Bug#312513: [ANDREW] Re: Bug#312513: winbind 3.0.14a-4 (sarge) breaks samba ADS member server

2005-06-24 Thread Christian Perrier

  OK, let's get Andrew Bartlett's attention on that one first now that
  we have as much information as possible..:-)
  
  http://bugs.debian.org/312513
 
 This one just looks weird. Aside from something that looks like a
 logfile parser gone bad (I don't buy the socket misdirection answer, as
 it is on word boundaries), I can't see the actual error.
 
 More useful would be trying to 'getent passwd long.realm.name\username'
 on the user that is failing.  

Martin, can you?


 
  Andrew, if you have an idea to suggest us. Neither Steve nor I can
  reproduce the bug because we don't have access to an AD server..:)
 
 Not wishing to be rude, but this sounds like a serious bug in itself.
 ADS member server operation is a big part of what Samba does, and I'm a
 bit worried you can't test any of this.


Well, see Steve's answer..:-)

Despite my quite strong involvment in Windows systems management, I
still have mnaged to survive *without* ADS, and just still use a good
old flat NT4 domain, which I'm very happy with..:-)

Steve, do you think it's worth for us to post a call for Debian
developers/contributors with access to an ADS domain anhd willing to
help on Samba in the Debian ML? Andrew is right that we will have
more and more problmems supporting the samba package if we can't
really work on the ADS features.

Actually, we have one indeed : our bug reporter who opened this
thread...:-)






Bug#251182: FTBFS - Please rebuild ttf2pt1 with libt1-dev instead of t1lib-dev

2005-06-24 Thread Steve Langasek
Hi Anthony,

I've prepared an NMU for this issue, which I have uploaded to the
DELAYED/4-day queue on gluck.  Please find the (trivial) diff attached.

Cheers,
-- 
Steve Langasek
postmodern programmer
diff -u ttf2pt1-3.4.4/debian/control ttf2pt1-3.4.4/debian/control
--- ttf2pt1-3.4.4/debian/control
+++ ttf2pt1-3.4.4/debian/control
@@ -2,7 +2,7 @@
 Section: text
 Priority: optional
 Maintainer: Anthony Fok [EMAIL PROTECTED]
-Build-Depends: debhelper ( 3.0.0), libfreetype6-dev ( 2.0.2), t1lib-dev
+Build-Depends: debhelper ( 3.0.0), libfreetype6-dev ( 2.0.2), libt1-dev
 Standards-Version: 3.6.1
 
 Package: ttf2pt1
diff -u ttf2pt1-3.4.4/debian/changelog ttf2pt1-3.4.4/debian/changelog
--- ttf2pt1-3.4.4/debian/changelog
+++ ttf2pt1-3.4.4/debian/changelog
@@ -1,3 +1,11 @@
+ttf2pt1 (3.4.4-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Build against libt1-dev instead of the deprecated t1lib-dev.
+Closes: #251182.
+
+ -- Steve Langasek [EMAIL PROTECTED]  Thu, 23 Jun 2005 23:49:54 -0700
+
 ttf2pt1 (3.4.4-1) unstable; urgency=low
 
   * New upstream release.


signature.asc
Description: Digital signature


Bug#315582: unmerging

2005-06-24 Thread Alexis Sukrieh
unmerge 315582
thanks

That's not the same problem as the one in #308897.

-- 
  Alexis Sukrieh [EMAIL PROTECTED]
   http://www.sukria.net

« Quidquid latine dictum sit, altum sonatur. » 
Whatever is said in Latin sounds profound.



Processed: backup-manager security fixes, pending upload.

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 315582 + pending
Bug#315582: backup-manager: insecure handling of temporary files
Tags were: etch sarge security patch
Tags added: pending

 tags 315582 + pending
Bug#315582: backup-manager: insecure handling of temporary files
Tags were: pending etch sarge security patch
Tags added: pending

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315539: gphpedit: exits at start up.

2005-06-24 Thread Lior Kaplan
Hi Manolo,

You don't need to send reports for the two bugs you reported, they have
been merged.

I see many error about your theme: SphereCrystal. But that doesn't
what's crashing the program.

I'm not sure about what's crashing it:
open(/usr/X11R6/lib/X11/icons/default/index.theme, O_RDONLY) = 16
fstat(16, {st_mode=S_IFREG|0644, st_size=27, ...}) = 0
mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2aaab04ea000
read(16, [Icon Theme]\nInherits=core\n, 131072) = 27
close(16)   = 0
munmap(0x2aaab04ea000, 131072)  = 0
brk(0)  = 0x883000
brk(0x8a4000)   = 0x8a4000
getcwd(/home/mdiaz, 4096) = 12
brk(0)  = 0x8a4000
brk(0)  = 0x8a4000
brk(0x8a3000)   = 0x8a3000
brk(0)  = 0x8a3000
getcwd(/home/mdiaz, 4096) = 12
--- SIGSEGV (Segmentation fault) @ 0 (0) ---

Do you have an option to 'inform developers'? It usauly available if you
have bug-buddy package isntalled. It can give some usuful trace.

