Bug#918988: libmariadbclient18: conflict with libmysqlclient18

2019-01-11 Thread Bernard Massot
Package: libmariadbclient18
Version: 10.1.26-0+deb9u1
Severity: normal

Dear Maintainer,

On a web server running Apache, I'm using OCS inventory (using the
ocsinventory-server Debian package), through mod_perl. OCS inventory
uses libdbd-mysql-perl, which depends on libmariadbclient18.

This Apache instance also runs mod_php, using php5-mysql, which depends
on libmysqlclient18.

After upgrading libmariadbclient18 from 10.1.26-0+deb9u1 to
10.1.37-0+deb9u1, requests to the OCS inventory server were making Apache
crash, leaving "child pid  exit signal Segmentation fault (11)"
messages in Apache error log files. As a result, Apache was returning
500 HTTP error instead of expected response from OCS inventory.

Downgrading libmariadbclient18 to 10.1.26-0+deb9u1 made everything work
again.


On another server running Apache, I'm using django through mod_wsgi. My
django app was depending on the mysqlclient Python module (provided by
pip in a virtualenv, not by a Debian package), which contained a .so
file linked with libmariadbclient18 (the one in
/usr/lib/x86_64-linux-gnu).

This same Apache instance also runs mod_php, using php5-mysql, which
depends on libmysqlclient18.

After upgrading libmariadbclient18 from 10.1.26-0+deb9u1 to
10.1.37-0+deb9u1, requests to the django web site were making Apache
crash, leaving "child pid  exit signal Segmentation fault (11)"
messages in Apache error log files. As a result, Apache was returning
500 HTTP error instead of expected response from django.

Downgrading libmariadbclient18 to 10.1.26-0+deb9u1 made everything work
again. Using libmariadbclient18 10.1.37-0+deb9u1 but disabling mod_php
also worked.
I eventually kept libmariadbclient18 10.1.37-0+deb9u1 but installed
libmysqlclient-dev instead of libmariadbclient-dev, and rebuilt
mysqlclient Python module with libmariadbclient-dev. Now the .so file
from mysqlclient is linked with libmysqlclient18, not with
libmariadbclient18 anymore. This way mod_wsgi and mod_php successfully
run in the same Apache instance, while using libmariadbclient18
10.1.37-0+deb9u1.


As a whole, it seems libmysqlclient and libmariadbclient coexisted
peacefully with 10.1.26-0+deb9u1, but don't since 10.1.37-0+deb9u1.

While trying to debug my wsgi crash, I read some explanations about
conflicting symbols. I don't now very well how this whole symbols and
dynamic libraries stuff works, but I remarked this :
* with 10.1.26-0+deb9u1:
$ nm -D /usr/lib/x86_64-linux-gnu/libmariadbclient.so.18 | egrep 
'lib(mariadb|mysql)client_18'
 A libmariadbclient_18
$ nm -D /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18 | egrep 
'lib(mariadb|mysql)client_18'
 A libmysqlclient_18
$

* with 10.1.37-0+deb9u1:
$ nm -D /usr/lib/x86_64-linux-gnu/libmariadbclient.so.18 | egrep 
'lib(mariadb|mysql)client_18'
 A libmariadbclient_18
 A libmysqlclient_18
$ nm -D /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18 | egrep 
'lib(mariadb|mysql)client_18'
 A libmysqlclient_18
$

So I wonder if new libmariadbclient declaring the same mysql "things" as
libmysqlclient could be the reason of the crashes.



Bug#916921: radicale: upgrade to 2.x breaks compatibility with 1.x without any prior warning

2018-12-20 Thread Bernard Massot
On Thu, Dec 20, 2018 at 09:51:46PM +0100, Jonas Smedegaard wrote:
> I suspect you misunderstand changelog.Debian
Yes, I did misunderstand it.

> The place to learn what happened on your host is /var/log/apt/* and 
> /var/log/dpkg* (which you can access but not me - that's why I ask).
I wasn't aware of the existence of /var/log/dpkg.log. That's a good
thing to know. According to this log file, my previous version was
1.1.6-4.
When I upgraded to 2.1.10-1, I think the only warning I saw was about
the /etc/default/radicale file.
 
