Processed: Re: Bug#584026: printconf: Security bugs in ghostscript

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 reopen 584026
Bug #584026 {Done: Chris Lawrence lawre...@debian.org} [printconf] printconf: 
Security bugs in ghostscript
 reassign 584026 foomatic-filters
Bug #584026 [printconf] printconf: Security bugs in ghostscript
Bug reassigned from package 'printconf' to 'foomatic-filters'.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
584026: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584026
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584061: recoll: Security bugs in ghostscript

2010-06-01 Thread Giuseppe Iuculano
On 01/06/10 05:55, paul.sz...@sydney.edu.au wrote:
 Dear Kartik,
 
  I don't think this bug is correct for recoll. recoll only 'suggests'
  ghostscript and don't use code from ghostscript. Filing bug at 'gs
  package seems right. 

I'm slightly puzzled by your mass-bug filing. Why you opened bugs for
packages that suggest ghostscript...?

Cheers,
Giuseppe.



signature.asc
Description: OpenPGP digital signature


Bug#584061: recoll: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Giuseppe,

 I'm slightly puzzled by your mass-bug filing. Why you opened bugs for
 packages that suggest ghostscript...?

I was not sure what relationship is implied by suggest. It turns out
that even depends on (or my parsing of the Packages file?) was not so
good, I hit printconf instead of foomatic-filters apparently.

But in essence, because I was asked to do so: please see
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183#42
and thereabouts.

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#581999: marked as done (fails to install)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 06:32:12 +
with message-id e1ojl1i-0002ub...@ries.debian.org
and subject line Bug#581999: fixed in rinputd 1.0.3-3
has caused the Debian Bug report #581999,
regarding fails to install
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
581999: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581999
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: rinputd
Version: 1.0.3-2
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts piuparts.d.o

Hi, 

during a test with piuparts I noticed your package failed to install. I had to 
kill dpkg manually. 

From the attached log (scroll to the bottom...):

  Unpacking rinputd (from .../rinputd_1.0.3-2_amd64.deb) ...
  Setting up rinputd (1.0.3-2) ...
  dpkg: error processing rinputd (--configure):
   subprocess installed post-installation script returned error exit status 
128
  Errors were encountered while processing:
   rinputd
  E: Sub-process /usr/bin/dpkg returned an error code (1)

Note that this test was done in a chroot. This might be relevant for debugging 
the cause, but not for the bug severity.


cheers,
Holger
Start: 2010-05-16 15:46:28 UTC

Package: rinputd
Priority: optional
Section: net
Installed-Size: 176
Maintainer: Chase Douglas chase.doug...@ubuntu.com
Architecture: amd64
Version: 1.0.3-2
Depends: sasl2-bin, libavahi-client3 (= 0.6.16), libavahi-common3 (= 0.6.16), libavahi-qt4-1 (= 0.6.16), libc6 (= 2.2.5), libgcc1 (= 1:4.1.1), libqt4-network (= 4:4.5.3), libqtcore4 (= 4:4.6.1), libsasl2-2, libstdc++6 (= 4.1.1), debconf (= 0.5) | debconf-2.0
Conflicts: rinputd
Filename: pool/main/r/rinputd/rinputd_1.0.3-2_amd64.deb
Size: 34080
MD5sum: 38b16d6477e782c6ac4dd5f796bbc1cf
SHA1: 3e0f48576077c95275bc88928f4058294a2e8ddf
SHA256: 62e1b31a5995c51c6bf5f54e0ba949f0a0dc76c2f4fe07c3226080796e2cf411
Description: A server daemon for receiving user input events
 rinputd is a server daemon which listens for remote input clients. Clients
 connect over a secure SSL socket and authenticate with the server through the
 Cyrus SASL password database /etc/sasldb2. The client may then initialize an
 input device through the uinput user input event interface. After
 initialization, the client may send input events such as key presses or mouse
 movements.
Homepage: https://launchpad.net/rinput

Executing: sudo /org/piuparts.debian.org/sbin/piuparts --warn-symlinks --warn-on-others --warn-on-leftovers-after-purge --scriptsdir /etc/piuparts/scripts/ --tmpdir /org/piuparts.debian.org/tmp -ad squeeze -b squeeze.tar.gz --mirror http://piatti.debian.org/debian/ rinputd
Guessed: debian
0m0.0s INFO: --
0m0.0s INFO: To quickly glance what went wrong, scroll down to the bottom of this logfile.
0m0.0s INFO: FAQ available at http://wiki.debian.org/piuparts/FAQ
0m0.0s INFO: --
0m0.0s INFO: piuparts version 0.39~201005161141 starting up.
0m0.0s INFO: Command line arguments: /org/piuparts.debian.org/sbin/piuparts --warn-symlinks --warn-on-others --warn-on-leftovers-after-purge --scriptsdir /etc/piuparts/scripts/ --tmpdir /org/piuparts.debian.org/tmp -ad squeeze -b squeeze.tar.gz --mirror http://piatti.debian.org/debian/ rinputd
0m0.0s INFO: Running on: Linux piatti 2.6.32.13-dsa-amd64 #1 SMP Fri May 14 10:29:18 CEST 2010 x86_64
0m0.0s DEBUG: Created temporary directory /org/piuparts.debian.org/tmp/tmpb7UWb_
0m0.0s DEBUG: Unpacking squeeze.tar.gz into /org/piuparts.debian.org/tmp/tmpb7UWb_
0m0.0s DEBUG: Starting command: ['tar', '-C', '/org/piuparts.debian.org/tmp/tmpb7UWb_', '-zxf', 'squeeze.tar.gz']
0m1.8s DEBUG: Command ok: ['tar', '-C', '/org/piuparts.debian.org/tmp/tmpb7UWb_', '-zxf', 'squeeze.tar.gz']
0m1.8s DEBUG: Created policy-rc.d and chmodded it.
0m1.8s DEBUG: Starting command: ['chroot', '/org/piuparts.debian.org/tmp/tmpb7UWb_', 'apt-get', 'update']
0m1.9s DUMP: 
  Hit http://piatti.debian.org squeeze Release.gpg
  Hit http://piatti.debian.org squeeze Release
  Ign http://piatti.debian.org squeeze/main Packages/DiffIndex
  Ign http://piatti.debian.org squeeze/contrib Packages/DiffIndex
  Ign http://piatti.debian.org squeeze/non-free Packages/DiffIndex
  Hit http://piatti.debian.org squeeze/main Packages
  Hit http://piatti.debian.org squeeze/contrib Packages
  Hit http://piatti.debian.org squeeze/non-free Packages
  Reading package lists...
0m1.9s DEBUG: Command ok: ['chroot', '/org/piuparts.debian.org/tmp/tmpb7UWb_', 'apt-get', 'update']
0m1.9s 

Bug#542657: fixed in openswan 1:2.6.23+dfsg-1

2010-06-01 Thread Holger Levsen
Hi,

On Dienstag, 1. Juni 2010, Harald Jenny wrote:
 source Closes: 389680 532348 575757 583334
 Changes:
  openswan (1:2.6.26+dfsg-1) unstable; urgency=low
  .
[Harald Jenny]
* New upstream release.
* Removed some obsoleted patches.
* Modified some patches for new upstream version.
* Added preinstall script to remove old duplicate init script.
  Closes: #532348: openswan: installs dupliate init script
 /etc/init.d/setup * Added patch to fix segfault of showhostkey with
 encrypted key (Thanks to Kevin Locke for his patch).
  Closes: #575757: openswan: showhostkey segfault with 3DES-encrypted
 host key
* Changes debian/rules to only omit permission fixing where it's really
  necessary.
  Closes: #389680: openswan: wrong permissions of /etc/ipsec.d/examples
* Removed orphaned conflict with freeswan (not shipped anymore).
  .
[Rene Mayrhofer]
* Openswan package now provides ike-server and conflicts with it.
  Closes: #583334: racoon and openswan: error when trying to install
   together

I fail to see how this upload closed #542657 - please explain. (To the bug, 
not really to me :-)


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#583763: Re : newlib-mingw32: Uninstallable package: dirent.h also in mingw32-runtime

2010-06-01 Thread Jerome Robert
Ok I missed this bug:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542269

I guess that from now I will have to build newlib-minw32 from newlib-source and 
gcc-mingw32 :-( and that newlib-mingw32 should be removed from Debian.

 - Message d'origine -
 De : Jerome Robert
 Envoyés : 30.05.10 15:44
 À : Debian Bug Tracking System
 Objet : newlib-mingw32: Uninstallable package: dirent.h also in 
 mingw32-runtime
 
 Package: newlib-mingw32
 Version: 1.17.0-3
 Justification: Policy 7.6.1
 Severity: serious
 
 When trying to install newlib-mingw32:
 
 Unpacking newlib-mingw32 (from .../newlib-mingw32_1.17.0-3_all.deb) ...
 dpkg: error processing
 /var/cache/apt/archives/newlib-mingw32_1.17.0-3_all.deb
 (--unpack):
 trying to overwrite '/usr/i586-mingw32msvc/include/dirent.h', which is
 also in
 package mingw32-runtime 3.13-1
 dpkg-deb: subprocess paste killed by signal (Broken pipe)
 Errors were encountered while processing:
 /var/cache/apt/archives/newlib-mingw32_1.17.0-3_all.deb
 E: Sub-process /usr/bin/dpkg returned an error code (1)
 
 
 
 -- System Information:
 Debian Release: squeeze/sid
 APT prefers unstable
 APT policy: (900, 'unstable'), (800, 'testing')
 Architecture: i386 (i686)
 
 Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
 Locale: lang=fr...@euro, lc_ctype=fr...@euro (charmap=ISO-8859-15)
 Shell: /bin/sh linked to /bin/dash
 
 newlib-mingw32 depends on no packages.
 
 Versions of packages newlib-mingw32 recommends:
 ii gcc-mingw32 [mingw32] 4.4.4-0.1 The GNU Compiler Collection
 (cross
 
 newlib-mingw32 suggests no packages.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584026: printconf: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Chris,

I now see what tripped me up: in my Packages file, printconf depends on
ghostscript, but foomatic-filters doesn't. Maybe that could be fixed?

Thanks, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: tagging 584009

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 584009 + pending
Bug #584009 [hevea] hevea: Security bugs in ghostscript
Added tag(s) pending.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
584009: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584009
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#582410: libgtk2-perl: FTBFS on mips: Failed test 'callbacks encountered'

2010-06-01 Thread Niko Tyni
On Thu, May 20, 2010 at 06:57:26PM +0300, Niko Tyni wrote:
 Package: libgtk2-perl
 Version: 1:1.221-6
 Severity: serious
 
 This package is not migrating to testing because it failed to build
 on mips.
 
   #   Failed test 'callbacks encountered'
   #   at t/GtkCellRenderer.t line 228.
   # Structures begin differing at:
   #  $got-[2] = 'size'
   # $expected-[2] = 'render'
   # Looks like you failed 1 test of 20.
   t/GtkCellRenderer.t  
   Dubious, test returned 1 (wstat 256, 0x100)
   Failed 1/20 subtests 

This is reproducible on gabrielli.d.o.

It's something of a heisenbug: running with the perl debugger 
('perl -d -Iblib/lib -Iblib/arch t/GtkCellRenderer.t') fails the first time,
but after a restart ('R') the tests pass.

The callback that doesn't get called is gtk2perl_cell_renderer_render(),
in xs/GtkCellRenderer.xs.

The class callbacks get initialized properly in
gtk2perl_cell_renderer_class_init(), but gtk+ never calls the renderer
one.

It would be somewhat interesting to eliminate xvfb from the loop, but
I can't seem to get an X11 connection to gabrielli.

Unfortunately I won't have the time to look further into this in the
next few weeks.  Hope this note helps somebody else a bit.

There's 1.222 available upstream, but looking at the changes, I very
much doubt it fixes this.
-- 
Niko Tyni   nt...@debian.org



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#542657: fixed in openswan 1:2.6.23+dfsg-1

2010-06-01 Thread Harald Jenny
On Tue, Jun 01, 2010 at 09:27:55AM +0200, Holger Levsen wrote:
 Hi,
 
 On Dienstag, 1. Juni 2010, Harald Jenny wrote:
  source Closes: 389680 532348 575757 583334
  Changes:
   openswan (1:2.6.26+dfsg-1) unstable; urgency=low
   .
 [Harald Jenny]
 * New upstream release.
 * Removed some obsoleted patches.
 * Modified some patches for new upstream version.
 * Added preinstall script to remove old duplicate init script.
   Closes: #532348: openswan: installs dupliate init script
  /etc/init.d/setup * Added patch to fix segfault of showhostkey with
  encrypted key (Thanks to Kevin Locke for his patch).
   Closes: #575757: openswan: showhostkey segfault with 3DES-encrypted
  host key
 * Changes debian/rules to only omit permission fixing where it's really
   necessary.
   Closes: #389680: openswan: wrong permissions of /etc/ipsec.d/examples
 * Removed orphaned conflict with freeswan (not shipped anymore).
   .
 [Rene Mayrhofer]
 * Openswan package now provides ike-server and conflicts with it.
   Closes: #583334: racoon and openswan: error when trying to install
together
 

Hi Holger

 I fail to see how this upload closed #542657 - please explain. (To the bug, 
 not really to me :-)

According to Theppitak Karoonboonyanan, the bug is gone in 2.6.23+dfsg-1, so I 
thought it was safe to close it, sorry I did not discuss it with you :-(.

 openswan  (1:2.6.23+dfsg-1) unstable; urgency=low

   * New upstream release.
 Closes: #551565: openswan: new version 2.6.23 is available -
 resolves problem with SA refcount
 Closes: #539121: NMU patch used for version 1:2.6.22+dfsg-1.1
 Closes: #532348: openswan: installs dupliate init script
 /etc/init.d/setup
 Closes: #542657: prompting due to modified conffiles which where
  not modified by the user

 
 
 cheers,
   Holger

So is it ok to close it?

Wish you a nice day
Harald



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#542657: fixed in openswan 1:2.6.23+dfsg-1

2010-06-01 Thread Holger Levsen
Hi Harald,

On Dienstag, 1. Juni 2010, Harald Jenny wrote:
 According to Theppitak Karoonboonyanan, the bug is gone in 2.6.23+dfsg-1,
 so I thought it was safe to close it, sorry I did not discuss it with you
 :-(.

Then you should please close it with a versioned close, ie mail to 
542657-d...@bugs.debian.org with version: 2.6.23+dfsg-1 as the first line.

 So is it ok to close it?

If the bug is gone, its correct to close it. Just do it versioned :-)


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#584094: gstreamer0.10-plugins-ugly: does not build o.10.15 with xh264

2010-06-01 Thread Marc Leeman
Package: gstreamer0.10-plugins-ugly
Version: 0.10.14-1+barco1
Severity: serious
Justification: no longer builds from source


Building on lenny:

/bin/sh ../../libtool --silent --tag=CC --tag=disable-static  --mode=compile cc 
-DHAVE_CONFIG_H -I. -I../..-pthread -I/usr/include/gstreamer-0.10 
-I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
-I../../gst-libs -I../../gst-libs -pthread -I/usr/include/gstreamer-0.10 
-I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
-Wall -Wdeclaration-after-statement -Wvla -Wpointer-arith 
-Wmissing-declarations -Wmissing-prototypes -Wredundant-decls -Wwrite-strings 
-Wformat-nonliteral -Wformat-security -Wold-style-definition -Winit-self 
-Wmissing-include-dirs -Waddress -Waggregate-return -Wno-multichar 
-Wnested-externs   -g-g -O2 -g -Wall -O2 -Wno-error -g -O2 -g -Wall -O2 
-Wno-error -c -o libgstx264_la-gstx264enc.lo `test -f 'gstx264enc.c' || echo 
'./'`gstx264enc.c
gstx264enc.c: In function ‘gst_x264_enc_init_encoder’:
gstx264enc.c:597: error: ‘struct anonymous’ has no member named 
‘i_weighted_pred’
make[4]: *** [libgstx264_la-gstx264enc.lo] Error 1
make[4]: Leaving directory 
`/users/firmware/mleeman/squeeze/gstreamer-20100531/debian-src/gst-plugins-ugly0.10-0.10.15/ext/x264'


I suspect a newer header file/version dependency on libx264-dev is in order



-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gstreamer0.10-plugins-ugly depends on:
ii  liba52-0.7.4  0.7.4-11   library for decoding ATSC A/52 str
ii  libc6 2.7-18 GNU C Library: Shared libraries
ii  libcdio7  0.78.2+dfsg1-3 library to read and control CD-ROM
ii  libdvdread3   0.9.7-11   library for reading DVDs
ii  libgcc1   1:4.3.2-1.1GCC support library
ii  libglib2.0-0  2.22.4-1   The GLib library of C routines
ii  libgstreamer-plugins-base 0.10.29-4  GStreamer libraries from the base
ii  libgstreamer0.10-00.10.29-1  Core GStreamer libraries and eleme
ii  libid3tag00.15.1b-10 ID3 tag reading library from the M
ii  libmad0   0.15.1b-4  MPEG audio decoder library
ii  libmpeg2-40.4.1-3MPEG1 and MPEG2 video decoder libr
ii  liboil0.3 0.3.16-1   Library of Optimized Inner Loops
ii  libopencore-amrnb00.1.2-1Adaptive Multi Rate speech codec -
ii  libopencore-amrwb00.1.2-1Adaptive Multi-Rate - Wideband spe
ii  libsidplay1   1.36.59-5  SID (MOS 6581) emulation library
ii  libstdc++64.3.2-1.1  The GNU Standard C++ Library v3
ii  libtwolame0   0.3.12-1   MPEG Audio Layer 2 encoding librar

gstreamer0.10-plugins-ugly recommends no packages.

gstreamer0.10-plugins-ugly suggests no packages.

-- no debconf information

__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584013: hyperlatex: Security bugs in ghostscript

2010-06-01 Thread Roland Stigge
Hi,

On 06/01/2010 03:10 AM, Paul Szabo wrote:
 This package depends on ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

There are several issues with this bug:

(1) If ghostscript has a bug, maybe it should be fixed there instead of
in all gs dependant packages?

(2) Mass bug filing (esp. RC/security) is generally not a great idea,
especially if

(3) You haven't checked the individual packages (This package depends
on ghostscript, and may be affected).

