Bug#748073: Pepper flash plugin don't works with Chromium 35.0.1916.86-1

2014-05-13 Thread Carlos Alberto Lopez Perez
Package: chromium
Version: 35.0.1916.86-1


After upgrading chromium to 35.0.1916.86-1 the pepper based flash plugin
(installed with the package pepperflashplugin-nonfree) stopped working.


I tried to reinstall it, but that didn't solved the issue. Finally I
downgraded to chromium 34.0.1847.132-1 and that fixed the issue.


Thanks!



signature.asc
Description: OpenPGP digital signature


Bug#748074: rpcbind has no systemd unit and tmp file files

2014-05-13 Thread Matthew Grant
Package: rpcbind
Version: 0.2.1-3
Severity: important
Tags: patch

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

When running under systemd:

o  NFS mounts from /etc/fstab do not work.

o NFS exports also fail due to rpcbind not starting before nfs-common and nfs-
kernel-server

systemd is the new default system init for linux.  The above should just work.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Created my own /etc/tmpfiles.d/rpcbind.conf:


#Type PathMode UID  GID  Age Argument
d /run/rpcbind 0755 root root - -
f /run/rpcbind/rpcbind.xdr 0600 root root - -
f /run/rpcbind/portmap.xdr 0600 root root - -


and /lib/systemd/system file (I did this one in /etc/systemd/system):

---
[Unit]
Description=RPC bind portmap service
After=systemd-tmpfiles-setup.service
Wants=remote-fs-pre.target
Before=remote-fs-pre.target
DefaultDependencies=no

[Service]
ExecStart=/sbin/rpcbind -f -w
KillMode=process
Restart=on-failure

[Install]
WantedBy=sysinit.target
Alias=portmap


and enabled above unit:

# systemctl enable rpcbind.service

Did for nfs-common to make NFS rpc support to start at correct time:

Created /etc/systemd/system/nfs-common.service (can be put in
/lib/systemd/system

[Unit]
Description=NFS Common daemons
Wants=remote-fs-pre.target
DefaultDependencies=no

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/etc/init.d/nfs-common start
ExecStop=/etc/init.d/nfs-common stop

[Install]
WantedBy=sysinit.target

-
# systemctl enable nfs-common


   * What was the outcome of this action?

Rpc Bind starting correctly, with registration state saving over restart, NFS
service working normally

# systemctl status rpcbind
rpcbind.service - RPC bind portmap service
   Loaded: loaded (/etc/systemd/system/rpcbind.service; enabled)
  Drop-In: /run/systemd/generator/rpcbind.service.d
   └─50-rpcbind-$portmap.conf
   Active: active (running) since Wed 2014-05-14 10:38:13 NZST; 13min ago
 Main PID: 5066 (rpcbind)
   CGroup: name=systemd:/system/rpcbind.service
   └─5066 /sbin/rpcbind -f -w

May 14 10:38:13 moriah systemd[1]: Started RPC bind portmap service.

# systemctl status nfs-common
nfs-common.service - NFS Common daemons
   Loaded: loaded (/etc/systemd/system/nfs-common.service; enabled)
   Active: active (exited) since Wed 2014-05-14 10:35:01 NZST; 19min ago
 Main PID: 259 (code=exited, status=0/SUCCESS)
   CGroup: name=systemd:/system/nfs-common.service

Warning: Journal has been rotated since unit was started. Log output is
incomplete or unavailable.

All the NFS RPC daemons have port activation in latest nfs-utils upstream, and
service files.  Please consider using these as the socket activation saves
haing to manually configure which NFS RPC daemons are needed.




-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_NZ.utf8, LC_CTYPE=en_NZ.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages rpcbind depends on:
ii  initscripts  2.88dsf-53
ii  insserv  1.14.0-5
ii  libc-bin 2.18-5
ii  libc62.18-5
ii  libtirpc10.2.2-7
ii  libwrap0 7.6.q-25
ii  lsb-base 4.1+Debian12

rpcbind recommends no packages.

rpcbind suggests no packages.

-- no debconf information
#Type PathMode UID  GID  Age Argument
d /run/rpcbind 0755 root root - -
f /run/rpcbind/rpcbind.xdr 0600 root root - -
f /run/rpcbind/portmap.xdr 0600 root root - -
[Unit]
Description=NFS Common daemons
Wants=remote-fs-pre.target
DefaultDependencies=no

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/etc/init.d/nfs-common start
ExecStop=/etc/init.d/nfs-common stop

[Install]
WantedBy=sysinit.target

[Unit]
Description=RPC bind portmap service
After=systemd-tmpfiles-setup.service
Wants=remote-fs-pre.target
Before=remote-fs-pre.target
DefaultDependencies=no

[Service]
ExecStart=/sbin/rpcbind -f -w
KillMode=process
Restart=on-failure

[Install]
WantedBy=sysinit.target
Alias=portmap



Bug#748075: libreoffice-core: trying to overwrite '/usr/lib/libreoffice/program/librptlo.so', which is also in package libreoffice-report-builder-bin 1:4.1.6~rc2-1+b1

2014-05-13 Thread Axel Beckert
Package: libreoffice-core,libreoffice-report-builder-bin
Version: libreoffice-core/1:4.2.4-2
Version: libreoffice-report-builder-bin/1:4.1.6~rc2-1+b1
Severity: serious

During upgrading libreoffice-core on kfreebsd-i386 today:

Preparing to unpack .../libreoffice-core_1%3a4.2.4-2_kfreebsd-i386.deb ...
Unpacking libreoffice-core (1:4.2.4-2) over (1:4.1.6~rc2-1+b1) ...
dpkg: error processing archive 
/var/cache/apt/archives/libreoffice-core_1%3a4.2.4-2_kfreebsd-i386.deb 
(--unpack):
 trying to overwrite '/usr/lib/libreoffice/program/librptlo.so', which is also 
in package libreoffice-report-builder-bin 1:4.1.6~rc2-1+b1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)

Probably a missing Replaces header somewhere.