> If export routine is broken then indeed it is broken.  I see no reason 
> why it should be broken in this particular way, though.  But thanks for 
> sharing your concern.
What I meant was that if the export routine doesn't use the name of the
old iCalendar file for the new directory, then the URL of the
calendar – which is used by the client – changes as well.

But I don't know if the export routine breaks configuration in such a
way since it failed with a "ERROR: Failed to find child collections of
'': generator raised StopIteration" message.
When it happened, I was so bored that instead of trying harder the
export, I did the import in Lightning.
-- 
Bernard Massot



Bug#916921: radicale: upgrade to 2.x breaks compatibility with 1.x without any prior warning

2018-12-20 Thread Bernard Massot
On Thu, Dec 20, 2018 at 05:03:46PM +0100, Jonas Smedegaard wrote:
> which version did you upgrade from?
I'm not sure, but, if I understand changelog.Debian correctly, the
previous Radicale Debian unstable package version was 1.1.1+20160115-2.
As I'm using Debian unstable for years without reinstalling it and I
upgrade my whole system regularly, that version probably was the one I
was using.

> > (for some reason, Radicale uses random hexadecimal strings instead of 
> > calendar title, whereas it is the actual string you have to type in 
> > your CalDAV client),
> 
> This is part of the CalDAV and CardDAV specifications, to not be limited 
> by filesystem constraints - e.g. calendars with same name do not clash.
I don't know if export renames calendars this way since I failed to
use it, but if it does, it breaks (some) clients configuration. That's
another point to care about during upgrade from 1.x to 2.x.
-- 
Bernard Massot



Bug#916921: radicale: upgrade to 2.x breaks compatibility with 1.x without any prior warning

2018-12-20 Thread Bernard Massot
Package: radicale
Version: 2.1.11-2
Severity: important

On Debian unstable, Radicale was just upgraded from 1.x to 2.x. Only after
upgrading did I realize that my calendars were not available any more.

As stated on https://radicale.org/1to2/, upgrade to 2.x forces you to use
Python 3, and thus to upgrade mod_wsgi as well. I was using Python 2 version of
mod_wsgi only because it was the default version and it wasn't causing any
problem (Radicale was my only WSGI application).
Moreover, Radicale 2.x can't even use 1.x data files. You must export your
files *before* upgrading.

The Debian package silently ignores all these issues. I think there should be
warning messages and a ad hoc prerm kind of script.

By the way, installing Radicale 1.x and using --export-storage didn't even work
for me. It probably had something to do with my using single iCalendar file
calendars and my /etc/radicale/config was not configured to support this
anymore.

Just in case someone with the same problem as me read this message, here is how
I fixed all this mess.
For each calendar, I unsubscribed in Lightning, created a new calendar through
the web interface, renamed the created directory in
/var/lib/radicale/collections/collection-root// (for some reason,
Radicale uses random hexadecimal strings instead of calendar title, whereas it
is the actual string you have to type in your CalDAV client), subscribed
the newly created calendar in Lightning, and imported the old iCalendar file
from /var/lib/radicale/collections// using the "Events and
Tasks->Import" Lightning menu.
It actually was more straightforward than using the whole export storage thing.
After doing that my other CalDAV clients worked without needing to be
reconfigured.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: armel

Kernel: Linux 4.18.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to fr_FR.UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to fr_FR.UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages radicale depends on:
ii  adduser  3.118
ii  init-system-helpers  1.56+nmu1
ii  lsb-base 10.2018112800
ii  python3  3.7.1-3
ii  python3-radicale 2.1.11-2

Versions of packages radicale recommends:
ii  ssl-cert  1.0.39

Versions of packages radicale suggests:
ii  apache2 2.4.37-1
ii  apache2-utils   2.4.37-1
pn  libapache2-mod-proxy-uwsgi  
pn  python3-bcrypt  
pn  python3-passlib 
pn  uwsgi   

-- Configuration Files:
/etc/radicale/config changed [not included]

-- debconf-show failed



Bug#797883: release-notes: Wheezy to Jessie: in Squid helper name changes break configuration

2015-09-04 Thread Bernard Massot

Thank you for the quick action, Niels.