Manolo Díaz wrote:
 Lior Kaplan wrote:
 
 
Hi,

1. Please run gphpedit in the console to see if any messages appear.
 

 
 No, it does not appear
 
 
2. Please provid an strace of the problem ('strace gphpedit 2
/tmp/gphpedit_bugreport').
 

 
 I've run
 
 strace gphpedit 2 gphpedit.strace.txt
 
 when the dialog box asked me whether exit or restart I answerd restart
 
 Please, see the attached file
 
 
Manolo Díaz wrote:
 


Package: gphpedit
Version: 0.9.50-2
Severity: grave
Justification: renders package unusable



-- System Information:
Debian Release: testing/unstable
 APT prefers testing
 APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.1
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages gphpedit depends on:
ii  libart-2.0-2 2.3.17-1Library of functions for 2D 
graphi
ii  libatk1.0-0  1.10.1-2The ATK accessibility toolkit
ii  libaudiofile00.2.6-6 Open-source version of SGI's 
audio
ii  libbonobo2-0 2.8.1-2 Bonobo CORBA interfaces library
ii  libbonoboui2-0   2.8.1-2 The Bonobo UI library
ii  libc62.3.2.ds1-22GNU C Library: Shared libraries 
an
ii  libesd0  0.2.35-2Enlightened Sound Daemon - 
Shared 
ii  libgail-common   1.8.4-1 GNOME Accessibility 
Implementation
ii  libgail171.8.4-1 GNOME Accessibility 
Implementation
ii  libgcc1  1:4.0.0-9   GCC support library
ii  libgconf2-4  2.10.0-2GNOME configuration database 
syste
ii  libgcrypt11  1.2.0-11.1  LGPL Crypto library - runtime 
libr
ii  libglib2.0-0 2.6.4-1 The GLib library of C routines
ii  libgnome-keyring00.4.2-1 GNOME keyring services library
ii  libgnome2-0  2.8.1-2 The GNOME 2 library - runtime 
file
ii  libgnomecanvas2-02.8.0-1 A powerful object-oriented 
display
ii  libgnomeui-0 2.8.1-3 The GNOME 2 libraries (User 
Interf
ii  libgnomevfs2-0   2.8.4-4 The GNOME virtual file-system 
libr
ii  libgnutls11  1.0.16-13.1 GNU TLS library - runtime 
library
ii  libgpg-error01.0-1   library for common error values 
an
ii  libgtk2.0-0  2.6.4-3 The GTK+ graphical user 
interface 
ii  libgtkhtml2-02.6.3-1 HTML rendering/editing library 
- r
ii  libice6  4.3.0.dfsg.1-14 Inter-Client Exchange library
ii  libjpeg626b-10   The Independent JPEG Group's 
JPEG 
ii  liborbit21:2.12.2-1  libraries for ORBit2 - a CORBA 
ORB
ii  libpango1.0-01.8.1-1 Layout and rendering of 
internatio
ii  libpopt0 1.7-5   lib for parsing cmdline 
parameters
ii  libsm6   4.3.0.dfsg.1-14 X Window System Session 
Management
ii  libstdc++5   1:3.3.5-13  The GNU Standard C++ Library v3
ii  libtasn1-2   0.2.10-4Manage ASN.1 structures 
(runtime)
ii  libx11-6 4.3.0.dfsg.1-14 X Window System protocol client 
li
ii  libxml2  2.6.16-7GNOME XML library
ii  xlibs4.3.0.dfsg.1-14 X Keyboard Extension (XKB) 
configu
ii  zlib1g   1:1.2.2-4   compression library - runtime

-- no debconf information

Fails to restart after dialog box. No message is shown.



   


 

 
 Regards
 
 Manolo Díaz

-- 

Regards,

Lior Kaplan
[EMAIL PROTECTED]
http://www.Guides.co.il

Debian GNU/Linux unstable (SID)




Bug#308897: backup-manager security fixes, pending upload.

2005-06-24 Thread Alexis Sukrieh
tags 315582 + pending
tags 315582 + pending
thanks

Those two security issues are pending upload.

The security team has been contacted for uploading a fixed package to
stable.

Thanks for the report and the patches.

For testers, pending packages are available here:

For sarge:
http://www.sukria.net/debian/binary/backup-manager_0.5.7-2sarge1_all.deb

For sid/etch:
http://www.sukria.net/debian/binary/backup-manager_0.5.8-2_all.deb

You'll can find the sources of those packages here:
http://www.sukria.net/debian/source/

Regards.

-- 
  Alexis Sukrieh [EMAIL PROTECTED]
   http://www.sukria.net

« Quidquid latine dictum sit, altum sonatur. » 
Whatever is said in Latin sounds profound.



Bug#315076: Bug#315074: ipkungfu: Renders system inaccessible

2005-06-24 Thread Nigel Jones
Bug#315074:
 Simplest fix: add /etc/default/ipkungfu with ENABLED=false, source the
 file in the init script and only start if ENABLED is not false.

After the last upload I have been planning to create something like
this, as well as using debconf for default values which would indeed
stop this from happening

Bug#315076
 Side note:
 
 [EMAIL PROTECTED]:~# grep -A3 Include /etc/init.d/ipkungfu
 # Include ipkungfu defaults if available
 if [ -f /etc/ipkungfu ] ; then
 . /etc/ipkungfu
 fi
 [EMAIL PROTECTED]:~# file /etc/ipkungfu
 /etc/ipkungfu: directory
 [EMAIL PROTECTED]:~#
Should be fixed as well in next version.

General:
I'll try and get Bug#315074 fixed in the next few hours (sidenotes: 1:
hopefully... 2: of course it won't be on the archives right away).

If Bug#315076 is not fixed in the same build, then it will go in the
next build that will have debconf (hopefully).

The debconf work I was planning can go up in a seperate upload in
about 2 weeks time (if not beforehand).


-- 
N Jones
Blogging @ http://nigelj.blogspot.com
Proud Debian  FOSS User
Debian Maintainer of: html2ps  ipkungfu



Bug#315539: gphpedit: exits at start up.

