Bug#984014: clementine: ftbfs with GCC-11

[Thomas Pierson]

Hi,

On 1/14/22 22:16, Florian Ernst wrote:

FWIW, I can confirm that 1.4.0~rc1+git347-gfc4cb6fc7+dfsg-1 still FTBFS
in the manner originally reported in this bug, but with the attached
debdiff implementing the fix from upstream I was able to build it again.


I just uploaded a new revision of clementine which fix this bug with 
your patch Florian. Thank you for your help and sorry for the big delay.


Cheers,
Thomas

Bug#972175: closed by Debian FTP Masters (reply to Thomas Pierson ) (Bug#972175: fixed in clementine 1.4.0~rc1+git346-g4e3e9c8d1+dfsg-1)

[Thomas Pierson]

Hi Dmitry,

I just uploaded a new version of clementine disabling projectm for now 
because I have also others issues related to its integration. I need a 
bit of time to work on this.


So for now the new version of clementine I uploaded include a new 
upstream version (small, 1 bugfix), a change of the repacking method 
and no depend on projectm so it should be ok to build on all arch.


And I will keep an eye on it for the migration to testing.
--
Thomas

Bug#900073: clementine: fails to play anything: streaming stopped, reason not linked (-1)

[Thomas Pierson]

severity 900073 important
tags 900073 + moreinfo unreproducible
thanks

Hi Sebastian,

I can't reproduce your issue. I also try to reproduce it by installing
clementine on a fresh sid system and I can play mp3 and flac files.

Can you try to make a backup and remove all possible config directories
located here `~/.config/Clementine{-new/-qt5}`, do an upgrade of your
system and then retry after that?

Also could you give me more info about your system and your desktop
environment as I can try to reproduce your issue.

Thanks,

Thomas



On 25/05/2018 19:07, Sebastian Ramacher wrote:
> Package: clementine
> Version: 1.3.1+git542-gf00d9727c+dfsg-1
> Severity: grave
> 
> Since the last update clementine [1] refuses to play any files. clementine 
> was able
> to play these files in previously. I see the following error messages:
> 
> 18:50:13.677 ERROR GstEnginePipeline:65212 "gstbaseparse.c(3611): 
> gst_base_parse_loop (): 
> /GstPipeline:pipeline/GstURIDecodeBin:uridecodebin-198/GstDecodeBin:decodebin13/GstFlacParse:flacparse13:\nstreaming
>  stopped, reason not-linked (-1)"
> 
> (for flac files)
> 
> 18:58:48.333 ERROR GstEnginePipeline:6521 "gstbaseparse.c(3611): 
> gst_base_parse_loop (): 
> /GstPipeline:pipeline/GstURIDecodeBin:uridecodebin-0/GstDecodeBin:decodebin1/GstMpegAudioParse:mpegaudioparse1:\nstreaming
>  stopped, reason not-linked (-1)"
> 
> (for mp3 files)
> 
> Please let me know if you need any more information.
> 
> Cheers
> 
> [1] … not necessarily since the last clementine update. This could also be
> releated to gstreamer 1.14.1.
> 
> -- System Information:
> Debian Release: buster/sid
>   APT prefers unstable-debug
>   APT policy: (650, 'unstable-debug'), (650, 'unstable'), (601, 'testing'), 
> (600, 'experimental-debug'), (600, 'experimental'), (500, 'testing-debug')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores)
> Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
> LANGUAGE=en_US:en (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> 
> Versions of packages clementine depends on:
> ii  gstreamer1.0-plugins-base   1.14.1-1
> ii  gstreamer1.0-plugins-good   1.14.1-1
> ii  gstreamer1.0-plugins-ugly   1.14.1-1
> ii  libc6   2.27-3
> ii  libcdio17   1.0.0-2+b1
> ii  libchromaprint1 1.4.3-2
> ii  libcrypto++65.6.4-8
> ii  libfftw3-double33.3.7-1+b1
> ii  libgcc1 1:8.1.0-3
> ii  libgdk-pixbuf2.0-0  2.36.11-2
> ii  libglib2.0-02.56.1-2
> ii  libgpod40.8.3-11
> ii  libgstreamer-plugins-base1.0-0  1.14.1-1
> ii  libgstreamer1.0-0   1.14.1-1
> ii  libimobiledevice6   1.2.1~git20180302.3a37a4e-1
> ii  libmtp9 1.1.13-1
> ii  libmygpo-qt5-1  1.1.0-2
> ii  libplist3   2.0.0-3
> ii  libprojectm2v5  2.1.0+dfsg-4+b3
> ii  libprotobuf10   3.0.0-9.1
> ii  libpulse0   11.1-5
> ii  libqt4-sql-sqlite   4:4.8.7+dfsg-17
> ii  libqt5concurrent5   5.10.1+dfsg-7
> ii  libqt5core5a5.10.1+dfsg-7
> ii  libqt5dbus5 5.10.1+dfsg-7
> ii  libqt5gui5  5.10.1+dfsg-7
> ii  libqt5network5  5.10.1+dfsg-7
> ii  libqt5opengl5   5.10.1+dfsg-7
> ii  libqt5sql5  5.10.1+dfsg-7
> ii  libqt5widgets5  5.10.1+dfsg-7
> ii  libqt5x11extras55.10.1-2
> ii  libqt5xml5  5.10.1+dfsg-7
> ii  libsqlite3-03.23.1-1
> ii  libstdc++6  8.1.0-3
> ii  libtag1v5   1.11.1+dfsg.1-0.2+b1
> ii  libx11-62:1.6.5-1
> ii  projectm-data   2.1.0+dfsg-4
> ii  zlib1g  1:1.2.11.dfsg-1
> 
> Versions of packages clementine recommends:
> ii  gstreamer1.0-pulseaudio  1.14.1-1
> 
> Versions of packages clementine suggests:
> ii  gstreamer1.0-plugins-bad  1.14.1-1
> 
> -- no debconf information
> 