-- Package-specific info:
#part type=text/plain disposition=attachment description=Bug script output
All deployed bundled extensions:

Identifier: org.openoffice.da.writer2latex.oxt
  Version: 1.0.2
  URL: vnd.sun.star.expand:$BUNDLED_EXTENSIONS/writer2latex

Experimental features enabled:
#/part

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (110, 'experimental')
Architecture: kfreebsd-i386 (i386)

Kernel: kFreeBSD 9.2-1-686
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libreoffice-core depends on:
ii  fontconfig  2.11.0-5
ii  fonts-opensymbol2:102.6+LibO4.2.4-2
ii  libatk1.0-0 2.12.0-1
ii  libboost-date-time1.54.01.54.0-5
ii  libc0.1 2.18-5
ii  libcairo2   1.12.16-2
ii  libclucene-contribs12.3.3.4-4
ii  libclucene-core12.3.3.4-4
ii  libcmis-0.3-3   0.3.1-5
ii  libcups21.7.2-3
ii  libcurl3-gnutls 7.36.0-2
ii  libdbus-1-3 1.8.2-1
ii  libdbus-glib-1-20.102-1
ii  libexpat1   2.1.0-4
ii  libexttextcat-2.0-0 3.4.3-1
ii  libfontconfig1  2.11.0-5
ii  libfreetype62.5.2-1
ii  libgcc1 1:4.9.0-3
ii  libgdk-pixbuf2.0-0  2.30.7-1
ii  libglib2.0-02.40.0-3
ii  libgraphite2-3  1.2.4-2
ii  libgstreamer-plugins-base1.0-0  1.2.4-1
ii  libgstreamer1.0-0   1.2.4-1
ii  libgtk2.0-0 2.24.23-1
ii  libharfbuzz-icu00.9.28-1
ii  libharfbuzz0b   0.9.28-1
ii  libhunspell-1.3-0   1.3.2-7
ii  libhyphen0  2.8.6-3
ii  libice6 2:1.0.8-2
ii  libicu5252.1-3
ii  libjpeg88d-2
ii  liblangtag1 0.5.1-2
ii  liblcms2-2  2.6-1
ii  libldap-2.4-2   2.4.39-1
ii  libmythes-1.2-0 2:1.2.2-1
ii  libneon27-gnutls0.30.0-2
ii  libnspr42:4.10.4-1
ii  libnspr4-0d 2:4.10.4-1
ii  libnss3 2:3.16-1
ii  libnss3-1d  2:3.16-1
ii  libpango-1.0-0  1.36.3-1
ii  libpangocairo-1.0-0 1.36.3-1
ii  libpangoft2-1.0-0   1.36.3-1
ii  libpng12-0  1.2.50-1
ii  librdf0 1.0.17-1+b1
ii  libreoffice-common  1:4.2.4-2
ii  libsm6  2:1.2.1-2
ii  libssl1.0.0 1.0.1g-4
ii  libstdc++6  4.9.0-3
ii  libx11-62:1.6.2-2
ii  libxext62:1.3.2-1
ii  libxinerama12:1.1.3-1
ii  libxml2 2.9.1+dfsg1-3
ii  libxrandr2  2:1.4.2-1
ii  libxrender1 1:0.9.8-1
ii  libxslt1.1  1.1.28-2
ii  libxt6  1:1.1.4-1
ii  uno-libs3   4.2.4-2
ii  ure 4.2.4-2
ii  zlib1g  1:1.2.8.dfsg-1

libreoffice-core recommends no packages.

libreoffice-core suggests no packages.

Versions of packages libreoffice-common depends on:
ii  dpkg  1.17.9
ii  libreoffice-style-crystal [libreoffice-style] 1:4.2.4-2
ii  libreoffice-style-galaxy [libreoffice-style-default]  1:4.2.4-2
ii  libreoffice-style-hicontrast [libreoffice-style]  1:4.2.4-2
ii  libreoffice-style-oxygen [libreoffice-style]  1:4.2.4-2
ii  libreoffice-style-sifr [libreoffice-style]1:4.2.4-2
ii  libreoffice-style-tango [libreoffice-style]   1:4.2.4-2
ii  ure   4.2.4-2

Versions of packages libreoffice-common recommends:
ii  libexttextcat-data  3.4.3-1
iu  python3-uno 1:4.2.4-2
ii  xfonts-mathml   6

Versions of packages libreoffice-common suggests:
ii  

Bug#622394: systemd: nfs-common and rpcbind unit files to fix systemd NFS issues properly

2014-05-13 Thread Matthew Grant
Package: nfs-common
Version: 1:1.2.8-6
Followup-For: Bug #622394

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

When running under systemd:

o  NFS mounts from /etc/fstab do not work.

o NFS exports also fail due to rpcbind not starting before nfs-common and nfs-
kernel-server

systemd is the new default system init for linux.  The above should just work.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Created my own /etc/tmpfiles.d/rpcbind.conf:


#Type PathMode UID  GID  Age Argument
d /run/rpcbind 0755 root root - -
f /run/rpcbind/rpcbind.xdr 0600 root root - -
f /run/rpcbind/portmap.xdr 0600 root root - -


and /lib/systemd/system file (I did this one in /etc/systemd/system):

---
[Unit]
Description=RPC bind portmap service
After=systemd-tmpfiles-setup.service
Wants=remote-fs-pre.target
Before=remote-fs-pre.target
DefaultDependencies=no

[Service]
ExecStart=/sbin/rpcbind -f -w
KillMode=process
Restart=on-failure

[Install]
WantedBy=sysinit.target
Alias=portmap


and enabled above unit:

# systemctl enable rpcbind.service

Did for nfs-common to make NFS rpc support to start at correct time:

Created /etc/systemd/system/nfs-common.service (can be put in
/lib/systemd/system

[Unit]
Description=NFS Common daemons
Wants=remote-fs-pre.target
DefaultDependencies=no

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/etc/init.d/nfs-common start
ExecStop=/etc/init.d/nfs-common stop

[Install]
WantedBy=sysinit.target

-
# systemctl enable nfs-common


   * What was the outcome of this action?

Rpc Bind starting correctly, with registration state saving over restart, NFS
service working normally

# systemctl status rpcbind
rpcbind.service - RPC bind portmap service
   Loaded: loaded (/etc/systemd/system/rpcbind.service; enabled)
  Drop-In: /run/systemd/generator/rpcbind.service.d
   └─50-rpcbind-$portmap.conf
   Active: active (running) since Wed 2014-05-14 10:38:13 NZST; 13min ago
 Main PID: 5066 (rpcbind)
   CGroup: name=systemd:/system/rpcbind.service
   └─5066 /sbin/rpcbind -f -w

May 14 10:38:13 moriah systemd[1]: Started RPC bind portmap service.

