Bug#754294: Debian kernel fix for routing regression in 3.2.60
On 13/07/14 19:55, Ben Hutchings wrote: Sorry about the regression in the latest security update. This is apparently the result of an incomplete fix for a longstanding bug in routing between interfaces with differing MTU. The first part of the fix went into 3.2.57, and the second part in 3.2.60. It appears that several more changes would need to be applied to complete the fix and avoid this regression. So, what I'm intending to do is to revert both those changes. That will leave the original bug present, but this will not be a regression from the earlier Debian 7 'wheezy' kernel versions. I have rebuilt the kernel for amd64 with these changes and uploaded to http://people.debian.org/~benh/packages/wheezy-security/. The changes file is signed with my GPG key and there are also detached GPG signatures for the linux-image binary packages. You can verify these using: gpg --keyring /usr/share/keyrings/debian-keyring.gpg --verify sig-file If you need packages for another architecture or you're not sure about the signature checking, you can build packages using the instructions at http://kernel-handbook.alioth.debian.org/ch-common-tasks.html#s-common-official and the attached patches (revert-net-ipv4-ip_forward-fix-inverted-local_df-tes.patch followed by revert-net-ip-ipv6-handle-gso-skbs-in-forwarding-pat.patch). After applying the above two patches all is good. Here's how I tested: apt-get update apt-get build-dep linux mkdir linux-deb cd linux-deb apt-get source linux=3.2.60-1+deb7u1 wget --no-check-certificate https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=50;filename=revert-net-ip-ipv6-handle-gso-skbs-in-forwarding-pat.patch;att=1;bug=754294; -O revert-net-ip-ipv6-handle-gso-skbs-in-forwarding-pat.patch wget --no-check-certificate https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=50;filename=revert-net-ipv4-ip_forward-fix-inverted-local_df-tes.patch;att=2;bug=754294; -O revert-net-ipv4-ip_forward-fix-inverted-local_df-tes.patch cd linux-3.2.60 bash debian/bin/test-patches -f amd64 -j 8 ../revert-net-ipv4-ip_forward-fix-inverted-local_df-tes.patch ../revert-net-ip-ipv6-handle-gso-skbs-in-forwarding-pat.patch dpkg -i linux-image-3.2.0-4-amd64_3.2.60-1+deb7u1a~test_i386.deb And then tried my usual download-from-windows-host test, which worked fine. Best regards, Teodor Milkov -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#708238: bacula-director-pgsql: Fatal error: Version error for database bacula. Wanted 14, got 12
Package: bacula-director-pgsql Version: 5.2.6+dfsg-9 Severity: grave Hi, I've upgraded from Debian 6.0 to Debian 7.0 and Bacula director does not start after upgrade. It appears that the database was not upgraded: | 14-May 14:24 bacula-dir JobId 0: Fatal error: Version error for | database bacula. Wanted 14, got 12 | 14-May 14:24 bacula-dir JobId 0: Fatal error: Could not open | Catalog MyCatalog, database bacula. | 14-May 14:24 bacula-dir JobId 0: Fatal error: Version error for | database bacula. Wanted 14, got 12 | 14-May 14:24 bacula-dir ERROR TERMINATION | Please correct configuration file: /etc/bacula/bacula-dir.conf So far I've found that /usr/share/bacula-director/update_postgresql_tables is the script to handle the upgrade but it's not executed automatically. Cheers -- System Information: Debian Release: 7.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages bacula-director-pgsql depends on: ii bacula-common 5.2.6+dfsg-9 ii bacula-common-pgsql5.2.6+dfsg-9 ii bacula-director-common 5.2.6+dfsg-9 ii dbconfig-common1.8.47+nmu1 ii debconf [debconf-2.0] 1.5.49 ii libc6 2.13-38 ii libcap21:2.22-1.2 ii libgcc11:4.7.2-5 ii libpython2.7 2.7.3-6 ii libssl1.0.01.0.1e-2 ii libstdc++6 4.7.2-5 ii libwrap0 7.6.q-24 ii postgresql-client 9.1+134wheezy3 ii postgresql-client-8.4 [postgresql-client] 8.4.17-0squeeze1 ii postgresql-client-9.1 [postgresql-client] 9.1.9-1 ii ucf3.0025+nmu3 ii zlib1g 1:1.2.7.dfsg-13 Versions of packages bacula-director-pgsql recommends: ii postgresql 9.1+134wheezy3 Versions of packages bacula-director-pgsql suggests: pn gawknone pn postgresql-contrib none pn postgresql-doc none -- Configuration Files: /etc/bacula/scripts/delete_catalog_backup [Errno 13] Permission denied: u'/etc/bacula/scripts/delete_catalog_backup' -- debconf information: bacula-director-pgsql/pgsql/method: unix socket bacula-director-pgsql/pgsql/authmethod-admin: ident bacula-director-pgsql/passwords-do-not-match: bacula-director-pgsql/pgsql/no-empty-passwords: bacula-director-pgsql/upgrade-backup: true bacula-director-pgsql/install-error: abort bacula-director-pgsql/internal/reconfiguring: false bacula-director-pgsql/db/app-user: bacula bacula-director-pgsql/dbconfig-reinstall: false bacula-director-pgsql/dbconfig-remove: bacula-director-pgsql/db/dbname: bacula bacula-director-pgsql/remote/host: bacula-director-pgsql/pgsql/admin-user: postgres bacula-director-pgsql/pgsql/authmethod-user: bacula-director-pgsql/upgrade-error: abort bacula-director-pgsql/internal/skip-preseed: true bacula-director-pgsql/purge: false bacula-director-pgsql/database-type: pgsql bacula-director-pgsql/remote/port: bacula-director-pgsql/pgsql/changeconf: false bacula-director-pgsql/remote/newhost: bacula-director-pgsql/unsafe-director-password-was-changed: bacula-director-pgsql/pgsql/manualconf: * bacula-director-pgsql/dbconfig-install: false bacula-director-pgsql/dbconfig-upgrade: true bacula-director-pgsql/missing-db-package-error: abort bacula-director-pgsql/remove-error: abort -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#702509: unattended-upgrades: does not run autonomously, even after it was enabled
control: -1 severity normal 2013/3/8 Arturo Moral amo...@gmail.com: This config was removed in version 0.79.5 and might not work at all: I'm currently using 0.79.4, therefore the config change does not affect me, right? You should not use it, 0.79.5 will migrate to testing on the following days. Anyway, my main issue is that the unattended upgrades don't run. If it would be only a config file problem, they would run but with no upgradable candidates. You didn't show that u-a doesn't work. From what we've seen so far it works as expected, maybe you need to investigate why Cron doesn't run?! Do you know for sure that there are packages to be upgraded? Running apt-get upgrade will tell you. If apt-get doesn't find packages to be upgraded, neither does u-a. Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#702509: unattended-upgrades: does not run autonomously, even after it was enabled
2013/3/7 g0to amo...@gmail.com:
-- Configuration Files:
/etc/apt/apt.conf.d/50unattended-upgrades changed:
// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
// Codename based matching:
// This will follow the migration of a release through different
// archives (e.g. from testing to stable and later oldstable).
o=Debian,n=wheezy;
o=Debian,n=wheezy-updates;
o=Debian,n=wheezy-proposed-updates;
o=Debian,n=wheezy,l=Debian-Security;
This config was removed in version 0.79.5 and might not work at all:
- remove codename based matching example as this needs a newer
python-apt than available in wheezy, thanks to Russell Stuart
// Archive or Suite based matching:
// Note that this will silently match a different release after
// migration to the specified archive (e.g. testing becomes the
// new stable).
// o=Debian,a=stable;
// o=Debian,a=stable-updates;
// o=Debian,a=proposed-updates;
// origin=Debian,archive=stable,label=Debian-Security;
};
Usually this is what you need to enable, plus an extra line if you are
using testing or unstable.
Cheers
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#692448: qemu: system crash on 'libaio1' removal
Package: qemu Version: 0.12.5+dfsg-3squeeze2 Severity: serious Hi, I've just had a system crash a few seconds after I removed 'libaio1 package (declared orphan by deborphan). On KVM systems this is not a problem because its a dependency of qemu-kvm. But on Xen systems (+libvirtd) this package is useless and 'qemu' is enough. I believe 'qemu' should also depend on 'libaio1'. Another alternative is to add the dependency on 'xen-qemu-dm*' packages. Cheers -- System Information: Debian Release: 6.0.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages qemu depends on: ii qemu-system0.12.5+dfsg-3squeeze2 QEMU full system emulation binarie ii qemu-user 0.12.5+dfsg-3squeeze2 QEMU user mode emulation binaries ii qemu-utils 0.12.5+dfsg-3squeeze2 QEMU utilities qemu recommends no packages. Versions of packages qemu suggests: pn qemu-user-static none (no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#692448: qemu: system crash on 'libaio1' removal
2012/11/6 Michael Tokarev m...@tls.msk.ru: On 06.11.2012 15:40, Teodor wrote: I've just had a system crash a few seconds after I removed 'libaio1 package (declared orphan by deborphan). What kind of crash? Crash of what, exactly? What you were running? Debian Linux 6.0 (amd64) on top of Xen 4.0 hypervisor. reboot system boot 2.6.32-5-xen-amd Tue Nov 6 02:59 - 05:01 (02:02) root pts/2vpn-120.DOMAIN Tue Nov 6 02:27 - crash (00:32) None of qemu-system or qemu-user binaries are linked with libaio. libaio1 is not used and hence not needed. Note that qemu package - against which you filed the bugreport - is a meta-package, it does not use any library at all. # aptitude why qemu i xen-qemu-dm-4.0 Depends qemu-system | qemu # aptitude why libaio1 i libvirt-bin Recommends qemu-kvm | qemu (= 0.9.1) p qemu-kvmDependslibaio1 Maybe qemu is not the right package, then which is the right pkg? On KVM systems this is not a problem because its a dependency of qemu-kvm. But on Xen systems (+libvirtd) this package is useless and 'qemu' is enough. Which package is useless? qemu-kvm is useless on a Xen hypervisor. xen-qemu-dm* packages are not relevant for qemu. Please describe your issue in a bit more details. Currently what you wrote makes no sense, sorry. Do you need more info? Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#692448: qemu: system crash on 'libaio1' removal
2012/11/6 Michael Tokarev m...@tls.msk.ru: So, can you start it again when libaio1 is NOT installed? Yes, I was able to start the VMs again after the libaio1 removal. I'm not sure about the full Xen system -- I can't test now. Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#690158: ettercap: unconditionally sets net.ipv4.ip_forward=0
Package: ettercap Version: 1:0.7.3-2.1 Severity: grave Justification: causes non-serious data loss Hi, I've just found that running 'ettercap' on gateway system (were ip_forward is a must) will unconditionally disable the kernel flag. This affects both Debian 6.0 (squeeze) and Debian 7.0 (wheezy). Cheers -- System Information: Debian Release: 6.0.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/24 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ettercap depends on: ii ettercap-common1:0.7.3-2.1 Common support files and plugins f ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libltdl7 2.2.6b-2 A system independent dlopen wrappe ii libncurses55.7+20100313-5shared libraries for terminal hand ii libnet11.1.4-2 library for the construction and h ii libpcap0.8 1.1.1-2+squeeze1 system interface for user-level pa ii libpcre3 8.02-1.1 Perl 5 Compatible Regular Expressi ii libssl0.9.80.9.8o-4squeeze13 SSL shared libraries ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime ettercap recommends no packages. ettercap suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#682481: gnome-shell: epiphany shouldn't be the default browser
Didn't you forgot to add | www-browser in the Depends: line? Funny upgrade today with 121 new packages although I have at least two packages installed that provide www-browser. Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#679728: systemd: diversion removed in postinst, should be removed in preinst
2012/7/2 Tollef Fog Heen tfh...@err.no: That's quite odd. Can you please provide the output of «grep systemd /var/log/dpkg.log»? See below. I've reinstalled «systemd» this morning on my workstation. Cheers -- 2012-07-02 10:55:30 upgrade systemd-gui:i386 44-2 44-3 2012-07-02 10:55:30 status half-configured systemd-gui:i386 44-2 2012-07-02 10:55:30 status unpacked systemd-gui:i386 44-2 2012-07-02 10:55:30 status half-installed systemd-gui:i386 44-2 2012-07-02 10:55:30 status half-installed systemd-gui:i386 44-2 2012-07-02 10:55:30 status half-installed systemd-gui:i386 44-2 2012-07-02 10:55:30 status unpacked systemd-gui:i386 44-3 2012-07-02 10:55:30 status unpacked systemd-gui:i386 44-3 2012-07-02 10:55:31 upgrade libsystemd-daemon0:i386 44-2 44-3 2012-07-02 10:55:31 status half-configured libsystemd-daemon0:i386 44-2 2012-07-02 10:55:31 status unpacked libsystemd-daemon0:i386 44-2 2012-07-02 10:55:31 status half-installed libsystemd-daemon0:i386 44-2 2012-07-02 10:55:31 status half-installed libsystemd-daemon0:i386 44-2 2012-07-02 10:55:31 status unpacked libsystemd-daemon0:i386 44-3 2012-07-02 10:55:31 status unpacked libsystemd-daemon0:i386 44-3 2012-07-02 10:55:32 upgrade libsystemd-id128-0:i386 44-2 44-3 2012-07-02 10:55:32 status half-configured libsystemd-id128-0:i386 44-2 2012-07-02 10:55:32 status unpacked libsystemd-id128-0:i386 44-2 2012-07-02 10:55:32 status half-installed libsystemd-id128-0:i386 44-2 2012-07-02 10:55:32 status half-installed libsystemd-id128-0:i386 44-2 2012-07-02 10:55:32 status unpacked libsystemd-id128-0:i386 44-3 2012-07-02 10:55:32 status unpacked libsystemd-id128-0:i386 44-3 2012-07-02 10:55:33 upgrade libsystemd-journal0:i386 44-2 44-3 2012-07-02 10:55:33 status half-configured libsystemd-journal0:i386 44-2 2012-07-02 10:55:33 status unpacked libsystemd-journal0:i386 44-2 2012-07-02 10:55:33 status half-installed libsystemd-journal0:i386 44-2 2012-07-02 10:55:33 status half-installed libsystemd-journal0:i386 44-2 2012-07-02 10:55:33 status unpacked libsystemd-journal0:i386 44-3 2012-07-02 10:55:33 status unpacked libsystemd-journal0:i386 44-3 2012-07-02 10:55:34 upgrade libsystemd-login0:i386 44-2 44-3 2012-07-02 10:55:34 status half-configured libsystemd-login0:i386 44-2 2012-07-02 10:55:34 status unpacked libsystemd-login0:i386 44-2 2012-07-02 10:55:34 status half-installed libsystemd-login0:i386 44-2 2012-07-02 10:55:34 status half-installed libsystemd-login0:i386 44-2 2012-07-02 10:55:34 status unpacked libsystemd-login0:i386 44-3 2012-07-02 10:55:34 status unpacked libsystemd-login0:i386 44-3 2012-07-02 10:55:34 upgrade libpam-systemd:i386 44-2 44-3 2012-07-02 10:55:34 status half-configured libpam-systemd:i386 44-2 2012-07-02 10:55:35 status unpacked libpam-systemd:i386 44-2 2012-07-02 10:55:35 status half-installed libpam-systemd:i386 44-2 2012-07-02 10:55:35 status half-installed libpam-systemd:i386 44-2 2012-07-02 10:55:35 status half-installed libpam-systemd:i386 44-2 2012-07-02 10:55:35 status unpacked libpam-systemd:i386 44-3 2012-07-02 10:55:35 status unpacked libpam-systemd:i386 44-3 2012-07-02 10:55:35 upgrade systemd:i386 44-2 44-3 2012-07-02 10:55:35 status half-configured systemd:i386 44-2 2012-07-02 10:55:36 status unpacked systemd:i386 44-2 2012-07-02 10:55:36 status half-installed systemd:i386 44-2 2012-07-02 10:55:36 status half-installed systemd:i386 44-2 2012-07-02 10:55:37 status half-installed systemd:i386 44-2 2012-07-02 10:55:37 status unpacked systemd:i386 44-3 2012-07-02 10:55:37 status unpacked systemd:i386 44-3 2012-07-02 11:11:40 status unpacked libpam-systemd:i386 44-3 2012-07-02 11:11:41 remove libpam-systemd:i386 44-3 none 2012-07-02 11:11:41 status half-installed libpam-systemd:i386 44-3 2012-07-02 11:11:41 status half-installed libpam-systemd:i386 44-3 2012-07-02 11:11:41 status config-files libpam-systemd:i386 44-3 2012-07-02 11:11:41 status config-files libpam-systemd:i386 44-3 2012-07-02 11:11:41 status config-files libpam-systemd:i386 44-3 2012-07-02 11:11:41 status not-installed libpam-systemd:i386 none 2012-07-02 11:11:42 status unpacked systemd-gui:i386 44-3 2012-07-02 11:11:42 remove systemd-gui:i386 44-3 none 2012-07-02 11:11:42 status half-installed systemd-gui:i386 44-3 2012-07-02 11:11:42 status half-installed systemd-gui:i386 44-3 2012-07-02 11:11:42 status config-files systemd-gui:i386 44-3 2012-07-02 11:11:42 status config-files systemd-gui:i386 44-3 2012-07-02 11:11:42 status config-files systemd-gui:i386 44-3 2012-07-02 11:11:42 status not-installed systemd-gui:i386 none 2012-07-02 11:11:42 status unpacked systemd:i386 44-3 2012-07-02 11:11:42 remove systemd:i386 44-3 none 2012-07-02 11:11:42 status half-installed systemd:i386 44-3 2012-07-02 11:11:42 status half-installed systemd:i386 44-3 2012-07-02 11:11:43 status config-files systemd:i386 44-3 2012-07-02 11:11:43 purge systemd:i386 44-3 none 2012-07-02 11:11:43 status config-files systemd:i386 44-3 2012-07-02 11:11:43 status config-files systemd:i386
Bug#679728: systemd: diversion removed in postinst, should be removed in preinst
2012/7/3 Tollef Fog Heen tfh...@err.no: Ah, it looks like it never actually got to the configure step of systemd. Does that sound correct, and is the diversion correctly removed now? If not, could you please try downgrading to 44-2 and then upgrading and verifying that the diversion is gone? 1) On package removal (44-3) the diversion is still there. root@frost:~# ls -l /lib/lsb/ total 16 drwxr-xr-x 2 root root 4096 Jul 3 12:29 init-functions.d -rw-r--r-- 1 root root 11433 May 30 17:01 init-functions.systemd root@frost:~# dpkg -S /lib/lsb/init-functions.systemd diversion by systemd from: /lib/lsb/init-functions diversion by systemd to: /lib/lsb/init-functions.systemd ii libsystemd-daemon0:i 44-3i386 ii libsystemd-login0:i3 44-3i386 un systemd none 2) I've downgraded «libsystemd-daemon0 libsystemd-login0» to version 44-2 and installed again «systemd» (all 44-2 via some APT pin). Selecting previously unselected package systemd. Unpacking systemd (from .../archives/systemd_44-2_i386.deb) ... Leaving 'diversion of /lib/lsb/init-functions to /lib/lsb/init-functions.systemd by systemd' The result is that now I have a «/lib/lsb/init-functions» file back (with different content than init-functions.systemd). root@frost:~# ls -l /lib/lsb/ total 20 -rw-r--r-- 1 root root 2370 Jun 5 23:53 init-functions drwxr-xr-x 2 root root 4096 Jul 3 12:29 init-functions.d -rw-r--r-- 1 root root 11433 May 30 17:01 init-functions.systemd 3) Removed APT pin and upgrade. Setting up systemd (44-3) ... Removing 'diversion of /lib/lsb/init-functions to /lib/lsb/init-functions.systemd by systemd' Setting up libpam-systemd:i386 (44-3) ... Now the content is different: -rw-r--r-- 1 root root 11433 May 30 17:01 init-functions drwxr-xr-x 2 root root 4096 Jul 3 12:40 init-functions.d The diversion is gone: lsb-base: /lib/lsb/init-functions I have no clue how previously there was no «init-functions» file on the system. This morning I had to rescue the system due to many many init.d scripts failing because of this. A quickly fixed it by copying the init-functions.systemd file. Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#679873: lsb-base: Can't open /lib/lsb/init-functions
Package: lsb-base Version: 4.1+Debian7 Severity: critical Hi, I've seen this on my laptop and now on my workstation too: | Preparing to replace clamav-freshclam 0.97.5+dfsg-2 (using | .../clamav-freshclam_0.97.5+dfsg-3_i386.deb) ... | /etc/init.d/clamav-freshclam: 264: .: Can't open /lib/lsb/init-functions | invoke-rc.d: initscript clamav-freshclam, action stop failed. | dpkg: warning: subprocess old pre-removal script returned error exit status 2 | dpkg: trying script from the new package instead ... | /etc/init.d/clamav-freshclam: 264: .: Can't open /lib/lsb/init-functions | invoke-rc.d: initscript clamav-freshclam, action stop failed. | dpkg: error processing /var/cache/apt/archives/clamav-freshclam_0.97.5+dfsg-3_i386.deb (--unpack): | subprocess new pre-removal script returned error exit status 2 | Errors were encountered while processing: | /var/cache/apt/archives/clamav-freshclam_0.97.5+dfsg-3_i386.deb Indeed, that file doesn't exist: | root@frost:~# ls /lib/lsb/ | init-functions.d init-functions.systemd This breaks any script (including those from init.d) that use LSB functions. Feel free to reassing to «systemd» if you consider appropriate. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#679728: systemd: diversion removed in postinst, should be removed in preinst