Bug#874295: Not a bug

[Thomas Pierson]

Hi Ben,

Le 30 novembre 2017 07:47:41 GMT+01:00, Ben Finney  a écrit 
:
>That is still a problem, IMO. It would be best if the program did not
>do
>that, and instead prompted the user to install the non-free package
>providing that plug-in.

Actually the program prompt a dialog asking the user if he want to install the 
extra plugin.
But yes maybe it should be more explicit about the non-free nature of the 
plugin. I will open a new bug about that.

Regards,
Thomas

Bug#874295: Not a bug

[Thomas Pierson]

Hi Jonas and folks,

Clementine does not require or depend on a external software to run
properly. So for me the policy 2.2.1 is respected.

It's only if a user want to connect to a particular external service
that a plugin file is downloaded and used.
But it's the same case for many software like web browser which download
and run proprietary javascripts without any warning.

So unless someone point me a clear justification I will close this bug
as invalid for now.

Regards,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#861987: a patch fixing #861987

[Thomas Pierson]

tags 861987 patch
thanks

Hi,

I think this patch fix this issue by using a random and unique temporary
directory directly at the root of the `tmp/` directory.

I get something like this `/tmp/x-x-x--/…` instead
of `/tmp/flightcrew/…`.

Regards,
Thomas Pierson
diff -Nru flightcrew-0.7.2+dfsg/debian/changelog flightcrew-0.7.2+dfsg/debian/changelog
--- flightcrew-0.7.2+dfsg/debian/changelog	2016-11-24 12:36:34.0 +0100
+++ flightcrew-0.7.2+dfsg/debian/changelog	2017-05-14 11:51:40.0 +0200
@@ -1,3 +1,11 @@
+flightcrew (0.7.2+dfsg-8.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add a patch to fix an insecure use of temporary files in /tmp/.
+(closes: #861987).
+
+ -- Thomas Pierson <cont...@thomaspierson.fr>  Sun, 14 May 2017 11:51:40 +0200
+
 flightcrew (0.7.2+dfsg-8) unstable; urgency=medium
 