2005-06-24 Thread Lior Kaplan
Thanks for the info. I'll try to talk with upstream on this.

I'm putting the relevant part here:
0x2d633a26 in waitpid () from /lib/libpthread.so.0
#0  0x2d633a26 in waitpid () from /lib/libpthread.so.0
#1  0x2ac1eeae in libgnomeui_module_info_get ()
   from /usr/lib/libgnomeui-2.so.0
#2  signal handler called
#3  0x00447cc9 in gtk_scintilla_load_lexer_library ()
#4  0x2d11c591 in gtk_marshal_VOID__INT_INT ()
   from /usr/lib/libgtk-x11-2.0.so.0
#5  0x2df7b056 in g_closure_invoke () from
/usr/lib/libgobject-2.0.so.0
#6  0x2df8a8ce in g_signal_emit_by_name ()
   from /usr/lib/libgobject-2.0.so.0
#7  0x2df89906 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
#8  0x2d15c45c in gtk_signal_emit () from
/usr/lib/libgtk-x11-2.0.so.0
#9  0x00449dd5 in ScintillaGTK::NotifyParent ()
#10 0x0045c737 in Editor::NotifySavePoint ()
#11 0x004508a7 in Document::NotifySavePoint ()
#12 0x004618a7 in Editor::WndProc ()
#13 0x0045399e in ScintillaBase::WndProc ()
#14 0x7faed4a0 in ?? ()
#15 0x00706dc0 in ?? ()
#16 0x0044bbe9 in scintilla_send_message ()
#17 0x00441d63 in gtk_scintilla_set_save_point ()

Manolo Díaz wrote:
 Lior Kaplan wrote:
 
 
Hi Manolo,

You don't need to send reports for the two bugs you reported, they have
been merged.

I see many error about your theme: SphereCrystal. But that doesn't
what's crashing the program.

I'm not sure about what's crashing it:
open(/usr/X11R6/lib/X11/icons/default/index.theme, O_RDONLY) = 16
fstat(16, {st_mode=S_IFREG|0644, st_size=27, ...}) = 0
mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2aaab04ea000
read(16, [Icon Theme]\nInherits=core\n, 131072) = 27
close(16)   = 0
munmap(0x2aaab04ea000, 131072)  = 0
brk(0)  = 0x883000
brk(0x8a4000)   = 0x8a4000
getcwd(/home/mdiaz, 4096) = 12
brk(0)  = 0x8a4000
brk(0)  = 0x8a4000
brk(0x8a3000)   = 0x8a3000
brk(0)  = 0x8a3000
getcwd(/home/mdiaz, 4096) = 12
--- SIGSEGV (Segmentation fault) @ 0 (0) ---

Do you have an option to 'inform developers'? It usauly available if you
have bug-buddy package isntalled. It can give some usuful trace.

 

 
 I've set theme to default. I hope it makes easier for you.
 The result is attached.
 
 Regards
 
 Manolo Díaz
 
 
Manolo Díaz wrote:
 


Lior Kaplan wrote:


   


Hi,

1. Please run gphpedit in the console to see if any messages appear.


 


No, it does not appear


   


2. Please provid an strace of the problem ('strace gphpedit 2
/tmp/gphpedit_bugreport').


 


I've run

strace gphpedit 2 gphpedit.strace.txt

when the dialog box asked me whether exit or restart I answerd restart

Please, see the attached file


   


Manolo Díaz wrote:



 


Package: gphpedit
Version: 0.9.50-2
Severity: grave
Justification: renders package unusable



-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.1
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages gphpedit depends on:
ii  libart-2.0-2 2.3.17-1Library of functions for 2D 
graphi
ii  libatk1.0-0  1.10.1-2The ATK accessibility toolkit
ii  libaudiofile00.2.6-6 Open-source version of SGI's 
audio
ii  libbonobo2-0 2.8.1-2 Bonobo CORBA interfaces 
library
ii  libbonoboui2-0   2.8.1-2 The Bonobo UI library
ii  libc62.3.2.ds1-22GNU C Library: Shared 
libraries an
ii  libesd0  0.2.35-2Enlightened Sound Daemon - 
Shared 
ii  libgail-common   1.8.4-1 GNOME Accessibility 
Implementation
ii  libgail171.8.4-1 GNOME Accessibility 
Implementation
ii  libgcc1  1:4.0.0-9   GCC support library
ii  libgconf2-4  2.10.0-2GNOME configuration database 
syste
ii  libgcrypt11  1.2.0-11.1  LGPL Crypto library - runtime 
libr
ii  libglib2.0-0 2.6.4-1 The GLib library of C routines
ii  libgnome-keyring00.4.2-1 GNOME keyring services library
ii  libgnome2-0  2.8.1-2 The GNOME 2 library - runtime 
file
ii  libgnomecanvas2-02.8.0-1 A powerful object-oriented 
display
ii  libgnomeui-0 2.8.1-3 The GNOME 2 libraries (User 
Interf
ii  libgnomevfs2-0   2.8.4-4 The GNOME virtual file-system 
libr
ii  libgnutls11  1.0.16-13.1 GNU TLS library - runtime 
library
ii  libgpg-error01.0-1   library for common error 

Bug#314700: f2c: segfaults on i386 since last security update

2005-06-24 Thread Steve Langasek
Hi Jonathan,

It's not clear to me from your message whether this bug affects only the
version in woody, or if it also affects the version in sarge.  Could you
please clarify, so that we can tag this bug correctly?