Diversion is not removed at all on package removal: | root@frost:~# ls -hl /lib/lsb/ | total 16K | drwxr-xr-x 2 root root 4.0K Jul 2 11:11 init-functions.d | -rw-r--r-- 1 root root 12K May 30 17:01 init-functions.systemd | root@frost:~# dpkg -S /lib/lsb/init-functions.d | lsb-base: /lib/lsb/init-functions.d | root@frost:~# dpkg -S /lib/lsb/init-functions.systemd | diversion by systemd from: /lib/lsb/init-functions | diversion by systemd to: /lib/lsb/init-functions.systemd | | root@frost:~# dpkg -l '*systemd*' | ii libsystemd-daemon0:i 44-3i386 | ii libsystemd-login0:i3 44-3i386 | un systemd none Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#679728: systemd: diversion removed in postinst, should be removed in preinst
2012/7/2 Tollef Fog Heen tfh...@err.no: Did you upgrade to 44-3 before removing it or not? Yes, I've upgraded almost all packages (including systemd) and then reported Bug#679873: lsb-base: Can't open /lib/lsb/init-functions. Later I've uninstalled systemd packages to work around the problem, but I've discovered that systemd removal is not enough. Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#677494: sh: 1: file: not found
Package: ohcount Version: 3.0.0-6 Severity: serious Justification: Policy 3.5 Hi, It appears that «ohcount» package is missing a dependency on «file»: | sh: 1: file: not found The package was installed in a clean wheezy chroot. (it might be nice to push the segfault patch in squeeze) Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 3.2.0-2-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ohcount depends on: ii libc62.13-33 ii libdifflcs-ruby 1.1.3-1 ii libpcre3 1:8.30-5 ii ruby 4.9 ii ruby-diff-lcs [libdifflcs-ruby] 1.1.3-1 ii ruby1.8 [ruby] 1.8.7.358-4 ohcount recommends no packages. Versions of packages ohcount suggests: pn ohcount-doc none -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: gnome-shell: segfault in libaccountsservice.so.0.0.0
By following the gdb example below I've obtained a (different) backtrace by unplugging the power cord from laptop. This is the voluntary trigger of this bug for me. BTW, this is now a problem for those that use systemd as well. Up to version 0.6.21-1, when using systemd init, gnome-shell did not crash or respawn itself. Thanks 2012/6/10 ALLurGroceries allurgrocer...@gmail.com: It's not convenient, but switching to another tty, e.g. ctrl+alt+f1 and then running these commands make the desktop usable again for me without having to restart gdm: killall -9 gnome-shell gnome-shell --display :0 disown This works but not completely. For example I don't have any theme, many buttons are not displayed (i.e. retext), non-ASCII characters are not displayed. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: gnome-shell: segfault in libaccountsservice.so.0.0.0
Attaching the file ... 2012/6/10 Teodor MICU mteo...@gmail.com: By following the gdb example below I've obtained a (different) backtrace by unplugging the power cord from laptop. This is the voluntary trigger of this bug for me. Starting program: /usr/bin/gnome-shell --replace --display :0 [Thread debugging using libthread_db enabled] Using host libthread_db library /lib/x86_64-linux-gnu/libthread_db.so.1. [New Thread 0x7fffe443a700 (LWP 4411)] [Thread 0x7fffe443a700 (LWP 4411) exited] [New Thread 0x7fffe443a700 (LWP 4412)] [New Thread 0x7fffe3bb9700 (LWP 4414)] [New Thread 0x7fffe31b0700 (LWP 4415)] [New Thread 0x7fffde7a7700 (LWP 4417)] [New Thread 0x7fffddf86700 (LWP 4418)] Window manager warning: Failed to load theme Wasp: Failed to find a valid file for theme Wasp [New Thread 0x7fffd7be1700 (LWP 4430)] [New Thread 0x7fffcb84c700 (LWP 4437)] [New Thread 0x7fffc858b700 (LWP 4441)] [New Thread 0x7fffc7d8a700 (LWP 4470)] [New Thread 0x7fffc7589700 (LWP 4471)] [New Thread 0x7fffc6d88700 (LWP 4472)] [New Thread 0x7fffc6587700 (LWP 4473)] [New Thread 0x7fffc5d86700 (LWP 4474)] [New Thread 0x7fffc5585700 (LWP 4475)] [New Thread 0x7fffc4d84700 (LWP 4476)] [New Thread 0x7fffc4583700 (LWP 4477)] Window manager warning: Failed to load theme Wasp: Failed to find a valid file for theme Wasp [Thread 0x7fffcb84c700 (LWP 4437) exited] [Thread 0x7fffc7589700 (LWP 4471) exited] [Thread 0x7fffc7d8a700 (LWP 4470) exited] [Thread 0x7fffc4d84700 (LWP 4476) exited] [Thread 0x7fffc5585700 (LWP 4475) exited] [Thread 0x7fffd7be1700 (LWP 4430) exited] [Thread 0x7fffc5d86700 (LWP 4474) exited] [Thread 0x7fffc6587700 (LWP 4473) exited] [Thread 0x7fffc4583700 (LWP 4477) exited] [New Thread 0x7fffc4583700 (LWP 4501)] [Thread 0x7fffc4583700 (LWP 4501) exited] Initializing nautilus-gdu extension ** (nautilus:4500): CRITICAL **: nautilus_menu_provider_get_background_items: assertion `NAUTILUS_IS_MENU_PROVIDER (provider)' failed [New Thread 0x7fffc4583700 (LWP 4514)] [New Thread 0x7fffc5d86700 (LWP 4515)] [New Thread 0x7fffc6587700 (LWP 4516)] [New Thread 0x7fffd7be1700 (LWP 4517)] [Thread 0x7fffc5d86700 (LWP 4515) exited] [Thread 0x7fffd7be1700 (LWP 4517) exited] [Thread 0x7fffc6d88700 (LWP 4472) exited] [Thread 0x7fffc6587700 (LWP 4516) exited] [Thread 0x7fffc4583700 (LWP 4514) exited] Shutting down nautilus-gdu extension [New Thread 0x7fffc4583700 (LWP 4767)] [New Thread 0x7fffc6587700 (LWP 4768)] [New Thread 0x7fffc6d88700 (LWP 4769)] [New Thread 0x7fffd7be1700 (LWP 4770)] [New Thread 0x7fffc7d8a700 (LWP 4771)] [New Thread 0x7fffc7589700 (LWP 4772)] [New Thread 0x7fffc5d86700 (LWP 4773)] [New Thread 0x7fffc5585700 (LWP 4774)] [New Thread 0x7fffc4d84700 (LWP 4775)] [New Thread 0x7fffc3d82700 (LWP 4776)] (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) (gnome-shell:4407): GLib-GIO-WARNING **: Dropping signal ActiveSessionChanged of type (s) since the type from the expected interface is (o) [Thread 0x7fffc7589700 (LWP 4772) exited] [Thread 0x7fffc4d84700 (LWP 4775) exited] [Thread 0x7fffc5d86700 (LWP 4773) exited] [Thread 0x7fffc6587700 (LWP 4768) exited] [Thread 0x7fffc6d88700 (LWP 4769) exited] [Thread 0x7fffc5585700 (LWP 4774) exited] [Thread 0x7fffc7d8a700 (LWP 4771) exited] [Thread 0x7fffd7be1700 (LWP 4770) exited] [Thread 0x7fffc3d82700 (LWP 4776) exited] [New Thread 0x7fffc3d82700 (LWP 4780)] [Thread 0x7fffc4583700 (LWP 4767) exited] [Thread 0x7fffc3d82700 (LWP 4780) exited] [New Thread 0x7fffc3d82700 (LWP 4832)] Program received signal SIGSEGV, Segmentation fault. 0x7fffd1b07070 in unload_new_session (new_session=0x14af990) at act-user-manager.c:965 965 act-user-manager.c: No such file or directory. (gdb) btfu full #0 0x7fffd1b07070 in unload_new_session (new_session=0x14af990) at act-user-manager.c:965 manager = 0x7fffd804e860 #1 0x7fffd1b09d40 in on_get_unix_user_finished (object=0x1502c50, result=0x1e0c820, data=0x14af990) at act-user-manager.c:1029 proxy = optimized out new_session = 0x14af990 error = 0x1537800 uid = optimized out #2 0x7fffef8b13f7 in g_simple_async_result_complete (simple=0x1e0c820) at /tmp/buildd/glib2.0-2.32.3/./gio
Bug#676305: libsvn-java: trying to overwrite jni/libsvnjavahl-1.so.0.0.0, which is also in package libsvn-jni:amd64
Package: libsvn-java Version: 1.6.17dfsg-4 Severity: grave Justification: renders package unusable Hi, The package cannot be upgraded: Preparing to replace subversion 1.6.17dfsg-3.1 (using .../subversion_1.6.17dfsg-4_amd64.deb) ... Unpacking replacement subversion ... Preparing to replace libsvn-java 1.6.17dfsg-3.1 (using .../libsvn-java_1.6.17dfsg-4_amd64.deb) ... Unpacking replacement libsvn-java ... dpkg: error processing /var/cache/apt/archives/libsvn-java_1.6.17dfsg-4_amd64.deb (--unpack): trying to overwrite '/usr/lib/x86_64-linux-gnu/jni/libsvnjavahl-1.so.0.0.0', which is also in package libsvn-jni:amd64 1.6.17dfsg-3.1 dpkg-deb: error: subprocess paste was killed by signal (Broken pipe) Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libsvn-java depends on: ii libsvn-jni 1.6.17dfsg-3.1 libsvn-java recommends no packages. libsvn-java suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: gnome-shell: segfault error 4 in libaccountsservice.so.0.0.0
Although it appeared that the problem is fixed in version 0.6.21-2, after several hours the problem reoccurred. Indeed, the crash is not that frequent and most important I didn't had a full gnome-shell crash (it restarted automatically). I can still reproduce the problem by just unplugging the power cord, and in this case I get a gnome-shell crash that is not recoverable without restarting the session. Another thing to note is that the last crash was not caused by accountsservice but by glib library. Jun 3 21:11:11 r2 kernel: [17404.110514] gnome-shell[3262]: segfault at 2ce062c ip 7fc984153070 sp 7fffe6588400 error 4 in libaccountsservice.so.0.0.0[7fc98413d000+3b000] Jun 3 21:18:02 r2 kernel: [17815.183283] gnome-shell[3581] general protection ip:7fc96d2f00c9 sp:7fffdc3e57c0 error:0 in libglib-2.0.so.0.3200.3[7fc96d28b000+f5000] Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: gnome-shell: segfault error 4 in libaccountsservice.so.0.0.0
Apparently, using systemd avoids the crash in gnome-shell. This seems to be a good guess of Michael Biebl in bug#674433, so both problems appear to have the same root. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#670097: gnome-shell: random hang causes data loss
severity 670097 important stop I had no other occurrence of this problem for 2-3 weeks. Because there is a workaround (kill gnome-shell) I downgraded the bug severity. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: gnome-shell: segfault error 4 in libaccountsservice.so.0.0.0
severity 673185 grave stop This problem affects gnome-shell even more. If I'm on battery the gnome-shell process is killed but not restarted afterwards. The only way to obtain a somehow stable X/gnome session was to restart gdm3. I still get the gnome-shell respawn but I least I'm not forced into logging out after login. Do you know a workaround for this problem? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#673185: Fwd: Bug#673185: gnome-shell: segfault error 4 in libaccountsservice.so.0.0.0
I just read [1] that this problem is caused by «cogl», should I reassign? I've had another occurrence one hour ago (log entries attached). These are all «ocgl» related packages currently installed: ii gir1.2-cogl-1.0 1.10.2-3 ii gir1.2-coglpango-1.0 1.10.2-3 ii libcogl-pango0:amd64 1.10.2-3 ii libcogl9:amd64 1.10.2-3 Thanks [1]: http://lists.debian.org/debian-release/2012/05/msg00103.html -- Forwarded message -- From: Teodor mteo...@gmail.com Date: 2012/5/16 Subject: Bug#673185: gnome-shell: segfault error 4 in libaccountsservice.so.0.0.0 To: Debian Bug Tracking System sub...@bugs.debian.org Package: gnome-shell Version: 3.2.2.1-4+b1 Severity: important Hi, It seems that the upgrade of accountsservice affected gnome-shell and causes gnome-session to restart itself (after kill 11). I've got two of these in less than 15 minutes after upgrade. (I've restarted gdm3 after the upgrade) At this point I cannot judge if this is serious or unpredictable. The first crash was after clicking on en - Show Keyboard Layout, which failed because 'gkbd-keyboard-display' cannot be found. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages gnome-shell depends on: ii dconf-gsettings-backend [gsettings-backend] 0.12.1-1 ii gconf-service 3.2.5-1 ii gir1.2-accountsservice-1.0 0.6.18-3 ii gir1.2-atk-1.0 2.4.0-2 ii gir1.2-caribou-1.0 0.4.2-2 ii gir1.2-clutter-1.0 1.10.4-3 ii gir1.2-cogl-1.0 1.10.2-3 ii gir1.2-coglpango-1.0 1.10.2-3 ii gir1.2-folks-0.6 0.6.9-1 ii gir1.2-freedesktop 1.32.1-1 ii gir1.2-gconf-2.0 3.2.5-1 ii gir1.2-gdkpixbuf-2.0 2.26.1-1 ii gir1.2-gee-1.0 0.6.4-1 ii gir1.2-gkbd-3.0 3.4.0.2-1 ii gir1.2-glib-2.0 1.32.1-1 ii gir1.2-gmenu-3.0 3.2.0.1-2 ii gir1.2-gnomebluetooth-1.0 3.2.2-1 ii gir1.2-gtk-3.0 3.4.2-1 ii gir1.2-json-1.0 0.14.2-1 ii gir1.2-mutter-3.0 3.2.2-3 ii gir1.2-networkmanager-1.0 0.9.4.0-4 ii gir1.2-pango-1.0 1.30.0-1 ii gir1.2-polkit-1.0 0.105-1 ii gir1.2-soup-2.4 2.38.1-2 ii gir1.2-telepathyglib-0.12 0.18.1-2 ii gir1.2-telepathylogger-0.2 0.4.0-1 ii gir1.2-upowerglib-1.0 0.9.16-2 ii gjs 1.32.0-2 ii gnome-bluetooth 3.2.2-1 ii gnome-icon-theme-symbolic 3.4.0-2 ii gnome-settings-daemon 3.2.2-3 ii gnome-shell-common 3.2.2.1-4 ii gsettings-desktop-schemas 3.4.2-1 ii libatk1.0-0 2.4.0-2 ii libc6 2.13-32 ii libcairo-gobject2 1.12.2-1 ii libcairo2 1.12.2-1 ii libcamel-1.2-29 3.2.2-3 ii libcanberra0 0.28-4 ii libclutter-1.0-0 1.10.4-3 ii libcogl-pango0 1.10.2-3 ii libcogl9 1.10.2-3 ii libcroco3 0.6.5-1 ii libdbus-1-3 1.5.12-1 ii libdbus-glib-1-2 0.98-1 ii libebook-1.2-12 3.2.2-3 ii libecal-1.2-10 3.2.2-3 ii libedataserver-1.2-15 3.2.2-3 ii libedataserverui-3.0-1 3.2.2-3 ii libffi5 3.0.10-3 ii libfolks25 0.6.9-1 ii libgconf-2-4 3.2.5-1 ii libgdk-pixbuf2.0-0 2.26.1-1 ii libgee2 0.6.4-1 ii libgirepository-1.0-1 1.32.1-1 ii libgjs0b [libgjs0-libmozjs185-1.0] 1.32.0-2 ii libgl1-mesa-glx [libgl1] 8.0.2-2 ii libglib2.0-0 2.32.3-1 ii libgnome-desktop-3-2 3.4.2-1 ii libgnome-keyring0 3.4.1-1 ii libgnome-menu-3-0 3.2.0.1-2 ii
Bug#672678: cryptmount: unmet dependency on libdevmapper
Package: cryptmount Version: 4.3-1 Severity: grave Justification: renders package unusable Hi, Due to some changes in 'libdevmapper1.02.1' the package cannot be installed: | root@r2:~# apt install cryptmount | Reading package lists... Done | Building dependency tree | Reading state information... Done | Some packages could not be installed. This may mean that you have | requested an impossible situation or if you are using the unstable | distribution that some required packages have not yet been created | or been moved out of Incoming. | The following information may help to resolve the situation: | | The following packages have unmet dependencies: | cryptmount : Depends: libdevmapper | E: Unable to correct problems, you have held broken packages. If this is a problem in libdevmapper1.02.1 package please reassing. (no longer provides libdevmapper as of version 2:1.02.74-1) Thanks -- System Information: Debian Release: wheezy/sid APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#672334: linux-container: trying to overwrite '/usr/bin/uptime', which is also in package procps
Package: linux-container Version: 1-6 Severity: grave Justification: renders package unusable Hi, Upgrade from version 1-5 does not work: | Preparing to replace linux-container 1-5 (using .../linux-container_1-6_all.deb) ... | Unpacking replacement linux-container ... | dpkg: error processing /var/cache/apt/archives/linux-container_1-6_all.deb (--unpack): | trying to overwrite '/usr/bin/uptime', which is also in package procps 1:3.3.2-3 | [..] | Processing triggers for install-info ... | Errors were encountered while processing: | /var/cache/apt/archives/linux-container_1-6_all.deb Thanks -- System Information: Debian Release: wheezy/sid APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages linux-container depends on: ii debconf [debconf-2.0] 1.5.43 linux-container recommends no packages. Versions of packages linux-container suggests: pn openssh-server none -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#671686: error while loading shared libraries: libclutter-1.0.so.0
Package: libclutter-imcontext-0.1-0 Version: 0.1.4-2+b1 Followup-For: Bug #671686 Hi, Actually the package name+version are wrong and this is why apt-listbugs doesn't catch it. Can this be fixed considering the binNMU? Yes, it's possible to downgrade to the version in testing via «dpkg -i». Thanks -- System Information: Debian Release: wheezy/sid APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libclutter-imcontext-0.1-0 depends on: ii libatk1.0-0 2.4.0-2 ii libc6 2.13-32 ii libcairo-gobject2 1.12.2-1 ii libcairo2 1.12.2-1 ii libclutter-1.0-01.8.4-1 ii libcogl-pango0 1.8.2-1 ii libcogl91.10.2-3 ii libgdk-pixbuf2.0-0 2.26.1-1 ii libglib2.0-02.32.2-1 ii libgtk-3-0 3.4.1-2 ii libjson-glib-1.0-0 0.14.2-1 ii libpango1.0-0 1.30.0-1 ii libx11-62:1.4.99.901-2 ii libxcomposite1 1:0.4.3-2 ii libxdamage1 1:1.1.3-2 ii libxext62:1.3.1-2 ii libxfixes3 1:5.0-4 ii libxi6 2:1.6.0-1 libclutter-imcontext-0.1-0 recommends no packages. libclutter-imcontext-0.1-0 suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#670097: gnome-shell: random hang causes data loss
2012/4/30 Michael Biebl bi...@debian.org: From time to time the Gnome shell will just freeze/hang and not accept any input How often is from time to time? Is this related to specific actions/circumstances, e.g. running an OpenGL game or something similar. At least once a week. Usually I run these applications: chromium, gnome-terminal, geany, retext, evince. (keyboard or mouse) and all I can do is restart gdm3 or the laptop. So the system does not lock up completely? I.e you can still switch to the console or access the system via e.g. SSH? Yes, the system is responsive but only Gnome is in a deep freeze. Even if I kill the front app from a tty the Gnome shell still displays it — all I can do is restart gdm3. Now I'm in the same situation and the latest changes made in a document I'm writting are going to be lost as I have no way to save them. If you are able to still access the system via the console, you might just kill the gnome-shell process, in which case it should be restarted. I'll do this next time. This is the second most annoying thing for me in Debian 7.0 (wheezy). I cannot tell what causes this, there is nothing in the syslog. I've attached the current process listing - maybe you can spot something. Unfortunately not. Is it possible, that you compile gnome-shell with debug symbols [1] and attach gdb when such a freeze occurs (if you are able to still access the system). Which Xorg driver do you use? Do those freezes also occur with the gnome-shell version from testing or is this something specific in 3.2.2.1-3? This is not specific to current version. I postponed this report until now just to test if Gnome 3.4 has the same problem. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#670131: AttributeError: 'Version' object has no attribute 'policy_priority'
2012/4/24 Michael Vogt m...@debian.org: This should work with current sid but it will not work with older version of python-apt. I added a check into do the code to not crash if it runs with older versions of python-apt. Thanks. I realised after sending the report that severity grave was not justified due to the above reason. But still I think its an important fix for those that will want to use u-a 0.76 in squeeze for at least two more years. Afterwards, probably the check could be removed. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#670131: AttributeError: 'Version' object has no attribute 'policy_priority'
Package: unattended-upgrades
Version: 0.76.2
Severity: grave
Justification: renders package unusable
Hi,
I upgraded u-a on one 32-bit server to test if another problem is fixed and
found that it doesn't work anymore:
| root@goliath:~# unattended-upgrades --debug
| INFO:root:Initial blacklisted packages: locales libc6-i686 libc-bin libc6
linux-image-2.6.32-5-486 linux-image-2.6.32-5-686-bigmem firmware-linux-free
linux-base libupsclient1 nut nut-cgi squid3-common squid3
| Initial blacklisted packages: locales libc6-i686 libc-bin libc6
linux-image-2.6.32-5-486 linux-image-2.6.32-5-686-bigmem firmware-linux-free
linux-base libupsclient1 nut nut-cgi squid3-common squid3
| INFO:root:Starting unattended upgrades script
| Starting unattended upgrades script
| INFO:root:Allowed origins are: ['o=Debian,a=stable',
'o=Debian,a=stable-updates', 'o=Debian,a=proposed-updates',
'origin=Debian,archive=stable,label=Debian-Security']
| Allowed origins are: ['o=Debian,a=stable', 'o=Debian,a=stable-updates',
'o=Debian,a=proposed-updates',
'origin=Debian,archive=stable,label=Debian-Security']
| Traceback (most recent call last):
| File /usr/bin/unattended-upgrades, line 920, in module
| main(options)
| File /usr/bin/unattended-upgrades, line 699, in main
| allowed_origins=allowed_origins)
| File /usr/bin/unattended-upgrades, line 70, in __init__
| self.adjust_candidate_versions()
| File /usr/bin/unattended-upgrades, line 94, in adjust_candidate_versions
| if ver.policy_priority 0:
| AttributeError: 'Version' object has no attribute 'policy_priority'
(on this system I do many u-a tests, that's why it has many packages
blacklisted)
Thanks
-- System Information:
Debian Release: 6.0.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500,
'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages unattended-upgrades depends on:
ii apt 0.8.10.3+squeeze1 Advanced front-end for dpkg
ii apt-utils 0.8.10.3+squeeze1 APT utility programs
ii debconf [debconf-2.0] 1.5.36.1 Debian configuration management sy
ii lsb-release 3.2-23.2squeeze1 Linux Standard Base version report
ii python2.6.6-3+squeeze6 interactive high-level object-orie
ii python-apt0.7.100.1+squeeze1 Python interface to libapt-pkg
ii ucf 3.0025+nmu1Update Configuration File: preserv
unattended-upgrades recommends no packages.
