Bug#511562: rsyslog: segfault on reload when using $AllowedSender

2009-01-15 Thread Juha Koho
On Tue, Jan 13, 2009 at 2:02 AM, Michael Biebl  wrote:
> Rainer Gerhards wrote:
>> In my lab, I could reproduce the issue (well, without an abort,
>> unfortunately, but valgrind showed problems). The valgrind run was clean
>> after the change. I would appreciate if you could verify in your
>> environment. If it looks good, I'll create a new release.
>
> Works for me.

Hello,

seems to work for me too. No problems when reloading.

Regards,
Juha



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511756: marked as done (ghc6: Includes GMP, which has non-free GNU documentation)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 07:47:14 +
with message-id 
and subject line Bug#511756: fixed in ghc6 6.8.2dfsg1-1
has caused the Debian Bug report #511756,
regarding ghc6: Includes GMP, which has non-free GNU documentation
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511756: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511756
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ghc6
Version: 6.8.2-7
Severity: serious
Justification: Policy 2.1.

GHC includes GNU MP library with it, in gmp/gmp-4.2.1.tar.gz.  The
build system already does the right thing and doesn't link against the
local copy of the library, but it still carries the tarball with the
accompanying GNU documentation, with this license:

Permission is granted to copy, distribute and/or modify this document under
the terms of the GNU Free Documentation License, Version 1.2 or any later
version published by the Free Software Foundation; with no Invariant Sections,
with the Front-Cover Texts being ``A GNU Manual'', and with the Back-Cover
Texts being ``You have freedom to copy and modify this GNU Manual, like GNU
software''.

I'll need to repackage the upstream tarball to remove its copy of GMP.
That shouldn't be too disruptive.


--- End Message ---
--- Begin Message ---
Source: ghc6
Source-Version: 6.8.2dfsg1-1

We believe that the bug you reported is fixed in the latest version of
ghc6, which is due to be installed in the Debian FTP archive:

ghc6-doc_6.8.2dfsg1-1_all.deb
  to pool/main/g/ghc6/ghc6-doc_6.8.2dfsg1-1_all.deb
ghc6-prof_6.8.2dfsg1-1_i386.deb
  to pool/main/g/ghc6/ghc6-prof_6.8.2dfsg1-1_i386.deb
ghc6_6.8.2dfsg1-1.diff.gz
  to pool/main/g/ghc6/ghc6_6.8.2dfsg1-1.diff.gz
ghc6_6.8.2dfsg1-1.dsc
  to pool/main/g/ghc6/ghc6_6.8.2dfsg1-1.dsc
ghc6_6.8.2dfsg1-1_i386.deb
  to pool/main/g/ghc6/ghc6_6.8.2dfsg1-1_i386.deb
ghc6_6.8.2dfsg1.orig.tar.gz
  to pool/main/g/ghc6/ghc6_6.8.2dfsg1.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 511...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Kari Pahula  (supplier of updated ghc6 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 15 Jan 2009 07:42:47 +0200
Source: ghc6
Binary: ghc6 ghc6-prof ghc6-doc
Architecture: source i386 all
Version: 6.8.2dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Kari Pahula 
Changed-By: Kari Pahula 
Description: 
 ghc6   - GHC - the Glasgow Haskell Compilation system
 ghc6-doc   - Documentation for the Glasgow Haskell Compilation system
 ghc6-prof  - Profiling libraries for the Glasgow Haskell Compilation system
Closes: 511756
Changes: 
 ghc6 (6.8.2dfsg1-1) unstable; urgency=medium
 .
   * Repackaged the upstream tarball to remove a copy of GNU MP library
 with GFDLed docs w/ invariant sections.  (Closes: #511756)
Checksums-Sha1: 
 210b06172b742a48dcdc9ce5439fc5c52596ad24 1166 ghc6_6.8.2dfsg1-1.dsc
 61e72d383fcf4e9a1d333ee6e643146840a8c7b1 5747642 ghc6_6.8.2dfsg1.orig.tar.gz
 4c32dd9e9f2a349ef79515d8f8aae517a4bdf911 71319 ghc6_6.8.2dfsg1-1.diff.gz
 bcd7d39c67e79950f37d30167ae92f32a0755787 28458716 ghc6_6.8.2dfsg1-1_i386.deb
 44fd511ba248fd4e136dc589d6b33a447df9dac7 10348590 
ghc6-prof_6.8.2dfsg1-1_i386.deb
 a5f97b896c5ba664c1cd88028ac1277f887ac210 2444958 ghc6-doc_6.8.2dfsg1-1_all.deb
Checksums-Sha256: 
 237715e965bf7a539d71acf36595fa4d69fb687b9fbf91d16988224d44d7e4ba 1166 
ghc6_6.8.2dfsg1-1.dsc
 6b65c8d2a0576cb772ea2bb643b72700dc2f3c66f69173fc3ee221d54b5a71c4 5747642 
ghc6_6.8.2dfsg1.orig.tar.gz
 7473e279c18c256abd074db210c1c6b8f73be13ba52e3d1cd1d19e288afa2b5e 71319 
ghc6_6.8.2dfsg1-1.diff.gz
 b6f13b69ec37ca46ee245f72b85207d53d8092839529cea050201251d2cae999 28458716 
ghc6_6.8.2dfsg1-1_i386.deb
 e324e242cc8496b48117825caebae42aa4aeb5946da1f35600fc7d0c6701dc1c 10348590 
ghc6-prof_6.8.2dfsg1-1_i386.deb
 957801efaba17a03ab1aed7e0fa5cf25eaea5554bdf2d471391b2ecd9f1f9dbd 2444958 
ghc6-doc_6.8.2dfsg1-1_all.deb
Files: 
 e81c648beb9e0dd70c0b5f5e6dc4edff 1166 devel optional ghc6_6.8.2dfsg1-1.dsc
 6ebf8bcdb04588062257752648524414 5747642 devel optional 
ghc6_6.8.2dfsg1.orig.tar.gz
 2c3db7c74d2ba1bf39efa3b9c6624982 71319 devel optional ghc6_6.8.2dfsg1-1.diff.gz
 94766711532325f8494ac

Bug#511562: rsyslog: segfault on reload when using $AllowedSender

2009-01-15 Thread Rainer Gerhards
On Thu, 2009-01-15 at 10:03 +0200, Juha Koho wrote:
> On Tue, Jan 13, 2009 at 2:02 AM, Michael Biebl  wrote:
> > Rainer Gerhards wrote:
> >> In my lab, I could reproduce the issue (well, without an abort,
> >> unfortunately, but valgrind showed problems). The valgrind run was clean
> >> after the change. I would appreciate if you could verify in your
> >> environment. If it looks good, I'll create a new release.
> >
> > Works for me.
> 
> Hello,
> 
> seems to work for me too. No problems when reloading.

Juha: thanks for the confirmation. Makes me fell better about the
patch ;)

Michael: do you still want me to hold the release until we can settle
the race condition? I don't want to sound too pessimistic, but I'd
assume that takes at least another two or three weeks. It's your
decision, as only the debian_lenny tree is affected (I'll update the
regular v3-stable soon). Please let me know.

Rainer




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Re: Bug#511843: bibleref: Please update to newer version, relicensed under DFSG-free license

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> found 511843 2007.dfsg.13-1
Bug#511843: bibleref: Please update to newer version, relicensed under 
DFSG-free license
Bug marked as found in version 2007.dfsg.13-1.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511797: bind9: all queries denied since last update

2009-01-15 Thread t...@mediaforest.net
FYI, while there's no changelog up there, here's the reason for the update: 
http://www.debian.org/security/2009/dsa-1703


Best regards,
--
Marcos Marado

Hello
I know that, as I had received a message from debian-secur...@lists.debian.org
and that's why I've upgraded the package.

But it seems that something else has changed in Bind9 or in the install script.
I solved the problem by manually add localhost ip : 127.0.0.1
in the allow-query option to get my DNS server back to work.

regards






--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511797: bind9: all queries denied since last update

2009-01-15 Thread Florian Weimer
* root:

> I would like to know what has changed in the new release which could
> have broken my system

Perhaps you have edited the configuration file without reloading BIND,
and restarting BIND during the update simply activated those changes?



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511342: marked as done (does not check for file creation errors)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 10:02:04 +
with message-id 
and subject line Bug#511342: fixed in devtodo 0.1.20-4
has caused the Debian Bug report #511342,
regarding does not check for file creation errors
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511342: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511342
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: devtodo
Version: 0.1.19-3
Severity: grave
Justification: causes data loss

Here's how to reproduce:

| mowsi...@beczulka:/$ strace -t -o /tmp/tda-write-fail.log tda
| Enter text for the item you are adding.
| text> foo
| 1. veryhigh   2. high   3. medium   4. low   5. verylow   
| Enter a priority from those listed above.
| priority> medium
| Index of new item is 1
| todo: warning, created database (.todo) has group or world permissions
| mowsi...@beczulka:/$ echo $?
| 0
| mowsi...@beczulka:/$ ls -l .todo
| ls: .todo: No such file or directory
| mowsi...@beczulka:/$ 

Here's the relevant snippet from the strace log:

| 18:44:52 write(1, "\33[0m\33[32mIndex of new item is 1\33"..., 36) = 36
| 18:44:52 open(".todo", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = -1 
EACCES (Permission denied)
| 18:44:52 stat64(".todo", 0xbfe0b304)= -1 ENOENT (No such file or 
directory)
| 18:44:52 write(2, "todo: warning, created database "..., 33) = 33
| 18:44:52 write(2, ".todo", 5)   = 5
| 18:44:52 write(2, ") has group or world permissions", 32) = 32
| 18:44:52 write(2, "\n", 1)  = 1
| 18:44:52 exit_group(0)  = ?

Clearly the exit status nor the message do not reflect the fact that creating
the file failed, though apparently the program does pay attention to the fact
that open() failed, as there is no write() call visible.

Apart from the above, it would be good to check if the program correctly
detects write(), flush() and close() failures (e.g. when filesystem runs out of
space).

-- 
Marcin Owsiany  http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216


--- End Message ---
--- Begin Message ---
Source: devtodo
Source-Version: 0.1.20-4

We believe that the bug you reported is fixed in the latest version of
devtodo, which is due to be installed in the Debian FTP archive:

devtodo_0.1.20-4.diff.gz
  to pool/main/d/devtodo/devtodo_0.1.20-4.diff.gz
devtodo_0.1.20-4.dsc
  to pool/main/d/devtodo/devtodo_0.1.20-4.dsc
devtodo_0.1.20-4_amd64.deb
  to pool/main/d/devtodo/devtodo_0.1.20-4_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 511...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ryan Niebur  (supplier of updated devtodo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Wed, 14 Jan 2009 22:48:13 -0800
Source: devtodo
Binary: devtodo
Architecture: source amd64
Version: 0.1.20-4
Distribution: unstable
Urgency: low
Maintainer: Ryan Niebur 
Changed-By: Ryan Niebur 
Description: 
 devtodo- hierarchical, prioritised todo list manager
Closes: 470987 507418 511342
Changes: 
 devtodo (0.1.20-4) unstable; urgency=low
 .
   * Adopt package (Closes: #507418)
   * Check for errors when creating the file to prevent data loss
 (Closes: #511342)
   * Include copyright information (Closes: #470987)
   * add watch file
   * remove usr/share/man/man1 from debian/dirs, it's not needed
 (usr/share/devtodo is, however, as if it's not there it FTBFS)
   * upgrade policy to 3.8.0
 - add Homepage header
   * don't ignore errors from make distclean
Checksums-Sha1: 
 17cdc3852cd895c298a5ce2ebc603c02da49d16a 1041 devtodo_0.1.20-4.dsc
 2536d9d9024c555fc10ef3628d6583d612425071 40776 devtodo_0.1.20-4.diff.gz
 a8a88c228e36db590e1f151949b5990645694110 152380 devtodo_0.1.20-4_amd64.deb
Checksums-Sha256: 
 b14fd61396b37bf18f8707b0647d3759d001e877e4a3686238f904efd0698728 1041 
devtodo_0.1.20-4.dsc
 f0d119e8d524a1651cee0317984d8df37c5e6dc25d852a421d2ed9ec371feef8 40776 
devtodo_0.1.20-4.diff.gz
 1098ebe96aa50777bb962f554538f32758d3b90216562350a0910027d577010e 152380 
devtodo_0.1.20-4_amd64.deb
Files: 
 04fd65c6a76b07e333dff20323747f6e 1041 utils optional devtodo_0.1.20-4.dsc
 c7450dedada1a8ed7bd91d7b79b03a0b 40

Bug#511713: Workaround for Etch

2009-01-15 Thread Paul Bryan Roberts
Aaron Valdes wrote:

> I installed this package.

