Re: Final polishing of the KDE 3.3 transition

2005-01-03 Thread Adeodato Simó
* Steve Langasek [Sun, 02 Jan 2005 20:23:11 -0800]:

 This bug is now closed.

  thanks.

 I agree that the impact of the KDE blockage is sufficient that we shouldn't
 be holding KDE out of testing for bugs that aren't specific to unstable.

  ack.

  (but: vorlon I think I prefer to lie about the severity
  rather than lie about the tags; Kamion may have a different
  opinion as a bugmaster.)

 This preference isn't strong enough that I would want it to hold anything
 up; all the options are kludges, so we might as well pick one and get on
 with things.

  we'll go with lowering to 'important', with an attached explanation.

 This is not really a major concern; if there are RC bugs that haven't been
 detected yet, there's no sense in sitting around waiting for them to be
 filed.  If you have specific issues in mind that you suspect may be RC, it
 would be best to investigate them before the affected packages reach
 testing, of course.

  no, no specific issues in mind. I throw away and forget about (d) now.

 * * *

  so, we'll be downgrading the security bugs to important now, right?,
  and aiui the transition can happen in today's britney run (provided
  that today's dinstall picks kdeedu/mipsel and britney sees it, which
  is what happens if iuic).

  thanks for your time and your excellent work.

-- 
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
 
The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself.  Therefore all
progress depends on the unreasonable man.
-- George Bernard Shaw



Re: Final polishing of the KDE 3.3 transition

2005-01-03 Thread Adeodato Simó
#   we'll go with lowering to 'important', with an attached explanation.

#285128: kdelibs: CAN-2004-1165: FTP command injection bug
severity 285128 important

#286516: kdebase: CAN-2004-1158: Konqueror Window Injection Vuln.
severity 286516 important

#286521: kdelibs: CAN-2004-1145: Konqueror Java Vulnerability
severity 286521 important

thanks mate, see you again after the transition

  In agreement with the Release Team, I'm downgrading the severity of
  the above three security bugs in KDE to important, so that KDE 3.3 can
  enter sarge. See this thread [1] for more info.

[1] http://lists.debian.org/debian-release/2005/01/msg4.html

  The severity will be restored right after the transition, and uploads
  to sid will shortly follow. Just to say what is going to happen:
  kdebase 3.3.1-4 will be uploaded first (along with a arts 1.3.2-2, not
  security related). While buildds churn these two, a kdelibs 3.3.2-1
  upload to sid will be prepared, and uploaded as soon as kdebase+arts
  is built in all arches.

  We need to upload kdelibs 3.3.2 since the fix for CAN-2004-1145 (the
  Java Vulnerability) is not easily backportable to 3.3.1. Having
  kdelibs 3.3.2 with the rest of packages being at 3.3.1 is a safe mix;
  in any case, we will test prior to uploading and the urgency won't be
  set to high.

  Cheers,

-- 
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
Listening to: 10,000 Maniacs - don't talk
 
Don't worry about what anybody else is going to do. The best way to
predict the future is to invent it.
-- Alan Kay



Processed: Re: Final polishing of the KDE 3.3 transition

2005-01-03 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 #   we'll go with lowering to 'important', with an attached explanation.
 #285128: kdelibs: CAN-2004-1165: FTP command injection bug
 severity 285128 important
Bug#285128: CAN-2004-1165: FTP command injection bug
Bug#287201: KIOSlave FTP client can be made to send email
Severity set to `important'.

 #286516: kdebase: CAN-2004-1158: Konqueror Window Injection Vuln.
 severity 286516 important
Bug#286516: kdebase: CAN-2004-1158: Konqueror Window Injection Vulnerability
Severity set to `important'.

 #286521: kdelibs: CAN-2004-1145: Konqueror Java Vulnerability
 severity 286521 important
Bug#286521: kdelibs: CAN-2004-1145: Konqueror Java Vulnerability
Severity set to `important'.

 thanks mate, see you again after the transition
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)



Print Alternative

2005-01-03 Thread Fernanda Giroleti Weiden
FYI and comments.

Regards,
Fernanda

 Mensagem encaminhada 
 De: Fernanda Giroleti Weiden [EMAIL PROTECTED]
 Para: [EMAIL PROTECTED], [EMAIL PROTECTED]
 Cc: debian-devel@lists.debian.org
 Assunto: Print Alternative
 Data: Mon, 03 Jan 2005 01:05:18 -0200
 Hi,
 I'm packaging the Printer Configuration Tool (default printer config
 tool on RedHat/Fedora systems) for Debian. This aplication allows users
 to configure printers without needing to know if they're running CUPS,
 LPRng or whatever. To do that, the RedHat/Fedora team is using the
 alternatives system created by Debian and already used by us for
 browsers, terminals, editors, etc.
 