On Thu, Sep 03, 2015 at 05:37:52PM +0200, Niels Thykier wrote:

5.22. Backwards incompatible changes in the Squid webproxy
[Note] This section only applies to people that have installed the squid 
webproxy.

The configuration of squid has in an incompatible way. Notably some of the squid 
"helpers" have changed their name. If your configuration relies on old features 
no longer present or on the old names for the helpers, your squid service may fail to 
start after the upgrade.

Please see the upstream release notes for more information. These are:

Release notes for Squid 3.2 (The renamed helpers can be found in 2.6 Helper 
Name Changes)

Release notes for Squid 3.3

Release notes for Squid 3.4


If you have any remarks to the wording, please let me know and I will
look into it. :)
I think the note is so obvious that it's not necessary. I guess the 
first sentence should read "The configuration of squid has changed in an 
incompatible way.".

--
Bernard Massot - Service informatique - ICMMO - Bâtiment 410
Université Paris-Sud 11
91405 Orsay Cedex
Tél : +33 1 69 15 63 62



Bug#797883: release-notes: Wheezy to Jessie: in Squid helper name changes break configuration

2015-09-03 Thread Bernard Massot
Package: release-notes
Severity: normal

-- System Information:
Debian Release: 8.1

Hi,

Helper names are not the same in squid3 3.1.20 (Wheezy) and squid3 3.4.8 
(Jessie). When you upgrade, squid won't start until you change your 
configuration file. See 
http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#ss2.6.

I think it should mentioned in chapter 5 ("Issues to be aware of for jessie") 
of the documentation.



Bug#784973: gcc-4.9-arm-linux-gnueabi depends on obsolete libgcc-4.9-dev:armel (= 4.9.2-10) in sid

2015-06-05 Thread Bernard Massot
It seems it's out of sync again:

$ sudo apt-get install gcc-4.9-arm-linux-gnueabi
Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 gcc-4.9-arm-linux-gnueabi : Depends: libgcc-4.9-dev:armel (= 4.9.2-18) but 
4.9.2-20 is to be installed
E: Unable to correct problems, you have held broken packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#766147: [php-maint] Bug#766147: php5-common: session cleanup can be misused to change modification time of arbitrary files to "now" when symlink protection not enabled

2014-11-19 Thread Bernard Massot
Le 21/10/2014 à 12:06, Ondřej Surý a écrit :
> This change will be included in next wheezy update of PHP.
Debian Wheezy has Sed 4.2.1, whereas "-z" option was added in Sed 4.2.2.
As a consequence /usr/lib/php5/sessionclean is broken on Debian Stable!

Please fix.
-- 
Bernard Massot


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#752676: dokuwiki: wrong link in README.Debian

2014-06-25 Thread Bernard Massot
Package: dokuwiki
Version: 0.0.20140505+dfsg-1
Severity: minor

The link about stylesheet loading in README.Debian.gz should be 
https://www.dokuwiki.org/devel:css#user_styles (instead of 
http://wiki.splitbrain.org/wiki:devel:css#stylesheet_loading).

-- System Information:
Debian Release: 7.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (100, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages dokuwiki depends on:
ii  debconf [debconf-2.0]  1.5.49
ii  javascript-common  7
ii  libjs-jquery   1.7.2+dfsg-1
ii  libjs-jquery-cookie6-1
ii  libjs-jquery-ui1.8.ooops.21+dfsg-2
ii  libphp-simplepie   1.2.1-3
ii  php-geshi  1.0.8.4-2
ii  php-seclib 0.3.6-1
ii  php5   5.4.4-14+deb7u10
ii  ucf3.0025+nmu3

Versions of packages dokuwiki recommends:
ii  imagemagick  8:6.7.7.10-5+deb7u3
ii  php5-cli 5.4.4-14+deb7u10
ii  php5-gd  5.4.4-14+deb7u10
ii  php5-ldap5.4.4-14+deb7u10
ii  php5-mysql   5.4.4-14+deb7u10

Versions of packages dokuwiki suggests:
pn  libapache2-mod-xsendfile  

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#558671: link to libncursesw5

2013-07-22 Thread Bernard Massot
Please link calcurse to libncursesw5, not to libncurses5, otherwise
UTF-8 won't work properly. Symptoms of #466010 remain with the current
package. I rebuilt the package using libcursesw5-dev and it worked fine.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#704903: php5: Bug #60723 error_log error time has changed to UTC ignoring default timezone

2013-07-09 Thread Bernard Massot
Not having local time in logs is really annoying. You could just apply
the official patch:
https://bugs.php.net/patch-display.php?bug=60723&patch=bug60723.patch&revision=1348197432

And, even better, don't print timezone, because it is irrelevant, it was
like this before, and PHP's timezone detection is not so good (it failed
for me whereas it is properly defined on my system).