> libxul-dev
>
> eclipse is starting up now
>
> :)

libxul-dev is an etch package and appears to have no lenny version.

Instead install

  xulrunner-dev 

and eclipse 3.2.2-6.1 should start under lenny.


**

This communication is confidential and intended solely for the 
addressee(s). Any unauthorized review, use, disclosure or distribution
is prohibited. If you believe this message has been sent to you in 
error, please notify the sender by replying to this transmission and 
delete the message without disclosing it. Thank you.

E-mail including attachments is susceptible to data corruption, 
interception, unauthorized amendment, tampering and viruses, and we 
only send and receive e-mails on the basis that we are not liable for 
any such corruption, interception, amendment, tampering or viruses or 
any consequences thereof.

This email, its content and any attachments is PRIVATE AND 
CONFIDENTIAL to TANDBERG Television, Part of the Ericsson Group. 

www.tandbergtv.com
**


Processed: severity of 461519 is grave

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 461519 grave
Bug#461519: libmikmod causes app to segfault or abort when loading multiple 
music files with varying number of channels.
Severity set to `grave' from `critical'

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511713: installed libxul-dev under Lenny

2009-01-15 Thread Aaron Valdes
libxul-dev is an etch package and appears to have no lenny version.

Instead install

  xulrunner-dev 

and eclipse 3.2.2-6.1 should start under lenny.




I installed it under lenny.

aa...@elijah:~$ dpkg -s libxul-dev
Package: libxul-dev
Status: install ok installed
Priority: optional
Section: libdevel
Installed-Size: 23540
Maintainer: Christian Marillat 
Bugs: mailto:maril...@debian.org
Architecture: all
Source: xulrunner
Version: 1.8.1.14-3.1
Depends: libxul0d (>= 1.8.1.14), libnss3-dev, libnspr4-dev, libmozjs-dev
(>= 1.8.1.14-3.1), xulrunner
Conflicts: mozilla-browser (<< 2:1.8)
Description: Development files for the Gecko engine library
 This library provides an API for XUL applications and Gecko embedders.
 The Gecko engine is the core of the mozilla.org applications such as
 Firefox, Thunderbird or SeaMonkey.
 .





-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging 478717

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Automatically generated email from bts, devscripts version 2.9.26etch1
> tags 478717 + pending
Bug#478717: ruby1.9: FTBFS on hppa: make[1]: *** [all] Segmentation fault
There were no tags set.
Bug#491930: ruby1.9: needs a removal-transition on hppa
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: merge

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reassign 510564 libsmbclient
Bug#510564: nautilus: smb file deletion gvfs
Bug reassigned from package `nautilus' to `libsmbclient'.

> forcemerge 511744 510564
Bug#511744: samba: ext3 fs default case-sensitive parameter is wrong and risks 
data loss
Bug#510564: nautilus: smb file deletion gvfs
Forcibly Merged 510564 511744.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: severity of 511744 is important

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 511744 important
Bug#511744: samba: ext3 fs default case-sensitive parameter is wrong and risks 
data loss
Bug#510564: nautilus: smb file deletion gvfs
Severity set to `important' from `grave'

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#393379: Keynote NMU-diff

2009-01-15 Thread Carsten Hey
Just for the record, the diff for the still to be uploaded NMU:

$ interdiff -p 1 \
<(wget -O /dev/stdout 
http://ftp.de.debian.org/debian/pool/main/k/keynote/keynote_2.3-11.diff.gz 
2>/dev/null | gunzip) \
<(wget -O /dev/stdout 
http://debian.stateful.de/pbuilder/sid/keynote_2.3+dfsg-0.1.diff.gz 2>/dev/null 
| gunzip)
diff -u keynote-2.3/debian/changelog keynote-2.3+dfsg/debian/changelog
--- keynote-2.3/debian/changelog
+++ keynote-2.3+dfsg/debian/changelog
@@ -1,3 +1,10 @@
+keynote (2.3+dfsg-0.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Remove non-free IETF RFC/I-D's. (Closes: #393379)
+
+ -- Carsten Hey   Tue, 30 Dec 2008 22:47:04 +0100
+
 keynote (2.3-11) unstable; urgency=low
 
   * use automake-1.9, cdbs
diff -u keynote-2.3/debian/copyright keynote-2.3+dfsg/debian/copyright
--- keynote-2.3/debian/copyright
+++ keynote-2.3+dfsg/debian/copyright
@@ -3,6 +3,21 @@
 
 It was downloaded from http://www.cis.upenn.edu/~keynote
 
+Since the tarball provided by upstream includes non-free IETF RFC/I-D's
+it has been repackaged using the following script:
+
+#! /bin/sh -e
+# Copyright (c) 2008, Carsten Hey
+# Published under the conditions of a 2-clause BSD-like license.
+KEYNOTEVERSION=2.3
+rm -rf keynote-${KEYNOTEVERSION} keynote-${KEYNOTEVERSION}+dfsg.orig
+tar xf keynote_${KEYNOTEVERSION}.orig.tar.gz
+mv keynote-${KEYNOTEVERSION} keynote-${KEYNOTEVERSION}+dfsg.orig
+rm -r keynote-${KEYNOTEVERSION}+dfsg.orig/doc
+GZIP="-9" tar czf keynote_${KEYNOTEVERSION}+dfsg.orig.tar.gz \
+keynote-${KEYNOTEVERSION}+dfsg.orig
+
+
 Upstream Author: Angelos D. Keromytis



Regards
Carsten



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging 393379

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Automatically generated email from bts, devscripts version 2.10.35lenny1
> tags 393379 + patch
Bug#393379: Source package contains non-free IETF RFC/I-D's
Tags were: etch-ignore
Tags added: patch

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#393379: Keynote NMU-diff

2009-01-15 Thread Carsten Hey
On Thu, Jan 15, 2009 at 01:25:58PM +0100, Carsten Hey wrote:
> Just for the record, the diff for the still to be uploaded NMU:

... and, since the diff between the two tarballs is rather useless their
diffstat:

$ difftar keynote_2.3.orig.tar.gz keynote_2.3+dfsg.orig.tar.gz | diffstat 
 rfc2704.txt | 2075 
 rfc2792.txt |  395 ---
 2 files changed, 2470 deletions(-)



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#508628: etch-backports still vulnerable

2009-01-15 Thread Holger Levsen
Hi,

On Dienstag, 13. Januar 2009, Kingsley Masters wrote:
> I'd like to comfirm this bug still exists on etch-backports and is being
> actively exploited.  Our Debian server running roundcube was comprimised
> yesterday though this bug.

Kingsley, out of curiosity, do you have suhosin installed?

to the roundcube maintainers: do you plan an upload to bpo? I have a backport 
ready (well, needs testing, but I'm about to do this) which I could upload...


regards,
Holger


signature.asc
Description: This is a digitally signed message part.


Processed (with 4 errors): not rc

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 511638 important
Bug#511638: [lsdvd] memory leakage with new copy protected dvds like "The Dark 
Knight"
Severity set to `important' from `grave'

> reassign 511638 libdvdread3
Bug#511638: [lsdvd] memory leakage with new copy protected dvds like "The Dark 
Knight"
Bug reassigned from package `lsdvd' to `libdvdread3'.

> thanks.
Unknown command or malformed arguments to command.

> 1) the error comes from libdvdread sources
Unknown command or malformed arguments to command.

> 2) it only manifests itself with broken propiertary
Unknown command or malformed arguments to command.

> content.
Unknown command or malformed arguments to command.

> --
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511638: not rc

2009-01-15 Thread Riku Voipio
severity 511638 important
reassign 511638 libdvdread3
thanks.

1) the error comes from libdvdread sources
2) it only manifests itself with broken propiertary
content.


-- 
"rm -rf" only sounds scary if you don't have backups



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#508628: etch-backports still vulnerable

2009-01-15 Thread Kalev Kadak

Holger Levsen wrote:

Hi,

On Dienstag, 13. Januar 2009, Kingsley Masters wrote:
  

I'd like to comfirm this bug still exists on etch-backports and is being
actively exploited.  Our Debian server running roundcube was comprimised
yesterday though this bug.



Kingsley, out of curiosity, do you have suhosin installed?

to the roundcube maintainers: do you plan an upload to bpo? I have a backport 
ready (well, needs testing, but I'm about to do this) which I could upload...



regards,
Holger
  


Hi,

not Kingsley, but in my case suhosin was not installed.

Regards,
Kalev Kadak



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511893: ucf stores diff (of private files) in debconf (world readable)

2009-01-15 Thread Alexander Gerasiov
Package: ucf
Version: 3.0011
Severity: grave
Tags: security

How to reproduce:
r...@vice:/tmp/ucftest# cat test1 
password="secret";
user="root";
start="no";
foor="bar";
r...@vice:/tmp/ucftest# 

Lets install it:
r...@vice:/tmp/ucftest# ucf test1 /tmp/ucftest/installed

Creating config file /tmp/ucftest/installed with new version
r...@vice:/tmp/ucftest# 

Now we will change password from "secret" to "verysecret" :)

And will intall upgraded package :)

r...@vice:/tmp/ucftest# cat test2 
password="secret";
user="root";
start="no";
foor="bar";
bar="foo";
r...@vice:/tmp/ucftest# ucf test2 /tmp/ucftest/installed
Replacing config file /tmp/ucftest/installed with new version

When ucf asks for comfirm I look at diff.

And now lets search trought debconf database /var/cache/debconf/config.dat:
OMG!

=
Name: ucf/show_diff
Template: ucf/show_diff
Value: 
Owners: ucf
Flags: seen
Variables:
 DIFF = --- /tmp/ucftest/installed 2009-01-15 16:19:18.122649009 +0300\n+++ 
/tmp/ucftest/test2 2009-01-15 16:19:08.263149119 +0300\n@@ -1,4 +1,5 
@@\n-password="verysecret";\n+password="secret";\n user="root";\n start="no";\n 
foor="bar";\n+bar="foo";
=

/var/cache/debconf/config.dat is world readable.


-- System Information:
Debian Release: 5.0
  APT prefers testing-proposed-updates
  APT policy: (700, 'testing-proposed-updates'), (700, 'testing'), (670, 
'proposed-updates'), (670, 'stable'), (600, 'unstable'), (550, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ucf depends on:
ii  coreutils 6.10-6 The GNU core utilities
ii  debconf   1.5.24 Debian configuration management sy

ucf recommends no packages.

ucf suggests no packages.

-- debconf information:
* ucf/show_diff:
* ucf/changeprompt_threeway: install_new
  ucf/title:
* ucf/changeprompt: install_new



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Re: Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # and to be frank I believe this bug is just plain invalid
> severity 511687 normal
Bug#511687: Policy violation  git-daemon-run must provide a init.d script and 
not a symlink to /usr/bin
Severity set to `normal' from `serious'

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread Pierre Habouzit
# and to be frank I believe this bug is just plain invalid
severity 511687 normal
thanks

On Tue, Jan 13, 2009 at 02:06:36PM +, Bastien ROUCARIES wrote:
> Package: git-daemon-run
> Version: 1:1.5.6.5-2
> Severity: serious
>
> Seveirty serious because it is a policy violation: according to section 9.3 
> of debian policy.
>
> Please add a script, and document correctly dependancy using 
> http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot
>
> Regards

No it doesn't _need_ to, the very standard way to use git-daemon is
usually through a super-server. git-daemon-run is just a way to enable
git-daemon into runit, which is the packager choice and has nothing to
do with the policy as-is.

git-daemon is part of git-core and it would make really no sense to
enable git-daemon as an init script part of this package.

As an example, I serve git-daemon through xinetd on my server, and I
just had to write this:

$ cat /etc/xinetd.d/git-daemon
# description: The git server offers access to git repositories
service git
{
disable = no
type= UNLISTED
port= 9418
socket_type = stream
wait= no
user= nobody
server  = /usr/bin/git-daemon
flags   = IPv6
server_args = --inetd --export-all --base-path=/git/public 
--user-path=public_git
log_on_failure  += USERID
}

Arguably the packager could document this or a way to enable git-daemon through
the usual inetd servers, but that's it IMNSHO.

Cheers,

--
·O·  Pierre Habouzit
··Omadco...@debian.org
OOOhttp://www.madism.org


pgpeYwjF1baW9.pgp
Description: PGP signature


Bug#511897: sugar: Package should depend on gstreamer0.10-alsa

2009-01-15 Thread Luke Faraone
Package: sugar
Version: 0.82.8-3
Severity: grave
Justification: renders package unusable

Forwarded from lp:#317462.

The following error occurs on a system that does not have gstreamer-0.10-alsa 
installed:
  File "/usr/share/sugar/shell/hardware/hardwaremanager.py", line 56, in 
__init__
self._mixer = gst.element_factory_make('alsamixer')
gst.ElementNotFoundError: alsamixer

-- System Information:
Debian Release: 5.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511900: php5: Compiling pdo_oci extension fails with "Cannot find php_pdo_driver.h."