 So, here goes my suggestion and a request: what do you think of using
 the alternatives system for printing?
 
 That would ease porting this application to run on Debian. This
 application would add a great facility for our users since it is
 impossible to know what command must be used to print a document on a
 Debian system.
 
 My suggestion to the name of this alternative is print which should
 point to the command used to print (ex.: /usr/bin/lpr)

-- 
Projeto Software Livre Mulheres
http://mulheres.softwarelivre.org

Men are taught to apologize for their weaknesses, women for their
strengths --Lois Wyse


signature.asc
Description: Esta é uma parte de mensagem	assinada digitalmente


Re: Processed: moving old pending bugs to my current e-mail

2005-01-03 Thread Martin-Éric Racine
Dear Maintainers,

As reported yesterday by the BTS, I still had bugs submitted via my former
e-mail address, which I have just reassigned to my current e-mail address.

I would obviously appreciate a followup, because most of those bugs have been
left unresolved for a LONG time and it would be nice to discuss a solution, so
that we can eventually close at least some of the bugs.

http://bugs.debian.org/cgi-bin/pkgreport.cgi?submitter=q-funk%40iki.fi

-- 
Martin-Éric Racine, ICT Consultant
http://www.iki.fi/q-funk/



Bug#288406: kate: cursor disapears when display starts with wrapped line

2005-01-03 Thread Matt Filizzi
Package: kate
Version: 4:3.3.1-3
Severity: normal

in Kate, when the display starts with the second line of a wrapped line
the cursor disapears and/or leaves artifacts on screen from where it
was.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (900, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages kate depends on:
ii  kdelibs4 4:3.3.1-4   KDE core libraries
ii  libart-2.0-2 2.3.16-6Library of functions for 2D graphi
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libfam0c102  2.7.0-6 client library to control the FAM 
ii  libgcc1  1:3.4.3-6   GCC support library
ii  libice6  4.3.0.dfsg.1-10 Inter-Client Exchange library
ii  libidn11 0.5.2-3 GNU libidn library, implementation
ii  libpng12-0   1.2.8rel-1  PNG library - runtime
ii  libqt3c102-mt3:3.3.3-7   Qt GUI Library (Threaded runtime v
ii  libsm6   4.3.0.dfsg.1-10 X Window System Session Management
ii  libstdc++5   1:3.3.5-5   The GNU Standard C++ Library v3
ii  libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii  libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii  libxrender1  0.8.3-7 X Rendering Extension client libra
ii  xlibs4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu
ii  zlib1g   1:1.2.2-4   compression library - runtime

-- no debconf information



Bug#286690: Fwd: Re: korganizer: clicking on an event causes segfault, related to LDAP

2005-01-03 Thread Christopher Martin
Forwarding comments to the BTS. 
 
- Forwarded message from Brian C DeRocher 
[EMAIL PROTECTED] - 
 
Here's some more information about this bug (Brian reads the 
bug report.)  Oh look at that, it was reproduced. 
 
I was just going to add that i was trying to configure Korganizer to 
connect to an exchange resource.  What i really want to see, is when 
people 
are free, as i create an event. 
 
Thanks for looking into this Ricardo. 
 
--  
Brian C. DeRocher @ Mitretek Systems 
This email was signed using OpenPGP. 
- End forwarded message - 



Re: Desktop task broken on !(i386/powerpc)

2005-01-03 Thread Sven Luther
On Sun, Jan 02, 2005 at 12:17:33PM +0100, Petter Reinholdtsen wrote:
 [Sven Luther]
  I think the real solution to this recuring problem is to split the
  dekstop patch into a just X, gnome and KDE task. This is much
  more friendlier to our non-broadband users, and it makes the task
  stuff actually usable. As it stands, we could as well not show it.
 
 Personally, I use both KDE, Gnome and just X programs.  Why do you

Cool, then you chose X, KDE and Gnome, and ignore the various server tasks ?

 believe a desktop user want to limit herself to only one of these
 classes of programs?

And why do you believe every user should be forced to install all three group
of stuff and not be able to chose just one or two ? 

Friendly,

Sven Luther



Bug#285126: kdelibs: Is this buf fixed? (And can be closed?)

2005-01-03 Thread coldtobi
Package: kdelibs
Version: 4:3.3.1-4
Followup-For: Bug #285126

Again, sorry for nagging:

I read the changelog of kdelibs and kdebase and found out, that the bug
should be resolved...