# systemctl status nfs-common
nfs-common.service - NFS Common daemons
   Loaded: loaded (/etc/systemd/system/nfs-common.service; enabled)
   Active: active (exited) since Wed 2014-05-14 10:35:01 NZST; 19min ago
 Main PID: 259 (code=exited, status=0/SUCCESS)
   CGroup: name=systemd:/system/nfs-common.service

Warning: Journal has been rotated since unit was started. Log output is
incomplete or unavailable.

All the NFS RPC daemons have port activation in latest nfs-utils upstream, and
service files.  Please consider using these as the socket activation saves
haing to manually configure which NFS RPC daemons are needed.




-- Package-specific info:
-- rpcinfo --
   program vers proto   port  service
104   tcp111  portmapper
103   tcp111  portmapper
102   tcp111  portmapper
104   udp111  portmapper
103   udp111  portmapper
102   udp111  portmapper
132   tcp   2049  nfs
133   tcp   2049  nfs
134   tcp   2049  nfs
1002272   tcp   2049
1002273   tcp   2049
132   udp   2049  nfs
133   udp   2049  nfs
134   udp   2049  nfs
1002272   udp   2049
1002273   udp   2049
1000211   udp  38783  nlockmgr
1000213   udp  38783  nlockmgr
1000214   udp  38783  nlockmgr
1000211   tcp  49538  nlockmgr
1000213   tcp  49538  nlockmgr
1000214   tcp  49538  nlockmgr
151   udp  58915  mountd
151   tcp  40052  mountd
152   udp  40524  mountd
152   tcp  60384  mountd
153   udp  55957  mountd
153   tcp  49758  mountd
-- /etc/default/nfs-common --
NEED_STATD=
STATDOPTS=
NEED_IDMAPD=yes
NEED_GSSD=yes
RPCGSSDOPTS=
-- /etc/idmapd.conf --
[General]
Verbosity = 0
Pipefs-Directory = /run/rpc_pipefs
Domain = internal.anathoth.net
Local-Realms = ANATHOTH.NET
[Translation]
Method = nsswitch
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
-- /etc/fstab --
#shalom:/src/media/src  nfs noauto,defaults,user,exec   0   0
#shalom:/home   /media/home nfs noauto,defaults,user,exec   0   0
#en-gedi:/home  /srv/home   nfs 
noauto,async,_netdev,soft,intr,defaults,exec0   0
-- /proc/mounts --
nfsd /proc/fs/nfsd nfsd rw,relatime 0 0

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_NZ.utf8, LC_CTYPE=en_NZ.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


Bug#725786: More tests

2014-05-13 Thread Santiago Garcia Mantinan
Hi!

Doing more tests on this I came to the conclusion that the problem we found
when creating the bridge with iproute must be a bug on iproute when creating
a bridge while setting a MAC.

If I create a bridge using:

# ip link add br2 address fc:cc:cc:cc:cc:cc type bridge

I end up with a wrong bridge id:

# brctl showstp br2
br2
 bridge id  8000.
 designated root8000.
 root port 0path cost  0
 max age  20.00 bridge max age20.00
 hello time2.00 bridge hello time  2.00
 forward delay15.00 bridge forward delay  15.00
 ageing time 300.00
 hello timer   0.00 tcn timer  0.00
 topology change timer 0.00 gc timer   0.00
 flags  

If I later add a port to this bridge it seems the bridge doesn't work and
the bridge id continues to be the same.

I have however identified what seems to be a workaround for this but it
seems to kill the solution for lukas setup, the workaround consists of
creating the bridge with a forced MAC and after the interface is up change
it to another MAC, then the bridge id is changed to match the MAC address
(fixes real hardware setup) but the dummy bridge scenario (Lukas setup)
seems to break (interface keeps the ipv6 address but goes to state DOWN).
Lukas, can you test this and see if it really breaks your setup?

I'm going to release a new version of the package with the general solution
and ping the iproute guys to take a look into this.

Regards.
-- 
Manty/BestiaTester - http://manty.net


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748076: fail2ban: Add openvpn rules

2014-05-13 Thread Samuel Thibault
Package: fail2ban
Version: 0.8.13-1
Severity: normal
Tags: patch

Hello,

We use fail2ban for openvpn, here are the rules we are using.

Samuel

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- 
Samuel
O Ça peut être une madeleine à sous munitions (avec des composants,
par exemple)
 -+- #runtime -+-
diff --exclude .svn --exclude .git --exclude CVS --exclude .hg -urN 
fail2ban-0.8.13/config/filter.d/openvpn.conf 
fail2ban-0.8.13-mine/config/filter.d/openvpn.conf
--- fail2ban-0.8.13/config/filter.d/openvpn.conf1970-01-01 
01:00:00.0 +0100
+++ fail2ban-0.8.13-mine/config/filter.d/openvpn.conf   2014-05-14 
01:41:15.373568176 +0200
@@ -0,0 +1,10 @@
+# Fail2Ban configuration file for openvpn
+
+[Definition]
+
+failregex = .* ovpn-.* :::HOST Connection reset, restarting 
\[[0-9-]{1,2}\]
+.* ovpn-.* HOST Connection reset, restarting \[[0-9-]{1,2}\]
+.* ovpn-.* :::HOST:[0-9]{1,2,34,5} TLS Auth Error: Auth 
Username/Password verification failed for peer.*$
+.* ovpn-.* HOST:[0-9]{1,2,34,5} TLS Auth Error: Auth 
Username/Password verification failed for peer.*$
+
+ignoreregex = 
diff --exclude .svn --exclude .git --exclude CVS --exclude .hg -urN 
fail2ban-0.8.13/debian/jail.conf fail2ban-0.8.13-mine/debian/jail.conf
--- fail2ban-0.8.13/debian/jail.conf2014-03-19 16:43:38.0 +0100
+++ fail2ban-0.8.13-mine/debian/jail.conf   2014-05-14 01:38:41.114112002 
+0200
@@ -550,3 +550,15 @@
sendmail-whois[name=Nagios, dest=%(destemail)s, 
sender=%(sender)s, sendername=%(sendername)s]
 logpath  = /var/log/messages ; nrpe.cfg may define a different log_facility
 maxretry = 1
+
+[openvpn]
+
+enabled   = true
+filter= openvpn
+port  = all
+protocol  = all
+banaction = iptables-allports
+port  = anyport
+logpath   = /var/log/daemon.log
+maxretry  = 10
+


Bug#748077: libnl: Please use arch:linux-any

2014-05-13 Thread Samuel Thibault
Source: libnl
Version: 1.1-8
Severity: important

Hello,

This package seems Linux-specific, so it should use Architecture:
linux-any in the control file, so its build is not even tried on
non-Linux archs.