Versions of packages unattended-upgrades suggests:
pn bsd-mailx none (no description available)
-- Configuration Files:
/etc/apt/apt.conf.d/50unattended-upgrades changed:
// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
// Codename based matching:
// This will follow the migration of a release through different
// archives (e.g. from testing to stable and later oldstable).
// o=Debian,n=squeeze;
// o=Debian,n=squeeze-updates;
// o=Debian,n=squeeze-proposed-updates;
// o=Debian,n=squeeze,l=Debian-Security;
// Archive or Suite based matching:
// Note that this will silently match a different release after
// migration to the specified archive (e.g. testing becomes the
// new stable).
o=Debian,a=stable;
o=Debian,a=stable-updates;;
o=Debian,a=proposed-updates;
origin=Debian,archive=stable,label=Debian-Security;
};
// List of packages to not update
Unattended-Upgrade::Package-Blacklist {
// vim;
// libc6;
// libc6-dev;
// libc6-i686;
};
// This option allows you to control if on a unclean dpkg exit
// unattended-upgrades will automatically run
// dpkg --force-confold --configure -a
// The default is true, to ensure updates keep getting installed
//Unattended-Upgrade::AutoFixInterruptedDpkg false;
// Split the upgrade into the smallest possible chunks so that
// they can be interrupted with SIGUSR1. This makes the upgrade
// a bit slower but it has the benefit that shutdown while a upgrade
// is running is possible (with a small delay)
//Unattended-Upgrade::MinimalSteps true;
// Install all unattended-upgrades when the machine is shuting down
// instead of doing it in the background while the machine is running
// This will (obviously) make shutdown slower
//Unattended-Upgrade::InstallOnShutdown true;
// Send email to this address for problems or packages upgrades
// If empty or unset then no email is sent, make sure that you
// have a working mail setup on your system. A package that provides
// 'mailx' must be installed.
Unattended-Upgrade::Mail root;
// Set this value to true to get emails only on errors. Default
// is to always send a mail if Unattended-Upgrade::Mail is set
Bug#670097: gnome-shell: random hang causes data loss
Package: gnome-shell Version: 3.2.2.1-3 Severity: grave Justification: causes data loss Hi, From time to time the Gnome shell will just freeze/hang and not accept any input (keyboard or mouse) and all I can do is restart gdm3 or the laptop. Now I'm in the same situation and the latest changes made in a document I'm writting are going to be lost as I have no way to save them. This is the second most annoying thing for me in Debian 7.0 (wheezy). I cannot tell what causes this, there is nothing in the syslog. I've attached the current process listing - maybe you can spot something. Thanks -- System Information: Debian Release: wheezy/sid APT prefers proposed-updates APT policy: (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages gnome-shell depends on: ii dconf-gsettings-backend [gsettings-backend] 0.10.0-3 ii gconf-service3.2.3-4 ii gir1.2-accountsservice-1.0 0.6.15-4 ii gir1.2-atk-1.0 2.4.0-2 ii gir1.2-caribou-1.0 0.4.2-2 ii gir1.2-clutter-1.0 1.8.4-1 ii gir1.2-cogl-1.0 1.8.2-1 ii gir1.2-coglpango-1.0 1.8.2-1 ii gir1.2-folks-0.6 0.6.8-2 ii gir1.2-freedesktop 1.32.1-1 ii gir1.2-gconf-2.0 3.2.3-4 ii gir1.2-gdkpixbuf-2.0 2.26.1-1 ii gir1.2-gee-1.0 0.6.4-1 ii gir1.2-gkbd-3.0 3.4.0.2-1 ii gir1.2-glib-2.0 1.32.1-1 ii gir1.2-gmenu-3.0 3.2.0.1-2 ii gir1.2-gnomebluetooth-1.03.2.2-1 ii gir1.2-gtk-3.0 3.4.1-2 ii gir1.2-json-1.0 0.14.2-1 ii gir1.2-mutter-3.03.2.2-1 ii gir1.2-networkmanager-1.00.9.4.0-3 ii gir1.2-pango-1.0 1.30.0-1 ii gir1.2-polkit-1.00.104-2 ii gir1.2-soup-2.4 2.38.1-2 ii gir1.2-telepathyglib-0.120.18.1-1 ii gir1.2-telepathylogger-0.2 0.2.12-1 ii gir1.2-upowerglib-1.00.9.15-3 ii gjs 1.30.1-1 ii gnome-bluetooth 3.2.2-1 ii gnome-icon-theme-symbolic3.4.0-2 ii gnome-settings-daemon3.2.2-3 ii gnome-shell-common 3.2.2.1-3 ii gsettings-desktop-schemas3.4.1-2 ii libatk1.0-0 2.4.0-2 ii libc62.13-30 ii libcairo-gobject21.10.2-7 ii libcairo21.10.2-7 ii libcamel-1.2-29 3.2.2-3 ii libcanberra0 0.28-4 ii libclutter-1.0-0 1.8.4-1 ii libcogl-pango0 1.8.2-1 ii libcogl5 1.8.2-1 ii libcroco30.6.5-1 ii libdbus-1-3 1.5.12-1 ii libdbus-glib-1-2 0.98-1 ii libdrm2 2.4.33-1 ii libebook-1.2-12 3.2.2-3 ii libecal-1.2-10 3.2.2-3 ii libedataserver-1.2-153.2.2-3 ii libedataserverui-3.0-1 3.2.2-3 ii libffi5 3.0.10-3 ii libfolks25 0.6.8-2 ii libfontconfig1 2.8.0-3.1 ii libfreetype6 2.4.9-1 ii libgconf-2-4 3.2.3-4 ii libgdk-pixbuf2.0-0 2.26.1-1 ii libgee2 0.6.4-1 ii libgirepository-1.0-11.32.1-1 ii libgjs0b [libgjs0-libmozjs185-1.0] 1.30.1-1 ii libgl1-mesa-glx [libgl1] 7.11.2-1 ii libglib2.0-0 2.32.0-4 ii libgnome-desktop-3-2 3.4.1-2 ii libgnome-keyring03.4.1-1 ii libgnome-menu-3-03.2.0.1-2 ii libgstreamer0.10-0 0.10.36-1 ii libgtk-3-0 3.4.1-2 ii libical0 0.48-1 ii libjson-glib-1.0-0 0.14.2-1 ii libmozjs185-1.0 1.8.5-1.0.0+dfsg-3 ii libmutter0
Bug#669583: OSError: [Errno 1] Operation not permitted
2012/4/20 Michael Vogt m...@debian.org: Thanks for your bugreport. I fixed that now. I guess in your case it was already the session-leader for some reason (maybe because of systemd?). Yes, I use «systemd» but I don't know what being session-leader means. Most times u-a is run automatically by Cron, only when I check or debug some problem its run from a tty/pts console. Just for my curiosity, can you shortly explain what problem does os.setsid() fix or avoid? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#669583: OSError: [Errno 1] Operation not permitted
2012/4/20 Michael Vogt m...@debian.org: Sure, the setsid() call makes the process a session leader and removes the controlling tty. The rational is that if you run unattended-upgrades in a shell and then shutdown your tty goes away and unattended-upgrades gets killed even if its in the middle of a operation (like a upgrade). The unattended-upgrades-shutdown script is there to avoid that and keep the system running long enough to finish the upgrade - but for that unattended-upgrades must not be terminated by the tty going away. I think this protection is necessary only if U-A::Automatic-Reboot is set to true, right? If affirmative, why not wait until u-a finish the pkgs upgrade and then do the reboot? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#669583: OSError: [Errno 1] Operation not permitted
Package: unattended-upgrades
Version: 0.76.1
Severity: grave
Justification: renders package unusable
Hi,
The os.setsid() changes makes u-a abort on every invocation:
| root@r2:~# unattended-upgrade
| Traceback (most recent call last):
| File /usr/bin/unattended-upgrade, line 913, in module
| os.setsid()
| OSError: [Errno 1] Operation not permitted
|
| root@r2:~# unattended-upgrade --debug
| Traceback (most recent call last):
| File /usr/bin/unattended-upgrade, line 913, in module
| os.setsid()
| OSError: [Errno 1] Operation not permitted
Thanks
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages unattended-upgrades depends on:
ii apt0.9.1
ii apt-utils 0.9.1
ii debconf [debconf-2.0] 1.5.42
ii lsb-release4.1+Debian1
ii python 2.7.2-10
ii python-apt 0.8.4
ii ucf3.0025+nmu3
unattended-upgrades recommends no packages.
Versions of packages unattended-upgrades suggests:
pn bsd-mailx none
-- Configuration Files:
/etc/apt/apt.conf.d/50unattended-upgrades changed:
// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
// Codename based matching:
// This will follow the migration of a release through different
// archives (e.g. from testing to stable and later oldstable).
// o=Debian,n=squeeze;
// o=Debian,n=squeeze-updates;
// o=Debian,n=squeeze-proposed-updates;
// o=Debian,n=squeeze,l=Debian-Security;
// Archive or Suite based matching:
// Note that this will silently match a different release after
// migration to the specified archive (e.g. testing becomes the
// new stable).
o=Debian,a=unstable;
// o=Debian,a=stable;
// o=Debian,a=stable-updates;
// o=Debian,a=proposed-updates;
origin=Debian,archive=stable,label=Debian-Security;
};
// List of packages to not update
Unattended-Upgrade::Package-Blacklist {
// vim;
// libc6;
// libc6-dev;
// libc6-i686;
};
// This option allows you to control if on a unclean dpkg exit
// unattended-upgrades will automatically run
// dpkg --force-confold --configure -a
// The default is true, to ensure updates keep getting installed
//Unattended-Upgrade::AutoFixInterruptedDpkg false;
// Split the upgrade into the smallest possible chunks so that
// they can be interrupted with SIGUSR1. This makes the upgrade
// a bit slower but it has the benefit that shutdown while a upgrade
// is running is possible (with a small delay)
//Unattended-Upgrade::MinimalSteps true;
// Install all unattended-upgrades when the machine is shuting down
// instead of doing it in the background while the machine is running
// This will (obviously) make shutdown slower
//Unattended-Upgrade::InstallOnShutdown true;
// Send email to this address for problems or packages upgrades
// If empty or unset then no email is sent, make sure that you
// have a working mail setup on your system. A package that provides
// 'mailx' must be installed.
Unattended-Upgrade::Mail root;
// Set this value to true to get emails only on errors. Default
// is to always send a mail if Unattended-Upgrade::Mail is set
Unattended-Upgrade::MailOnlyOnError true;
// Do automatic removal of new unused dependencies after the upgrade
// (equivalent to apt-get autoremove)
Unattended-Upgrade::Remove-Unused-Dependencies true;
// Automatically reboot *WITHOUT CONFIRMATION* if a
// the file /var/run/reboot-required is found after the upgrade
//Unattended-Upgrade::Automatic-Reboot false;
// Use apt bandwidth limit feature, this example limits the download
// speed to 70kb/sec
//Acquire::http::Dl-Limit 70;
-- debconf information:
* unattended-upgrades/enable_auto_updates: true
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#669583: OSError: [Errno 1] Operation not permitted
One important detail: I use «systemd», so this might not be a bug in U-A. Thaks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#666523: libreoffice: upgrade to 1:3.5.2~rc2-1 utterly fails
2012/4/2 Rene Engelhard r...@debian.org:
On Mon, Apr 02, 2012 at 07:06:26PM +0300, Teodor MICU wrote:
I've had this problem on my homestation. I fixed it by setting
LANG=C and run the upgrade again. [..]
I *think* that this is just by chance. I also get a error with just C
the first time.
The error itself might be different, but if one fixes the root cause it will
probably fix both (the cannot determine language is misleading yes, but
afaict
it means I, unopkg and the UNO runtime environment don't work)...
Ok, based on previous experience I was brave to upgrade my laptop this
morning (~200 packages including libreoffice*). Indeed, it didn't work
flawlessly and the culprit is python-uno. And after this I recall
that on the homestation I had to remove the lock file manually and run
the upgrade again. So, it's about two things which make it work for
me: LANG=C and removal of lock file.
Note that I put on hold (via apt_preferences) all *cairo* packages to
avoid the ugliness I've got on my homestation after upgrade.
Thanks
Preparing to replace libreoffice-writer 1:3.4.6-2 (using
.../libreoffice-writer_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-writer ...
Preparing to replace libreoffice-calc 1:3.4.6-2 (using
.../libreoffice-calc_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-calc ...
Preparing to replace libreoffice-base 1:3.4.6-2 (using
.../libreoffice-base_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-base ...
Preparing to replace libreoffice-base-core 1:3.4.6-2 (using
.../libreoffice-base-core_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-base-core ...
Preparing to replace libreoffice-java-common 1:3.4.6-2 (using
.../libreoffice-java-common_1%3a3.5.2~rc2-1_all.deb) ...
Unpacking replacement libreoffice-java-common ...
Preparing to replace libreoffice-impress 1:3.4.6-2 (using
.../libreoffice-impress_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-impress ...
Preparing to replace libreoffice-draw 1:3.4.6-2 (using
.../libreoffice-draw_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-draw ...
Preparing to replace libreoffice-gtk 1:3.4.6-2 (using
.../libreoffice-gtk_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-gtk ...
Preparing to replace libreoffice-gnome 1:3.4.6-2 (using
.../libreoffice-gnome_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-gnome ...
Preparing to replace python-uno 1:3.4.6-2 (using
.../python-uno_1%3a3.5.2~rc2-1_amd64.deb) ...
ERROR: Cannot determine language!
Exception details:
(com.sun.star.uno.RuntimeException) { { Message = Cannot determine language!,
Context = (com.sun.star.uno.XInterface) @0 } }
unopkg failed.
terminate called after throwing an instance of
'com::sun::star::uno::RuntimeException'
/var/lib/dpkg/tmp.ci/preinst: line 11: 10033 Aborted
/usr/lib/libreoffice/program/unopkg sync -v --shared
-env:BUNDLED_EXTENSIONS_USER=file:///usr/lib/libreoffice/share/prereg/bundled
-env:UserInstallation=file://$INSTDIR
-env:UNO_JAVA_JFW_INSTALL_DATA=file://$d/share/config/javasettingsunopkginstall.xml
-env:JFW_PLUGIN_DO_NOT_CHECK_ACCESSIBILITY=1
dpkg: error processing
/var/cache/apt/archives/python-uno_1%3a3.5.2~rc2-1_amd64.deb (--unpack):
subprocess new pre-installation script returned error exit status 134
configured to not write apport reports
Preparing to replace libreoffice-math
1:3.4.6-2 (using .../libreoffice-math_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-math ...
Preparing to replace libreoffice-style-galaxy 1:3.4.6-2 (using
.../libreoffice-style-galaxy_1%3a3.5.2~rc2-1_all.deb) ...
Unpacking replacement libreoffice-style-galaxy ...
Preparing to replace libreoffice-style-tango 1:3.4.6-2 (using
.../libreoffice-style-tango_1%3a3.5.2~rc2-1_all.deb) ...
Unpacking replacement libreoffice-style-tango ...
Preparing to replace libreoffice-core 1:3.4.6-2 (using
.../libreoffice-core_1%3a3.5.2~rc2-1_amd64.deb) ...
rmdir: failed to remove `/var/lib/libreoffice/basis3.4': Directory not empty
Unpacking replacement libreoffice-core ...
Preparing to replace libreoffice-common 1:3.4.6-2 (using
.../libreoffice-common_1%3a3.5.2~rc2-1_all.deb) ...
Unpacking replacement libreoffice-common ...
Preparing to replace libreoffice 1:3.4.6-2 (using
.../libreoffice_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice ...
Preparing to replace libreoffice-filter-binfilter 1:3.4.6-2 (using
.../libreoffice-filter-binfilter_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-filter-binfilter ...
Preparing to replace libreoffice-report-builder-bin 1:3.4.6-2 (using
.../libreoffice-report-builder-bin_1%3a3.5.2~rc2-1_amd64.deb) ...