Here the changelog-snips (shortened):

kdebase (4:3.3.1-3) unstable; urgency=medium

  * Include patch to fix CAN-2004-1171 (plain text password exposure).
  Closes half of #285126.

   -- Adeodato Simó [EMAIL PROTECTED]  Fri, 10 Dec 2004 22:28:25
   +0100


kdelibs (4:3.3.1-2) unstable; urgency=medium

  * Include patch to fix CAN-2004-1171 (plain text password exposure).
  Closes half of #285126. Notes about the patches:
  


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages kdelibs depends on:
ii  kdelibs-bin   4:3.3.1-4  KDE core binaries
ii  kdelibs-data  4:3.3.1-4  KDE core shared data
ii  kdelibs4  4:3.3.1-4  KDE core libraries

-- no debconf information



Bug#286510: kdelibs: Is bug resolved and can be closed?

2005-01-03 Thread Adeodato Simó
* coldtobi [Mon, 03 Jan 2005 17:51:42 +0100]:

 So maybe this bug can be closed, and make the path a little more free
 for the testing scripts?

 --- snip of changelog kdelibs --
 kdelibs (4:3.3.1-3) unstable; urgency=high

 * Added patch to fix half of Konqueror Window Injection
 * Vulnerability
 CAN-2004-115. kdebase upload will fix the rest.

-- Riku Voipio [EMAIL PROTECTED]  Mon, 13 Dec 2004 18:53:21 +

 --- end of snip ---


 kdebase (4:3.3.1-3) unstable; urgency=medium

   * Include patch to fix CAN-2004-1171 (plain text password exposure).
   Closes half of #285126.

-- Adeodato Simó [EMAIL PROTECTED]  Fri, 10 Dec 2004 22:28:25
+0100


 kdelibs (4:3.3.1-2) unstable; urgency=medium

   * Include patch to fix CAN-2004-1171 (plain text password exposure).
   Closes half of #285126. Notes about the patches:

  in all cases, the bug remains open because sarge is still vulnerable.
  in all cases, the bug has the 'sarge' tag set, so they don't affect
  the tranisition to sarge. these bugs will be closed as soon as KDE 3.3
  enters testing, which should happen durin this week.

  thanks for caring, anyway.

-- 
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
Listening to: David Bowie - If I'm dreaming my life
 
Faced with the choice between changing one's mind and proving that there
is no need to do so, almost everyone gets busy with the proof.
-- J.K. Galbraith




Bug#287175: Bug#288406: kate: cursor disapears when display starts with wrapped line

2005-01-03 Thread Jesús Roncero Franco
On Monday, 3 de January de 2005 16:58, Matt Filizzi wrote:

You are rejecting my mail. Did you read what I asked about the bug you filed?
Jan  3 17:20:29 gaia postfix/smtp[18811]: 0A81817AFB: 
to=[EMAIL PROTECTED], relay=x.hjsoft.com[69.240.167.132], delay=35, 
status=bounced (host x.hjs
oft.com[69.240.167.132] said: 550 5.7.1 NO SPAM (in reply to MAIL FROM 
command))

http://bugs.debian.org/287175


-- 
 temp: http://temp.roncero.org
 Out: 12.00 ºC --  In: 19.94 ºC



Re: Re: errors in kdm.log

2005-01-03 Thread jianan
Thanks a lot for the info. I have learned from online how to turn off those 
Warnings by some settings in kdebugdialog. That does not really solve the 
problem. I'll adopt your approach.

Jianan




Vague, uninteresting question...

2005-01-03 Thread Paul Johnson
On Sunday 02 January 2005 06:10 am, jianan wrote:

 Is there a gui to config CD-RW  drives?

No, CDRW drives come preconfigured, ready to roll.

Ask smarter questions if you want smarter answers.
http://www.catb.org/~esr/faqs/smart-questions.html

-- 
Paul Johnson
[EMAIL PROTECTED]
http://ursine.dyndns.org/~baloo/


pgpZRqj4SyMMe.pgp
Description: PGP signature


Re: gui for broadband

2005-01-03 Thread Paul Johnson
On Saturday 01 January 2005 07:31 pm, jianan wrote:
 Is there a gui for broadband user to connect, monitor bytes 
 transferred, duration of connection, disconnection, etc. ? 

No.  Broadband isn't a kind of network interface.

Ask smarter questions, get smarter answers.

-- 
Paul Johnson
[EMAIL PROTECTED]
http://ursine.dyndns.org/~baloo/


pgpvTb5UwmiMs.pgp
Description: PGP signature


Re: gui for broadband

2005-01-03 Thread Caveman
Very interesting, I never knew about this app.