Samuel

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- 
Samuel
m argh, pi est plus grand que 2. Ca casse tout
 -+- #ens-mim -+-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#730828: dovecot-core: bugs me like hell about my free choice of SSL certificate location

2014-05-13 Thread Jaldhar H. Vyas

On Sun, 11 May 2014, Dominik George wrote:


dist-upgrade today, bugged me six times. Thank you!


ARRGH this will be the death of me!  Which version were you upgrading 
from?  The one in stable?  If it was from testing/unstable you should not 
have been asked again.


Sorry for the annoyance.  we shall get to the bottom of this.

--
Jaldhar H. Vyas jald...@debian.org


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748078: kfreebsd-9: ciss(4) potential data corruption bug

2014-05-13 Thread Steven Chamberlain
Source: kfreebsd-9
Version: 9.0-10+deb70.6
Severity: important

FreeBSD Errata Note EN-14:05 describes a potential data corruption bug
in the ciss(4) driver for HP hardware RAIDs:
http://www.freebsd.org/security/advisories/FreeBSD-EN-14:05.ciss.asc

r264354 of head/ fixes kfreebsd-11
r264510 of stable/10/ fixes kfreebsd-10
r264511 of stable/9/ fixes it slightly differently for kfreebsd-9
stable/8/ did not receive a fix so presumably kfreebsd-8 is unaffected

This can be fixed in sid and maybe considered for the next wheezy p-u.

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: kfreebsd-amd64 (x86_64)

Kernel: kFreeBSD 9.0-2-amd64-xenhvm
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#747764: make 4.0-5 bug

2014-05-13 Thread Manoj Srivastava
On Tue, May 13 2014, Юрий Матронов wrote:

 After analyzing the source code make 4.0 figured out that the problem
 in the function find_char_unquote (read.c).

 I replaced the
 # define STOP_SET (_v, _m) ANY_SET (stopchar_map [(unsigned char) (_v)], (_m))
 Thereafter, all the works.

Thanks for the analysis. This appears to be indeed a real bug,
 and I should have looked beyond the space/tab issue.

I have found that the same bug was independently reported and
 fixed upstream, and I will cherry pick that patch. Thanks for youer
 help on this report.

manoj
-- 
Genuine happiness is when a wife sees a double chin on her husband's old
girl friend.
Manoj Srivastava sriva...@acm.org http://www.golden-gryphon.com/  
4096R/C5779A1C E37E 5EC5 2A01 DA25 AD20  05B6 CF48 9438 C577 9A1C


signature.asc
Description: PGP signature


Bug#748076: fail2ban: Add openvpn rules

2014-05-13 Thread Yaroslav Halchenko
Hi Samuel,

Thank you for sharing your configuration files!  Would you mind to
submit a proper pull request with them at

https://github.com/fail2ban/fail2ban/pulls

upon a brief look I am afraid they might be a bit 'too flexible' thus
theoretically allowing for injection attacks, e.g. having .*
before AND after .* pretty much demolishes any anchoring at the end you
have.  Have a look at
https://github.com/fail2ban/fail2ban/blob/HEAD/FILTERS regarding some
hints on regular expressions and test cases.

Thanks in advance for the PR.

On Wed, 14 May 2014, Samuel Thibault wrote:

 Package: fail2ban
 Version: 0.8.13-1
 Severity: normal
 Tags: patch

 Hello,

 We use fail2ban for openvpn, here are the rules we are using.

-- 
Yaroslav O. Halchenko, Ph.D.
http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org
Research Scientist,Psychological and Brain Sciences Dept.
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834   Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#636679: Sponsoring apitrace package for Debian

2014-05-13 Thread Christopher James Halse Rogers

On Tue, May 13, 2014 at 10:04 PM, Guus Sliepen g...@debian.org wrote:

On Tue, May 13, 2014 at 01:44:32PM +0200, Guus Sliepen wrote:

 Please tell me where I can download your apitrace packages, and 
unless there is

 something wrong with them I'll upload them to Debian today.


Ok, found something in 
git://git.debian.org/pkg-xorg/app/apitrace.git. Some issues:


- It's an old version, latest is 5.0. Do you intend to update this 
package?


Yes; I'm about halfway through doing so. As you might have noticed, the 
annoying bit is extracting a bunch of embedded code copies - zlib, 
snappy, png.


I hit my buildsystem-madness threshold and then got busy with other 
things. I'll see if I can finish this off tonight.




- You're using pristine-tar, but the upstream version in 
debian/changelog does

  not match any of the tarballs in the repository.

- Why use pristine-tar when upstream does not provide any tarballs at 
all?


So people can easily build packages requiring Debian-only updates given 
only the git packaging branch, rather than the packaging branch plus 
downloading the tarball from the Debian archives.



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748077: libnl: Please use arch:linux-any

2014-05-13 Thread Michael Biebl
Am 14.05.2014 02:02, schrieb Samuel Thibault:
 Source: libnl
 Version: 1.1-8
 Severity: important
 
 Hello,
 
 This package seems Linux-specific, so it should use Architecture:
 linux-any in the control file, so its build is not even tried on
 non-Linux archs.

libnl is about to be removed [0], so it won't see another update.

Cheers,
Michael

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746524
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#748080: denyhosts: RESET_ON_SUCCESS not working

2014-05-13 Thread Vincent McIntyre
Package: denyhosts
Version: 2.6-10+deb7u2
Severity: normal

On a debian system a successful ssh login is recorded like this in auth.log:

May 14 09:57:40 mybox sshd[30973]: Accepted password for joe from 1.15.16.24 
port 57633 ssh2

But regex.py is looking for:

SUCCESSFUL_ENTRY_REGEX = re.compile(rAccepted (?Pmethod\S+) for 
(?Puser.*?) from (:::)?(?Phost\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$)

which does not match because of the 'port' etc after the IP address.

