Bug#700691: amarok: Amarok initial Full Collection Scan is removing tracks from albums (marked as duplicates) leaving album incomplete

[Daniel Phillips]

Package: amarok
Version: 2.7.0-1
Severity: normal

Dear Maintainer,

Problem: Full Collection Scan causes many unique id duplicates when on checking 
the songs, they are of different albums and are required for that album.
Expected Behavior: No duplicate detection on import or options to prevent 
remove of tracks from Amarok database

Case: I have a collection of around 1 songs and I keep many albums from the 
same artist that may have a duplicate in an alternative album by the same 
artist. While I am happy to have a form of duplicate detection, I find that 
this method is causing a lot of extra work as I have to use amarok aftagger to 
make corrections. This would be manageable for one of two tracks, but I have 
too many to correct manually. None of them are "genuine" duplicates. An end 
user would not normally want to spend time on energy changing unique id tags 
that amarok has incorrectly tagged during a scan. 

Kind Regards,

Daniel Phillips

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_ZA.UTF-8, LC_CTYPE=en_ZA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages amarok depends on:
ii  amarok-common 2.7.0-1
ii  amarok-utils  2.7.0-1
ii  kde-runtime   4:4.8.4-2
ii  libaio1   0.3.109-3
ii  libavcodec-extra-53   6:0.8.5-1
ii  libavformat53 6:0.8.5-1
ii  libavutil51   6:0.8.5-1
ii  libc6 2.13-38
ii  libcurl3-gnutls   7.29.0-1
ii  libgcc1   1:4.7.2-5
ii  libgcrypt11   1.5.0-3
ii  libgdk-pixbuf2.0-02.26.1-1
ii  libglib2.0-0  2.33.12+really2.32.4-5
ii  libgpod4  0.8.2-7
ii  libkcmutils4  4:4.8.4-4
ii  libkdecore5   4:4.8.4-4
ii  libkdeui5 4:4.8.4-4
ii  libkdewebkit5 4:4.8.4-4
ii  libkdnssd44:4.8.4-4
ii  libkfile4 4:4.8.4-4
ii  libkio5   4:4.8.4-4
ii  libknewstuff3-4   4:4.8.4-4
ii  liblastfm11.0.3-1
ii  libloudmouth1-0   1.4.3-9
ii  libmtp9   1.1.3-35-g0ece104-4
ii  libmysqlclient18  5.5.29+dfsg-1
ii  libofa0   0.9.3-5
ii  libphonon44:4.6.0.0-3
ii  libplasma34:4.8.4-4
ii  libqjson0 0.7.1-7
ii  libqt4-dbus   4:4.8.2+dfsg-11
ii  libqt4-network4:4.8.2+dfsg-11
ii  libqt4-script 4:4.8.2+dfsg-11
ii  libqt4-sql4:4.8.2+dfsg-11
ii  libqt4-svg4:4.8.2+dfsg-11
ii  libqt4-xml4:4.8.2+dfsg-11
ii  libqtcore44:4.8.2+dfsg-11
ii  libqtgui4 4:4.8.2+dfsg-11
ii  libqtscript4-core 0.2.0-1
ii  libqtscript4-gui  0.2.0-1
ii  libqtscript4-network  0.2.0-1
ii  libqtscript4-sql  0.2.0-1
ii  libqtscript4-uitools  0.2.0-1
ii  libqtscript4-xml  0.2.0-1
ii  libqtwebkit4  2.2.1-5
ii  libsolid4 4:4.8.4-4
ii  libstdc++64.7.2-5
ii  libtag-extras11.0.1-3
ii  libtag1c2a1.8-1
ii  libthreadweaver4  4:4.8.4-4
ii  libx11-6  2:1.5.0-1
ii  libxml2   2.8.0+dfsg1-7
ii  phonon4:4.6.0.0-3
ii  zlib1g1:1.2.7.dfsg-13

Versions of packages amarok recommends:
pn  clamz  
ii  kdemultimedia-kio-plugins  4:4.8.4-2

Versions of packages amarok suggests:
pn  amarok-doc 
ii  libqt4-sql-mysql   4:4.8.2+dfsg-11
pn  libqt4-sql-psql
ii  libqt4-sql-sqlite  4:4.8.2+dfsg-11
pn  moodbar

Versions of packages amarok-common depends on:
ii  perl  5.14.2-18

amarok-common recommends no packages.

Versions of packages amarok is related to:
ii  phonon-backend-gstreamer [phonon-backend]  4:4.6.0.0-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#676895: RFA: libvncserver -- API to write one's own vnc server

[Prach Pongpanich]

Hi Luca,

I will help to maintain libvncserver packages (co-maintainer).

I have prepared a patch to fix 671790

Regrads,

Prach

-- 
ปรัชญ์ พงษ์พานิช

Prach Pongpanich

http://prach-public.blogspot.com

Bug#700669: pyrad: use only CVE-2013-0294

[Salvatore Bonaccorso]

Control: retitle -1 pyrad: CVE-2013-0294: potentially predictable password 
hashing

Hi

CVE-2013-0295 was rejected and only CVE-2013-0294 to be used for both
issues. 

 http://marc.info/?l=oss-security&m=136099660015589&w=2

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#686447: ZFS on Linux and native ZFS on BSD

[Aron Xu]

Dear fellow developers,

It has been quite some time since native ZFS on Linux (zfsonlinux, or
ZoL) enters release candidate testing phrase, and a team has been
founded recently for the work in Debian (pkg-zfsonlinux). Here we have
several issues to be confirmed and coordinated between kBSD and ZoL,
so that we can work for the desirable direction.

1. Naming of the packages
In kFreeBSD, src:zfsutils produces libnvpair1{,-udeb},
libumem1{,-udeb}, libuutil1{,-udeb}, libzfs1{,-udeb},
libzpool1{,-udeb}, and zfsutils{,-udeb}. I'm curious if we can reuse
the names of these binary packages on linux-any architectures, and
choose a different source package name (zfs-linux, currently)?

2. Partman support
As far as I know, partman-zfs is GPL licensed, and does not need to
link against any CDDL stuff, so I think it would be OK to integrate
ZoL support if there are people do the work?

3. Compatibility (zpool, etc)
In ZoL RC14, zpool version has been bumped to 5000, following the step
of OpenIndiana. I'm curious what's the current zpool version in
kFreeBSD, and what's your plan? It would be great if people can import
existing ZoL partition to a kFreeBSD installation, or reversely.

There is also a question about /etc/hostid handling, do you know how
is it handled in kBSD? Existing packaging work of Fedora ZoL makes
hostid static, but I doubt it's desired.

4. About zfs-fuse on Linux
Debian package maintainer of zfs-fuse has joined the team of ZoL, and
he said we may remove zfs-fuse from the archive when ZoL is available
in unstable, so zfs-fuse won't get in the way of naming and
compatibility then.

5. Licensing
ZoL is an independent Linux kernel module developed by Lawrence
Livermore National Laboratory (LLNL) under a contract between U.S.
Department of Energy and LLNL, and is separated into two parts to
avoid violating CDDL. A Solaris Porting Layer (SPL) kernel module is
developed to provide many of the Solaris kernel APIs, and is licensed
under GPL-2+, while the zfs modules are CDDL, reusing existing
OpenSolaris code and cooperate with BSDs and OpenIndiana.


--
Regards,
Aron Xu


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700608: pigz creates temp files with too wide permissions

[Michael Tokarev]

Control: retitle -1 pigz creates temp files with too wide permissions 
(CVE-2013-0296)

This issue has been assigned CVE-2013-0296.

Thanks,

/mjt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700608: pigz creates temp files with too wide permissions

[Salvatore Bonaccorso]

Control: retitle -1 CVE-2013-0296: pigz creates temp files with too wide 
permissions

Hi

On Fri, Feb 15, 2013 at 12:30:09PM +0400, Michael Tokarev wrote:
> When asked to compress a file with restricted permissions (like
> mode 0600), the .gz file pigz creates while doing this has
> usual mode derived from umask (like 0644).  If the file is
> large enough (and why we would use pigz instead of gzip for
> small files), this results in the original content being
> readable for everyone until the compression finishes.
> 
> Here's the deal:
> 
> $ fallocate -l 1G foo
> $ chmod 0600 foo
> $ pigz foo &
> $ ls -l foo foo.gz 
> -rw--- 1 mjt mjt 1073741824 ?? 15 12:27 foo
> -rw-rw-r-- 1 mjt mjt 502516 ?? 15 12:27 foo.gz
> 
> When it finishes, it correctly applies original file permissions
> to the newly created file, but it is already waaay too late.
> 
> Other one-file archivers (gzip, xz, bzip2, ...) usually create
> the temp file with very strict permissions first, and change it
> to the right perms only when done, so only the current user can
> read it.
> 
> It looks like this bug deserves a CVE#.

A CVE was assigned to this now[1]: CVE-2013-0296. Could you please
include the CVE in your changelog when fixing the issue?

 [1]: http://marc.info/?l=oss-security&m=136099644815551&w=2

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700690: Format error of my previous post

[Bernhard]

Hello,

Sorry for format error at this installation report.

Here again my lspci -knn:

> 00:00.0 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Root Complex [1022:1410]
> Subsystem: ASUSTeK Computer Inc. Device [1043:8526]
> 00:01.0 VGA compatible controller [0300]: Advanced Micro Devices [AMD]
> nee ATI Trinity [Radeon HD 7660D] [1002:9901]
> Subsystem: ASUSTeK Computer Inc. Device [1043:8526]
> 00:01.1 Audio device [0403]: Advanced Micro Devices [AMD] nee ATI
> Trinity HDMI Audio Controller [1002:9902]
> Subsystem: ASUSTeK Computer Inc. Device [1043:8526]
> Kernel driver in use: snd_hda_intel
> 00:10.0 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> XHCI Controller [1022:7812] (rev 03)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: xhci_hcd
> 00:10.1 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> XHCI Controller [1022:7812] (rev 03)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: xhci_hcd
> 00:11.0 SATA controller [0106]: Advanced Micro Devices [AMD] FCH SATA
> Controller [AHCI mode] [1022:7801] (rev 40)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: ahci
> 00:12.0 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> OHCI Controller [1022:7807] (rev 11)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: ohci_hcd
> 00:12.2 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> EHCI Controller [1022:7808] (rev 11)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: ehci_hcd
> 00:13.0 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> OHCI Controller [1022:7807] (rev 11)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: ohci_hcd
> 00:13.2 USB controller [0c03]: Advanced Micro Devices [AMD] FCH USB
> EHCI Controller [1022:7808] (rev 11)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: ehci_hcd
> 00:14.0 SMBus [0c05]: Advanced Micro Devices [AMD] FCH SMBus
> Controller [1022:780b] (rev 14)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> Kernel driver in use: piix4_smbus
> 00:14.2 Audio device [0403]: Advanced Micro Devices [AMD] FCH Azalia
> Controller [1022:780d] (rev 01)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8444]
> Kernel driver in use: snd_hda_intel
> 00:14.3 ISA bridge [0601]: Advanced Micro Devices [AMD] FCH LPC Bridge
> [1022:780e] (rev 11)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527]
> 00:14.4 PCI bridge [0604]: Advanced Micro Devices [AMD] FCH PCI Bridge
> [1022:780f] (rev 40)
> 00:15.0 PCI bridge [0604]: Advanced Micro Devices [AMD] Hudson PCI to
> PCI bridge (PCIE port 0) [1022:43a0]
> Kernel driver in use: pcieport
> 00:15.1 PCI bridge [0604]: Advanced Micro Devices [AMD] Hudson PCI to
> PCI bridge (PCIE port 1) [1022:43a1]
> Kernel driver in use: pcieport
> 00:18.0 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 0 [1022:1400]
> 00:18.1 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 1 [1022:1401]
> 00:18.2 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 2 [1022:1402]
> 00:18.3 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 3 [1022:1403]
> 00:18.4 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 4 [1022:1404]
> 00:18.5 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 5 [1022:1405]
> 03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
> RTL8111/8168B PCI Express Gigabit Ethernet controller [10ec:8168] (rev 09)
> Subsystem: ASUSTeK Computer Inc. Device [1043:8505]
> Kernel driver in use: r8169

And here the part of my /var/log/installer/syslog:

> Feb 16 04:33:58 in-target: Holen: 466 ftp://ftp.de.debian.org/debian/
> wheezy/main xfce-keyboard-shortcuts all 4.8.1-1 [25,6 kB]
> Feb 16 04:33:58 in-target: Holen: 467 ftp://ftp.de.debian.org/debian/
> wheezy/main libxfce4ui-1-0 amd64 4.8.1-1 [102 kB]
> Feb 16 04:33:59 in-target: Holen: 468 ftp://ftp.de.debian.org/debian/
> wheezy/main thunar-data all 1.2.3-4 [3.767 kB]
> Feb 16 04:34:00 kernel: [ 1237.430574] usb 7-2: USB disconnect, device
> number 25
> Feb 16 04:34:02 kernel: [ 1239.144086] usb 7-2: new low-speed USB
> device number 26 using ohci_hcd
> Feb 16 04:34:02 kernel: [ 1239.311545] usb 7-2: New USB device found,
> idVendor=046d, idProduct=c05a
> Feb 16 04:34:02 kernel: [ 1239.311548] usb 7-2: New USB device
> strings: Mfr=1, Product=2, SerialNumber=0
> Feb 16 04:34:02 kernel: [ 1239.311550] usb 7-2: Product: USB Optical Mouse
> Feb 16 04:34:02 kernel: [ 1239.311552] usb 7-2: Manufacturer: Logitech
> Feb 16

Bug#700690: Installation was mostly successfully on AMD A10 Trinity

[Bernhard]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: installation-reports

Boot method: CD
Image version: Self-made Boot-CD with current wheezy installer RC1
Date: 2013-02-16

Machine: Self-made Desktop PC
Processor: AMD A10-5700 APU @ 3,4GHz
Memory: 2GB
Partitions:

> DateisystemTyp
> 1K-Blöcke Benutzt Verfügbar Verw% Eingehängt auf rootfs
> rootfs14417392 5321940   8363088   39% / udev
> devtmpfs 10240   0 102400% /dev tmpfs
> tmpfs   148720 3081484121% /run 
> /dev/disk/by-uuid/722d204a-264b-437e-b5d7-7eab589ddc3a ext4
> 14417392 5321940   8363088   39% / tmpfs
> tmpfs 5120   0  51200% /run/lock tmpfs
> tmpfs   492600   04926000% /run/shm /dev/sda6
> ext4  8176 3677888  912405844% /home

Output of lspci -knn:

> 00:00.0 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Root Complex [1022:1410] Subsystem:
> ASUSTeK Computer Inc. Device [1043:8526] 00:01.0 VGA compatible
> controller [0300]: Advanced Micro Devices [AMD] nee ATI Trinity
> [Radeon HD 7660D] [1002:9901] Subsystem: ASUSTeK Computer Inc.
> Device [1043:8526] 00:01.1 Audio device [0403]: Advanced Micro
> Devices [AMD] nee ATI Trinity HDMI Audio Controller [1002:9902] 
> Subsystem: ASUSTeK Computer Inc. Device [1043:8526] Kernel driver
> in use: snd_hda_intel 00:10.0 USB controller [0c03]: Advanced Micro
> Devices [AMD] FCH USB XHCI Controller [1022:7812] (rev 03) 
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527] Kernel driver
> in use: xhci_hcd 00:10.1 USB controller [0c03]: Advanced Micro
> Devices [AMD] FCH USB XHCI Controller [1022:7812] (rev 03) 
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527] Kernel driver
> in use: xhci_hcd 00:11.0 SATA controller [0106]: Advanced Micro
> Devices [AMD] FCH SATA Controller [AHCI mode] [1022:7801] (rev 40) 
> Subsystem: ASUSTeK Computer Inc. Device [1043:8527] Kernel driver
> in use: ahci 00:12.0 USB controller [0c03]: Advanced Micro Devices
> [AMD] FCH USB OHCI Controller [1022:7807] (rev 11) Subsystem:
> ASUSTeK Computer Inc. Device [1043:8527] Kernel driver in use:
> ohci_hcd 00:12.2 USB controller [0c03]: Advanced Micro Devices
> [AMD] FCH USB EHCI Controller [1022:7808] (rev 11) Subsystem:
> ASUSTeK Computer Inc. Device [1043:8527] Kernel driver in use:
> ehci_hcd 00:13.0 USB controller [0c03]: Advanced Micro Devices
> [AMD] FCH USB OHCI Controller [1022:7807] (rev 11) Subsystem:
> ASUSTeK Computer Inc. Device [1043:8527] Kernel driver in use:
> ohci_hcd 00:13.2 USB controller [0c03]: Advanced Micro Devices
> [AMD] FCH USB EHCI Controller [1022:7808] (rev 11) Subsystem:
> ASUSTeK Computer Inc. Device [1043:8527] Kernel driver in use:
> ehci_hcd 00:14.0 SMBus [0c05]: Advanced Micro Devices [AMD] FCH
> SMBus Controller [1022:780b] (rev 14) Subsystem: ASUSTeK Computer
> Inc. Device [1043:8527] Kernel driver in use: piix4_smbus 00:14.2
> Audio device [0403]: Advanced Micro Devices [AMD] FCH Azalia
> Controller [1022:780d] (rev 01) Subsystem: ASUSTeK Computer Inc.
> Device [1043:8444] Kernel driver in use: snd_hda_intel 00:14.3 ISA
> bridge [0601]: Advanced Micro Devices [AMD] FCH LPC Bridge
> [1022:780e] (rev 11) Subsystem: ASUSTeK Computer Inc. Device
> [1043:8527] 00:14.4 PCI bridge [0604]: Advanced Micro Devices [AMD]
> FCH PCI Bridge [1022:780f] (rev 40) 00:15.0 PCI bridge [0604]:
> Advanced Micro Devices [AMD] Hudson PCI to PCI bridge (PCIE port 0)
> [1022:43a0] Kernel driver in use: pcieport 00:15.1 PCI bridge
> [0604]: Advanced Micro Devices [AMD] Hudson PCI to PCI bridge (PCIE
> port 1) [1022:43a1] Kernel driver in use: pcieport 00:18.0 Host
> bridge [0600]: Advanced Micro Devices [AMD] Family 15h (Models
> 10h-1fh) Processor Function 0 [1022:1400] 00:18.1 Host bridge
> [0600]: Advanced Micro Devices [AMD] Family 15h (Models 10h-1fh)
> Processor Function 1 [1022:1401] 00:18.2 Host bridge [0600]:
> Advanced Micro Devices [AMD] Family 15h (Models 10h-1fh) Processor
> Function 2 [1022:1402] 00:18.3 Host bridge [0600]: Advanced Micro
> Devices [AMD] Family 15h (Models 10h-1fh) Processor Function 3
> [1022:1403] 00:18.4 Host bridge [0600]: Advanced Micro Devices
> [AMD] Family 15h (Models 10h-1fh) Processor Function 4 [1022:1404] 
> 00:18.5 Host bridge [0600]: Advanced Micro Devices [AMD] Family 15h
> (Models 10h-1fh) Processor Function 5 [1022:1405] 03:00.0 Ethernet
> controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168B
> PCI Express Gigabit Ethernet controller [10ec:8168] (rev 09) 
> Subsystem: ASUSTeK Computer Inc. Device [1043:8505] Kernel driver
> in use: r8169

Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:   [O]
Detect network card:[O]
Configure network:  [O]
Detect CD:  [O]
Load installer modules: [O]
Detect hard drives: [O]
Partition hard drives:  [O]
Install base system:[O]
Clock/timezone setup:   

Bug#700689: p11-kit: new upstream version 0.15.2 available

[Daniel Kahn Gillmor]

Package: p11-kit
Version: 0.14-1
Severity: wishlist

Version 0.15.2 of p11-kit is available from upstream.  It would be
great to have the latest version in debian experimental.

Thanks for maintaining p11-kit in debian!

Regards,

  --dkg

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.7-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages p11-kit depends on:
ii  libc62.13-37
ii  libp11-kit0  0.14-1

p11-kit recommends no packages.

p11-kit suggests no packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700677: Incorrect upstream versioning / ABI breakage

[Daniel Baumann]

n 02/16/2013 03:40 AM, Colin Watson wrote:

have ntfs-3g Provides: libntfs-3gSOVER (substituted as appropriate)


patches welcome.

--
Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:  daniel.baum...@progress-technologies.net
Internet:   http://people.progress-technologies.net/~daniel.baumann/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700637: Installer fails to detect/install TP-Link TL-WDN4800 PCIe Atheros AR9380 Chipset

[Ben Hutchings]

On Sat, 2013-02-16 at 03:34 +, Ben Hutchings wrote:
> On Fri, 2013-02-15 at 10:26 -0700, Jack Wilborn wrote:
> > Package: installation-reports
> > Version: 2.11.3-4
> > 
> > I installed from a commercially purchased Debian 6.0.6 Installation
> > DVD i386 from LinuxCollections.com.  Installation was successful,
> > although I have no Internet access to this machine as my only access
> > is via an iPhone 4 as a WiFi Hotspot.  The installation did not
> > install 'wireless-tools' package, so I could only use 'ifconfig' to
> > check for any wireless activity.  The 'lspci -knn' is included and the
> > following is it's output.
> 
> The installer for Debian 6.0 'squeeze' does not include commands for
> wireless networking configuration in the 'laptop' task.
[...]

Sorry, I mean it *only* includes them in the laptop task, not the
desktop task.

Ben.

-- 
Ben Hutchings
Computers are not intelligent.  They only think they are.


signature.asc
Description: This is a digitally signed message part

Bug#686447: [RFC] First release of spl-dkms and zfs-linux packages for Debian

[Darik Horn]

On Fri, Feb 15, 2013 at 5:18 PM, Carlos Alberto Lopez Perez
 wrote:
> I'm only randomizing it when the current host's hostid is "0x",
> which I understand is an invalid hostid for ZFS and would case it to
> stop working properly. Isn't this the case?

Where I used 0x earlier, it was used as a canary value so that
an interrupted installation would fail gracefully.

Given that hostid() deterministically generates a value when the
/etc/hostid file is missing, this line 60 in the spl-dkms.postinst is
still suspect:

  dd if=/dev/urandom bs=1 count=3 seek=1 of=/etc/hostid 2>/dev/null

My concern here is that changing the return of hostid() can break
third-party software.  (eg: FLEXlm.)


>> The pristine-tar branch already exists in pkg-spl and pkg-zfs.  Using
>> the pristine-tar facility is certainly correct, but not currently
>> practical for doing the frequent releases that ZoL users expect.
>
> We should agree on a common way of working.
>
> Either we use pristine-tar or not.

Lets use pristine-tar then.


>> This breaks backports for Lucid (and its derivatives) because
>> dh-autoreconf is a non-main package on those systems.  Keeping
>> compatibility with all officially supported Ubuntu variants is
>> worthwhile and something that I want to do.
>>
>>
>
> Well. I love to have things as clean and small as possible.
> dh_autoreconf helps with that. But I understand your point. Not big deal.

I intend to cease Lucid builds when it goes out of extended desktop
support this April, so this issue will soon be mooted.


> github redirector is not longer needed, so why use it?
>
> http://wiki.debian.org/debian/watch?action=diff&rev2=10&rev1=9
>
> Also the url on the debian/watch on your packages is not working.

Okay, it is obsolete.


>> Modifying or omitting Oracle legal notices will attract Oracle
>> lawyers.  Saving less than 64 kilobytes of boilerplate per
>> installation is just not worth the risk.
>>
>>
> Ok.

Thanks. This is a relief.


>> This reintroduces a dkms ordering bug where the zfs build races the
>> spl build.  Notice how the BUILD_DEPENDS directive is handled by dkms.
>>
>>
>
> Is that a bug on dkms?

This is more of an enhancement than a bug.

Lustre, ZFS, and SPL are all separate projects upstream.  No other
Linux modules have such build dependencies outside of the packaging
subsystem.


> was reported?

Yes.

Note that zfsonlinux/dkms has a recent bug fix that has not yet been
submitted upstream.


> I don't agree in this.
>
> Shipping a commented file in /etc/sudoers.d will only cause trouble when
> the package is upgraded and tries to overwrite your local changes.
>
> The right place for such file would be  /usr/share/doc/$package/examples/

Okay, that is a fair substitute.


>> I added this kind of nagging to some private builds and got negative
>> feedback. YMMV. Consider disabling second-class architectures entirely
>> because Debian publishes updates very slowly between major releases.
>>
>
> IMHO enabling second-class architectures (non-x86) is a goal to achieve.
> It would help to find bugs on the codebase.

ZFS depends on assumptions about the Linux vmalloc that are false for
32-bit kernels.  It is worth noting that ARM support in ZoL is
arguably better than 32-bit x86 support.


> Debian publishes updates very slowly between major releases? I don't
> understand what you mean with this.

It sounded like there was an effort to get ZoL into Wheezy.  Any
version of ZoL that gets into a stable Debian release will have a very
long lifetime, and it is likely that upstream will improve 32-bit
support in the meantime.


> The warning is only show once. Once you have accepted it, it won't show
> anymore whenever you upgrade or reinstall.
>
>
> I understand that this could be annoying, but this is exactly for what's
> intended. Better annoy people when they install the package for the firs
> time, that let them run this without knowing that it could cause data
> corruption or instability on their systems on the long term.

Okay, this is ultimately an issue of aesthetics, so I will defer.


> PS: Darik, subscribe yourself to
> pkg-zfsonlinux-de...@lists.alioth.debian.org if you are not already.

I am subscribed.

TTYS.

-- 
Darik Horn 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#680436: Log for attempted build of superkaramba_4:4.8.4-3 on m68k (dist=unstable)

[Thorsten Glaser]

severity 680436 serious
thanks

Just set the Architecture field of the source package if you
do not want to have it build on all architectures, then.

But an Architecture: any package that fails to build on some
architectures *by design* since it needs to positively be
ported to every single new architecture, be it Debian proper
or “just” Debian-Ports, is buggy.

bye,
//mirabilos
-- 
„nein: BerliOS und Sourceforge sind Plattformen für Projekte, github ist
eine Plattform für Einzelkämpfer“
-- dieses Zitat ist ein Beweis dafür, daß auch ein blindes Huhn
   mal ein Korn findet, bzw. – in diesem Fall – Recht haben kann


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700687: (no subject)

[Drew Parsons]

One extra bit of information: 
=?utf-8?q?the_CNRI_Handle_Extension_was=0D=0Aapparently_known_not_to_work_in?=
 =?utf-8?q?_Firefox_18=2C_but_has_been_fixed_in_the=0D=0Alatest_version_2=2E3?=
 =?utf-8?b?Ljcu?=
Message-ID: <20130216044303.6398.77863.report...@schumann.anu.edu.au>
X-Mailer: reportbug 6.4.3
Date: Sat, 16 Feb 2013 15:43:03 +1100

But our iceweasel is still only version 10.  I don't know if the bug is still
there for firefox 18 on Debian with icedtea-7-plugin 1.3.1-2.1 and
CNRI Handle Extension 2.3.7.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#698936: mc: segfault in gslice.c deleting file

[Dmitry Smirnov]

Dear Dominique,

Could you please provide more information how to reproduce this problem?

Every single detail matters: file system, mount options, permissions etc.

Is this problem also present in mc/3:4.8.5-1~exp5 from "experimental"?

At the moment I'm unable to confirm this problem...

Thank you.

Cheers,
 Dmitry Smirnov
 GPG key : 4096R/53968D1B


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700688: Brief install report: Toshi L850/046

[Neale Banks]

Package: installation-reports

A brief report of installing on a new Toshi L850/046

Boot method: CD
Image Version: Debian GNU/Linux testing "Wheezy" - Official Snapshot amd64
xfce-CD Binary-1 20130211-05:00

Machine: Toshiba L850/046
Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Memory: 4GB

Many thing worked, but...

* Initial scrambled/torn display, see Bug#700598 for full description
and workaround.

* Non-graphical installation appeared to have keyboard lockup.  Re-tried
graphical install OK.  This may have been only confusion relating to
Caps-lock and Fn keys below.

* Keyboard Caps-lock indicator non-functional.  Caps-lock actually
works OK, but doesn't come on.  Same with external keyboard.
FWIW, Num-lock works and displays fine.

* To operate keys F2 through F7 (and possible beyond, but NOT F1) on
the system keyboard, it is necessary to press the Fn key.  Maybe this
is some kind of feature, but it's certainly frustrating when trying to
swithch between VTs.  External USB keyboard does NOT exhibit this
behaviour.

* The big one:  Video card is (from lspci):
01:00.0 VGA compatible controller: Advanced Micro Devices [AMD] nee ATI
Thames XT/GL [Radeon HD 7600M Series]
This appears to unsupported in X :-(  Looking for updates/workarounds.


The machine came with Win8 pre-installed.  Before installing Debian:
* disabled secure boot
* Shrank ~900 GB Win partition to ~300 GB, with GParted live CD.

Debian installation went OK, resulting in working system (text mode).
Perfunctory testing suggests the Win8 installation remains functional.

Using tasksel to pull in the Debian Desktop task installs X.  See
above re ATI Radeon.

Thanks,
Neale.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700687: icedtea-7-plugin: freezes iceweasel when CNRI Handle Extension enabled

[Drew Parsons]

Package: icedtea-7-plugin
Version: 1.3.1-2.1
Severity: normal

Scientific journals use a DOI (Document Object Identifier) to give a
unique ID to article, see http://www.doi.org/.  You can see how it
works by, for instance, typing doi:10.1063/1.476358 into the resolver
box.

Corporation for National Research Initiatives (CNRI) take it a bit
further, and add a "hdl:" handle as well as the doi: handle,
see http://handle.net/.  

It is convenient to have a firefox extension which lets you just paste
doi:10.1063/1.476358 into the firefox address bar, and sends you
straight to the paper, rather than having to first go through the
input box at doi.org.

CNRI have written a handle resolver extension which does this, "CNRI
Handle Extension", available at http://addons.mozilla.org/addon/10820
or http://www.handle.net/hs-tools/extensions/firefox_hdlclient.html

They use java, and unfortunately their extension triggers a bug in
icedtea-7-plugin 1.3.1-2.1.

After closing iceweasel with both CNRI Handle Extension and
icedtea-7-plugin enabled, when you start iceweasel, apparently nothing
happens.  Iceweasel does not start up.

Running /usr/lib/iceweasel/firefox-bin from the command line, you get
the error:
$ /usr/lib/iceweasel/firefox-bin
java version "1.7.0_09"
OpenJDK Runtime Environment (IcedTea7 2.3.3) (7u9-2.3.3-1)
OpenJDK 64-Bit Server VM (build 23.2-b09, mixed mode)
java.net.MalformedURLException: unknown protocol: chrome
at java.net.URL.(URL.java:592)
at java.net.URL.(URL.java:482)
at java.net.URL.(URL.java:431)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:491)
at 
sun.applet.PluginStreamHandler.handleMessage(PluginStreamHandler.java:232)
at 
sun.applet.PluginMessageHandlerWorker.run(PluginMessageHandlerWorker.java:78)
java.lang.RuntimeException: Failed to handle message: tag 
chrome://browser/content/browser.xul  for instance 1
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:560)
at 
sun.applet.PluginStreamHandler.handleMessage(PluginStreamHandler.java:232)
at 
sun.applet.PluginMessageHandlerWorker.run(PluginMessageHandlerWorker.java:78)
Caused by: java.net.MalformedURLException: unknown protocol: chrome
at java.net.URL.(URL.java:592)
at java.net.URL.(URL.java:482)
at java.net.URL.(URL.java:431)
at 
sun.applet.PluginAppletViewer.handleMessage(PluginAppletViewer.java:491)
... 2 more


There is problem with the extension, icedtea-7-plugin and the firefox' chrome:
handle.

In one sense it is CNRI's bug, but on the other hand it should not be
preventing iceweasel from starting up.  Should icedtea-7-plugin or
iceweasel be fixed so that they does not freeze in this situation?

Drew

p.s. As a workaround, I can enable DOI Protocol
(https://addons.mozilla.org/en-US/firefox/addon/doi-protocol/) instead
of CNRI Handle Extension to get the doi functionality working.