Thanks,
-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Processed: tagging 314700

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 # Automatically generated email from bts, devscripts version 2.8.14
 tags 314700 woody
Bug#314700: f2c: segfaults on i386 since last security update
There were no tags set.
Tags added: woody


End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.

2005-06-24 Thread Steve Langasek
So are there any porters alive out there on debian-arm?  Being unable to use
cp, mv, and install after upgrading from woody to sarge is a rather serious
problem.  If anyone has any ideas about this, or can test the problem with a
woody vs. a sarge kernel, please speak up so that we can at the very least
document this in the release notes if we need to.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#311710: kdelibs: Does not have a versioned dependency on libmad0

2005-06-24 Thread Steve Langasek
tags 311710 sarge
thanks

The practical impact of this bug is not release-critical for etch, since
partial upgrades from sarge-etch will not be affected: only partial
upgrades from woody to sarge can be.  Tagging it appropriately.

Thanks,
-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Processed: Re: quanta crashes by pressing the preview button

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 313390 important
Bug#313390: quanta crashes by pressing the preview button
Severity set to `important'.

 retitle 313390 quanta crashes when previewing frame sets
Bug#313390: quanta crashes by pressing the preview button
Changed Bug title.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#313390: quanta crashes by pressing the preview button

2005-06-24 Thread Steve Langasek
severity 313390 important
retitle 313390 quanta crashes when previewing frame sets
thanks

Well, if the worst that happens is that quanta crashes when using HTML
*frames*, then this doesn't sound grave to me -- indeed, it seems quite
usable as long as you avoid certain ugly and deprecated HTML tags?

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Processed: Re: kwifimanager: Does not have a versioned dependency on libmad0

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 311712 sarge
Bug#311712: kwifimanager: Does not have a versioned dependency on libmad0
Tags were: sarge-ignore
Tags added: sarge

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#311712: kwifimanager: Does not have a versioned dependency on libmad0

2005-06-24 Thread Steve Langasek
tags 311712 sarge
thanks

The practical impact of this bug is limited to partial upgrades from woody
to sarge; tagging appropriately.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Processed: Re: libc6: Fix pthread_rwlock_wrlock hang with nptl

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 severity 314408 important
Bug#314408: libc6: Fix pthread_rwlock_wrlock hang with nptl
Severity set to `important'.

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#314408: libc6: Fix pthread_rwlock_wrlock hang with nptl

2005-06-24 Thread Steve Langasek
severity 314408 important
thanks

Given that this bug is specific to amd64, it is not actually a
release-critical bug for Debian (yet); there's no sense in letting this bug
block glibc updates from reaching testing when amd64 isn't even in the
archive...

Does http://sources.redhat.com/ml/libc-hacker/2004-02/msg00022.html suggest
that the fix is already included in glibc 2.3.5?

Thanks,
-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Processed: Re: FTBFS on ia64

2005-06-24 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 312958 sid
Bug#312958: FTBFS on ia64
There were no tags set.
Tags added: sid

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#312958: FTBFS on ia64

2005-06-24 Thread Steve Langasek
tags 312958 sid
thanks

I don't seem to be able to reproduce this bug on merulo in a testing chroot,
only in unstable.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.

2005-06-24 Thread Lennart Sorensen
On Fri, Jun 24, 2005 at 02:29:19AM -0700, Steve Langasek wrote:
 So are there any porters alive out there on debian-arm?  Being unable to use
 cp, mv, and install after upgrading from woody to sarge is a rather serious
 problem.  If anyone has any ideas about this, or can test the problem with a
 woody vs. a sarge kernel, please speak up so that we can at the very least
 document this in the release notes if we need to.

Hmm, I started out with sarge testing on my arm systems, so I never did
a woody to sarge upgrade.

I know arm did have a problem testing this given how few systems you
could actually install woody on with an official debian kernel.  Since
very few people had one of those systems around, testing the upgrade has
not been easy.

I do seem to recall there is something in the sarge release notes (or
was supposed to be) about how to upgrade arm from woody to sarge involving
getting a new kernel first, since something important changed.  I
remember that happens for sure on mips, and also happens on true i386
machines (since sarge's libc requried 486 instructions, so the new
kernel emulates the few missing instructions on i386 systems).

Len Sorensen


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#312947: Bug a cause of bug in perl

2005-06-24 Thread Jay Bonci
Hey blarson,
The bug you submitted, 312947, I believe to be upstream in perl. (bod
is perl's maintainer) Check and the bug reports linked from:
 
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=312419

Try and build it again. It should work fine now.

-jay


signature.asc
Description: This is a digitally signed message part


Bug#315671: webcalendar: New upstream version with security fixes available

2005-06-24 Thread Herbert Thielen
Package: webcalendar
Version: 0.9.45-4
Severity: grave
Tags: security
Justification: user security hole

According to http://freshmeat.net/projects/webcalendar there is a new
version 1.0.0 available, which includes major security fixes of
version 1.0RC3 (all users should upgrade).

Regards
Herbert.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages webcalendar depends on:
ii  apache2-mpm-prefork [httpd]   2.0.53-5   traditional model for Apache2
ii  debconf [debconf-2.0] 1.4.30.11  Debian configuration management sy
ii  php4  4:4.3.10-8 server-side, HTML-embedded scripti
ii  php4-cgi  4:4.3.10-8 server-side, HTML-embedded scripti
ii  php4-cli  4:4.3.10-8 command-line interpreter for the p
ii  php4-mysql4:4.3.10-8 MySQL module for php4

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315556: sound-juicer: sound-juicer does not start

2005-06-24 Thread Ross Burton
On Thu, 2005-06-23 at 19:28 +0530, Ramakrishnan Muthukrishnan wrote:
 sound-juicer: relocation error: /usr/lib/gstreamer-0.8/libgstaudioconvert.so: 
 undefined symbol: gst_audio_set_caps_channel_positions_list

I've been told by a GStreamer developer that you'll only get this
message if you have mixed versions of gstreamer installed.