This is easily fixed, with this regex instead:
SUCCESSFUL_ENTRY_REGEX = re.compile(rAccepted (?Pmethod\S+) for 
(?Puser.*?) from (:::)?(?Phost\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})( port 
\d+)?( ssh2)?$)

See also #734329.
Looking back at that bug made me wonder about the (?Puser.*?) element
of the regex. Should it be (?Puser.*) instead?

Kind regards
Vince
-- 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#725786: More tests

2014-05-13 Thread Stephen Hemminger
On Tue, 13 May 2014 16:39:14 -0700
Santiago Garcia Mantinan ma...@debian.org wrote:

 Hi!
 
 Doing more tests on this I came to the conclusion that the problem we found
 when creating the bridge with iproute must be a bug on iproute when creating
 a bridge while setting a MAC.
 
 If I create a bridge using:
 
 # ip link add br2 address fc:cc:cc:cc:cc:cc type bridge
 
 I end up with a wrong bridge id:
 
 # brctl showstp br2
 br2
  bridge id  8000.
  designated root8000.
  root port 0path cost  0
  max age  20.00 bridge max age
 20.00
  hello time2.00 bridge hello time  
 2.00
  forward delay15.00 bridge forward delay  
 15.00
  ageing time 300.00
  hello timer   0.00 tcn timer  
 0.00
  topology change timer 0.00 gc timer   
 0.00
  flags  
 
 If I later add a port to this bridge it seems the bridge doesn't work and
 the bridge id continues to be the same.
 
 I have however identified what seems to be a workaround for this but it
 seems to kill the solution for lukas setup, the workaround consists of
 creating the bridge with a forced MAC and after the interface is up change
 it to another MAC, then the bridge id is changed to match the MAC address
 (fixes real hardware setup) but the dummy bridge scenario (Lukas setup)
 seems to break (interface keeps the ipv6 address but goes to state DOWN).
 Lukas, can you test this and see if it really breaks your setup?
 
 I'm going to release a new version of the package with the general solution
 and ping the iproute guys to take a look into this.
 
 Regards.

Fixed upstream

commit 30313a3d5794472c3548d7288e306a5492030370
Author: Toshiaki Makita makita.toshi...@lab.ntt.co.jp
Date:   Fri Apr 25 17:01:18 2014 +0900

bridge: Handle IFLA_ADDRESS correctly when creating bridge device

When bridge device is created with IFLA_ADDRESS, we are not calling
br_stp_change_bridge_id(), which leads to incorrect local fdb
management and bridge id calculation, and prevents us from receiving
frames on the bridge device.

Reported-by: Tom Gundersen t...@jklm.no
Signed-off-by: Toshiaki Makita makita.toshi...@lab.ntt.co.jp
Signed-off-by: David S. Miller da...@davemloft.net


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748063: debian-installer: Please offer luks serpent xts 512b

2014-05-13 Thread Cyril Brulebois
Cyril Brulebois k...@debian.org (2014-05-13):
 Hallo Thomas,
 
 and thanks for your report.
 
 Thomas Renard cybae...@web.de (2014-05-13):
  Package: debian-installer
  Version: testing
  Severity: wishlist
  
  Dear Maintainer,
  
  according to
  http://www.reddit.com/r/crypto/comments/235i58/linux_cryptosetup_strong_crypto_settings/
  
  serpent-512b-xts seems to be the fastest software crypt algorithm for
  luks. But the debian installer menu only offers 256b-xts. It would be
  nice to have a 512b option.
 
 I know nothing about the prerequisites on the crypto side, but maybe the
 installer only needs partman-crypto to be patched, this way:
 | --- a/ciphers/dm-crypt/serpent/keysize
 | +++ b/ciphers/dm-crypt/serpent/keysize
 | @@ -1 +1 @@
 | -128 192 256
 | +128 192 256 512

So I've hacked the d-i bits, and I verified that the modified image
indeed proposes serpent/512/xts as an option (even though I didn't test
without my patch; I'm assuming you did).

Now, trying to use that doesn't work, given the kernel module is unhappy
about the parameter being passed.

Looking at the kernel sources (v3.15-rc5-77-g14186fe), I see:
| crypto/serpent_generic.c:   .cia_max_keysize=   
SERPENT_MAX_KEY_SIZE,
| crypto/serpent_generic.c:   .cia_max_keysize=   
SERPENT_MAX_KEY_SIZE,
| include/crypto/serpent.h:#define SERPENT_MAX_KEY_SIZE32

which assuming max key size is expressed in bytes, would match a maximum
key size of 256 bits.

But then I'm probably missing something obvious. And as I said, I don't
know anything in the crypto area to being with.

Mraw,
KiBi.


signature.asc
Description: Digital signature


Bug#748081: RFP: xul-ext-privacy-badger -- Web browser plugin for blocking spying ads and invisible trackers

2014-05-13 Thread Daniel Kahn Gillmor
Package: wnpp
Severity: wishlist

* Package name: xul-ext-privacy-badger
  Version : 0.1.3
  Upstream Author : Yan Zhu y...@eff.org
* URL : https://www.eff.org/privacybadger
* License : GPLv3
  Programming Lang: Javascript
  Description : Web browser plugin for blocking spying ads and invisible 
trackers

Privacy Badger is a browser add-on that stops advertisers and other
third-party trackers from secretly tracking where you go and what
pages you look at on the web.  If an advertiser seems to be tracking
you across multiple websites without your permission, Privacy Badger
automatically blocks that advertiser from loading any more content in
your browser.  To the advertiser, it's like you suddenly disappeared.



other notes:

It looks like Privacy Badger might share some code from AdBlock Plus
(already in debian).

Source code appears to be at:

 https://github.com/EFForg/privacybadgerfirefox

There is also 

 https://github.com/EFForg/privacybadgerchrome

I don't know about packaging chrome/chromium extensions in debian, but
that might also be desirable.

 --dkg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#598534: alternative approach

2014-05-13 Thread Manoj Srivastava
On Thu, Sep 30 2010, Olly Betts wrote:

 You can use make -q to probe targets less intrusively.  This also works
 for a makefile with default rule like this one:

 %:
   echo $@

 This matches the dummy target the other approach uses, so it doesn't work.

 Using '-q' also seems less brittle than trying to pattern match output.