-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.7-trunk-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages icedtea-7-plugin depends on:
ii  icedtea-netx1.3.1-2.1
ii  libatk1.0-0 2.4.0-2
ii  libc6   2.13-38
ii  libcairo2   1.12.2-3
ii  libfontconfig1  2.9.0-7.1
ii  libfreetype62.4.9-1.1
ii  libgcc1 1:4.7.2-5
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-02.33.12+really2.32.4-5
ii  libgtk2.0-0 2.24.10-2
ii  libpango1.0-0   1.30.0-1
ii  libstdc++6  4.7.2-5
ii  openjdk-7-jre   7u9-2.3.3-1

icedtea-7-plugin recommends no packages.

icedtea-7-plugin suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700686: liboauth: FTBFS on x32: Needs libtool update

[Daniel Schepler]

Source: liboauth
Version: 0.9.4-3.1
Severity: wishlist
Tags: patch
User: debian-...@lists.debian.org
Usertags: port-x32 ftbfs-libtool

The liboauth source package is getting this build failure on the
unofficial Debian x32 port:

http://buildd.debian-ports.org/status/fetch.php?pkg=liboauth&arch=x32&ver=0.9.4-3.1&stamp=1359469896>:
...
/bin/bash ../libtool --tag=CC   --mode=link gcc -Wall
-I/usr/include/nss -I/usr/include/nspr -g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall
-export-symbols-regex '^oauth_.*' -Wl,--as-needed -version-info 8:1:8
-Wl,-z,relro -o liboauth.la -rpath /usr/lib/x86_64-linux-gnux32
liboauth_la-oauth.lo liboauth_la-hash.lo liboauth_la-xmalloc.lo
liboauth_la-oauth_http.lo -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4
-lplc4 -lnspr4   -lcurl
../libtool: line 7523: test: : integer expression expected
../libtool: line 7523: test: : integer expression expected
../libtool: line 7628: test: : integer expression expected
../libtool: line 7700: test: : integer expression expected
../libtool: line 7700: test: : integer expression expected
../libtool: line 7700: test: : integer expression expected
libtool: link: /usr/bin/ld -m elf_i386 -r -o .libs/liboauth.la-1.o
.libs/liboauth_la-oauth.o
/usr/bin/ld: Relocatable linking with relocations from format
elf32-x86-64 (.libs/liboauth_la-oauth.o) to format elf32-i386
(.libs/liboauth.la-1.o) is not supported
make[3]: *** [liboauth.la] Error 1
make[3]: Leaving directory
`/build/buildd-liboauth_0.9.4-3.1-x32-YlhM_a/liboauth-0.9.4/src'
make[2]: *** [all] Error 2
make[2]: Leaving directory
`/build/buildd-liboauth_0.9.4-3.1-x32-YlhM_a/liboauth-0.9.4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory
`/build/buildd-liboauth_0.9.4-3.1-x32-YlhM_a/liboauth-0.9.4'
dh_auto_build: make -j1 returned exit code 2
make: *** [build-arch] Error 2
dpkg-buildpackage: error: debian/rules build-arch gave error exit status 2

The fix is to update libtool using the current Debian package in sid
(>= 2.4.2-1.2).  The attached debdiff does this at build time using
dh-autoreconf.
-- 
Daniel Schepler


liboauth.debdiff
Description: Binary data

Bug#700536: debian-policy: Update dak reference from old katie name

[Charles Plessy]

user debian-pol...@packages.debian.org
tag 700536 pending
usertags informative
thanks

Le Thu, Feb 14, 2013 at 04:47:09AM +0100, Guillem Jover a écrit :
> 
> Prompted by 700532 I noticed a reference to the old katie name. Here's
> a patch updating it to dak.

Applied, thanks !

-- 
Charles


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700685: libqalculate: FTBFS on x32: Needs libtool update

[Daniel Schepler]

Source: libqalculate
Version: 0.9.7-8
Severity: wishlist
Tags: patch
User: debian-...@lists.debian.org
Usertags: port-x32 ftbfs-libtool

The libqalculate source package is getting this build failure on the
unofficial Debian x32 port:

http://buildd.debian-ports.org/status/fetch.php?pkg=libqalculate&arch=x32&ver=0.9.7-8&stamp=1360967214>:
...
/bin/bash ../libtool --tag=CXX   --mode=link g++  -g -O2
-fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security -version-info 5:0:0 -no-undefined -Wl,-z,relro
-o libqalculate.la -rpath /usr/lib/x86_64-linux-gnux32 Function.lo
Calculator.lo DataSet.lo Variable.lo ExpressionItem.lo Number.lo
MathStructure.lo Prefix.lo util.lo Unit.lo BuiltinFunctions.lo
-lglib-2.0 -lxml2   -lpthread -lcln
../libtool: line 4461: test: : integer expression expected
../libtool: line 4461: test: : integer expression expected
creating reloadable object files...
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
../libtool: line 4496: test: : integer expression expected
creating a temporary reloadable object file: .libs/libqalculate.la-11.o
/usr/bin/ld -m elf_i386 -r -o .libs/libqalculate.la-1.o .libs/Function.o
/usr/bin/ld: Relocatable linking with relocations from format
elf32-x86-64 (.libs/Function.o) to format elf32-i386
(.libs/libqalculate.la-1.o) is not supported
make[3]: *** [libqalculate.la] Error 1
make[3]: Leaving directory
`/build/buildd-libqalculate_0.9.7-8-x32-1lxqHQ/libqalculate-0.9.7/libqalculate'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory
`/build/buildd-libqalculate_0.9.7-8-x32-1lxqHQ/libqalculate-0.9.7'
make[1]: *** [all] Error 2
make[1]: Leaving directory
`/build/buildd-libqalculate_0.9.7-8-x32-1lxqHQ/libqalculate-0.9.7'
dh_auto_build: make -j1 returned exit code 2
make: *** [build-arch] Error 2
dpkg-buildpackage: error: debian/rules build-arch gave error exit status 2

The fix is to update libtool using the current Debian package in sid
(>= 2.4.2-1.2).  The attached debdiff does this at build time using
dh-autoreconf.
-- 
Daniel Schepler


libqalculate.debdiff
Description: Binary data

Bug#700679: ITP: maven-native -- Maven plugin to compile C/C++ source code

[Andres Mejia]

Nothing. It's part of the build dependencies for BridJ which I would
like to get compiling on the buildd network because of the C code it
uses.

On Fri, Feb 15, 2013 at 10:38 PM, Istimsak Abdulbasir
 wrote:
>
> What is the problem with the Maven plugin?
>
>
> On Fri, Feb 15, 2013 at 8:54 PM, Andres Mejia  wrote:
>>
>> Package: wnpp
>> Severity: wishlist
>> Owner: Andres Mejia 
>>
>> * Package name: maven-native
>>   Version : 1.0~alpha-7
>>   Upstream Author : Dan T. Tran 
>> * URL :
>> http://mojo.codehaus.org/maven-native/native-maven-plugin/
>> * License : MIT
>>   Programming Lang: Java
>>   Description : Maven plugin to compile C/C++ source code
>>
>> The Native Maven Plugin is a plugin to compile C and C++ source code under
>> Maven using native compilers such as gcc, msvc, gcj, etc.
>>
>>
>> --
>> To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
>> with a subject of "unsubscribe". Trouble? Contact
>> listmas...@lists.debian.org
>> Archive:
>> http://lists.debian.org/20130216015459.5.16678.report...@andres-laptop.home
>>
>



--
~ Andres


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700633: Debootstrap is very slow. Please use eatmydata to fix this.

[Phillip Susi]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/15/2013 09:09 PM, Cyril Brulebois wrote:


- --force-unsafe-io only eliminates *some* of the syncs, and seems to
only be applied in the latter part of the installation that takes
place after debootstrap.

I started working on a patch to dpkg to add another --force option to
eliminate the rest of the syncs a year or two ago and was told on the
dpkg mailing list to just use libeatmydata, as it would also make sure
any syncs done by the [pre|post][inst|rm] scripts are also disabled.


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJRHv+pAAoJEJrBOlT6nu75t28H/0tfko7zwRQ0Y1hWN8hE1TXj
ZaDxoIZ1aQ6fVAm4uow+7vXiP4TBPnR61sHvs7mO791sNlVutG7Lz6D4XG7dWmID
N/hKRbX/wYz02rEeuEw2z3MrynfWq53fX9I+PBn0aFyBNtLM0oHMGoaSDw9TRnbB
/+9+v+nLd//dA8gvXGLsx97ildV6uS4ZtI814l3uC3DnhrSBvqP4TVOtaGmiGe7m
NZdb5FyfSt3vGBeMrFsuAHDl8IyQyWX6gDcZvUuz7qcSXHS2NCrAAs0IsoM41bpN
3oZtVJn6uYB/rvkR4DfyYh8FerhiQ9x/Qx96Dmxz6cE3+CrGoYdY3FLGzsB0ydQ=
=mn+R
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#697433: Is the Package-List field necessary for uploads ?

[Charles Plessy]

Hello everybody,

the patch below was seconded by Russ and Guillem, and the discusssion
about documenting udebs was moved to http://bugs.debian.org/698030,
so I think I will apply the patch soon unless one reminds me a good
reason for not doing so.

Have a nice week-end,

-- Charles

Le Sat, Jan 12, 2013 at 03:29:13PM +0900, Charles Plessy a écrit :
> 
> here is a new version trying to addres Simon's and Guillem's comments.
> 
> @@ -2671,6 +2671,7 @@ Package: libc6
> Description 
> (mandatory)
> Homepage
> Built-Using
> +id="f-Package-Type">Package-Type
>   
> 
>  
> @@ -2751,6 +2752,7 @@ Package: libc6
>   Vcs-Browser, 
> Vcs-Git, et al.id="f-Standards-Version">Standards-Version (recommend
>   Build-Depends et 
> al
> + Package-List 
> (recommended)
>   Checksums-Sha1
>   and Checksums-Sha256 (mandatory)
>   Files (mandatory)
> @@ -3801,6 +3803,34 @@ Checksums-Sha256:
> 
>   
> 
> +
> +   
> + Package-List
> +
> + 
> +   Multiline field listing all the packages that can be built from
> +   the source package, considering every architecture.  The first 
> line
> +   of the field value is empty.  Each one of the next lines describes
> +   one binary package, by listing its name, type, section and 
> priority
> +   separated by spaces.  Fifth and subsequent space-separated items
> +   may be present and parsers must allow them.  See the
> +   Package-Type field for a list of
> +   package types.
> + 
> +   
> +
> +   
> + Package-Type
> +
> + 
> +   Simple field containing a word indicating the type of package:
> +   deb for binary packages and udeb for micro 
> binary
> +   packages.  Other types not defined here may be indicated.  In
> +   source package control files, the Package-Type field
> +   should be omitted instead of giving it a value of deb, as
> +   this value is assumed for paragraphs lacking this field.
> + 
> +   
>
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-policy-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/20130112062913.ga31...@falafel.plessy.net

-- 
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700637: Installer fails to detect/install TP-Link TL-WDN4800 PCIe Atheros AR9380 Chipset

[Ben Hutchings]

On Fri, 2013-02-15 at 10:26 -0700, Jack Wilborn wrote:
> Package: installation-reports
> Version: 2.11.3-4
> 
> I installed from a commercially purchased Debian 6.0.6 Installation
> DVD i386 from LinuxCollections.com.  Installation was successful,
> although I have no Internet access to this machine as my only access
> is via an iPhone 4 as a WiFi Hotspot.  The installation did not
> install 'wireless-tools' package, so I could only use 'ifconfig' to
> check for any wireless activity.  The 'lspci -knn' is included and the
> following is it's output.

The installer for Debian 6.0 'squeeze' does not include commands for
wireless networking configuration in the 'laptop' task.  However, the
Network Manager GUI included in the 'desktop' task can be used to
configure wireless networking for a single-user system.

[...]
> 03:00.0 Network controller [0280]: Atheros Communications Inc. AR9300
> Wireless LAN adaptor [168c:0030] (rev 01)
>   Subsystem: Atheros Communications Inc. Device [168c:3112]
> 
> 
> The last entry is the network Wireless card that is not working.  This
> is a new install, when I tried previously, I attempted to load the
> ath9k.ko module by hand as it was not loaded by the machine at
> install.  It still would not operate.

With a few exceptions, driver modules have a list of device IDs they
will work with and they are automatically loaded based on that.  They
won't touch any device whose ID is not on the list, so loading 'by hand'
has no effect.

The version of ath9k in 'squeeze' doesn't support this particular
device, and looking at the upstream changes it's clear that some quite
large changes were needed to support it.  I'm disappointed that we
haven't added support for many new wireless networking chips in point
releases (6.0.x), but since the release of 'wheezy' is now imminent
that's not going to change.

[..]
> I have found, what I consider conflicting information about this card.
>  On the Debian site for ath9k drivers
> (http://linuxwireless.org/en/users/Drivers/ath9k) they state there is
> some way to "Enabling ath9k", which I don't understand and seems that
> it includes building the kernel on your machine.  They also mention
> using the supplied kernel to do something like it, using the 'proc'
> command.  I find this in man, but it's not on my machine.  I have also
> found this at another page in Debian stating that the chipset is
> support, as Grace from TP-Link stated.  The sam page as the driver
> above, about half way down under 'supported chipsets' and AR9003 the
> AR9380 is there, but I'm confused as to the terminology.  I am running
> (via uname -r) 2.6.32-5-amd64, they specify something like >= 2.6.36?
[...]

Right.  I recommend that you install a later kernel version from the
squeeze-backports suite .  Installing
the linux-image-amd64 package from there should give you essentially the
same kernel as will be in 'wheezy'.

Ben.

-- 
Ben Hutchings
Computers are not intelligent.  They only think they are.


signature.asc
Description: This is a digitally signed message part

Bug#700684: ttf-mscorefonts-installer: Please mark Multi-Arch: foreign

[Daniel Hartwig]

Package: ttf-mscorefonts-installer
Version: 3.4+nmu1
Severity: wishlist
Tags: patch
User: multiarch-de...@lists.alioth.debian.org
Usertags: multiarch

Dear maintainer

There are some third party packages which are i386-only and make use of
the mscorefonts.  Also Attached is a patch from Ubuntu marking
tff-mscorefonts-installer Multi-Arch: foreign to facilitate these cases
and others.

See also: .

Regards
=== modified file 'debian/control'
--- debian/control	2010-11-04 21:52:26 +
+++ debian/control	2012-01-19 00:47:02 +
@@ -3,6 +3,7 @@
 Depends: wget, cabextract, xfonts-utils, ${misc:Depends}
 Recommends: fonts-liberation
 Provides: msttcorefonts
+Multi-Arch: foreign
 Description: Installer for Microsoft TrueType core fonts
  This package allows for easy installation of the Microsoft True Type
  Core Fonts for the Web including:

Bug#519586: Huge "Slab Unreclaimable" and continually growing

[Ben Hutchings]

On Fri, 2013-02-15 at 08:56 +0100, Josip Rodin wrote:
> > I appear to be experiencing a serious problem with a 768 MB RAM Xen domU
> > machine running an NFS client - every now and then (for months now), often
> > in the middle of the night, it enters some kind of a broken state where a
> > few semi-random processes (mainly apache2's and vsftpd's which are told to
> > serve files from the NFS mount)
[...]
> I caught it earlier just now, at:
> 
> [950084.590733] active_anon:2805 inactive_anon:11835 isolated_anon:0
> [950084.590735]  active_file:76 inactive_file:516 isolated_file:32
> [950084.590737]  unevictable:783 dirty:1 writeback:0 unstable:0
> [950084.590739]  free:26251 slab_reclaimable:15733 slab_unreclaimable:128868
> [950084.590741]  mapped:938 shmem:75 pagetables:651 bounce:0
> 
> And snuck in a few slabtops (even some -o invocations were getting killed,
> along with my shell and pretty much everything else):
[...]
>  65390  65390 100%2.06K  13338   15426816K net_namespace
[...]

Looks like CVE-2011-2189, for which there was a fix/workaround in:

vsftpd (2.3.2-3+squeeze2) stable-security; urgency=high

   * Non-maintainer upload by the Security Team.
   * Disable network isolation due to a problem with cleaning up network
 namespaces fast enough in kernels < 2.6.35 (CVE-2011-2189).
 Thanks Ben Hutchings for the patch!
   * Fix possible DoS via globa expressions in STAT commands by
 limiting the matching loop (CVE-2011-0762; Closes: #622741).

 -- Nico Golde   Wed, 07 Sep 2011 20:39:59 +

Do you have an old version of vsftpd, or perhaps an upstream version
which doesn't include the workaround?

Anyway, I'm closing the bug report; please don't hijack closed bugs.

Ben.

-- 
Ben Hutchings
Computers are not intelligent.  They only think they are.


signature.asc
Description: This is a digitally signed message part

Bug#699844: requests mis-treats 303 responses due to a typo

[Paul Tagliamonte]

Heyya, Daniele

On Fri, Feb 15, 2013 at 7:31 PM, Daniele Tricoli  wrote:
> Hello Paul,
> many thanks for the report!