   * Bump debhelper compat level to 10.
diff -Nru flightcrew-0.7.2+dfsg/debian/patches/series flightcrew-0.7.2+dfsg/debian/patches/series
--- flightcrew-0.7.2+dfsg/debian/patches/series	2016-11-24 12:05:07.0 +0100
+++ flightcrew-0.7.2+dfsg/debian/patches/series	2017-05-14 11:51:40.0 +0200
@@ -2,3 +2,4 @@
 disable_filesystem3_overload
 modify_cmake_for_debian
 reproducible-build
+use_random_unique_tmp_path
diff -Nru flightcrew-0.7.2+dfsg/debian/patches/use_random_unique_tmp_path flightcrew-0.7.2+dfsg/debian/patches/use_random_unique_tmp_path
--- flightcrew-0.7.2+dfsg/debian/patches/use_random_unique_tmp_path	1970-01-01 01:00:00.0 +0100
+++ flightcrew-0.7.2+dfsg/debian/patches/use_random_unique_tmp_path	2017-05-14 11:51:40.0 +0200
@@ -0,0 +1,20 @@
+Description: use a random and unique temporary folder
+Author: Thomas Pierson <cont...@thomaspierson.fr>
+Forwarded: no
+Last-Update: 2017-05-14
+
+--- a/src/FlightCrew/Misc/TempFolder.cpp
 b/src/FlightCrew/Misc/TempFolder.cpp
+@@ -63,10 +63,10 @@
+ // that on Win because it points to the drive root there
+ // instead of the system temp folder
+ // http://www.delorie.com/gnu/docs/glibc/libc_295.html
+-fs::path main_temp_folder = fs::path( P_tmpdir );
++fs::path main_temp_folder = fs::temp_directory_path();
+ #endif
+ 
+-return main_temp_folder / fs::path( FC_TEMP_FOLDER ) / fs::unique_path( UNIQUE_PATH_MODEL );
++return main_temp_folder / fs::unique_path( UNIQUE_PATH_MODEL );
+ }
+ 
+ 


signature.asc
Description: OpenPGP digital signature

Bug#841364: clementine: no sound at all, "GStreamer encountered a general stream error."

[Thomas Pierson]

severity 841364 important
retitle 841364 clementine: unable to play anything in special
configuration cases, "GStreamer encountered a general stream error"
thanks

Hi,

@Adam, I tried many migrations and I still could not reproduce your bug.
I still think that this is caused by a special use case of forcing a
sink device in the config file or something like this.
So before I get more information about your configuration, I'm lowering
the severity of this bug and retitle it because it only affect a
particular configuration case.

@Dio, I confirm with your screenshot that your issue sound like a
missing Gstreamer plugin story and it's not related with this issue.
Please open a new bug with all informations needed: what file are you
trying to play, what is exactly the error message you got.

Thanks,

Thomas Pierson

Bug#841364: clementine: no sound at all, "GStreamer encountered a general stream error."

[Thomas Pierson]

Hi Dio,

On 21/10/2016 18:53, Dio Oktarianos Putra wrote:
> Yeah, my clementine has that problem too which clementine need to depend on 
> gstreamer-0.10-ffmpeg.
> 
> But unfortunately, it's only avaliable on debian wheezy 
> (https://packages.debian.org/wheezy/gstreamer0.10-ffmpeg) and if you're using 
> >= jessie, it's only can be solved by deb-multimedia repo and install 
> gstreamer-0.10-ffmpeg manually.

In Stretch/Sid there are no Gstreamer0.10 and there are no Gstreamer
ffmpeg codecs anymore. The equivalent package you are looking for is
probably gstreamer1.0-libav. But this is only a set of optional plugins,
not a depend.

In fact, maybe you have the same gstreamer error message but I think you
have a totally different issue. And you are using unofficial
repositories like www.deb-multimedia.org which are known to be very
buggy and to cause breakages with many official packages.

So, don't hesitate to open a new bug report but please retry first with
a clean system without any unofficial package.

Thanks,
Thomas Pierson

Bug#841364: unreproducible

[Thomas Pierson]

tags 841364 + moreinfo unreproducible
thanks

Hi Adam,

Thanks for your report. I could not reproduce your issue.