I tried using bith versions of the script.
 /tmp/make-first-existing-target: Joey's latest script
 /tmp/make-first-existing-target-1: Olly's script using -q

These work
--8---cut here---start-8---
 /tmp/make-first-existing-target   clean distclean -- -f debian/rules
 /tmp/make-first-existing-target-1 clean distclean -- -f debian/rules

 /tmp/make-first-existing-target foo clean -- -f debian/rules
--8---cut here---end---8---
   This correctly runs clean.

The following fails, however it does produce a listing of
 available targets: 
--8---cut here---start-8---
 /tmp/make-first-existing-target-1 foo clean -- -f debian/rules
 dh foo --parallel --with autoreconf
dh: Unknown sequence foo (choose from: binary binary-arch binary-indep build 
build-arch build-indep clean install install-arch install-indep)
debian/rules:9: recipe for target 'foo' failed
make: *** [foo] Error 255
[1]28568 exit 2 /tmp/make-first-existing-target-1 foo clean -- -f 
debian/rules
--8---cut here---end---8---

Comments?

manoj
-- 
Politicians should read science fiction, not westerns and detective
stories. Arthur C. Clarke
Manoj Srivastava sriva...@acm.org http://www.golden-gryphon.com/  
4096R/C5779A1C E37E 5EC5 2A01 DA25 AD20  05B6 CF48 9438 C577 9A1C


signature.asc
Description: PGP signature


Bug#748082: fails to update fresh barebones offline install

2014-05-13 Thread Hans-Christoph Steiner
Package: apt-offline
Version: 1.3.1
Severity: important
Tags: patch

I want to make it really easy to build up Debian installs completely offline.
 I found that after I did a barebones Debian install and installed
apt-offline, apt-offline was failing on:

  apt-offline install /media/usbthumb/

The errors where one of these per signed file:

gpgv: Signature made Sat 26 Apr 2014 09:27:41 AM UTC using RSA key ID 46925553
gpgv: Can't check signature: public key not found

That is because /etc/apt/trusted.gpg is 0 bytes.  I fixed it quick-n-dirty by
doing:

cp /usr/share/keyrings/debian-archive-keyring.gpg /etc/apt/trusted.gpg

Perhaps a better fix would be to include
/usr/share/keyrings/debian-archive-keyring.gpg as one of the keyrings that
apt-offline supports for verifying the files (see attached patch).

diff --git a/apt_offline_core/AptOfflineCoreLib.py b/apt_offline_core/AptOfflineCoreLib.py
index e06f55b..6af1235 100644
--- a/apt_offline_core/AptOfflineCoreLib.py
+++ b/apt_offline_core/AptOfflineCoreLib.py
@@ -901,6 +901,7 @@ def installer( args ):
 
 if keyring is None:
 self.opts=--keyring /etc/apt/trusted.gpg --ignore-time-conflict
+self.opts += --keyring /usr/share/keyrings/debian-archive-keyring.gpg
 else:
 self.opts = --keyring %s --ignore-time-conflict % (keyring)
 


signature.asc
Description: OpenPGP digital signature


Bug#748083: snmpd: typo in /etc/snmp/snmpd.conf

2014-05-13 Thread Nye Liu
Package: snmpd
Version: 5.7.2.1~dfsg-5
Severity: minor

Dear Maintainer,

There is a typo in /etc/snmp/snmpd.conf

rocommunity6 public  defalut   -V systemo

should be

rocommunity6 public  default   -V systemo

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (x86_64)

Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages snmpd depends on:
ii  adduser3.113+nmu3
ii  debconf [debconf-2.0]  1.5.52
ii  libc6  2.18-4
ii  libsnmp-base   5.7.2.1~dfsg-5
ii  libsnmp30  5.7.2.1~dfsg-5
ii  lsb-base   4.1+Debian12

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  none

-- Configuration Files:
/etc/snmp/snmpd.conf [Errno 13] Permission denied: u'/etc/snmp/snmpd.conf'
/etc/snmp/snmptrapd.conf [Errno 13] Permission denied: 
u'/etc/snmp/snmptrapd.conf'

-- debconf-show failed


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#319652: is this bug still relevant?

2014-05-13 Thread Ryan Tandy

tags 319652 + moreinfo
thanks

Hi Wichert,

Hmm, almost 9 years since the last follow-up on this bug. Now haydn is 
long gone, and openldap 2.2 as well.


Searching the internet as well as upstream's bug tracker, I found a few 
reports of this assertion in the 2.1 and 2.2 series (e.g. ITS#3278, 
ITS#3298), one in 2.3.4 (ITS#3908), and none after that. Based on that, 
I think this was probably fixed long in the past.


Is there anything useful I can do with this report at this point, 
besides closing it?


thanks,
Ryan


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748069: linux-image-3.2.0-4-kirkwood: modprobe -a snd-soc-cs42l51 to enable onboard sound devices causes page allocation failure

2014-05-13 Thread J G Miller

 Ben Hutchings explained:

  It wants to allocate 256KB of contiguous memory.  This is fairly likely
  to fail unless it's done at boot time or the system has plenty of free
  memory (much more than 256KB).

Adding

 snd_soc_cs42l51
 snd-soc-openrd

to /etc/modules to ensure the modules are loaded at bootime results in
successful loading of the modules and the onboard sound card device
being made available.

s42l51-codec 0-004a: found device cs42l51 rev 1

openrd-client-audio openrd-client-audio: cs42l51-hifi - i2s mapping ok

card 0: Client [OpenRD Client], device 0: CS42L51 HiFi cs42l51-hifi-0 []

But the crackle/crunch sound regardless of what is played with aplay continues
accompanied by many kernel messages

kirkwood_dma_irq: got err interrupt 0x4

  Please test whether this is fixed in Linux 3.14, currently available in
  unstable.

Installing 

 initramfs-tools_0.115_all.deb and
 linux-image-3.14-1-kirkwood_3.14.2-1_armel.deb

and rebooting, has now resulted in a functional onboard sound card device 
(tested
using aplay with a wav file and mpg123 with an mp3 file) for the very first time
on this machine.

As the failure to load snd-soc-cs42l51 was an artefact of the system 
(insufficient
free memory at the time of loading) and the problem has been satisfactorily 
resolved,
please close this bug.

Thank you very much for your very speedy assistance!