Oh, quite! Sorry for the report :)

As you might have guessed, I thought this affected `wheezy' :)

>
> On Tuesday 05 February 2013 21:02:37 Paul Tagliamonte wrote:
>> I've attached upstream's fix. Some bits:
>>
>>  Caused by using `is' on ints, rather then "==". Upstream bug 1156[1],
>>  fixed in commit b07c1ebd859a32e1203c1d4ef27f1fb9e154e55e (attached).
>>
>> This violates a "SHOULD" in the HTTP/1.1 RFC, and it'd be really nice to
>> get this fixed for wheezy, if there is a way to get such a small change
>> in.
>
> As you already noticed 1.1.0 is currently in experimental, but if you need
> this, I can include the patch in 1.1.0-2.
>
> A part for 0.14.2 -> 1.0.0, usually upstream makes at least 1 release per
> month, so I was waiting, but I can just include the patch now if it's
> needed.

I really appreciate the offer, but I think it can wait :)

If you want to upload such a bugfix (or a new upstream release hits)
that fixes this bug, I'd be happy to sponsor it, if you don't have a
regular sponsor.

>
> Kind regards,
>
> --
>  Daniele Tricoli 'Eriol'
>  http://mornie.org

Thanks for the quick attention!

Cheers,
  Paul

-- 
:wq


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700683: cabextract: please mark multi-arch: foreign

[Daniel Hartwig]

Package: cabextract
Version: 1.4-3
Severity: wishlist
User: multiarch-de...@lists.alioth.debian.org
Usertags: multiarch

Dear Maintainer,

Please mark cabextract as Multi-Arch: foreign to properly reflect it's
usage.  As wine is becoming multi-archified, it's chain of
dependencies should follow.

Some setups are having trouble with this indirectly via winetricks and
other programs ([1] for example).

Regards

[1] https://bugs.launchpad.net/bugs/1123710/comments/8


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686-bigmem (SMP w/1 CPU core)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cabextract depends on:
ii  libc6  2.13-38

cabextract recommends no packages.

cabextract suggests no packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700677: Incorrect upstream versioning / ABI breakage

[Colin Watson]

On Fri, Feb 15, 2013 at 08:09:45PM -0500, Phillip Susi wrote:
> It looks like upstream is improperly versioning their libraries so the
> package violates debian policy.  They have a major version of 835
> which has now gone to 838 in experimental, and then 84 in the new
> version in Ubuntu raring.  I think this means we need an epoch and
> - -debian0 ABI version.

No, no, no, no, no, no, no, no, no.  This is a seriously mangled version
of the state of affairs.  There's nothing wrong with upstream going from
835/838 to 84; SONAMEs need to be unique per ABI but they don't need to
follow any particular prescription for how they're changed.  Neither an
epoch nor a Debian-specific ABI is necessary, and certainly the latter
would be actively harmful.

What actually happened here is as follows:

 * Some time back, Daniel got fed up with the NEW processing treadmill
   for SONAME changes in ntfs-3g and folded the separate library package
   into the primary ntfs-3g package, since it had no
   reverse-dependencies.

 * I changed testdisk in Ubuntu to build against ntfs-3g rather than the
   old and deprecated libntfs.  At the time my focus was getting rid of
   old libraries, and it hadn't occurred to me that this would interact
   interestingly with this change.

 * On the next upstream ABI change, testdisk broke because it had a
   DT_NEEDED entry for the old libntfs-3g SONAME, and no packaging
   metadata could have warned users about it or automatically prevented
   the change from reaching testing.

I suggest a compromise which would preserve the convenience of avoiding
NEW processing while having more accurate metadata: have ntfs-3g
Provides: libntfs-3gSOVER (substituted as appropriate), and make
shlibdeps use libntfs-3gSOVER as the generated dependency rather than
ntfs-3g.  That way, we'll be able to tell automatically that
reverse-dependencies will be broken.  You might just need to take a
little care to avoid ntfs-3g having a self-dependency via the new
virtual package.

(It would be better to have the library package separate again, because
that way the old and new libraries could be coinstallable which would
make upgrades smoother.  However, since testdisk is a non-Essential leaf
package, it isn't completely horrible for it to break during upgrades,
just unsightly; and I do understand the convenience argument.)

Thanks,

-- 
Colin Watson   [cjwat...@ubuntu.com]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#696591: winetricks: Does not cleanly install on x86_64 anymore

[Daniel Hartwig]

retitle 696591 winetricks: please mark Multi-Arch: foreign
user multiarch-de...@lists.alioth.debian.org
usertags + multiarch
--

Hi

> [user has foreign-arch wine installed; has m-a dependency issues]

Winetricks should be marked m-a: foreign.

Properly cabextract also.  Will file a separate report for that.

Regards


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700682: pbzip2 can't compress file that starts with '-' (unless preceded with "./")

[Steve Ward]

Package: pbzip2
Version: 1.1.8-1
Severity: normal

# Steps to reproduce:
# (given a file named "-foo")

$ pbzip2 -- -foo
pbzip2: *ERROR: Won't read compressed data from terminal.  Aborting!
pbzip2: For help type: pbzip2 -h

$ echo $?
1



# prepending "./" works
$ pbzip2 -- ./-foo

# bzip2 works
$ bzip2 -- -foo


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages pbzip2 depends on:
ii  libbz2-1.0  1.0.6-4
ii  libc6   2.13-37
ii  libgcc1 1:4.7.2-5
ii  libstdc++6  4.7.2-5

pbzip2 recommends no packages.

pbzip2 suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700681: lzma can't decompress a file to stdout without a known suffix

[Steve Ward]

Package: lzma
Version: 9.22-2
Severity: normal

# Steps to reproduce:

$ lzma -c /usr/share/dict/words > foo

$ lzma -d -c foo > bar
foo:  unknown suffix -- unchanged

$ echo $?
2

# using pipes works
$ lzma -c /usr/share/dict/words | lzma -d -c > bar

# gzip works
$ gzip -c /usr/share/dict/words > foo
$ gzip -d -c foo > bar



# This was possibly fixed here:
http://git.tukaani.org/?p=lzma.git;a=commitdiff;h=8b13a3f20bdca0929cea1d5d5ca26addbbccb8c5
Don't require -S '' when writing to stdout and filename has unknown suffix.


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages lzma depends on:
ii  libc6   2.13-37
ii  libgcc1 1:4.7.2-5
ii  libstdc++6  4.7.2-5

lzma recommends no packages.

lzma suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700680: lbzip2 can't compress symlinks when output to stdout

[Steve Ward]

Package: lbzip2
Version: 2.2-2
Severity: minor

# Steps to reproduce:

$ lbzip2 -c /usr/share/dict/words > foo
lbzip2: skipping "/usr/share/dict/words": not a regular file

$ echo $?
4

# must use --force option
$ lbzip2 --force -c /usr/share/dict/words > foo

# bzip2 works
$ bzip2 -c /usr/share/dict/words > foo


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages lbzip2 depends on:
ii  libc6  2.13-37

lbzip2 recommends no packages.

lbzip2 suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700633: Debootstrap is very slow. Please use eatmydata to fix this.

[Cyril Brulebois]

Phillip Susi  (15/02/2013):
> This should also make installing new systems MUCH faster.

FWIW:
| base-installer (1.121) unstable; urgency=low
| 
|   [ Colin Watson ]
|   * Merge from Ubuntu:
| - Run dpkg with --force-unsafe-io during installation; syncing is
|   unnecessary in this context and can slow things down quite a bit
|   (closes: #605384).
| […]
| 
|  -- Joey Hess   Wed, 24 Aug 2011 19:11:09 -0400

Mraw,
KiBi.


signature.asc
Description: Digital signature

Bug#700679: ITP: maven-native -- Maven plugin to compile C/C++ source code

[Andres Mejia]

Package: wnpp
Severity: wishlist
Owner: Andres Mejia 

* Package name: maven-native
  Version : 1.0~alpha-7
  Upstream Author : Dan T. Tran 
* URL : http://mojo.codehaus.org/maven-native/native-maven-plugin/
* License : MIT
  Programming Lang: Java
  Description : Maven plugin to compile C/C++ source code

The Native Maven Plugin is a plugin to compile C and C++ source code under
Maven using native compilers such as gcc, msvc, gcj, etc.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700678: Please reenable the DDTP email interface

[Martin Eberhard Schauer]

Package: debian-i18n
Severity: normal
X-Debbugs-CC: debian-l10n-de...@lists.alioth.debian.org


Dear Masters of Infrastructure,

please reenable the DDTP email interface. I'm convinced that this will help
DDTP translation teams with little manpower (all except the Italian and 
Danish

ones).

What can be read on the web regarding DDTP (1) seems not to be true at 
present.


Copied from (1):


  Proofreading and error fixing
Only the DDTSS currently implements a review mode and only sends those
translations to the DDTP which passed a fixed number of proofreads.

Once you notice common typos or other easy to correct errors such as
encoding problems, it is possible to bypass any review process and 
to fix

this for all packages at once using a script. It is suggested that only
one trusted translation coordinator collects all these issues and 
applies

the script.

Since the proofreading can take a long time (especially if only minor
issues are fixed all the time), it may be an option to just ignore 
simple
typos and inconsistencies during the review and to start a check 
for all
of these (hopefully collected) issues later. This speeds up the 
review and

allows to apply these corrections later in all descriptions.


At present I'm not aware of means to handle these trivial tasks. I would
appreciate very much to get back the tool that I used a lot in the past.

Kind regards,
Martin

1: http://www.debian.org/international/l10n/ddtp


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#697548: same problem with another PC

[gpe]

Hi,

I've the same problem with another PC based on an ASUS P8P67-LE motherboard
and A Core i5-2500k.

Regards,

gpe


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#697310: faulty control sequence sent to this bug

[Mike Gabriel]

notfound #697310 3.99.2.1-4
thanks

Hi,

unfortunately, Oleksandr Shneyder sent a control sequence to this bug  
that was intended for #693710.


Undoing his control command herewith.

Mike

--

DAS-NETZWERKTEAM
mike gabriel, rothenstein 5, 24214 neudorf-bornstein
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb


pgpmQ6b9JNaSv.pgp
Description: Digitale PGP-Unterschrift

Bug#696369: gforge-web-apache2: fails to upgrade from 'lenny' - trying to overwrite /usr/share/gforge/www/include/vote_function.php

[Andreas Beckmann]

Followup-For: Bug #696369
Control: tag -1 patch

Hi,

I'm attaching a patch that should fix this file conflict. I checked the
packages on snapshot.d.o to find the point where the files were moved
around.
I also asked to fix this issue via PU: http://bugs.debian.org/700675

I'd offer to NMU, but I prefer not to do this since I have no experience
with fusionforce and don't know how I can properly test it. I'm currently
verifying installability and upgradability with piuparts ... but that's
all I can do here.
Could anything break due to appending "+squeeze1" to the version number?

Note that p-u-NEW for the next stable point release (scheduled for 23rd)
will close on Monday.


Andreas
diffstat for fusionforge_5.0.2-5 fusionforge_5.0.2-5+squeeze1

 debian/control |2 ++
 fusionforge-5.0.2/debian/changelog |9 +
 2 files changed, 11 insertions(+)

diff -u fusionforge-5.0.2/debian/changelog fusionforge-5.0.2/debian/changelog
--- fusionforge-5.0.2/debian/changelog
+++ fusionforge-5.0.2/debian/changelog
@@ -1,3 +1,12 @@
+fusionforge (5.0.2-5+squeeze1) stable; urgency=low
+
+  * Non-maintainer upload.
+  * gforge-web-apache2: Add Breaks/Replaces: gforge-common (<< 4.8).
+Avoid a file conflict during upgrades from lenny due to files being moved
+around between packages.  (Closes: #696369)
+
+ -- Andreas Beckmann   Sat, 16 Feb 2013 01:03:46 +0100
+
 fusionforge (5.0.2-5) unstable; urgency=low
 
   * Stop trying to copy libcap into chroot, since it's not used by PAM
only in patch2:
unchanged:
--- fusionforge-5.0.2.orig/debian/control
+++ fusionforge-5.0.2/debian/control
@@ -88,6 +88,8 @@
 Recommends: libphp-jpgraph, locales | locales-all
 Provides: gforge-web
 Conflicts: gforge-web
+Breaks: gforge-common (<< 4.8)
+Replaces: gforge-common (<< 4.8)
 Description: collaborative development tool - web part (using Apache)
  FusionForge provides many tools to aid collaboration in a
  development project, such as bug-tracking, task management,

Bug#700677: Incorrect upstream versioning / ABI breakage

[Phillip Susi]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: ntfs-3g

It looks like upstream is improperly versioning their libraries so the
package violates debian policy.  They have a major version of 835
which has now gone to 838 in experimental, and then 84 in the new
version in Ubuntu raring.  I think this means we need an epoch and
- -debian0 ABI version.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJRHtxZAAoJEJrBOlT6nu75jewH/RNBXoDZfiSlWnp9gpnXpVOP
oFW/Q5+WtsYqp3UxRDGs5mSqpXr3hMBXuuXGpRbuMAORjK+JnmrcvEtcGUz6MuhH
ee9h3K6PL1RnXk/HmnEEQSSzUhxnQDgKFyPeWyN/cO7p/rn2ySS0j2I1xrRZADNJ
YnuquIpOgZpK7QBl7qPtTOJV87zebqfhQ9FUEWg/7c6Tyk+rK5GlKDgHZYmBiikt
1BMOiKh2vcR84He/S0Pbh0cGTE2sveG80B/whLML4c+pFWSKwUXGzHxJ2Li2ivAu
/TffcwsEkddvoImiH8Wzus/NjQlSy/owXCkvEbT5+aZFBz4VpHu3JP0vuG0w/zM=
=Aodn
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#696909: chromium segfaults on startup on armhf

[peter green]

peter green wrote:

I can confim that using bfd instead of gold fixes the issue on armhf.
Since this mail a new version of chromium has hit sid and i've been 
doing some tests with it. I have good news and bad news.


The good news:
by using --no-keep-memory I was able to get the address space use of bfd 
down to a level where I could build the armel package on real (alibeit 
armv7) hardware and the resulting binary package works


The bad news
When I built the latest version for armhf with bfd and --no-keep-memory 
it didn't segfault on startup but it did fail with an "aw snap" error. 
Running with --single-process resulted in a segfault (though MUCH MUCH 
later in the startup process). I tried to get a backtrace but didn't 
manage to get a useful one.


root@linaro-ubuntu-desktop:/# chromium --debug --temp-profile 
--single-process

# Env:
# LD_LIBRARY_PATH=/usr/lib/chromium:/usr/lib/xulrunner-1.9.1
#
PATH=/usr/lib/chromium:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games

#GTK_PATH=
# CHROMIUM_USER_FLAGS=
#  CHROMIUM_FLAGS=--password-store=detect 
--user-data-dir=/tmp/tmp.qG3PfgnZsI

/usr/bin/gdb /usr/lib/chromium/chromium -x /tmp/chromiumargs.6OnkCE
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 


This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux-gnueabihf".
For bug reporting instructions, please see:
...
Reading symbols from /usr/lib/chromium/chromium...Reading symbols from 
/usr/lib/debug/usr/lib/chromium/chromium...done.

done.
(gdb) run
Starting program: /usr/lib/chromium/chromium --password-store=detect 
--user-data-dir=/tmp/tmp.qG3PfgnZsI --single-process

[Thread debugging using libthread_db enabled]
Using host libthread_db library 
"/lib/arm-linux-gnueabihf/libthread_db.so.1".

[New Thread 0x42236290 (LWP 25964)]
[New Thread 0x42a7b290 (LWP 25965)]
[New Thread 0x4327b290 (LWP 25967)]
[New Thread 0x4329b290 (LWP 25968)]
[New Thread 0x43a9b290 (LWP 25969)]
[25946:25965:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused

[New Thread 0x40033290 (LWP 25970)]
[25946:25965:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25980:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25980:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25988:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25988:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25988:0216/002947:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_socket: 
Connection refused
[25971:25971:0216/002947:ERROR:media_transfer_protocol_daemon_client.cc(386)] 
Connect to org.chromium.Mtpd MTPStorageAttached failed.
[25971:25971:0216/002947:ERROR:media_transfer_protocol_daemon_client.cc(386)] 
Connect to org.chromium.Mtpd MTPStorageDetached failed.