(4) Please state clearly what's wrong with the package (hyperlatex in
this case). From the other bug reports I deduce that gs calls should be
extended with -P- -dSAFER. This should be done in the hyperlatex
source package in bin/ps2image, for the record.

bye,
  Roland



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584096: dash as /bin/sh break autoconf/automake

2010-06-01 Thread Eric Valette
Package: dash
Version: 0.5.5.1-7~exp0
Severity: critical
Justification: breaks unrelated software


Suddently xbmc compilation started to fail in the configure phase.
I add a lot of 

./configure: 1: INCLUDES+=  : not found

and configure phase indefinitely looped. You can reproduce the bug by 
extracting xbmc 
git and try to  configure it reading README.linux.

As I was aware nothing chnaged in my source tree, I suspected firts the usual 
suspects
(autoconf/automake) but reverting to more ancient version failed also.

Then I suddently discovered /bin/sh was pointing to dash. Chngaing the link 
again 
to bash solved al my compilation problem.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.34 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF8, LC_CTYPE=en_US.UTF8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF8)
Shell: /bin/sh linked to /bin/bash

Versions of packages dash depends on:
ii  debianutils   3.2.3  Miscellaneous utilities specific t
ii  dpkg  1.15.7.2   Debian package management system
ii  libc6 2.11.1-1   Embedded GNU C Library: Shared lib

dash recommends no packages.

dash suggests no packages.

-- debconf information:
* dash/sh: true



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584094: marked as done (gstreamer0.10-plugins-ugly: does not build o.10.15 with xh264)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 10:47:30 +0200
with message-id 1275382050.24258.118.ca...@odin.lan
and subject line Re: Bug#584094: gstreamer0.10-plugins-ugly: does not build 
o.10.15 with xh264
has caused the Debian Bug report #584094,
regarding gstreamer0.10-plugins-ugly: does not build o.10.15 with xh264
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584094: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584094
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: gstreamer0.10-plugins-ugly
Version: 0.10.14-1+barco1
Severity: serious
Justification: no longer builds from source


Building on lenny:

/bin/sh ../../libtool --silent --tag=CC --tag=disable-static  --mode=compile cc 
-DHAVE_CONFIG_H -I. -I../..-pthread -I/usr/include/gstreamer-0.10 
-I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
-I../../gst-libs -I../../gst-libs -pthread -I/usr/include/gstreamer-0.10 
-I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
-Wall -Wdeclaration-after-statement -Wvla -Wpointer-arith 
-Wmissing-declarations -Wmissing-prototypes -Wredundant-decls -Wwrite-strings 
-Wformat-nonliteral -Wformat-security -Wold-style-definition -Winit-self 
-Wmissing-include-dirs -Waddress -Waggregate-return -Wno-multichar 
-Wnested-externs   -g-g -O2 -g -Wall -O2 -Wno-error -g -O2 -g -Wall -O2 
-Wno-error -c -o libgstx264_la-gstx264enc.lo `test -f 'gstx264enc.c' || echo 
'./'`gstx264enc.c
gstx264enc.c: In function ‘gst_x264_enc_init_encoder’:
gstx264enc.c:597: error: ‘struct anonymous’ has no member named 
‘i_weighted_pred’
make[4]: *** [libgstx264_la-gstx264enc.lo] Error 1
make[4]: Leaving directory 
`/users/firmware/mleeman/squeeze/gstreamer-20100531/debian-src/gst-plugins-ugly0.10-0.10.15/ext/x264'


I suspect a newer header file/version dependency on libx264-dev is in order



-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gstreamer0.10-plugins-ugly depends on:
ii  liba52-0.7.4  0.7.4-11   library for decoding ATSC A/52 str
ii  libc6 2.7-18 GNU C Library: Shared libraries
ii  libcdio7  0.78.2+dfsg1-3 library to read and control CD-ROM
ii  libdvdread3   0.9.7-11   library for reading DVDs
ii  libgcc1   1:4.3.2-1.1GCC support library
ii  libglib2.0-0  2.22.4-1   The GLib library of C routines
ii  libgstreamer-plugins-base 0.10.29-4  GStreamer libraries from the base
ii  libgstreamer0.10-00.10.29-1  Core GStreamer libraries and eleme
ii  libid3tag00.15.1b-10 ID3 tag reading library from the M
ii  libmad0   0.15.1b-4  MPEG audio decoder library
ii  libmpeg2-40.4.1-3MPEG1 and MPEG2 video decoder libr
ii  liboil0.3 0.3.16-1   Library of Optimized Inner Loops
ii  libopencore-amrnb00.1.2-1Adaptive Multi Rate speech codec -
ii  libopencore-amrwb00.1.2-1Adaptive Multi-Rate - Wideband spe
ii  libsidplay1   1.36.59-5  SID (MOS 6581) emulation library
ii  libstdc++64.3.2-1.1  The GNU Standard C++ Library v3
ii  libtwolame0   0.3.12-1   MPEG Audio Layer 2 encoding librar

gstreamer0.10-plugins-ugly recommends no packages.

gstreamer0.10-plugins-ugly suggests no packages.

-- no debconf information

__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__


---End Message---
---BeginMessage---
On Tue, 2010-06-01 at 10:40 +0200, Marc Leeman wrote:
 Package: gstreamer0.10-plugins-ugly
 Version: 0.10.14-1+barco1
 Severity: serious
 Justification: no longer builds from source
 
 
 Building on lenny:
 
 /bin/sh ../../libtool --silent --tag=CC --tag=disable-static  --mode=compile 
 cc -DHAVE_CONFIG_H -I. -I../..-pthread -I/usr/include/gstreamer-0.10 
 -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
 -I../../gst-libs -I../../gst-libs -pthread -I/usr/include/gstreamer-0.10 
 -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libxml2   
 -Wall 

Bug#584095: gstreamer0.10-plugins-bad: does not build; failure configure on flite

2010-06-01 Thread Sebastian Dröge
On Tue, 2010-06-01 at 10:43 +0200, Marc Leeman wrote:
 Package: gstreamer0.10-plugins-bad
 Version: 0.10.18-1
 Severity: serious
 Justification: no longer builds from source
 
 
 Building on Lenny; config.log included
 
 
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.

And what exactly is the build failure? It apparently builds fine on
squeeze/unstable. You're probably missing one of the newer build
dependencies or something.



signature.asc
Description: This is a digitally signed message part


Bug#584095: gstreamer0.10-plugins-bad: does not build; failure configure on flite

2010-06-01 Thread Marc Leeman
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.

 And what exactly is the build failure? It apparently builds fine on
 squeeze/unstable. You're probably missing one of the newer build
 dependencies or something.

Since flite is not detected in the configure phase; it is not built
and ultimately; the build fails on instaling the libs (.install file).

-- 
br, marc

The best approach for you requires two steps. The first step is
reading the Manual.
Wolfgang Denk - u-boot mailing list



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: duplicate

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 583910 grave
Bug #583910 [e2fsprogs] mkfs.ext3: /lib/libblkid.so.1: version `BLKID_2.17' not 
found  (required by mkfs.ext3)
Severity set to 'grave' from 'important'

 merge 583910 583551
Bug#583551: debian-installer: mkfs.ext3 fails to run
Bug#583910: mkfs.ext3: /lib/libblkid.so.1: version `BLKID_2.17' not found  
(required by mkfs.ext3)
Bug#583592: shlibs.local tricks generate wrong dependency on libblkid1
Merged 583551 583592 583910.

 --
Stopping processing here.

Please contact me if you need assistance.
-- 
583592: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583592
583910: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583910
583551: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583551
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#559893: Release-critical bugs in monotone: ping?

2010-06-01 Thread Ludovic Brenta

Is anyone still interested in maintaining monotone in Debian?



If not, I will consider switching to another DVCS.  This would be

a shame.  I like monotone very much and I have been using it since

2006.



-- 

Ludovic Brenta.





-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584095: gstreamer0.10-plugins-bad: does not build; failure configure on flite

2010-06-01 Thread Sebastian Dröge
On Tue, 2010-06-01 at 10:58 +0200, Marc Leeman wrote:
  This file contains any messages produced by compilers while
  running configure, to aid debugging if configure makes a mistake.
 
  And what exactly is the build failure? It apparently builds fine on
  squeeze/unstable. You're probably missing one of the newer build
  dependencies or something.
 
 Since flite is not detected in the configure phase; it is not built
 and ultimately; the build fails on instaling the libs (.install file).
 

But you do have flite installed? Which version?


signature.asc
Description: This is a digitally signed message part


Bug#584095: [gmail] Re: Bug#584095: gstreamer0.10-plugins-bad: does not build; failure configure on flite

2010-06-01 Thread Marc Leeman
  Since flite is not detected in the configure phase; it is not built
  and ultimately; the build fails on instaling the libs (.install file).
 
 But you do have flite installed? Which version?


[mlee...@cypher gst-plugins-ugly0.10-0.10.15]$ dpkg -l |grep flite
ii  flite 1.3-release-2 A small run-time speech 
synthesis engine
ii  flite1-dev1.2-release-2.3 A small run-time 
speech synthesis engine - static libraries
ii  libflite1 1.2-release-2.3 a small run-time 
speech synthesis engine - shared libraries

At least there seems to be someting wrong with those depends too. I'm
installing the sid version now (1.4-release-2).

Oh crud; dpkg dependencies.

I'll have some more work to get those versions installed on Lenny

-- 
  greetz, marc
Quantum Mechanics is a lovely introduction to Hilbert Spaces!
-- Overheard at last year's Archimedeans' Garden Party
crichton 2.6.26 #1 PREEMPT Tue Jul 29 21:17:59 CDT 2008 GNU/Linux


signature.asc
Description: Digital signature


Bug#577370: marked as done (myodbc: FTBFS: myutil.h:176: error: expected declaration specifiers or '...' before 'SQLROWOFFSET')

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 09:54:24 +
with message-id e1ojoay-0005gq...@ries.debian.org
and subject line Bug#577370: fixed in myodbc 5.1.6-1
has caused the Debian Bug report #577370,
regarding myodbc: FTBFS: myutil.h:176: error: expected declaration specifiers 
or '...' before 'SQLROWOFFSET'
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
577370: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577370
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Source: myodbc
Version: 3.51.27r695-1
Severity: serious
Tags: squeeze sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20100410 qa-ftbfs
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part:
  gcc -DHAVE_CONFIG_H -I. -I. -I. -DNONTHREADSAFE -I/usr/include -O3 
 -DDBUG_OFF -I/usr/include/mysql -DBIG_JOINS=1 -fno-strict-aliasing 
 -DUNIV_LINUX -DUNIV_LINUX -g -O2 -c catalog.c  -fPIC -DPIC -o 
 .libs/libmyodbc3_la-catalog.o
 In file included from ../MYODBC_CONF.h:7,
  from myodbc3.h:38,
  from catalog.c:44:
 ../driver/myconf.h:77:1: warning: PACKAGE_NAME redefined
 In file included from /usr/include/mysql/my_global.h:80,
  from ../MYODBC_MYSQL.h:12,
  from myodbc3.h:37,
  from catalog.c:44:
 /usr/include/mysql/my_config.h:1138:1: warning: this is the location of the 
 previous definition
 In file included from ../MYODBC_CONF.h:7,
  from myodbc3.h:38,
  from catalog.c:44:
 ../driver/myconf.h:80:1: warning: PACKAGE_STRING redefined
 In file included from /usr/include/mysql/my_global.h:80,
  from ../MYODBC_MYSQL.h:12,
  from myodbc3.h:37,
  from catalog.c:44:
 /usr/include/mysql/my_config.h:1141:1: warning: this is the location of the 
 previous definition
 In file included from ../MYODBC_CONF.h:7,
  from myodbc3.h:38,
  from catalog.c:44:
 ../driver/myconf.h:83:1: warning: PACKAGE_TARNAME redefined
 In file included from /usr/include/mysql/my_global.h:80,
  from ../MYODBC_MYSQL.h:12,
  from myodbc3.h:37,
  from catalog.c:44:
 /usr/include/mysql/my_config.h:1144:1: warning: this is the location of the 
 previous definition
 In file included from ../MYODBC_CONF.h:7,
  from myodbc3.h:38,
  from catalog.c:44:
 ../driver/myconf.h:86:1: warning: PACKAGE_VERSION redefined
 In file included from /usr/include/mysql/my_global.h:80,
  from ../MYODBC_MYSQL.h:12,
  from myodbc3.h:37,
  from catalog.c:44:
 /usr/include/mysql/my_config.h:1147:1: warning: this is the location of the 
 previous definition
 In file included from myodbc3.h:395,
  from catalog.c:44:
 myutil.h:176: error: expected declaration specifiers or '...' before 
 'SQLROWOFFSET'
 make[3]: *** [libmyodbc3_la-catalog.lo] Error 1

The full build log is available from:
   
http://people.debian.org/~lucas/logs/2010/04/10/myodbc_3.51.27r695-1_lsid64.buildlog

A list of current common problems and possible solutions is available at 
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot.  Internet was not
accessible from the build systems.

-- 
| Lucas Nussbaum
| lu...@lucas-nussbaum.net   http://www.lucas-nussbaum.net/ |
| jabber: lu...@nussbaum.fr GPG: 1024D/023B3F4F |


---End Message---
---BeginMessage---
Source: myodbc
Source-Version: 5.1.6-1

We believe that the bug you reported is fixed in the latest version of
myodbc, which is due to be installed in the Debian FTP archive:

libmyodbc_5.1.6-1_amd64.deb
  to main/m/myodbc/libmyodbc_5.1.6-1_amd64.deb
myodbc_5.1.6-1.diff.gz
  to main/m/myodbc/myodbc_5.1.6-1.diff.gz
myodbc_5.1.6-1.dsc
  to main/m/myodbc/myodbc_5.1.6-1.dsc
myodbc_5.1.6.orig.tar.gz
  to main/m/myodbc/myodbc_5.1.6.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 577...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve Langasek vor...@debian.org (supplier of updated myodbc package)

(This message was generated automatically at their request; if you
believe that there is a 

Bug#482298: crashes when start run icedove on mipsel

2010-06-01 Thread fxzhang
 Hi,

 On Sa, Feb 28, 2009 at 03:48:01 +0800, Deng Xiyue wrote:
 Same sympton on similar platform, which are Loongson2F-based.  No luck
 with -safe-mode switch.

 you have report a bug[1] against Icedove 2.0.0.19. Since some time,
 Icedove 3.0 is in unstable and testing.

 Could you or someone from the list try to start Icedove on a mipsel
 machine? I didn't have a mipsel box.
I guess you mean start icedove 3.0, I've tried to compile and run a
icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
crashes. And icedove 2 did crash.

 Cheers,
 Christoph

 [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=482298






-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583858: marked as done (libc6-i686: many programs segfaults, including ls, login and dpkg)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 10:18:40 +
with message-id e1ojoys-0002p9...@ries.debian.org
and subject line Bug#583858: fixed in eglibc 2.11.1-2
has caused the Debian Bug report #583858,
regarding libc6-i686: many programs segfaults, including ls, login and dpkg
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583858: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583858
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: libc6-i686
Version: 2.11.1-1
Severity: critical

I have just upgraded from libc6-i686 2.10.2-9 to 2.11.1-1 after the
upgrade many programs segfault including ls, login and dpkg.
Luckily busybox is working so I could use

# busybox mv /lib/i686 /lib/i686-out-of-the-way

to disable libc6-i686 and all segfaulting programs are working
propoperly after that.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.34-1-686 (SMP w/4 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libc6-i686 depends on:
ii  libc6 2.11.1-1   Embedded GNU C Library: Shared lib

libc6-i686 recommends no packages.

libc6-i686 suggests no packages.

-- no debconf information


---End Message---
---BeginMessage---
Source: eglibc
Source-Version: 2.11.1-2

We believe that the bug you reported is fixed in the latest version of
eglibc, which is due to be installed in the Debian FTP archive:

eglibc-source_2.11.1-2_all.deb
  to main/e/eglibc/eglibc-source_2.11.1-2_all.deb
eglibc_2.11.1-2.diff.gz
  to main/e/eglibc/eglibc_2.11.1-2.diff.gz
eglibc_2.11.1-2.dsc
  to main/e/eglibc/eglibc_2.11.1-2.dsc
glibc-doc_2.11.1-2_all.deb
  to main/e/eglibc/glibc-doc_2.11.1-2_all.deb
libc-bin_2.11.1-2_i386.deb
  to main/e/eglibc/libc-bin_2.11.1-2_i386.deb
libc-dev-bin_2.11.1-2_i386.deb
  to main/e/eglibc/libc-dev-bin_2.11.1-2_i386.deb
libc6-amd64_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-amd64_2.11.1-2_i386.deb
libc6-dbg_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-dbg_2.11.1-2_i386.deb
libc6-dev-amd64_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-dev-amd64_2.11.1-2_i386.deb
libc6-dev_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-dev_2.11.1-2_i386.deb
libc6-i686_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-i686_2.11.1-2_i386.deb
libc6-pic_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-pic_2.11.1-2_i386.deb
libc6-prof_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-prof_2.11.1-2_i386.deb
libc6-udeb_2.11.1-2_i386.udeb
  to main/e/eglibc/libc6-udeb_2.11.1-2_i386.udeb
libc6-xen_2.11.1-2_i386.deb
  to main/e/eglibc/libc6-xen_2.11.1-2_i386.deb
libc6_2.11.1-2_i386.deb
  to main/e/eglibc/libc6_2.11.1-2_i386.deb
libnss-dns-udeb_2.11.1-2_i386.udeb
  to main/e/eglibc/libnss-dns-udeb_2.11.1-2_i386.udeb
libnss-files-udeb_2.11.1-2_i386.udeb
  to main/e/eglibc/libnss-files-udeb_2.11.1-2_i386.udeb
locales-all_2.11.1-2_i386.deb
  to main/e/eglibc/locales-all_2.11.1-2_i386.deb
locales_2.11.1-2_all.deb
  to main/e/eglibc/locales_2.11.1-2_all.deb
nscd_2.11.1-2_i386.deb
  to main/e/eglibc/nscd_2.11.1-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 583...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno aure...@debian.org (supplier of updated eglibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 05:50:51 +0200
Source: eglibc
Binary: libc-bin libc-dev-bin glibc-doc eglibc-source locales locales-all nscd 
libc6 libc6-dev libc6-dbg libc6-prof libc6-pic libc6-udeb libc6.1 libc6.1-dev 
libc6.1-dbg libc6.1-prof libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev 
libc0.3-dbg libc0.3-prof libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev 
libc0.1-dbg libc0.1-prof libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 
libc6-sparc64 libc6-dev-sparc64 libc6-s390x libc6-dev-s390x libc6-amd64 
libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 
libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386 
libc0.1-dev-i386 libc6-sparcv9b libc6-i686 libc6-xen libc0.1-i686 
libc6.1-alphaev67 libnss-dns-udeb libnss-files-udeb

Bug#584060: marked as done (python-codespeak-lib: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 11:23:41 +0100
with message-id 20100601112341.04004...@bobcat.office
and subject line Re: Bug#584060: python-codespeak-lib: Security bugs in 
ghostscript
has caused the Debian Bug report #584060,
regarding python-codespeak-lib: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584060: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584060
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: python-codespeak-lib
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package suggests ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
Paul Szabo wrote:

 This package suggests ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

Thanks for the bug report. However, I don't think python-codespeak-lib
is vulnerable:

 * It uses -dSAFER to execute ghostscript
 * Filenames are always passed with absolute filenames
 * Files don't include other files

(This only affects the stable version too, which is very very old now
and nobody is using it.)