Caveman


On Sun, 2 Jan 2005 22:55:36 -0800, Paul Johnson [EMAIL PROTECTED] wrote:
 On Saturday 01 January 2005 07:31 pm, jianan wrote:
  Is there a gui for broadband user to connect, monitor bytes
  transferred, duration of connection, disconnection, etc. ?
 
 No.  Broadband isn't a kind of network interface.
 
 Ask smarter questions, get smarter answers.
 
 --
 Paul Johnson
 [EMAIL PROTECTED]
 http://ursine.dyndns.org/~baloo/
 
 
 


--




Re: gui for broadband

2005-01-03 Thread Achim Woessner
On Monday 03 January 2005 02:55, jianan wrote:
 Thanks for the info. Unfortunately there's only a download for SID and I'm 
 running SARGE.

Hi.

You maybe just want to add deb http://www.mpe.mpg.de/~ach/debian/sarge ./ into 
your /etc/apt/sources.list and apt-get install knemo. After you have 
restarted KDE you will be able to use it, if it doesn t bother you to have 
another source in your sources.list.

Cheers,
Achim Woessner


pgptlvyrkGxYV.pgp
Description: PGP signature


Re: Vague, uninteresting question...

2005-01-03 Thread jianan
Here you go again, trying to be a smart ass. For ur info, someone pointed me 
to k3b and I've installed and burned my first cd with it. The question may 
not be smart but you are no smarter either. Again, if you can't provide any 
assistance, just shut-up and don't waste any bandwidth.




Re: Re: gui for broadband

2005-01-03 Thread jianan
Hi,
I was able to access the webpage but it's address was not accepted as a valid  
source list by 'apt-get install'. It could not resolve 'www.mpe.mpq.de'.
Is there other site to try? I've scanned through the  relevant Debian site but 
knemo is not there.

Cheers
Jiianan




Re: Re: errors in kdm.log

2005-01-03 Thread jianan
Hi,

I've tried ur recommendation but I lost the icons in all the windows even 
without touching the Default dir. 
Perhaps there should be other dir(s) that should also be left alone?

Jianan




Re: Re: gui for cd-rw drive

2005-01-03 Thread jianan
 
I find k3b great. I've burned my first CD, backing up some important files.
Thanks a lot.

Jianan.




Re: gui for broadband

2005-01-03 Thread Ruth A. Kramer
Paul Johnson wrote:
 On Saturday 01 January 2005 07:31 pm, jianan wrote:
  Is there a gui for broadband user to connect, monitor bytes
  transferred, duration of connection, disconnection, etc. ?
 
 No.  Broadband isn't a kind of network interface.

Hmm, don't understand your point.  The question seems valid to me --
he's a broadband user, and he wants to monitor things like the number of
bytes transferred, duration of connection, etc.  (Things that can
typically be done for a modem (non-broadband) connection.  

Maybe your point is re connect?  I know some broadband connections are
always on (IIUC) (things like a cable modem) but does that also apply to
things like xDSL and ISDN?

Randy Kramer

 Ask smarter questions, get smarter answers.

??




Re: gui for broadband

2005-01-03 Thread Achim Woessner
On Monday 03 January 2005 14:53, jianan wrote:
 Hi,
 I was able to access the webpage but it's address was not accepted as a 
 valid source list by 'apt-get install'. It could not resolve 
 'www.mpe.mpq.de'.  Is there other site to try? I've scanned through the 
 relevant Debian site but knemo is not there.

Hi.

Just to be sure you have done everything right. Add deb 
http://www.mpe.mpg.de/~ach/debian/sarge ./ (without the  of course) into 
your /etc/apt/sources.list then do an apt-get update and then apt-get 
install knemo and then you have to restart KDE. If this doesn't work for you 
you could just go onto the site with your favourite webbrowser, get the knemo 
file and install it with dpkg. Or maybe the source was temporary down who 
knows. Can you access http://www.mpe.mpg.de/ with your webbrowser?
I hope I was able to help.

Cheers,
Achim Woessner


pgpqZ4RrMoqEc.pgp
Description: PGP signature


Re: Re: DPMS doesn't work with KDE

2005-01-03 Thread Rupinder S. Gill
I have the same problem with KDE 3.2.  I can force the display off with 'xset 
dpms force off', but the display doesn't standby/suspend/off after the 
configured times.  Here's the relevant dpms output from 'xset q':

DPMS (Energy Star):
  Standby: 180Suspend: 420Off: 780
  DPMS is Enabled
  Monitor is On

I have the dpms timeouts set in my X-config file and have also set them via 
KDE's Display Power Control utility.  DPMS works just fine when at the XDM 
screen; however, if I login (into KDE), it no longer works.  I haven't tried 
any other window manager, but I suspect that dpms would work just fine there 
as Nicolas reported.