Unpacking replacement libreoffice-report-builder-bin ...
Preparing to replace libreoffice-filter-mobiledev 1:3.4.6-2 (using
.../libreoffice-filter-mobiledev_1%3a3.5.2~rc2-1_all.deb) ...
Unpacking
Bug#666523: libreoffice: upgrade to 1:3.5.2~rc2-1 utterly fails
I've had this problem on my homestation. I fixed it by setting LANG=C and run the upgrade again. On this host I don't have en_US at all but only ro_RO.UTF-8. Hope this helps as this seemed to be a locale problem. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#663541: error: alternative path /usr/share/java/swt-gtk-3.7.jar doesn't exist
Hi Debian Release team, The reported problem here appears to be for amd64 only because I was able to install the package libswt-gtk-3-java on i386. Also, looking at the build status page [1] I see that the amd64 package was uploaded directly by the maintainer. Is there any chance that scheduling a rebuild will fix this problem? Thanks [1]: https://buildd.debian.org/status/package.php?p=swt-gtk Selecting previously unselected package libswt-gtk-3-jni. (Reading database ... 284321 files and directories currently installed.) Unpacking libswt-gtk-3-jni (from .../libswt-gtk-3-jni_3.7.2-1_i386.deb) ... Selecting previously unselected package libswt-gtk-3-java. Unpacking libswt-gtk-3-java (from .../libswt-gtk-3-java_3.7.2-1_i386.deb) ... Setting up libswt-gtk-3-jni (3.7.2-1) ... Setting up libswt-gtk-3-java (3.7.2-1) ... update-alternatives: using /usr/share/java/swt-gtk-3.7.jar to provide /usr/share/java/swt.jar (swt.jar) in auto mode. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#663541: error: alternative path /usr/share/java/swt-gtk-3.7.jar doesn't exist
Package: libswt-gtk-3-java Version: 3.7.2-1 Severity: grave Justification: renders package unusable Hi, The upgrade to current version is not possible: | Setting up libswt-gtk-3-java (3.7.2-1) ... | update-alternatives: error: alternative path /usr/share/java/swt-gtk-3.7.jar doesn't exist. | dpkg: error processing libswt-gtk-3-java (--configure): | subprocess installed post-installation script returned error exit status 2 | configured to not write apport reports |Errors were encountered while processing: | libswt-gtk-3-java This blocks the upgrade of all eclipse packages. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libswt-gtk-3-java depends on: ii libswt-gtk-3-jni 3.7.2-1 libswt-gtk-3-java recommends no packages. Versions of packages libswt-gtk-3-java suggests: pn libswt-gtk-3-java-gcj none -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#661217: systemd: gdm3 does not start
Package: systemd Version: 37-1 Severity: grave Justification: renders package unusable Hi, By adding init=/bin/systemd to grub2 boot loader the gdm3 display manager does not start as usual. Booting with the legacy init, gdm3 works as expected. This has appeared a few months ago and I simply disabled systemd to have Gnome back. Today I checked again to see if this was fixed - this bug report. Thanks root@piti:~# /etc/init.d/gdm3 status gdm3.service - LSB: GNOME Display Manager Loaded: loaded (/etc/init.d/gdm3) Active: active (exited) since Sat, 25 Feb 2012 10:16:34 +0200; 3min 51s ago Process: 948 ExecStart=/etc/init.d/gdm3 start (code=exited, status=0/SUCCESS) CGroup: name=systemd:/system/gdm3.service root@piti:~# /etc/init.d/gdm3 restart Restarting gdm3 (via systemctl): gdm3.serviceStopping GNOME Display Manager: gdm3. Starting GNOME Display Manager: gdm3. .. root@piti:~# /etc/init.d/gdm3 status gdm3.service - LSB: GNOME Display Manager Loaded: loaded (/etc/init.d/gdm3) Active: active (exited) since Sat, 25 Feb 2012 10:20:47 +0200; 4s ago Process: 7573 ExecStop=/etc/init.d/gdm3 stop (code=exited, status=0/SUCCESS) Process: 7582 ExecStart=/etc/init.d/gdm3 start (code=exited, status=0/SUCCESS) CGroup: name=systemd:/system/gdm3.service -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.UTF-8, LC_CTYPE=ro_RO.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages systemd depends on: ii initscripts 2.88dsf-22 ii libacl1 2.2.51-5 ii libaudit0 1:1.7.18-1.1 ii libc6 2.13-26 ii libcap2 1:2.22-1 ii libcryptsetup1 2:1.3.0-3.1 ii libdbus-1-3 1.4.18-1 ii libpam0g1.1.3-7 ii libselinux1 2.1.0-4.1 ii libsystemd-daemon0 37-1 ii libsystemd-login0 37-1 ii libudev0175-3.1 ii libwrap07.6.q-23 ii udev175-3.1 ii util-linux 2.20.1-3 Versions of packages systemd recommends: ii libpam-systemd 37-1 Versions of packages systemd suggests: ii python 2.7.2-10 ii systemd-gui 37-1 -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#651801: resolvconf: /etc/resolv.conf is a broken link after reboot
Package: resolvconf Version: 1.62 Severity: grave Hi, Every time I reboot the system I have to fix /etc/resolv.conf to have DNS working again. Since /etc/resolv.conf - /etc/resolvconf/run/resolv.conf, the later is not automatically created at reboot. I see now that this is actually a symlink to /run which is a tmpfs. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 3.1.0-1-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages resolvconf depends on: ii debconf [debconf-2.0] 1.5.41 ii initscripts2.88dsf-13.13 ii lsb-base 3.2-28 resolvconf recommends no packages. resolvconf suggests no packages. -- Configuration Files: /etc/resolvconf/resolv.conf.d/base changed: nameserver x.x.x.x nameserver y.y.y.y search domain1 domain2 domain3 domain4 -- debconf information: resolvconf/linkify-resolvconf: true resolvconf/reboot-recommended-after-removal: resolvconf/downup-interfaces: resolvconf/link-tail-to-original: false -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#610333: unattended-upgrades: delaying hibernation until crob job finishes
Hi, There is absolutely *no* relation between unattended-upgrades and pm-utils. Any process running at the time of hibernation could consider itself just as important as unattended-upgrades, thereby preventing the I'm open for better suggestions but it seems preferable to delay hibernation than to potentially break the system. I propose to make this bug a wishlist for the ability to choose at the package installation both to enable U-A (default NO) and to disable hibernation until U-A will finish execution (default YES). I think we're covered for the case of running on low battery because 'cron' doesn't start until (direct) power returns. I personally don't recommend to disable hibernation, but there are people who do. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#645919: unattended-upgrades: Unattended-upgrade in progress during shutdown, sleeping for 5s
2011/10/31 Michael Vogt m...@debian.org: I think I found the issue now and fixed it in trunk. The issue is that the init scripts are run on upgrade, but they really should only run on actual shutdown. Its a bit confusing why this is happening as the header of the init script says that it should not run in any runlevel and only stop in runlevel 0 6. So there might be a bug in the init system here as well. Which one do you use? I'm using the default init system in Debian: sysvinit + insserv. With the fix there will be one more hang on upgrade because the old (and buggy) prerm is run that will try to stop unattended-upgrades. But from that point on it should be fixed. Can be fixed by a targetted fix on Debian 6.0 squeeze? Could this create a problem on manual dist-upgrade from Debian 6.0 to 7.0? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#645919: unattended-upgrades: Unattended-upgrade in progress during shutdown, sleeping for 5s
I've forgot to attach the log file. Thanks -- 2011-10-31 06:15:32,683 INFO Initial blacklisted packages: 2011-10-31 06:15:32,684 INFO Starting unattended upgrades script 2011-10-31 06:15:32,684 INFO Allowed origins are: ['o=Debian,a=testing'] 2011-10-31 06:16:18,406 INFO Packages that are auto removed: '' 2011-10-31 06:16:18,406 INFO Packages that are upgraded: dctrl-tools dnsmasq dnsmasq-base ffmpeg gir1.2-clutter-1.0 gir1.2-cogl-1.0 gir1.2-coglpango-1.0 gnome-icon-theme gstreamer0.10-plugins-ugly libavcodec53 libavdevice53 libavfilter2 libavformat53 libavutil51 libclutter-1.0-0 libclutter-1.0-common libcogl-common libcogl-pango0 libcogl5 libgadu3 libgladeui-2-0 libgladeui-common libgmp10 liborbit2 libpostproc52 libquicktime2 libswscale2 libvlc5 libvlccore4 mplayer rsync telepathy-salut unattended-upgrades vlc vlc-nox vlc-plugin-notify vlc-plugin-pulse x11-utils 2011-10-31 06:16:18,407 INFO Writing dpkg log to '/var/log/unattended-upgrades/unattended-upgrades-dpkg_2011-10-31_06:16:18.407517.log' 2011-10-31 06:40:04,438 ERROR Installing the upgrades failed! 2011-10-31 06:40:04,438 ERROR error message: 'installArchives() failed' 2011-10-31 06:40:04,438 ERROR dpkg returned a error! See '/var/log/unattended-upgrades/unattended-upgrades-dpkg_2011-10-31_06:16:18.407517.log' for details Extracting templates from packages: 76% Extracting templates from packages: 100% Preconfiguring packages ... (Reading database ... 185575 files and directories currently installed.) Preparing to replace libavutil51 4:0.7.2-1 (using .../libavutil51_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libavutil51 ... Selecting previously unselected package libx264-118. Unpacking libx264-118 (from .../libx264-118_2%3a0.118.2085+git8a62835-1_amd64.deb) ... Preparing to replace libavcodec53 4:0.7.2-1 (using .../libavcodec53_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libavcodec53 ... Preparing to replace libavformat53 4:0.7.2-1 (using .../libavformat53_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libavformat53 ... Preparing to replace libavdevice53 4:0.7.2-1 (using .../libavdevice53_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libavdevice53 ... Preparing to replace libswscale2 4:0.7.2-1 (using .../libswscale2_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libswscale2 ... Preparing to replace libavfilter2 4:0.7.2-1 (using .../libavfilter2_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libavfilter2 ... Preparing to replace libcogl-pango0 1.8.0-1 (using .../libcogl-pango0_1.8.2-1_amd64.deb) ... Unpacking replacement libcogl-pango0 ... Preparing to replace libcogl5 1.8.0-1 (using .../libcogl5_1.8.2-1_amd64.deb) ... Unpacking replacement libcogl5 ... Preparing to replace gir1.2-coglpango-1.0 1.8.0-1 (using .../gir1.2-coglpango-1.0_1.8.2-1_amd64.deb) ... Unpacking replacement gir1.2-coglpango-1.0 ... Preparing to replace gir1.2-cogl-1.0 1.8.0-1 (using .../gir1.2-cogl-1.0_1.8.2-1_amd64.deb) ... Unpacking replacement gir1.2-cogl-1.0 ... Preparing to replace gir1.2-clutter-1.0 1.8.0-1 (using .../gir1.2-clutter-1.0_1.8.2-1_amd64.deb) ... Unpacking replacement gir1.2-clutter-1.0 ... Preparing to replace libclutter-1.0-0 1.8.0-1 (using .../libclutter-1.0-0_1.8.2-1_amd64.deb) ... Unpacking replacement libclutter-1.0-0 ... Preparing to replace libgmp10 2:5.0.2+dfsg-1 (using .../libgmp10_2%3a5.0.2+dfsg-2_amd64.deb) ... Unpacking replacement libgmp10 ... Preparing to replace libpostproc52 4:0.7.2-1 (using .../libpostproc52_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement libpostproc52 ... Preparing to replace dctrl-tools 2.18 (using .../dctrl-tools_2.19_amd64.deb) ... Unpacking replacement dctrl-tools ... Preparing to replace dnsmasq-base 2.58-3 (using .../dnsmasq-base_2.59-2_amd64.deb) ... Unpacking replacement dnsmasq-base ... Preparing to replace dnsmasq 2.58-3 (using .../dnsmasq_2.59-2_all.deb) ... Unpacking replacement dnsmasq ... Preparing to replace ffmpeg 4:0.7.2-1 (using .../ffmpeg_4%3a0.7.2-1+b1_amd64.deb) ... Unpacking replacement ffmpeg ... Preparing to replace gnome-icon-theme 3.2.0-1 (using .../gnome-icon-theme_3.2.1.2-1_all.deb) ... Unpacking replacement gnome-icon-theme ... Preparing to replace gstreamer0.10-plugins-ugly 0.10.18-3 (using .../gstreamer0.10-plugins-ugly_0.10.18-3+b1_amd64.deb) ... Unpacking replacement gstreamer0.10-plugins-ugly ... Preparing to replace libclutter-1.0-common 1.8.0-1 (using .../libclutter-1.0-common_1.8.2-1_all.deb) ... Unpacking replacement libclutter-1.0-common ... Preparing to replace libcogl-common 1.8.0-1 (using .../libcogl-common_1.8.2-1_all.deb) ... Unpacking replacement libcogl-common ... Preparing to replace libgadu3 1:1.11.0+r1184-1 (using .../libgadu3_1%3a1.11.0+r1184-2_amd64.deb) ... Unpacking replacement libgadu3 ... Preparing to replace libgladeui-common 3.10.0-2 (using .../libgladeui-common_3.10.2-1_all.deb) ... Unpacking replacement libgladeui-common ... Preparing to replace libgladeui-2-0 3.10.0-2 (using .../libgladeui-2-0_3.10.2-1_amd64.deb)
Bug#641015: upower: depends on libimobiledevice2 from experimental [amd64]
Package: upower Version: 0.9.13-1 Severity: serious Justification: package cannot be installed or upgraded Dear Maintainer, According to the buildd logs, the upower [amd64] package was uploaded by maintainer directly and it seems that was not build on a clean 'unstable' chroot because it depends on libimobiledevice2 which cannot be found on sid but only on experimental. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.0.0-1-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages upower depends on: ii dbus 1.4.14-1 ii libc6 2.13-20 ii libdbus-1-31.4.14-1 ii libdbus-glib-1-2 0.94-4 ii libglib2.0-0 2.28.6-1 ii libgudev-1.0-0 172-1 ii libimobiledevice1 1.0.6-3 ii libplist1 1.6-2 ii libpolkit-gobject-1-0 0.102-1 ii libupower-glib10.9.13-1 ii libusb-1.0-0 2:1.0.8-5 ii pm-utils 1.4.1-8 ii udev 172-1 Versions of packages upower recommends: ii policykit-1 0.102-1 upower suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#639556: smart-notifier: must not restart dbus on install/upgrade
Package: smart-notifier Version: 0.28-3 Severity: grave Justification: causes non-serious data loss Hi, Installing the package will result in restart of dbus: | Setting up smart-notifier (0.28-3) ... | Stopping system message bus: dbus. | Starting system message bus: dbus. This lead to a crash of X session (or a restart if systemd is the init process). Thus, any file not yet saved is lost. The package must not restart dbus, but reload it. Thanks -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (100, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages smart-notifier depends on: ii dbus 1.4.14-1 simple interprocess messaging syst ii python2.6.7-3interactive high-level object-orie ii python-dbus 0.84.0-2 simple interprocess messaging syst ii python-glade2 2.24.0-2 GTK+ bindings: Glade support ii python-gtk2 2.24.0-2 Python bindings for the GTK+ widge ii smartmontools 5.41+svn3365-1 control and monitor storage system smart-notifier recommends no packages. smart-notifier suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#622794: atop: vulnerable to symlink attack via insecure /tmp directory or file
Package: atop Version: 1.23-1 Severity: grave Tags: security Justification: user security hole Hi, I've just noticed that atop keeps the runtime data in /tmp/atop* directories or files (mentioned on man page too). I think it was established from a discussion on debian-devel@l.d.o that this is potentially a security vulnerability. Probably it should keep its temporary runtime data in its own directory under /var/run (or /run for next release). Please consider to backport the fix for 'stable' too. Thanks -- System Information: Debian Release: 6.0.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages atop depends on: ii libc6 2.11.2-10Embedded GNU C Library: Shared lib ii libncurses5 5.7+20100313-5 shared libraries for terminal hand ii logrotate 3.7.8-6 Log rotation utility ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime atop recommends no packages. atop suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#611629: libc6: fail to upgrade with Can't locate auto/Hash/Util/bootstpap.al in @INC
Package: libc6 Version: 2.11.2-10 Severity: critical Justification: breaks unrelated software Hi, An almost up-to-date system upgraded last week cannot be upgraded today due to libc6 configuration errors: | Calculating upgrade... Done | The following packages will be upgraded: | binutils bsdutils debconf debconf-i18n dmsetup dpkg ghostscript grub-common grub-pc initramfs-tools libblkid1 libc-bin | libc6 libc6-i686 libdevmapper1.02.1 libgs8 libpango1.0-0 libpango1.0-common libuuid1 locales lvm2 mount openoffice.org | openoffice.org-base openoffice.org-base-core openoffice.org-calc openoffice.org-common openoffice.org-core | openoffice.org-draw openoffice.org-emailmerge openoffice.org-filter-binfilter openoffice.org-filter-mobiledev | openoffice.org-gnome openoffice.org-gtk openoffice.org-impress openoffice.org-java-common openoffice.org-math | openoffice.org-officebean openoffice.org-report-builder-bin openoffice.org-style-galaxy openoffice.org-style-tango | openoffice.org-writer python-uno sudo ttf-opensymbol uno-libs3 update-inetd ure util-linux |49 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. |[..] | Fetched 169 MB in 1min 42s (1,647 kB/s) | dpkg-deb (subprocess): data: internal bzip2 read error: 'DATA_ERROR' | dpkg-deb: subprocess decompress returned error exit status 2 | dpkg-deb (subprocess): failed in write on buffer copy for failed to write to pipe in copy: Broken pipe | Reading changelogs... Done | Extracting templates from packages: 100% | Preconfiguring packages ... | (Reading database ... 124785 files and directories currently installed.) | Preparing to replace libc-bin 2.11.2-9 (using .../libc-bin_2.11.2-10_i386.deb) ... | Unpacking replacement libc-bin ... | Processing triggers for man-db ... | Setting up libc-bin (2.11.2-10) ... | (Reading database ... 124785 files and directories currently installed.) | Preparing to replace libc6 2.11.2-9 (using .../libc6_2.11.2-10_i386.deb) ... | Unpacking replacement libc6 ... | Setting up libc6 (2.11.2-10) ... | Can't locate auto/Hash/Util/bootstpap.al in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl .) at /usr/lib/perl/5.10/Hash/Util.pm line 34 | Compilation failed in require at /usr/share/perl/5.10/fields.pm line 122. | Compilation failed in require at /usr/share/perl5/Debconf/Log.pm line 10. | Compilation failed in require at /usr/share/perl5/Debconf/Db.pm line 7. | BEGIN failed--compilation aborted at /usr/share/perl5/Debconf/Db.pm line 7. | Compilation failed in require at /usr/share/debconf/frontend line 6. | BEGIN failed--compilation aborted at /usr/share/debconf/frontend line 6. | dpkg: error processing libc6 (--configure): | subprocess installed post-installation script returned error exit status 2 | configured to not write apport reports | Errors were encountered while processing: | libc6 | E: Sub-process /usr/bin/dpkg returned an error code (1) Attached is an apt-get -f install execution. Thanks -- System Information: Debian Release: 6.0 APT prefers squeeze-updates APT policy: (600, 'squeeze-updates'), (600, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libc6 depends on: ii libc-bin 2.11.2-10 Embedded GNU C Library: Binaries ii libgcc1 1:4.4.5-8 GCC support library Versions of packages libc6 recommends: ii libc6-i6862.11.2-9 Embedded GNU C Library: Shared lib Versions of packages libc6 suggests: ii debconf [debconf-2.0] 1.5.36 Debian configuration management sy pn glibc-doc none (no description available) ii locales 2.11.2-9 Embedded GNU C Library: National L -- debconf-show failed root@goliath:~# apt-get -f install Reading package lists... Done Building dependency tree Reading state information... Done Correcting dependencies... Done The following extra packages will be installed: libc6-i686 The following packages will be upgraded: libc6-i686 1 upgraded, 0 newly installed, 0 to remove and 46 not upgraded. 1 not fully installed or removed. Need to get 0 B/1,202 kB of archives. After this operation, 0 B of additional disk space will be used. Do you want to continue [Y/n]? Reading changelogs... Done debconf: Perl may be unconfigured (Can't locate auto/Hash/Util/bootstpap.al in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl .) at /usr/lib/perl/5.10/Hash/Util.pm line 34 Compilation failed in require at /usr/share/perl/5.10/fields.pm line 122. Compilation failed in require at
Bug#611629: libc6: fail to upgrade with Can't locate auto/Hash/Util/bootstpap.al in @INC
Hi, 2011/1/31 Julian Andres Klode j...@debian.org: Definitely not a libc6 bug, and probably not a bug at all. It looks like your perl-base installation is corrupt. Indeed perl-base was corrupted. The question is how since I didn't modified it manually?! Does perl -e require Hash::Util; work? It didn't worked until I corrected Util.pm. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#611629: libc6: fail to upgrade with Can't locate auto/Hash/Util/bootstpap.al in @INC