[New Thread 0x44d9d290 (LWP 26000)]
[New Thread 0x4559d290 (LWP 26001)]
[New Thread 0x45d9d290 (LWP 26002)]
[New Thread 0x4659d290 (LWP 26003)]
[New Thread 0x46d9d290 (LWP 26004)]
[New Thread 0x4759d290 (LWP 26005)]
[New Thread 0x43ae1290 (LWP 26006)]
[25946:26005:0216/002948:ERROR:proxy_service_factory.cc(88)] Cannot use 
V8 Proxy resolver in single process mode.

[New Thread 0x47edf290 (LWP 26007)]
[25946:26001:0216/002949:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_soconnection 
refused
[25946:26001:0216/002949:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_soconnection 
refused
[25946:26001:0216/002949:ERROR:bus.cc(307)] Failed to connect to the 
bus: Failed to connect to socket /var/run/dbus/system_bus_soconnection 
refused
[25946:26005:0216/002949:ERROR:proxy_service_factory.cc(88)] Cannot use 
V8 Proxy resolver in single process mode.

[New Thread 0x486ff290 (LWP 26008)]
[New Thread 0x490ba290 (LWP 26009)]
[New Thread 0x49aae290 (LWP 26013)]
[New Thread 0x4a2ae290 (LWP 26014)]
[New Thread 0x4aaae290 (LWP 26019)]
[New Thread 0x4b2ae290 (LWP 26020)]
[New Thread 0x49250290 (LWP 26022)]
[New Thread 0x4bdff290 (LWP 26023)]
[25946:25946:0216/002952:ERROR:media_transfer_protocol_daemon_client.cc(

Bug#700676: TAG: opencolorio -- complete color management solution

[Marcus Watts]

Package: wnpp
Severity: RFP

OpenColorIO
http://opencolorio.org
is a "compete color management solution"

I've been experimenting with newer versions of blender,
which as of 2.64 has added support for "opencolorio".  I believe
this can add significant useful functionality to blender.  It looks
like "krita" and "openimageio" can also use it.

For blender,
http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.64/Color_Management

For krita,
http://krita.org/item/113-krita-starts-supporting-opencolorio

Since opencolorio in turn also depends on "openimageio" it appears to
me that it would be most logical if the same folks maintained both.

copyright,
upstream
*
Copyright: 2003-2010 Sony Pictures Imageworks Inc., et al.
( better yet, see their statement,
http://opencolorio.org/License.html
)

since I started with IRIE Shinsuke's package,
debian/*
Copyright: 2012 IRIE Shinsuke 
License: BSD-3-Clause

In the hopes this will make life easier for folks,
here's source & a sample binary for what I have:

http://www-personal.umich.edu/~mdw/deb/

opencolorio_1.0.8-1_source.changes
opencolorio_1.0.8.orig.tar.gz
opencolorio_1.0.8-1.debian.tar.gz
opencolorio_1.0.8-1.dsc

opencolorio-doc_1.0.8-1_all.deb
opencolorio-tools_1.0.8-1_amd64.deb
opencolorio_1.0.8-1_amd64.changes
libopencolorio-dev_1.0.8-1_amd64.deb
libopencolorio0_1.0.8-1_amd64.deb

I started with IRIE Shinsuke's ubuntu configuration, but that only
built static libraries.  My build now also includes a shared library,
documentation, and tools.

-Marcus Watts


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700675: pu: package fusionforge/5.0.2-5+squeeze1

[Andreas Beckmann]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: pu

Hi,

there is an upgrade issue from lenny to squeeze:

  Preparing to replace gforge-web-apache2 4.7~rc2-7lenny3 (using 
.../gforge-web-apache2_5.0.2-5_all.deb) ...
  Unpacking replacement gforge-web-apache2 ...
  dpkg: error processing 
/var/cache/apt/archives/gforge-web-apache2_5.0.2-5_all.deb (--unpack):
   trying to overwrite '/usr/share/gforge/www/include/vote_function.php', which 
is also in package gforge-common 4.7~rc2-7lenny3

that should be fixable by adding to gforge-web-apache2
  Breaks/Replaces: gforge-common (<< 4.8)

(verified in snapshot.d.o that the move happened there).


Andreas
diffstat for fusionforge_5.0.2-5 fusionforge_5.0.2-5+squeeze1

 debian/control |2 ++
 fusionforge-5.0.2/debian/changelog |9 +
 2 files changed, 11 insertions(+)

diff -u fusionforge-5.0.2/debian/changelog fusionforge-5.0.2/debian/changelog
--- fusionforge-5.0.2/debian/changelog
+++ fusionforge-5.0.2/debian/changelog
@@ -1,3 +1,12 @@
+fusionforge (5.0.2-5+squeeze1) stable; urgency=low
+
+  * Non-maintainer upload.
+  * gforge-web-apache2: Add Breaks/Replaces: gforge-common (<< 4.8).
+Avoid a file conflict during upgrades from lenny due to files being moved
+around between packages.  (Closes: #696369)
+
+ -- Andreas Beckmann   Sat, 16 Feb 2013 01:03:46 +0100
+
 fusionforge (5.0.2-5) unstable; urgency=low
 
   * Stop trying to copy libcap into chroot, since it's not used by PAM
only in patch2:
unchanged:
--- fusionforge-5.0.2.orig/debian/control
+++ fusionforge-5.0.2/debian/control
@@ -88,6 +88,8 @@
 Recommends: libphp-jpgraph, locales | locales-all
 Provides: gforge-web
 Conflicts: gforge-web
+Breaks: gforge-common (<< 4.8)
+Replaces: gforge-common (<< 4.8)
 Description: collaborative development tool - web part (using Apache)
  FusionForge provides many tools to aid collaboration in a
  development project, such as bug-tracking, task management,

Bug#699844: requests mis-treats 303 responses due to a typo

[Daniele Tricoli]

Hello Paul,
many thanks for the report!

On Tuesday 05 February 2013 21:02:37 Paul Tagliamonte wrote:
> I've attached upstream's fix. Some bits:
> 
>  Caused by using `is' on ints, rather then "==". Upstream bug 1156[1],
>  fixed in commit b07c1ebd859a32e1203c1d4ef27f1fb9e154e55e (attached).
> 
> This violates a "SHOULD" in the HTTP/1.1 RFC, and it'd be really nice to
> get this fixed for wheezy, if there is a way to get such a small change
> in.

As you already noticed 1.1.0 is currently in experimental, but if you need 
this, I can include the patch in 1.1.0-2.

A part for 0.14.2 -> 1.0.0, usually upstream makes at least 1 release per 
month, so I was waiting, but I can just include the patch now if it's 
needed.

Kind regards,

-- 
 Daniele Tricoli 'Eriol'
 http://mornie.org


signature.asc
Description: This is a digitally signed message part.

Bug#693984: libzorpll-dev: fails to upgrade lenny -> squeeze - trying to overwrite /usr/include/zorp/streamblob.h

[Andreas Beckmann]

Followup-For: Bug #693984

Hi,

I have just asked the SRM for fixing via s-p-u:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700672
and this will be granted very likely.

A proposed patch is attached, I intend to NMU libzorpll once that
request was accepted. Unfortunately p-u-NEW will close on Monday for the
next point release that is scheduled for 23rd, so I can probably only 
upload this to DELAYED/1 to be in time ...

In case you have any objections, please let me know and I won't NMU.


Andreas
diffstat for libzorpll_3.3.0.12-4 libzorpll_3.3.0.12-4+squeeze1

 changelog |9 +
 control   |2 ++
 2 files changed, 11 insertions(+)

diff -u libzorpll-3.3.0.12/debian/changelog libzorpll-3.3.0.12/debian/changelog
--- libzorpll-3.3.0.12/debian/changelog
+++ libzorpll-3.3.0.12/debian/changelog
@@ -1,3 +1,12 @@
+libzorpll (3.3.0.12-4+squeeze1) stable; urgency=low
+
+  * Non-maintainer upload.
+  * libzorpll-dev: Add (unversioned) Breaks/Replaces: libzorp2-dev due to a
+file conflict. libzorp2-dev was removed after lenny and now libzorpll-dev
+ships /usr/include/zorp/streamblob.h.  (Closes: #693984)
+
+ -- Andreas Beckmann   Sat, 16 Feb 2013 00:02:20 +0100
+
 libzorpll (3.3.0.12-4) unstable; urgency=low
 
   * Fixed process.c compilation error when libcap is not
diff -u libzorpll-3.3.0.12/debian/control libzorpll-3.3.0.12/debian/control
--- libzorpll-3.3.0.12/debian/control
+++ libzorpll-3.3.0.12/debian/control
@@ -23,6 +23,8 @@
 Section: libdevel
 Architecture: any
 Depends: libzorpll3.3-0 (= ${binary:Version}), ${misc:Depends}, libglib2.0-dev, libcap-dev [linux-any], libssl-dev
+Breaks: libzorp2-dev
+Replaces: libzorp2-dev
 Description: Low level library functions for Zorp, development files
  Zorp is a new generation firewall. It is essentially a transparent proxy
  firewall, with strict protocol analyzing proxies, a modular architecture,

Bug#700674: gnumeric: Should not remember number of copies to print from different files in a previous run

[Ryan Niebur]

Package: gnumeric
Version: 1.10.8-1squeeze5
Severity: minor

Hi,

We have observed behavior where gnumeric will remember the print job
preferences, such as number of copies, from a previous run when we are
opening a different file at a later point in time.

Steps to reproduce:

Part 1: Print something with 5 copies
1. Open Gnumeric
2. Save a spreadsheet as Book1.gnumeric
3. Go to the File->Print screen
4. Change the Copies: to 5
5. Click either "Print Preview" or "Print"
6. Close out of Gnumeric

Part 2: Try to print something, expecting only once
1. Open Gnumeric again
2. Save a spreadsheet as Book2.gnumeric
3. Go to the File->Print screen
4. Observe that "Copies:" remembered "5" from the other spreadsheet

The behavior we expect here is for Gnumeric to not remember the number
of copies, or to at least only remember it for the specific file. The
problem this causes is that most people expect the "Copies:" to
default to 1, but if they don't remember that they've printed 20
copies of something last week, they end up wasting quite a lot of
paper. We'd like to have a way to prevent that, if possible.

Thanks in advance for considering this,
Ryan

-- 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700673: boa: QUERY_STRING not in CGI environment for null query string

[Sabahattin Gucukoglu]

Package: boa
Version: 0.94.14rc21-amd64
Severity: normal
Tags: upstream

Hi,

I recently installed the winhelpcgi.cgi program on my server machine, which 
breaks under boa because it expects to see a QUERY_STRING variable in its 
environment, even if it is an empty string for the case that no query string 
is supplied.  This is unusual, but completely valid--it's explicitly 
required by the CGI spec * that the server MUST set QUERY_STRING, even if 
empty, and CGI programs can reliably use this to detect whether they are 
running under a web server.

At the moment, I have a little shell script that sets the QUERY_STRING 
variable to "" if none is present in the environment and then execs the real 
CGI binary, but a real fix in boa would be appreciated.  I could, of course, 
also patch a workaround into winhelpcgi.cgi directly.

Cheers,
Sabahattin

* At the moment, that seems to be the (informational) RFC 3875.

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#686447: [RFC] First release of spl-dkms and zfs-linux packages for Debian

[Carlos Alberto Lopez Perez]

Hi!

An update here.

I was a bit busy later. Today I was talking with Aron on IRC and we
agreed that we will push your repository on Alioth in order to keep the
full history.

In fact is already there:

http://anonscm.debian.org/gitweb/?p=pkg-zfsonlinux/zfs.git
http://anonscm.debian.org/gitweb/?p=pkg-zfsonlinux/spl.git

And we will start from this codebase.

I will be rebasing some of the changes I did on a separate branch (and
splitting them in small commits) so we could discuss later each one of
this changes.

See below for the inline replies to your last mail:


On 16/12/12 09:19, Darik Horn wrote:
>> Strip from spl-dkms all files not related to kernel modules.
> 
> Why are you removing copyright attributions like the AUTHORS file?
> This could upset ZoL contributors and cause legal exposure.
> 
> 

I thought that debian/copyright file would be enough to give credit to
the authors of the software.

However you are right. A simple "apt-file search AUTHORS" give me more
than enough reasons to keep this file.

>> Rewrite postinst helper that ensures that /etc/hostid is valid and will 
>> remain constant across reboots.
> 
> The __BYTE_ORDER__ test is interesting.  I will likely add it to pkg-spl.
> 
> However, randomizing the hostid violates the principle of least
> astonishment because it causes a zpool.cache mismatch that breaks
> subsequent imports, and it can break license management for non-Debian
> software.
> 
> Stabilizing the hostid is safe, but changing the hostid is unsafe for
> the same reason that randomizing a missing hostname is wrong.
> 
> 

I'm only randomizing it when the current host's hostid is "0x",
which I understand is an invalid hostid for ZFS and would case it to
stop working properly. Isn't this the case?


> The pristine-tar branch already exists in pkg-spl and pkg-zfs.  Using
> the pristine-tar facility is certainly correct, but not currently
> practical for doing the frequent releases that ZoL users expect.

We should agree on a common way of working.

Either we use pristine-tar or not.

I'm relative new to use git for Debian packages. So I'm open to follow
yours and Aron advice.


> 
> 
>> Fix clean target and use dh_autoreconf
> 
> This breaks backports for Lucid (and its derivatives) because
> dh-autoreconf is a non-main package on those systems.  Keeping
> compatibility with all officially supported Ubuntu variants is
> worthwhile and something that I want to do.
> 
> 

Well. I love to have things as clean and small as possible.
dh_autoreconf helps with that. But I understand your point. Not big deal.

>> Update debian/watch to track upstream official release tarballs
> 
> Is the Github redirector fully obsolete?  (nb:
> http://wiki.debian.org/debian/watch/)
> 
> The pkg-spl and pkg-zfs watch files were added after an earlier
> private ITP review.
> 
> 

github redirector is not longer needed, so why use it?

http://wiki.debian.org/debian/watch?action=diff&rev2=10&rev1=9

Also the url on the debian/watch on your packages is not working.

This is what the current master on Alioth (your package) reports:

$ uscan --report-status
Processing watchfile line for package zfs-linux...
Newest version on remote site is 0~master, local version is 0.6.0.97
zfs-linux: remote site does not even have current version


This is what the package that I did previously reports:

$ uscan --report-status
Processing watchfile line for package zfs-linux...
Newest version on remote site is 0.5.2, local version is 0.6.0~rc12
zfs-linux: remote site does not even have current version




>> Strip from zfs-dkms all files not related to kernel modules.
>> Clean debian directory for unneeded *.docs
>> (copyright notices should be added to debian/copyright properly)
> 
> The OPENSOLARIS.LICENSE file should be unmodified and bundled in every
> ZFS package, even if the CDDL is duplicated in the debian/copyright
> file.
> 
> Modifying or omitting Oracle legal notices will attract Oracle
> lawyers.  Saving less than 64 kilobytes of boilerplate per
> installation is just not worth the risk.
> 
> 
Ok.

>> Add zfs-linux metapackage for convenience to install all ZFS
> 
> Consider naming this debian-zfs to fit the naming convention of other
> meta packages already in distribution, and to better accommodate the
> kFreeBSD platform in case the meta package can be shared.
> 
> Big or important source packages do not typically provide their own
> meta.  Doing this makes it more difficult for large sites to do local
> overrides and customization.  (And it follows that I should rename the
> ubuntu-zfs source package to something like meta-ubuntu-zfs for better
> conformance.)
> 
> 

I don't see the point of sharing such metapackage with kFreeBSD. The
whole point of the metapackage is to pull the right versions of the spl
and zfs dkms modules (which are linux specific) plus the right versions
of the user space tools that are also linux specific.


>> ensure dependencies are also always updated to the right vers

Bug#700672: pu: package libzorpll/3.3.0.12-4+squeeze1

[Andreas Beckmann]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: pu

Hi,

there is an upgrade issue from lenny to squeeze due to a file conflict
between libzorp2-dev (existed in lenny only) and libzorpll-dev:

  Preparing to replace libzorpll-dev 3.0.6.4.2+nmu1 (using 
.../libzorpll-dev_3.3.0.12-4_amd64.deb) ...
  Unpacking replacement libzorpll-dev ...
  dpkg: error processing 
/var/cache/apt/archives/libzorpll-dev_3.3.0.12-4_amd64.deb (--unpack):
   trying to overwrite '/usr/include/zorp/streamblob.h', which is also in 
package libzorp2-dev 3.0.8-0.5

An unversioned Breaks/Replaces should fix this, libzorp2-dev is not
used as a virtual package.