R.G.




Re: Re: gui for broadband

2005-01-03 Thread jianan
Hi,
No luck here. I've checked and re-checked my source list entry to the dot. I 
am able to access www.mpe.mpq.de with my browser. It's the 
Max-Planck-Institut. But 'apt-get' just cannot resolve that address.
I'll put a question to the debian-user list on this.

Thanks, you have been most help.

Cheers

Jianan




Re: Re: gui for broadband

2005-01-03 Thread jianan
Hi,

I too find Mr. Johnson unreasonable. I don't knowhis motive. He expects users 
to be technically precise and accurate on questions raised. I don't have to 
be an expert in broadband services and devices to ask a question about the 
availability of a gui for a broadband connection. Most users are concerned in 
solving problems on hand quickly. Users who have gone through the same 
experience can easily understand each other.

Jianan




Re: Re: gui for broadband

2005-01-03 Thread jianan
Forgot to mention that I have also tried the dpkg approach i.e. go to the site 
to download the latest version .deb file and do 'dpkg -i' but ran into 
dependencies problems.

'apt-get install' is still the best method. 

I have checked through Debian list of non-US mirror sites but the one you 
recommended is not there. I've checked Debian. Will keep you informed.

Cheers
Jianan




Re: Re: gui for broadband

2005-01-03 Thread jianan
Hi,

Just after sending you the last msg, I discovered that I had keyed in mpq 
instead of mpg. Due to my choice of font, the curve of the 'g' disappears 
after being underlined. I'm so sorry.

Upon re-trying 'apt-get install' I now have a dependency problem as follows:
 
The following packages have unmet dependencies:
  knemo: Depends: kdelibs4 (= 4:3.2.3-3.sarge.1) but 4:3.2.3-2 is to be 
installed

My current kdelibs4 version is newer than the one expected by knemo. It 
wouldn't be advisable to downgrade.  Any suggestion?

Jianan




java plug-in

2005-01-03 Thread jianan
Hi,
I'm using sarge, kernel 2.6.8 and kde 3.2.2.
I'm having problem filling-in ofrms online.Suspect I need Java plug-in. From 
SUN's Java site, download for the plug-in is not available for Debian.
Is it available as a Debian package?

Jianan




Re: gui for broadband

2005-01-03 Thread Stephen Cormier
On January 3, 2005 11:05 pm, jianan wrote:
 Hi,

 Just after sending you the last msg, I discovered that I had keyed in
 mpq instead of mpg. Due to my choice of font, the curve of the 'g'
 disappears after being underlined. I'm so sorry.

 Upon re-trying 'apt-get install' I now have a dependency problem as
 follows:

 The following packages have unmet dependencies:
   knemo: Depends: kdelibs4 (= 4:3.2.3-3.sarge.1) but 4:3.2.3-2 is to
 be installed

 My current kdelibs4 version is newer than the one expected by knemo.
 It wouldn't be advisable to downgrade.  Any suggestion?

 Jianan

You can get the kdelibs4 package needed with this line in 
your /etc/apt/sources.list, of course changing the ftp.de.debian.org 
part to reflect your local mirror.

deb http://ftp.de.debian.org/debian/ testing-proposed-updates main 

The person who is building the package has the proposed updates 
repository in his sources list and that is where the package gets the 
dependency when he builds it and since you only have testing in your 
sources.list apt cannot find the package you need. Either this or you 
can install some -dev packages and build the package from source 
yourself then install with dpkg,  you would not need the proposed 
updates files/packages at all for this just the normal ones you can get 
from testing already.

Stephen

-- 
Debian the choice of a GNU generation.

GPG Public Key: http://www3.ns.sympatico.ca/scormier/publickey.asc


pgpWOOQv16urr.pgp
Description: PGP signature


Re: java plug-in

2005-01-03 Thread Matej Cepl
jianan wrote:
 I'm using sarge, kernel 2.6.8 and kde 3.2.2.
 I'm having problem filling-in ofrms online.Suspect I need Java plug-in.
 From SUN's Java site, download for the plug-in is not available for
 Debian. Is it available as a Debian package?

deb http://www.tux.org/pub/java/debian unstable main non-free


-- 
Matej Cepl, http://www.ceplovi.cz/matej
GPG Finger: 89EF 4BC6 288A BF43 1BAB  25C3 E09F EF25 D964 84AC
138 Highland Ave. #10, Somerville, Ma 02143, (617) 623-1488
 
Besides, the determined Real Programmer can write Fortran
programs in any language.
  -- Ed Post, Real Programmers Don't Use Pascal