I think this is related to your other report #823301 about new alsa
routing limitation. And I suspect that only people which manually
changed their configuration files to achieve special audio output tweak
are affected.

Could you attach a copy of your config files before you purge it and the
new one re-generated by Clementine?

Thanks,

Thomas Pierson

Bug#834439: clementine: depend on gstreamer1.0-plugins-bad

[Thomas Pierson]

On 23/08/2016 22:33, Salvo Tomaselli wrote:
> I tried playing 2 files
> Ogg data, Vorbis audio, stereo, 44100 Hz, ~0 bps, created by:
> Xiphophorus libVorbis I (1.0 RC3)
> ISO Media, MP4 Base Media v1 [IS0 14496-12:2003]
> 
> And 1 BBC podcast. The podcast gives an endless stream on the terminal
> so I terminated clementine.
> 
> I use the normal ALSA without pulseaudio, mostly because of that bug
> that tries to make me deaf.
> 

Thanks for your tests and feedback.

I can see 2 problems in your logs:

1. a missing codec issue: "Missing decoder: MPEG-4 AAC"
2. a output sink issue: " error:
Jack server not found"

The first issue is maybe just due to the lack off mpeg-4 aac codec in
gstreamer-good and ugly plugins packages.
Could you try to play other files type like mp3, flac, wav normally
playable only with gst good and ugly plugins packages and show me the
result?
You can get test files here:
* https://github.com/ArtskydJ/test-audio/tree/master/audio

The second issue seems like clementine try to use the jackaudio server
output instead of alsa.
Could you try to install gstreamer1.0-alsa and eventually manually
select the alsa output in 'Tools -> Preferences -> Playback -> Output
device' in case of the auto-detection fail.

Thanks,

Thomas Pierson




signature.asc
Description: OpenPGP digital signature

Bug#834439: clementine: depend on gstreamer1.0-plugins-bad

[Thomas Pierson]

tag 834439 moreinfo
thanks

Hello Salvo,

I'm working on this issue.

For now, I'm doing some tests in a minimal sid environment but the
results are not clear enough and I need more info.

So, could you please run clementine using this command (without
gstreamer1.0-plugins-bad):
---8<---
GST_DEBUG=3 clementine --log-levels 3
--->8---
And send back the result.

Additionally can you make some tests using multiple file type like mp3,
ogg, wav, flac and tell me if you get the same error with all of them.
(ex: using these files
https://github.com/ArtskydJ/test-audio/tree/master/audio)

If you could tell me more about the audio stack (alsa?) and the
environment you are using it can be helpful too.

Thanks,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#777819: Partial fix for FTBFS error

[Thomas Pierson]

Hi Tim,

Le 30/06/2015 03:46, Potter, Tim (Cloud Services) a écrit :
 Hi there.  I’ve made a partial fix for building clementine under GCC5.  The 
 patch is attached and it’s a simple rearrangement of operands to prevent an 
 error/bug due to operator precedence.  The fix has already made it into the 
 master branch of upstream.

Thanks for your help. I work on this issue and I plan to make an upload
including your fix soon.

 This doesn’t completely fix the FTBFS though.  I had to rebuild libprotobuf 
 using GCC5 to allow linking using the new C++ ABI but that should fix itself 
 over time.  The latest problem is a link problem against 
 TagLib::String::String.
 This doesn’t look like an ABI problem and I don’t have a fix yet, but thought 
 I would post my work so far.

Your tagreader error seems related to protobuf too. I just rebuild
clementine with GCC-5 and protobuf rebuild with GCC-5 too and it seems
to works. But I have to install all the fresh protobuf packages and not
only libprotobuf9, maybe this is why you got this linking issue?

Regards,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#784671: gdm3 wouldn't start until caribou path changed

[Thomas Pierson]

Dear maintainer,

I could reproduce exactly the same issue and error logs on a fresh
Jessie install from the last release iso: `debian-8.0.0-amd64-CD-1.iso`.

I used a very standard installation process using almost all default
installer value and choosing the `gnome desktop environment` option.