Indeed:

 ii  libgstreamer-gconf0.8-0   0.8.2-3GConf support for GStreamer
 ii  libgstreamer0.8-0 0.8.9-2Core GStreamer libraries, 
 plugins,

Where Sarge has gst-gconf 0.8.8-2.  Can you do a full upgrade, including
upgrading any held back packages?

Ross
-- 
Ross Burton mail: [EMAIL PROTECTED]
  jabber: [EMAIL PROTECTED]
 www: http://www.burtonini.com./
 PGP Fingerprint: 1A21 F5B0 D8D0 CFE3 81D4 E25A 2D09 E447 D0B4 33DF




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315676: libapache2-mod-perl2: perl.conf incorrectly handled

2005-06-24 Thread Charles Fry
Package: libapache2-mod-perl2
Version: 2.0.1-1
Severity: grave
Justification: renders package unusable

Hi,

The new libapache2-mod-perl2 (which I thank you for) does not contain a
perl.conf, yet it attempts to install one in rules:

-install -m644 $(CURDIR)/debian/perl.conf
debian/libapache2-mod-perl2/etc/apache2/mods-available

That is a minor issue (I believe), but what is really a problem is that
when upgrading, the old perl.conf is still present, and its contents are:

PerlModule Apache2

which breaks apache (per bug #308503) if that module is enabled.

Either a correct perl.conf should be installed, or the old one removed.

cheers,
Charles

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-2-386
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libapache2-mod-perl2 depends on:
ii  apache2-common  2.0.54-4 next generation, scalable, extenda
ii  libapr0 2.0.54-4 the Apache Portable Runtime
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libdb4.24.2.52-19Berkeley v4.2 Database Libraries [
ii  libdevel-symdump-perl   2.03-3   Perl module for inspecting perl's 
ii  libexpat1   1.95.8-3 XML parsing C library - runtime li
ii  libldap22.1.30-10OpenLDAP libraries
ii  libperl5.8  5.8.7-3  Shared Perl library
ii  liburi-perl 1.35-1   Manipulates and accesses URI strin
ii  libwww-perl 5.803-4  WWW client/server library for Perl
ii  perl [libmime-base64-perl]  5.8.7-3  Larry Wall's Practical Extraction 
ii  perl-base [perlapi-5.8.7]   5.8.7-3  The Pathologically Eclectic Rubbis

libapache2-mod-perl2 recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315556: sound-juicer: sound-juicer does not start

2005-06-24 Thread Ramakrishnan Muthukrishnan
 || On Fri, 24 Jun 2005 17:56:09 +0100
 || Ross Burton [EMAIL PROTECTED] wrote: 

 ross I've been told by a GStreamer developer that you'll only get this
 ross message if you have mixed versions of gstreamer installed.

 ross Indeed:

  ii  libgstreamer-gconf0.8-0   0.8.2-3GConf support for GStreamer
  ii  libgstreamer0.8-0 0.8.9-2Core GStreamer libraries, 
  plugins,

 ross Where Sarge has gst-gconf 0.8.8-2.  Can you do a full upgrade, including
 ross upgrading any held back packages?

Ok. I will try that and keep you posted. Thanks.

-- 
Ramakrishnan



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#314645: second installment

2005-06-24 Thread Justin Pryzby
Announcing the second installment of SSH Username / Password Mapping
Used By Scanners.

This list includes the previous list (which ends at resin).

For my own reference, the script I am using to generate it:

grep -i 'ailed pass' auth.log |tail +4 |awk '{ if ($9 ~ /invalid/) { print $11 
} else { print $9 } }' |paste - /tmp/ssh-log

Where tail +4 gets rid of stuff in auth.log but not in ssh-log, and
ssh-log must not contain blank lines (which for some reason appear
every time I log in with RSA).