Thanks again. Please let me know if I'm missing anything.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org
   `-


signature.asc
Description: PGP signature
---End Message---


Bug#584017: marked as done (latex-make: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 12:27:35 +0200
with message-id 4c04e097.4070...@free.fr
and subject line Re: Bug#584013: hyperlatex: Security bugs in ghostscript
has caused the Debian Bug report #584017,
regarding latex-make: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584017: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584017
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: latex-make
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
  Hi,

On 01/06/2010 10:31, Roland Stigge wrote:
 Hi,

 On 06/01/2010 03:10 AM, Paul Szabo wrote:
 This package depends on ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

 There are several issues with this bug:

 (1) If ghostscript has a bug, maybe it should be fixed there instead of
 in all gs dependant packages?

 (2) Mass bug filing (esp. RC/security) is generally not a great idea,
 especially if

 (3) You haven't checked the individual packages (This package depends
 on ghostscript, and may be affected).

 (4) Please state clearly what's wrong with the package (hyperlatex in
 this case). From the other bug reports I deduce that gs calls should be
 extended with -P- -dSAFER. This should be done in the hyperlatex
 source package in bin/ps2image, for the record.

  I agree on all points of this mail (replace hyperlatex by
latex-make in my case).
  I'm closing the bug for latex-make unless you come back with facts (or
that discussion on d-d agreeds that all package using gs must be changed).
I'm latex-make upstream, too. And I think that I depend on gs-common due
to calls to ps2ps/ps2pdf/... latex-make does not call gs directly.

  Please, take care when filling such amount of bugs with such severity
just before a release.

  Regards,
Vincent

---End Message---


Bug#583312: since update to initscripts, sysv... to version 2.88.dfs-5 -- kdm fails to load

2010-06-01 Thread Andreas Beckmann
severity 583312 important
thanks

Downgrading the severity because we can't do really anything about
problems in the non-free driver itself and a workaround (increase
timeout) exists.
There was already another bug about kde startup timeout problems even
before parallel startup was introduced: http://bugs.debian.org/524751


Andreas



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: Re: since update to initscripts, sysv... to version 2.88.dfs-5 -- kdm fails to load

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 583312 important
Bug #583312 [nvidia-glx] since update to initscripts, sysv... to version 
2.88.dfs-5 -- kdm fails to load
Bug #583613 [nvidia-glx] xserver-xorg is shutting down itself at (and only at) 
boot
Severity set to 'important' from 'serious'

Severity set to 'important' from 'serious'

 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
583312: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583312
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583019: marked as done (kdebase-runtime: FTBFS: ../../../attica/kdeplugin/kdeplatformdependent.cpp:225: error: cannot allocate an object of abstract type 'Attica::KdePlatformDependent')

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 10:35:44 +
with message-id e1ojooy-0006zs...@ries.debian.org
and subject line Bug#583019: fixed in kdebase-runtime 4:4.4.4-1
has caused the Debian Bug report #583019,
regarding kdebase-runtime: FTBFS: 
../../../attica/kdeplugin/kdeplatformdependent.cpp:225: error: cannot allocate 
an object of abstract type 'Attica::KdePlatformDependent'
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583019: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583019
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Source: kdebase-runtime
Version: 4:4.4.3-1
Severity: serious
Tags: squeeze sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20100524 qa-ftbfs
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part:
 make[3]: Entering directory 
 `/build/user-kdebase-runtime_4.4.3-1-amd64-gYRtWV/kdebase-runtime-4.4.3/obj-x86_64-linux-gnu'
 /usr/bin/cmake -E cmake_progress_report 
 /build/user-kdebase-runtime_4.4.3-1-amd64-gYRtWV/kdebase-runtime-4.4.3/obj-x86_64-linux-gnu/CMakeFiles
  
 [ 85%] /usr/bin/cmake -E cmake_progress_report 
 /build/user-kdebase-runtime_4.4.3-1-amd64-gYRtWV/kdebase-runtime-4.4.3/obj-x86_64-linux-gnu/CMakeFiles
  
 Building CXX object attica/kcm/CMakeFiles/kcm_attica.dir/kcm_attica_automoc.o
 cd attica/kcm  /usr/bin/g++   -DMAKE_KCM_ATTICA_LIB -D_BSD_SOURCE 
 -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -DQT_NO_STL -DQT_NO_CAST_TO_ASCII 
 -D_REENTRANT -DKDE_DEPRECATED_WARNINGS -g -O2 -g -Wall -O2 -Wnon-virtual-dtor 
 -Wno-long-long -ansi -Wundef -Wcast-align -Wchar-subscripts -Wall -W 
 -Wpointer-arith -Wformat-security -fno-exceptions -DQT_NO_EXCEPTIONS 
 -fno-check-new -fno-common -Woverloaded-virtual -fno-threadsafe-statics 
 -fvisibility=hidden -fvisibility-inlines-hidden -DNDEBUG -DQT_NO_DEBUG -fPIC 
 -I. -I../../../attica/kcm -I../../.. -I../.. -I/usr/include/KDE 
 -I/usr/include/qt4/phonon -I/usr/include/qt4/QtXmlPatterns 
 -I/usr/include/qt4/QtXml -I/usr/include/qt4/QtWebKit 
 -I/usr/include/qt4/QtUiTools -I/usr/include/qt4/QtTest 
 -I/usr/include/qt4/QtSvg -I/usr/include/qt4/QtSql 
 -I/usr/include/qt4/QtScriptTools -I/usr/include/qt4/QtScript 
 -I/usr/include/qt4/QtOpenGL -I/usr/include/qt4/QtNetwork 
 -I/usr/include/qt4/QtMultimedia -I/usr/include/qt4/QtHelp 
 -I/usr/include/qt4/QtDesigner -I/usr/include/qt4/QtDBus 
 -I/usr/include/qt4/QtAssistant -I/usr/include/qt4/Qt3Support 
 -I/usr/include/qt4/QtGui -I/usr/include/qt4/QtCore -I/usr/include/qt4/Qt 
 -I/usr/share/qt4/mkspecs/default -I/usr/include/qt4   -D_GNU_SOURCE 
 -D_LARGEFILE64_SOURCE -o CMakeFiles/kcm_attica.dir/kcm_attica_automoc.o -c 
 kcm_attica_automoc.cpp
 [ 85%] /usr/bin/cmake -E cmake_progress_report 
 /build/user-kdebase-runtime_4.4.3-1-amd64-gYRtWV/kdebase-runtime-4.4.3/obj-x86_64-linux-gnu/CMakeFiles
  
 ../../../attica/kdeplugin/kdeplatformdependent.cpp:193: warning: unused 
 parameter 'baseUrl'
 ../../../attica/kdeplugin/kdeplatformdependent.cpp:193: warning: unused 
 parameter 'user'
 ../../../attica/kdeplugin/kdeplatformdependent.cpp:193: warning: unused 
 parameter 'password'
 ../../../attica/kdeplugin/kdeplatformdependent.cpp: In function 'QObject* 
 qt_plugin_instance()':
 ../../../attica/kdeplugin/kdeplatformdependent.cpp:225: error: cannot 
 allocate an object of abstract type 'Attica::KdePlatformDependent'
 ../../../attica/kdeplugin/kdeplatformdependent.h:42: note:   because the 
 following virtual functions are pure within 'Attica::KdePlatformDependent':
 /usr/include/attica/platformdependent.h:47: note: virtual void 
 Attica::PlatformDependent::addDefaultProviderFile(const QUrl)
 /usr/include/attica/platformdependent.h:48: note: virtual void 
 Attica::PlatformDependent::removeDefaultProviderFile(const QUrl)
 /usr/include/attica/platformdependent.h:53: note: virtual void 
 Attica::PlatformDependent::enableProvider(const QUrl, bool) const
 /usr/include/attica/platformdependent.h:54: note: virtual bool 
 Attica::PlatformDependent::isEnabled(const QUrl) const
 [ 85%] Building CXX object 
 attica/kcm/CMakeFiles/kcm_attica.dir/providerconfigwidget.o
 cd attica/kcm  /usr/bin/g++   -DMAKE_KCM_ATTICA_LIB -D_BSD_SOURCE 
 -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -DQT_NO_STL -DQT_NO_CAST_TO_ASCII 
 -D_REENTRANT -DKDE_DEPRECATED_WARNINGS -g -O2 -g -Wall -O2 -Wnon-virtual-dtor 
 -Wno-long-long -ansi -Wundef -Wcast-align -Wchar-subscripts -Wall -W 
 -Wpointer-arith -Wformat-security -fno-exceptions -DQT_NO_EXCEPTIONS 
 -fno-check-new -fno-common -Woverloaded-virtual -fno-threadsafe-statics 
 

Bug#575254: openjdk-6 build fails on at least one i386 build due to long command lines

2010-06-01 Thread Giovanni Mascellani
Il 02/05/2010 22:59, Giovanni Mascellani ha scritto:
 Hi.
 
 Il 01/05/2010 14:34, Matthias Klose ha scritto:
 I produced a partial patch for this bug. I can build OpenJDK correctly
 with it. Anyway, there are some problems:
 
 I managed to create a more complete patch. This should be a fairly good
 solution for this bug. I plan to do a build test this night.

BTW, I forgot to update the bug, but the build went well. I consider my
patch to be correct.

Thanks, Giovanni.
-- 
Giovanni Mascellani mascell...@poisson.phc.unipi.it
Pisa, Italy

Web: http://poisson.phc.unipi.it/~mascellani
Jabber: g.mascell...@jabber.org / giova...@elabor.homelinux.org



signature.asc
Description: OpenPGP digital signature


Bug#584062: sdf: Security bugs in ghostscript

2010-06-01 Thread Colin Watson
On Tue, Jun 01, 2010 at 11:33:33AM +1000, Paul Szabo wrote:
 Please note remote execute-any-code security bugs in ghostscript:
 
   http://bugs.debian.org/583183
 
 This package suggests ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

Thanks for the heads-up.

sdf doesn't change the current directory.  It uses Ghostscript in some
cases to convert between figure formats (although it doesn't call it
directly, only via wrapper scripts such as ps2epsi which don't offer sdf
any control over whether -P- is used).  Figures are imported files, not
generated by sdf itself.

I would expect that sdf is almost always invoked in a user's working
directory, and the fact that it never tries to change to /tmp or
whatever should be sufficient to avoid problems.  If a user invokes it
in /tmp, then they might expect problems given that sdf has
open-arbitrary-file constructs of its own.

Is that good enough for you, or are you trying to achieve a higher level
of assurance?  If the latter, what could sdf reasonably do here?

Thanks,

-- 
Colin Watson   [cjwat...@debian.org]



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: tagging 548909

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 548909 + lenny
Bug #548909 {Done: Axel Beckert a...@debian.org} [xen-tools] xen-tools: 
xen-create-image creates world readable disk image files
Added tag(s) lenny.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
548909: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548909
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#482298: crashes when start run icedove on mipsel

2010-06-01 Thread Christoph Goehre
Hi,

On 01.06.2010 12:19, fxzh...@ict.ac.cn wrote:
 Could you or someone from the list try to start Icedove on a mipsel
 machine? I didn't have a mipsel box.
 I guess you mean start icedove 3.0, I've tried to compile and run a
 icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
 crashes. And icedove 2 did crash.

but why you've compile it? There are packages in Debian unstable.

Whatever! The mean thing is, it's running.

THX for testing,
Christoph



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583064: marked as done (relational: FTBFS: dpkg-gencontrol: error: the Suggests field contains an arch-specific dependency but the package is architecture all)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 11:08:42 +
with message-id e1ojpks-0003gm...@ries.debian.org
and subject line Bug#583064: fixed in relational 0.10-2
has caused the Debian Bug report #583064,
regarding relational: FTBFS: dpkg-gencontrol: error: the Suggests field 
contains an arch-specific dependency but the package is architecture all
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583064: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583064
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Source: relational
Version: 0.10-1
Severity: serious
Tags: squeeze sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20100524 qa-ftbfs
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part:
 make[1]: Entering directory 
 `/build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10'
 set -ex; for pkg in python-relational relational; do \
 python debian/${pkg}.setup.py install 
 --root=/build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/${pkg};
  \
 rm -rf build; \
   done
 + python debian/python-relational.setup.py install 
 --root=/build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational
 running install
 running build
 running build_py
 creating build
 creating build/lib
 creating build/lib/relational
 copying relational/__init__.py - build/lib/relational
 copying relational/sql.py - build/lib/relational
 copying relational/rtypes.py - build/lib/relational
 copying relational/relation.py - build/lib/relational
 copying relational/parallel.py - build/lib/relational
 copying relational/optimizations.py - build/lib/relational
 copying relational/optimizer.py - build/lib/relational
 copying relational/parser.py - build/lib/relational
 running install_lib
 creating 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr
 creating 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib
 creating 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5
 creating 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages
 creating 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/parser.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/optimizer.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/optimizations.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/parallel.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/relation.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/rtypes.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/sql.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 copying build/lib/relational/__init__.py - 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational
 byte-compiling 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational/parser.py
  to parser.pyc
 byte-compiling 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational/optimizer.py
  to optimizer.pyc
 byte-compiling 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational/optimizations.py
  to optimizations.pyc
 byte-compiling 
 /build/user-relational_0.10-1-amd64-2d2hgW/relational-0.10/debian/python-relational/usr/lib/python2.5/site-packages/relational/parallel.py
  to parallel.pyc
 byte-compiling 
 

Bug#584013: hyperlatex: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Roland,

 (1) If ghostscript has a bug, maybe it should be fixed there instead of
 in all gs dependant packages?

Yes, but gs says cannot fix and please use -P-.

 (2) Mass bug filing (esp. RC/security) is generally not a great idea,
 especially if
 (3) You haven't checked the individual packages (This package depends
 on ghostscript, and may be affected).

Sorry, I do my best but am only one. 

 (4) Please state clearly what's wrong with the package (hyperlatex in
 this case). From the other bug reports I deduce that gs calls should be
 extended with -P- -dSAFER. This should be done in the hyperlatex
 source package in bin/ps2image, for the record.

Yes, that probably should fix things. (Right now things are still unsafe
even with those options, but I expect gs to be able to fix the remaining
bugs.)

Thanks, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584001: courier-faxmail: Security bugs in ghostscript

2010-06-01 Thread Stefan Hornburg (Racke)

On 06/01/2010 03:05 AM, Paul Szabo wrote:

Package: courier-faxmail
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

   http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.



The following Ghostscript commands are used by courier-faxmail:

erebus:/usr/lib/courier/faxmail# grep -i gs *
application-pdf.filter:$GS -sDEVICE=faxg3 $FAXRES -dBATCH 
-sOutputFile=$OUTDIR/f%04d -dNOPAUSE -q -dSAFER - $OUTDIR/.ps
application-postscript.filter:$GS -sDEVICE=faxg3 $FAXRES -dBATCH 
-sOutputFile=$OUTDIR/f%04d -dNOPAUSE -q -dSAFER -
coverpage:$GS -sDEVICE=faxg3 $FAXRES -dBATCH -sOutputFile=$OUTDIR/f%04d -dNOPAUSE 
-q -dSAFER - $OUTDIR/.dpost
init:GS=/usr/bin/gs
text-plain.filter:$GS -sDEVICE=faxg3 $FAXRES -dBATCH -sOutputFile=$OUTDIR/f%04d 
-dNOPAUSE -q -dSAFER - $OUTDIR/.ps

What kind of fixes do you have in mind?

Regards
 Racke

--
LinuXia Systems = http://www.linuxia.de/
Expert Interchange Consulting and System Administration
ICDEVGROUP = http://www.icdevgroup.org/
Interchange Development Team




--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584001: courier-faxmail: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Racke,

 What kind of fixes do you have in mind?

Please add the  -P-  option to all $GS invocations.

Thanks, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583989: Courier IMAP: Clients think logins have failed after upgrade

2010-06-01 Thread Stefan Hornburg (Racke)

On 06/01/2010 01:18 AM, Adam Warner wrote:

Package: courier
Version: 0.64.2-1
Severity: grave

Upstream has the patch:
http://sourceforge.net/mailarchive/forum.php?thread_name=4BA4F266.3080603%40linuxia.deforum_name=courier-users

Thunderbird chokes on that and requests a login again, claiming a login 
failure.
(ditto Evolution. Client thinks a transaction failed on the server but
it actually succeeded. The client and server get out of sync. Appear to
be missing messages/discover duplicate message after closing and
reopening client/etc).


--- courier-0.64.2-orig/imap/imapd.c2010-03-16 23:12:40.0 +0100
+++ courier-0.64.2/imap/imapd.c 2010-03-20 15:34:35.0 +0100
@@ -6503,7 +6503,7 @@

if ((w=maildirwatch_alloc(.)) == NULL)
{
-   writes(*OK [ALERT] Filesystem notification initialization 
error -- contact your mail administrator (check for configuration errors with the 
FAM/Gamin library)\r\n);
+   writes(* OK [ALERT] Filesystem notification initialization 
error -- contact your mail administrator (check for configuration errors with the 
FAM/Gamin library)\r\n);
}
else
{








I'll upload packages for Courier 0.65.0 soon.

Regards
Racke

--
LinuXia Systems = http://www.linuxia.de/
Expert Interchange Consulting and System Administration
ICDEVGROUP = http://www.icdevgroup.org/
Interchange Development Team




--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584062: sdf: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Colin,

Your explanation shows you are not directly responsible (maybe not
vulnerable at all), and can close the bug.

Thanks for investigating, sorry about the noise.

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: submitter 579837, submitter 581057, submitter 583863, submitter 495976, submitter 547728 ...