Gdm3 starts correctly after applying jmullee's path correction in
`/usr/share/gdm/greeter/autostart/caribou-autostart.desktop`.

Best regards,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#726339: clementine: FTBFS against libimobildevice 1.1.5

[Thomas Pierson]

tags 726339 + pending
thanks

Hello Andreas,

Thanks for your help. Indeed upstream seems to drop support for iMobile 
devices in next release but keeps support for classic iPod using just 
libgpod.


I will upload a new revision of clementine package soon including the 
new release and fixing this build issue.


Regards,

Thomas Pierson


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#710706: closing 710706

[Thomas Pierson]

fixed 710706 1.1.1+dfsg-2
thanks

 Thanks, but for reference in that case a versioned close (ideally via
 -done) should have been used, to indicate which version the bug was
 fixed in; see http://www.debian.org/Bugs/Developer#closing

I am sorry, I forgot to specify the version number.

Regards,

Thomas Pierson


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#710706: closing 710706

[Thomas Pierson]

close 710706 
thanks

Hi,

A new revision of the package was uploaded in unstable and it fix this bug.

Regards,

Thomas Pierson


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#710706: clementine: FTBFS (lastfm/Track: No such file or directory)

[Thomas Pierson]

tags 710706 + pending
thanks

Hi,

This transition has been coordinate and the new revision of clementine
package is just ready for upload.

Best regards,

Thomas Pierson


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#695254: Not a version in Debian

[Thomas Pierson]

Hello phileom,

I could not reproduce this bug too.

 ii  libtag1c2a   1.8-dmo1

You seem to use an unofficial version 1.8 of taglib packages.

The clementine package in wheezy/sid is build with an official version
1.7.2 of taglib packages :

* http://packages.debian.org/source/wheezy/taglib

You should retry using clementine package with full clean depends.

I am closing this bug as invalid.

Regards,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#684552: clementine: does not start: error while loading shared libraries: libGLEW.so.1.5

[Thomas Pierson]

tags 684552 moreinfo unreproducible
thanks

Hello James,

Thanks for your report.

I could not reproduce this bug.
I just run clementine on a fresh wheezy install with no issues.
I also test on 2 others debian system : first running unstable and
second runing  an up to date wheezy.
On all of these systems libglew1.7 is installed.

Can you check if you have some special libraries or clementine versions
installed on your system (for example out of the debian repository)?
Do you have special graphic drivers installed on your system?

I will make more tests on other systems to try to reproduce your bug but
this is strange and maybe something was wrong with your system.

Best regards,

Thomas Pierson


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#680059: revelation: FPM exporter doesn't encrypt password files [CVE-2012-3818]

[Thomas Pierson]

tags 680059 patch
thanks


Hello Stefan,

I talk about this issue with Mikel Olasagasti an upstream developer and
he plan to fix it but he can't do it until the end of the month.

Meantime he advice me some quick fixes like simply disabling FPM
exporter or warn about is it an insecure format.

Finally I choose to totally disable it because I think there is a big
mistake in the generated xml which does not seem to respect the FPM
format specification.

So I done this by set 'importer', 'exporter' and 'encryption' var to
'False' in 'src/lib/datahandler/fpm.py' file.

It's a quick fix but it satisfy the security issue.

I attached a debdiff and a git-format patches.

Best regards,

Thomas Pierson
From 559383f2c566dff9a1ca0c1771b38256c9e2c84a Mon Sep 17 00:00:00 2001
From: Thomas Pierson cont...@thomaspierson.fr
Date: Thu, 9 Aug 2012 09:37:57 +0200
Subject: [PATCH] add a patch to fix bug #680059

---
 debian/changelog   |7 ++
 ...pm-exporter-doesnt-encrypt-password-files.patch |   24 
 debian/patches/series  |1 +
 3 files changed, 32 insertions(+)
 create mode 100644 debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch

diff --git a/debian/changelog b/debian/changelog
index 07d1d8e..4307ffb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+revelation (0.4.13-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+- Add a new patch to fix CVE-2012-3818 (Closes: #680059)
+
+ -- Thomas Pierson cont...@thomaspierson.fr  Fri, 20 Jul 2012 12:12:24 +0200
+
 revelation (0.4.13-1) unstable; urgency=low
 