2009-01-15 Thread Cassiano Leal
Package: php5
Version: 5.2.6.dfsg.1-2
Severity: serious
Tags: patch
Justification: no longer builds from source


Trying to build pdo_oci from php5 sources fails with the message below:

checking for PDO includes... checking for PDO includes...
configure: error: Cannot find php_pdo_driver.h.
make: *** [configure-stamp-v5] Error 1

The following patch solves the problem (has to be applied after
phpizing the source):

*** configure   2009-01-15 11:41:34.0 -0200
--- configure.new   2009-01-15 11:43:35.0 -0200
***
*** 7049,7056 
pdo_inc_path=$abs_srcdir/ext
  elif test -f $abs_srcdir/ext/pdo/php_pdo_driver.h; then
pdo_inc_path=$abs_srcdir/ext
! elif test -f $prefix/include/php/ext/pdo/php_pdo_driver.h; then
!   pdo_inc_path=$prefix/include/php/ext
  fi

  fi
--- 7049,7056 
pdo_inc_path=$abs_srcdir/ext
  elif test -f $abs_srcdir/ext/pdo/php_pdo_driver.h; then
pdo_inc_path=$abs_srcdir/ext
! elif test -f $prefix/include/php5/ext/pdo/php_pdo_driver.h; then
!   pdo_inc_path=$prefix/include/php5/ext
  fi

  fi


-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (990, 'testing'), (520, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.27-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread roucaries bastien
On Thu, Jan 15, 2009 at 2:44 PM, Pierre Habouzit  wrote:
> # and to be frank I believe this bug is just plain invalid
> severity 511687 normal
> thanks

No the bug is not really invalid it shoke insserver because
git-daemon-run is a binary file, it does not crash but report loundly
that it can not read the file git-daemon-run.

Ok it is not a bug per se, but admin could personnalize init.d script.

> On Tue, Jan 13, 2009 at 02:06:36PM +, Bastien ROUCARIES wrote:
>> Package: git-daemon-run
>> Version: 1:1.5.6.5-2
>> Severity: serious
>>
>> Seveirty serious because it is a policy violation: according to section 9.3 
>> of debian policy.
>>
>> Please add a script, and document correctly dependancy using 
>> http://wiki.debian.org/LSBInitScripts/DependencyBasedBoot
>>
>> Regards
>
> No it doesn't _need_ to, the very standard way to use git-daemon is
> usually through a super-server. git-daemon-run is just a way to enable
> git-daemon into runit, which is the packager choice and has nothing to
> do with the policy as-is.

Yes but put a symlink to a binary file in /etc/init.d is not really
nice. According to section 9.3, /etc/init.d MUST be script.
symlink is bad usage at least.

> git-daemon is part of git-core and it would make really no sense to
> enable git-daemon as an init script part of this package.

> As an example, I serve git-daemon through xinetd on my server, and I
> just had to write this:
>
>$ cat /etc/xinetd.d/git-daemon
># description: The git server offers access to git repositories
>service git
>{
>disable = no
>type= UNLISTED
>port= 9418
>socket_type = stream
>wait= no
>user= nobody
>server  = /usr/bin/git-daemon
>flags   = IPv6
>server_args = --inetd --export-all --base-path=/git/public 
> --user-path=public_git
>log_on_failure  += USERID
>}
>
> Arguably the packager could document this or a way to enable git-daemon 
> through
> the usual inetd servers, but that's it IMNSHO.

Ok I agree and rename git-daemon-run to git-daemon-runit

And according to man page git-daemon could be run as a stand alone daemon:

>git-daemon as regular daemon for virtual hosts
>   To set up git-daemon as a regular, non-inetd service that handles 
> repositories for multiple virtual hosts based on their IP >addresses, start 
> the daemon like this:
> git-daemon --verbose --export-all
>   --interpolated-path=/pub/%IP/%D
>   /pub/192.168.1.200/software
>   /pub/10.10.220.23/software
>   In this example, the root-level directory /pub will contain a 
> subdirectory for each virtual host IP address supported. >Repositories can 
> still be accessed by
>   hostname though, assuming they correspond to these IP addresses.

I believe that this package provide the standalone daemon because it
wrote to /etc/init.d :(

Regards

Bastien



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511797: Similar Query Refusal Behavior

2009-01-15 Thread Domain Admin
I am experiencing something similar since upgrading to this package
version.  My localhost can still perform all queries as normal; however, all
remote queries that are for non-authoritative domains are now refused.  My
server is only accepting remote queries for domains that it is the DNS
master for.  I have had my server configured to allow all queries for years,
and have not touched that configuration in years.  Now my logs are filling
with gobs of "query denied" messages from external sources.  Bind9's
behavior HAS changed with this package update.  I haven't yet figured out
what configuration I need to change to return to previous behavior.


Bug#508628: etch-backports still vulnerable

2009-01-15 Thread Holger Levsen
Hi,

On Donnerstag, 15. Januar 2009, Kalev Kadak wrote:
> > to the roundcube maintainers: do you plan an upload to bpo? I have a
> > backport ready (well, needs testing, but I'm about to do this) which I
> > could upload...

I was too fast:

roundcube needs newer php-mail-mime, so I backported that. That needs newer
php-mail-mimedecode, which needs newer dh-make-php to build, so I backported
that too.

But even with that, php-mail-mimedecode fails to build with:

dh_installdirs -A 
mkdir -p "."
ln -f -s ../package.xml -
# install everything in default locations
/usr/bin/pear \
-c debian/pearrc \
-d include_path=/usr/share/php \
-d php_bin=/usr/bin/php \
-d bin_dir=/usr/bin \
-d php_dir=/usr/share/php \
-d data_dir=/usr/share/php/data \
-d doc_dir=/usr/share/php/docs \
-d test_dir=/usr/share/php/tests \
install --nodeps -P 
~/Software/roundcube/php-mail-mimedecode-1.5.0/debian/php-mail-mimedecode/ 
-/package.xml
Console_Getopt: unrecognized option -- /
make: *** [common-install-indep] Error 1
debuild: fatal error at line 1295:
dpkg-buildpackage -rfakeroot -D -us -uc -I.svn -i.svn failed

If I understand this correctly, it seems the syntax used is only available in
newer pear versions, which I rather not backport.

Can someone come up with another syntax for pear 5.2.0?


regards,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread Pierre Habouzit
On Thu, Jan 15, 2009 at 02:26:18PM +, roucaries bastien wrote:
> On Thu, Jan 15, 2009 at 2:44 PM, Pierre Habouzit  wrote:
> > # and to be frank I believe this bug is just plain invalid
> > severity 511687 normal
> > thanks
> 
> No the bug is not really invalid it shoke insserver because
> git-daemon-run is a binary file, it does not crash but report loundly
> that it can not read the file git-daemon-run.
> 
> Ok it is not a bug per se, but admin could personnalize init.d script.

So ? The fact that it is a symlink doesn't prevent you from changing it
to a script.

> > No it doesn't _need_ to, the very standard way to use git-daemon is
> > usually through a super-server. git-daemon-run is just a way to enable
> > git-daemon into runit, which is the packager choice and has nothing to
> > do with the policy as-is.
> 
> Yes but put a symlink to a binary file in /etc/init.d is not really
> nice. According to section 9.3, /etc/init.d MUST be script.
> symlink is bad usage at least.

I'm not sure it must, but what it should and does not, is declaring
/etc/init.d/git-daemon as:
  (1) a conffile
  (2) not remove it on removal
  (3) not overwrite it on install

> I believe that this package provide the standalone daemon because it
> wrote to /etc/init.d :(

You believe or believe*d* ? because afaict git-daemon is part of
git-core.

-- 
·O·  Pierre Habouzit
··Omadco...@debian.org
OOOhttp://www.madism.org


pgpGuSaefHuHV.pgp
Description: PGP signature


Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread Cyril Brulebois
roucaries bastien  (15/01/2009):
> I believe that this package provide the standalone daemon because it
> wrote to /etc/init.d :(

BTW, if you want a skeleton for an init.d script, please find one
attached. I've written (and then rewritten because mine was trashed when
I wanted to check something with that stupid package) it for local use,
so it's not perfect at all, no start-stop-daemon use, no LSB headers,
but well, you get the idea.

Mraw,
KiBi.
#!/bin/sh

set -e

# Configuration variables:
USER=gitosis
GROUP=gitosis
REPOSITORIES=/home/gitosis/repositories

# Convenience:
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

do_start() {
  git-daemon \
--user=$USER --group=$GROUP \
--syslog \
--reuseaddr \
--base-path=$REPOSITORIES \
$REPOSITORIES &
}

do_stop() {
  killall git-daemon || true
}

case "$1" in
  start)
do_start
  ;;
  stop)
do_stop
  ;;
  restart)
do_stop
sleep 1
do_start
  ;;
  *)
echo "Unsupported action: $1"
exit 1
  ;;
esac



signature.asc
Description: Digital signature


Bug#511687: Policy violation git-daemon-run must provide a init.d script and not a symlink to /usr/bin

2009-01-15 Thread roucaries bastien
On Thu, Jan 15, 2009 at 3:39 PM, Pierre Habouzit  wrote:
> On Thu, Jan 15, 2009 at 02:26:18PM +, roucaries bastien wrote:
>> On Thu, Jan 15, 2009 at 2:44 PM, Pierre Habouzit  wrote:
>> > # and to be frank I believe this bug is just plain invalid
>> > severity 511687 normal
>> > thanks
>>
>> No the bug is not really invalid it shoke insserver because
>> git-daemon-run is a binary file, it does not crash but report loundly
>> that it can not read the file git-daemon-run.
>>
>> Ok it is not a bug per se, but admin could personnalize init.d script.

Yes he could but during install it will shoke innserv. And I dislike
to shoke inserv. using a script will also allow to set init priority
of this stuff, but i do not really know if runit use it.

> So ? The fact that it is a symlink doesn't prevent you from changing it
> to a script.

Nothing will send a patch i suppose But somebody beat me :)

>> > No it doesn't _need_ to, the very standard way to use git-daemon is
>> > usually through a super-server. git-daemon-run is just a way to enable
>> > git-daemon into runit, which is the packager choice and has nothing to
>> > do with the policy as-is.
>>
>> Yes but put a symlink to a binary file in /etc/init.d is not really
>> nice. According to section 9.3, /etc/init.d MUST be script.
>> symlink is bad usage at least.
>
> I'm not sure it must, but what it should and does not, is declaring
> /etc/init.d/git-daemon as:
>  (1) a conffile
>  (2) not remove it on removal
>  (3) not overwrite it on install

Or use cyril brulebois patch :)

>> I believe that this package provide the standalone daemon because it
>> wrote to /etc/init.d :(
>
> You believe or believe*d* ? because afaict git-daemon is part of
> git-core.

I believed :) I have apt-get --purge remove it :)

Will improve cyril patch

Regards



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511897: [Debian-olpc-devel] Bug#511897: sugar: Package should depend on gstreamer0.10-alsa

2009-01-15 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Jan 15, 2009 at 08:49:53AM -0500, Luke Faraone wrote:
>The following error occurs on a system that does not have gstreamer-0.10-alsa 
>installed:
>  File "/usr/share/sugar/shell/hardware/hardwaremanager.py", line 56, in 
> __init__
>self._mixer = gst.element_factory_make('alsamixer')
>gst.ElementNotFoundError: alsamixer

Sugar already indirectly depends on gstreamer0.10-plugins-good through 
telepathy-stream-engine, libfarsight0.1-3 and 
gstreamer0.10-plugins-good.

Please describe how the sugar package can be installed (using only 
officially released Debian packages) without gstreamer-0.10-alsa.


I agree that sugar should recommend gstreamer-0.10-alsa, as it should 
declare all _direct_ dependencies. But I suspect that even if that file 
is missing, some use of Sugar is possible (rather than "renders the 
package unsuable" as you tagged this bug). Can you elaborate on 
that tagging?

(your tagging means "it is better to remove this package completely from 
Debian than keeping it with this bug open" which I suspect is not right)


Kind regards,

  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklvVuEACgkQn7DbMsAkQLiHxgCgl3/76nHRh7MoaQf4gNnClPgq
znIAoKQtG7v/8SP3F4VElhCekO7T/C2j
=4raU
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511907: /usr/bin/nec2: Nec2 Segfaults on any input deck

2009-01-15 Thread Fernando M. Maresca
Package: nec
Version: 2-14+b1
Severity: grave
File: /usr/bin/nec2
Justification: renders package unusable


Hello.
nec2 seems to segfault here with any input .nec deck file I have.
However, I can get the output from nec2small in the same set of files.