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 submitter 579837 ales...@debian.org
Bug #579837 {Done: Alessio Treglia quadris...@ubuntu.com} [wnpp] ITP: 
guayadeque -- Guayadeque Music Player
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 581057 ales...@debian.org
Bug #581057 [wnpp] ITP: lv2vocoder -- LV2 vocoder plugin
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 583863 ales...@debian.org
Bug #583863 {Done: Alessio Treglia ales...@debian.org} [wnpp] ITP: 
python-gudev -- Python bindings for gudev
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 495976 ales...@debian.org
Bug #495976 [cellwriter] cellwriter should depend on librsvg2-common
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 547728 ales...@debian.org
Bug #547728 [rezound] rezound has been compiled without frequency analisys 
support
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 582131 ales...@debian.org
Bug #582131 [last-exit] man page for last-exit
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 561615 ales...@debian.org
Bug #561615 [wnpp] ITP: mingus -- advanced music theory and notation package
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 512100 ales...@debian.org
Bug #512100 {Done: LIU Qi liuq...@gmail.com} [mail-notification] 
mail-notification: Make mail fetchers recommended instead of suggested
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 535839 ales...@debian.org
Bug #535839 {Done: Enrico Zini enr...@debian.org} [dballe] Make dballe ready 
for Python 2.6
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 541033 ales...@debian.org
Bug #541033 [tangerine] tangerine: The desktop file uses the deprecated 
Encoding key
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 528715 ales...@debian.org
Bug #528715 {Done: Nico Golde n...@debian.org} [stfl] Please make stfl ready 
to build with Python 2.6
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 563664 ales...@debian.org
Bug #563664 [celestia] celestia: Drop aRTs support
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 583880 ales...@debian.org
Bug #583880 {Done: Alessio Treglia ales...@debian.org} [arista] Missing 
dependency on python-gudev
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 563125 ales...@debian.org
Bug #563125 [mpd] mpd won't properly install untill localhost changed to 
127.0.0.1 in /etc/mpd.conf
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 561922 ales...@debian.org
Bug #561922 [mpg123] mpg123: Remove aRTs support
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 563665 ales...@debian.org
Bug #563665 [celestia] Fix little mistakes in celestia-glut.desktop
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 511313 ales...@debian.org
Bug #511313 [freevo] freevo: Problem running imdb plugin from command line
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 568530 ales...@debian.org
Bug #568530 [wnpp] ITP: campcaster -- A radio program automation and support 
tool
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 560907 ales...@debian.org
Bug #560907 [pytrainer] pytrainer: Missing manpage for pytr
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 519953 ales...@debian.org
Bug #519953 {Done: Jakub Wilk jw...@debian.org} [libsnmp-python] net-snmp: 
rebuild to build with Python 2.6
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 544062 ales...@debian.org
Bug #544062 [wnpp] ITP: xcfa -- X Convert File Audio
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 552391 ales...@debian.org
Bug #552391 [mp3gain] mp3gain crashed with SIGSEGV in __libc_start_main()
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 533836 ales...@debian.org
Bug #533836 {Done: Emilio Pozuelo Monfort po...@debian.org} [spe] Make spe 
ready for Python 2.6
Changed Bug submitter to 'ales...@debian.org' from 'Alessio Treglia 
quadris...@ubuntu.com'
 submitter 554783 ales...@debian.org
Bug #554783 [hardinfo] hardinfo: Missing homepage; 

Processed: Migrating to my DD account

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 submitter 579837 !
Bug #579837 {Done: Alessio Treglia quadris...@ubuntu.com} [wnpp] ITP: 
guayadeque -- Guayadeque Music Player
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 581057 !
Bug #581057 [wnpp] ITP: lv2vocoder -- LV2 vocoder plugin
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 583863 !
Bug #583863 {Done: Alessio Treglia ales...@debian.org} [wnpp] ITP: 
python-gudev -- Python bindings for gudev
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 495976 !
Bug #495976 [cellwriter] cellwriter should depend on librsvg2-common
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 547728 !
Bug #547728 [rezound] rezound has been compiled without frequency analisys 
support
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 582131 !
Bug #582131 [last-exit] man page for last-exit
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 561615 !
Bug #561615 [wnpp] ITP: mingus -- advanced music theory and notation package
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 512100 !
Bug #512100 {Done: LIU Qi liuq...@gmail.com} [mail-notification] 
mail-notification: Make mail fetchers recommended instead of suggested
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 535839 !
Bug #535839 {Done: Enrico Zini enr...@debian.org} [dballe] Make dballe ready 
for Python 2.6
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 541033 !
Bug #541033 [tangerine] tangerine: The desktop file uses the deprecated 
Encoding key
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 528715 !
Bug #528715 {Done: Nico Golde n...@debian.org} [stfl] Please make stfl ready 
to build with Python 2.6
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 563664 !
Bug #563664 [celestia] celestia: Drop aRTs support
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 583880 !
Bug #583880 {Done: Alessio Treglia ales...@debian.org} [arista] Missing 
dependency on python-gudev
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 563125 !
Bug #563125 [mpd] mpd won't properly install untill localhost changed to 
127.0.0.1 in /etc/mpd.conf
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 561922 !
Bug #561922 [mpg123] mpg123: Remove aRTs support
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 563665 !
Bug #563665 [celestia] Fix little mistakes in celestia-glut.desktop
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 511313 !
Bug #511313 [freevo] freevo: Problem running imdb plugin from command line
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 568530 !
Bug #568530 [wnpp] ITP: campcaster -- A radio program automation and support 
tool
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 560907 !
Bug #560907 [pytrainer] pytrainer: Missing manpage for pytr
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 519953 !
Bug #519953 {Done: Jakub Wilk jw...@debian.org} [libsnmp-python] net-snmp: 
rebuild to build with Python 2.6
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 544062 !
Bug #544062 [wnpp] ITP: xcfa -- X Convert File Audio
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 552391 !
Bug #552391 [mp3gain] mp3gain crashed with SIGSEGV in __libc_start_main()
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 533836 !
Bug #533836 {Done: Emilio Pozuelo Monfort po...@debian.org} [spe] Make spe 
ready for Python 2.6
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 554783 !
Bug #554783 [hardinfo] hardinfo: Missing homepage; Wrong parsing of PCI devices 
descriptions; remove usr/local dir
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 506525 !
Bug #506525 {Done: Frank Lichtenheld dj...@debian.org} [python-gpod] 
python-gpod should depend on python-gobject
Changed Bug submitter to 'Alessio Treglia ales...@debian.org' from 
'ales...@debian.org'
 submitter 564024 !
Bug #564024 [terminatorx] terminatorx: Missing Homepage field
Changed Bug 

Bug#584001: courier-faxmail: Security bugs in ghostscript

2010-06-01 Thread Stefan Hornburg (Racke)

On 06/01/2010 01:24 PM, paul.sz...@sydney.edu.au wrote:

Dear Racke,


What kind of fixes do you have in mind?


Please add the  -P-  option to all $GS invocations.



OK, I'll do so today. I just wonder why this option isn't mentioned
in the gs manpage.

Regards
Racke


--
LinuXia Systems = http://www.linuxia.de/
Expert Interchange Consulting and System Administration
ICDEVGROUP = http://www.icdevgroup.org/
Interchange Development Team




--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583995: marked as done (advi-examples: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 13:49:22 +0200
with message-id 4c04f3c2.9050...@dogguy.org
and subject line Re: Bug#583995: advi-examples: Security bugs in ghostscript
has caused the Debian Bug report #583995,
regarding advi-examples: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583995: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583995
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: advi-examples
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
On 01/06/2010 03:01, Paul Szabo wrote:
 Package: advi-examples Severity: grave Tags: security Justification: 
 user security hole
 
 

I'm closing this bugreport because this package contains only dvi files.
It doesn't contain any program that calls gs.

On a side note, you should check on debian-de...@l.d.o before mass
bug-filing, as per policy [1].

[1]
http://www.debian.org/doc/developers-reference/beyond-pkging.html#submit-many-bugs

Regards,

-- 
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/

---End Message---


Bug#584062: marked as done (sdf: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 12:48:09 +0100
with message-id 20100601114809.ge12...@riva.ucam.org
and subject line Re: Bug#584062: sdf: Security bugs in ghostscript
has caused the Debian Bug report #584062,
regarding sdf: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584062: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584062
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: sdf
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package suggests ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages sdf depends on:
ii  perl 5.10.0-19lenny2 Larry Wall's Practical Extraction 

sdf recommends no packages.

Versions of packages sdf suggests:
ii  ghostscript-x [gs] 8.62.dfsg.1-3.2lenny1 The GPL Ghostscript PostScript/PDF
ii  gs 8.62.dfsg.1-3.2lenny1 Transitional package
pn  htmldocnone(no description available)
ii  perl-doc   5.10.0-19lenny2   Perl documentation
pn  sdf-docnone(no description available)
pn  sgmltools-lite none(no description available)
ii  tetex-bin  2007.dfsg.2-1~lenny2  TeX Live: teTeX transitional packa


---End Message---
---BeginMessage---
On Tue, Jun 01, 2010 at 09:21:58PM +1000, paul.sz...@sydney.edu.au wrote:
 Your explanation shows you are not directly responsible (maybe not
 vulnerable at all), and can close the bug.

OK, thanks for the confirmation.  Closing.

-- 
Colin Watson   [cjwat...@debian.org]

---End Message---


Bug#584013: hyperlatex: Security bugs in ghostscript

2010-06-01 Thread Roland Stigge
Hi,
On 06/01/2010 01:10 PM, paul.sz...@sydney.edu.au wrote:
 (4) Please state clearly what's wrong with the package (hyperlatex in
 this case). From the other bug reports I deduce that gs calls should be
 extended with -P- -dSAFER. This should be done in the hyperlatex
 source package in bin/ps2image, for the record.
 
 Yes, that probably should fix things. (Right now things are still unsafe
 even with those options, but I expect gs to be able to fix the remaining
 bugs.)

I.e., you consider hyperlatex as fixed with regard to #584013 when
-P- -dSAFER are added to the gs calls?

Thanks,

bye,
  Roland



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#559893: Bug#574512: Release-critical bugs in monotone: ping?

2010-06-01 Thread Francis Russell

Ludovic Brenta wrote:

Is anyone still interested in maintaining monotone in Debian?


Just thought I'd add that I use monotone from Debian and know others who 
do as well. I'm willing to help in whatever way I can although I'm not a 
Debian Maintainer. Is this just a manpower issue?


Francis



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584001: courier-faxmail: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Racke,

 ... I just wonder why this option isn't mentioned in the gs manpage.

Good question. Maybe report as a bug to ghostscript?

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#559893: Bug#574512: Release-critical bugs in monotone: ping?

2010-06-01 Thread Ludovic Brenta

Francis Russell wrote:

 Ludovic Brenta wrote:

 Is anyone still interested in maintaining monotone in Debian?

 

 Just thought I'd add that I use monotone from Debian and know others who



 do as well. I'm willing to help in whatever way I can although I'm not a



 Debian Maintainer. Is this just a manpower issue?



Yes. One of the bugs (#574512) that you filed is reportedly fixed upstream

but nobody bothered to backport the patch into 0.47 even though it is a

grave functionality bug.  As for #559893, Richard has not yet answered the

question from Alexander on 2010-04-23.  Lastly, #566060 (updated

Portuguese translation) requires a few minutes of work but I see nothing

done (since January).



Your help would be very welcome; you do not have to be a Debian developer;

see http://bugs.debian.org/574609 for details.



-- 

Ludovic Brenta.





-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584052: kdelibs4c2a: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Sune,

I agree with you. I suggested to gs that it should be secure-by-default,
but they refused. Please do convince them...

In the meantime, maybe you want to fix your use of that crappy gs.

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584013: hyperlatex: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Ronald,

 I.e., you consider hyperlatex as fixed with regard to #584013 when
 -P- -dSAFER are added to the gs calls?

If you done that then I would not insist on keeping the bug open.
Whether fixed, only you can tell: sorry I do not use hyperlatex
so cannot comment. (Please see the contortions that gv is going to
to protect themselves in http://bugs.debian.org/583316 .)

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583435: rpcbind: Insecure handling of state files

2010-06-01 Thread Guillem Jover
Hi!

On Thu, 2010-05-27 at 19:09:08 +0200, Guillem Jover wrote:
 Package: rpcbind
 Version: 0.2.0-4
 Severity: serious
 Tags: security

 The rpcbind daemon, which runs as root, uses /tmp/portmap.xdr and
 /tmp/rpcbind.xdr for doing warm starts as what seems to be a way to
 preserve state between invokations. It parses (through libtirpc) and
 removes them on start. It creates them before exiting.
 
 So first off, *any* user can craft those two files before the daemon
 has started for the first time, which the daemon will parse. This might
 be ok, depending on the checks done on parse, I'd still be very wary of
 letting a user be able to craft such files at will.

It seems to be doing no checks whatsoever. A simple test I performed at
the time of filing this report, but didn't seem to have any obvious
consequence, shows this which I noticed later on:

,---
gaara:~# /etc/init.d/rpcbind start
Starting rpcbind daemon
gaara:~# ps axuOp|egrep '(^USER|[r]pcbind)'
USER   PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
root 23424  0.0  0.0  18768   704 ?Ss   13:53   0:00 /sbin/rpcbind 
-w
gaara:~# /etc/init.d/rpcbind stop
Stopping rpcbind daemon
gaara:~# dd if=/dev/urandom of=/tmp/rpcbind.xdr bs=1024 count=1
1+0 records in
1+0 records out
1024 bytes (1,0 kB) copied, 0,000861307 s, 1,2 MB/s
gaara:~# /etc/init.d/rpcbind start
Starting rpcbind daemon
gaara:~# ps axuOp|egrep '(^USER|[r]pcbind)'
USER   PID %CPU %MEMVSZ   RSS TTY  STAT START   TIME COMMAND
root 23440  0.0  0.0 4008972  772 ?Ss   13:54   0:00 /sbin/rpcbind 
-w
`---

The first start is a normal clean invokation, the second one is using
the crafted file. See how it has allocated almost 4 GiB. Disregard though,
me running all this as root, a user would be able to craft those files as
long as they were not already in /tmp.

thanks,
guillem



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#574512: [Monotone-debian] Re: Bug#574512: Release-critical bugs in monotone: ping?

2010-06-01 Thread Thomas Keller
Am 01.06.2010 13:47, schrieb Francis Russell:
 Ludovic Brenta wrote:
 Is anyone still interested in maintaining monotone in Debian?
 
 Just thought I'd add that I use monotone from Debian and know others who
 do as well. I'm willing to help in whatever way I can although I'm not a
 Debian Maintainer. Is this just a manpower issue?

Basically yes, it would be very cool if you could jump into the boat.
We'll happily support you as much as possible!

Thomas.

-- 
GPG-Key 0x160D1092 | tommyd3...@jabber.ccc.de | http://thomaskeller.biz
Please note that according to the EU law on data retention, information
on every electronic information exchange might be retained for a period
of six months or longer: http://www.vorratsdatenspeicherung.de/?lang=en




signature.asc
Description: OpenPGP digital signature


Bug#583995: advi-examples: Security bugs in ghostscript

2010-06-01 Thread Mehdi Dogguy
On 01/06/2010 14:07, paul.sz...@sydney.edu.au wrote:
 Dear Mehdi,
 
 On a side note, you should check ...
 
 Thanks for that pointer. I guess you are right. But please see…

No.

-- 
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583702: beneath-a-steel-sky: package ships data that cannot be modified

2010-06-01 Thread Ying-Chun Liu (PaulLiu)
Hi Torsten,

I think maybe we can just package the tool into Debian main?
Not sure how to edit beneath-a-steel-sky, but ScummC should be able to create 
ScummVM games from
scratch.

I'll try to see if ScummC can edit beneath-a-steel-sky or not.

Regards,
Paul

-- 
PaulLiu(劉穎駿)
E-mail address: paul...@debian.org



signature.asc
Description: OpenPGP digital signature


Bug#584052: kdelibs4c2a: Security bugs in ghostscript

2010-06-01 Thread Sune Vuorela
On Tuesday 01 June 2010 03:29:46 Paul Szabo wrote:
 Package: kdelibs4c2a
 Version: 4:3.5.10.dfsg.1-0lenny4
 Severity: grave
 Tags: security
 Justification: user security hole
 
 
 Please note remote execute-any-code security bugs in ghostscript:
 
   http://bugs.debian.org/583183
 
 This package suggests ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

Hi

This sounds like it is ghostscript that should be fixed, rather than anything 
that use it.

gs --please-be-secure  should not be something that you have to turn on on 
each usage.

What's the good reason to fix in all apps rather than just making gs --please-
be-secure the default ?

(And I don't consider 'ghostscript upstream being idiots' a good reason)

/Sune
-- 
How can I save a OpenGL provider of a pointer?

You neither should remove the hard disk, nor need to debug the GUI.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583995: advi-examples: Security bugs in ghostscript

2010-06-01 Thread paul . szabo
Dear Mehdi,

 On a side note, you should check ...

 Thanks for that pointer. I guess you are right. But please see...

 No.

Sorry, but I do not understand. Do you mean that you refuse to read, or
that you disagree? Maybe you would care to explain, I would like to know
your opinion.

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584061: marked as done (recoll: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 18:03:16 +0530
with message-id aanlktinb_kplh-jxz2ru4xntncxizb8ypp7jwora8...@mail.gmail.com
and subject line Re: Bug#584061: recoll: Security bugs in ghostscript
has caused the Debian Bug report #584061,
regarding recoll: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584061: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584061
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: recoll
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package suggests ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
On Tue, Jun 1, 2010 at 12:00 PM,  paul.sz...@sydney.edu.au wrote:
 I'm slightly puzzled by your mass-bug filing. Why you opened bugs for
 packages that suggest ghostscript...?

 I was not sure what relationship is implied by suggest. It turns out
 that even depends on (or my parsing of the Packages file?) was not so
 good, I hit printconf instead of foomatic-filters apparently.

 But in essence, because I was asked to do so: please see
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183#42
 and thereabouts.

Hi Paul,

As discussion happened on debian-devel list,
1. MBF should have proper procedure.
2. I'm also disagree that package that suggests affected package has grave bug.
3. Bug should be fixed in gs, not on depends or suggests packages.