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#598534: [29b2504] Fix for Bug#598534 committed to git

2014-05-13 Thread Manoj Srivastava

tags 598534 +pending
thanks
Hi,

 The following change has been committed for this bug by
 Manoj Srivastava sriva...@golden-gryphon.com on Tue, 13 May 2014 18:49:21 
-0700.
 The fix will be in the next upload. 
=
[master]: A new bug fixing version

* There is an issue involving UTF-8 characters and the function
  find_char_unquote (read.c). The problem in the macro STOP_SET
  (makeint.h) where a character is converted to an int. Conversion to
  int is not correct. Characters with codes greater than 0x7f ( in
  particular in Cyrillic UTF- 8 ) into a large negative number. Thnks to
  the analysis from Юрий Матронов ymu...@mail.ru. This bug was
  independently reported and fixed upstream, so cherry picking that
  commit from upstream (which also comes with a test).
  (Closes: #747764).
* added a script that, given a list of targets, will build the first
  target that actually exists. Script created by Joey Hess.
  (Closes: #598534).

Signed-off-by: Manoj Srivastava sriva...@golden-gryphon.com
=


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#746202: systemd

2014-05-13 Thread Sylvain Archenault

I feel like this may be due to recent changes in init system.

Try to use systemd as describe in https://wiki.debian.org/systemd, it 
solved the issue for me.


Without this - i've been having a lot of issue (with gdm and group 
permissions).


Sylvain


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#744820: squeeze-pu: package catfish/0.3.2-2+deb6u1

2014-05-13 Thread Vincent Cheng
On Tue, May 13, 2014 at 1:36 PM, Jackson Doak nosk...@ubuntu.com wrote:
 I still lack access to a computer where i can do this. Could you please NMU
 it?

The package hasn't been approved by the release team, nor uploaded to
squeeze yet, so there's nothing to NMU.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#746202: systemd

2014-05-13 Thread Sylvain Archenault
I also upgraded gdm3 to 3.12 from experimental - as i'm not sure current 
sid version (3.8) works with systemd, see:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677107

On 05/13/2014 10:06 PM, Sylvain Archenault wrote:

I feel like this may be due to recent changes in init system.

Try to use systemd as describe in https://wiki.debian.org/systemd, it
solved the issue for me.

Without this - i've been having a lot of issue (with gdm and group
permissions).

Sylvain




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#747154: Backspace and delete keys dysfunctional in gedit

2014-05-13 Thread Swarup


On 05/13/2014 04:13 PM, Gunnar Hjalmarsson wrote:

On 2014-05-13 21:48, Swarup wrote:

Just to make sure it is clear: I only tested the command env
GTK_IM_MODULE=xim gedit. When it gave the results described above,
then I did not attempt to make the workaround persistent using the
subsequent instructions.

Ok, it shouldn't be any different.

Actually I was able to reproduce the problem. When I tried again, and
typed rapidly using scim, the computer seemed to be overloaded somehow,
and there were long delays between key presses and appearance on screen.
Yes, it looked exciting-- but unfortunately the workaround isn't 
functional. What it looks like we'll need is a fix for the bug.


Swarup


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748084: dracut: Package needs a dependency on pkg-config

2014-05-13 Thread Courtney Bane
Package: dracut
Version: 037-1
Severity: important

Dracut can't find systemd if pkg-config isn't installed.

Without pkg-config, I get these error messages when building an initrd:

/usr/lib/dracut/modules.d/98systemd/module-setup.sh: line 9: 
/usr/lib/systemd/systemd: No such file or directory
/usr/lib/dracut/modules.d/98systemd/module-setup.sh: line 10: ((: = 198 : 
syntax error: operand expected (error token is = 198 )

As a result, systemd doesn't end up in the initrd, and the system can't boot. 
If I manually install pkg-config, everything works correctly.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dracut depends on:
ii  cpio2.11+dfsg-2
ii  kbd 1.15.5-1
ii  kmod16-2
ii  kpartx  0.5.0-1
ii  libc6   2.18-5
ii  udev204-8
ii  util-linux  2.20.1-5.7

Versions of packages dracut recommends:
ii  cryptsetup  2:1.6.4-4
pn  dmraid  none
ii  dmsetup 2:1.02.83-2
pn  lvm2none
pn  mdadm   none

Versions of packages dracut suggests:
pn  dracut-network  none

-- Configuration Files:
/etc/dracut.conf changed:
hostonly=yes


-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#746609: possible patch

2014-05-13 Thread Olly Betts
On Mon, May 12, 2014 at 01:49:07PM +1200, Olly Betts wrote:
 On Wed, May 07, 2014 at 11:04:32PM +0100, D Haley wrote:
  I have made a patch which fixes the die-on-autosave dialog problem for
  myself, and have similarly modified the startup tips as well. If you can
  confirm this fixes the startup problem for yourself (I've updated git [1]),
  then this would be great.
 
 Thanks, I'll give it a try soon.

This patch also fixes the crash I was seeing - good work!

Cheers,
Olly


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#748085: spatialite-gui: Please update to use wxwidgets3.0

2014-05-13 Thread Olly Betts
Package: spatialite-gui
Version: 1.7.1-3
Severity: normal
Tags: patch
User: freewx-ma...@lists.alioth.debian.org
Usertags: wx3.0

Dear maintainer,

We're aiming to migrate the archive to using wxwidgets3.0 instead of
wxwidgets2.8.

I've rebuilt your package using the attached simple patch to make
configure find the required wx libraries.  It seems to run OK, but I
have no suitable spatial data to test it with so I haven't exercised it
very thoroughly.

I'm happy to NMU this change if you wish me to - just let me know.