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#711195: qtsmbstatus-server: useless dependence on libqt4-sql

2013-06-05 Thread Bernard Massot
Package: qtsmbstatus-server
Version: 2.2.1-2
Severity: normal

QtSmbstatus packages depend on libqt4-sql whereas it seems useless. The
following command (looking for Qt 4 SQL classes) doesn't show any result :
egrep -r '(QSqlQueryModel|QSqlTableModel|QSqlRelationalTableModel)' 
qtsmbstatus-2.2.1
None of the executables are linked against libQtSql.so.4.

I removed libqt4-sql dependency from debian/control and rebuilt qtsmbstatus
packages. It seems to work correctly.

-- System Information:
Debian Release: 7.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages qtsmbstatus-server depends on:
ii  libc6   2.13-38
ii  libgcc1 1:4.7.2-5
ii  libpam0g1.1.3-7.1
ii  libqt4-network  4:4.8.2+dfsg-11
ii  libqt4-sql  4:4.8.2+dfsg-11
ii  libqtcore4  4:4.8.2+dfsg-11
ii  libstdc++6  4.7.2-5
ii  samba   2:3.6.6-6

qtsmbstatus-server recommends no packages.

qtsmbstatus-server suggests no packages.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#693045: tudu: wrong homepage in package description

2012-11-12 Thread Bernard Massot
Package: tudu
Version: 0.8.1-1
Severity: minor

Homepage given in package description is http://cauterized.net/~meskio/tudu/ 
whereas the correct current one is http://code.meskio.net/tudu/.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages tudu depends on:
ii  libc6 2.13-36
ii  libgcc1   1:4.7.2-4
ii  libncursesw5  5.9-10
ii  libstdc++64.7.2-4

tudu recommends no packages.

tudu suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#689875: sweethome3d: unavailable dependency (sweethome3d-furnitures)

2012-10-07 Thread Bernard Massot
Package: sweethome3d
Version: 3.5+dfsg-1
Severity: important

Sweethome3d 3.6+dfsg-2 depends on "sweethome3d-furnitures" package, which
doesn't exist.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sweethome3d depends on:
ii  icedtea-netx-common 1.3-2
ii  java-wrappers   0.1.25
ii  java3ds-fileloader  1.2+dfsg-1
ii  libbatik-java   1.7+dfsg-3
ii  libfreehep-graphicsio-svg-java  2.1.1-3
ii  libitext-java   2.1.7-4
ii  libjava3d-java  1.5.2+dfsg-8
ii  libsunflow-java 0.07.2.svn396+dfsg-9
ii  openjdk-6-jre   6b24-1.11.4-3

sweethome3d recommends no packages.

sweethome3d suggests no packages.

-- debconf-show failed


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#635737: manpages-fr-extra: nom d'argument à ne pas traduire dans le man de blkid

2011-07-28 Thread Bernard Massot
Package: manpages-fr-extra
Version: 20101103
Severity: normal

La page de man de la commande "blkid" a traduit l'argument "device" du
paramètre "-o" par "périphérique". Or il faut laisser le mot "device" tel quel
puisque c'est un mot-clé passé en argument à blkid.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

manpages-fr-extra depends on no packages.