Hi, 2011/1/31 Adam D. Barratt a...@adam-barratt.org.uk: Looking at the log, it doesn't appear the errors are actually due to libc6, however. This section suggests a broken package; it would be interesting to narrow down which package caused it, so we can determine whether it is a local or mirror issue: I've redownloaded libc6-i686 multiple times with the same effect. However I've performed a second upgrade on another system and it worked in three steps: dpkg, libc6, all remaining. | dpkg-deb (subprocess): data: internal bzip2 read error: 'DATA_ERROR' | dpkg-deb: subprocess decompress returned error exit status 2 | dpkg-deb (subprocess): failed in write on buffer copy for failed to write to pipe in copy: Broken pipe The appearance of this error also points towards a likely local problem: | Can't locate auto/Hash/Util/bootstpap.al in @INC (@INC contains: The copy of /usr/lib/perl/5.10/Hash/Util.pm shipped by perl-base 5.10.1-17 (the version in both squeeze and sid) has line 34 as: bootstrap Hash::Util $VERSION; rather than the bootstpap in your error log. I've manually corrected this and the installation continued without error. I've reinstalled perl-base (from the old downloaded package in /var/cache/apt) and the new Util.pm file is correct. So a broken Debian repository mirror is not the issue. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#611629: libc6: fail to upgrade with Can't locate auto/Hash/Util/bootstpap.al in @INC
Hi, 2011/1/31 Julian Andres Klode j...@debian.org: Indeed perl-base was corrupted. The question is how since I didn't modified it manually?! Filesystem bug, system crash? That's the most probable cause due to a power failure last night combined with 'ext4' file systems. However, this shows more possible problems with ext4 than expected. The expected problem until now was to have zero length files on sudden power failure but only for files that didn't had enough time to sync to disk. Maybe reassign and lower severity? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#611283: gnome-commander: segmentation fault at startup
Package: gnome-commander Version: 1.2.8.6-3 Justification: renders package unusable Severity: grave Hi, After todays execution of unattended-upgrade for 'dmsetup libdevmapper1.02.1 libpango1.0-0 libpango1.0-common lvm2' I get segmentation fault at startup of gnome-commander every time. Yesterday it was working properly. I've attached the console output and syslog entry for the segfault. Thanks -- System Information: Debian Release: 6.0 APT prefers squeeze-updates APT policy: (600, 'squeeze-updates'), (600, 'testing'), (2, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages gnome-commander depends on: ii libart-2.0-2 2.3.21-1 Library of functions for 2D graphi ii libatk1.0-01.30.0-1 The ATK accessibility toolkit ii libbonobo2-0 2.24.3-1 Bonobo CORBA interfaces library ii libbonoboui2-0 2.24.3-1 The Bonobo UI library ii libc6 2.11.2-9 Embedded GNU C Library: Shared lib ii libcairo2 1.8.10-6 The Cairo 2D vector graphics libra ii libexiv2-9 0.20-2EXIF/IPTC metadata manipulation li ii libexpat1 2.0.1-7 XML parsing C library - runtime li ii libfontconfig1 2.8.0-2.1 generic font configuration library ii libfreetype6 2.4.2-2.1 FreeType 2 font engine, shared lib ii libgcc11:4.4.5-8 GCC support library ii libgconf2-42.28.1-6 GNOME configuration database syste ii libglib2.0-0 2.24.2-1 The GLib library of C routines ii libgnome2-02.30.0-1 The GNOME library - runtime files ii libgnomecanvas2-0 2.30.1-1 A powerful object-oriented display ii libgnomeui-0 2.24.3-1 The GNOME libraries (User Interfac ii libgnomevfs2-0 1:2.24.3-1GNOME Virtual File System (runtime ii libgtk2.0-02.20.1-2 The GTK+ graphical user interface ii libice62:1.0.6-2 X11 Inter-Client Exchange library ii liborbit2 1:2.14.18-0.1 libraries for ORBit2 - a CORBA ORB ii libpango1.0-0 1.28.3-1+squeeze1 Layout and rendering of internatio ii libpoppler50.12.4-1.2PDF rendering library ii libpopt0 1.16-1lib for parsing cmdline parameters ii libpython2.6 2.6.6-8+b1Shared Python runtime library (ver ii libsm6 2:1.1.1-1 X11 Session Management library ii libssl0.9.80.9.8o-4 SSL shared libraries ii libstdc++6 4.4.5-8 The GNU Standard C++ Library v3 ii libtag1c2a 1.6.3-1 TagLib Audio Meta-Data Library ii python 2.6.6-3+squeeze5 interactive high-level object-orie ii python-support 1.0.10automated rebuilding support for P ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime gnome-commander recommends no packages. Versions of packages gnome-commander suggests: ii libgnomevfs2-extra1:2.24.3-1 GNOME Virtual File System (extra m -- no debconf information doru@frost:~$ gnome-commander (gnome-commander:9609): GLib-GObject-WARNING **: invalid cast from `GtkMenuItem' to `GtkCheckMenuItem' (gnome-commander:9609): Gtk-CRITICAL **: gtk_check_menu_item_set_active: assertion `GTK_IS_CHECK_MENU_ITEM (check_menu_item)' failed (gnome-commander:9609): GLib-GObject-WARNING **: invalid cast from `GtkImageMenuItem' to `GtkCheckMenuItem' (gnome-commander:9609): Gtk-CRITICAL **: gtk_check_menu_item_set_active: assertion `GTK_IS_CHECK_MENU_ITEM (check_menu_item)' failed (gnome-commander:9609): Gtk-CRITICAL **: gtk_check_menu_item_set_active: assertion `GTK_IS_CHECK_MENU_ITEM (check_menu_item)' failed Segmentation fault Jan 27 19:18:44 frost kernel: [ 304.428258] gnome-commander[9609]: segfault at 21 ip b6db207f sp bfbe4fc0 error 4 in libgobject-2.0.so.0.2400.2[b6d88000+3d000] (Reading database ... 208098 files and directories currently installed.) Preparing to replace libdevmapper1.02.1 2:1.02.48-4 (using .../libdevmapper1.02.1_2%3a1.02.48-5_i386.deb) ... Unpacking replacement libdevmapper1.02.1 ... Preparing to replace dmsetup 2:1.02.48-4 (using .../dmsetup_2%3a1.02.48-5_i386.deb) ... Unpacking replacement dmsetup ... Preparing to replace libpango1.0-common 1.28.3-1 (using .../libpango1.0-common_1.28.3-1+squeeze1_all.deb) ... Cleaning up font configuration of pango... Cleaning up category xfont.. Unpacking replacement libpango1.0-common ... Preparing to replace libpango1.0-0 1.28.3-1 (using .../libpango1.0-0_1.28.3-1+squeeze1_i386.deb) ... Unpacking replacement libpango1.0-0 ... Preparing to replace lvm2 2.02.66-4 (using .../lvm2_2.02.66-5_i386.deb) ...
Bug#611283: gnome-commander doesn't start due to broken link on start_dir_*
severity 611283 normal retitle 611283 gnome-commander doesn't start due to broken link on start_dir_* quit I've found the cause to be a broken link configured for the start_dir_right parameter. Once the broken link was removed it had no problem to start (with a warning for missing directory). However, the segfault in libgobject-2.0.so.0.2400.2 is mentioned in syslog at every start. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi, 2011/1/24 Harald Jenny har...@a-little-linux-box.at: On Mon, Jan 24, 2011 at 10:40:06PM +0200, Teodor MICU wrote: I can only spot some cosmetic issues, otherwise I see no problem. The change USER - SYSTEMUSER only makes the diff larger and not really necessary. I tend to disagree as USER (as well as USERNAME) is set by the shell and so a [ -n $USER ] || USER=amavis check always evaluates to the user running the init script :-/ - as this is not the desired action I decided to rename USER to SYSTEMUSER (and will also change this in the config file). Good catch. Indeed, $USER is defined on interactive sessions and I was only thinking about starting at boot. Ok, I see how MILTERSOCKET is used now. IMHO it's better to keep the number of command line options as short as possible. I can only agree in principle. Well I don't think this package will make it into Debian Squeeze as for me a prerequisite is a fixed libmilter version... sorry when I kept you from doing other more release-critical work, this was not my intention :-(. I tend to disagree here (as Agustin). If this was the case the package would have the 'squeeze-will-remove' tag at least until now. For what I know amavisd is used in Debian SMTP infrastructure which might be a strong reason to accept this small fix in Debian 6.0. If there are other issues (ie. with libmilter) that's another issue which might indeed cause its removal. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/25 Harald Jenny har...@a-little-linux-box.at: On Tue, Jan 25, 2011 at 04:57:42PM +0200, Teodor MICU wrote: Good catch. Indeed, $USER is defined on interactive sessions and I was only thinking about starting at boot. Yes therefor I think this change is also necessary do you agree? Yes. I tend to disagree here (as Agustin). If this was the case the package would have the 'squeeze-will-remove' tag at least until now. For what I know amavisd is used in Debian SMTP infrastructure which might be a strong reason to accept this small fix in Debian 6.0. If there are other issues (ie. with libmilter) that's another issue which might indeed cause its removal. As far as I know there are not many installations using amavisd-new with milter so I guess the impact should be fairly minimal - my main objection currently is that I have seen no amavisd-milter installation which runs stable with the current libmilter version in testing and I do not see any interest of the release team in fixing it. If you're absolutely sure that amavisd-milter is broken due to libmilter (in squeeze) than you should request its removal by the release team. Of course the alternative is to fix libmilter but this might have to wait for r1. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi, 2011/1/24 Harald Jenny har...@a-little-linux-box.at: 7) You should probably add -q for all these executions to avoid unwanted strings during start/stop/restart. `echo $MILTERSOCKET | grep -v ^inet` If MILTERSOCKET is checked to contain text too? Yes, it does cover the case where MILTERSOCKET contains something but not if it is empty. For this I would recommend 'printf' since 'echo -n' is not portable and not working with /bin/dash. It is unclear to me why you need to change the owner of MILTERSOCKET. Because amavisd-milter running as user can't otherwise remove the socket when being stopped. Well, I was thinking that there should be a better way to create the socket with the correct owner and group. This is just an workaround for being created by root. I think spamass-millter does a pretty good job here since I use it in the default configuration (via a socket rather than inet). Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi, 2011/1/24 Agustin Martin agmar...@debian.org: On Mon, Jan 24, 2011 at 02:17:48PM +0100, Harald Jenny wrote: I will have a to check this - this is meant as a guard against accidently setting $MILTERSOCKET to . Good catch on this. I didn't though of this being empty. Damm, seems I wrongly understood Theodor's mail, and my proposed change will not work because of echo newline. Anyway, in the case above, 'echo -n' (allowed by policy 10.4) http://www.de.debian.org/doc/debian-policy/ch-files.html#s-scripts should help with that, if echo -n $MILTERSOCKET | grep -q -v ^inet; then That will still not protect against things like setting $MILTERSOCKET to , but dealing with is a must. I don't recommend to use echo with any parameters since it is not portable. The only reliable call to echo is just echo. These calls are not working reliable: echo -n, echo -e, echo -en. For any of these construction just use printf but very important to guard the strings with . So the recommended check to catch all combinations would be: | if printf $MILTERSOCKET | grep -q -v ^inet; then | ... | fi Also, the echo -n is one of the bashism constructions that don't work with dash behind /bin/sh (aka = squeeze). Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi, 2011/1/24 Julien Cristau jcris...@debian.org: Yes, it does cover the case where MILTERSOCKET contains something but not if it is empty. For this I would recommend 'printf' since 'echo -n' is not portable and not working with /bin/dash. Eh, what? Scripts may assume that `/bin/sh' implements the SUSv3 Shell Command Language[1] plus the following additional features not mandated by SUSv3:[2] * `echo -n', if implemented as a shell built-in, must not generate a newline. Works with dash afaict. Last time I checked I was testing several systems (not only on Debian) and I had some issues with echo -n. Ever since I've replace it with 'printf' but you might be right that echo -n is working fine with dash too. I know for user that I'll stick to this convention since I don't have Debian on all hosts. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/24 Harald Jenny har...@a-little-linux-box.at: Well as far as I know Debian currently only supports /bin/bash and /bin/dash as providers of /bin/sh so I guess it's currently safe to use echo -n in init scripts. It's fine. After some digging I guess I had in mind echo -e and echo -en are not working with dash but it seems that echo -n (without -e) has no issues. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi again, 2011/1/24 Harald Jenny har...@a-little-linux-box.at: first thanks to everbody for the valuable input, it helped me a lot to improve this init script. Please take a look at the third version of my patch and comment on it. Overall it seems fine, just a few observations: 1) usually you should enclose with the full path here: +PIDFILE=/var/run/amavis/$NAME.pid +[ -r /etc/default/$NAME ] . /etc/default/$NAME Also, $NAME is not usually quoted with in any init script. 2) You should make sure that you don't get it this situation: +if [ -n $PIDFILE ]; then ... +else + log_failure_msg Error: PIDFILE variable must be defined for correct functionality + exit 1 +fi This is usually done by setting the default values (for example for PIDFILE) after you have sourced the config from /etc/default/$NAME. This is done on a test like this: test -z $VAR || VAR=your default value (I don't recommend test -n $VAR .. not that good with set -e) You should consider all variables essential to amavisd-milter startup and runtime. 3) Replace these to work with set -e: +[ -n $AMAVISSOCKET ] .. with +[ -z $AMAVISSOCKET ] || .. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/24 Harald Jenny har...@a-little-linux-box.at: On Mon, Jan 24, 2011 at 06:37:37PM +0200, Teodor MICU wrote: 1) usually you should enclose with the full path here: +PIDFILE=/var/run/amavis/$NAME.pid +[ -r /etc/default/$NAME ] . /etc/default/$NAME You mean like this? PIDFILE=/var/run/amavis/$NAME.pid [ -r /etc/default/$NAME ] . /etc/default/$NAME Yes. Also, $NAME is not usually quoted with in any init script. Well that's true but you may set it to a value with blanks in it too so maybe the defaults should also be changed here? If you think it's not necessary I may also drop in but I wanted to be on the safe side here. I don't think this is a supported configuration. I mean $NAME should probably not be changed in config from /etc/default but as you say it is good to be on the safe side. 2) You should make sure that you don't get it this situation: +if [ -n $PIDFILE ]; then ... +else + log_failure_msg Error: PIDFILE variable must be defined for correct functionality + exit 1 +fi This is usually done by setting the default values (for example for PIDFILE) after you have sourced the config from /etc/default/$NAME. This is done on a test like this: test -z $VAR || VAR=your default value (I don't recommend test -n $VAR .. not that good with set -e) You mean not alerting when PIDFILE is set to in the config file but rather changing it to my default value, correct? Yes. It should be a valid config if /etc/default/$NAME that doesn't contain anything. Actually it should be the default to have only comments with the default values that the SysAdmin should be able to change with custom values. I don't know what you have now in the default config. One more important issue I think we missed so far is to have MILTERSOCKET empty in the config file. I think you covered only to skip chmod+chown but in fact it should abort execution. So this construction: +if [ -n $MILTERSOCKET ]; then should be change to: | if [ -z $MILTERSOCKET ]; then | echo .. abort | exit 1 | else [..] Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Just ignore this. I probably need some coffee. Having MILTERSOCKET variable empty is also with the case with the proposed configuration where you set your default unix:path/to/socket value. Thanks 2011/1/24 Teodor MICU mteo...@gmail.com: One more important issue I think we missed so far is to have MILTERSOCKET empty in the config file. I think you covered only to skip chmod+chown but in fact it should abort execution. So this construction: +if [ -n $MILTERSOCKET ]; then should be change to: | if [ -z $MILTERSOCKET ]; then | echo .. abort | exit 1 | else [..] -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/24 Harald Jenny har...@a-little-linux-box.at: Ok although the PIDFILE line can be removed with the below code. I'm don't see where PIDFILE is removed. Yes. It should be a valid config if /etc/default/$NAME that doesn't contain anything. Actually it should be the default to have only comments with the default values that the SysAdmin should be able to change with custom values. I don't know what you have now in the default config. Well it's actually this way but PIDFILE needs to be set explicitly for the --pidfile option in the start-stop-daemon stanza - the binary itself already has the default path hardcoded. One more important issue I think we missed so far is to have MILTERSOCKET empty in the config file. I think you covered only to skip chmod+chown but in fact it should abort execution. So this construction: I was wrong here. MILTERSOCKET can be empty in the config from /etc/default/$NAME and this should be the default. Not really as there is a default value set in the binary which points to /var/lib/amavis/amavisd-milter.sock - I guess I should rather do: if [ -z $MILTERSOCKET ]; then MILTERSOCKETTYPE=pipe else [..] fi as this would allow to also set MILTERSOCKETOWNER and MILTERSOCKETMODE with the default pipe location - what do you think? I think the above test is always false if you correctly initialize MILTERSOCKET after the /etc/default/$NAME has been sourced. [ -z $MILTERSOCKET ] || MILTERSOCKET=/var/lib/amavis/amavisd-milter.sock Later on you don't check if it's empty but only the type: unix vs inet. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/24 Harald Jenny har...@a-little-linux-box.at: On Mon, Jan 24, 2011 at 08:59:41PM +0200, Teodor MICU wrote: 2011/1/24 Harald Jenny har...@a-little-linux-box.at: Ok although the PIDFILE line can be removed with the below code. I'm don't see where PIDFILE is removed. Just take a look at the next patch version. I can only spot some cosmetic issues, otherwise I see no problem. The change USER - SYSTEMUSER only makes the diff larger and not really necessary. It was a good idea to get the 'dirname' out on their own, it is cleaner like this. I was wrong here. MILTERSOCKET can be empty in the config from /etc/default/$NAME and this should be the default. Yes but if it's empty the default value is a unix socket. Ok. I think the above test is always false if you correctly initialize MILTERSOCKET after the /etc/default/$NAME has been sourced. [ -z $MILTERSOCKET ] || MILTERSOCKET=/var/lib/amavis/amavisd-milter.sock True but I only want to append to OPTIONS when the default values are overriden because this keeps the command line shorter :-). Ok, I see how MILTERSOCKET is used now. Later on you don't check if it's empty but only the type: unix vs inet. Well seems to me this is just a change in the code flow... Yes. The release team will check too, maybe we missed something. :) Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
[Harald please CC: my address otherwise I could not see your responses] 2011/1/20 Harald Jenny har...@a-little-linux-box.at: I checked with other init scripts an in order to have a consistent coding style in the init script I replaced the with if-clauses - could you take a look at it and tell me if this looks better to you? I had a look at the new patch and I have a few observations. 1) This construction is fine and simple as recommended in /etc/init.d/skeleton: # Read configuration variable file if it is present [ -r /etc/default/$NAME ] . /etc/default/$NAME 2) This construction doesn't work if PIDFILE is empty (not defined): +if [ $PIDFILE != /var/run/amavis/$NAME.pid ]; then For all strings comparison you need to use $VAR. 3) This seems to be valid but I've always used [ -n $VAR ] instead of: +if [ $MILTERSOCKET ]; then 4) This doesn't work if the directory has a space: + if [ ! -e $(dirname $PIDFILE) ]; then +mkdir $(dirname $PIDFILE) You need to use $(dirname $PIDFILE). This is an issue if this variable can be defined to any custom value. 5) This has a mistake: and extra ) character at the end + chown $USER:$(id $USER -g -n) $(dirname $PIDFILE)) The correct execution would be: + chown $USER:$(id $USER -g -n) $(dirname $PIDFILE) 6) I'm not sure this is working properly, I've always used [ -n -a.. ]. +if [ $MILTERSOCKET -a `echo... ]; then Also, there is no need to check if MILTERSOCKET is empty in this case. 7) You should probably add -q for all these executions to avoid unwanted strings during start/stop/restart. `echo $MILTERSOCKET | grep -v ^inet` 8) The same as #5 for this construction: + if [ ! -e $(dirname $MILTERSOCKET) ]; then +mkdir $(dirname $MILTERSOCKET) + fi + chown $USER $(dirname $MILTERSOCKET)) It is unclear to me why you need to change the owner of MILTERSOCKET. Let me know if you need some help to fix this bug. I'm not using amavisd anymore but I could help in this case. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