   * New upstream release (Closes: #595702, #551754, #586646, #293720, #269842)
diff --git a/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch b/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
new file mode 100644
index 000..3dd0e4d
--- /dev/null
+++ b/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
@@ -0,0 +1,24 @@
+Description: Fix FPM exporter doesn't encrypt password files
+  FPM exporter does not seem to work correcty and this introduce a security issue.
+  .
+  Upstream plan to fix the FPM exporter soon but meantime it is better to disable it.
+Author: Thomas Pierson
+Forwarded: https://bitbucket.org/erikg/revelation/issue/78/fpm-exporter-doesnt-encrypt-password-files
+Bug-Debian: http://bugs.debian.org/680059
+
+---
+--- a/src/lib/datahandler/fpm.py
 b/src/lib/datahandler/fpm.py
+@@ -38,9 +38,9 @@
+ 	Data handler for Figaro's Password Manager data
+ 
+ 	name		= Figaro's Password Manager
+-	importer	= True
+-	exporter	= True
+-	encryption	= True
++	importer	= False
++	exporter	= False
++	encryption	= False
+ 
+ 
+ 	def __init__(self):
diff --git a/debian/patches/series b/debian/patches/series
index dc10e66..66e71e0 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
+fix-fpm-exporter-doesnt-encrypt-password-files.patch
 060_crash_at_save.dpatch
 #130_tooltip_deprecation.dpatch
 010-icons.patch
-- 
1.7.10.4

diff -Nru revelation-0.4.13/debian/changelog revelation-0.4.13/debian/changelog
--- revelation-0.4.13/debian/changelog  2012-06-08 11:31:25.0 +0200
+++ revelation-0.4.13/debian/changelog  2012-08-08 13:49:19.0 +0200
@@ -1,3 +1,10 @@
+revelation (0.4.13-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+- Add a new patch to fix CVE-2012-3818 (Closes: #680059)
+
+ -- Thomas Pierson cont...@thomaspierson.fr  Fri, 20 Jul 2012 12:12:24 +0200
+
 revelation (0.4.13-1) unstable; urgency=low
 
   * New upstream release (Closes: #595702, #551754, #586646, #293720, #269842)
diff -Nru 
revelation-0.4.13/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
 
revelation-0.4.13/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
--- 
revelation-0.4.13/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
   1970-01-01 01:00:00.0 +0100
+++ 
revelation-0.4.13/debian/patches/fix-fpm-exporter-doesnt-encrypt-password-files.patch
   2012-08-08 14:37:02.0 +0200
@@ -0,0 +1,24 @@
+Description: Fix FPM exporter doesn't encrypt password files
+  FPM exporter does not seem to work correcty and this introduce a security 
issue.
+  .
+  Upstream plan to fix the FPM exporter soon but meantime it is better to 
disable it.
+Author: Thomas Pierson
+Forwarded: 
https://bitbucket.org/erikg/revelation/issue/78/fpm-exporter-doesnt-encrypt-password-files
+Bug-Debian: http://bugs.debian.org/680059
+
+---
+--- a/src/lib/datahandler/fpm.py
 b/src/lib/datahandler/fpm.py
+@@ -38,9 +38,9 @@
+   Data handler for Figaro's Password Manager data
+ 
+   name= Figaro's Password Manager
+-  importer= True
+-  exporter= True
+-  encryption  = True
++  importer= False
++  exporter= False
++  encryption  = False
+ 
+ 
+   def __init__(self):
diff -Nru

Bug#680059: revelation: FPM exporter doesn't encrypt password files [CVE-2012-3818]

[Thomas Pierson]

forwarded 680059 
https://bitbucket.org/erikg/revelation/issue/78/fpm-exporter-doesnt-encrypt-password-files
thanks

Hello,

I just take a look on this bug and it does not seem to be fixed upstream.
So I create an issue on the upstream bug tracker.

p.s. : I am not the maintainer of this package.