Therefore, I'm closing bug :)

-- 
 Cheers,
 Kartik Mistry
 Debian GNU/Linux Developer
 0xD1028C8D | Identica: @kartikm | IRC: kart_
 Blogs: {gu: kartikm, en: ftbfs}.wordpress.com

---End Message---


Bug#584001: courier-faxmail: Security bugs in ghostscript

2010-06-01 Thread Stefan Hornburg (Racke)

On 06/01/2010 01:24 PM, paul.sz...@sydney.edu.au wrote:

Dear Racke,


What kind of fixes do you have in mind?


Please add the  -P-  option to all $GS invocations.

Thanks, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia





The attached patch should take care of that.

Regards
Racke

--
LinuXia Systems = http://www.linuxia.de/
Expert Interchange Consulting and System Administration
ICDEVGROUP = http://www.icdevgroup.org/
Interchange Development Team

--- courier-0.65.0.orig/courier/module.fax/init.in	2002-03-09 01:48:14.0 +0100
+++ courier-0.65.0/courier/module.fax/init.in	2010-06-01 14:28:30.0 +0200
@@ -9,7 +9,7 @@
 tro...@troff@
 dpo...@dpost@
 t...@tbl@
-...@gs@
+GS=@GS@ -P-
 
 pref...@prefix@
 exec_pref...@exec_prefix@


Bug#584124: salome: fails to install (tries to overwrite '/usr/bin/display')

2010-06-01 Thread Denis Laxalde
Package: salome
Version: 5.1.3-8
Severity: grave
Tags: sid
Justification: renders package unusable

Hi,

First of all, thanks for having packaged Salome !
Unfortunately, on my system, it fails to install with the following
error:
Unpacking salome (from .../salome_5.1.3-8_amd64.deb) ...
dpkg: error processing /var/cache/apt/archives/salome_5.1.3-8_amd64.deb 
(--unpack):
 trying to overwrite '/usr/bin/display', which is also in package imagemagick 
7:6.6.0.4-2
dpkg-deb: subprocess paste killed by signal (Broken pipe)
Processing triggers for menu ...
Processing triggers for desktop-file-utils ...
Processing triggers for gnome-menus ...
Errors were encountered while processing:
 /var/cache/apt/archives/salome_5.1.3-8_amd64.deb

Cheers,

  Denis


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages salome depends on:
ii  libboost-thread1.42.0 1.42.0-3   portable C++ multi-threading
ii  libc6 2.10.2-9   Embedded GNU C Library: Shared lib
ii  libcos4-1 4.1.3-1omniORB CORBA services stubs
ii  libcppunit-1.12-1 1.12.1-1   Unit Testing Library for C++
ii  libexpat1 2.0.1-7XML parsing C library - runtime li
ii  libgcc1   1:4.4.4-1  GCC support library
ii  libgl1-mesa-glx [libgl1]  7.7.1-2A free implementation of the OpenG
ii  libglu1-mesa [libglu1]7.7.1-2The OpenGL utility library (GLU)
ii  libhdf5-openmpi-1.8.4 1.8.4-patch1-2 Hierarchical Data Format 5 (HDF5) 
ii  libmed1   2.3.6-2Library to exchange meshed data (F
ii  libmedimportcxx0  2.3.6-2Library to import old version file
ii  libomniorb4-1 4.1.3-1omniORB core libraries
ii  libomnithread3c2  4.1.3-1C++ threading library
ii  libopencascade-foundation 6.3.0.dfsg.1-4 OpenCASCADE CAE platform shared li
ii  libopencascade-modeling-6 6.3.0.dfsg.1-4 OpenCASCADE CAE platform shared li
ii  libopencascade-ocaf-lite- 6.3.0.dfsg.1-4 OpenCASCADE CAE platform shared li
ii  libopencascade-visualizat 6.3.0.dfsg.1-4 OpenCASCADE CAE platform shared li
ii  libopencascade-visualizat 6.3.0.dfsg.1-4 OpenCASCADE CAE platform library d
ii  libopenmpi1.3 1.4.1-3high performance message passing l
ii  libqt4-opengl 4:4.6.2-4  Qt 4 OpenGL module
ii  libqt4-xml4:4.6.2-4  Qt 4 XML module
ii  libqtcore44:4.6.2-4  Qt 4 core module
ii  libqtgui4 4:4.6.2-4  Qt 4 GUI module
ii  libsalome-dev 5.1.3-8Numerical simulation pre- and post
ii  libsalome5.1.3-0  5.1.3-8Numerical simulation pre- and post
ii  libscotch-5.1 5.1.8a.dfsg-2  programs and libraries for graph, 
ii  libstdc++64.4.4-1The GNU Standard C++ Library v3
ii  libvtk5.4 5.4.2-6Visualization Toolkit - A high lev
ii  libx11-6  2:1.3.3-3  X11 client-side library
ii  libxml2   2.7.7.dfsg-2   GNOME XML library
ii  libxt61:1.0.7-1  X11 toolkit intrinsics library
ii  omniorb4-nameserver   4.1.3-1Transitional package for the omniO
ii  python2.5 2.5.5-6An interactive high-level object-o
ii  python2.5-salome  5.1.3-8Numerical simulation pre- and post
ii  salome-common 5.1.3-8Numerical simulation pre- and post

salome recommends no packages.

Versions of packages salome suggests:
ii  salome-examples   5.1.3-8Numerical simulation pre- and post



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583995: advi-examples: Security bugs in ghostscript

2010-06-01 Thread Mehdi Dogguy
On 01/06/2010 14:26, paul.sz...@sydney.edu.au wrote:
 Dear Mehdi,
 
 On a side note, you should check ...
 
 Thanks for that pointer. I guess you are right. But please see...
 
 No.
 
 Sorry, but I do not understand. Do you mean that you refuse to read,
 or that you disagree? Maybe you would care to explain, I would like to
  know your opinion.
 

In case, it isn't obvious: I already read 583183 before closing and I
explained why advi-examples isn't open to such flaws.

-- 
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583183: [Pkg-cups-devel] Bug#584003: cups-pdf: Security bugs in ghostscript

2010-06-01 Thread Martin-Éric Racine
On Tue, Jun 1, 2010 at 4:06 AM, Paul Szabo paul.sz...@sydney.edu.au wrote:
 Package: cups-pdf
 Severity: grave
 Tags: security
 Justification: user security hole


 Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

 This package depends on ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

In the future, please have the decency to consult with debian-devel
before mass-filing bugs.  Also check whether the issue actually
applies to a package before filing a bug against it. We already call
-dSAFER and drop privileges early, so we're already protected as it
is. Closing.

Martin-Éric



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584003: marked as done (cups-pdf: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 16:29:13 +0300
with message-id aanlktimuuz_6qwyixdw0zdq85cgqhieksnzggor8l...@mail.gmail.com
and subject line Re: [Pkg-cups-devel] Bug#584003: cups-pdf: Security bugs in  
ghostscript
has caused the Debian Bug report #584003,
regarding cups-pdf: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584003: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584003
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: cups-pdf
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
On Tue, Jun 1, 2010 at 4:06 AM, Paul Szabo paul.sz...@sydney.edu.au wrote:
 Package: cups-pdf
 Severity: grave
 Tags: security
 Justification: user security hole


 Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

 This package depends on ghostscript, and may be affected. Please
 evaluate the security of this package, and fix if needed.

In the future, please have the decency to consult with debian-devel
before mass-filing bugs.  Also check whether the issue actually
applies to a package before filing a bug against it. We already call
-dSAFER and drop privileges early, so we're already protected as it
is. Closing.

Martin-Éric

---End Message---


Processed: tagging 548909

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 # minor issue, maybe via stable-proposed updates
 tags 548909 - lenny
Bug #548909 {Done: Axel Beckert a...@debian.org} [xen-tools] xen-tools: 
xen-create-image creates world readable disk image files
Removed tag(s) lenny.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
548909: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548909
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: notfound 577532 in 3.0.4-2

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 #make bts happy
 notfound 577532 3.0.4-2
Bug #577532 {Done: Christoph Goehre ch...@sigxcpu.org} [icedove] icedove: 
segfault on startup
Bug No longer marked as found in versions icedove/3.0.4-2.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
577532: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577532
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583475: META file for ocaml-llvm has a wrong filename

2010-06-01 Thread Arthur Loiret
Hi,

2010/5/30, Mehdi Dogguy me...@dogguy.org:
 It *does* matter! When I have to open some META file by hand to see its
 content, it's much more easier to know beforehand (and without looking
 for it) where it is. For now, the situation is not uniform: most of the
 people put the META file under +$lib/META, some others put under METAS
 (but a few¹ of them when looking at the archive's state).

Waiting for you comment and patch, Sylvain. :-)


Thanks,
Arthur.



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583475: META file for ocaml-llvm has a wrong filename

2010-06-01 Thread Mehdi Dogguy
On 01/06/2010 16:57, Arthur Loiret wrote:
 Hi,
 
 2010/5/30, Mehdi Dogguy me...@dogguy.org:
 It *does* matter! When I have to open some META file by hand to see 
 its content, it's much more easier to know beforehand (and without 
 looking for it) where it is. For now, the situation is not uniform: 
 most of the people put the META file under +$lib/META, some others 
 put under METAS (but a few¹ of them when looking at the archive's 
 state).
 
 Waiting for you comment and patch, Sylvain. :-)
 

Sylvain said privately (but I think I can repeat it) that it is almost a
matter of taste. I disagree but I don't have a strong opinion on that. It
was only an attempt to uniformize the location of META files. Feel free to
implement whatever solution you like. From an ocamlfind POV, it doesn't
matter.

Regards,

-- 
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583475: META file for ocaml-llvm has a wrong filename

2010-06-01 Thread Sylvain Le Gall
Hello Arthur,

On Tue, Jun 01, 2010 at 04:57:23PM +0200, Arthur Loiret wrote:
 Hi,
 
 2010/5/30, Mehdi Dogguy me...@dogguy.org:
  It *does* matter! When I have to open some META file by hand to see its
  content, it's much more easier to know beforehand (and without looking
  for it) where it is. For now, the situation is not uniform: most of the
  people put the META file under +$lib/META, some others put under METAS
  (but a few¹ of them when looking at the archive's state).
 
 Waiting for you comment and patch, Sylvain. :-)
 

You can use the patch provided here:
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=10;filename=fix583475.patch;att=1;bug=583475

The point Mehdi talks about is valid but needs to be clarified in the
Debian packaging policy -- after discussing best practices among other
pkg-ocaml-maint members.

We can live with the provided patch at least until Squeeze is released ;-)

Cheers
Sylvain Le Gall





--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583316: Running gs in a safe directory.

2010-06-01 Thread Bernhard R. Link
* paul.sz...@sydney.edu.au paul.sz...@sydney.edu.au [100601 01:06]:
 I do not see where /usr/lib/gv/safe-gs-workdir is created.

It's done in debian/rules so that not makefiles have to be changed.
(and it's /usr/share/gv/safe-gs-workdir btw).

 I would prefer to check it actually is empty... pure paranoia, is
 root-owned so is unlikely to change. Name it please-keep-empty maybe?

Someone might actuall want to put stuff. Anf putting unsafe stuff in
a directory called safe-gs-workdir is nothing I guess a normal person
will do...

Bernhard R. Link



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584005: epstool: Security bugs in ghostscript

2010-06-01 Thread Philip Rinn
Hi,

I checked the package. It's not affected by this security issue. I'll close 
this bug.

Philip



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: closing as it's not affected by security issue

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 close 584005
Bug#584005: epstool: Security bugs in ghostscript
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Paul Szabo 
paul.sz...@sydney.edu.au


End of message, stopping processing here.

Please contact me if you need assistance.
-- 
584005: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584005
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#482298: marked as done (crashes when start run icedove on mipsel)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 18:02:06 +0200
with message-id 20100601160206.ga1...@katjuscha.chris.lan
and subject line Re: Bug#482298: crashes when start run icedove on mipsel
has caused the Debian Bug report #482298,
regarding crashes when start run icedove on mipsel
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
482298: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=482298
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Subject: crashes when start run icedove  on mipsel
Package: icedove
Version: 2.0.0.14-1
Severity: normal

*** Please type your report below this line ***

Bug#482291  crashes when start run iceweasel  on mipsel



-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: mipsel (mips64)

Kernel: Linux 2.6.25.2 (PREEMPT)
Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages icedove depends on:
ii  debianutils2.28.6Miscellaneous utilities specific t
ii  fontconfig 2.5.0-2   generic font configuration library
ii  libatk1.0-01.22.0-1  The ATK accessibility toolkit
ii  libc6  2.7-11GNU C Library: Shared libraries
ii  libcairo2  1.6.4-2   The Cairo 2D vector graphics libra
ii  libfontconfig1 2.5.0-2   generic font configuration library
ii  libfreetype6   2.3.5-1   FreeType 2 font engine, shared lib
ii  libgcc11:4.3.0-4 GCC support library
ii  libglib2.0-0   2.16.3-2  The GLib library of C routines
ii  libgtk2.0-02.12.9-4  The GTK+ graphical user interface
ii  libhunspell-1.2-0  1.2.2-2   spell checker and morphological an
ii  libjpeg62  6b-14 The Independent JPEG Group's JPEG
ii  libnspr4-0d4.7.1-1   NetScape Portable Runtime Library
ii  libnss3-1d 3.12.0~rc3-1  Network Security Service libraries
ii  libpango1.0-0  1.20.2-2  Layout and rendering of internatio
ii  libpng12-0 1.2.27-1  PNG library - runtime
ii  libstdc++6 4.3.0-4   The GNU Standard C++ Library v3
ii  libx11-6   2:1.0.3-7 X11 client-side library
ii  libxft22.1.12-2  FreeType-based font drawing librar
ii  libxinerama1   2:1.0.3-2 X11 Xinerama extension library
ii  libxrender11:0.9.4-1 X Rendering Extension client libra
ii  libxt6 1:1.0.5-3 X11 toolkit intrinsics library
ii  psmisc 22.6-1Utilities that use the proc filesy
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime

icedove recommends no packages.

-- debconf-show failed


---End Message---
---BeginMessage---
Version: 3.0.4-2

  Could you or someone from the list try to start Icedove on a mipsel
  machine? I didn't have a mipsel box.
 I guess you mean start icedove 3.0, I've tried to compile and run a
 icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
 crashes. And icedove 2 did crash.

So since icedove 3.0, it's work fine on mipsel.

Cheers,
Christoph

---End Message---


Bug#561630: marked as done (segfault on startup (mipsel))

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 18:02:06 +0200
with message-id 20100601160206.ga1...@katjuscha.chris.lan
and subject line Re: Bug#482298: crashes when start run icedove on mipsel
has caused the Debian Bug report #482298,
regarding segfault on startup (mipsel)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
482298: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=482298
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: iceowl
Version: 0.8-6
Severity: grave
Justification: completely useless on mipsel
User: debian-m...@lists.debian.org

r...@yeeloong:~$ LANG=C iceowl
/usr/lib/iceowl/run-mozilla.sh: line 131:  3223 Segmentation fault  $prog 
${1+$@}

-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: mipsel (mips64)

Kernel: Linux 2.6.31.6-libre1 (PREEMPT)
Locale: LANG=ca_AD.UTF-8, LC_CTYPE=ca_AD.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
Version: 3.0.4-2

  Could you or someone from the list try to start Icedove on a mipsel
  machine? I didn't have a mipsel box.
 I guess you mean start icedove 3.0, I've tried to compile and run a
 icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
 crashes. And icedove 2 did crash.

So since icedove 3.0, it's work fine on mipsel.

Cheers,
Christoph

---End Message---


Bug#539689: marked as done ([lenny] icedove and iceowel segfaults on mipsel)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 1 Jun 2010 18:02:06 +0200
with message-id 20100601160206.ga1...@katjuscha.chris.lan
and subject line Re: Bug#482298: crashes when start run icedove on mipsel
has caused the Debian Bug report #482298,
regarding [lenny] icedove and iceowel segfaults on mipsel
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
482298: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=482298
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: icedove
Version: 2.0.0.22-0lenny1
Severity: serious

On a stable lenny/mipsel installation, icedove and iceowl  currently 
segfaults when executed from the commandline. Output is as follwos:

mcasadev...@genesis:~/bin$ icedove
/usr/lib/icedove/run-mozilla.sh: line 131: 17689 Segmentation fault  
$prog ${1+$@}

I'll attempt to provide a more useful backtrace and such once I have the 
system fully setup. As an additional note, iceweasel is unaffected.
Michael

-- System Information:
Debian Release: 5.0.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: mipsel (mips64)

Kernel: Linux 2.6.27.1-ls2f-lemote-yl-di
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages icedove depends on:
ii  debianutils2.30  Miscellaneous utilities specific t
ii  fontconfig 2.6.0-3   generic font configuration library
ii  libatk1.0-01.22.0-1  The ATK accessibility toolkit
ii  libc6  2.7-18GNU C Library: Shared libraries
ii  libcairo2  1.6.4-7   The Cairo 2D vector graphics libra
ii  libfontconfig1 2.6.0-3   generic font configuration library
ii  libfreetype6   2.3.7-2+lenny1FreeType 2 font engine, shared lib
ii  libgcc11:4.3.2-1.1   GCC support library
ii  libglib2.0-0   2.16.6-2  The GLib library of C routines
ii  libgtk2.0-02.12.12-1~lenny1  The GTK+ graphical user interface 
ii  libhunspell-1.2-0  1.2.6-1   spell checker and morphological an
ii  libjpeg62  6b-14 The Independent JPEG Group's JPEG 
ii  libnspr4-0d4.7.1-4   NetScape Portable Runtime Library
ii  libnss3-1d 3.12.0-6  Network Security Service libraries
ii  libpango1.0-0  1.20.5-5  Layout and rendering of internatio
ii  libpng12-0 1.2.27-2+lenny2   PNG library - runtime
ii  libstdc++6 4.3.2-1.1 The GNU Standard C++ Library v3
ii  libx11-6   2:1.1.5-2 X11 client-side library
ii  libxft22.1.12-3  FreeType-based font drawing librar
ii  libxinerama1   2:1.0.3-2 X11 Xinerama extension library
ii  libxrender11:0.9.4-2 X Rendering Extension client libra
ii  libxt6 1:1.0.5-3 X11 toolkit intrinsics library
ii  psmisc 22.6-1Utilities that use the proc filesy
ii  zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime

icedove recommends no packages.