2011/1/21 Agustin Martin agmar...@debian.org: if [ $MILTERSOCKET ] [ `echo $MILTERSOCKET | grep -v ^inet` ]; then but as Teodor points out (just read it), second check seems to be enough. Only that I realized latter the intention of this construction. My previous suggestion was to use this construction on its own without test: if echo $MILTERSOCKET | grep -q -v ^inet; then ... fi (the return code is set by grep) This works too but there is an extra test for the empty string: if [ $(echo $MILTERSOCKET | grep -v ^inet) ]; then ... fi (the return code is set by 'test') Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#609762: amavisd-milter: Init script changes owner of current directory to 'amavis'
Hi Harald, I looked at your patch and I think those multiple checks in chain are prone to mistakes in some conditions. I've reported the same problem with clamav-milter [1] some time ago and I believe that is a cleaner and better implementation for checking SOCKET, SOCKET_TYPE and SOCKET_PATH. I'm writing this to you to check the current script from /etc/init.d/clamav-milter and include something similar for amavisd-milter. Thanks [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=55 -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#602172: [openvpn] openvpn doesn't start without manually created nobody group
severity 602172 normal tag 602172 + moreinfo unreproducible stop Hi, On Tue, Nov 2, 2010 at 10:50 AM, Matthieu Baechler matthieu.baech...@gmail.com wrote: Package: openvpn Version: 2.1.3-2 Severity: grave A freshly installed openvpn package won't start because it needs nobody group existence but install script doesn't create it. Once this group is created, it starts correctly. First of all I've tested (again) a fresh install and there is no problem during the installation. By default there is nothing to be started after a fresh install. Second, in Debian the user 'nobody' with group ' nogroup' are created by default. There should be no group 'nobody' on a Debian system. The most likely cause of your problem is a custom VPN configuration which enforces low privileges using 'user+group'. Thus the severity change. Please send us the VPN profile (without any sensitive information) or at least the output from this command: $ grep -i -E '(user|group)' /etc/openvpn/*.conf Cheers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#600166: openvpn: at start it adds 40 bogus routes not specified in configuration
Hi, On Thu, Oct 21, 2010 at 2:03 PM, Alberto Gonzalez Iniesta a...@inittab.org wrote: I've got a new -2 package (same location) with upstream's solution, instead of mine. Would you mind testing it? That would probably be the one I upload to close this report. I've just tested this package (built on Oct 21) and the problem seems to be fixed. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#583371: nut: usbhid-ups failing to communicate with UPS (libusb_get_report: error sending control message)
Hi Arnaud, Since the patch is only a 2 line diff [1], can you upload a targeted fix with this patch for squeeze? I strongly believe that release team will not object to this small fix which is also included in the upstream source. Also, this bug is currently RC. Thanks [1] http://boxster.ghz.cc/projects/nut/changeset/2407 -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing'), (200, 'unstable'), (100, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages nut depends on: ii adduser 3.112 add and remove users and groups ii libc62.11.2-6Embedded GNU C Library: Shared lib ii libupsclient12.4.3-1+b1 network UPS tools - client library ii libusb-0.1-4 2:0.1.12-16 userspace USB programming library ii libwrap0 7.6.q-19Wietse Venema's TCP wrappers libra ii lsb-base 3.2-23.1Linux Standard Base 3.2 init scrip ii udev 160-1 /dev/ and hotplug management daemo Versions of packages nut recommends: ii bash-completion 1:1.2-2programmable completion for the ba Versions of packages nut suggests: pn nut-cgi none (no description available) pn nut-dev none (no description available) pn nut-snmp none (no description available) pn nut-xml none (no description available) -- Configuration Files: /etc/nut/nut.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#600166: openvpn: at start it adds 40 bogus routes not specified in configuration
Hi, On Fri, Oct 15, 2010 at 2:45 PM, Alberto Gonzalez Iniesta a...@inittab.org wrote: I think I found the bug. But you can help me confirm this (and solve the problem for the time being). Could you try this (on the server config): Change: push route remote_host 255.255.255.255 net_gateway To: push route OPENVPN_REMOTE_PEER 255.255.255.255 net_gateway Yes, it works with this configuration change on the oVPN server. I'll test the deb package too. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#600166: openvpn: at start it adds 40 bogus routes not specified in configuration
Hi, On Fri, Oct 15, 2010 at 3:39 PM, Alberto Gonzalez Iniesta a...@inittab.org wrote: Could you try with this package [1]? [1] http://etc.inittab.org/~agi/openvpn_2.1.3-2_i386.deb I've reverted the original config on the oVPN server and with the -2 package it works fine as on v2.1.0. The weird thing about pushing 'remote_host' from the server is that I have another oVPN server which has almost the same configuration but the problem was not for both. The differences on the working oVPN server are: - OPENVPN_REMOTE_PEER host is not from the REMOTE_SUBNET network (it is the external gateway); - using public IP addresses for clients (instead of private); Ok. I've found that on the working oVPN server I'm not using push remote_host because its not needed due to point #1. Mystery solved. :) Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#600166: openvpn: at start it adds 40 bogus routes not specified in configuration
Package: openvpn Version: 2.1.3-1 Severity: grave Justification: renders package unusable Hi, I've upgraded openvpn package after migration to 'squeeze'. One of the VPN connections is not working anymore and it adds 40 bogus routes that are not specified anywhere. It should add routes from the server, but it only adds the route to the internal oVPN subnet (it is a 'subnet' configuration) -- thus it renders the package unusable. I've attached the connection log from /var/log/syslog (some real info was replaced with generic names). Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing'), (200, 'unstable'), (100, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages openvpn depends on: ii debconf [debconf-2.0] 1.5.35 Debian configuration management sy ii libc6 2.11.2-6 Embedded GNU C Library: Shared lib ii liblzo2-2 2.03-2 data compression library ii libpam0g 1.1.1-6Pluggable Authentication Modules l ii libpkcs11-helper1 1.07-1 library that simplifies the intera ii libssl0.9.8 0.9.8o-2 SSL shared libraries ii net-tools 1.60-23The NET-3 networking toolkit ii openssl-blacklist 0.5-2 list of blacklisted OpenSSL RSA ke ii openvpn-blacklist 0.4list of blacklisted OpenVPN RSA sh openvpn recommends no packages. Versions of packages openvpn suggests: ii openssl 0.9.8o-2 Secure Socket Layer (SSL) binary a ii resolvconf1.46 name server information handler -- Configuration Files: /etc/default/openvpn changed: AUTOSTART=none OPTARGS= -- debconf information: openvpn/vulnerable_prng: openvpn/create_tun: false Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: Current Parameter Settings: Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: config = '/etc/openvpn/COMPANY-sfo.conf' Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: mode = 0 Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: persist_config = DISABLED Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: persist_mode = 1 Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: show_ciphers = DISABLED Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: NOTE: --mute triggered... Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: 255 variation(s) on previous 6 message(s) suppressed by --mute Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: OpenVPN 2.1.3 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Sep 30 2010 Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: mlockall call succeeded Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page). Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Oct 14 10:57:48 frost ovpn-COMPANY-sfo[4070]: /usr/bin/openssl-vulnkey -q -b 1024 -m modulus omitted Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Control Channel Authentication: using 'keys/ta-sfo.key' as a OpenVPN static key file Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: LZO compression initialized Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Socket Buffers: R=[112640-131072] S=[112640-131072] Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client' Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server' Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Local Options hash (VER=V4): '02af3434' Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4070]: Expected Remote Options hash (VER=V4): '3f08d474' Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4073]: mlockall call succeeded Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4073]: UDPv4 link local: [undef] Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4073]: UDPv4 link remote: [AF_INET]OPENVPN_REMOTE_IPADDR:1194 Oct 14 10:57:49 frost ovpn-COMPANY-sfo[4073]: TLS: Initial packet from
Bug#600166: openvpn: at start it adds 40 bogus routes not specified in configuration
Hi, On Thu, Oct 14, 2010 at 11:37 AM, Alberto Gonzalez Iniesta a...@inittab.org wrote: Hi, could you attach (without sensitive data) the server and client configurations? Sure. The real company addresses and names were replaced with generic names. Thanks #== openvpn client options (linux) == client remote OPENVPN_REMOTE_PEER nobind tls-auth keys/ta-sfo.key ca keys/COMPANY_private_CA.crt cert keys/staff.crt key keys/staff.key comp-lzo no dev tun mlock mtu-test mute 6 mute-replay-warnings passtos #available only on Linux ping-timer-rem reneg-sec 0 tls-exit auth-user-pass pw_staff.txt auth-retry interact auth-nocache #mssfix 1400#use only on networks where the MTU test fails tls-remote /C=US/ST=../L=../O=../CN=.. ns-cert-type server verb 4 #route remote_host 255.255.255.255 10.0.0.1 #redirect-gateway def1 ##route network/IP [netmask] [gateway] [metric] COMPANY-sfo-server.conf Description: Binary data
Bug#531546: Bug #531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi,
On Tue, Sep 21, 2010 at 11:56 PM, sean finney sean...@debian.org wrote:
some ideas/questions off the top of my head:
* did you get any sql upgrade errors after the package was updated?
There were no sql upgrade scripts from 0.8.7e-4 to 0.8.7g-1. The
upgrade says clearly that there are no scripts to run. I've checked
manually in the install directory and these two scripts are just
changing the cacti vesion in the database:
- 0_8_7e_to_0_8_7f.php
- 0_8_7f_to_0_8_7g.php
* does the schema seem correct (i.e. a disabled column in the host table)?
I don't know anything related to a 'schema', so probably not the
issue. If you can tell me what to check, I'll do.
* does it work if you disable the spine poller and use the cmd.php one
instead?
Yes, with 'cmd.php' I get the graphs but still at every 5 minutes
there are SQL errors reported (see attached).
No, with 'spine' I still get the SQL errors but also only NaN on all graphs.
* does it start graphing again if you nuke the rrd files or play around
with rrdtool versions?
I'll try to avoid playing around with rrdtool again. I did it for the
conversion from 1.2x to 1.3x and this is the main reason I'm using
cacti from squeeze on a lenny host.
esp for the first two items, if you suspect the problem is in the SQL,
and have time to help with some QA: i think it would be very helpful to
get a db dump of a fresh install vs the db dump of a almost-as-fresh
install of the previous version upgraded after maybe half an hour of
polling... it could be that there's a bug in the update sql logic.
I'll try to do a fresh install, but I don't I'll have the time this week.
Thanks
09/22/2010 10:55:34 AM - PHPSVR: Poller[0] Maximum runtime of 60 seconds exceeded for the Script Server. Exiting.
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_recache','RecacheTime:0.0 HostsRecached:0')'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT COUNT(*) FROM poller_command
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_poller','Time:0.0022 Method:cmd.php Processes:1 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:456 RRDsProcessed:0')'
09/22/2010 10:55:33 AM - SYSTEM STATS: Time:0.0022 Method:cmd.php Processes:1 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:456 RRDsProcessed:0
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name)
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE poller_id=0 AND end_time'-00-00 00:00:00'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('date',NOW())'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT local_data_id, rrd_name FROM poller_output
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:TRUNCATE TABLE poller_time'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('path_webroot','/usr/share/cacti/site')'
09/22/2010 10:55:33 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled = '' ORDER BY id
Bug#531546: Bug #531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi, On Wed, Sep 22, 2010 at 9:23 AM, sean finney sean...@debian.org wrote: do you get the same problems if you also upgrade spine from the lenny version to the squeeze version (0.8.7e-2)? i wouldn't be surprised that the poller from lenny is designed for different sql/schema and thus might not do the right INSERT/UPDATE type statements. I didn't upgrade spine because I'll have to upgrade mysql too (and probably other packages from backports). The weird thing about these SQL errors is that running them manually gives no error but sometimes there are no results returned from the query. if upgrading to the squeeze version of spine doesn't solve the problem, you could also try updating to the latest upstream version (i.e. compiling it yourself and replacing the packaged version), but i haven't been lead to believe that the latest version is so different from the squeeze/sid version. There are near zero chances of compiling it myself. I'll probably try a fresh install on a squeeze host with cacti and spine =0.8.7e. Until them I'll stick with cacti=0.8.7e-4. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
On Wed, Sep 22, 2010 at 10:57 AM, Teodor MICU mteo...@gmail.com wrote: On Tue, Sep 21, 2010 at 11:56 PM, sean finney sean...@debian.org wrote: some ideas/questions off the top of my head: * did you get any sql upgrade errors after the package was updated? There were no sql upgrade scripts from 0.8.7e-4 to 0.8.7g-1. The upgrade says clearly that there are no scripts to run. This is all that the upgrade process gives: ## Cacti Installation Guide Upgrade results: No SQL queries have been executed. ## Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi,
On Wed, Sep 22, 2010 at 10:57 AM, Teodor MICU mteo...@gmail.com wrote:
Yes, with 'cmd.php' I get the graphs but still at every 5 minutes
there are SQL errors reported (see attached).
Ok, the last test reveals that with 'cmd.php' used directly after
upgrade the same SQL errors will appear after the first 5 minutes
cycle (see attached file). See that the 'select' queries in the
database are good with some notes:
- there is a missing in the log at 11:35:34 regarding SQL:REPLACE INTO;
- I've executed only the 'select' queries.
Another problem seems that 'cmp.php' poller is executes more than 60
seconds which leads to overlapping:
09/22/2010 11:35:01 AM - POLLER: Poller[0] WARNING: There are '1'
detected as overrunning a polling process, please investigate
Shall I open a new bug report for this?
I'll revert to 0.8.7e-4 and test a fresh 'cacti=0.8.7g-1' install on a
virtual machine.
Thanks
09/22/2010 11:35:00 AM - SYSTEM STATS: Time:26.1492 Method:cmd.php Processes:1 Threads:N/A Hosts:42 HostsPerProcess:42 DataSources:464 RRDsProcessed:69
09/22/2010 11:35:01 AM - POLLER: Poller[0] WARNING: There are '1' detected as overrunning a polling process, please investigate
09/22/2010 11:35:01 AM - POLLER: Poller[0] WARNING: Poller Output Table not Empty. Issues Found: 4, Data Sources: cpu_user(DS[562]), load_1min(DS[563]), load_15min(DS[564]), load_5min(DS[565])
09/22/2010 11:35:05 AM - CMDPHP: Poller[0] Host[3] DS[33] WARNING: Result from SNMP not valid. Partial Result: U
09/22/2010 11:35:05 AM - CMDPHP: Poller[0] Host[3] DS[33] WARNING: Result from SNMP not valid. Partial Result: U
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled = '' ORDER BY id
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('path_webroot','/usr/share/cacti/site')'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:TRUNCATE TABLE poller_time'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT local_data_id, rrd_name FROM poller_output
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('date',NOW())'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE poller_id=0 AND end_time'-00-00 00:00:00'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name)
09/22/2010 11:35:34 AM - SYSTEM STATS: Time:0.0023 Method:cmd.php Processes:1 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_poller','Time:0.0023 Method:cmd.php Processes:1 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0')'
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT COUNT(*) FROM poller_command
09/22/2010 11:35:34 AM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_recache','RecacheTime:0.0 HostsRecached:0')'
09/22/2010 11:35:35 AM - PHPSVR: Poller[0] Maximum runtime of 60 seconds exceeded for the Script Server. Exiting.
Bug#531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
[really attaching the SQL select queries] mysql use cacti; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql SELECT id FROM host WHERE disabled = '' ORDER BY id; ++ | id | ++ | 1 | | 2 | | 3 | | 4 | | 6 | | 7 | | 8 | | 10 | | 11 | | 12 | | 13 | | 14 | | 15 | | 16 | | 17 | | 18 | | 19 | | 20 | | 21 | | 22 | | 24 | | 25 | | 26 | | 27 | | 29 | | 30 | | 31 | | 32 | | 34 | | 35 | | 36 | | 37 | | 42 | | 43 | | 44 | | 45 | | 48 | | 49 | | 50 | | 51 | | 52 | ++ 41 rows in set (0.00 sec) mysql SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00' - ; +--+ | count(*) | +--+ |1 | +--+ 1 row in set (0.00 sec) mysql mysql SELECT local_data_id, rrd_name FROM poller_output - ; +---+---+ | local_data_id | rrd_name | +---+---+ | 545 | cpu_user | | 546 | load_1min | +---+---+ 2 rows in set (0.00 sec) mysql SELECT count(*) FROM poller_time WHERE poller_id=0 AND end_time'-00-00 00:00:00'; +--+ | count(*) | +--+ |0 | +--+ 1 row in set (0.00 sec) mysql select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name); Empty set (0.00 sec) mysql SELECT COUNT(*) FROM poller_command; +--+ | COUNT(*) | +--+ |0 | +--+ 1 row in set (0.00 sec)
Bug#531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi, On Wed, Sep 22, 2010 at 12:00 PM, Stephane Dudzinski steph...@cp.dias.ie wrote: We did upgrade a box from Lenny to Squeeze and it indeed kept all its graphs this time, this is what we are currently using: ii rrdtool 1.4.3-1 ii cacti 0.8.7e-4 Ok, this is the last cacti version that works for me too (actually all have worked fine except the last one v0.8.7g). I guess rrdtool=1.4.x you have it from backports or you run Debian 6.0? rc cacti-spine 0.8.7a-2.3 This was not purged, so I guess you are running Debian 5.0 (lenny). We don't use cacti-spine, I have set up the following: Under General: RRDTool 1.3.x (no option for 1.4.x) Support for rrdtool 1.4x is available on cacti 0.8.7g although I didn't test it to see if it works. Uner Poller: cmd.php Right, this is the default settings and works well for a limited number of hosts and graphs. I have 52 hosts and ~500 graphs to update, where the CPU load (by core/processor), load average and CPU usage are configured at 1 minute. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi, On Wed, Sep 22, 2010 at 4:48 PM, Stephane Dudzinski steph...@cp.dias.ie wrote: I have just upgraded to 0.8.7g-1, backed up the DB before doing so then did the web interface upgrade steps, it said there was no SQL upgrade. And it is still happily graphing. So I am guessing your problem is probably with cacti-spine (that I am not using). Different bug if you ask me. Yes, it was working for me too (happily graphing) if I used 'cmd.php' which you also use. But also, check the 'cacti.log' file for SQL errors. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#531546: Bug #531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
retitle 531546 empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
quit
Hi,
It seems that this old problem has an impact on 'squeeze' too. After
upgrading from v0.8.7e-4 to 0.8.7g-1 all the graphs were with NaN from
this point forward. The error message in cacti.log was like in the
attached file. I've downgraded to the previous version and restored
the database from a backup (cacti refused to continue due to a higher
version 7g than 7e currently installed).
I'll probably attempt a new upgrade soon, do you have any recommendations?