Best regards,

Thomas Pierson


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#673556: clementine: crashes on startup

[Thomas Pierson]

merge 673556 660714
tags 673556 + pending upstream
thanks

Hello Yuwnarg,

This is the same issue as #660714 .

An upload is planed to fix it soon but I must wait the end of the
boost1.49 transition before that.

In the meantime, you can found the fix on the package repository. [1]

Best regards,

Thomas Pierson


[1]
http://thomaspierson.eu/gitweb/?p=pkg-clementine.git;a=blob_plain;f=debian/patches/fix_qtsql.patch;hb=HEAD



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#671661: libqxt: FTBFS with Qt 4.8

[Thomas PIERSON]

tags 671661 + pending
thanks


Hello Scott,

Thank you for reporting this issue.
The upload will be done very soon.

Best regards,

Thomas Pierson



signature.asc
Description: OpenPGP digital signature

Bug#633680: marked as done (skrooge: Crashing on save)

[Thomas PIERSON]

reopen 633680
found 633680 0.7.2.2-1
thanks

Hi Mark,

The skrooge package in Squeeze still have missing depend on
libqca2-plugin-ossl.
Please fix this issue for squeeze/stable users.

Regards,
Thomas PIERSON


On 09/10/2011 12:18, Debian Bug Tracking System wrote:
 Your message dated Sun, 09 Oct 2011 21:07:55 +1100
 with message-id 1318154875.17350.0.camel@acer
 and subject line Re: skrooge: Crashing on save - fixed
 has caused the Debian Bug report #633680,
 regarding skrooge: Crashing on save
 to be marked as done.
 
 This means that you claim that the problem has been dealt with.
 If this is not the case it is now your responsibility to reopen the
 Bug report if necessary, and/or fix the problem forthwith.
 
 (NB: If you are a system administrator and have no idea what this
 message is talking about, this may indicate a serious mail system
 misconfiguration somewhere. Please contact ow...@bugs.debian.org
 immediately.)
 
 



signature.asc
Description: OpenPGP digital signature

Bug#638341: initscripts: Boot fails: Permission denied (Read-only file system)

[Thomas PIERSON]

Hi,

I just upgrade initscripts package to the new version '2.88dsf-13.11' too.
I reboot my system and all seem to be OK. I checked the script you
talking about and it have correct permissions.

I try the same upgrade on an other testing system and it seem to be OK
too. So, I could not reproduce this bug and maybe inisctripts package is
not the source of your issue.
But I just done some tests and I am not the maintainer of this package.

Best regards,
Thomas PIERSON


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (900, 'testing'), (90, 'unstable'), (1, 'experimental'),
(1, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages initscripts depends on:
ii  coreutils   8.5-1
ii  debianutils 4.0.2
ii  libc6   2.13-18
ii  lsb-base3.2-28
ii  mount   2.19.1-5
ii  sysv-rc 2.88dsf-13.11
ii  sysvinit-utils  2.88dsf-13.11

Versions of packages initscripts recommends:
ii  e2fsprogs  1.42~WIP-2011-07-02-1
ii  psmisc 22.13-1

initscripts suggests no packages.

-- no debconf information



signature.asc
Description: OpenPGP digital signature

Bug#641777: libqxt: FTBFS: debian/libqxt-berkeley0/DEBIAN/symbols doesn't match completely debian/libqxt-berkeley0.symbols

[Thomas Pierson]

tag 641777 pending
thanks

Hi,

Yes, I currently working with symbol files and the last upload failed to
build on some arch. Thanks to the build logs I could apply patches and
the next upload should fix these issues.

Sorry for the inconvenience.

Regards,
Thomas PIERSON



signature.asc
Description: OpenPGP digital signature

Bug#633680: skrooge: Crashing on save

[Thomas PIERSON]

Package: skrooge
Version: 0.7.2.2-1
Tags: patch

Hi,

I solved this issue by install the missing dependency
'libqca2-plugin-ossl' .
I attached a debdiff patch to this mail.