Cheers,
Olly
diff -Nru spatialite-gui-1.7.1/debian/changelog spatialite-gui-1.7.1/debian/changelog
--- spatialite-gui-1.7.1/debian/changelog	2014-03-19 20:24:16.0 +1300
+++ spatialite-gui-1.7.1/debian/changelog	2014-05-01 19:55:07.0 +1200
@@ -1,3 +1,10 @@
+spatialite-gui (1.7.1-3.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Update to use wxWidgets 3.0.
+
+ -- Olly Betts o...@survex.com  Thu, 01 May 2014 19:55:07 +1200
+
 spatialite-gui (1.7.1-3) unstable; urgency=low
 
   * Add gbp.conf to use pristine-tar by default.
diff -Nru spatialite-gui-1.7.1/debian/control spatialite-gui-1.7.1/debian/control
--- spatialite-gui-1.7.1/debian/control	2014-03-19 20:24:16.0 +1300
+++ spatialite-gui-1.7.1/debian/control	2014-05-01 19:55:22.0 +1200
@@ -8,8 +8,7 @@
dh-autoreconf,
pkg-config,
wx-common,
-   wx2.8-headers,
-   libwxgtk2.8-dev,
+   libwxgtk3.0-dev,
libspatialite-dev (= 4.1.1-5~),
libproj-dev,
libgeos-dev,
diff -Nru spatialite-gui-1.7.1/debian/patches/series spatialite-gui-1.7.1/debian/patches/series
--- spatialite-gui-1.7.1/debian/patches/series	2014-03-19 20:24:16.0 +1300
+++ spatialite-gui-1.7.1/debian/patches/series	2014-05-01 20:04:00.0 +1200
@@ -2,3 +2,4 @@
 01-fix_binary_name.patch
 02-fix_typos.patch
 03-link-sqlite3.patch
+wx3.0-compat.patch
diff -Nru spatialite-gui-1.7.1/debian/patches/wx3.0-compat.patch spatialite-gui-1.7.1/debian/patches/wx3.0-compat.patch
--- spatialite-gui-1.7.1/debian/patches/wx3.0-compat.patch	1970-01-01 12:00:00.0 +1200
+++ spatialite-gui-1.7.1/debian/patches/wx3.0-compat.patch	2014-05-01 20:04:18.0 +1200
@@ -0,0 +1,26 @@
+Description: Fix to build with wxwidgets 3.0
+Author: Olly Betts o...@survex.com
+Last-Update: 2014-05-01
+
+--- spatialite-gui-1.7.1.orig/configure
 spatialite-gui-1.7.1/configure
+@@ -15543,7 +15543,7 @@ if test x$WX_CONFIG == xnot_found; then
+ fi
+ CXXFLAGS=$(wx-config --cxxflags)
+ AM_CXXFLAGS=$(wx-config --cxxflags)
+-WX_LIBS=$(wx-config --libs)
++WX_LIBS=$(wx-config --libs std,aui)
+ 
+ 
+ # Checks for header files.
+--- spatialite-gui-1.7.1.orig/configure.ac
 spatialite-gui-1.7.1/configure.ac
+@@ -54,7 +54,7 @@ if test x$WX_CONFIG == xnot_found; then
+ fi
+ CXXFLAGS=$(wx-config --cxxflags)
+ AM_CXXFLAGS=$(wx-config --cxxflags)
+-WX_LIBS=$(wx-config --libs)
++WX_LIBS=$(wx-config --libs std,aui)
+ AC_SUBST(WX_LIBS)
+ 
+ # Checks for header files.


Bug#741972: RFP: popcorn-time -- Torrent movie streamer

2014-05-13 Thread Humberto Bruzetti
Package: wnpp
Followup-For: Bug #741972

A new team has taken the development of the software, and on May 13 the beta of
version 3.0 was released.

Site: http://get-popcorn.com/
Github Repo: https://github.com/popcorn-official/popcorn-app


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#293412: openldap pthread linkage on hurd

2014-05-13 Thread Ryan Tandy

tags 293412 + moreinfo
thanks

Hi Robert,

It's been quite a long time since the last update to this bug.

I'm not familiar with GNU/Hurd, but AFAICT from the buildd logs, 
openldap seems to build and link properly now; the current testsuite 
failure is covered in #693971.


Can you comment on that? Do you know whether the problem reported in 
this bug still exists?


thanks,
Ryan


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#736066: A number of EncFS issues

2014-05-13 Thread Murray McAllister

Hi,

https://defuse.ca/audits/encfs.htm discusses a number of issues in EncFS:

Same Key Used for Encryption and Authentication

Stream Cipher Used to Encrypt Last File Block

Generating Block IV by XORing Block Number

File Holes are Not Authenticated

MACs Not Compared in Constant Time

64-bit MACs

Editing Configuration File Disables MACs

There are currently no patches.

I am not familiar enough with cryptography to know if they need CVEs, or 
are considered hardening (the last one sounds CVE worthy though)


Cheers,

--
Murray McAllister / Red Hat Security Response Team

https://bugzilla.redhat.com/show_bug.cgi?id=1097537


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#744303: xserver-xorg-core: Segmentation fault when receiving a SIGIO in DeepCopyDeviceClasses

2014-05-13 Thread Peter Hutterer
On Tue, Apr 22, 2014 at 08:04:13PM +0200, Julien Cristau wrote:
 Hi Peter,
 
 we received the following report against Debian's X server package, is
 this something you've seen before and/or does the patch Steven provided
 look sane?

sorry about the delay. Yes that patch seems like the best option. Please
send it to the list


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#566277: dpkg-reconfigure: no renewed question b/c changed config files

2014-05-13 Thread Manoj Srivastava
Hi,

ucf is not dpkg. Just because the package is being reconfigured,
 no information is passed from the dpkg to postinst to ucf to indicate
 something special is going on.

To make ucf forget about the previously recorded  state of the
 decision, you should call:
  ucf --purge path/of config/file
The next time the package is reconfigured  or updated, ucf will ask
again about disposition.

manoj
-- 
God isn't dead.  He just doesn't want to get involved.
Manoj Srivastava sriva...@acm.org 
4096R/C5779A1C E37E 5EC5 2A01 DA25 AD20  05B6 CF48 9438 C577 9A1C


signature.asc
Description: PGP signature


Bug#731591: ucf hangs if you open a shell then you choose to keep your current version of file

2014-05-13 Thread Manoj Srivastava
tags 731591 + unreproducible
tags 731591 + moreinfo
severity 731591  normal
thanks

Hi,

cd /tmp
mkdir test
cd test
mkdir registry
echo new-file | new
sudo /usr/bin/ucf --state-dir /tmp/test/registry -v /tmp/test/new /tmp/test/dest
echo newer  new
sudo /usr/bin/ucf --state-dir /tmp/test/registry -v /tmp/test/new /tmp/test/dest

I opened a shell, edited dest, exited the shell, and kept he
 current versoin. No hang, no crash. Is this still an issue?

manoj
-- 
Forty two.
Manoj Srivastava sriva...@acm.org 
4096R/C5779A1C E37E 5EC5 2A01 DA25 AD20  05B6 CF48 9438 C577 9A1C


signature.asc
Description: PGP signature


<    1   2   3   4