Versions of packages icedove suggests:
pn  icedove-gnome-support none (no description available)
pn  latex-xft-fonts   none (no description available)
ii  libthai0  0.1.9-4Thai language support library

-- no debconf information


---End Message---
---BeginMessage---
Version: 3.0.4-2

  Could you or someone from the list try to start Icedove on a mipsel
  machine? I didn't have a mipsel box.
 I guess you mean start icedove 3.0, I've tried to compile and run a
 icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
 crashes. And icedove 2 did crash.

So since icedove 3.0, it's work fine on mipsel.

Cheers,
Christoph

---End Message---


Bug#583387: marked as done (no longer shipping static libraries causes cryptsetup FTBFS)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 16:03:31 +
with message-id e1ojtwb-0001bm...@ries.debian.org
and subject line Bug#583387: fixed in cryptsetup 2:1.1.2-1
has caused the Debian Bug report #583387,
regarding no longer shipping static libraries causes cryptsetup FTBFS
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583387: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583387
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: libdevmapper-dev
Version: 2:1.02.47-1
Severity: grave

hey,

the most recent upload of lvm2 source package, which removed static
libraries from the lib*-dev packages breaks build process of cryptsetup.

cryptsetup staticly links against libdevmapper, as the library is
located in /usr/lib, and cryptsetup needs to be invoked before /usr is
mounted. please either bring brack the static library, or move the
dynamic library to /lib.

unfortunately i just uploaded a new version of cryptsetup which failed
to build on all architectures for that reason. thus a prompt fix would
be much appreciated.

don't know if other packages are affected as well.

greetings,
 jonas


signature.asc
Description: Digital signature
---End Message---
---BeginMessage---
Source: cryptsetup
Source-Version: 2:1.1.2-1

We believe that the bug you reported is fixed in the latest version of
cryptsetup, which is due to be installed in the Debian FTP archive:

cryptsetup-udeb_1.1.2-1_amd64.udeb
  to main/c/cryptsetup/cryptsetup-udeb_1.1.2-1_amd64.udeb
cryptsetup_1.1.2-1.debian.tar.gz
  to main/c/cryptsetup/cryptsetup_1.1.2-1.debian.tar.gz
cryptsetup_1.1.2-1.dsc
  to main/c/cryptsetup/cryptsetup_1.1.2-1.dsc
cryptsetup_1.1.2-1_amd64.deb
  to main/c/cryptsetup/cryptsetup_1.1.2-1_amd64.deb
cryptsetup_1.1.2.orig.tar.bz2
  to main/c/cryptsetup/cryptsetup_1.1.2.orig.tar.bz2
libcryptsetup-dev_1.1.2-1_amd64.deb
  to main/c/cryptsetup/libcryptsetup-dev_1.1.2-1_amd64.deb
libcryptsetup1_1.1.2-1_amd64.deb
  to main/c/cryptsetup/libcryptsetup1_1.1.2-1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 583...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Meurer m...@debian.org (supplier of updated cryptsetup package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 01 Jun 2010 15:37:50 +0200
Source: cryptsetup
Binary: cryptsetup cryptsetup-udeb libcryptsetup1 libcryptsetup-dev
Architecture: source amd64
Version: 2:1.1.2-1
Distribution: unstable
Urgency: low
Maintainer: Debian Cryptsetup Team 
pkg-cryptsetup-de...@lists.alioth.debian.org
Changed-By: Jonas Meurer m...@debian.org
Description: 
 cryptsetup - configures encrypted block devices
 cryptsetup-udeb - configures encrypted block devices (udeb)
 libcryptsetup-dev - libcryptsetup development files
 libcryptsetup1 - libcryptsetup shared library
Closes: 554600 574126 583387 583397 583471 583567 583568 583570
Changes: 
 cryptsetup (2:1.1.2-1) unstable; urgency=low
 .
   * new upstream release, changes include:
 - Fix luksFormat/luksOpen reading passphrase from stdin and - keyfile.
   (closes: #583397)
 - Add verbose log level and move unlocking message there.
 - Remove device even if underlying device disappeared (remove, luksClose).
   (closes: #554600, #574126)
 - Fix (deprecated) reload device command to accept new device argument.
   * merged from ubuntu:
 - if plymouth is present in the initramfs, use this directly, bypassing
   the cryptsetup askpass script
 - start usplash in initramfs, since we need it for fancy passphrase input
 - Set FRAMEBUFFER=y in cryptroot-conf, to pull plymouth into the initramfs
 - debian/initramfs/cryptroot-hook: Properly anchor our regexps when
   grepping /etc/crypttab so that we don't incorrectly match device names
   that are substrings of one another.
 - debian/initramfs/cryptroot-script: Don't leak /conf/conf.d/cryptroot
   file descriptor to subprocesses.
   * sync list of supported filesystems in passdev.c and cryptpassdev-hook
   * fix debian/watch file to work with updated code.google.com download page
   * stop building and shipping static libs (closes: #583387, #583471)
   * improve documentation on (pre)checks in 

Bug#583471: marked as done (cryptsetup: FTBFS: configure: error: Your system requires SElinux libraries for static compilation.)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 16:03:31 +
with message-id e1ojtwb-0001bs...@ries.debian.org
and subject line Bug#583471: fixed in cryptsetup 2:1.1.2-1
has caused the Debian Bug report #583471,
regarding cryptsetup: FTBFS: configure: error: Your system requires SElinux 
libraries for static compilation.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583471: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583471
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Source: cryptsetup
Version: 2:1.1.0-2.1
Severity: serious
Tags: squeeze sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20100527 qa-ftbfs
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part:
  /usr/bin/fakeroot debian/rules clean
 QUILT_PATCHES=debian/patches \
   quilt --quiltrc /dev/null pop -a -R || test $? = 2
 No patch removed
 rm -rf .pc debian/stamp-patched
 dh_testdir
 dh_testroot
 if test -f Makefile; then /usr/bin/make clean; fi
 if test -f config.mess; then rm -f `cat config.mess`; fi
 rm -f debian/luksformat.8
 rm -f debian/doc/*.[0-9] debian/doc/variables.xml
 rm -f debian/scripts/passdev
 rm -f debian/askpass
 rm -f config.mess
 rm -rf autom4te.cache 
 rm -f src/cryptsetup.static
 dh_clean configure-stamp build-stamp install-stamp
  dpkg-source -b cryptsetup-1.1.0
 dpkg-source: warning: no source format specified in debian/source/format, see 
 dpkg-source(1)
 dpkg-source: info: using source format `1.0'
 dpkg-source: info: building cryptsetup using existing 
 cryptsetup_1.1.0.orig.tar.gz
 dpkg-source: info: building cryptsetup in cryptsetup_1.1.0-2.1.diff.gz
 dpkg-source: warning: the diff modifies the following upstream files: 
  INSTALL
  Makefile.in
  aclocal.m4
  compile
  config.guess
  config.sub
  lib/Makefile.in
  luks/Makefile.in
  man/Makefile.in
  src/Makefile.in
  tests/Makefile.in
 dpkg-source: info: use the '3.0 (quilt)' format to have separate and 
 documented changes to upstream files, see dpkg-source(1)
 dpkg-source: info: building cryptsetup in cryptsetup_1.1.0-2.1.dsc
  debian/rules build
 QUILT_PATCHES=debian/patches \
   quilt --quiltrc /dev/null push -a || test $? = 2
 Applying patch 02_manpage.patch
 patching file man/cryptsetup.8
 
 Applying patch 03_luksAddKey.patch
 patching file ChangeLog
 patching file lib/setup.c
 
 Applying patch 04_crypto_init.patch
 patching file ChangeLog
 patching file lib/setup.c
 patching file lib/gcrypt.c
 
 Now at patch 04_crypto_init.patch
 touch debian/stamp-patched
 dh_testdir
 find -xtype f ! -name manifest  manifest
 autoreconf --force --install
 Copying file m4/codeset.m4
 Copying file m4/glibc2.m4
 Copying file m4/glibc21.m4
 Copying file m4/intdiv0.m4
 Copying file m4/intmax.m4
 Copying file m4/inttypes-h.m4
 Copying file m4/inttypes-pri.m4
 Copying file m4/inttypes_h.m4
 Copying file m4/lcmessage.m4
 Copying file m4/lock.m4
 Copying file m4/longdouble.m4
 Copying file m4/longlong.m4
 Copying file m4/printf-posix.m4
 Copying file m4/signed.m4
 Copying file m4/size_max.m4
 Copying file m4/stdint_h.m4
 Copying file m4/uintmax_t.m4
 Copying file m4/ulonglong.m4
 Copying file m4/visibility.m4
 Copying file m4/wchar_t.m4
 Copying file m4/wint_t.m4
 Copying file m4/xsize.m4
 Copying file po/Makevars.template
 libtoolize: putting auxiliary files in `.'.
 libtoolize: copying file `./ltmain.sh'
 libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
 libtoolize: copying file `m4/libtool.m4'
 libtoolize: copying file `m4/ltoptions.m4'
 libtoolize: copying file `m4/ltsugar.m4'
 libtoolize: copying file `m4/ltversion.m4'
 libtoolize: copying file `m4/lt~obsolete.m4'
 CFLAGS=-Wall -g -O2 ./configure --build x86_64-linux-gnu \
   --prefix=/usr \
   --sbindir=/sbin \
   --mandir=/usr/share/man \
   --enable-shared \
   --enable-static
 checking for a BSD-compatible install... /usr/bin/install -c
 checking whether build environment is sane... yes
 checking for gawk... no
 checking for mawk... mawk
 checking whether make sets $(MAKE)... yes
 checking build system type... x86_64-pc-linux-gnu
 checking host system type... x86_64-pc-linux-gnu
 checking for style of include used by make... GNU
 checking for gcc... gcc
 checking whether the C compiler works... yes
 checking for C compiler default output file name... a.out
 checking for suffix of executables... 
 checking whether we are cross compiling... no
 checking for suffix of object files... o
 checking whether we are using the GNU C compiler... 

Bug#482298: crashes when start run icedove on mipsel

2010-06-01 Thread Christoph Goehre
Version: 3.0.4-2

  Could you or someone from the list try to start Icedove on a mipsel
  machine? I didn't have a mipsel box.
 I guess you mean start icedove 3.0, I've tried to compile and run a
 icedove 3.0 on a Yeeloong laptop, which is Loongson2F-based. So far no
 crashes. And icedove 2 did crash.

So since icedove 3.0, it's work fine on mipsel.

Cheers,
Christoph



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584139: ecb: uninstallable with emacs 23.2

2010-06-01 Thread Rogério Brito
Package: ecb
Severity: serious
Justification: uninstallable

The current version of ecb is uninstallable in a Debian sid system,
unfortunately.

Also, the last update of this package was about 4 years ago. Would it be
a good idea to update it?


Regards,

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ecb depends on:
pn  cedet-contribnone  (no description available)
pn  cogrenone  (no description available)
pn  eieionone  (no description available)
ii  emacs23 [emacsen]23.2+1-2The GNU Emacs editor (with GTK+ us
pn  semantic none  (no description available)
ii  speedbar 1:1.0pre4-3 Everything browser, or Dired on st

ecb recommends no packages.

ecb suggests no packages.

-- 
Rogério Brito : rbr...@{ime.usp.br,gmail.com} : GPG key 1024D/7C2CAEB8
http://rb.doesntexist.org : Packages for LaTeX : algorithms.berlios.de
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584042: marked as done (cd-circleprint: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 16:32:20 +
with message-id e1ojuo4-0005g1...@ries.debian.org
and subject line Bug#584042: fixed in cd-circleprint 0.7.0-3
has caused the Debian Bug report #584042,
regarding cd-circleprint: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584042: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584042
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: cd-circleprint
Severity: grave
Tags: security
Justification: user security hole


Subject: Security bugs in ghostscript

Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package suggests ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages cd-circleprint depends on:
ii  perl 5.10.0-19lenny2 Larry Wall's Practical Extraction 
ii  perl-modules 5.10.0-19lenny2 Core Perl modules
ii  perl-tk  1:804.028-1+b1  Perl module providing the Tk graph

cd-circleprint recommends no packages.

cd-circleprint suggests no packages.


---End Message---
---BeginMessage---
Source: cd-circleprint
Source-Version: 0.7.0-3

We believe that the bug you reported is fixed in the latest version of
cd-circleprint, which is due to be installed in the Debian FTP archive:

cd-circleprint_0.7.0-3.diff.gz
  to main/c/cd-circleprint/cd-circleprint_0.7.0-3.diff.gz
cd-circleprint_0.7.0-3.dsc
  to main/c/cd-circleprint/cd-circleprint_0.7.0-3.dsc
cd-circleprint_0.7.0-3_all.deb
  to main/c/cd-circleprint/cd-circleprint_0.7.0-3_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 584...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Tuckley col...@debian.org (supplier of updated cd-circleprint package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 16:53:04 +0100
Source: cd-circleprint
Binary: cd-circleprint
Architecture: source all
Version: 0.7.0-3
Distribution: unstable
Urgency: low
Maintainer: Colin Tuckley col...@debian.org
Changed-By: Colin Tuckley col...@debian.org
Description: 
 cd-circleprint - prints round cd-labels
Closes: 584042
Changes: 
 cd-circleprint (0.7.0-3) unstable; urgency=low
 .
   * Remove suggest for ghostscript due to security concerns
 (closes: #584042).
   * Update standards version to 3.8.4 (no changes required).
   * Fix misc formatting and spelling problems in man page.
Checksums-Sha1: 
 90a2b31a7ecf989991cd06e1f31c27c9ef89bbcd 1058 cd-circleprint_0.7.0-3.dsc
 5bcf9bef8a337abf1641dba26923db5d110261e8 4322 cd-circleprint_0.7.0-3.diff.gz
 c0490a131757111de71fad1d963884e78aa9afb9 84252 cd-circleprint_0.7.0-3_all.deb
Checksums-Sha256: 
 d73b9535778718bc5249b68db182b5affdd16f8305d795ddd0ce8faeb3eff1cd 1058 
cd-circleprint_0.7.0-3.dsc
 4b241c461ac9d70d1227616f1e250d1b7f3e9864d24a44327ff11be016db 4322 
cd-circleprint_0.7.0-3.diff.gz
 929ceabd68b980985e58f6b07bffb2418a700c90ded37c2513eb080128139b05 84252 
cd-circleprint_0.7.0-3_all.deb
Files: 
 a4a3535107d6b7b9731aeac2fa331e61 1058 text optional cd-circleprint_0.7.0-3.dsc
 ffbbb90385c232436b7b6c989c2cf20d 4322 text optional 
cd-circleprint_0.7.0-3.diff.gz
 9d4edebf7bcfb184bdc178a50ad1b20f 84252 text optional 
cd-circleprint_0.7.0-3_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkwFNL8ACgkQj2OPlhswRc7dCwCgkWuDYD3OGWvJXT6eo1wcEC1V
ZjEAn0tmAnD1AdURJZsfWeP+pJazkE0H
=5m9v
-END PGP SIGNATURE-


---End Message---


Bug#583183: /usr/bin/gs: Insecure gs initialization

2010-06-01 Thread Michael Gilbert
wouldn't it make more sense to solve these issues in the ghostscript
package by itself; rather than 100 different packages.  

even if ghostscript won't change their code, debian always has the
option to fix it anyway.  that could be done be either applying a
patch that automatically uses the safer options by default, or by
installing wrapper scripts that the safer options.  fixing 100
different packages is a significant undertaking, and that should be
avoided if there is a simpler approach.

mike



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#571220: Bug still seems to be there

2010-06-01 Thread Alan Chandler
I have version 4.2.3-1 installed, but there my first attempt to call up 
the software and I get


Deprecated: Assigning the return value of new by reference is deprecated 
in /usr/share/phppgadmin/classes/Misc.php on line /344/


I went into my system and purged the old package and deleted 
/usr/share/phppgadmin and below before re-installing just to be sure 
(because I had manually patched this file before).


Line 344 now has in it

 $data = new $_type($_connection-conn);

I manually edited it to be

 $data = new $_type($_connection-conn);

And it works

attachment: alan_chandler.vcf

Processed: Re: [Pkg-samba-maint] Bug#584104: Bug#584104: cifs-utils: mount.cifs ignores credentials option

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 584104 serious
Bug #584104 [cifs-utils] cifs-utils: mount.cifs ignores credentials option
Severity set to 'serious' from 'normal'

 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
584104: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584104
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583989: marked as done (Courier IMAP: Clients think logins have failed after upgrade)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 17:02:48 +
with message-id e1ojury-0007ky...@ries.debian.org
and subject line Bug#583989: fixed in courier 0.65.0-1
has caused the Debian Bug report #583989,
regarding Courier IMAP: Clients think logins have failed after upgrade
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583989: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583989
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: courier
Version: 0.64.2-1
Severity: grave

Upstream has the patch:
http://sourceforge.net/mailarchive/forum.php?thread_name=4BA4F266.3080603%40linuxia.deforum_name=courier-users

Thunderbird chokes on that and requests a login again, claiming a login 
failure.
(ditto Evolution. Client thinks a transaction failed on the server but
it actually succeeded. The client and server get out of sync. Appear to
be missing messages/discover duplicate message after closing and
reopening client/etc).