In the meantime, this issue can be solved simply by install this missing
library :
apt-get install libqca2-plugin-ossl

Regards,
Thomas PIERSON

diff -Nru skrooge-0.7.2.2/debian/changelog skrooge-0.7.2.2/debian/changelog
--- skrooge-0.7.2.2/debian/changelog2011-08-24 22:31:24.0 +0200
+++ skrooge-0.7.2.2/debian/changelog2010-07-31 04:27:54.0 +0200
@@ -1,10 +1,3 @@
-skrooge (0.7.2.2-1.1) unstable; urgency=low
-
-  * Non-maintainer upload.
-  * Add missing libqca2-plugin-ossl dependency. (Closes: #633680)
-
- -- Thomas PIERSON web.pier...@gmail.com  Wed, 24 Aug 2011 22:26:27 +0200
-
 skrooge (0.7.2.2-1) unstable; urgency=low
 
   * New upstream release
diff -Nru skrooge-0.7.2.2/debian/control skrooge-0.7.2.2/debian/control
--- skrooge-0.7.2.2/debian/control  2011-08-24 22:34:00.0 +0200
+++ skrooge-0.7.2.2/debian/control  2010-07-25 07:29:26.0 +0200
@@ -14,7 +14,7 @@
 Package: skrooge
 Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends},
- libqt4-sql-sqlite, libqca2-plugin-ossl, skrooge-common (= ${source:Version})
+ libqt4-sql-sqlite, skrooge-common (= ${source:Version})
 Description: personal finance manager for KDE
  Skrooge allows you to manage your personal finances. It is intended to be used
  by individuals who want to keep track of their incomes, expenses and


signature.asc
Description: OpenPGP digital signature

Bug#573421: kdeprint: deletes some files when printing multiple files

[Thomas PIERSON]

Package: kdeprint
Version: 4:3.5.9.dfsg.1-6+lenny1
Severity: critical
Justification: causes serious data loss

Hi,

I can reproduce this bug by following the steps you have specified.
I suggest to set this bug to CONFIRMED.

Regards,
Thomas PIERSON


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'stable'), (90, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages kdeprint depends on:
ii  enscript   1.6.5.1-1 converts text to Postscript, HTML
ii  kdelibs4c2a4:3.5.10.dfsg.1-3 core libraries and binaries for al
ii  libc6  2.10.2-6  Embedded GNU C Library: Shared lib
ii  libgcc11:4.4.4-1 GCC support library
ii  libqt3-mt  3:3.3.8b-6Qt GUI Library (Threaded runtime v
ii  libstdc++6 4.4.4-1   The GNU Standard C++ Library v3
ii  poster 1:20050907-1  Create large posters out of PostSc
ii  psutils1.17-27   A collection of PostScript documen

Versions of packages kdeprint recommends:
ii  ghostscript [postscript 8.71~dfsg-4  The GPL Ghostscript PostScript/PDF
ii  kghostview [postscript- 4:3.5.9-3+lenny2 PostScript viewer for KDE
ii  okular [postscript-view 4:4.4.3-1document viewer for KDE 4

Versions of packages kdeprint suggests:
pn  efax | hylafax-client | m none (no description available)
pn  khelpcenter   none (no description available)
ii  smbclient 2:3.4.8~dfsg-1 command-line SMB/CIFS clients for

-- no debconf information


signature.asc
Description: This is a digitally signed message part.

Bug#555016: Is libgl1-mesa-dev installed?

[Thomas Pierson]

Hi,

Before build vlc, I did: apt-get build-dep vlc
Normally this command give my all library needed to build vlc?
I can't test if this library is installed for the moment but I will try
tomorow.

Thanx for your answer, I will answer your question as soon as possible.

Regards,

Thomas Pierson




2009/11/9 Matt Kraai kr...@ftbfs.org

 Hi,

 vlc builds in a fresh pbuilder chroot on my system.  vlc build-depends
 on libgl1-mesa-dev, which provides /usr/lib/libGL.so.  Is
 libgl1-mesa-dev installed on your system?

 --
 Matthttp://ftbfs.org/kraai