Versions of packages manpages-fr-extra recommends:
ii  manpages-fr  3.27fr1.4-1 French version of the manual pages

Versions of packages manpages-fr-extra suggests:
ii  konqueror [man-browser]   4:4.6.5-1  advanced file manager, web browser
ii  man-db [man-browser]  2.6.0.2-2  on-line manual pager
pn  manpages-fr-dev(no description available)

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#563282: geeqie: README.lirc is missing from package

2010-01-01 Thread Bernard Massot
Package: geeqie
Version: 1:1.0~beta2-8
Severity: wishlist

Please add README.lirc to debian/geeqie.docs. I had to retrieve source code to
understand how to use geeqie with LIRC, which shouldn't have been necessary.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages geeqie depends on:
ii  geeqie-common  1:1.0~beta2-8 data files for Geeqie
ii  libc6  2.10.2-2  GNU C Library: Shared libraries
ii  libexiv2-5 0.18.2-1+b1   EXIF/IPTC metadata manipulation li
ii  libgcc11:4.4.2-8 GCC support library
ii  libglib2.0-0   2.22.3-2  The GLib library of C routines
ii  libgtk2.0-02.18.5-1  The GTK+ graphical user interface 
ii  liblcms1   1.18.dfsg-1.1 Color management library
ii  liblircclient0 0.8.3-5   infra-red remote control support -
ii  libpango1.0-0  1.26.2-1  Layout and rendering of internatio
ii  libstdc++6 4.4.2-8   The GNU Standard C++ Library v3

Versions of packages geeqie recommends:
ii  exiftran 2.07-3  transform digital camera jpeg imag
ii  exiv20.18.2-1+b1 EXIF/IPTC metadata manipulation to
ii  imagemagick  7:6.5.8.3-1 image manipulation programs
ii  ufraw0.16-1  standalone importer for raw camera
ii  zenity   2.28.0-1Display graphical dialog boxes fro

Versions of packages geeqie suggests:
pn  geeqie-dbg (no description available)
ii  gimp  2.6.7-1.1  The GNU Image Manipulation Program
pn  libjpeg-progs  (no description available)
pn  xpaint (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#539745: libncursesw5: UTF-8 characters not displayed correctly

2009-08-03 Thread Bernard Massot
Package: libncursesw5
Version: 5.7+20090711-1
Severity: important
Tags: l10n

Applications (I actually made tests with dialog and mutt) using libncursesw5
don't display UTF-8 characters correctly. For instance, 'é' is replaced with
'M-i', 'è' with 'M-h', 'ç' with 'M-g', 'à' with 'M-`', etc.
You can test it simply using the "dialog --yesno ABCéDEF" command wich displays
"ABCM-iD" text instead of expected "ABCéDEF". It seems to also have an impact on
line width calculation.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-1-686 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libncursesw5 depends on:
ii  libc6 2.9-23 GNU C Library: Shared libraries

Versions of packages libncursesw5 recommends:
ii  libgpm2   1.20.4-3.2 General Purpose Mouse - shared lib

libncursesw5 suggests no packages.

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#497894: vlc: CVE-2008-3732 Integer overflow in the Open function in modules/demux/tta.c

2008-09-05 Thread Bernard Massot
Package: vlc
Version: 0.8.6.h-4
Severity: grave
Tags: security
Justification: user security hole

When parsing the header of an invalid TTA file, an integer overflow might
happen causing an heap-based buffer overflow. 
When parsing a response from an MMS server, an integer overflow might happen
causing a stack-based buffer overflow.

See http://www.videolan.org/security/sa0807.html .