rootadministrator
rootroot
rootrootroot
rootroot1
root123456
root1234567890
rootqwerty
rootadministrator1
rootadmin
rootbackup
rootadmin1
rootsecure
rootsecret
rootpasswd
rootpassword
rootpassword123
admin   admin
administrator   administrator
rootroot
admin   admin
testtest
postgrespostgres
infoinfo123
alexalex
alexalex123
samba   samba
guest   guest
webmaster   webmaster
mysql   mysql
oracle  oracle
library library
infoinfo
shell   shell
linux   linux
unixunix
webadminwebadmin
ftp ftp
testtest123
rootroot123
admin   admin123
guest   guest123
master  master
apache  apache
rootwebadmin
rootadmin
rootshell
rootlinux
roottest
rootwebmaster
rootmysql
admin   root
admin   administrator
admin   12345
admin   123456
root123456
root12345678
testtest12345
test123456
webmaster   123456
useruser
usernameusername
usernamepassword
userpassword
rootpassword
admin   password
testpassword
rootmaster
rootapache
rootunix
rootredhat
danny   danny
sharon  sharon
aronaron
alexalex
brett   brett
mikemike
alanalan
datadata
www-datawww-data
httphttp
httpd   httpd
nobody  nobody
rootlogin
backup  backup
info123456
shopshop
sales   sales
web web
www www
wwwrun  wwwrun
adamadam
stephen stephen
richard richard
george  george
michael michael
johnjohn
david   david
paulpaul
newsnews
angel   angel
games   games
pgsql   pgsql
pgsql   pgsql123
mailmail
adm adm
ident   ident
resin   resin
rootroot
jackjack
marvin  marvin
andres  andres
barbara barbara
adine   adine
rootroot
jackjack
su  su
zeppelinzeppelin
danny   danny
sharon  sharon
aronaron
alexalex
brett   brett
mikemike
alanalan
datadata
www-datawww-data
httphttp
httpd   httpd
nobody  nobody
rootlogin
backup  backup
rootroot
rootrootroot
rootrootrootroot
root123root
root123root123
rootpassword
rootpasswd
rootpass
roottoor
rootnewpass
rootserver
root123
root1234
root12345
root123456
root1234567
root12345678
root123456789
rootroot123
root00
root1234qwer
rootq1w2e3r4
rootqwertyuiop
root123abc
root1a2b3c
root1p2o3i
root1q2w3e
root1qw23e
root[EMAIL PROTECTED]
root[EMAIL PROTECTED]
root[EMAIL PROTECTED]
root[EMAIL PROTECTED]*
root@#$%^
rootabc123
rootasdfghjk
rootasdfghjkl
rootwebmaster
rootwebster
rootmaster
rootvalhalla
rootq1w2e3
rootqwaszx
rootqwert
rootqwerty
rootqwerty12
rootqwerty123
rootlibrary
roothacker
rootadministrator
rootadmin
rootr00t
rootzxcvbn
rootzxcvbnm
rootlinux
rootdebian
rootredhat
rootmandrake
rootdarwin
rootslackware
rootapache
rootunix
rootmyserver
rootshell
rootmysql
testtest
testtest1
testtest2
testtesttest
testtesttesttest
test123
test123test
testtest123test
test123test123
test1234
test12345
test123456
test1234567
test12345678
testtest123
testtest12345
test123456789
testtesting
testtester
testpassword
testq1w2e3
testabc123
testasdfghjkl
testqwertyuiop
testzxvbnm
admin   root
admin   admin
admin   123
admin   1234
admin   12345
admin   123456
admin   1234567
admin   12345678
admin   123456789
admin   adminadmin
admin   123admin
admin   adminadminadmin
admin   123admin123
admin   administrator
admin   admin123
admin   admin12345
admin   adminroot
admin   admin1
admin   admin2
admin   admin01
admin   admin02
admin   password
admin   adm1n
admin   q1w2e3
admin   abc123
admin   qwertyuiop
admin   asdfghjkl
admin   zxcvbnm
guest   guest
guest   guest1
guest   guest2
guest   guess
guest   guestguest
guest   123guest
guest   123
guest   1234
guest   123456
guest   12345
guest   1234567
guest   12345678
guest   123456789
guest   guest12345
guest   guest123
guest   123guest123
guest   gu3st
guest   pass
guest   passwd
guest   password
guest   qwertyuiop
guest   asdfghjkl
guest   zxcvbnm
guest   abc123
useruser
useruser1
useruser2
useruseruser
user123456
user123
user1234
user12345
user1234567
user12345678
user123456789
user

Bug#315556: sound-juicer: sound-juicer does not start

2005-06-24 Thread Ramakrishnan Muthukrishnan
 || On Fri, 24 Jun 2005 17:56:09 +0100
 || Ross Burton [EMAIL PROTECTED] wrote: 

 ross Where Sarge has gst-gconf 0.8.8-2.  Can you do a full upgrade, including
 ross upgrading any held back packages?

I upgraded all gstreamer packages, still getting the same error. The 
libgstaudioconvert.so file is part of gstreamer-misc which is also
latest version on my system.. I will keep experimenting and will keep
you posted.

-- 
Ramakrishnan(http://www.hackGNU.org/)
Use Free Software  (http://www.gnu.org/)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#314645: ssh delay

2005-06-24 Thread Justin Pryzby
So, about that delay you're seeing.  You said that there is a
noticable delay on 8 servers.  Are they using any kind of special
account/authentication system?  Can you reproduce it with, like, a
fresh install?  Or with some minimal change?

Justin

On Fri, Jun 24, 2005 at 02:28:41PM -0400, pryzbyj wrote:
 Announcing the second installment of SSH Username / Password Mapping
 Used By Scanners.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#314700: f2c: segfaults on i386 since last security update

2005-06-24 Thread Jonathan Quick
Hi Steve

Steve Langesek wrote:

It's not clear to me from your message whether this bug affects only the
version in woody, or if it also affects the version in sarge.  Could you
please clarify, so that we can tag this bug correctly?

  The version in Sarge does not seem to be affected - only Woody ie. 3.0r6
is affected.  The confusion comes from the other bug about it segfaulting
on m68k which was in testing at the time.  Unfortunately this bug is 
affecting the compilation of a control system used by many radio telescopes
around the world to perform coordinated observing - a technique known as
Very Long Baseline Interferometry (VLBI) and switching multiple machines
owned by multiple observatories to sarge to fix it is a little bit beyond
our capabilities right now !!

Thanks for your attention (and indeed for all your work on sarge :-)
Jon


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315347: 10_cvs.dpatch.new attached

2005-06-24 Thread Denis Barbier
On Wed, Jun 22, 2005 at 02:56:12PM +0930, Arthur Marsh wrote:
 Hi, this is the patch log where the error occurred.
 can't find file to patch at input line 46475
 Perhaps you used the wrong -p or --strip option?
 The text leading up to this was:
 --
 |diff -urN -x CVS -x nptl -x nptl_db -x .cvsignore -x '*texi' -x '*manual*' 
 glibc-2.3.2/linuxthreads/ChangeLog 
 /home/jbailey/Programming/cvstree/libc/linuxthreads/ChangeLog
 |--- glibc-2.3.2/linuxthreads/ChangeLog   2003-02-27 17:40:10.0 
 -0500
 |+++ /home/jbailey/Programming/cvstree/libc/linuxthreads/ChangeLog
 2003-09-19 22:37:03.0 -0400
[...]