Andreas
diffstat for libzorpll_3.3.0.12-4 libzorpll_3.3.0.12-4+squeeze1

 changelog |8 
 control   |2 ++
 2 files changed, 10 insertions(+)

diff -u libzorpll-3.3.0.12/debian/changelog libzorpll-3.3.0.12/debian/changelog
--- libzorpll-3.3.0.12/debian/changelog
+++ libzorpll-3.3.0.12/debian/changelog
@@ -1,3 +1,11 @@
+libzorpll (3.3.0.12-4+squeeze1) UNRELEASED; urgency=low
+
+  * Non-maintainer upload.
+  * libzorpll-dev: Add Breaks/Replaces: libzorp2-dev. In lenny libzorp2-dev
+was shipping /usr/include/zorp/streamblob.h.  (Closes: #693984)
+
+ -- Andreas Beckmann   Fri, 15 Feb 2013 23:46:18 +0100
+
 libzorpll (3.3.0.12-4) unstable; urgency=low
 
   * Fixed process.c compilation error when libcap is not
diff -u libzorpll-3.3.0.12/debian/control libzorpll-3.3.0.12/debian/control
--- libzorpll-3.3.0.12/debian/control
+++ libzorpll-3.3.0.12/debian/control
@@ -23,6 +23,8 @@
 Section: libdevel
 Architecture: any
 Depends: libzorpll3.3-0 (= ${binary:Version}), ${misc:Depends}, libglib2.0-dev, libcap-dev [linux-any], libssl-dev
+Breaks: libzorp2-dev
+Replaces: libzorp2-dev
 Description: Low level library functions for Zorp, development files
  Zorp is a new generation firewall. It is essentially a transparent proxy
  firewall, with strict protocol analyzing proxies, a modular architecture,

Bug#700671: ruby: breaks squeeze->wheezy upgrade if apt-listbugs/0.1.3 is installed

[Sebastian Ramacher]

Package: ruby
Version: 4.9
Severity: serious
Justification: breaks squeeze->wheezy upgrades

The transition of the default version from ruby1.8 to ruby1.9.1 causes
the upgrade from squeeze to wheezy to fail if apt-listbugs is installed.
After replacing squeeze with wheezy in /etc/apt/sources.list and a
successful 'apt-get update' and 'apt-get install dpkg apt', 'apt-get
[upgrade|install|dist-upgrade]' all fail with:

/usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require': cannot load 
such file -- gettext (LoadError)
from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'
from /usr/sbin/apt-listbugs:240:in `'
E: Sub-process /usr/sbin/apt-listbugs apt || exit 10 returned an error code (10)
E: Failure running script /usr/sbin/apt-listbugs apt || exit 10

'apt-get install dpkg apt' causes ruby to be installed and thus
/usr/bin/ruby points to ruby1.9.1 afterwards. However, ruby-gettext,
which provides the gettext module for ruby1.9.1, doesn't get installed.
Since /usr/bin/apt-listbugs has #!/usr/bin/ruby as shebang,
apt-listbugs is then executed with ruby1.9.1 and fails with the error
message above.

apt-listbugs's shebang has been changed to #/usr/bin/ruby1.8 in
0.1.6. So I think that ruby should gain a Breaks: apt-listbugs (<<
0.1.6) to force the upgrade of apt-listbugs if ruby is installed.

I'm filing this bug with severity serious since it breaks upgrades from
squeeze to wheezy.

If my analysis of this bug is wrong, please reassign it to the correct
package and change the severity accordingly.

I've attached the log of performing the upgrade to wheezy in a squeeze
chroot which has apt-listbugs installed.

Regards
-- 
Sebastian Ramacher


squeeze-to-wheezy-update.log.xz
Description: Binary data


signature.asc
Description: Digital signature

Bug#700670: cltl: /usr/share/doc/cltl/* disappearing after lenny -> squeeze -> wheezy upgrade

[Andreas Beckmann]

Package: cltl
Version: 1.0.26
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

[Note: this bug is slightly different from the other bugs where the
copyright file is missing after an upgrade, but I didn't have time to
analyze and test it further, so you are getting a maybe not entirely
fitting template ...]

Hi,

a test with piuparts revealed that your package misses the copyright
file after an upgrade, which is a violation of Policy 12.5:
http://www.debian.org/doc/debian-policy/ch-docs.html#s-copyrightfile

After the upgrade /usr/share/doc/$PACKAGE/ is just an empty directory.

This was observed on the following upgrade paths:

  lenny -> squeeze -> wheezy

Both

  lenny -> squeeze
  squeeze -> wheezy

work fine

>From the attached log (scroll to the bottom...):

1m40.4s ERROR: FAIL: debsums reports modifications inside the chroot:
  debsums: missing file /usr/share/doc/cltl/copyright (from cltl package)
  debsums: missing file /usr/share/doc/cltl/README.Debian (from cltl package)
  debsums: missing file /usr/share/doc/cltl/changelog.gz (from cltl package)


Additional info may be available here:
http://wiki.debian.org/MissingCopyrightFile

Note that dpkg intentionally does not replace directories with symlinks
and vice versa, you need the maintainer scripts to do this.
See in particular the end of point 4 in
http://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-unpackphase

For switching from a directory to a symlink the *postinst* script
should do something like this:

DOCDIR=/usr/share/doc/@@PACKAGE@@
DOCLINK=@@OTHERPACKAGE@@

if [ -d $DOCDIR ] && [ ! -L $DOCDIR ] ; then
rmdir $DOCDIR
ln -s $DOCLINK $DOCDIR
fi

For switching from a symlink to a directory, the *preinst* script
should do something like this:

DOCDIR=/usr/share/doc/@@PACKAGE@@

if [ -L $DOCDIR ] ; then
rm $DOCDIR
fi


cheers,

Andreas


cltl_1.0.26.log.gz
Description: GNU Zip compressed data

Bug#700333: Anyone?

[vitalif]

Anyone?

The bug still persists in 3.7.8-1~experimental.1.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700669: pyrad: CVE-2013-0294 and CVE-2013-0295

[Salvatore Bonaccorso]

Package: pyrad
Version: 2.0-1
Severity: grave
Tags: security
Control: found -1 1.2-1

Hi,
the following vulnerabilities were published for pyrad.

CVE-2013-0294[0]:
potentially predictable password hashing

CVE-2013-0295[1]:
CreateID() creates serialized packet IDs for RADIUS

Note: it's currently under discussion if there should only be assigned
one CVE for this issue.

A patch is available at [2] using random.SystemRandom() for to use
cryptographic-safe random generator instead of random. I have choosen
severity grave because of this reasoning:

CVE-2013-0294: [...] In the case of the authenticator data, it was being
used to secure a password sent over the wire.  Because Python's random
module is not really suited for this purpose (not random enough), it
could lead to password hashing that may be predictable.

CVE-2013-0295: [...] This is not suitable for RADIUS as the RFC
specifies that the ID must not be predictable.  As a result, the ID of
the next packet sent can be spoofed.

(from Red Hat bugreports)

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] http://security-tracker.debian.org/tracker/CVE-2013-0294
[1] http://security-tracker.debian.org/tracker/CVE-2013-0295
[2] 
https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#593175:

[Adnan Hodzic]

Hello,

I have the same problem as reported above.

I installed Wheezy with Wheezy beta 4 installer, then upgraded to Sid.
I did not use option to have my disk automatically partitioned and
encrypted. I manually partitioned my disk along with LVM, then had it
encrypted with LUKS. I did this in past (same way) and have never
encountered same kind of problem.

Now when I run Nautilus, under devices I have "256 GB Unrecognized".
When I click on it (try mounting it) I get:

-

Unable to mount 256 GB Unrecognized

One or more block devices are holding /dev/dm-0

-

http://foolcontrol.org/img/dm-0.png


Let me know if I can provide you with any other kind of information.

Adnan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#687334: buildds ready for wheezy-security?

[Kurt Roeckx]

On Fri, Feb 15, 2013 at 09:27:14AM +0100, Thijs Kinkhorst wrote:
> Hi wb-team,
> 
> I read in this bug log that most aspects of wheezy-security have been
> taken care of, but Philipp reported on Jan 4 that the buildds still need
> to be taken care of. Can something be said about the progress of that? How
> far along are we?
> 
> It would be great if we could have a guinea pig security update for wheezy
> through wheezy-security sometime soon, so we can verify that everything is
> in order for the release.

As far as I understand things, things on the wanna-build side
should all be in order.  So if something got uploaded, it should
end up in the queue.

The question is just if all the buildds are configured for it, and
at least mine seem to be set up to do it for a year.  It should
have been set up at the same time as wheezy-proposed-updates got
set up.


Kurt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700668: libp11-kit-dev: please link to /usr/share/gtk-doc/html/p11-kit from /usr/share/doc/libp11-kit-dev

[Daniel Kahn Gillmor]

Package: libp11-kit-dev
Version: 0.14-2
Severity: wishlist

libp11-kit-dev installs its html documentation in
/usr/share/gtk-doc/html/p11-kit.

A normal place to look for html documentation associated with package
foo is /usr/share/doc/foo/html.  If libp11-kit-dev could install a
symlink from /usr/share/doc/libp11-kit-dev/html to
/usr/share/gtk-doc/html/p11-kit, that would be great!

thanks for maintaining p11-kit in debian,

   --dkg

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.7-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libp11-kit-dev depends on:
ii  libp11-kit0  0.14-2

libp11-kit-dev recommends no packages.

libp11-kit-dev suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#594449: proftpd-basic: Unable to reload (signal HUP) - The process is killed

[Francesco P. Lovergine]

On Sat, Feb 09, 2013 at 09:14:55PM +0100, Adam Lackorzynski wrote:
> Hi,
> 
> I was seeing the same issue on wheezy systems (x86 32 and 64 bit).
> proftpd process segfaults on SIGHUP. After tracing this a bit the
> segfault happens when processing restart events of the quotatab module.
> Thus disabling quota modules in the config makes reload/SIGHUP work
> again for me.
> 

Thanks, it seems a cyclic problem in HUP, let me see if it can be squashed 
on this basis.

-- 
Francesco P. Lovergine


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700666: override: xvba-va-driver:contrib/video/optional, nvidia-vdpau-driver:non-free/video/optional

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

These are user-land video drivers.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700665: override: kde-l10n-tg:localization/optional, kde-l10n-th:localization/optional, kde-l10n-tr:localization/optional, kde-l10n-ug:localization/optional, kde-l10n-uk:localization/optional, kde

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

Final batch of localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700664: override: kde-l10n-pl:localization/optional, kde-l10n-pt:localization/optional, kde-l10n-ptbr:localization/optional, kde-l10n-ro:localization/optional, kde-l10n-ru:localization/optional, k

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700663: override: kde-l10n-kk:localization/optional, kde-l10n-km:localization/optional, kde-l10n-ko:localization/optional, kde-l10n-lt:localization/optional, kde-l10n-lv:localization/optional, kde

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#672554: konsole: vertically misaligned/cut off characters

[Maximiliano Curia]

retitle 672554 konsole: vertically misaligned/cut off characters
tags 672554 + patch
thanks

Hello,

This bug seems to be caused by a problem in the qt's painter::drawText
method handling monospace fonts with different attributes (bold, inverted and
such), that end up with slightly different positions.

The konsole developers applied two patches to handle this problem, the first
one increased the text linespacing so that the misalignment
doesn't end up with cut off characters. (affecting src/TerminalDisplay.h
setBidiEnabled function).

The second patch adds a flag to the drawText to align the text (this shouldn't
be needed in a monospace font), the result hides the problem in almost every
case (affecting src/TerminalDisplay.cpp drawCharacters function).

Both patches are applied only to the unidirectional text rendering, but after
a few releases the bidirectional text rendering became the default, thus making
this bug noticeable again. Although as the bidirectional renderer draws the
whole line, the misplacement won't make the terminal useless as the
unidirectional renderer used to cause; it's just annoying.

The misplacement is not always the same, it depends on the font you are using,
some fonts seem to be particularly prone to misplacement. Currently, I'm using
the Anonymous Pro font; before, I used the Terminus font and it was displaced
more heavily in presence of unicode chars, while the TrueType fonts seem to be
displaced with the change of attributes.

To test this bug, I use the manpage of fonts.conf, close to the end of the
manpage, the line that starts with conf.d, the text is sligthly misplaced.
Selecting a word causes the line to get redrawn in a slightly different
position. This misplacement is very subtle, some texts produce a more serious
misplacement, but this is the one I found when I was tracking the problem.

I'm attaching two patches that modify the patches made by upstream, the first
one adds the alignBottom flag to the bidirectional renderer. This patch hides
part of the misplacement in the bidirectional renderer.

The second patch reverts the added linespacing for the unidirectional
renderer, making the lines in konsole of the same height than in any other
program, while using the same font (this can be tested using a gnome-terminal
or similar with transparency on top of konsole).

As mentioned before, these patches only reduce the effect of the problem, but
the error is somewhere in the execution produced by drawText. So far, I
haven't found the culprit.

-- 
"If you are in a hole, stop digging." -- The First Rule of Excavation
Saludos /\/\ /\ >< `/
Index: konsole/src/TerminalDisplay.cpp
===
--- konsole.orig/src/TerminalDisplay.cpp	2013-02-15 13:56:21.342032187 +0100
+++ konsole/src/TerminalDisplay.cpp	2013-02-15 14:37:06.932813212 +0100
@@ -701,6 +701,13 @@
 if (isLineCharString(text)) {
 drawLineCharString(painter, rect.x(), rect.y(), text, style);
 } else {
+		// Avoid fonts vertical displacement.
+
+		// See bug 280896 for more info
+		int flags = 0;
+#if QT_VERSION >= 0x040800
+		flags |= Qt::AlignBottom;
+#endif
 // Force using LTR as the document layout for the terminal area, because
 // there is no use cases for RTL emulator and RTL terminal application.
 //
@@ -715,14 +722,9 @@
 //
 // This was discussed in: http://lists.kde.org/?t=12055222362&r=1&w=2
 if (_bidiEnabled) {
-painter.drawText(rect, 0, text);
+painter.drawText(rect, flags, text);
 } else {
-// See bug 280896 for more info
-#if QT_VERSION >= 0x040800
-painter.drawText(rect, Qt::AlignBottom, LTR_OVERRIDE_CHAR + text);
-#else
-painter.drawText(rect, 0, LTR_OVERRIDE_CHAR + text);
-#endif
+painter.drawText(rect, flags, LTR_OVERRIDE_CHAR + text);
 }
 }
 }
Index: konsole/src/TerminalDisplay.h
===
--- konsole.orig/src/TerminalDisplay.h	2013-02-15 13:56:21.342032187 +0100
+++ konsole/src/TerminalDisplay.h	2013-02-15 15:19:43.391806071 +0100
@@ -384,7 +384,7 @@
 if (_bidiEnabled) {
 setLineSpacing(0);
 } else {
-setLineSpacing(2);
+setLineSpacing(0);
 }
 #endif
 }


signature.asc
Description: Digital signature

Bug#700662: override: kde-l10n-fr:localization/optional, kde-l10n-ga:localization/optional, kde-l10n-gl:localization/optional, kde-l10n-he:localization/optional, kde-l10n-hu:localization/optional, kde

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700661: override: kde-l10n-da:localization/optional, kde-l10n-de:localization/optional, kde-l10n-el:localization/optional, kde-l10n-engb:localization/optional, kde-l10n-es:localization/optional, k

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700660: override: calligra-l10n-zhcn:localization/optional, calligra-l10n-zhtw:localization/optional, kde-l10n-ar:localization/optional, kde-l10n-bg:localization/optional, kde-l10n-bs:localization

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700659: override: calligra-l10n-nl:localization/optional, calligra-l10n-pl:localization/optional, calligra-l10n-pt:localization/optional, calligra-l10n-ptbr:localization/optional, calligra-l10n-ru

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700658: override: calligra-l10n-et:localization/optional, calligra-l10n-fi:localization/optional, calligra-l10n-fr:localization/optional, calligra-l10n-hu:localization/optional, calligra-l10n-it:l

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700657: override: calligra-l10n-ca:localization/optional, calligra-l10n-cavalencia:localization/optional, calligra-l10n-cs:localization/optional, calligra-l10n-da:localization/optional, calligra-l

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

All localization packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700656: installation-reports: Corrupt screens after grub menu with UEFI

[Raymond S Brand]

Package: installation-reports
Severity: critical
Tags: d-i
Justification: breaks the whole system

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***


-- Package-specific info:

Boot method: CD
Image version: wheezy-DI-b4-amd64-netinst, wheezy-DI-20130215-5-amd64-netinst
Date: Fri 2013-02-15 19:00 UTC

Machine: HP EliteBook 8350w
Partitions: target media had no partition table prio to install


Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:   [O]
Detect network card:[ ]
Configure network:  [ ]
Detect CD:  [ ]
Load installer modules: [ ]
Clock/timezone setup:   [ ]
User/password setup:[ ]
Detect hard drives: [ ]
Partition hard drives:  [ ]
Install base system:[ ]
Install tasks:  [ ]
Install boot loader:[ ]
Overall install:[E]

Comments/Problems:

The boot of the install media via EFI succeeded and the grub menu(s),
presented; however, when an installation method was selected the screen
became unreadable and no further progress attempted.