This problem affects also the antennavis since it uses nec2.

Thanks a lot, 
Fernando, LU2DFM


-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/1 CPU core)
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages nec depends on:
ii  libc6   2.7-18   GNU C Library: Shared libraries
ii  libf2c2 20061008-4.1 Shared libraries for use with FORT

nec recommends no packages.

nec suggests no packages.

-- debconf-show failed



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511131: pwc-source: build of pwc fails on etchnhalf

2009-01-15 Thread Victor Seva
pwc was included on vanilla kernel in version 2.6.18. So no need to  
use pwc-source on etchnhalf.


Just for the record.



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: crash rtorrent by scgi-interface (function: 'fi.get_filename_last')

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 506748 -patch
Bug#506748: crash rtorrent by scgi-interface (function: 'fi.get_filename_last')
Tags were: patch
Bug#510560: rtorrent: Patch to resolve bug #506748 leads to crashes
Tags removed: patch

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: RE: pwc-source: build of pwc fails on etchnhalf

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 511131 wontfix
Bug#511131: pwc-source: build of pwc fails on etchnhalf
There were no tags set.
Tags added: wontfix

> stop
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511131: pwc-source: build of pwc fails on etchnhalf

2009-01-15 Thread Victor Seva

tags 511131 wontfix
stop

From package description:
"This package provides the source code for the pwc kernel module. A  
Kernel version >= 2.6.9 is required to compile this module. Since  
2.6.18 the "umcompressor thingy" is already included so you don't need  
this package."



From: Victor Seva 
To: 511...@bugs.debian.org
Subject: RE: pwc-source: build of pwc fails on etchnhalf
Date: Thu, 15 Jan 2009 16:53:44 +0100

pwc was included on vanilla kernel in version 2.6.18. So no need to
use pwc-source on etchnhalf.

Just for the record.




PGP.sig
Description: Mensaje firmado digitalmente


Processed: Package should depend on gstreamer0.10-alsa

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 511897 serious
Bug#511897: sugar: Package should depend on gstreamer0.10-alsa
Severity set to `serious' from `grave'

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#453123: marked as done (Upgrade fails if snmpd is running)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 18:21:19 +0100
with message-id <496f708f.50...@scram.de>
and subject line Re: [Pkg-net-snmp-devel] Bug#453123: Upgrade fails if snmpd is 
running
has caused the Debian Bug report #453123,
regarding Upgrade fails if snmpd is running
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
453123: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453123
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: snmpd
Version: 5.4.1~dfsg-4
Severity: important

Hi,
I just upgraded snmpd on a few servers to 5.4.1 (to get rid of the xen errors)
and all of them failed miserably on "Seeting up snmpd"

Setting up snmpd (5.4.1~dfsg-4) ...
[... questions about config files ... ]

Installing new version of config file /etc/snmp/snmpd.conf ...
Starting network management services:invoke-rc.d: initscript snmpd, action 
"start" failed.
dpkg: error processing snmpd (--configure):
 subprocess post-installation script returned error exit status 1

On all the boxes the problem was the same: snmpd was running when dpkg 
configured it.
I had to manually stop snmpd and dpkg --configure -a:

# /etc/init.d/snmpd stop
Stopping network management services: snmpd snmptrapd.
# dpkg --configure -a
Setting up snmpd (5.4.1~dfsg-4) ...
Starting network management services: snmpd.

Shouldn't the package itself stop snmpd before trying to start it? I think it 
happened with older
versions also but I'm now sure.

Cheers,
Marc

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable'), (150, 'experimental'), (100, 
'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-2-686 (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash


--- End Message ---
--- Begin Message ---
Version: 5.4.1~dfsg-12

Steve Langasek schrieb:

> But it is precisely against version 5.4.1~dfsg-4 that bug #453123 was
> submitted.  It's possible that bug #453123 is not the same as bug #391203
> with which it has been merged, since 453123 shows a failure to start the
> daemon at all rather than a hang after start.  Should these bugs be
> un-merged?

The whole bug is a mess. The original bug was about some upgrade not stopping
snmpd propperly. With 5.4.1~dfsg-12, the upgrade won't fail anymore, however if
snmpd fails to stop, the old version will still be running after the upgrade.

Later someone posted a followup with a duplicate of #391203.

Thanks for letting me know. The issue (and both bugs) should be resolved now.

Jochen

--- End Message ---


Bug#511926: gajim: Uninstallable on a bunch of architectures

2009-01-15 Thread Yavor Doganov
Package: gajim
Version: 0.12.1-1
Severity: serious
Tags: patch

Hardcoding libc6 in Depends is a terrible idea, as the SONAME and the 
package name are different accross architectures (libc6.1 on alpha and 
ia64, libc0.1 on kfreebsd-*, libc0.3 on hurd-i386).

Please remove "libc6" from the Depends field, that's what 
${shlibs:Depends} was designed for.

-- System Information:
Debian Release: 5.0
Architecture: kfreebsd-i386 (i686)

Kernel: kFreeBSD 6.3-1-486
Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#453123: [Pkg-net-snmp-devel] Bug#453123: Upgrade fails if snmpd is running

2009-01-15 Thread Jochen Friedrich
Version: 5.4.1~dfsg-12

Steve Langasek schrieb:

> But it is precisely against version 5.4.1~dfsg-4 that bug #453123 was
> submitted.  It's possible that bug #453123 is not the same as bug #391203
> with which it has been merged, since 453123 shows a failure to start the
> daemon at all rather than a hang after start.  Should these bugs be
> un-merged?

The whole bug is a mess. The original bug was about some upgrade not stopping
snmpd propperly. With 5.4.1~dfsg-12, the upgrade won't fail anymore, however if
snmpd fails to stop, the old version will still be running after the upgrade.

Later someone posted a followup with a duplicate of #391203.

Thanks for letting me know. The issue (and both bugs) should be resolved now.

Jochen



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#391203: marked as done (Upgrading snmpd from 5.2.2-3 to 5.2.3-1 hangs in snmpd.postinst)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 18:21:19 +0100
with message-id <496f708f.50...@scram.de>
and subject line Re: [Pkg-net-snmp-devel] Bug#453123: Upgrade fails if snmpd is 
running
has caused the Debian Bug report #453123,
regarding Upgrading snmpd from 5.2.2-3 to 5.2.3-1 hangs in snmpd.postinst
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
453123: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453123
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: snmpd
Version: 5.2.3-1
Severity: normal

I have noticed this on several machines, that upgrading snmpd just 
"sits there"

I have taken a ps -ef --forest when it happens, and that shows:
root  4213  3193  0 12:24 pts/000:00:00  |   \_ apt-get install 
snmpd
root  4448  4213  0 12:25 pts/000:00:00  |   \_ 
/usr/bin/dpkg --status-fd 11 --configure perl perl-modules libperl5.8 
libperl-dev libsnmp-base libsnmp9 libsnmp-perl snmpd
root  4458  4448  0 12:26 pts/000:00:00  |   \_ 
/usr/bin/perl -w /usr/share/debconf/frontend /var/lib/dpkg/info/snmpd.postinst 
configure 5.2.2-3
root  4469  4458  0 12:26 pts/000:00:00  |   \_ 
[snmpd.postinst] 

And this process tree never finishes. Hitting CTRL-C terminates the 
snmpd.postinst and the apt-get install finishes with an error for snmpd.
A subsequent apt-get install -f apparently fixes that error and the system
seems to be in a "good" state afterwards. But apt-get install hangs and 
requires manual intervention.


-- System Information:
Debian Release: testing/unstable
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.vmware
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages snmpd depends on:
ii  adduser   3.87   Add and remove users and groups
ii  debconf   1.5.2  Debian configuration management sy
ii  libc6 2.3.6-15   GNU C Library: Shared libraries
ii  libsensors3   1:2.10.0-7 library to read temperature/voltag
ii  libsnmp9  5.2.3-1NET SNMP (Simple Network Managemen
ii  libwrap0  7.6.dbs-9  Wietse Venema's TCP wrappers libra

snmpd recommends no packages.

-- debconf information:
  snmpd/upgradefrom36:
* snmpd/upgradefrom521:

--- End Message ---
--- Begin Message ---
Version: 5.4.1~dfsg-12

Steve Langasek schrieb:

> But it is precisely against version 5.4.1~dfsg-4 that bug #453123 was
> submitted.  It's possible that bug #453123 is not the same as bug #391203
> with which it has been merged, since 453123 shows a failure to start the
> daemon at all rather than a hang after start.  Should these bugs be
> un-merged?

The whole bug is a mess. The original bug was about some upgrade not stopping
snmpd propperly. With 5.4.1~dfsg-12, the upgrade won't fail anymore, however if
snmpd fails to stop, the old version will still be running after the upgrade.

Later someone posted a followup with a duplicate of #391203.

Thanks for letting me know. The issue (and both bugs) should be resolved now.

Jochen

--- End Message ---


Bug#510918: intent to NMU

2009-01-15 Thread Nico Golde
Hi,
attached is a patch for a 0-day NMU that fixes this issue.

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
diff -u uw-imap-2007b~dfsg/debian/changelog uw-imap-2007b~dfsg/debian/changelog
--- uw-imap-2007b~dfsg/debian/changelog
+++ uw-imap-2007b~dfsg/debian/changelog
@@ -1,3 +1,13 @@
+uw-imap (8:2007b~dfsg-1.1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix denial of service vulnerability because of rfc822_output_char() not
+checking for a full buffer and writing one byte ahead the buffer, later
+resulting in memcpy getting called with a possible size argument of -1
+(0003_CVE-2008-5514.patch; Closes: #510918)
+
+ -- Nico Golde   Thu, 15 Jan 2009 19:00:01 +0100
+
 uw-imap (8:2007b~dfsg-1) unstable; urgency=medium
 
   * Revert to older upstream 2007b, and instead bump epoc, as simplest
diff -u uw-imap-2007b~dfsg/debian/patches/series uw-imap-2007b~dfsg/debian/patches/series
--- uw-imap-2007b~dfsg/debian/patches/series
+++ uw-imap-2007b~dfsg/debian/patches/series
@@ -1,5 +1,6 @@
 0001_insecure_strcmp.patch
 0002_no_close_quit_netstream.patch
+0003_CVE-2008-5514.patch
 1001_shlibs.patch
 1003_maildir.patch
 2002_mailspool.patch
only in patch2:
unchanged:
--- uw-imap-2007b~dfsg.orig/debian/patches/0003_CVE-2008-5514.patch
+++ uw-imap-2007b~dfsg/debian/patches/0003_CVE-2008-5514.patch
@@ -0,0 +1,20 @@
+--- a/src/c-client/rfc822.c	2008-05-15 00:34:51.0 +0200
 b/src/c-client/rfc822.c	2008-12-17 00:52:15.0 +0100
+@@ -1351,6 +1351,7 @@
+ 
+ static long rfc822_output_char (RFC822BUFFER *buf,int c)
+ {
++  if ((buf->cur == buf->end) && !rfc822_output_flush (buf)) return NIL;
+   *buf->cur++ = c;		/* add character, soutr buffer if full */
+   return (buf->cur == buf->end) ? rfc822_output_flush (buf) : LONGT;
+ }
+@@ -1374,7 +1375,8 @@
+   len -= i;
+ }
+ /* soutr buffer now if full */
+-if (len && !rfc822_output_flush (buf)) return NIL;
++if ((len || (buf->cur == buf->end)) && !rfc822_output_flush (buf))
++  return NIL;
+   }
+   return LONGT;
+ }


pgpTKPNlIjJDo.pgp
Description: PGP signature


Bug#506773: asterisk-app-fax depends on libspandsp3 and libspandsp3 does not exist yet in the repository

2009-01-15 Thread Gonzalo Marcote Peña
> Options at this point:

> 1. Upload new package (0.3) to Unstable, knowing it won't migrate into
Lenny anyway, so we might as well have a usable asterisk-app-fax.

> 2. Remove this package, as its functionality will be mostly replaced[1]
   by the newer Asterisk package.

Ok in such case IMHO is better point 2 and wait until lenny is released and 
wait for Asterisk 1.6 series.


Gonzalo Marcote.