All these errors are related to linuxthreads, which means that
glibc-linuxthreads-2.3.2.tar.bz2 had not been unpacked.  But
buildd.debian.org shows that no such error occurs on buildds,
so there is surely something wrong on your side.

Denis


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#312936: Programmes linked against libacl1 segfault in libacl1 code.

2005-06-24 Thread Steve Langasek
On Fri, Jun 24, 2005 at 08:40:42AM -0400, Lennart Sorensen wrote:
 On Fri, Jun 24, 2005 at 02:29:19AM -0700, Steve Langasek wrote:
  So are there any porters alive out there on debian-arm?  Being unable to use
  cp, mv, and install after upgrading from woody to sarge is a rather serious
  problem.  If anyone has any ideas about this, or can test the problem with a
  woody vs. a sarge kernel, please speak up so that we can at the very least
  document this in the release notes if we need to.

 Hmm, I started out with sarge testing on my arm systems, so I never did
 a woody to sarge upgrade.

 I know arm did have a problem testing this given how few systems you
 could actually install woody on with an official debian kernel.  Since
 very few people had one of those systems around, testing the upgrade has
 not been easy.

 I do seem to recall there is something in the sarge release notes (or
 was supposed to be) about how to upgrade arm from woody to sarge involving
 getting a new kernel first, since something important changed.  I
 remember that happens for sure on mips, and also happens on true i386
 machines (since sarge's libc requried 486 instructions, so the new
 kernel emulates the few missing instructions on i386 systems).

Except there isn't anything in the sarge release notes about this, because
the last thing the release team was told was that arm upgrades should
work.  So if it doesn't work, I want to know what we need to put in the
release notes. :)

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#315675: debian-keyring: Do not install / upgrade as of relative pathes

2005-06-24 Thread Steve Langasek
On Fri, Jun 24, 2005 at 07:49:03PM +0200, Klaus Ethgen wrote:
 Package: debian-keyring
 Version: 2004.07.05
 Severity: serious
 Justification: Policy 9.1.1

 The package tryes to install to
 './usr/share/keyrings/debian-keyring.pgp'. (Note the dot in front!)

Uh?

$ dpkg -c /var/cache/apt/archives/gstreamer0.8-a52dec_0.8.8-3_i386.deb 
drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./
drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./usr/
drwxr-xr-x root/root 0 2005-03-30 16:23:43 ./usr/share/
drwxr-xr-x root/root 0 2005-03-30 16:23:43 ./usr/share/doc/
drwxr-xr-x root/root 0 2005-03-30 16:24:20 
./usr/share/doc/gstreamer0.8-a52dec/
-rw-r--r-- root/root  3534 2005-03-30 16:15:39 
./usr/share/doc/gstreamer0.8-a52dec/README.Debian
-rw-r--r-- root/root  1220 2005-03-30 16:15:39 
./usr/share/doc/gstreamer0.8-a52dec/copyright
-rw-r--r-- root/root 10753 2005-03-07 08:39:35 
./usr/share/doc/gstreamer0.8-a52dec/NEWS.gz
-rw-r--r-- root/root  8982 2005-03-30 16:15:39 
./usr/share/doc/gstreamer0.8-a52dec/changelog.Debian.gz
drwxr-xr-x root/root 0 2005-03-30 16:23:44 ./usr/lib/
drwxr-xr-x root/root 0 2005-03-30 16:24:20 ./usr/lib/gstreamer-0.8/
-rw-r--r-- root/root 18468 2005-03-30 16:24:20 
./usr/lib/gstreamer-0.8/libgsta52dec.so
$

*all* Debian packages are packed with a leading ./ in the filename -- that's
just how tar works.  It's dpkg's job to unpack the deb correctly, and it has
no problems doing so on any system that I've seen.  Please send your error
message to the BTS verbatim, so we can understand what you're talking about.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#312513: [ANDREW] Re: Bug#312513: winbind 3.0.14a-4 (sarge) breaks samba ADS member server

2005-06-24 Thread Steve Langasek
On Fri, Jun 24, 2005 at 07:20:19AM +0200, Christian Perrier wrote:

 Steve, do you think it's worth for us to post a call for Debian
 developers/contributors with access to an ADS domain anhd willing to
 help on Samba in the Debian ML?

That sounds like a good idea to me.

-- 
Steve Langasek
postmodern programmer


signature.asc
Description: Digital signature


Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-24 Thread Michael Bergbauer
Package: proftpd
Version: 1.2.10-17
Severity: critical
Justification: root security hole

In the most recent (1.2.10-17) version of proftpd, the permissions used
by the daemon are somehome mixed up: both anonymous and authenticated
connections are mapped to uid 0/gid 0 in the filesystem. New files and 
directories are created with uid 0/gid 0 (instead of the ftp/nogroup for
anon connections resp. the authenticated user). 

In anon mode, you seem to be trapped in the anon enviroment and can't
delete files. 

With authenticated connections, you also get root access to the whole
system (visible to proftpd) and as your access is mapped to root/root,
you can delete everything you like (thus the critical severity, as this
opens root access to the ftp server's file system.