If a text installation was selected, the screen went black an pressing ESC
caused it to flash (once for each keypress). If a graphical installation
was selected, colorful "pixel vomit" is displayed.

An EFI boot using Ubuntu 12.10 (amd64) live/install media works and can
install a system that can boot via EFI.

BIOS mode booting of the install media (b4) does work and does install a
system that will boot via BIOS.

Booting and installing in a VirtualBox instance works no matter what boot
method was used.


This report was completed in a VirtualBox instance.

The hardware summary below is from a Squeeze BIOS install & boot.
-- 

Please make sure that the hardware-summary log file, and any other
installation logs that you think would be useful are attached to this
report. Please compress large files using gzip.

Once you have filled out this report, mail it to sub...@bugs.debian.org.

==
Installer lsb-release:
==
DISTRIB_ID=Debian
DISTRIB_DESCRIPTION="Debian GNU/Linux installer"
DISTRIB_RELEASE="7.0 (wheezy) - installer build 20121114"
X_INSTALLATION_MEDIUM=cdrom

==
Installer hardware-summary:
==
/proc/cmdline: BOOT_IMAGE=/vmlinuz-2.6.32-5-amd64 
root=UUID=657a2b9d-f06f-4a8f-8771-ccd7220957e9 ro quiet
lspci: 00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory 
Controller Hub (rev 07)
lspci: 00:01.0 PCI bridge: Intel Corporation Mobile 4 Series Chipset PCI 
Express Graphics Port (rev 07)
lspci: 00:19.0 Ethernet controller: Intel Corporation 82567LM Gigabit Network 
Connection (rev 03)
lspci: 00:1a.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #4 (rev 03)
lspci: 00:1a.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #5 (rev 03)
lspci: 00:1a.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #6 (rev 03)
lspci: 00:1a.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI 
Controller #2 (rev 03)
lspci: 00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio 
Controller (rev 03)
lspci: 00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express 
Port 1 (rev 03)
lspci: 00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express 
Port 2 (rev 03)
lspci: 00:1c.2 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express 
Port 3 (rev 03)
lspci: 00:1c.4 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express 
Port 5 (rev 03)
lspci: 00:1d.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #1 (rev 03)
lspci: 00:1d.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #2 (rev 03)
lspci: 00:1d.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #3 (rev 03)
lspci: 00:1d.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI 
Controller #1 (rev 03)
lspci: 00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
lspci: 00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller 
(rev 03)
lspci: 00:1f.2 SATA controller: Intel Corporation ICH9M/M-E SATA AHCI 
Controller (rev 03)
lspci: 01:00.0 VGA compatible controller: ATI Technologies Inc Mobility Radeon 
HD 3650
lspci: 01:00.1 Audio device: ATI Technologies Inc RV635 Audio device [Radeon HD 
3600 Series]
lspci: 03:00.0 Network controller: Intel Corporation Ultimate N WiFi Link 5300
lspci: 86:09.0 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 I

Bug#592204: reproducing #592204 (libvdpau related crash on program exit) with XBMC?

[Andreas Beckmann]

Dear XBMC maintainers, dear bug reports and commenters,

I'm looking for someone who can reproduce #592204 in wheezy.
AFAICT XBMC is currently the only package in Debian that dlopen()s
libvdpau and therefore the only candidate to trigger this bug.

The expected behavior for this bug is that the application crashes
during shutdown after having done dlopen()/dlclose() libvdpau.so.1 from
wheezy.

The expected fix is using libvdpau1 from sid and getting no more crashes.

I tried to play around with XBMC myself for a few minutes but failed to
play a video or trigger using libvdpau in some other way ...

Please reply to #592204 and in case you can reproduce the crash in
wheezy and confirm that it gets fixed with libvdpau1 in sid, also leave
a note at the unblock request #699375.

Thanks!

Andreas

Bug: http://bugs.debian.org/592204
Unblock: http://bugs.debian.org/699375


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#693556: (no subject)

[Christoph Mathys]

Thanks for the review, Jakub!

I fixed the lintian and lintian4python warnings.

I talked about the license with upstream and debian-legal and we changed 
it to BSD-3-clause.


Priority has been changed from 'extra' to 'optional'.

The gnome-keyring dependency was removed and a mercruial dependency 
added :).


I didn't add entries to the changelog but updated the existing entry 
because the package has never really been released.


The new package is at:

http://mentors.debian.net/package/mercurial-keyring

Alternatively, one can download the package with dget using this command:

dget -x 
http://mentors.debian.net/debian/pool/main/m/mercurial-keyring/mercurial-keyring_0.5.4-1.dsc



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#684073: same issue

[Michael]

here, hang during apt-get install
exactly as described already

it corrupted apt/dpkg database, prevented other installs, removes, etc.

had to contort apt/dpkg to get this awful beast removed


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700655: p11-kit: please provide libp11-kit0-dbg (debugging symbols) package

[Daniel Kahn Gillmor]

Package: p11-kit
Version: 0.14-1
Severity: wishlist
Tags: patch

It would be great to have a libp11-kit0-dbg package (debugging symbols
for the p11-kit library) available.  The attached patch makes it work
for me.

Thanks for maintaining p11-kit in debian!

   --dkg

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.7-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages p11-kit depends on:
ii  libc62.13-37
ii  libp11-kit0  0.14-1

p11-kit recommends no packages.

p11-kit suggests no packages.

-- no debconf information
diff -Nru p11-kit-0.14/debian/changelog p11-kit-0.14/debian/changelog
--- p11-kit-0.14/debian/changelog	2012-09-06 13:35:11.0 -0400
+++ p11-kit-0.14/debian/changelog	2013-02-15 15:10:50.0 -0500
@@ -1,3 +1,9 @@
+p11-kit (0.14-2) experimental; urgency=low
+
+  * added libp11-kit0-dbg package for debugging symbols.
+
+ -- Daniel Kahn Gillmor   Fri, 15 Feb 2013 15:10:50 -0500
+
 p11-kit (0.14-1) experimental; urgency=low
 
   * New upstream version.
diff -Nru p11-kit-0.14/debian/control p11-kit-0.14/debian/control
--- p11-kit-0.14/debian/control	2012-04-15 12:48:56.0 -0400
+++ p11-kit-0.14/debian/control	2013-02-15 15:13:03.0 -0500
@@ -25,6 +25,22 @@
  This package contains the documentation and development headers required
  to build applications using the p11-kit library.
 
+Package: libp11-kit0-dbg
+Priority: standard
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: libp11-kit0 (= ${binary:Version}), ${shlibs:Depends}, ${misc:Depends}
+Multi-Arch: same
+Description: Library for loading and coordinating access to PKCS#11 modules - debugging symbols
+ Provides a way to load and enumerate PKCS#11 modules. Provides a standard
+ configuration setup for installing PKCS#11 modules in such a way that
+ they're discoverable.
+ .
+ Also solves problems with coordinating the use of PKCS#11 by different
+ components or libraries living in the same process.
+ .
+ This package contains the debugging symbols for libp11-kit0.
+
 Package: libp11-kit0
 Priority: standard
 Architecture: any
diff -Nru p11-kit-0.14/debian/rules p11-kit-0.14/debian/rules
--- p11-kit-0.14/debian/rules	2012-07-17 08:01:49.0 -0400
+++ p11-kit-0.14/debian/rules	2013-02-15 15:10:14.0 -0500
@@ -18,5 +18,9 @@
 	# Force keeping symbol file up to date.
 	dh_makeshlibs -- -c2
 
+override_dh_strip:
+	dh_strip -plibp11-kit0 --dbg-package=libp11-kit0-dbg
+	dh_strip
+
 %:
 	dh $@ 

Bug#698341: pu: package spatialite/3.0.0~beta20110817-3+deb7u1

[David Paleino]

On Fri, 15 Feb 2013 18:21:29 +, Adam D. Barratt wrote:

> On Sun, 2013-01-27 at 20:13 +0100, David Paleino wrote:
> > On Sun, 27 Jan 2013 14:16:08 +, Adam D. Barratt wrote:
> > > Please go ahead with the upload to unstable, as we need the issues
> > > fixing there in any case, however we proceed; thanks.
> > 
> > Done, 3.1.0~rc2-2 just uploaded to sid.
> 
> That was a little over two weeks ago now. Have there been any reported
> issues with the package in sid?

None up to now.

Thanks for your heads up! :)
David

-- 
 . ''`.   Debian developer | http://wiki.debian.org/DavidPaleino
 : :'  : Linuxer #334216 --|-- http://www.hanskalabs.net/
 `. `'`  GPG: 1392B174 | http://deb.li/dapal
   `-   2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174


signature.asc
Description: PGP signature

Bug#700604: Segmentation fault in incorrect arithmetic expression

[Thorsten Glaser]

Jonny dixit:

>Is it good in this?
>
>$ valgrind ./mksh -c 'echo $((++(VAR)))'

>==3417== Use of uninitialised value of size 4
>==3417==at 0x11B565: assign_check.isra.0.3422 (expr.c:650)
>==3417==by 0x49C6EB6: ???

Something like that… I used --track-origins=yes and built
with -g¹ to see more. The fix is uploaded, you should be
getting it shortly, thanks anyway.

bye,
//mirabilos

① That is, Build.sh -g option, not -g CFLAGS.
-- 
„nein: BerliOS und Sourceforge sind Plattformen für Projekte, github ist
eine Plattform für Einzelkämpfer“
-- dieses Zitat ist ein Beweis dafür, daß auch ein blindes Huhn
   mal ein Korn findet, bzw. – in diesem Fall – Recht haben kann


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700654: O: hotot -- lightweight microblogging client

[Julien Valroff]

Package: wnpp
Severity: normal

I intend to orphan the hotot package.

The package description is:
 Hotot is a lightweight Twitter and identi.ca client based on WebKit.
 .
 Features include:
   * Update/View Timelines
   * Follow/Unfollow people
   * Post status
   * Reply tweets
   * Post direct messages
   * View people profile
   * Native notification
   * Global key-shortcut
 .
 This package contains the default GTK+ version as well as the experimental QT
 based version.

-- 
  .''`.   Julien Valroff ~  ~ 
 : :'  :  Debian Developer & Free software contributor
 `. `'`   http://www.kirya.net/
   `- 4096R/ E1D8 5796 8214 4687 E416  948C 859F EF67 258E 26B1


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700653: override: libappindicator0.1-cil-dev:cli-mono/optional, libmonogame-cil-dev:cli-mono/optional, libopentk-cil-dev:cli-mono/optional, librhash-cil-dev:cli-mono/optional, libwpd-cil-dev:cli-m

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

All Mono packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#698910: zoneminder: arbitrary command execution vulnerability

[Salvatore Bonaccorso]

Hi

(Hmm, strange I have not recieved this followup)

On Thu, Feb 14, 2013 at 11:35:31AM -0800, Vagrant Cascadian wrote:
> Which allowed a shell accessible via netcat on port 1337 with the version
> present in squeeze (1.24.2-8).
> 
> With a package built with the patch applied, I was not able to reproduce this
> problem. I haven't noticed any side-effects, running on a couple zoneminder 
> machines for almost 24 hours...

I can confirm this, I did the same on my testing. (but as said I was
not able to test the setDeviceStatusX10 part, but is fixed with same
approach).

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700652: libggi-target-fbdev: missing omapfb for fbdev

[yellow]

Package: libggi-target-fbdev
Version: missing omapfp for fbdev
Severity: normal


Hi 

I am trying to use  mplayer  to play a video without using x11 or xorg.

It is fine fbdev since it is fast and tiny.

However it is missing the omapfb drv to play well.

Kind regards
P.


-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700651: override: kdirstat:oldlibs/optional

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

This is a transitional package.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700650: override: couriergrey:mail/extra

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

This package is about grey-listing mail.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700649: Please update libeatmydata

[Phillip Susi]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: libeatmydata

It has been two years since this package has been updated, and
upstream has had several releases.  Please package the new release.

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRHpFTAAoJEJrBOlT6nu75sbUIANzliN5v1XSEPqgCY10ei/rU
EFoz2uBv5abPpEa2yo71pGVFzmdisxP/CCMWkrMVeNiqqfuXjX/+yzjHMJBxY8ke
uXUy0K39+JP+GY5aRwBB0hk6gNTzZL9f85HbDaN/VxMHgAEj6i+3PQV85LR0pQyl
shAS8EkHhe9G2b+hKGIt8wqKntSfZFa80jyxF2sriCznUntZdCZoyHv9in5iRQrM
D62/VbPMS5OzwbHNJtcV/Yk8EMH+84EQHO03eJwm/b5O1VXbDAmOUNeU1LzP9b7t
fLHzzf42N3285AYXigobOGq7J5odX5JBKFKl8Bk4nvJOR/+g6V4RQHaD1zeX6Dg=
=kbXS
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#698871: [Pkg-sssd-devel] Bug#698871: Bug#698871: CVE-2013-0219 CVE-2013-0220

[Adam D. Barratt]

On Fri, 2013-02-15 at 20:20 +0100, Salvatore Bonaccorso wrote:
> On Thu, Feb 07, 2013 at 12:51:59AM +0200, Timo Aaltonen wrote:
> > Upstream released 1.8.6 with the patches, I have them staged in git
> > and am discussing with the release team what other fixes can get in
> > wheezy.
> 
> Did you heard anything back from the release team?

It's rather the other way around, afaict.

#debian-release, on February 6th:

10:34 < jcristau> once you have something tested, open a bug against
release.d.o, i'll take a look.

No bug appears to have been opened so far.

Regards,

Adam


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700604: Segmentation fault in incorrect arithmetic expression

[Jonny]

Thorsten wrote:
> This is not acceptable, it means that there is use of
> uninitialised memory somewhere. Unfortunately I think
> valgrind, which is the tool of choice for this, isn’t
> ported to m68k yet… I’ll try to find it nevertheless.
> 
> An strace is not useful for segfaults in user space
> applications, by the way – it only displays syscalls.

Is it good in this?

$ valgrind ./mksh -c 'echo $((++(VAR)))'
==3417== Memcheck, a memory error detector
==3417== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==3417== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
==3417== Command: ./mksh -c echo\ $((++(VAR)))
==3417==
==3417== Use of uninitialised value of size 4
==3417==at 0x11B565: assign_check.isra.0.3422 (expr.c:650)
==3417==by 0x49C6EB6: ???
==3417==
==3417== Invalid read of size 1
==3417==at 0x11B565: assign_check.isra.0.3422 (expr.c:650)
==3417==by 0x49C6EB6: ???
==3417==  Address 0x1c is not stack'd, malloc'd or (recently) free'd
==3417==
==3417==
==3417== Process terminating with default action of signal 11 (SIGSEGV)
==3417==  Access not within mapped region at address 0x1C
==3417==at 0x11B565: assign_check.isra.0.3422 (expr.c:650)
==3417==by 0x49C6EB6: ???
==3417==  If you believe this happened as a result of a stack
==3417==  overflow in your program's main thread (unlikely but
==3417==  possible), you can try to increase the size of the
==3417==  main thread stack using the --main-stacksize= flag.
==3417==  The main thread stack size used in this run was 8388608.
==3417==
==3417== HEAP SUMMARY:
==3417== in use at exit: 26,058 bytes in 330 blocks
==3417==   total heap usage: 456 allocs, 126 frees, 29,722 bytes allocated
==3417==
==3417== LEAK SUMMARY:
==3417==definitely lost: 0 bytes in 0 blocks
==3417==indirectly lost: 0 bytes in 0 blocks
==3417==  possibly lost: 0 bytes in 0 blocks
==3417==still reachable: 26,058 bytes in 330 blocks
==3417== suppressed: 0 bytes in 0 blocks
==3417== Rerun with --leak-check=full to see details of leaked memory
==3417==
==3417== For counts of detected and suppressed errors, rerun with: -v
==3417== Use --track-origins=yes to see where uninitialised values come from
==3417== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 15 from 8)


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#667965: (no subject)

[Phillip Susi]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I think this is a bug in gnulib rather than eatmydata.  fsync() can't
be expected to report errors that may have happened when it doesn't
actually try to do anything.  In other words, doing nothing can not
fail, and should not be expected to.  I have emailed gnulib about
fixing it on their end.