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Keeping this open until the necessary binNMUs and uploads are done

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reopen 511756
Bug#511756: ghc6: Includes GMP, which has non-free GNU documentation
'reopen' may be inappropriate when a bug has been closed with a version;
you may need to use 'found' to remove fixed versions.
Bug reopened, originator not changed.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511756: Keeping this open until the necessary binNMUs and uploads are done

2009-01-15 Thread Kari Pahula
reopen 511756
thanks

While the immediate issue (libgmp in ghc6) is fixed, there's still a
bunch of uninstallable packages around.  As of this writing, these
need a binNMU:

haskell-hlist, haskell-binary, highlighting-kate, haskell-irc,
haskell-utf8-string, pandoc, haskell-pcre-light

These need an upload to remove ghc6 (<< 6.8.2-999) from the build
dependencies (they currently FTBFS).

ftphs, haskell-anydbm, haskell-configfile, haskell-hsh, hdbc,
hdbc-odbc, hdbc-postgresql, hdbc-sqlite3, hslogger, ldap-haskell,
listlike, magic-haskell, missingh, missingpy, washngo

To be on the safe side, I'll wait until ghc6 gets built on arm too.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511562: marked as done (rsyslog: segfault on reload when using $AllowedSender)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 18:17:06 +
with message-id 
and subject line Bug#511562: fixed in rsyslog 3.18.6-3
has caused the Debian Bug report #511562,
regarding rsyslog: segfault on reload when using $AllowedSender
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511562: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511562
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: rsyslog
Version: 3.18.5-1
Severity: critical
Justification: causes serious data loss

Hello,

I have noticed that rsyslog randomly crashes with remote logging 
(client) enabled. This happens almost once a day and all log messages 
are lost until rsyslog is started again. I don't know if this is related 
to remote logging but all my other installations with no remote logging 
work fine.

Normally there is nothing special in the log files when rsyslog crashes 
and I have not been able to find out the cause. Today I noticed the 
following:

*** syslog
*** glibc detected *** /usr/sbin/rsyslogd: malloc(): memory corruption (fast): 
0x7f633001d33f ***
=== Backtrace: =
/lib/libc.so.6[0x7f63378c3948]
/lib/libc.so.6[0x7f63378c667f]
/lib/libc.so.6(__libc_malloc+0x98)[0x7f63378c7a78]
/usr/sbin/rsyslogd(rsCStrGetSzStr+0x5d)[0x414b1d]
/usr/sbin/rsyslogd(rsCStrConvSzStrAndDestruct+0x24)[0x414cc4]
/usr/sbin/rsyslogd(logmsg+0x50c)[0x40ba4c]
/usr/sbin/rsyslogd(printline+0xed)[0x40be8d]
/usr/sbin/rsyslogd(parseAndSubmitMessage+0x126)[0x40c046]
/usr/lib/rsyslog/imuxsock.so[0x7f633703b2d5]
/usr/lib/rsyslog/imuxsock.so[0x7f633703b4a7]
/usr/sbin/rsyslogd[0x416470]
/lib/libpthread.so.0[0x7f6337fb6fc7]
/lib/libc.so.6(clone+0x6d)[0x7f633791f5ad]
=== Memory map: 
0040-0043b000 r-xp  fd:02 49160  
/usr/sbin/rsyslogd
0063a000-0063e000 rw-p 0003a000 fd:02 49160  
/usr/sbin/rsyslogd
0063e000-0063f000 rw-p 0063e000 00:00 0 
02058000-0211f000 rw-p 02058000 00:00 0  [heap]
408ed000-408ee000 ---p 408ed000 00:00 0 
408ee000-410ee000 rw-p 408ee000 00:00 0 
410ee000-410ef000 ---p 410ee000 00:00 0 
410ef000-418ef000 rw-p 410ef000 00:00 0 
41b14000-41b15000 ---p 41b14000 00:00 0 
41b15000-42315000 rw-p 41b15000 00:00 0 
42315000-42316000 ---p 42315000 00:00 0 
42316000-42b16000 rw-p 42316000 00:00 0 
7f632800-7f6328021000 rw-p 7f632800 00:00 0 
7f6328021000-7f632c00 ---p 7f6328021000 00:00 0 
7f633000-7f6330021000 rw-p 7f633000 00:00 0 
7f6330021000-7f633400 ---p 7f6330021000 00:00 0 
7f6336c1c000-7f6336c32000 r-xp  fd:00 8226   
/lib/libgcc_s.so.1
7f6336c32000-7f6336e32000 ---p 00016000 fd:00 8226   
/lib/libgcc_s.so.1
7f6336e32000-7f6336e33000 rw-p 00016000 fd:00 8226   
/lib/libgcc_s.so.1
7f6336e33000-7f6336e38000 r-xp  fd:02 73841  
/usr/lib/rsyslog/imklog.so
7f6336e38000-7f6337038000 ---p 5000 fd:02 73841  
/usr/lib/rsyslog/imklog.so
7f6337038000-7f6337039000 rw-p 5000 fd:02 73841  
/usr/lib/rsyslog/imklog.so
7f6337039000-7f633703a000 rw-p 7f6337039000 00:00 0 
7f633703a000-7f633703c000 r-xp  fd:02 73834  
/usr/lib/rsyslog/imuxsock.so
7f633703c000-7f633723c000 ---p 2000 fd:02 73834  
/usr/lib/rsyslog/imuxsock.so
7f633723c000-7f633723d000 rw-p 2000 fd:02 73834  
/usr/lib/rsyslog/imuxsock.so
7f633723d000-7f633723f000 r-xp  fd:02 73833  
/usr/lib/rsyslog/lmtcpclt.so
7f633723f000-7f633743e000 ---p 2000 fd:02 73833  
/usr/lib/rsyslog/lmtcpclt.so
7f633743e000-7f633743f000 rw-p 1000 fd:02 73833  
/usr/lib/rsyslog/lmtcpclt.so
7f633743f000-7f6337449000 r-xp  fd:00 8447   
/lib/libnss_files-2.7.so
7f6337449000-7f6337649000 ---p a000 fd:00 8447   
/lib/libnss_files-2.7.so
7f6337649000-7f633764b000 rw-p a000 fd:00 8447   
/lib/libnss_files-2.7.so
7f633764b000-7f633764f000 r-xp  fd:02 73832  
/usr/lib/rsyslog/lmnet.so
7f633764f000-7f633784f000 ---p 4000 fd:02 73832  
/usr/lib/rsyslog/lmnet.so
7f633784f000-7f633785 rw-p 4000 fd:02 73832  
/usr/lib/rsyslog/lmnet.so
7f633785-7f633799a000 r-xp  fd:00 8459   
/lib/libc-2.7.so
7f633799a000-7f6337b99000 ---p 0014a000 fd:00 8459   
/lib/libc-2.7.so
7f6337

Bug#510918: marked as done (CVE-2008-5514: Off-by-one error)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 18:17:08 +
with message-id 
and subject line Bug#510918: fixed in uw-imap 8:2007b~dfsg-1.1
has caused the Debian Bug report #510918,
regarding CVE-2008-5514: Off-by-one error
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
510918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510918
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: uw-imap
Severity: grave
Tags: security, patch
Justification: user security hole

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for uw-imap.

CVE-2008-5514[0]:
| Off-by-one error in the rfc822_output_char function in the
| RFC822BUFFER routines in the University of Washington (UW) c-client
| library, as used by the UW IMAP toolkit before imap-2007e and other
| applications, allows context-dependent attackers to cause a denial of
| service (crash) via an e-mail message that triggers a buffer overflow.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

The issue has been fixed in lenny already via the latest DTSA. The patch
just needs to be applied for sid.

Cheers
Steffen

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5514
http://security-tracker.debian.net/tracker/CVE-2008-5514


--- End Message ---
--- Begin Message ---
Source: uw-imap
Source-Version: 8:2007b~dfsg-1.1

We believe that the bug you reported is fixed in the latest version of
uw-imap, which is due to be installed in the Debian FTP archive:

ipopd_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/ipopd_2007b~dfsg-1.1_amd64.deb
libc-client2007b-dev_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/libc-client2007b-dev_2007b~dfsg-1.1_amd64.deb
libc-client2007b_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/libc-client2007b_2007b~dfsg-1.1_amd64.deb
mlock_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/mlock_2007b~dfsg-1.1_amd64.deb
uw-imap_2007b~dfsg-1.1.diff.gz
  to pool/main/u/uw-imap/uw-imap_2007b~dfsg-1.1.diff.gz
uw-imap_2007b~dfsg-1.1.dsc
  to pool/main/u/uw-imap/uw-imap_2007b~dfsg-1.1.dsc
uw-imapd_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/uw-imapd_2007b~dfsg-1.1_amd64.deb
uw-mailutils_2007b~dfsg-1.1_amd64.deb
  to pool/main/u/uw-imap/uw-mailutils_2007b~dfsg-1.1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 510...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Nico Golde  (supplier of updated uw-imap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 15 Jan 2009 19:00:01 +0100
Source: uw-imap
Binary: uw-imapd ipopd libc-client2007b-dev libc-client2007b mlock uw-mailutils
Architecture: source amd64
Version: 8:2007b~dfsg-1.1
Distribution: unstable
Urgency: high
Maintainer: Jonas Smedegaard 
Changed-By: Nico Golde 
Description: 
 ipopd  - POP2 and POP3 mail server
 libc-client2007b - c-client library for mail protocols - library files
 libc-client2007b-dev - c-client library for mail protocols - development files
 mlock  - mailbox locking program
 uw-imapd   - remote mail folder access server using IMAP4rev1
 uw-mailutils - c-client support programs
Closes: 510918
Changes: 
 uw-imap (8:2007b~dfsg-1.1) unstable; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix denial of service vulnerability because of rfc822_output_char() not
 checking for a full buffer and writing one byte ahead the buffer, later
 resulting in memcpy getting called with a possible size argument of -1
 (0003_CVE-2008-5514.patch; Closes: #510918)
Checksums-Sha1: 
 3898813b9a7d6f986d550d56cd1263764e3ec1a9 1404 uw-imap_2007b~dfsg-1.1.dsc
 43abc2c2e82fba4cf441076e393735aa6c9ba4f9 103450 uw-imap_2007b~dfsg-1.1.diff.gz
 df0446552ab6120f10443da0c7ad014c207cbbe6 93488 
uw-imapd_2007b~dfsg-1.1_amd64.deb
 8cd348194299e5cce0d9f2d4cb9c6d1254115e8e 54784 ipopd_2007b~dfsg-1.1_amd64.deb
 1d1b22176f646df2c4396bf18d06e14a48833db9 738120 
libc-client2007b-dev_2007b~dfsg-1.1_amd64.deb
 1d2a6c139ba35ac783721110fb1bc793d4b107d9 77 
libc-client2007b_2007b~dfsg-1.1_amd64.deb
 3b722f0bfe5658243442b70f61530fce836e1b4c 31178 mlock_2007b~dfsg-1.1_amd64.deb
 21865899b8ab9f475090fcc

Bug#511477: iceape: Shouldn't release with Lenny

2009-01-15 Thread Moritz Muehlenhoff
Rene Engelhard wrote:
> > Anyway, I can try to build OOo 2.4.1 using libxul...
> 
> That (with a build-dep fix) works. (But I of course won't upload that
> unless it 's decided that we *will* do the transition for lenny now...)

Let's wait on a comment from Alexander Sack on the feasibility
of moving the -dev package around.

However, keep it mind that it is very unlikele that the proposed solution
#3 comes into effect, so even if we stick to #2 it will still mean that
support for the remaining iceape-dev is less than optimal. As such,
linking against libxul is the technically preferred solution in any case.

Cheers,
Moritz



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging 511849

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Automatically generated email from bts, devscripts version 2.10.35lenny1
> tags 511849 + pending
Bug#511849: antlr: missing build-dependency java-gcj-compat-dev
Tags were: patch
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging 504050

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Automatically generated email from bts, devscripts version 2.10.35lenny1
> tags 504050 + pending
Bug#504050: cantlr: depends on nonexistent antlr-gcj (vs. libantlr-java-gcj)
Tags were: patch
Bug#504068: cantlr depends on antlr-gcj that doesn't exists. It should depends 
on libantlr-java-gcj
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511844: marked as done (CVE-2008-5262: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 19:17:04 +
with message-id 
and subject line Bug#511844: fixed in devil 1.7.5-3
has caused the Debian Bug report #511844,
regarding CVE-2008-5262: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511844: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511844
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: devil
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see http://secunia.com/secunia_research/2008-59/ for details.