Thanks
09/21/2010 08:00:39 PM - SYSTEM STATS: Time:37.3214 Method:spine Processes:2 Threads:8 Hosts:42 HostsPerProcess:21 DataSources:464 RRDsProcessed:411
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled = '' ORDER BY id
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('path_webroot','/usr/share/cacti/site')'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:TRUNCATE TABLE poller_time'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT local_data_id, rrd_name FROM poller_output
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('date',NOW())'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE poller_id=0 AND end_time'-00-00 00:00:00'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name)
09/21/2010 08:01:01 PM - SYSTEM STATS: Time:0.0020 Method:spine Processes:2 Threads:8 Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_poller','Time:0.0020 Method:spine Processes:2 Threads:8 Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0')'
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT COUNT(*) FROM poller_command
09/21/2010 08:01:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_recache','RecacheTime:0.0 HostsRecached:0')'
09/21/2010 08:02:01 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled = '' ORDER BY id
09/21/2010 08:02:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('path_webroot','/usr/share/cacti/site')'
09/21/2010 08:02:01 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00'
09/21/2010 08:02:01 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:TRUNCATE TABLE poller_time'
Bug#531546: Bug #531546: empty graphs due to 'A DB Exec Failed' Poller[0] ERROR
Hi again,
On Tue, Sep 21, 2010 at 11:02 PM, Teodor MICU mteo...@gmail.com wrote:
It seems that this old problem has an impact on 'squeeze' too. After
upgrading from v0.8.7e-4 to 0.8.7g-1 all the graphs were with NaN from
this point forward.
I've been able to reproduce the problem. So far the problem will
appear any time I'll activate 'spine' poller. One weird thing is that
both CMDPHP and SPINE are present in the cacti.log as if both are
running even if I selected 'spine' to do the polling. Note that I'm
using cacti=0.8.7g with spine=0.8.7a-2.3 on a Debian 5.0 (lenny) host.
So, using 'cmd.php' is an option but brings some important drawbacks:
- there are many U results from the queries, with 'spine' there were
not so many;
- it doesn't have enough time to do all the polling (for all
graphs/data sources).
Update: using 'cmd.php' also gives SQL errors, although it could be
from another polling process. I suspect that 'spine' is causing some
problems to the DB that affects 'cmd.php' too.
Thanks
09/21/2010 11:30:01 PM - POLLER: Poller[0] WARNING: There are '2' detected as overrunning a polling process, please investigate
09/21/2010 11:30:01 PM - POLLER: Poller[0] WARNING: Poller Output Table not Empty. Issues Found: 3, Data Sources: traffic_in(DS[11]), traffic_out(DS[11]), cpu(DS[365])
09/21/2010 11:30:01 PM - SPINE: Poller[0] Host[3] DS[33] WARNING: Result from SNMP not valid. Partial Result: ...
09/21/2010 11:30:01 PM - SPINE: Poller[0] Host[3] DS[33] WARNING: Result from SNMP not valid. Partial Result: ...
09/21/2010 11:30:01 PM - POLLER: Poller[0] Maximum runtime of 298 seconds exceeded. Exiting.
09/21/2010 11:30:01 PM - SYSTEM STATS: Time:59.3551 Method:cmd.php Processes:2 Threads:N/A Hosts:42 HostsPerProcess:21 DataSources:464 RRDsProcessed:301
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled = '' ORDER BY id
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('path_webroot','/usr/share/cacti/site')'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE end_time='-00-00 00:00:00'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:TRUNCATE TABLE poller_time'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT local_data_id, rrd_name FROM poller_output
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('date',NOW())'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT count(*) FROM poller_time WHERE poller_id=0 AND end_time'-00-00 00:00:00'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name)
09/21/2010 11:30:02 PM - SYSTEM STATS: Time:0.0022 Method:cmd.php Processes:2 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_poller','Time:0.0022 Method:cmd.php Processes:2 Threads:N/A Hosts:0 HostsPerProcess:0 DataSources:464 RRDsProcessed:0')'
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed!, Error:'0', SQL:SELECT COUNT(*) FROM poller_command
09/21/2010 11:30:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'0', SQL:REPLACE INTO settings (name,value) VALUES ('stats_recache','RecacheTime:0.0 HostsRecached:0')'
09/21/2010 11:30:03 PM - PHPSVR: Poller[0] Maximum runtime of 60 seconds exceeded for the Script Server. Exiting.
09/22/2010 02:49:43 AM - SYSTEM STATS: Time:96.2642 Method:cmd.php Processes:1 Threads:N/A Hosts:42 HostsPerProcess:42 DataSources:466 RRDsProcessed:412
09/22/2010 02:50:00 AM - POLLER: Poller[0] Maximum runtime of 298 seconds exceeded. Exiting.
09/22/2010 02:50:00 AM - SYSTEM STATS: Time:17.1356 Method:cmd.php Processes:1 Threads:N/A Hosts:42 HostsPerProcess:42 DataSources:466 RRDsProcessed:45
09/22/2010 02:50:02 AM - POLLER: Poller[0] WARNING: There are '1' detected as overrunning a polling process, please investigate
09/22/2010 02:50:02 AM - POLLER: Poller[0] WARNING: Poller Output Table not Empty. Issues Found: 1, Data Sources: cpu(DS[308])
09/22/2010 02:50:06 AM - CMDPHP: Poller[0] Host[3] DS[32] WARNING: Result from SNMP not valid. Partial Result: U
09/22/2010 02:50:06 AM - CMDPHP: Poller[0] Host[3] DS[32] WARNING: Result from SNMP not valid. Partial Result: U
09/22/2010 02:50:43 AM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed!, Error:'0', SQL:SELECT id FROM host WHERE disabled
Bug#594347: ipwatchd-gnotify: uninstallable on kfreebsd-* architectures
Package: ipwatchd-gnotify Version: 1.0-2 Severity: grave Justification: renders package unusable Hi, Since ipwatchd-gnotify depends on ipwatchd, it must not be build on architectures where ipwatchd was not build: kfreebsd-amd64 and kfreebsd-i386. Because of this the package cannot migrate to testing/squeeze thus adding this RC bug to keep track of this problem. ## # Excuse for ipwatchd-gnotify # * 166 days old (needed 10 days) # * Ignoring block request by freeze, due to unblock request by freeze-exception # * ipwatchd-gnotify/kfreebsd-amd64 unsatisfiable Depends: ipwatchd # * ipwatchd-gnotify/kfreebsd-i386 unsatisfiable Depends: ipwatchd # * Valid candidate ## The solution (probable, not sure) is to ask for removal of the binary packages built on these two architectures (kfreebsd-*) and temporary avoid building it until ipwatchd is ready to be build on kfreebsd-* too. Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'testing-proposed-updates') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-openvz-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ipwatchd-gnotify depends on: ii ipwatchd 1.2-2 IP conflict detection tool ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib ii libcairo2 1.8.10-4 The Cairo 2D vector graphics libra ii libdbus-1-3 1.2.24-3 simple interprocess messaging syst ii libdbus-glib-1-2 0.88-2 simple interprocess messaging syst ii libfontconfig12.8.0-2.1 generic font configuration library ii libfreetype6 2.4.2-1FreeType 2 font engine, shared lib ii libglib2.0-0 2.24.1-1 The GLib library of C routines ii libgtk2.0-0 2.20.1-1 The GTK+ graphical user interface ii libnotify1 [libnotify1-gtk2.1 0.5.0-2sends desktop notifications to a n ii libpango1.0-0 1.28.1-1 Layout and rendering of internatio ipwatchd-gnotify recommends no packages. ipwatchd-gnotify suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#481072: dk-filter crash seems to be for a specific use case (-k parameter)
On Wed, Aug 18, 2010 at 12:38 AM, Mike Markley m...@markley.org wrote: On Mon, Aug 16, 2010 at 10:57:35AM +0300, Teodor MICU mteo...@gmail.com wrote: [..] In conclusion, can we downgrade the severity of this bug report so that at least we have the same version from lenny in squeeze too? If there are no objections I can do this at the end of the week, though it is better to be done by Mike Markley. I don't object, either, but I would also like input from the release team. I can chase that, if you'd like. By all means I do prefer to have you as the maintainer of the package to contact the Release team. I'm not sure if this is necessary, but its your call. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#481072: dk-filter crash seems to be for a specific use case (-k parameter)
Followup-For: Bug #481072 Package: dk-filter Version: 1.0.0.dfsg-1+b1 *** Please type your report below this line *** Hello, I've been checking the status of 'dk-filter' for squeeze and it is blocked for inclusion by this RC bug report. As far as I can see this reliable crash is reproduced only if you use the -k parameter. I don't use it (I don't have multiple domains) and I don't have crashes, I had only one this morning but that all for almost a year of working properly. From my point of view development of dk-filter has stopped and only dkim-filter is maintained properly. Thus this bug and the other I reported will have to be avoided as there are specific use cases. In conclusion, can we downgrade the severity of this bug report so that at least we have the same version from lenny in squeeze too? If there are no objections I can do this at the end of the week, though it is better to be done by Mike Markley. Thanks -- System Information: Debian Release: 5.0.5 APT prefers stable APT policy: (990, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages dk-filter depends on: ii adduser 3.110add and remove users and groups ii libc6 2.7-18lenny4 GNU C Library: Shared libraries ii libmilter1.0.1 8.14.3-5+lenny1 Sendmail Mail Filter API (Milter) ii libssl0.9.8 0.9.8g-15+lenny7 SSL shared libraries dk-filter recommends no packages. dk-filter suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#580374: unbound: 98% CPU load on one core due to DNSSEC-only test query
Package: unbound Version: 1.4.4-1 Severity: grave Justification: renders package unusable Hi, On May 5 all DNS root servers are requiring DNSSEC for operation. I've made tests with both bind9 and unbound and the later has stopped working and keeps one CPU core at 98%. This is the command executed: | $ dig +short rs.dns-oarc.net txt For more information see this web page: https://www.dns-oarc.net/oarc/services/replysizetest Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=ro_RO.UTF-8, LC_CTYPE=ro_RO.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages unbound depends on: ii adduser 3.112 add and remove users and groups ii libc6 2.10.2-6 Embedded GNU C Library: Shared lib ii libev31:3.9-1high-performance event loop librar ii libldns1 1.6.4-4ldns library for DNS programming ii libssl0.9.8 0.9.8n-1 SSL shared libraries unbound recommends no packages. unbound suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#576683: xpdf-utils: upgrade error trying to overwrite '/usr/bin/pdftoppm'
Package: xpdf-utils Version: 3.02-2 Severity: serious Justification: Policy 7.6.1 Hi, The upgrade of xpdf-utils package failed: | Preparing to replace xpdf-utils 3.02-1.4+lenny1 (using .../xpdf-utils_3.02-2_i386.deb) ... | Unpacking replacement xpdf-utils ... | dpkg: error processing /var/cache/apt/archives/xpdf-utils_3.02-2_i386.deb (--unpack): | trying to overwrite '/usr/bin/pdftoppm', which is also in package xpdf-reader 0:3.02-1.4+lenny1 | dpkg-deb: subprocess paste killed by signal (Broken pipe) | Preparing to replace xpdf-reader 3.02-1.4+lenny1 (using .../xpdf-reader_3.02-2_i386.deb) ... | Unpacking replacement xpdf-reader ... [..] | Errors were encountered while processing: | /var/cache/apt/archives/xpdf-utils_3.02-2_i386.deb | E: Sub-process /usr/bin/dpkg returned an error code (1) Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-4-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages xpdf-utils depends on: ii gsfonts 1:8.11+urwcyr1.0.7~pre44-4 Fonts for the Ghostscript interpre ii libc6 2.10.2-6 Embedded GNU C Library: Shared lib ii libfreetype6 2.3.11-1 FreeType 2 font engine, shared lib ii libgcc1 1:4.4.2-9 GCC support library ii libpaper1 1.1.23+nmu2library for handling paper charact ii libstdc++64.4.2-9The GNU Standard C++ Library v3 ii libt1-5 5.1.2-3Type 1 font rasterizer library - r pn xpdf-common none (no description available) xpdf-utils recommends no packages. Versions of packages xpdf-utils suggests: pn pdftk none (no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#574832: [security] possible symlink attack against /tmp/ddclient.cache
Package: ddclient Version: 3.8.0-10 Severity: grave Tags: security Justification: user security hole Hi, A local user could perform a symlink attack against /tmp/ddclient.cache file. I see two solutions for this problem: 1) use /var/run/ddclient.cache as the cache file (only root has access here) 2) use `mktemp' to create a non-predictable temporary file. The first solution seem to be the best as it avoids the complexity of working with non-predictable temporary files (create, find, update, close). Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ddclient depends on: ii debconf [debconf-2.0]1.5.28 Debian configuration management sy ii initscripts 2.87dsf-8.1 scripts for initializing and shutt ii lsb-base 3.2-23 Linux Standard Base 3.2 init scrip ii perl [perl5] 5.10.1-11 Larry Wall's Practical Extraction Versions of packages ddclient recommends: ii libio-socket-ssl-perl 1.31-1 Perl module implementing object or ddclient suggests no packages. -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#574832: [security] possible symlink attack against /tmp/ddclient.cache
Hi, On Sun, Mar 21, 2010 at 6:43 PM, Nico Golde n...@debian.org wrote: From what I see it is using /var/cache/ddclient/ddclient.cache. Can you elaborate why you think it's using /tmp/? It doesn't apper to be using that directory. This is what I have on my laptop: | d...@r2:~$ ls -l /tmp/ddclient.cache /var/cache/ddclient/ | -rw--- 1 root root 262 2010-03-21 19:56 /tmp/ddclient.cache | | /var/cache/ddclient/: | total 0 Also, I'm watching syslog quite a lot and I noticed this line at boot: | Mar 21 19:56:39 r2 ddclient[3135]: WARNING: file /tmp/ddclient.cache, line 3: Invalid Value for keyword 'ip' = '' Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#572048: tomcat6: fails to start after upgrade to v6.0.24-2
Hello, On Tue, Mar 2, 2010 at 1:07 AM, Ludovic Claude ludovic.claud...@googlemail.com wrote: The changes were motivated by the fact that jscv is unreliable (see #561559) and is hard to use when you need to setup Tomcat with ports 1024. Upstream maintains the catalina.sh script and recommends its use. We were kindly assisted by a Tomcat expert (Jason Brittain from MuleSoft) in this transition. With this script, it is now possible to use authbind easily if the ports are under 1024. Ok, using authbind might be an improvement but I'm not sure about giving up on jsvc (which is also developed by Apache in tomcat project). Can you give me more details about your setup. It looks like an upgrade, so what other packages or webapps have you installed? Can you provide the Tomcat logs in /var/log/tomcat6. I don't have anything configured on this host, it's just a plain default installation and configuration of tomcat6 package. After the upgrade I've seen there are problems and I thought that the upgrade has done something wrong, so I've purged all tomcat packages. The current setup is a fresh install which fails to start! Thanks PS: how can I receive any responses on this bug without CC:me ? -- r...@frost:~# pgrep -fl java r...@frost:~# pgrep -fl tomcat r...@frost:~# r...@frost:~# r...@frost:~# /etc/init.d/tomcat6 status Tomcat servlet engine is not running.. r...@frost:~# r...@frost:~# r...@frost:~# ls -l /var/log/tomcat6/ total 20 -rw-r--r-- 1 tomcat6 tomcat6 2221 Mar 1 09:49 catalina.2010-03-01.log -rw-r--r-- 1 tomcat6 tomcat6 2225 Mar 2 08:39 catalina.2010-03-02.log -rw-r--r-- 1 tomcat6 tomcat6 2225 Mar 3 09:04 catalina.2010-03-03.log -rw-r--r-- 1 tomcat6 root6671 Mar 3 09:04 catalina.out -rw-r--r-- 1 tomcat6 tomcat60 Mar 1 09:49 localhost.2010-03-01.log -rw-r--r-- 1 tomcat6 tomcat60 Mar 2 08:39 localhost.2010-03-02.log -rw-r--r-- 1 tomcat6 tomcat60 Mar 3 09:04 localhost.2010-03-03.log r...@frost:~# cat /var/log/tomcat6/catalina.2010-03-03.log Mar 3, 2010 9:04:13 AM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/lib/jvm/java-6-openjdk/jre/lib/i386/client:/usr/lib/jvm/java-6-openjdk/jre/lib/i386:/usr/lib/jvm/java-6-openjdk/jre/../lib/i386:/usr/java/packages/lib/i386:/usr/lib/jni:/lib:/usr/lib Mar 3, 2010 9:04:13 AM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 Mar 3, 2010 9:04:13 AM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 1116 ms Mar 3, 2010 9:04:14 AM org.apache.catalina.core.StandardService start INFO: Starting service Catalina Mar 3, 2010 9:04:14 AM org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/6.0.24 Mar 3, 2010 9:04:14 AM org.apache.catalina.startup.HostConfig deployDescriptor INFO: Deploying configuration descriptor ROOT.xml Mar 3, 2010 9:04:14 AM org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8080 Mar 3, 2010 9:04:14 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 612 ms Mar 3, 2010 9:04:14 AM org.apache.catalina.core.StandardServer await SEVERE: StandardServer.await: create[8005]: java.net.SocketException: Invalid argument at java.net.PlainSocketImpl.socketBind(Native Method) at java.net.AbstractPlainSocketImpl.bind(AbstractPlainSocketImpl.java:336) at java.net.ServerSocket.bind(ServerSocket.java:336) at java.net.ServerSocket.init(ServerSocket.java:202) at org.apache.catalina.core.StandardServer.await(StandardServer.java:373) at org.apache.catalina.startup.Catalina.await(Catalina.java:657) at org.apache.catalina.startup.Catalina.start(Catalina.java:617) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:616) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414) r...@frost:~# r...@frost:~# r...@frost:~# lsof -i :8080 r...@frost:~# r...@frost:~# lsof -i :8005 r...@frost:~# -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#572048: tomcat6: fails to start after upgrade to v6.0.24-2
Package: tomcat6 Version: 6.0.24-2 Severity: grave Justification: renders package unusable Hi, After todays upgrade to v6.0.24-2 due to migration to 'testing' the tomcat6 service doesn't start anymore. I've tried a fresh install and there is no difference. I see that 'jscv' is no longer used and 'authbind' is disabled by default, thus 'catalina.sh' upstream script is used instead. I believe this is a major regression since 'jsvc' is the only alternative for running a java-baser program as a service. The upstream 'catalina.sh' shell script doesn't make use of 'jsvc' because it is not available on all platforms, this script is meant to be portable on all Linux/ UNIX hosts. Another issue is that the execution of 'catalina.sh' should also be redirected to STDOUT/STDERR to avoid these informative lines: | Starting Tomcat servlet engine: tomcat6Using CATALINA_BASE: /var/lib/tomcat6 | Using CATALINA_HOME: /usr/share/tomcat6 | Using CATALINA_TMPDIR: /tmp/tomcat6-tmp | Using JRE_HOME:/usr/lib/jvm/java-6-openjdk | Using CLASSPATH: /usr/share/tomcat6/bin/bootstrap.jar | failed! | invoke-rc.d: initscript tomcat6, action start failed. Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-2-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages tomcat6 depends on: ii adduser 3.112 add and remove users and groups ii tomcat6-common6.0.24-2 Servlet and JSP engine -- common f Versions of packages tomcat6 recommends: ii authbind 1.2.0 Allows non-root programs to bind() Versions of packages tomcat6 suggests: pn tomcat6-admin none (no description available) pn tomcat6-docs none (no description available) pn tomcat6-examples none (no description available) pn tomcat6-user none (no description available) -- no debconf information frost:~# apt install tomcat6 Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: authbind libcommons-collections-java libcommons-dbcp-java libcommons-pool-java libecj-java libservlet2.5-java libtomcat6-java tomcat6-common Suggested packages: glassfish-javaee ecj ant libecj-java-gcj tomcat6-docs tomcat6-admin tomcat6-examples tomcat6-user The following NEW packages will be installed: authbind libcommons-collections-java libcommons-dbcp-java libcommons-pool-java libecj-java libservlet2.5-java libtomcat6-java tomcat6 tomcat6-common 0 upgraded, 9 newly installed, 0 to remove and 0 not upgraded. Need to get 1,814kB/5,102kB of archives. After this operation, 8,463kB of additional disk space will be used. Do you want to continue [Y/n]? Get:1 http://ftp.ro.debian.org sid/main libcommons-collections-java 2.1.1-9 [335kB] Get:2 http://ftp.ro.debian.org squeeze/main libcommons-pool-java 1.5.4-1 [89.8kB] Get:3 http://ftp.ro.debian.org squeeze/main libcommons-dbcp-java 1.3~svn828639-1 [155kB] Get:4 http://ftp.ro.debian.org sid/main libecj-java 3.5.1-1 [1,234kB] Fetched 1,814kB in 1s (1,212kB/s) Reading package fields... Done Reading package status... Done Retrieving bug reports... Done Parsing Found/Fixed information... Done Selecting previously deselected package authbind. (Reading database ... 159768 files and directories currently installed.) Unpacking authbind (from .../authbind_1.2.0_i386.deb) ... Selecting previously deselected package libcommons-collections-java. Unpacking libcommons-collections-java (from .../libcommons-collections-java_2.1.1-9_all.deb) ... Selecting previously deselected package libcommons-pool-java. Unpacking libcommons-pool-java (from .../libcommons-pool-java_1.5.4-1_all.deb) ... Selecting previously deselected package libcommons-dbcp-java. Unpacking libcommons-dbcp-java (from .../libcommons-dbcp-java_1.3~svn828639-1_all.deb) ... Selecting previously deselected package libecj-java. Unpacking libecj-java (from .../libecj-java_3.5.1-1_all.deb) ... Selecting previously deselected package libservlet2.5-java. Unpacking libservlet2.5-java (from .../libservlet2.5-java_6.0.24-2_all.deb) ... Selecting previously deselected package libtomcat6-java. Unpacking libtomcat6-java (from .../libtomcat6-java_6.0.24-2_all.deb) ... Selecting previously deselected package tomcat6-common. Unpacking tomcat6-common (from .../tomcat6-common_6.0.24-2_all.deb) ... Selecting previously deselected package tomcat6. Unpacking tomcat6 (from .../tomcat6_6.0.24-2_all.deb) ... Processing triggers for man-db ... Setting up authbind (1.2.0) ... Setting up libcommons-collections-java (2.1.1-9) ... Setting up libcommons-pool-java (1.5.4-1) ... Setting up libcommons-dbcp-java (1.3~svn828639-1) ... Setting up libecj-java