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-2-686 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages vlc depends on:
ii  libaa1 1.4p5-37+b1   ascii art library
ii  libatk1.0-01.22.0-1  The ATK accessibility toolkit
ii  libavcodec51   0.svn20080206-12  ffmpeg codec library
ii  libc6  2.7-13GNU C Library: Shared libraries
ii  libcaca0   0.99.beta14-1 colour ASCII art library
ii  libcairo2  1.6.4-6   The Cairo 2D vector graphics libra
ii  libcdio7   0.78.2+dfsg1-3library to read and control CD-ROM
ii  libcucul0  0.99.beta14-1 low-level Unicode character drawin
ii  libdbus-1-31.2.1-3   simple interprocess messaging syst
ii  libdbus-glib-1-2   0.76-1simple interprocess messaging syst
ii  libfreetype6   2.3.7-2   FreeType 2 font engine, shared lib
ii  libfribidi00.10.9-1  Free Implementation of the Unicode
ii  libgcc11:4.3.1-9 GCC support library
ii  libgl1-mesa-glx [libgl 7.0.3-5   A free implementation of the OpenG
ii  libglib2.0-0   2.16.5-1  The GLib library of C routines
ii  libglu1-mesa [libglu1] 7.0.3-5   The OpenGL utility library (GLU)
ii  libgtk2.0-02.12.11-3 The GTK+ graphical user interface 
ii  libice62:1.0.4-1 X11 Inter-Client Exchange library
ii  libiso9660-5   0.78.2+dfsg1-3library to work with ISO9660 files
ii  libjpeg62  6b-14 The Independent JPEG Group's JPEG 
ii  libnotify1 [libnotify1 0.4.4-3   sends desktop notifications to a n
ii  libpango1.0-0  1.20.5-2  Layout and rendering of internatio
ii  libpng12-0 1.2.27-1  PNG library - runtime
ii  libsdl-image1.21.2.6-3   image loading library for Simple D
ii  libsdl1.2debian1.2.13-2  Simple DirectMedia Layer
ii  libsm6 2:1.0.3-2 X11 Session Management library
ii  libstdc++6 4.3.1-9   The GNU Standard C++ Library v3
ii  libtar 1.2.11-5  C library for manipulating tar arc
ii  libtiff4   3.8.2-11  Tag Image File Format (TIFF) libra
ii  libvcdinfo00.7.23-4  library to extract information fro
ii  libvlc00.8.6.h-4 multimedia player and streamer lib
ii  libwxbase2.6-0 2.6.3.2.2-2   wxBase library (runtime) - non-GUI
ii  libwxgtk2.6-0  2.6.3.2.2-2   wxWidgets Cross-platform C++ GUI t
ii  libx11-6   2:1.1.4-2 X11 client-side library
ii  libxext6   2:1.0.4-1 X11 miscellaneous extension librar
ii  libxinerama1   2:1.0.3-2 X11 Xinerama extension library
ii  libxosd2   2.2.14-1.6X On-Screen Display library - runt
ii  libxv1 2:1.0.4-1 X11 Video extension library
ii  ttf-dejavu-core2.25-3Vera font family derivate with add
ii  vlc-nox0.8.6.h-4 multimedia player and streamer (wi
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime

vlc recommends no packages.

Versions of packages vlc suggests:
pn  mozilla-plugin-vlc (no description available)
pn  videolan-doc   (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#477792: w3c-markup-validator: W3C markup validator doesn't work because of mod_include not being enabled

2008-04-25 Thread Bernard Massot
Package: w3c-markup-validator
Version: 0.7.4-5
Severity: important

Right after installation you can't use the W3C markup validator because
mod_include isn't enabled. You have to run "a2enmod include" manually,
which, I think, should be done by the package installation script.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages w3c-markup-validator depends on:
ii  apache22.2.8-3   Next generation, scalable, extenda
ii  apache2-mpm-prefork [httpd 2.2.8-3   Traditional model for Apache HTTPD
ii  debconf [debconf-2.0]  1.5.21Debian configuration management sy
ii  libconfig-general-perl 2.38-1Generic Configuration Module
ii  libhtml-parser-perl3.56-1A collection of modules that parse
ii  libhtml-template-perl  2.9-1 HTML::Template : A module for usin
ii  libnet-ip-perl 1.25-2Perl extension for manipulating IP
ii  libset-intspan-perl1.07-3.1  Manages sets of integers
ii  libtext-iconv-perl 1.7-1 converts between character sets in
ii  liburi-perl1.35.dfsg.1-1 Manipulates and accesses URI strin
ii  libwww-perl5.812-1   WWW client/server library for Perl
ii  opensp 1.5.2-5   OpenJade group's SGML parsing tool
ii  perl   5.8.8-12  Larry Wall's Practical Extraction 
ii  sgml-data  2.0.3 common SGML and XML data
ii  w3c-dtd-xhtml  1.1-5 W3C eXtensible HyperText Markup La
ii  wwwconfig-common   0.1.1 Debian web auto configuration

Versions of packages w3c-markup-validator recommends:
ii  w3-dtd-mathml 2.0.0.0-1  Mathematical Markup Language V2.0 

-- debconf information:
  w3c-markup-validator/webserver: Apache2



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]