Cheers,
Moritz

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=C, lc_ctype=de_de.iso-8859...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash


--- End Message ---
--- Begin Message ---
Source: devil
Source-Version: 1.7.5-3

We believe that the bug you reported is fixed in the latest version of
devil, which is due to be installed in the Debian FTP archive:

devil_1.7.5-3.diff.gz
  to pool/main/d/devil/devil_1.7.5-3.diff.gz
devil_1.7.5-3.dsc
  to pool/main/d/devil/devil_1.7.5-3.dsc
libdevil-dev_1.7.5-3_i386.deb
  to pool/main/d/devil/libdevil-dev_1.7.5-3_i386.deb
libdevil1c2_1.7.5-3_i386.deb
  to pool/main/d/devil/libdevil1c2_1.7.5-3_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 511...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bradley Smith  (supplier of updated devil package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 15 Jan 2009 18:50:11 +
Source: devil
Binary: libdevil1c2 libdevil-dev
Architecture: source i386
Version: 1.7.5-3
Distribution: unstable
Urgency: low
Maintainer: Bradley Smith 
Changed-By: Bradley Smith 
Description: 
 libdevil-dev - Cross-platform image loading and manipulation toolkit
 libdevil1c2 - Cross-platform image loading and manipulation toolkit
Closes: 511844
Changes: 
 devil (1.7.5-3) unstable; urgency=low
 .
   * 03_CVE-2008-5262.diff - Backport fix for CVE-2008-5262.
 Closes: #511844.
Checksums-Sha1: 
 b768bdc6598cbabdeb94d3b8ac178e11567b1ae1 1269 devil_1.7.5-3.dsc
 ae1ff3da1c4c4459544b998103883cf642746a73 13135 devil_1.7.5-3.diff.gz
 d1dfa48ed0de3620cddd828bae8caef087e80d15 225496 libdevil1c2_1.7.5-3_i386.deb
 ae7f642df0bc2ab13e44693453bfeeb8d28e3a64 267702 libdevil-dev_1.7.5-3_i386.deb
Checksums-Sha256: 
 4105736a5f217fe019aa930e50b52a4f437bc8def793f42913695e25be6b16f6 1269 
devil_1.7.5-3.dsc
 c437a1e968dc0ed7d19ce724d5effc7f1618cc01ef8de87d3d5c6765f2a4df96 13135 
devil_1.7.5-3.diff.gz
 ba5887cb706a97eab11d6cdbae26e70c42a925b96c5d3c9dd254bd1e00f3759b 225496 
libdevil1c2_1.7.5-3_i386.deb
 461d71c0413db84904748221cb394acc2046ccd1a025e4ad18daad70d70dcce1 267702 
libdevil-dev_1.7.5-3_i386.deb
Files: 
 7ff99460f9e552a02d52014c3857ee2c 1269 devel optional devil_1.7.5-3.dsc
 e1f5564a4cc62fce8cebfa5bc9eb97da 13135 devel optional devil_1.7.5-3.diff.gz
 a1f385610b4af80e4cd0615949d71088 225496 libs optional 
libdevil1c2_1.7.5-3_i386.deb
 3677e77c253d09fd7a4f8777a68d36ea 267702 libdevel optional 
libdevil-dev_1.7.5-3_i386.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklviQAACgkQj3BimscY00eRegCghGifrSrF2PTkIXx9OVQYnFPw
BEwAn00467iA257YtP4UtlnFN8UAJaN7
=KkUr
-END PGP SIGNATURE-


--- End Message ---


Bug#391935: [Pkg-xen-devel] Bug#391935: Bug #391935: Re: The answer from Citrix & Xen.org

2009-01-15 Thread Ian Jackson
Robert Millan writes ("Re: [Pkg-xen-devel] Bug#391935: Bug #391935: Re: The 
answer from Citrix & Xen.org"):
> This leads me to believe that, if we had kept using the non-free logo, our
> set of Debian-specific changes to the package would have been a non-issue,
> or at least a minor one.

I disagree.

The people responsible for these decisions in Ubuntu didn't worry
about the non-freeness of the logo.  Ubuntu would have been happy to
use the non-free logo.  When I was involved in the `negotiations' with
Mozilla, as a Canonical employee, the logo was not the issue.

Once again, I'm not able to give a fuller account of my experiences
here because I was an employee of Canonical at the time.

You'll just have to take my word for it.

Ian.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511941: openchange_1.0~svn991-1(hppa/experimental): FTBFS: dh_install: missing files, aborting

2009-01-15 Thread Frank Lichtenheld
Package: openchange
Version: 1.0~svn991-1
Severity: serious

Hi,

your package failed to build from source.

| Automatic build of openchange_1.0~svn991-1 on meitner by sbuild/hppa 98-farm
| Build started at 20090114-1329
| **
| Checking available source versions...
| Fetching source files...
| Reading package lists...
| Building dependency tree...
| Reading state information...
| Need to get 1186kB of source archives.
| Get:1 http://ftp2.de.debian.org experimental/main openchange 1.0~svn991-1 
(dsc) [1822B]
| Get:2 http://ftp2.de.debian.org experimental/main openchange 1.0~svn991-1 
(tar) [1180kB]
| Get:3 http://ftp2.de.debian.org experimental/main openchange 1.0~svn991-1 
(diff) [4346B]
| Fetched 1186kB in 2s (490kB/s)
| Download complete and in download only mode
| ** Using build dependencies supplied by package:
| Build-Depends: debhelper (>> 5.0.0), libparse-pidl-perl, libmagic-dev, 
libdcerpc-dev (>= 4.0.0~alpha5+20090105), libtalloc-dev, libldb-samba4-dev (>= 
4.0.0~alpha5+20090105), samba4-dev (>= 4.0.0~alpha5+20090105), 
libsamba-hostconfig-dev (>= 4.0.0~alpha5+20090105), flex, bison, libpopt-dev, 
libtorture-dev, doxygen, pkg-config
| Checking for already installed source dependencies...
[...]
| # No Python for now..
| rm -rf /build/buildd/openchange-1.0~svn991/debian/tmp/usr/lib/python*
| dh_install --sourcedir=debian/tmp --list-missing --fail-missing
| dh_install: debian/tmp/openchange/__init__.py exists in debian/tmp/ but is 
not installed to anywhere
| dh_install: debian/tmp/openchange/provision.py exists in debian/tmp/ but is 
not installed to anywhere
| dh_install: missing files, aborting
| make: *** [install] Error 1
| dpkg-buildpackage: failure: /usr/bin/fakeroot debian/rules binary-arch gave 
error exit status 2
| **
| Build finished at 20090114-1345
| FAILED [dpkg-buildpackage died]

Full build log(s): 
http://experimental.ftbfs.de/build.php?&ver=1.0~svn991-1&pkg=openchange&arch=hppa

Gruesse,
-- 
Frank Lichtenheld 
www: http://www.djpig.de/



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511942: octave3.1_3.1.51-2(sparc/experimental): FTBFS: error: invalid conversion

2009-01-15 Thread Frank Lichtenheld
Package: octave3.1
Version: 3.1.51-2
Severity: serious

Hi,

your package failed to build from source. Looks like #511075 from
octave3.0.

| Automatic build of octave3.1_3.1.51-2 on titan by sbuild/sparc 98-farm
| Build started at 20090114-0938
| **
| Checking available source versions...
| Fetching source files...
| Reading package lists...
| Building dependency tree...
| Need to get 12.3MB of source archives.
| Get:1 http://sinclair.farm.ftbfs.de experimental/main octave3.1 3.1.51-2 
(dsc) [1966B]
| Get:2 http://sinclair.farm.ftbfs.de experimental/main octave3.1 3.1.51-2 
(tar) [12.3MB]
| Get:3 http://sinclair.farm.ftbfs.de experimental/main octave3.1 3.1.51-2 
(diff) [63.7kB]
| Fetched 12.3MB in 8s (1401kB/s)
| Download complete and in download only mode
| ** Using build dependencies supplied by package:
| Build-Depends: g++-4.1 [arm], gcc-4.1 [arm], gfortran, debhelper (>= 6.0.7), 
autoconf, texinfo, texlive-latex-base, texlive-generic-recommended, 
libreadline5-dev, libncurses5-dev, gperf, libhdf5-serial-dev (>= 1.6.6) | 
libhdf5-lam-dev (>= 1.6.6) | libhdf5-mpich-dev (>= 1.6.6) | libhdf5-openmpi-dev 
(>= 1.6.6), libblas-dev, liblapack-dev, gnuplot-nox, libfftw3-dev, texi2html, 
less, dpatch, slice, libpcre3-dev, flex, libglpk-dev (>= 4.15), 
libsuitesparse-dev (>= 3.2.0), gawk, ghostscript, libcurl4-dev, libqhull-dev, 
desktop-file-utils, libfltk1.1-dev, libgl1-mesa-swx11-dev, libglu1-mesa-dev, 
libgraphicsmagick++1-dev
| Checking for already installed source dependencies...
[...]
| g++ -c  -fPIC -I. -I.. -I../liboctave -I../src -I../libcruft/misc  
-DHAVE_CONFIG_H  -Wall -W -Wshadow -Wold-style-cast -O2 -g CSparse.cc -o 
pic/CSparse.o
| CSparse.cc: In member function 'ComplexMatrix 
SparseComplexMatrix::fsolve(MatrixType&, const Matrix&, octave_idx_type&, 
double&, void (*)(double), bool) const':
| CSparse.cc:5593: error: invalid conversion from 'void (*)(int, const char*, 
int, const char*)' to 'void (*)(int, char*, int, char*)'
| CSparse.cc: In member function 'SparseComplexMatrix 
SparseComplexMatrix::fsolve(MatrixType&, const SparseMatrix&, octave_idx_type&, 
double&, void (*)(double), bool) const':
| CSparse.cc:5836: error: invalid conversion from 'void (*)(int, const char*, 
int, const char*)' to 'void (*)(int, char*, int, char*)'
| CSparse.cc: In member function 'ComplexMatrix 
SparseComplexMatrix::fsolve(MatrixType&, const ComplexMatrix&, 
octave_idx_type&, double&, void (*)(double), bool) const':
| CSparse.cc:6127: error: invalid conversion from 'void (*)(int, const char*, 
int, const char*)' to 'void (*)(int, char*, int, char*)'
| CSparse.cc: In member function 'SparseComplexMatrix 
SparseComplexMatrix::fsolve(MatrixType&, const SparseComplexMatrix&, 
octave_idx_type&, double&, void (*)(double), bool) const':
| CSparse.cc:6349: error: invalid conversion from 'void (*)(int, const char*, 
int, const char*)' to 'void (*)(int, char*, int, char*)'
| make[3]: *** [pic/CSparse.o] Error 1
| make[3]: Leaving directory `/build/buildd/octave3.1-3.1.51/liboctave'
| make[2]: *** [liboctave] Error 2
| make[2]: Leaving directory `/build/buildd/octave3.1-3.1.51'
| make[1]: *** [all] Error 2
| make[1]: Leaving directory `/build/buildd/octave3.1-3.1.51'
| make: *** [make-arch-stamp] Error 2
| dpkg-buildpackage: failure: /usr/bin/fakeroot debian/rules binary-arch gave 
error exit status 2
| **
| Build finished at 20090114-1017
| FAILED [dpkg-buildpackage died]

Full build log(s): 
http://experimental.ftbfs.de/build.php?&ver=3.1.51-2&pkg=octave3.1&arch=sparc

Gruesse,
-- 
Frank Lichtenheld 
www: http://www.djpig.de/



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#508938: Source changed between two revisions

2009-01-15 Thread Torsten Werner
Hi,

On Tue, Dec 23, 2008 at 10:17 AM, Torsten Werner
 wrote:
> jbossws-common - http://anonsvn.jboss.org/repos/jbossws/common/tags/
> jbossws-spi - http://anonsvn.jboss.org/repos/jbossws/spi/tags/
> jbossws-native - http://anonsvn.jboss.org/repos/jbossws/stack/native/tags/

it is easy to build jbossws-spi and jbossws-common but I've not
packaged them yet.

Cheers,
Torsten



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging 507865

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Automatically generated email from bts, devscripts version 2.10.35lenny1
> tags 507865 + pending
Bug#507865: openoffice.org-writer: OOo 2.4.x openinig OOo 3 files doesn't show 
text (2.x implements standard wrong)
Tags were: patch upstream
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#510972: marked as done (openjdk-6-jre: CVE-2008-5339 to -5360: Multiple security issues)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 20:48:29 +
with message-id 
and subject line Bug#510972: fixed in openjdk-6 6b11-9.1
has caused the Debian Bug report #510972,
regarding openjdk-6-jre: CVE-2008-5339 to -5360: Multiple security issues
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
510972: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510972
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: openjdk-6-jre
Version: 6b11-9
Severity: grave
Tags: security
Justification: user security hole


Hi,
the following CVE (Common Vulnerabilities & Exposures) ids have
been published for sun-java6 and likely affect openjdk-6, too:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5349
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5350
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360

If you fix the vulnerabilities please also make sure to include the
CVE ids in your changelog entry.