--- courier-0.64.2-orig/imap/imapd.c2010-03-16 23:12:40.0 +0100
+++ courier-0.64.2/imap/imapd.c 2010-03-20 15:34:35.0 +0100
@@ -6503,7 +6503,7 @@
 
if ((w=maildirwatch_alloc(.)) == NULL)
{
-   writes(*OK [ALERT] Filesystem notification 
initialization error -- contact your mail administrator (check for 
configuration errors with the FAM/Gamin library)\r\n);
+   writes(* OK [ALERT] Filesystem notification 
initialization error -- contact your mail administrator (check for 
configuration errors with the FAM/Gamin library)\r\n);
}
else
{





---End Message---
---BeginMessage---
Source: courier
Source-Version: 0.65.0-1

We believe that the bug you reported is fixed in the latest version of
courier, which is due to be installed in the Debian FTP archive:

courier-base_0.65.0-1_amd64.deb
  to main/c/courier/courier-base_0.65.0-1_amd64.deb
courier-doc_0.65.0-1_all.deb
  to main/c/courier/courier-doc_0.65.0-1_all.deb
courier-faxmail_0.65.0-1_amd64.deb
  to main/c/courier/courier-faxmail_0.65.0-1_amd64.deb
courier-imap-ssl_4.8.0-1_amd64.deb
  to main/c/courier/courier-imap-ssl_4.8.0-1_amd64.deb
courier-imap_4.8.0-1_amd64.deb
  to main/c/courier/courier-imap_4.8.0-1_amd64.deb
courier-ldap_0.65.0-1_amd64.deb
  to main/c/courier/courier-ldap_0.65.0-1_amd64.deb
courier-maildrop_0.65.0-1_amd64.deb
  to main/c/courier/courier-maildrop_0.65.0-1_amd64.deb
courier-mlm_0.65.0-1_amd64.deb
  to main/c/courier/courier-mlm_0.65.0-1_amd64.deb
courier-mta-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-mta-ssl_0.65.0-1_amd64.deb
courier-mta_0.65.0-1_amd64.deb
  to main/c/courier/courier-mta_0.65.0-1_amd64.deb
courier-pcp_0.65.0-1_amd64.deb
  to main/c/courier/courier-pcp_0.65.0-1_amd64.deb
courier-pop-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-pop-ssl_0.65.0-1_amd64.deb
courier-pop_0.65.0-1_amd64.deb
  to main/c/courier/courier-pop_0.65.0-1_amd64.deb
courier-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-ssl_0.65.0-1_amd64.deb
courier-webadmin_0.65.0-1_amd64.deb
  to main/c/courier/courier-webadmin_0.65.0-1_amd64.deb
courier_0.65.0-1.diff.gz
  to main/c/courier/courier_0.65.0-1.diff.gz
courier_0.65.0-1.dsc
  to main/c/courier/courier_0.65.0-1.dsc
courier_0.65.0.orig.tar.gz
  to main/c/courier/courier_0.65.0.orig.tar.gz
sqwebmail_0.65.0-1_amd64.deb
  to main/c/courier/sqwebmail_0.65.0-1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 583...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stefan Hornburg (Racke) ra...@linuxia.de (supplier of updated courier package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 17:37:28 +0200
Source: courier
Binary: courier-base courier-maildrop courier-mlm courier-mta courier-faxmail 
courier-webadmin sqwebmail courier-pcp courier-pop courier-imap courier-ldap 
courier-doc courier-ssl courier-mta-ssl courier-pop-ssl courier-imap-ssl
Architecture: source all amd64
Version: 0.65.0-1
Distribution: unstable
Urgency: low
Maintainer: Stefan Hornburg (Racke) ra...@linuxia.de
Changed-By: Stefan Hornburg (Racke) ra...@linuxia.de
Description: 
 courier-base - Courier mail 

Bug#584001: marked as done (courier-faxmail: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 17:02:48 +
with message-id e1ojury-0007l8...@ries.debian.org
and subject line Bug#584001: fixed in courier 0.65.0-1
has caused the Debian Bug report #584001,
regarding courier-faxmail: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584001: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584001
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: courier-faxmail
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash


---End Message---
---BeginMessage---
Source: courier
Source-Version: 0.65.0-1

We believe that the bug you reported is fixed in the latest version of
courier, which is due to be installed in the Debian FTP archive:

courier-base_0.65.0-1_amd64.deb
  to main/c/courier/courier-base_0.65.0-1_amd64.deb
courier-doc_0.65.0-1_all.deb
  to main/c/courier/courier-doc_0.65.0-1_all.deb
courier-faxmail_0.65.0-1_amd64.deb
  to main/c/courier/courier-faxmail_0.65.0-1_amd64.deb
courier-imap-ssl_4.8.0-1_amd64.deb
  to main/c/courier/courier-imap-ssl_4.8.0-1_amd64.deb
courier-imap_4.8.0-1_amd64.deb
  to main/c/courier/courier-imap_4.8.0-1_amd64.deb
courier-ldap_0.65.0-1_amd64.deb
  to main/c/courier/courier-ldap_0.65.0-1_amd64.deb
courier-maildrop_0.65.0-1_amd64.deb
  to main/c/courier/courier-maildrop_0.65.0-1_amd64.deb
courier-mlm_0.65.0-1_amd64.deb
  to main/c/courier/courier-mlm_0.65.0-1_amd64.deb
courier-mta-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-mta-ssl_0.65.0-1_amd64.deb
courier-mta_0.65.0-1_amd64.deb
  to main/c/courier/courier-mta_0.65.0-1_amd64.deb
courier-pcp_0.65.0-1_amd64.deb
  to main/c/courier/courier-pcp_0.65.0-1_amd64.deb
courier-pop-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-pop-ssl_0.65.0-1_amd64.deb
courier-pop_0.65.0-1_amd64.deb
  to main/c/courier/courier-pop_0.65.0-1_amd64.deb
courier-ssl_0.65.0-1_amd64.deb
  to main/c/courier/courier-ssl_0.65.0-1_amd64.deb
courier-webadmin_0.65.0-1_amd64.deb
  to main/c/courier/courier-webadmin_0.65.0-1_amd64.deb
courier_0.65.0-1.diff.gz
  to main/c/courier/courier_0.65.0-1.diff.gz
courier_0.65.0-1.dsc
  to main/c/courier/courier_0.65.0-1.dsc
courier_0.65.0.orig.tar.gz
  to main/c/courier/courier_0.65.0.orig.tar.gz
sqwebmail_0.65.0-1_amd64.deb
  to main/c/courier/sqwebmail_0.65.0-1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 584...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stefan Hornburg (Racke) ra...@linuxia.de (supplier of updated courier package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 17:37:28 +0200
Source: courier
Binary: courier-base courier-maildrop courier-mlm courier-mta courier-faxmail 
courier-webadmin sqwebmail courier-pcp courier-pop courier-imap courier-ldap 
courier-doc courier-ssl courier-mta-ssl courier-pop-ssl courier-imap-ssl
Architecture: source all amd64
Version: 0.65.0-1
Distribution: unstable
Urgency: low
Maintainer: Stefan Hornburg (Racke) ra...@linuxia.de
Changed-By: Stefan Hornburg (Racke) ra...@linuxia.de
Description: 
 courier-base - Courier mail server - base system
 courier-doc - Courier mail server - additional documentation
 courier-faxmail - Courier mail server - Fax-mail gateway
 courier-imap - Courier mail server - IMAP server
 courier-imap-ssl - Courier mail server - IMAP over SSL
 courier-ldap - Courier mail server - LDAP support
 courier-maildrop - Courier mail server - mail delivery agent
 courier-mlm - Courier mail server - mailing list manager
 courier-mta - Courier mail server - ESMTP daemon
 

Processed: nvidia bug also with nouveau driver

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 583312 serious
Bug #583312 [nvidia-glx] since update to initscripts, sysv... to version 
2.88.dfs-5 -- kdm fails to load
Bug #583613 [nvidia-glx] xserver-xorg is shutting down itself at (and only at) 
boot
Severity set to 'serious' from 'important'

Severity set to 'serious' from 'important'

 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
583312: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583312
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583858: libc6-i686: causes segfaults

2010-06-01 Thread Aurelien Jarno
On Tue, Jun 01, 2010 at 07:11:03AM +0200, Aurelien Jarno wrote:
 On Mon, May 31, 2010 at 11:13:03PM +0200, Aurelien Jarno wrote:
  On Mon, May 31, 2010 at 09:53:45PM +0200, Stefan Fritsch wrote:
   Hi,
   
   I can reproduce this. I have attached a stacktrace and part of the 
   update log which shows that the segfaults start while configuring 
   locales (though probably that this is just the first package with a 
   postinstall after configuring libc6-i686).
   
   If you have ideas how I could help further, just ask.
   
  
  Thanks for the extra information. It seems SSE4.2 related, that's
  probably why I am not able to reproduce the issue. I'll try to find a
  Core i7 machine to debug the issue.
  
 
 I have been able to find a machine to reproduce the issue. I have found
 that the issue is not present when eglibc is built with gcc-4.4, so this
 looks like a miscompilation.
 
 I have switched i386 to gcc-4.3, with the hopes that the issue affecting

Oops, I obviously wanted to say gcc-4.4 here.

 some Pentium 4 models when eglibc is built with gcc-4.4 is now gone.
 

-- 
Aurelien Jarno  GPG: 1024D/F1BCDB73
aurel...@aurel32.net http://www.aurel32.net



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: Re: Bug#551903: libc6-i686 pthread_cond_wait fails to reacquire mutex upon cancellation

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 unarchive 551903
Bug #551903 {Done: Aurelien Jarno aure...@debian.org} [libc6-i686] libc6-i686 
pthread_cond_wait fails to reacquire mutex upon cancellation
Unarchived Bug 551903
 found 551903 2.11.1-2
Bug #551903 {Done: Aurelien Jarno aure...@debian.org} [libc6-i686] libc6-i686 
pthread_cond_wait fails to reacquire mutex upon cancellation
Bug Marked as found in versions eglibc/2.11.1-2 and reopened.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
551903: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551903
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: Re: Bug#584013: hyperlatex: Security bugs in ghostscript

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 584021 normal
Bug #584021 [mediawiki-math] mediawiki-math: Security bugs in ghostscript
Severity set to 'normal' from 'grave'

 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
584021: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584021
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583312: [pkg-nvidia-devel] Bug#583312: nvidia bug also with nouveau driver

2010-06-01 Thread Russ Allbery
Thomas Koch tho...@koch.ro writes:

 As noted in Message #71 to this bug, I believe to have observed the very
 same issue with the free nouveau driver. In conclusion I believe that
 the change in severity is not justified by your rationale.

 Therefor please also consider bug #583336 and decide, if the bug can
 still be reduced in severity.

The only purpose served by making this bug against the non-free NVIDIA
drivers RC is that Debian squeeze would just not ship with the non-free
drivers *at all*, since so far as I can tell there isn't much we can do in
the packages to solve this problem.  That the bug also happens with
nouveau indicates to me that the hardware just takes a while to initialize
and there may not be very much we can do about it.

In the meantime, I don't see any reason to block migration of the packages
to testing or release with squeeze for this bug.  It's very annoying, but
it doesn't render them unusable.  Of course if we can find a solution, we
will absolutely fix it as soon as possible, but giving it a higher
severity isn't going to make that process any faster and is just going to
make life harder for testing users who are also going to be experiencing
the same bug.

-- 
Russ Allbery (r...@debian.org)   http://www.eyrie.org/~eagle/



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583702: beneath-a-steel-sky: package ships data that cannot be modified

2010-06-01 Thread David Weinehall
On Tue, Jun 01, 2010 at 08:21:37PM +0800, Ying-Chun Liu (PaulLiu) wrote:
 Hi Torsten,
 
 I think maybe we can just package the tool into Debian main?
 Not sure how to edit beneath-a-steel-sky, but ScummC should be able to
 create ScummVM games from scratch.
 
 I'll try to see if ScummC can edit beneath-a-steel-sky or not.

This issue has been rehashed endlessly.  While there likely was, once
upon a time, a custom set of tools to create this game data, those tools
do not exist any more.  The original creators of the game is in the same
situation as Debian's users when it comes to modifications.

The reason for requiring the preferred form for modification is to not
put the creator of the software/data in a monopoly situation.  This
isn't the case here.

Debian doesn't stand to win anything from removing this package.
Debian's users doesn't stand to win anything.  The only thing achieved
is that any Debian users that likes playing games will be more likely to
add non-free to their list of sources, thus increaing the likelyhood of
them installing non-free software that is actually detrimental to our
goals.

BTW, I hope that the original bug reporter files requests to move files
in Ogg Vorbis format from main to non-free as well.  Lossy formats are
very rarely the preferred form of modification.  The same of course goes
for lossy image and video formats.


Regards: David
-- 
 /) David Weinehall t...@debian.org /) Rime on my window   (\
//  ~   //  Diamond-white roses of fire //
\)  http://www.acc.umu.se/~tao/(/   Beautiful hoar-frost   (/



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Processed: severity of 583312 is important

2010-06-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 severity 583312 important
Bug #583312 [nvidia-glx] since update to initscripts, sysv... to version 
2.88.dfs-5 -- kdm fails to load
Bug #583613 [nvidia-glx] xserver-xorg is shutting down itself at (and only at) 
boot
Severity set to 'important' from 'serious'

Severity set to 'important' from 'serious'

 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
583312: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583312
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584146: data loss after upgrade

2010-06-01 Thread Wolfgang Sourdeau

Package: icedove
Version: 3.0.4-3
Severity: grave

It has been decided in Debian that Thunderbird/Icedove 3 was stable enough that 
version 2 would be obsoleted, although it's technically possible to have both 
versions concurrently installed on the same system.
While updating my system and wrongfully updating Icedove in the process, I have 
noticed that the wonderful migration process has deleted all my 2.0 profiles.

This bug report is probably not very constructive but I am quite pissed to have 
lost all those. I am lucky to exclusively use IMAP as my transport protocol but 
I did have some large emails stored locally and that I did lose.

I hereby vote for the proper repackaging of Icedove 2, especially since 3.0 has 
a loosy and unsafe migration process.






--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#584148: xserver-xorg-input-evdev: reconnect failure after unplugging keyboard mouse

2010-06-01 Thread Anthony Lau
Package: xserver-xorg-input-evdev
Version: 1:2.3.2-6
Justification: breaks unrelated software
Severity: critical
Tags: squeeze sid

*** Please type your report below this line ***
After unplugging or switching through a KVM device, USB keyboard and 
mouse cannot reconnect to X-server. It seems after the devices are
disconnected, evdev refuses to accpet any connections after 10
connection failures. The USB subsystem is unaffected as status lights
on the keyboard and mouse work. Also, reloading uhci_hcd does not
fix the problem.

The devices listed below are inaccurate because I had to plug in a
spare PS/2 Keyboard and USB mouse.

This maybe related to bug #524590 xserver-xorg-input-evdev: reconnect a
bluetooth keyboard is not possible..

-- Package-specific info:
/var/lib/x11/X.roster does not exist.

/var/lib/x11/X.md5sum does not exist.

X server symlink status:
lrwxrwxrwx 1 root root 13 May 15  2007 /etc/X11/X - /usr/bin/Xorg
-rwxr-xr-x 1 root root 1725256 May  4 08:51 /usr/bin/Xorg

/var/lib/x11/xorg.conf.roster does not exist.

VGA-compatible devices on PCI bus:
01:00.0 VGA compatible controller: nVidia Corporation NV11GL [Quadro2
MXR/EX/Go] (rev b2)

/var/lib/x11/xorg.conf.md5sum does not exist.

Xorg X server configuration file status:
-rw-r--r-- 1 root root 3683 Jun  1 09:47 /etc/X11/xorg.conf

Contents of /etc/X11/xorg.conf:
# /etc/X11/xorg.conf (xorg X Window System server configuration file)
#
# This file was generated by dexconf, the Debian X Configuration tool,
using # values from the debconf database.
#
# Edit this file with caution, and see the /etc/X11/xorg.conf manual
page. # (Type man /etc/X11/xorg.conf at the shell prompt.)
#
# This file is automatically updated on xserver-xorg package upgrades
*only* # if it has not been modified since the last upgrade of the
xserver-xorg # package.
#
# If you have edited this file but would like it to be automatically
updated # again, run the following command:
#   sudo dpkg-reconfigure -phigh xserver-xorg

Section Files
FontPath/usr/share/fonts/X11/misc
FontPath/usr/X11R6/lib/X11/fonts/misc
FontPath/usr/share/fonts/X11/100dpi/:unscaled
FontPath/usr/X11R6/lib/X11/fonts/100dpi/:unscaled
FontPath/usr/share/fonts/X11/75dpi/:unscaled
FontPath/usr/X11R6/lib/X11/fonts/75dpi/:unscaled
FontPath/usr/share/fonts/X11/Type1
FontPath/usr/X11R6/lib/X11/fonts/Type1
FontPath/usr/share/fonts/X11/100dpi
FontPath/usr/X11R6/lib/X11/fonts/100dpi
FontPath/usr/share/fonts/X11/75dpi
FontPath/usr/X11R6/lib/X11/fonts/75dpi
# path to defoma fonts
FontPath/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType
EndSection

Section Module
Loadbitmap
Loaddbe
Loadddc
Loaddri
Loadextmod
Loadfreetype
Loadglx
Loadint10
Loadrecord
Loadv4l
Loadvbe
#   SubSection extmod
#   Option omit xfree86-dga
#   Option omit xfree86-dri
#   EndSubSection
EndSection

Section InputDevice
Identifier  Generic Keyboard
Driver  evdev
Option  Device
usb-BTC_USB_Multimedia_Keyboard-event-kbd #
Option  Name  BTC USB Multimedia Keyboard
#   Driver  kbd #
Option  CoreKeyboard
Option  XkbRules  xorg
Option  XkbModel  pc104
Option  XkbLayout us
Option  AutoRepeat500 30 EndSection

Section InputDevice
Identifier  Configured Mouse
Driver  evdev
Option  Device
usb-Logitech_USB_Gaming_Mouse-event-mouse #
Option  Name  Logitech USB Gaming Mouse
#   Driver  mouse #
Option  CorePointer #
Option  Device/dev/input/mice
#   Option  Protocol  ImPS/2
EndSection

Section Device
#   Identifier  ATI Radeon 9500Pro
Identifier  Nvidia Quadra
Driver  nv
#   Driver  radeon
#   Identifier  GeForce FX5200
Option  NvAgp 3 #Try AGPGART then use NvAGP
Option  ConnectToAcpid off
EndSection

Section Monitor
Identifier  BenQ FP241WZ
Option  DPMS
HorizSync   30-81
VertRefresh 50-76
EndSection

Section Screen
Identifier  Default Screen
Device  GeForce FX5200
Monitor BenQ FP241WZ
DefaultDepth24
SubSection Display
Depth   1
Modes   1920x1200 1680x1050
1400x1050 1280x960 1024x768 800x600 640x480 EndSubSection
SubSection Display
Depth   4
Modes   1920x1200 1680x1050
1400x1050 1280x960 1024x768 800x600 640x480 EndSubSection
SubSection 

Bug#583957: Package: pcmanfm 0.9.7-1

2010-06-01 Thread Craigevil
Package: pcmanfm
Version: 0.9.7-1
Severity: normal



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pcmanfm depends on:
ii  libc6 2.11.1-2   Embedded GNU C Library: Shared
lib
ii  libcairo2 1.8.10-4   The Cairo 2D vector graphics
libra
ii  libfm-gtk00.1.12-1   file management support - GTK+
GUI
ii  libfm00.1.12-1   file management support - core
lib
ii  libglib2.0-0  2.24.1-1   The GLib library of C routines
ii  libgtk2.0-0   2.20.1-1   The GTK+ graphical user
interface
ii  libpango1.0-0 1.28.0-1   Layout and rendering of
internatio
ii  libx11-6  2:1.3.3-3  X11 client-side library

Versions of packages pcmanfm recommends:
ii  gnome-icon-theme 2.30.3-1GNOME Desktop icon theme
pn  gvfs-backendsnone  (no description available)
pn  gvfs-fusenone  (no description available)
ii  lxde-icon-theme  0.0.1+svn20091206-2 LXDE Standard icon theme

pcmanfm suggests no packages.