Bug#569932: devicekit-disks: completely unusable due to devkit-disks-daemon segfault
Package: devicekit-disks Version: 009-2 Severity: grave Justification: renders package unusable Hi, As reported in the first message, it segfaults at startup: | Feb 15 11:29:01 frost kernel: [ 7524.054613] devkit-disks-da[20771]: | segfault at c ip 080660da sp bfb563b0 error 4 in devkit-disks-daemon[8048000+28000] Only that the re-login is not even a workarround because the second login does not even attempt to start devkit-disks-daemon as it is already started. I've checked this by killing the process and re-login and still the same segfault. This problem makes devkit-disks-daemon and all depending pieces from Gnome to not work (for example 'brasero'). I'm using k3b which still uses 'hal', but that's only for burning CD/DVDs. I cannot open any disc to see its content, nor can I umount any disc, not the icon status changes if I replace the current disc in the drive. The icon remains with the status of the first disc inserted (which for me is Blank DVD+R disc). Thanks -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-2-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages devicekit-disks depends on: ii libatasmart4 0.17-1 ATA S.M.A.R.T. reading and parsing ii libc6 2.10.2-2 GNU C Library: Shared libraries ii libdbus-1-3 1.2.20-2 simple interprocess messaging syst ii libdbus-glib-1-2 0.84-1 simple interprocess messaging syst ii libglib2.0-0 2.22.4-1 The GLib library of C routines ii libgudev-1.0-0150-2 GObject-based wrapper library for ii libparted1.8-12 1.8.8.git.2009.07.19-5 The GNU Parted disk partitioning s ii libpolkit-backend 0.96-1 PolicyKit backend API ii libpolkit-gobject 0.96-1 PolicyKit Authorization API ii libsgutils2-2 1.28-2 utilities for working with generic ii libudev0 150-2 libudev shared library ii udev 150-2 /dev/ and hotplug management daemo Versions of packages devicekit-disks recommends: ii dosfstools 3.0.7-1 utilities for making and checking ii hdparm 9.27-1 tune hard disk parameters for high ii mtools 4.0.10-1 Tools for manipulating MSDOS files ii ntfs-3g 1:2009.4.4-1 read-write NTFS driver for FUSE ii ntfsprogs 2.0.0-1+b1 tools for doing neat things in NTF ii policykit-1 0.96-1 framework for managing administrat Versions of packages devicekit-disks suggests: ii cryptsetup 2:1.1.0~rc2-1 configures encrypted block devices pn mdadm none(no description available) ii reiserfsprogs 1:3.6.21-1User-level tools for ReiserFS file pn xfsprogs none(no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100215094402.21129.95347.report...@frost.museglobal.ro
Bug#561477: [security] must not RE-add /etc/apache2/conf.d/cacti.conf link on upgrade
severity 561477 wishlist retitle 561477 please improve the debconf question about web server configuration thanks On Thu, Jan 7, 2010 at 11:17 AM, Patrick Schoenfeld schoenf...@debian.org wrote: On Wed, Jan 06, 2010 at 05:44:28PM +0200, Teodor MICU wrote: Ok, now I see that this is a way of disabling that symlink. Still, I would like to have the '/etc/cacti/apache.conf' file for reference to update my custom config which simply restricts the access to Intranet. which should be totally unrelated. Usually the file /etc/cacti/apache.conf should be installed together with the package while the symlink is created because you asked it, to. So sorry for the noise, except that I still not understand why people answer a priority high question with Configure my webserver: apache2 just for removing the symlink, it results into after, that. The debconf question is Which kind of web server should be used by cacti? so I answered apache2. Maybe this question should be updated to better describe its meaning? Well, it also says Select 'None' if you would like to configure your webserver by hand. but I agree that the wording of the question could be more clear. I'm proposing the following clarification. You can modify it as you consider the best since I'm not a native English speaker. Which kind of web server should be used by cacti? Select None if you would like to configure your webserver by hand. replace with Important: the default cacti configuration allows public access from Internet. You can see the default configuration file that can be used for apache/apache2 in /etc/cacti/apache.conf. On which web server should cacti be enabled by default? Select None if you would like to configure your web server by hand. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#561477: [security] must not RE-add /etc/apache2/conf.d/cacti.conf link on upgrade
[please don't use -quiet as I didn't received the responses though I want to contribute were I can] 2010/1/4 Patrick Schoenfeld schoenf...@debian.org: I've noticed in the past that cacti RE-adds the symbolic link conf.d/cacti.conf on every upgrade even if the source file was *manually* removed by the sysadmin. This is done to restrict the access to 'cacti' on each virtual web site (the default behaviour in Debian). * cacti/webserver: Apache2 The question is: Why did you ask to do this in the first place? (according to your debconf settings) Ok, now I see that this is a way of disabling that symlink. Still, I would like to have the '/etc/cacti/apache.conf' file for reference to update my custom config which simply restricts the access to Intranet. So sorry for the noise, except that I still not understand why people answer a priority high question with Configure my webserver: apache2 just for removing the symlink, it results into after, that. The debconf question is Which kind of web server should be used by cacti? so I answered apache2. Maybe this question should be updated to better describe its meaning? Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#561477: [security] must not RE-add /etc/apache2/conf.d/cacti.conf link on upgrade
Package: cacti Version: 0.8.7e-1.1 Severity: grave Tags: security Justification: user security hole I've noticed in the past that cacti RE-adds the symbolic link conf.d/cacti.conf on every upgrade even if the source file was *manually* removed by the sysadmin. This is done to restrict the access to 'cacti' on each virtual web site (the default behaviour in Debian). The first problem is that it creates access to restricted data (for those that kept the /etc/cacti/apache.conf configuration file). The second problem is that 'apache2' fails to start at boot from the same reason if fails to reload on cacti postinstall: | Not replacing deleted config file /etc/cacti/apache.conf | apache2: Syntax error on line 278 of /etc/apache2/apache2.conf: Could not | open configuration file /etc/apache2/conf.d/cacti.conf: No such file or | directory | failed! | invoke-rc.d: initscript apache2, action reload failed. As it can be seen postinstall already has a check for the existence of the config file /etc/cacti/apache.conf. Please add the same check for creating the symlink. Thanks -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (990, 'stable'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages cacti depends on: ii apache22.2.9-10+lenny6 Apache HTTP Server metapackage ii apache2-mpm-prefor 2.2.9-10+lenny6 Apache HTTP Server - traditional n ii dbconfig-common1.8.39common framework for packaging dat ii debconf [debconf-2 1.5.24Debian configuration management sy ii libapache2-mod-php 5.2.6.dfsg.1-1+lenny4 server-side, HTML-embedded scripti ii libphp-adodb 5.05-1The ADOdb database abstraction lay ii mysql-client-5.0 [ 5.0.51a-24+lenny2 MySQL database client binaries ii php5 5.2.6.dfsg.1-1+lenny4 server-side, HTML-embedded scripti ii php5-cli 5.2.6.dfsg.1-1+lenny4 command-line interpreter for the p ii php5-mysql 5.2.6.dfsg.1-1+lenny4 MySQL module for php5 ii php5-snmp 5.2.6.dfsg.1-1+lenny4 SNMP module for php5 ii rrdtool1.3.1-4 Time-series data storage and displ ii snmp 5.4.1~dfsg-12 SNMP (Simple Network Management Pr ii ucf3.0016Update Configuration File: preserv Versions of packages cacti recommends: ii iputils-ping 3:20071127-1 Tools to test the reachability of ii logrotate 3.7.1-5 Log rotation utility ii mysql-server 5.0.51a-24+lenny2 MySQL database server (metapackage ii mysql-server-5.0 [mysq 5.0.51a-24+lenny2 MySQL database server binaries Versions of packages cacti suggests: pn php5-ldap none (no description available) -- debconf information: cacti/db/app-user: cacti cacti/mysql/admin-user: root cacti/upgrade-backup: true cacti/install-error: abort * cacti/webserver: Apache2 cacti/internal/reconfiguring: false cacti/mysql/method: unix socket cacti/remote/host: cacti/upgrade-error: abort cacti/dbconfig-upgrade: true cacti/internal/skip-preseed: false cacti/remote/newhost: cacti/purge: false cacti/passwords-do-not-match: cacti/dbconfig-remove: * cacti/dbconfig-install: true cacti/missing-db-package-error: abort cacti/database-type: mysql cacti/remove-error: abort cacti/db/dbname: cacti cacti/remote/port: cacti/dbconfig-reinstall: false -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#561477: [Secure-testing-team] Bug#561477: [security] must not RE-add /etc/apache2/conf.d/cacti.conf link on upgrade
On Thu, Dec 17, 2009 at 5:51 PM, Michael Gilbert michael.s.gilb...@gmail.com wrote: On Thu, 17 Dec 2009 16:13:36 +0200, Teodor wrote: As it can be seen postinstall already has a check for the existence of the config file /etc/cacti/apache.conf. Please add the same check for creating the symlink. this may very well appear to be an issue, but i don't think removing conf files is a good way of trying to increase security. it is certainly not the debian way, and i think all bets are off when it comes to what packages do when their files have gone missing. I think this is covered by Debian policy, at least for init.d scripts which are also considered configuration files. it is much more optimal to manually edit the conf files to achieve whatever security level you desire. as an added bonus, when you upgrade the package, you will get the option to keep your modified conf files. Yes, I usually do the same but Cacti was the exception due to the apache2 symlink which I have forgotten at one cacti upgrade and the cacti graphs were publicly visible for several weeks until I noticed. I still believe that a check should be added for the symlink. If it was removed, don't RE-add it, it the source conf file /etc/cacti/apache.conf doesn't exist remove the broken symlink. Thanks -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#556942: CVE-2009-3555: SSL/TLS renegotiation vulnerability
Package: libapache-mod-ssl Severity: grave Tags: security Justification: user security hole This is CVE-2009-3555 and is related to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555829 I think there's no upstream fix for modssl atm, nevertheless this should be tracked somewhere. Perhaps libapache-mod-ssl should be listed at http://security-tracker.debian.org/tracker/CVE-2009-3555 as well. -- System Information: Debian Release: 4.0 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: i386 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.30.5-grsec Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#553333: [Pkg-clamav-devel] Bug#553333: clamav-milter: inet milter socket configuration changes the owner of /root to clamav
Hi,
On Fri, Oct 30, 2009 at 10:12 PM, Stephen Gran sg...@debian.org wrote:
Hi there,
I understand how:
@@ -279,5 +279,5 @@ fi
make_dir $DataBaseDirectory
-if [ ${SOCKET_PATH#inet} = ${SOCKET_PATH} ]; then
+if [ ${SOCKET_TYPE} = local ]; then
make_dir $(dirname $SOCKET_PATH)
chown $User $(dirname $SOCKET_PATH)
could be a problem (maybe - if the variable $SOCKET_PATH includes the
string 'inet' but somehow the variable $SOCKET_PATH remains unset), but
Agree, this is the only mandatory part for fixing the reported
problem. Maybe a better test case is this:
${SOCKET_TYPE} != inet
if the variable ${SOCKET_TYPE} could remain empty for local/unix sockets.
I don't see how:
@@ -172,5 +172,5 @@ make_dir()
[ -n $User ] || User=clamav
mkdir -p -m 0755 $DIR
- chown $User:$User $DIR
+ chown $User $DIR
}
Cause any problems or indeed makes any difference?
I've just mentioned this because the assumption to have the same group
name as the user name is wrong. Is someone decides to use another user
name than 'clamav' it could have a different group name. Also, this is
the only part where $Group is mentioned but not for sure a variable in
CLAMAVCONF otherwise it should have been initialized just like $User.
Thanks
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#553333: clamav-milter: inet milter socket configuration changes the owner of /root to clamav
Package: clamav-milter
Version: 0.95.2+dfsg-1~volatile1
Severity: serious
Tags: patch
Because of some communication problems between postfix and
clamav-milter local socket, I've choosed to configure clamav-milter
with a network socket:
MilterSocket = inet:7...@127.0.0.1
The problem is that every execution of the init.d script will change
the owner of /root directory to 'clamav'. This patch fixes the
problem:
COBRANEW:~# diff -pU2
/etc/init.d/clamav-milter_0.95.2+dfsg-1~volatile1
/etc/init.d/clamav-milter
--- /etc/init.d/clamav-milter_0.95.2+dfsg-1~volatile1 2009-07-11
21:50:02.0 +0300
+++ /etc/init.d/clamav-milter 2009-10-30 12:45:20.0 +0200
@@ -172,5 +172,5 @@ make_dir()
[ -n $User ] || User=clamav
mkdir -p -m 0755 $DIR
- chown $User:$User $DIR
+ chown $User $DIR
}
@@ -279,5 +279,5 @@ fi
make_dir $DataBaseDirectory
-if [ ${SOCKET_PATH#inet} = ${SOCKET_PATH} ]; then
+if [ ${SOCKET_TYPE} = local ]; then
make_dir $(dirname $SOCKET_PATH)
chown $User $(dirname $SOCKET_PATH)
Please include it in the next upload (probably for the new upstream
release 0.95.3).
Thanks
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Config file: clamd.conf
---
LogFile = /var/log/clamav/clamav.log
LogFileUnlock disabled
LogFileMaxSize disabled
LogTime = yes
LogClean disabled
LogSyslog = yes
LogFacility = LOG_MAIL
LogVerbose disabled
PidFile = /var/run/clamav/clamd.pid
TemporaryDirectory disabled
DatabaseDirectory = /var/lib/clamav
LocalSocket = /var/run/clamav/clamd.ctl
FixStaleSocket = yes
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = 15
StreamMaxLength disabled
StreamMinPort = 1024
StreamMaxPort = 2048
MaxThreads = 12
ReadTimeout = 180
CommandReadTimeout = 5
SendBufTimeout = 200
MaxQueue = 100
IdleTimeout = 30
ExcludePath disabled
MaxDirectoryRecursion = 20
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
SelfCheck = 3600
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = clamav
AllowSupplementaryGroups = yes
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = yes
ScanPE = yes
ScanELF = yes
DetectBrokenExecutables disabled
ScanMail = yes
MailFollowURLs disabled
ScanPartialMessages disabled
PhishingSignatures = yes
PhishingScanURLs = yes
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = 3
StructuredMinSSNCount = 3
StructuredSSNFormatNormal = yes
StructuredSSNFormatStripped disabled
ScanHTML = yes
ScanOLE2 = yes
ScanPDF = yes
ScanArchive = yes
ArchiveBlockEncrypted disabled
MaxScanSize = 104857600
MaxFileSize = 26214400
MaxRecursion = 16
MaxFiles = 1
ClamukoScanOnAccess disabled
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoMaxFileSize = 5242880
DevACOnly disabled
DevACDepth disabled
Config file: freshclam.conf
---
LogFileMaxSize disabled
LogTime disabled
LogSyslog disabled
LogFacility = LOG_LOCAL6
LogVerbose disabled
PidFile = /var/run/clamav/freshclam.pid
DatabaseDirectory = /var/lib/clamav/
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = /var/log/clamav/freshclam.log
DatabaseOwner = clamav
Checks = 24
DNSDatabaseInfo = current.cvd.clamav.net
DatabaseMirror = db.local.clamav.net, database.clamav.net
MaxAttempts = 5
ScriptedUpdates = yes
CompressLocalDatabase disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = /etc/clamav/clamd.conf
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = 30
ReceiveTimeout = 30
SubmitDetectionStats disabled
DetectionStatsCountry disabled
SafeBrowsing disabled
Config file: clamav-milter.conf
---
LogFile = /var/log/clamav/milter.log
LogFileUnlock disabled
LogFileMaxSize disabled
LogTime = yes
LogSyslog = yes
LogFacility = LOG_MAIL
LogVerbose = yes
PidFile = /var/run/clamav/clamav-milter.pid
TemporaryDirectory = /tmp
FixStaleSocket = yes
MaxThreads = 10
ReadTimeout = 120
Foreground disabled
User = clamav
AllowSupplementaryGroups = yes
MaxFileSize disabled
ClamdSocket = unix:/var/run/clamav/clamd.ctl
MilterSocket = inet:7...@127.0.0.1
LocalNet = local
OnClean = Accept
OnInfected = Reject
OnFail = Defer
RejectMsg disabled
AddHeader = Replace
Chroot disabled
Whitelist disabled
SkipAuthenticated disabled
LogInfected = Full
Software settings
-
Version: 0.95.2
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
Database directory: /var/lib/clamav/
main.cvd: version 51, sigs: 545035, built on Thu May 14 17:28:45 2009
daily.cld: version 9964, sigs: 96802, built on Fri Oct 30
Bug#505065: squid: a previous bad configuration causes start/restart to fail
Package: squid Version: 2.7.STABLE3-1 Followup-For: Bug #505065 I've encountered this problem on both 'etch' and current 'lenny' versions. This is one reproducable scenario: squid was running just fine and I've modified this following line by adding 'tproxy'. http_port 3128 transparent With this change, the squid service cannot be restarted or started: Restarting Squid HTTP proxy: squidFATAL: Bungled squid.conf line 1113: http_port 3128 transparent tproxy Squid Cache (Version 2.7.STABLE3): Terminated abnormally. failed! vision:~# lsof -i tcp:3128; netstat -atnpe | grep 3128; pgrep -fl sq 987 /usr/sbin/squid -D -YC So, the service was stopped but the process just hangs and I had to kill it. But it will not start/restart unless I remove these files: vision:~# rm -fv /var/spool/squid/swap.state* removed `/var/spool/squid/swap.state' removed `/var/spool/squid/swap.state.last-clean' (or maybe the first one is enough) In conclusion, this should be done on restart to fix unclean restarts. At least until a proper fix is found. Thanks -- System Information: Debian Release: 5.0 APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages squid depends on: ii adduser 3.110 add and remove users and groups ii debconf [debconf-2.0] 1.5.24 Debian configuration management sy ii libc6 2.7-16 GNU C Library: Shared libraries ii libcomerr21.41.3-1 common error description library ii libdb4.6 4.6.21-11 Berkeley v4.6 Database Libraries [ ii libkrb53 1.6.dfsg.4~beta1-4 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.11-1 OpenLDAP libraries ii libpam0g 1.0.1-4+b1 Pluggable Authentication Modules l ii logrotate 3.7.1-5Log rotation utility ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip ii netbase 4.34 Basic TCP/IP networking system ii squid-common 2.7.STABLE3-1 Internet object cache (WWW proxy c squid recommends no packages. Versions of packages squid suggests: pn logcheck-database none (no description available) pn resolvconfnone (no description available) pn smbclient none (no description available) pn squid-cgi none (no description available) pn squidclient none (no description available) pn winbind none (no description available) -- debconf information: squid/fix_cachedir_perms: false squid/fix_lines: true -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