--- End Message ---
--- Begin Message ---
Source: openjdk-6
Source-Version: 6b11-9.1

We believe that the bug you reported is fixed in the latest version of
openjdk-6, which is due to be installed in the Debian FTP archive:

openjdk-6-dbg_6b11-9.1_amd64.deb
  to pool/main/o/openjdk-6/openjdk-6-dbg_6b11-9.1_amd64.deb
openjdk-6-demo_6b11-9.1_amd64.deb
  to pool/main/o/openjdk-6/openjdk-6-demo_6b11-9.1_amd64.deb
openjdk-6-doc_6b11-9.1_all.deb
  to pool/main/o/openjdk-6/openjdk-6-doc_6b11-9.1_all.deb
openjdk-6-jdk_6b11-9.1_amd64.deb
  to pool/main/o/openjdk-6/openjdk-6-jdk_6b11-9.1_amd64.deb
openjdk-6-jre-headless_6b11-9.1_amd64.deb
  to pool/main/o/openjdk-6/openjdk-6-jre-headless_6b11-9.1_amd64.deb
openjdk-6-jre-lib_6b11-9.1_all.deb
  to pool/main/o/openjdk-6/openjdk-6-jre-lib_6b11-9.1_all.deb
openjdk-6-jre_6b11-9.1_amd64.deb
  to pool/main/o/openjdk-6/openjdk-6-jre_6b11-9.1_amd64.deb
openjdk-6-source_6b11-9.1_all.deb
  to pool/main/o/openjdk-6/openjdk-6-source_6b11-9.1_all.deb
openjdk-6_6b11-9.1.diff.gz
  to pool/main/o/openjdk-6/openjdk-6_6b11-9.1.diff.gz
openjdk-6_6b11-9.1.dsc
  to pool/main/o/openjdk-6/openjdk-6_6b11-9.1.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 510...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bernhard R. Link  (supplier of updated openjdk-6 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 15 Jan 2009 19:25:04 CET
Source: openjdk-6
Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-jre-lib 
openjdk-6-demo openjdk-6-source openjdk-6-doc openjdk-6-dbg
Architecture: source amd64 all
Version: 6b11-9.1
Distribution: unstable
Urgency: low
Maintainer: OpenJDK Team 
Changed-By: Bernhard R. Link 
Description: 
 openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols)
 openjdk-6-demo - Java runtime based on OpenJDK (demos and examples)
 openjdk-6-doc - OpenJDK Development Kit (JDK) documentation
 openjdk-6-jdk - OpenJDK Development Kit (JDK)
 openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name}
 openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless)
 openjdk-6-jre-lib - OpenJDK Java runtime (architecture independent 

Bug#391935: [Pkg-xen-devel] Bug#391935: Bug #391935: Re: The answer from Citrix & Xen.org

2009-01-15 Thread Robert Millan
On Thu, Jan 15, 2009 at 07:45:07PM +, Ian Jackson wrote:
> Robert Millan writes ("Re: [Pkg-xen-devel] Bug#391935: Bug #391935: Re: The 
> answer from Citrix & Xen.org"):
> > This leads me to believe that, if we had kept using the non-free logo, our
> > set of Debian-specific changes to the package would have been a non-issue,
> > or at least a minor one.
> 
> I disagree.
> 
> The people responsible for these decisions in Ubuntu didn't worry
> about the non-freeness of the logo.  Ubuntu would have been happy to
> use the non-free logo.  When I was involved in the `negotiations' with
> Mozilla, as a Canonical employee, the logo was not the issue.

Which explains why those negotiations were succesful.

-- 
Robert Millan

  The DRM opt-in fallacy: "Your data belongs to us. We will decide when (and
  how) you may access your data; but nobody's threatening your freedom: we
  still allow you to remove your data and not access it at all."



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Lowering the severity or this bug?

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 505065 normal
Bug#505065: squid will not start
Severity set to `normal' from `grave'

> tags 505065 + unreproducible
Bug#505065: squid will not start
Tags were: moreinfo
Tags added: unreproducible

> retitle 505065 Squid does not start (epoll_create and tproxy issues)
Bug#505065: squid will not start
Changed Bug title to `Squid does not start (epoll_create and tproxy issues)' 
from `squid will not start'.

> stop
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#505065: Lowering the severity or this bug?

2009-01-15 Thread Christian Hammers
severity 505065 normal
tags 505065 + unreproducible
retitle 505065 Squid does not start (epoll_create and tproxy issues)
stop


Hello

Based on the comments I made on Sat, 10 Jan 2009 and which were not
objected I hope that nobody feels offended if I am so free to lower
our Lenny RC bug count by setting this ones severity to normal.
Additionally I tag it unreproducible to encourage people to send in
their logfiles if the encounter similar problems.

Please note that there seem to be two issues mixed in this report,
the epoll_create issue has been fixed pre-lenny and there's just
the "tproxy" report left.

bye,

-christian-



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#436289: marked as done (libphp-jpgraph: succeed to install on lenny with php5, but not compatible with php5)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 22:32:05 +
with message-id 
and subject line Bug#436289: fixed in libphp-jpgraph 1.5.2-11+u1
has caused the Debian Bug report #436289,
regarding libphp-jpgraph: succeed to install on lenny with php5, but not 
compatible with php5
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
436289: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436289
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libphp-jpgraph
Version: 1.5.2-11
Severity: important

As stated on jpgraph website, "Note: The 1.x series is only for PHP4. It will 
not work on PHP5."
On my etch server, libphp-jpgraph requires downgrade to php4, but on my lenny 
laptop, it installed without complaining.
But it doesn't work.
We need to install jpgraph 2.x with php5, or 1.x with php4.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'testing'), (500, 
'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-2-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libphp-jpgraph depends on:
ii  libapache2-mod-php5   5.2.3-1+b1 server-side, HTML-embedded scripti
ii  php5-gd   5.2.3-1+b1 GD module for php5

libphp-jpgraph recommends no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: libphp-jpgraph
Source-Version: 1.5.2-11+u1

We believe that the bug you reported is fixed in the latest version of
libphp-jpgraph, which is due to be installed in the Debian FTP archive:

libphp-jpgraph-examples_1.5.2-11+u1_all.deb
  to pool/main/libp/libphp-jpgraph/libphp-jpgraph-examples_1.5.2-11+u1_all.deb
libphp-jpgraph_1.5.2-11+u1.diff.gz
  to pool/main/libp/libphp-jpgraph/libphp-jpgraph_1.5.2-11+u1.diff.gz
libphp-jpgraph_1.5.2-11+u1.dsc
  to pool/main/libp/libphp-jpgraph/libphp-jpgraph_1.5.2-11+u1.dsc
libphp-jpgraph_1.5.2-11+u1_all.deb
  to pool/main/libp/libphp-jpgraph/libphp-jpgraph_1.5.2-11+u1_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 436...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christian Hammers  (supplier of updated libphp-jpgraph package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Sat, 10 Jan 2009 00:10:30 +0100
Source: libphp-jpgraph
Binary: libphp-jpgraph libphp-jpgraph-examples
Architecture: source all
Version: 1.5.2-11+u1
Distribution: unstable
Urgency: low
Maintainer: Christian Hammers 
Changed-By: Christian Hammers 
Description: 
 libphp-jpgraph - Object oriented graph library for php4
 libphp-jpgraph-examples - Object oriented graph library for php4 (examples)
Closes: 436289
Changes: 
 libphp-jpgraph (1.5.2-11+u1) unstable; urgency=low
 .
   * Non-maintainer upload.
   * Applied patch that prevented PHP5 compile time generated warning
 "Non-static method called statically" to appear on screen and corrupts
 the output of graphics. The usual error_reporting and display_errors
 had no effect as a custom error handler was installed by the library.
 Closes: #436289
Checksums-Sha1: 
 01151ed3983b57b18755e9cca1f780aa5a9d0284 1039 libphp-jpgraph_1.5.2-11+u1.dsc
 2af5d7adf3b39a87e1b3e3939b2390b6b2edad24 7696 
libphp-jpgraph_1.5.2-11+u1.diff.gz
 b8a6317f5da66300585d5af30aafee8329368647 93222 
libphp-jpgraph_1.5.2-11+u1_all.deb
 37ee89d2386957913dc34c23f8d59830d5a5d767 97512 
libphp-jpgraph-examples_1.5.2-11+u1_all.deb
Checksums-Sha256: 
 56120eb1773faf2c993e0b7dc681b435caa424a852baa6a4276a6f30b0804d07 1039 
libphp-jpgraph_1.5.2-11+u1.dsc
 6d0e6f409a22647cc10a4187bea4b21adf88e09fd7d03c870500640237806878 7696 
libphp-jpgraph_1.5.2-11+u1.diff.gz
 e61afe42aa34c374459111cbeb6af3761516f126dabdcf83a8e16318593a4d57 93222 
libphp-jpgraph_1.5.2-11+u1_all.deb
 17c646152f09443332e6dbf21e5631a9c1fd7911421ddd980f04131624903e86 97512 
libphp-jpgraph-examples_1.5.2-11+u1_all.deb
Files: 
 2f23e000ed8af3349de7e139384069d3 1039 web optional 
libphp-jpgraph_1.5.2-11+u1.dsc
 512a2337d6f044e4c0dc763b769e0e5d 7696 web optional 
libphp-jpgraph_1.5.2-11+u1.diff.gz
 a2a438d5ab3b0ecdac35268b252ff759 93222 web optional 

Bug#511966: missing dependency: libmono-i18n2.0-cil

2009-01-15 Thread Sam Hocevar
Package: gnome-subtitles
Version: 0.7.2-1
Severity: grave

   gnome-subtitles does not work at all if libmono-i18n2.0-cil is not
installed on the system: any attempt at loading a file results in the
message "The specified file is invalid."

   See https://bugs.launchpad.net/ubuntu/+source/gnome-subtitles/+bug/208871
for a similar problem on Ubuntu.

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.28 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnome-subtitles depends on:
ii  gconf2  2.24.0-4 GNOME configuration database syste
ii  gnome-sharp22.20.1-1 GNOME# 2.20 suite, CLI bindings fo
ii  gtk-sharp2  2.12.1-2 GTK# 2.10 suite, CLI bindings for 
ii  libc6   2.9-0exp1GNU C Library: Shared libraries
ii  libglade2.0-cil 2.12.1-2 CLI binding for the Glade librarie
ii  libglib2.0-02.18.3-1 The GLib library of C routines
ii  libgstreamer-plugins-base0. 0.10.20-1GStreamer libraries from the "base
ii  libgstreamer0.10-0  0.10.20-1Core GStreamer libraries and eleme
ii  libmono-corlib2.0-cil   1.9.1+dfsg-5 Mono core library (2.0)
ii  libmono-system2.0-cil   1.9.1+dfsg-5 Mono System libraries (2.0)
ii  libmono2.0-cil  1.9.1+dfsg-5 Mono libraries (2.0)

gnome-subtitles recommends no packages.

gnome-subtitles suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Bug considered cosmetic only (until proved otherwise)

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 511897 minor
Bug#511897: sugar: Package should depend on gstreamer0.10-alsa
Severity set to `minor' from `serious'

> tags 511897 moreinfo
Bug#511897: sugar: Package should depend on gstreamer0.10-alsa
There were no tags set.
Tags added: moreinfo

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511897: Bug considered cosmetic only (until proved otherwise)

2009-01-15 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

severity 511897 minor
tags 511897 moreinfo
thanks

Until more information on how gstreamer alsa driver can miss out on a 
Debian system, I consider this a minor issue only: Techically 
recommending that package directly _is_ needed, but in reality it 
currently causes no harm that I am aware of.


  - Jonas

P.S.

Please beware when sending email to cont...@bugs.debian.org to also send 
to the bugreport itself. :-)

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklvv3QACgkQn7DbMsAkQLhL0QCghnfKYqWK3YdXEf7mCCCzjr+a
EQ0AniR/DydrQAXw/rFWJNRxBueWyj2T
=NnUv
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#510432: imapproxy

2009-01-15 Thread Christian Hammers
Hello

Any progress with this Release Critical bug?

bye,

-christian- 



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511843: marked as done (bibleref: Please update to newer version, relicensed under DFSG-free license)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Thu, 15 Jan 2009 23:48:47 +
with message-id 
and subject line Bug#511843: fixed in texlive-extra 2007.dfsg.15-1
has caused the Debian Bug report #511843,
regarding bibleref: Please update to newer version, relicensed under DFSG-free 
license
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511843: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511843
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: texlive-humanities
Version: 2007.dfsg.14-1
Severity: serious

Jan Hauke Rahm  wrote:

Thanks for reporting!

> Hmm, it's kind of sarcastic that working with the bible could be
> non-free, isn't it?
>
> $grep -A 4 modify /usr/share/texmf-texlive/tex/latex/bibleref/bibleref.sty
>
> %% If you modify this file, you must change its name first.
> %% You are NOT ALLOWED to distribute this file alone. You are NOT
> %% ALLOWED to take money for the distribution or use of either this
> %% file or a changed version, except for a nominal charge for copying
> %% etc.