-- no debconf information

The issue is fixed with the newest version in unstable.


Bug#583957: I had segfault in version 0.9.5-2

2010-06-01 Thread wieker

In version 0.9.7-1 all work right. Thanks to maintainers and developers. =)



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#583995: marked as done (advi-examples: Security bugs in ghostscript)

2010-06-01 Thread Ralf Treinen
 I'm closing this bugreport because this package contains only dvi files.
 It doesn't contain any program that calls gs.

Indeed.

This means that advi-examples shouldn't depend on ghostscript in the first
place (fixed in svn now). -Ralf.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#580090: marked as done (FTBFS because of unrecognized ocamlgraph version)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 18:48:35 +
with message-id e1ojwvv-0006nz...@ries.debian.org
and subject line Bug#580090: fixed in frama-c 20100401+boron+dfsg-2
has caused the Debian Bug report #580090,
regarding FTBFS because of unrecognized ocamlgraph version
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
580090: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580090
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: src:frama-c
Version: 20100401+boron+dfsg-1
Severity: normal
User: debian-ocaml-ma...@lists.debian.org
Usertags: ocaml312-ftbfs

Hello,

While rebuilding all packages with a SVN snapshot of OCaml (version
3.12.0+dev17, revision 10268), your package failed to build on amd64.

Relevant part:
 ocamlc.opt -c -w Z -warn-error A -annot  -g -I src/misc -I src/ai -I 
 src/memory_state -I src/toplevel -I src/slicing_types -I src/pdg_types -I 
 src/kernel -I src/logic -I src/lib -I src/project -I src/buckx -I src/gui -I 
 external -I cil/src -I cil/src/ext -I cil/src/frontc -I cil/src/logic -I 
 cil/ocamlutil -I lib/plugins -I lib  -I +ocamlgraph   cil/src/cil.ml
 File cil/src/cil.ml, line 5895, characters 2-368:
 Warning 7: the method pExp is overridden.
 File cil/src/cil.ml, line 7688, characters 2-364:
 Warning 7: the method vinst is overridden.
 File cil/src/cil.ml, line 7697, characters 2-99:
 Warning 7: the method vexpr is overridden.
 [...]
 File cil/src/cil.ml, line 9433, characters 4-426:
 Warning 7: the method vtype is overridden.
 File cil/src/cil.ml, line 1, characters 0-1:
 Error: Error-enabled warnings (27 occurrences)
 make[1]: *** [cil/src/cil.cmo] Error 2
 make[1]: Leaving directory `/tmp/frama-c-20100401+boron+dfsg'

The full build log is available at:
  
http://debian.glondu.net/debian/ocaml31120dev17r10268/failures/frama-c_20100401%2Bboron%2Bdfsg-1%2B3.12.0%2Bdev17%2B10268_amd64.build

OCaml 3.12 introduces a new syntax to declare overridden methods, and
a new warning for undeclared overridden methods, that make frama-c
FTBFS because of error-enabled warnings.

The right fix would be to declare overridden methods (using
method!), but it is not backward-compatible with OCaml  3.12. A
backward-compatible fix would be to disable error-enabled warnings
(i.e. compile without -warn-error A).


Best regards,

-- 
Stéphane


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


---End Message---
---BeginMessage---
Source: frama-c
Source-Version: 20100401+boron+dfsg-2

We believe that the bug you reported is fixed in the latest version of
frama-c, which is due to be installed in the Debian FTP archive:

frama-c-base_20100401+boron+dfsg-2_amd64.deb
  to main/f/frama-c/frama-c-base_20100401+boron+dfsg-2_amd64.deb
frama-c_20100401+boron+dfsg-2.diff.gz
  to main/f/frama-c/frama-c_20100401+boron+dfsg-2.diff.gz
frama-c_20100401+boron+dfsg-2.dsc
  to main/f/frama-c/frama-c_20100401+boron+dfsg-2.dsc
frama-c_20100401+boron+dfsg-2_amd64.deb
  to main/f/frama-c/frama-c_20100401+boron+dfsg-2_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 580...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mehdi Dogguy me...@debian.org (supplier of updated frama-c package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 01 Jun 2010 20:18:44 +0200
Source: frama-c
Binary: frama-c frama-c-base
Architecture: source amd64
Version: 20100401+boron+dfsg-2
Distribution: unstable
Urgency: low
Maintainer: Debian OCaml Maintainers debian-ocaml-ma...@lists.debian.org
Changed-By: Mehdi Dogguy me...@debian.org
Description: 
 frama-c- Framework for source code analysis of software written in C
 frama-c-base - Framework for C source code analysis (without gui)
Closes: 580090
Changes: 
 frama-c (20100401+boron+dfsg-2) unstable; urgency=low
 .
   * Make the configure script accept OCamlgraph 1.5 (Closes: #580090)
   * Build-depend on ocaml (= 3.11.1-3~) and dh-ocaml (= 0.9~).
   * Add a 

Bug#584009: marked as done (hevea: Security bugs in ghostscript)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 18:49:20 +
with message-id e1ojwwe-0006u6...@ries.debian.org
and subject line Bug#584009: fixed in hevea 1.10-12
has caused the Debian Bug report #584009,
regarding hevea: Security bugs in ghostscript
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
584009: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584009
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: hevea
Severity: grave
Tags: security
Justification: user security hole


Please note remote execute-any-code security bugs in ghostscript:

  http://bugs.debian.org/583183

This package depends on ghostscript, and may be affected. Please
evaluate the security of this package, and fix if needed.

Thanks,

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of SydneyAustralia


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages hevea depends on:
ii  ghostscript-x [gs] 8.62.dfsg.1-3.2lenny1 The GPL Ghostscript PostScript/PDF
ii  gs 8.62.dfsg.1-3.2lenny1 Transitional package
ii  netpbm 2:10.0-12+lenny1  Graphics conversion tools
ii  ocaml-base 3.10.2-3  Runtime system for OCaml bytecode 
ii  tetex-bin  2007.dfsg.2-1~lenny2  TeX Live: teTeX transitional packa

hevea recommends no packages.

Versions of packages hevea suggests:
pn  netpbm-nonfreenone (no description available)


---End Message---
---BeginMessage---
Source: hevea
Source-Version: 1.10-12

We believe that the bug you reported is fixed in the latest version of
hevea, which is due to be installed in the Debian FTP archive:

hevea_1.10-12.debian.tar.gz
  to main/h/hevea/hevea_1.10-12.debian.tar.gz
hevea_1.10-12.dsc
  to main/h/hevea/hevea_1.10-12.dsc
hevea_1.10-12_all.deb
  to main/h/hevea/hevea_1.10-12_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 584...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ralf Treinen trei...@debian.org (supplier of updated hevea package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 20:18:49 +0200
Source: hevea
Binary: hevea
Architecture: source all
Version: 1.10-12
Distribution: unstable
Urgency: low
Maintainer: Debian OCaml Maintainers debian-ocaml-ma...@lists.debian.org
Changed-By: Ralf Treinen trei...@debian.org
Description: 
 hevea  - translates from LaTeX to HTML, info, or text
Closes: 584009
Changes: 
 hevea (1.10-12) unstable; urgency=low
 .
   [ Stéphane Glondu ]
   * debian/control: update my e-mail address
 .
   [ Ralf Treinen ]
   * Remove Zack from uploaders on his request.
   * Patch gs-options: call gs with additional options -P- -dSAFER
 (closes: #584009)
Checksums-Sha1: 
 00f0b7718ca7fab33b222b11cad52741a78c28d2 1411 hevea_1.10-12.dsc
 2f8f81af19edfa1e7d7554add9dce93d3427c9ab 18817 hevea_1.10-12.debian.tar.gz
 3007b1f8e8e4f1b4cbeb605bd77de6f198f61363 400330 hevea_1.10-12_all.deb
Checksums-Sha256: 
 c873713febd9fbd219770ab1eea6c0b3f98605985712bbcdd81531c515658e94 1411 
hevea_1.10-12.dsc
 9a484a3c88041cf37d06c8ed0afb1b606fb129c24428cd8c3f314e778f700f46 18817 
hevea_1.10-12.debian.tar.gz
 8f21bdd3ec7655ed8b0bd2f84950a56a78a53c1ce932730dbed800228b09860d 400330 
hevea_1.10-12_all.deb
Files: 
 faf0c1b75b8fe2de4cccbdf5f01b5e38 1411 tex optional hevea_1.10-12.dsc
 fdfed324cae1135b96d4d126a247e833 18817 tex optional hevea_1.10-12.debian.tar.gz
 cbff7775c45815f4f7e4e3ecafed56dd 400330 tex optional hevea_1.10-12_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFMBVOgtzWmSeC6BMERAm5wAKCUBoUrkIbp89ao+p8UyDEk2DobSwCfTqDf
04pv1KFlOVVrJwcJ0vkmezQ=
=GpMx
-END PGP SIGNATURE-


---End Message---


Bug#583953: marked as done (libmlt2: depends on libsox1a, which doesn't exist)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Tue, 01 Jun 2010 18:51:09 +
with message-id e1ojwyp-0007qz...@ries.debian.org
and subject line Bug#583953: fixed in mlt 0.5.4+git20100601-1
has caused the Debian Bug report #583953,
regarding libmlt2: depends on libsox1a, which doesn't exist
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583953: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583953
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: libmlt2
Version: 0.5.4-1
Severity: grave
Justification: renders package unusable

Hi,

The package seems to have been built in the middle of a sox transition.
Alpha depends on libsox1b and the rest on libsox1a. As a matter of fact,
only the first package is now available in the archive. I think a binNMU
is required.

Regards
Sylvain Le Gall


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-trunk-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash




---End Message---
---BeginMessage---
Source: mlt
Source-Version: 0.5.4+git20100601-1

We believe that the bug you reported is fixed in the latest version of
mlt, which is due to be installed in the Debian FTP archive:

libmlt++-dev_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/libmlt++-dev_0.5.4+git20100601-1_i386.deb
libmlt++3_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/libmlt++3_0.5.4+git20100601-1_i386.deb
libmlt-data_0.5.4+git20100601-1_all.deb
  to main/m/mlt/libmlt-data_0.5.4+git20100601-1_all.deb
libmlt-dbg_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/libmlt-dbg_0.5.4+git20100601-1_i386.deb
libmlt-dev_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/libmlt-dev_0.5.4+git20100601-1_i386.deb
libmlt2_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/libmlt2_0.5.4+git20100601-1_i386.deb
melt_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/melt_0.5.4+git20100601-1_i386.deb
mlt_0.5.4+git20100601-1.debian.tar.gz
  to main/m/mlt/mlt_0.5.4+git20100601-1.debian.tar.gz
mlt_0.5.4+git20100601-1.dsc
  to main/m/mlt/mlt_0.5.4+git20100601-1.dsc
mlt_0.5.4+git20100601.orig.tar.bz2
  to main/m/mlt/mlt_0.5.4+git20100601.orig.tar.bz2
python-mlt2_0.5.4+git20100601-1_i386.deb
  to main/m/mlt/python-mlt2_0.5.4+git20100601-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 583...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Patrick Matthäi pmatth...@debian.org (supplier of updated mlt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Tue, 01 Jun 2010 20:18:36 +0200
Source: mlt
Binary: libmlt-dev libmlt2 libmlt-data libmlt++-dev libmlt++3 libmlt-dbg melt 
python-mlt2
Architecture: source i386 all
Version: 0.5.4+git20100601-1
Distribution: unstable
Urgency: high
Maintainer: Fathi Boudra f...@debian.org
Changed-By: Patrick Matthäi pmatth...@debian.org
Description: 
 libmlt++-dev - MLT multimedia framework C++ wrapper (development)
 libmlt++3  - MLT multimedia framework C++ wrapper (runtime)
 libmlt-data - multimedia framework (data)
 libmlt-dbg - multimedia framework (debugging symbols)
 libmlt-dev - multimedia framework (development)
 libmlt2- multimedia framework (runtime)
 melt   - command line media player and video editor
 python-mlt2 - multimedia framework (python bindings)
Closes: 583953
Changes: 
 mlt (0.5.4+git20100601-1) unstable; urgency=high
 .
   * New git snapshot.
   * Build against the new sox library, bumping urgency to high, because of a
 blocking transition.
 Closes: #583953
Checksums-Sha1: 
 dd99bc678528c3531069e1672f21312eac76edab 1507 mlt_0.5.4+git20100601-1.dsc
 18dafabc81eddfb57f6ec00bda1c4aac85c4094f 634359 
mlt_0.5.4+git20100601.orig.tar.bz2
 5a3ec9435ba6ac6b8ae43bf63a73fdd7ed1a92e7 6602 
mlt_0.5.4+git20100601-1.debian.tar.gz
 696e7f07d11a91305fa9e7e66310ffd54ae8b5b4 127670 
libmlt-dev_0.5.4+git20100601-1_i386.deb
 548f94a08cfb6834af5032b9a1b1877a956b852d 427074 
libmlt2_0.5.4+git20100601-1_i386.deb
 c56884dc3a05e00af123223be4cf2593c4405d5e 2377624 
libmlt-data_0.5.4+git20100601-1_all.deb
 6c75725d5208c7b4aca7d443c1035061837ec451 86790 

Bug#583957: marked as done ([pcmanfm] segfault while pressing the left panel icon)

2010-06-01 Thread Debian Bug Tracking System
Your message dated Wed, 02 Jun 2010 03:13:33 +0800
with message-id 4c055bdd.6020...@debian.org
and subject line Re: Bug#583957: Package: pcmanfm 0.9.7-1
has caused the Debian Bug report #583957,
regarding [pcmanfm] segfault while pressing the left panel icon
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
583957: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583957
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: pcmanfm
Version: 0.9.5-2
Severity: serious

--- Please enter the report below this line. ---

Backtrace:
#0  0x758cd408 in ?? () from /lib/libc.so.6
#1  0x76fe21ca in fm_path_equal () from /usr/lib/libfm.so.0
#2  0x76fe6e0e in fm_nav_history_chdir () from /usr/lib/libfm.so.0
#3  0x0040f1fb in fm_main_win_chdir (win=0x674650, path=0x1) at 
main-win.c:866
#4  0x760b95be in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#5  0x760d05f9 in ?? () from /usr/lib/libgobject-2.0.so.0
#6  0x760d1d76 in g_signal_emit_valist () from 
/usr/lib/libgobject-2.0.so.0
#7  0x760d22c3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#8  0x77887f73 in ?? () from /usr/lib/libfm-gtk.so.0
#9  0x760b95be in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#10 0x760d0232 in ?? () from /usr/lib/libgobject-2.0.so.0
#11 0x760d1d76 in g_signal_emit_valist () from 
/usr/lib/libgobject-2.0.so.0
#12 0x760d22c3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#13 0x77888115 in ?? () from /usr/lib/libfm-gtk.so.0
#14 0x7734f5f3 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#15 0x760b95be in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#16 0x760d0232 in ?? () from /usr/lib/libgobject-2.0.so.0
#17 0x760d1bbc in g_signal_emit_valist () from 
/usr/lib/libgobject-2.0.so.0
#18 0x760d22c3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#19 0x7747feef in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#20 0x77346323 in gtk_propagate_event () from 
/usr/lib/libgtk-x11-2.0.so.0
#21 0x773474db in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#22 0x76d7e53c in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#23 0x75e0def2 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#24 0x75e11d68 in ?? () from /lib/libglib-2.0.so.0
#25 0x75e12275 in g_main_loop_run () from /lib/libglib-2.0.so.0
#26 0x77347997 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#27 0x0040dd5c in main (argc=1, argv=0x7fffead8) at pcmanfm.c:136

--- System information. ---
Architecture: amd64
Kernel:   Linux 2.6.32-5-amd64

Debian Release: squeeze/sid
  500 unstablewww.debian-multimedia.org 
  500 unstablequtim.org 
  500 unstableftp.de.debian.org 
1 experimentalftp.de.debian.org 

--- Package information. ---
Depends (Version) | Installed
=-+-
libc6(= 2.3) | 2.11.1-1
libcairo2  (= 1.2.4) | 1.9.6-6
libfm-gtk0| 0.1.12-1
libfm0| 0.1.12-1
libglib2.0-0  (= 2.24.0) | 2.25.7-1
libgtk2.0-0   (= 2.18.0) | 2.21.1-1
libpango1.0-0 (= 1.20.0) | 1.28.0-1
libx11-6   (= 0) | 2:1.3.3-3


Recommends(Version) | Installed
===-+-===
lxde-icon-theme | 
 OR gnome-icon-theme| 2.30.3-1
gvfs-backends   | 1.6.2-1
gvfs-fuse   | 1.6.2-1


Package's Suggests field is empty.





---End Message---
---BeginMessage---
Craigevil wrote:
 The issue is fixed with the newest version in unstable.

Thanks for the update. I am closing this bug now.

-Andrew

---End Message---


Bug#584146: data loss after upgrade

2010-06-01 Thread Christoph Goehre
Hi Wolfgang,

On Di, Jun 01, 2010 at 02:05:48 -0400, Wolfgang Sourdeau wrote:
 It has been decided in Debian that Thunderbird/Icedove 3 was stable
 enough that version 2 would be obsoleted, although it's technically
 possible to have both versions concurrently installed on the same
 system. While updating my system and wrongfully updating Icedove in
 the process, I have noticed that the wonderful migration process has
 deleted all my 2.0 profiles.

what are your opinion to avoid this? To make a automated backup before
migrate from 2.0 - 3.0?

 This bug report is probably not very constructive but I am quite
 pissed to have lost all those. I am lucky to exclusively use IMAP as
 my transport protocol but I did have some large emails stored locally
 and that I did lose.

You are the first user, who report one of this fault. Should all other
use IMAP and didn't endangered by this problem?

 I hereby vote for the proper repackaging of Icedove 2, especially
 since 3.0 has a loosy and unsafe migration process.

Is it really useful to have 2 different versions of Icedove in Debian?
I think it would be more helpful to analyse your upgrade problem.

BTW: 2.0.0.24 _is_ the last release of Thunderbird 2.0. Mozilla is short
before a 3.1 release, which was scheduled for June.

Cheers,
Christoph



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



  1   2   >