanc
ii  libvte91:0.24.3-3Terminal emulator widget for GTK+ 
ii  libwebkit-1.0-21.2.7-0+squeeze1  Web content engine library for Gtk
ii  libxml22.7.8.dfsg-2+squeeze5 GNOME XML library
ii  libxslt1.1 1.1.26-6  XSLT 1.0 processing library - runt

Versions of packages anjuta recommends:
ii  autoconf 2.67-2  automatic configure script builder
ii  autogen  1:5.10-1.1  automated text file generator
ii  automake 1:1.11.1-1  A tool for generating GNU Standard
ii  g++  4:4.4.5-1   The GNU C++ compiler
ii  gcc  4:4.4.5-1   The GNU C compiler
ii  gdb  7.0.1-2+b1  The GNU Debugger
ii  intltool 0.41.1-1Utility scripts for internationali
ii  liblocale-gettext-perl   1.05-6  Using libc functions for internati
ii  libtool  2.2.6b-2Generic library support script
ii  make 3.81-8  An utility for Directing compilati
ii  yelp 2.30.1+webkit-1 Help browser for GNOME

Versions of packages anjuta suggests:
pn  glade-gnome   none (no description available)
ii  libgtk2.0-dev 2.20.1-2   Development files for the GTK+ lib
pn  libgtkmm2.0-dev   none (no description available)

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#686106: dealing with slash appended to version number

2012-09-17 Thread Michael Tokarev
Actually it is even more, well, interesting.

For example, such slash appending affected one of my
bugs, 686524, -- after found 686524 foo control message
the list of versions this bug if fond it has grow to one
more version, foo/.

So I tried to remove that version from the list,
sending a natural (to me) control message:

 notfound 686524 foo/
 thanks

Here's the reply from control bot:

--- begin ---
Processing commands for cont...@bugs.debian.org:

 notfound 686524 1.1.2+dfsg-1/
 thanks
Stopping processing here.

No commands successfully parsed; sending the help text(s).
Sending instructions for cont...@bugs.debian.org in separate message.
--- end ---

So, it isn't possible to remove such tagging, and
more, a valid command (but maybe with a bogus version
number) is int parsed correctly.

Thanks,

/mjt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#687920: RM: phy-spread -- ROM; Package es renamed in unstable (only!)

2012-09-17 Thread Andreas Tille
Hi,

is there any better way to rename a package which makes ftpmasters work
more easy?

Kind regards

   Andreas.

On Tue, Sep 18, 2012 at 12:11:39AM +0200, Alexander Reichle-Schmehl wrote:
 tags 687920 +moreinfo
 thanks
 
 Hi Andreas!
 
 * Andreas Tille ti...@debian.org [120917 08:49]:
 [..]
  The package should *not* be removed from testing.  If this request is
  hard to fullfill with dak I do not see any problem to close this bug
  after the release.
 
 Sorry, but package removals in unstable propagate to automatically to
 testing, unless something in testing depends the removed package.  As
 that doesn't seem to be the case here, I tag this bug moreinfo.  So it
 will appear from our immediate removal radar.
 
 
 Best regards,
   Alexander
 
 

-- 
http://fam-tille.de


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



<    1   2   3