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRHpA3AAoJEJrBOlT6nu75SbIH/iBvJ6uEv4lU37xiYNncuUPI
kykNNf3c55KxK7O1W5ioKZ3r+ioHTzw+ywjPQiYnRQZmxquqYyivks+c9KBv4gT+
kdaYHHekne+c3eNqtbEpR4ZtxZYV5WyA9K1NZfmEi9CJ+7WM+VmdhUoCHGFKs9wW
0jl2Mfr09ZJgktq9decRvKX5h6KkemU2GCGCPJpk6ObYPCHRG37d8LJKDmLTFSCf
k4dhnqGmZCUIIDcOpIE2WyGkXsH1gVYtM/6yTUs9cy6/tlRVrZocrqk3OS8YBKVH
u/qAUpsD6sIVTOy4Bi4BAt7yEKBUdMUNHItTsrI5YqpJm+ccqYccIWqFUFmRMcU=
=njou
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700648: override: libswt-cairo-gtk-3-jni:java/optional, libswt-glx-gtk-3-jni:java/optional, libswt-gnome-gtk-3-jni:java/optional, libswt-gtk-3-jni:java/optional, libswt-webkit-gtk-3-jni:java/optio

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More JNI packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700647: override: libjmagick6-jni:java/optional, libbrlapi-jni:java/extra, libcharva1-jni:java/optional, libjava-gnome-jni:java/optional, libjava3d-jni:java/optional, libjhdf4-jni:java/optional, l

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

All Java Native Interface (JNI) packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700646: override: libs3-2:libs/extra, libsclang1:libs/optional, libswiften2:libs/optional, libsylfilter0:libs/extra, libtarantool1:libs/optional, libtarantoolnet1:libs/optional, libtarantoolrpl1:l

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More shared library packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700645: override: libibnetdisc5:libs/extra, libktpchat0:libs/optional, liblistaller-glib0:libs/optional, libminiupnpc8:libs/optional, libnlopt-guile0:libs/optional, libocropus0:libs/optional, libo

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

More shared library packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700644: override: libarb:non-free/libs/optional, libcamitk3:libs/optional, libclhep2.1:libs/optional, libcplgasgano20:contrib/libs/optional, libcppunit-1.13-0:libs/optional, libcv2.4:libs/optional

[Guillem Jover]

Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: override

Hi!

These are all shared library packages.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#687611: debian-archive-keyring: /usr/share/keyrings/debian-archive-removed-keys.gpg gets modified during squeeze->wheezy upgrade

[Andreas Beckmann]

Followup-For: Bug #687611

Hi,

I finally traced the modification of debian-archive-removed-keys.gpg
during squeeze -> wheezy upgrades to 'apt-key update' calling 
'gpg --list-keys' which is not a read-only operation.

Quoting from GPG(1):

  --no-auto-check-trustdb
  If  GnuPG  feels  that  its  information  about the Web
  of Trust has to be updated, it automatically runs the
  --check-trustdb command internally.  This may be a time
  consuming process. --no-auto-check-trustdb disables
  this option.

So let's call gpg with --no-auto-check-trustdb always to get
deterministic behavior ... and explicitly run --check-trustdb during
apt-key update. Do this with a dummy --keyring otherwise all keyrings
could be rewritten.

We cannot use --check-trustdb --batch to skip the update if it is not
needed - gpg thinks it is not needed until we run --list-keys once ...

Maybe we can use --check-trustdb --quiet to suppress the "gpg: no
ultimately trusted keys found" message ...


Raising the severity to RC as having modified keyrings after system
upgrades might make many users suspicious.


Andreas
diffstat for apt-0.9.7.7 apt-0.9.7.7+nmu1

 cmdline/apt-key  |6 +-
 debian/changelog |   12 
 2 files changed, 17 insertions(+), 1 deletion(-)

diff -Nru apt-0.9.7.7/cmdline/apt-key apt-0.9.7.7+nmu1/cmdline/apt-key
--- apt-0.9.7.7/cmdline/apt-key	2012-06-11 14:38:49.0 +0200
+++ apt-0.9.7.7+nmu1/cmdline/apt-key	2013-02-15 19:51:25.0 +0100
@@ -12,7 +12,7 @@
 if [ "$(id -u)" -eq 0 ]; then
 	# we could use a tmpfile here too, but creation of this tends to be time-consuming
 	eval $(apt-config shell TRUSTDBDIR Dir::Etc/d)
-	GPG_CMD="$GPG_CMD --trustdb-name ${TRUSTDBDIR}/trustdb.gpg"
+	GPG_CMD="$GPG_CMD --trustdb-name ${TRUSTDBDIR}/trustdb.gpg --no-auto-check-trustdb"
 fi
 
 GPG="$GPG_CMD"
@@ -107,6 +107,10 @@
 fi
 requires_root
 
+# perform trust database maintenance with a dummy keyring to avoid
+# rewriting the regular keyrings
+$GPG_CMD --check-trustdb --keyring $SECRETKEYRING
+
 # add new keys from the package;
 
 # we do not use add_keys_with_verify_against_master_keyring here,
diff -Nru apt-0.9.7.7/debian/changelog apt-0.9.7.7+nmu1/debian/changelog
--- apt-0.9.7.7/debian/changelog	2012-12-13 09:52:19.0 +0100
+++ apt-0.9.7.7+nmu1/debian/changelog	2013-02-15 20:07:39.0 +0100
@@ -1,3 +1,15 @@
+apt (0.9.7.7+nmu1) UNRELEASED; urgency=low
+
+  * Non-maintainer upload.
+  * cmdline/apt-key:
+- Run gpg with --no-auto-check-trustdb to avoid randomly rewriting
+  keyrings e.g. during --list-keys.  (Closes: #687611, #662948)
+- Run gpg --check-trustdb during the 'update' action to allow updating the
+  trust database format. The format changes e.g. after upgrading gnupg
+  from squeeze to wheezy.
+
+ -- Andreas Beckmann   Fri, 15 Feb 2013 19:52:29 +0100
+
 apt (0.9.7.7) unstable; urgency=low
 
   [ Program translation updates ]

Bug#700513: linux-base: Cannot resume after suspending (laptop model HP CQ61 410SH)

[Ben Hutchings]

On Fri, Feb 15, 2013 at 10:43:09AM -0600, Daniel wrote:
> On Thu, Feb 14, 2013 at 9:25 PM, Ben Hutchings  wrote:
> 
> > On Thu, 2013-02-14 at 08:27 -0600, Daniel wrote:
> > >
> > >
> > >
> > > On Wed, Feb 13, 2013 at 11:28 PM, Ben Hutchings 
> > > wrote:
> > > Control: tag -1 moreinfo
> > >
> > > On Wed, 2013-02-13 at 11:59 -0600, ddshore wrote:
> > > > Package: linux-base
> > > > Version: 3.4~bpo60+1
> > > > Severity: normal
> > > >
> > > > After suspending the laptop, and attempting to resume, I get
> > > a black screen
> > > > with the power and wifi icons turned on.  I have tried using
> > > different versions
> > > > of the Linux Kernel,
> > >
> > >
> > > Which versions?
> > >
> > >
> > > 2.6.32-5-686 and 3.2.0.0.bpo.4-rt-686-pae
> >
> > Could you also try 3.7-trunk-686-pae, from the experimental suite?
> >
> How can I install an experimental Linux on squeeze, you want me to do the
> backport myself?
[...]

Since you have installed linux-image-3.2.0.0.bpo.4-rt-686-pae, you
already have all the dependencies of linux-image-3.7-trunk-686-pae.

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
  - Albert Camus


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700597: Re: live-config-systemd: fails to install: post-installation script returned error exit status 1

[Daniel Baumann]

On 02/15/2013 07:45 PM, Andreas Beckmann wrote:

https://lists.debian.org/debian-release/2013/02/msg00496.html


i've discussed that with michael two days ago, no.

--
Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:  daniel.baum...@progress-technologies.net
Internet:   http://people.progress-technologies.net/~daniel.baumann/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#698871: [Pkg-sssd-devel] Bug#698871: Bug#698871: CVE-2013-0219 CVE-2013-0220

[Salvatore Bonaccorso]

Hi Timo

On Thu, Feb 07, 2013 at 12:51:59AM +0200, Timo Aaltonen wrote:
> On 03.02.2013 23:59, Moritz Mühlenhoff wrote:
> >On Sun, Jan 27, 2013 at 11:45:06AM +0200, Timo Aaltonen wrote:
> >>On 26.01.2013 23:06, Salvatore Bonaccorso wrote:
> >>>Hi Timo
> >>>
> >>>On Thu, Jan 24, 2013 at 08:46:43PM +0200, Timo Aaltonen wrote:
> On 24.01.2013 20:30, Moritz Muehlenhoff wrote:
> >Package: sssd
> >Severity: grave
> >Tags: security
> >
> >Hi,
> >multiple security issues have been discovered in sssd. Please see the 
> >Red Hat
> >bugzilla entries for details and patches:
> >
> >https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0219
> >https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0220
> 
> Yep, I'm aware of them and will prepare an upload later.
> >>>
> >>>The relevant commits seem to be:
> >>>
> >>>  CVE-2013-0219:
> >>>  
> >>> http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047
> >>>  and 
> >>> http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a
> >>>  .
> >>>  See also https://fedorahosted.org/sssd/ticket/1782 .
> >>>
> >>>  CVE-2013-0220: 
> >>> http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325
> >>>  .
> >>>See https://fedorahosted.org/sssd/ticket/1781 .
> >>
> >>There's still no backported commits for 1.8.x which is in sid/wheezy
> >>(94cbf1cfb0f8 at least needs backporting), I'll ask upstream
> >>tomorrow.
> >
> >What's the status?
> 
> Upstream released 1.8.6 with the patches, I have them staged in git
> and am discussing with the release team what other fixes can get in
> wheezy.

Did you heard anything back from the release team?

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700643: libsmclient-dev: missing pkgconfig files

[Jeremy Bicha]

Package: libsmclient-dev
Version: 2:3.6.6-5
Severity: important

I'm trying to build gnome-control-center from git master but as of
today it checks for the smbclient pkgconfig file as part of the new
Sharing panel. Although /usr/lib/pkgconfig/smbclient.pc is built, it
is not included in the Debian package. (It's also explicitly excluded
from the samba4 packages which I also tried).

Thanks!
Jeremy

- -- System Information:
Debian Release: wheezy/sid
  APT prefers raring-updates
  APT policy: (500, 'raring-updates'), (500, 'raring-security'), (500,
'raring-proposed'), (500, 'raring'), (100, 'raring-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#693198: c2debian-build-ami_1.0+20130208git-1 uploaded to mentors

[Marcin Kulisz]

Hi all,
As in subject I just uploaded latest version (2013-02-08) of
ec2debian-build-ami into mentors
(https://mentors.debian.net/package/ec2debian-build-ami).
Main difference in package is, that now it's using python helpers as code
contains python script.
This wersion is supporting Wheezy as per Anders changelog.

Well, have fun with it and if you'll find any bugs or having wishes regarding
package it self please file appropriate bug.
-- 

|_|0|_|  |
|_|_|0| "Heghlu'Meh QaQ jajVam"  |
|0|0|0|  kuLa -  |

gpg --keyserver pgp.mit.edu --recv-keys 0x58C338B3
3DF1 A4DF C732 4688 38BC F121 6869 30DD  58C3 38B3


signature.asc
Description: Digital signature

Bug#700600: mirror submission for mirror.jmu.edu

[Wright, Seth - wrightst]

On Feb 15, 2013, at 7:21 AM, Simon Paillard 
 wrote:

> Control: tag -1 +moreinfo
> 
> Hi,
> 
> On Fri, Feb 15, 2013 at 01:13:10AM +, Seth Wright wrote:
>> Package: mirrors
>> Severity: wishlist
>> 
>> Submission-Type: new
> 
> Thanks for mirroring Debian.
> 
>> Site: mirror.jmu.edu
>> Type: leaf
>> Archive-architecture: ALL amd64 armel armhf hurd-i386 i386 ia64 
>> kfreebsd-amd64 kfreebsd-i386 mips mipsel powerpc s390 s390x sparc 
>> Archive-ftp: /debian/
>> Archive-http: /debian/
>> Archive-rsync: debian/
> 
> Please use the recommended tool 'ftpsync' from 
> http://www.debian.org/mirror/ftpmirror#how

I have an rsync-based mirror script used to mirror everything else on the 
server.  (The script was based off of Ubuntu's ubumirror script, but modified 
by me to work a) on OpenBSD, b) to handle the other projects I mirror and c) 
for my environment.)  From the ftpsync page above, it sounded like this was 
acceptable as long as I performed a two-stage sync and followed all of the 
other rules.  The script does a 2-stage sync as required, excluding the files 
mentioned on that page during the first sync.  Rsync is run with at least the 
options specified.  A trace file is written at the end of the sync into the 
project/trace subdirectory.  I do not exclude anything from the sync.

If this is still unacceptable or if there is something that is not correct with 
my process, please let me know and I'll try to fix the problem.

> 
>> CDImage-ftp: /debian-cdimage/
>> CDImage-http: /debian-cdimage/
>> CDImage-rsync: debian-cdimage/
> 
> Is it possible to have /debian-cd/ as alias ? (standard path for ISO)

Sure.  I was unaware what the standard path was, so I used the rsync module 
name of my upstream mirror.  I have changed the existing alias from 
/debian-cdimage to /debian-cd.

>> IPv6: no
>> Archive-upstream: rsync.osuosl.org
>> CDImage-upstream: rsync.osuosl.org
>> Updates: four
>> Maintainer: Seth Wright 
>> Country: US United States
>> Location: James Madison University - Harrisonburg, VA
>> Comment: JMU has 2Gbit to the internet and a connection to I2/NLR.  The 
>> server is only linked at 1Gbit, however.
> 
> Best regards.
> 
> 
> -- 
> Simon Paillard


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700633: patch

[Phillip Susi]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 2/15/2013 12:18 PM, Didier 'OdyX' Raboud wrote:
> Reversed patch?

Woops, yes...



-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRHoNYAAoJEJrBOlT6nu75DZUH/3WjYpr4mELvRFs/9s3RHH87
+UhL/HJDesUHsRRy33j0mVieJqUm055zxQ3v/lHI04v4+Tb2ymhOVxcLrYEJw+E+
lrZA4KicxXbVfwa+IwgQX2aNG6qcW3SPdXMnRdlBxaFhZzQRI0hbm6S/MUbCTkp1
/MKWUd+MmJSSp1wh97g7fVttWfbKjeDLiuT09owVHBIr82qItwItvbJr4Z9PCH/T
EEWwMbm0bRxzRVGxqPQOF+IqjEeFsxM1GaRVhzjOpNM3zGrN+5qtptCeH9Ze98P7
i6eZ5osRkvdyJ4GBpSz3qSt9lQgMqvPwM+1OwX68+rIv4rnq2Np1UExYATDtcX0=
=jmqW
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700597: Re: live-config-systemd: fails to install: post-installation script returned error exit status 1

[Andreas Beckmann]

On 2013-02-15 12:19, Daniel Baumann wrote:
> unavoidable with current systemd it seems.

Maybe relying on the trigger is sufficient:

https://lists.debian.org/debian-release/2013/02/msg00496.html


Andreas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#700641: libqscintilla2-translations: Please rename to use customary -l10n suffix

[Guillem Jover]

Package: libqscintilla2-translations
Version: 2.7-1
Severity: wishlist

Hi!

This version introduced a new package containing translations, these
are costumarily named as pkgname-l10n, could you rename it so that we
have consistency over the packages namespace?

Also I was just wondering, how well do the qm files handle being used
by code which is not in sync with these translations? because that's
what this change seem to allow (in the po case it might lead to
segfaults).

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org