This bug was not reproducable on 1.2.10-16, I had to install 1.2.10-17.
The config file wasn't touched during the update to -17.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i586)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.26
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages proftpd depends on:
ii  adduser 3.64 Add and remove users and groups
ii  debconf 1.4.51   Debian configuration management sy
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam0g0.76-22  Pluggable Authentication Modules l
ii  libssl0.9.7 0.9.7g-1 SSL shared libraries
ii  libwrap07.6.dbs-8Wietse Venema's TCP wrappers libra
ii  netbase 4.21 Basic TCP/IP networking system
ii  proftpd-common  1.2.10-17Versatile, virtual-hosting FTP dae
ii  ucf 1.18 Update Configuration File: preserv

proftpd recommends no packages.

-- debconf information:
* shared/proftpd/anonymous: true
  shared/proftpd/run_inetd_or_standalone: standalone
* shared/proftpd/edit_conffile: false
* shared/proftpd/use_debconf: true
  shared/proftpd/anonymous_access: false
* proftpd/edit_conffile: true
  shared/proftpd/file_changed:
  shared/proftpd/warning:
* shared/proftpd/inetd_or_standalone: inetd
* proftpd/run_inetd_or_standalone: inetd
  shared/proftpd/replace_file_install: false
  shared/proftpd/sql_statements:
* proftpd/anonymous_access: true
  proftpd/sql_statements:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315700: findimagedupes: Missing dependency: libltdl3

2005-06-24 Thread Ray Kohler
Package: findimagedupes
Version: 0.1.3-5
Severity: serious
Justification: Policy 3.5


This tool requires libltdl3 to run, and does not depend on it:

~/pics % findimagedupes -v
Can't load '/usr/lib/perl5/auto/Image/Magick/Magick.so' for module
Image::Magick: libltdl.so.3: cannot open shared object file: No such
file or directory at /usr/lib/perl/5.8/DynaLoader.pm line 225.
at /usr/bin/findimagedupes line 38
Compilation failed in require at /usr/bin/findimagedupes line 38.
BEGIN failed--compilation aborted at /usr/bin/findimagedupes line 38.
zsh: 21477 exit 2 findimagedupes -v

~/pics % apt-cache search libltdl
libguile-ltdl-1 - Guile's patched version of libtool's libltdl
libltdl3 - A system independent dlopen wrapper for GNU libtool
libltdl3-dev - A system independent dlopen wrapper for GNU libtool

~/pics % sudo apt-get install libltdl3
Reading Package Lists... Done
Building Dependency Tree... Done
The following NEW packages will be installed:
libltdl3 (1.5.6-6)
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 155kB of archives.
After unpacking 233kB of additional disk space will be used.
Get:1 http://ftp.us.debian.org sid/main libltdl3 1.5.6-6 [155kB]
Fetched 155kB in 0s (179kB/s)
Selecting previously deselected package libltdl3.
(Reading database ... 63097 files and directories currently
installed.)
Unpacking libltdl3 (from .../libltdl3_1.5.6-6_powerpc.deb) ...
Setting up libltdl3 (1.5.6-6) ...

~/pics % findimagedupes -v
Scanning fingerprints from . into ./imagedupes-db.txt.
[0688/0688] 0%..100%
Finding duplicates in ., threshold 90%.
./2519.jpg ./8688-1.jpg: seem to be 98.83% similar.
./38c2.jpg ./55da.jpg: seem to be 91.80% similar.
[0686/0686] 0%..100%


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-powerpc
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages findimagedupes depends on:
ii  imagemagick  6:6.2.3.0-2 Image manipulation programs
ii  perl 5.8.7-3 Larry Wall's Practical Extraction 
ii  perlmagick   6:6.2.3.0-2 A perl interface to the libMagick 

findimagedupes recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#315703: cacti: vulnerable to remote exploit

2005-06-24 Thread seanius
Package: cacti
Version: 0.8.6d-1
Severity: critical
Tags: sarge
Justification: root security hole

Multiple Vendor Cacti Remote File Inclusion Vulnerability:
 http://www.idefense.com/application/poi/display?id=265type=vulnerabilities

Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability:
 http://www.idefense.com/application/poi/display?id=266type=vulnerabilities

Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities:
 http://www.idefense.com/application/poi/display?id=267type=vulnerabilities

note that these can not by themselves gain root access on a system,
though they have been reported to be used to leverage root on sarge
systems.

an update has been sitting on my p.d.o site since last friday, but
there has not yet been a security upload.  i'll send the latest i mailed
to folks as an update to this bug.


sean

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.10-9-amd64-k8
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages cacti depends on:
ii  apache   1.3.33-6versatile, high-performance HTTP s
ii  apache-ssl   1.3.33-6versatile, high-performance HTTP s
ii  debconf  1.4.50  Debian configuration management sy
ii  libphp-adodb 4.52-1  The 'adodb' database abstraction l
ii  logrotate3.7-5   Log rotation utility
ii  mysql-client-4.1 [mysql-clie 4.1.11a-4   mysql database client binaries
ii  php4 4:4.3.10-15 server-side, HTML-embedded scripti
ii  php4-cli 4:4.3.10-15 command-line interpreter for the p
ii  php4-mysql   4:4.3.10-15 MySQL module for php4
ii  php4-snmp4:4.3.10-15 SNMP module for php4
ii  rrdtool  1.0.49-1Time-series data storage and displ
ii  snmp 5.1.2-6.1   NET SNMP (Simple Network Managemen
ii  ucf  1.18Update Configuration File: preserv

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]