The version in TeXLive has indeed a non-free license text. Meanwhile,
upstream has relicensed the package under the LPPL 1.3, but AFAICS this
only applies to the new version.

Regards, Frank
-- 
Frank Küster
Debian Developer (TeXLive)
VCD Aschaffenburg-Miltenberg, ADFC Miltenberg
B90/Grüne KV Miltenberg


--- End Message ---
--- Begin Message ---
Source: texlive-extra
Source-Version: 2007.dfsg.15-1

We believe that the bug you reported is fixed in the latest version of
texlive-extra, which is due to be installed in the Debian FTP archive:

texlive-bibtex-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-bibtex-extra_2007.dfsg.15-1_all.deb
texlive-extra_2007.dfsg.15-1.diff.gz
  to pool/main/t/texlive-extra/texlive-extra_2007.dfsg.15-1.diff.gz
texlive-extra_2007.dfsg.15-1.dsc
  to pool/main/t/texlive-extra/texlive-extra_2007.dfsg.15-1.dsc
texlive-extra_2007.dfsg.15.orig.tar.gz
  to pool/main/t/texlive-extra/texlive-extra_2007.dfsg.15.orig.tar.gz
texlive-fonts-extra-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-fonts-extra-doc_2007.dfsg.15-1_all.deb
texlive-fonts-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-fonts-extra_2007.dfsg.15-1_all.deb
texlive-formats-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-formats-extra_2007.dfsg.15-1_all.deb
texlive-games_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-games_2007.dfsg.15-1_all.deb
texlive-generic-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-generic-extra_2007.dfsg.15-1_all.deb
texlive-humanities-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-humanities-doc_2007.dfsg.15-1_all.deb
texlive-humanities_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-humanities_2007.dfsg.15-1_all.deb
texlive-latex-extra-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-latex-extra-doc_2007.dfsg.15-1_all.deb
texlive-latex-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-latex-extra_2007.dfsg.15-1_all.deb
texlive-latex3_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-latex3_2007.dfsg.15-1_all.deb
texlive-math-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-math-extra_2007.dfsg.15-1_all.deb
texlive-plain-extra_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-plain-extra_2007.dfsg.15-1_all.deb
texlive-pstricks-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-pstricks-doc_2007.dfsg.15-1_all.deb
texlive-pstricks_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-pstricks_2007.dfsg.15-1_all.deb
texlive-publishers-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-publishers-doc_2007.dfsg.15-1_all.deb
texlive-publishers_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-publishers_2007.dfsg.15-1_all.deb
texlive-science-doc_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-science-doc_2007.dfsg.15-1_all.deb
texlive-science_2007.dfsg.15-1_all.deb
  to pool/main/t/texlive-extra/texlive-science_2007.dfsg.15-1_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 511...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Norbert Preining  (supplier of updated texlive-extra 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with

Processed: retitle 509292 to rsyslog: random crashes on multi core machines

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> retitle 509292 rsyslog: random crashes on multi core machines
Bug#509292: rsyslog: random crashes with remote logging
Changed Bug title to `rsyslog: random crashes on multi core machines' from 
`rsyslog: random crashes with remote logging'.

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#511737: marked as done (openvas-server dependency problem)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Fri, 16 Jan 2009 01:02:09 +
with message-id 
and subject line Bug#511737: fixed in openvas-server 2.0.0-2
has caused the Debian Bug report #511737,
regarding openvas-server dependency problem
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
511737: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511737
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: openvas-server
Version: 2.0.0-1
Severity: grave
Justification: renders package unusable

It's impossible to install openvas-server because openvas-plugins can't be 
found.

#aptitude install openvas-plugins
Lecture des listes de paquets... Fait
Construction de l'arbre des dépendances   
Lecture des informations d'état... Fait
Lecture de l'information d'état étendu  
Initialisation de l'état des paquets... Fait
Lecture des descriptions de tâches... Fait  
Pas de version candidate trouvée pour openvas-plugins
Pas de version candidate trouvée pour openvas-plugins
Les paquets suivants sont CASSÉS : 
  openvas-server 
  0 paquets mis à jour, 0 nouvellement installés, 0 à enlever et 0 non mis à 
jour.
  Il est nécessaire de télécharger 0o d'archives. Après dépaquetage, 0o seront 
utilisés.
  Les paquets suivants ont des dépendances non satisfaites :
openvas-server: Dépend: openvas-plugins qui est un paquet virtuel
Les actions suivantes permettront de résoudre ces dépendances :

Supprimer les paquets suivants :
openvas-server

Le score est de 119

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openvas-server depends on:
ii  debconf [debconf-2.0] 1.5.24 Debian configuration management sy
ii  libc6 2.7-18 GNU C Library: Shared libraries
ii  libgcrypt11   1.4.1-2LGPL Crypto library - runtime libr
ii  libglib2.0-0  2.16.6-1   The GLib library of C routines
ii  libgnutls26   2.4.2-4the GNU TLS library - runtime libr
ii  libgpg-error0 1.4-2  library for common error values an
ii  libgpgme111.1.8-2GPGME - GnuPG Made Easy
ii  libopenvas1   2.0.0-1OpenVAS shared libraries
ii  libopenvasnasl1   2.0.0-1OpenVAS shared libraries
ii  libpcap0.80.9.8-5system interface for user-level pa
ii  libwrap0  7.6.q-16   Wietse Venema's TCP wrappers libra
pn  openvas-plugins(no description available)

openvas-server recommends no packages.

Versions of packages openvas-server suggests:
ii  openvas-client2.0.1-1Remote network security auditor, t

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: openvas-server
Source-Version: 2.0.0-2

We believe that the bug you reported is fixed in the latest version of
openvas-server, which is due to be installed in the Debian FTP archive:

openvas-server-dev_2.0.0-2_i386.deb
  to pool/main/o/openvas-server/openvas-server-dev_2.0.0-2_i386.deb
openvas-server_2.0.0-2.diff.gz
  to pool/main/o/openvas-server/openvas-server_2.0.0-2.diff.gz
openvas-server_2.0.0-2.dsc
  to pool/main/o/openvas-server/openvas-server_2.0.0-2.dsc
openvas-server_2.0.0-2_i386.deb
  to pool/main/o/openvas-server/openvas-server_2.0.0-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 511...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Javier Fernandez-Sanguino Pen~a  (supplier of updated 
openvas-server package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Sun, 04 Jan 2009 13:13:21 +0100
Source: openvas-server
Binary: openvas-server openvas-server-dev
Architecture: source i386
Version: 2.0.0-2
Distribution: unstable
Urgency: low
Maintainer: Debian OpenVAS Maintainers 
Changed-By: Javier Fernandez-Sanguino Pen~a 
Description: 
 openvas-server - Remote network security auditor, the server
 openvas-server-dev - OpenVAS server static libraries and head

Processed: setting package to xdmx-tools xvfb xnest xserver-xorg-core xserver-xfbdev xserver-xorg-core-dbg xserver-xorg-dev xdmx xorg-server xserver-common xserver-xephyr ...

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> #xorg-server (2:1.5.99.901-1) UNRELEASED; urgency=low
> #
> #  * Ditch the GLX Public License and the CID Font Code Public License from
> #debian/copyright.  The CID code has been removed a while ago, and all 
> code
> #under the GLXPL has been relicensed to the SGI Free Software License B 
> 2.0.
> #This finally closes: #211765.
> #
> package xdmx-tools xvfb xnest xserver-xorg-core xserver-xfbdev 
> xserver-xorg-core-dbg xserver-xorg-dev xdmx xorg-server xserver-common 
> xserver-xephyr
Ignoring bugs not assigned to: xdmx-tools xvfb xserver-xorg-core xnest 
xserver-xfbdev xserver-xorg-core-dbg xserver-xorg-dev xdmx xorg-server 
xserver-xephyr xserver-common

> tags 211765 + pending
Bug#211765: xorg-server: material under GLX Public License is not DFSG-free
Tags were: fixed-upstream lenny-ignore help upstream etch-ignore sarge-ignore
Bug#368564: xorg-server: material under GLX Public License is not DFSG-free
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: r2588 - octave/trunk/debian

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 511942 pending
Bug#511942: octave3.1_3.1.51-2(sparc/experimental): FTBFS: error: invalid 
conversion
There were no tags set.
Tags added: pending

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: tagging as pending bugs that are closed by packages in NEW

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # Fri Jan 16 07:03:23 UTC 2009
> # Tagging as pending bugs that are closed by packages in NEW
> # http://ftp-master.debian.org/new.html
> #
> # Source package in NEW: openvas-libraries
> tags 511627 + pending
Bug#511627: openvas-libraries: FTBFS
There were no tags set.
Tags added: pending

>
End of message, stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#368559: marked as done (x11-proto-gl: material under GLX Public License is not DFSG-free)

2009-01-15 Thread Debian Bug Tracking System

Your message dated Fri, 16 Jan 2009 08:16:49 +0100
with message-id <1232090209.13241.20.ca...@radis.liafa.jussieu.fr>
and subject line Re: Bug#368559: GLX-covered files now free software
has caused the Debian Bug report #368559,
regarding x11-proto-gl: material under GLX Public License is not DFSG-free
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
368559: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368559
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: xfree86
Version: 4.2.1-6
Severity: serious

The following sections of the debian/copyright file for xfree86:

  2.4  GLX Public License
  2.5  CID Font Code Public License

contain clauses which debian-legal has found to be non-free according
to the DFSG - see thread starting at
http://lists.debian.org/debian-legal/2003/debian-legal-200309/msg00723.html

Code covered by these licenses need to be relicensed or removed from
Debian's distribution of XFree86.

The licence

  "SGI FREE SOFTWARE LICENCE B"

which is found in the copyright file for version 4.2.1-11, also
contains a non-free clause (discussed in the same thread). Since only
the Debian revision differs, I suppose that whatever code that is
covered by will also be present in 4.2.1-6.

Since the BTS wants a version, I give the one curtrently in sarge
(which is where we need most urgently to keep track of
release-critical issues), but the ones in woody and sid, plus the
expermental 4.3.0 packages, all look to be affected too.

-- 
Henning Makholm"*Vi vil ha wienerbrød!*"

--- End Message ---
--- Begin Message ---
On Wed, 2009-01-14 at 16:18 -0500, Brett Smith wrote:
> The files discussed in this bug are now free software.  You can find
> details in the recent discussion in #211765.

Closing the bug accordingly. (As far as I can see in git there have been
no changes to glxint.h since 2004, so the relicensing should apply to
everything in the archive, thus not closing in a particular version.)

Cheers,
Julien

--- End Message ---


Bug#511900: [php-maint] Bug#511900: php5: Compiling pdo_oci extension fails with "Cannot find php_pdo_driver.h."

2009-01-15 Thread sean finney
severity 511900 important
tags 511900 -patch
thanks

hi cassiano,

On Thu, Jan 15, 2009 at 11:56:25AM -0200, Cassiano Leal wrote:
> Severity: serious
> Justification: no longer builds from source

> Trying to build pdo_oci from php5 sources fails with the message below:

i don't think this justification applies if the thing failing to build is not
the package itself, or one of its packaged dependencies.  therefore i'm
lowering the severity until i'm convinced otherwise.  others on the team
can override me if they feel differently.

pdo_oci is not packaged/enabled in anything in debian as far as i know.  that
doesn't mean we don't want to help fix it, but it should be viewed as a "best 
effort" process.  

maybe someone else on the list has more experience working with the
pdo_oci driver and can take a look?

> checking for PDO includes... checking for PDO includes...
> configure: error: Cannot find php_pdo_driver.h.
> make: *** [configure-stamp-v5] Error 1
> 
> The following patch solves the problem (has to be applied after
> phpizing the source):
> 
> *** configure   2009-01-15 11:41:34.0 -0200
> --- configure.new   2009-01-15 11:43:35.0 -0200

a couple points:
- we don't accept patches against configure, because we regenerate this
  file as part of the build process.  instead please patch the configure.in
  or the m4 files used to generate configure.
- unified diff format, please

in addition i'm a bit confused with the goal of this patch:

> ! elif test -f $prefix/include/php/ext/pdo/php_pdo_driver.h; then
> !   pdo_inc_path=$prefix/include/php/ext

/usr/include/php doesn't exist...


sean

-- 


signature.asc
Description: Digital signature


Processed: Re: [php-maint] Bug#511900: php5: Compiling pdo_oci extension fails with "Cannot find php_pdo_driver.h."

2009-01-15 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 511900 important
Bug#511900: php5: Compiling pdo_oci extension fails with "Cannot find  
php_pdo_driver.h."
Severity set to `important' from `serious'

> tags 511900 -patch
Bug#511900: php5: Compiling pdo_oci extension fails with "Cannot find  
php_pdo_driver.h."
Tags were: patch
Tags removed: patch

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org