Re: Bug#129414: psptools: try this patch -p0 on psplpr.pl.in instead of #129287
On Thu, Jan 17, 2002 at 03:11:40AM +, Colin Watson wrote: > On Wed, Jan 16, 2002 at 11:22:59AM -0700, Don wrote: > > Please look if there is a missing print; statement causing the > > dropped and duplicated lines. Then all of the bugs would be gone, > > at least as far as the program was intended to work. > > I believe I have a fix for this. I'm just building and testing packages > now, but the diff fragment is: [...] > This passes the test given in #116263, and should fix your problems too. > > I'll let you know when I've uploaded new packages. I believe that the packages currently in incoming (http://incoming.debian.org/, GPG-signed by me) should fix everything you've reported so far. Please let me know if there are any further problems, or file a bug report or inform an existing bug report if appropriate. Thanks, -- Colin Watson [EMAIL PROTECTED]
Processed: merging 116263 129461
Processing commands for [EMAIL PROTECTED]: > merge 116263 129461 Bug#116263: postscript line removed from input file. Bug#129461: psptools: lines still dropped and duplicated Merged 116263 129461. > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Processed: merging 128669 129437
Processing commands for [EMAIL PROTECTED]: > merge 128669 129437 Bug#128669: psptools fixes for psplpr blocking and usage problem Bug#129437: psptools: try this patch first, cancels previous submits Bug#129287: psptools: try this patch -P0 on psplpr.pl.in, supercedes #128669 Bug#129414: psptools: try this patch -p0 on psplpr.pl.in instead of #129287 Merged 128669 129287 129414 129437. > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Bug#129104: bug 129104 (buffer overflow + template reading in cgiemail)
Hello, thank you for helping/offering to help!
I had released a new version with an almost-correct fix for the buffer
overflow problem last night, and just looked at your mail to the bug
this afternoon. My fix was almost the same as yours; it used
CGI_ERRMSG_MAX-1 instead of CGI_ERRMSG_MAX. My next upload will use
your correct version.
That leaves the other stuff... the main problem is the template files,
and I like the solution you suggested (restricting them to a specific
directory). The relevant code, I think, is in the
cgi_standard_{email,echo,file} functions at the end of cgilib.c
(beginning on line 1010).
Hmm, one problem that just occurred to me is that we can't easily make
the location of the template files a compile-time option because people
reconfigure their webservers to have different document roots, and the
current design of cgiemail requires the template files to have
PATH_TRANSLATEDs. That means, I guess, that configuration file parsing
might have to be added.
Maybe could restrict to files with extension .CGIEMAIL_TEMPLATE.
Do you have any other ideas, or a preference between these two?
The other issue is that it uses mkstemp() which is not very secure. I
don't guess that this is exploitable, but should be fixed at some point.
Again, thanks for your help, Colin.
thomas
--
Thomas "resc" Smith <[EMAIL PROTECTED]>
web: http://finbar.dyndns.org/
gpg key id 1024D/ACABA81E, fingerprint:
3A47 CFA5 0E5D CF4A 5B22 12D3 FF1B 84FE ACAB A81E
Bug#128444: marked as done (zope-zpatterns_0.4.3p2-0.2(unstable/sparc): build-depends on a package with interactive install)
Your message dated Wed, 16 Jan 2002 15:08:44 -0500 with message-id <[EMAIL PROTECTED]> and subject line Bug#128444: fixed in zope-zpatterns 0.4.3p2-0.3 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 9 Jan 2002 16:58:24 + >From [EMAIL PROTECTED] Wed Jan 09 10:58:24 2002 Return-path: <[EMAIL PROTECTED]> Received: from cicero.e-mis.co.uk [212.240.194.162] (mail) by master.debian.org with esmtp (Exim 3.12 1 (Debian)) id 16OM3U-0001vg-00; Wed, 09 Jan 2002 10:58:24 -0600 Received: from tacitus.systems ([172.21.77.253] helo=tacitus ident=mail) by cicero.e-mis.co.uk with esmtp (Exim 3.32 #1 (Debian)) id 16OM3L-0005Rn-00 for <[EMAIL PROTECTED]>; Wed, 09 Jan 2002 16:58:15 + Received: from james by tacitus with local (Exim 3.33 #1 (Debian)) id 16OM3K-0003pQ-00 for <[EMAIL PROTECTED]>; Wed, 09 Jan 2002 16:58:14 + To: [EMAIL PROTECTED] Subject: zope-zpatterns_0.4.3p2-0.2(unstable/sparc): build-depends on a package with interactive install Mail-Copies-To: never From: James Troup <[EMAIL PROTECTED]> Date: 09 Jan 2002 16:58:14 + Message-ID: <[EMAIL PROTECTED]> Lines: 44 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: James Troup <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Package: zope-zpatterns Version: 0.4.3p2-0.2 Severity: serious Justification: alpha being out of date will keep it out of testing Please don't build-depend on zope, it's postinst is interactive which means it can't be installed by build daemons. Gregor suggested a better solution in #86722 (namely that the needed header files be copied to zope-zpatterns source), please use that instead. | Automatic build of zope-zpatterns_0.4.3p2-0.2 on vore by sbuild/sparc 1.159 | Build started at 20020108-1240 | ** [...] | ** Using build dependencies supplied by package: | Build-Depends: debhelper, python2.1, zope [...] | Setting up zope (2.4.99beta3-0.2) ... | | WARNING: The default http port of ZServer has been changed to 9673, | since 8080 conflicted with proxy server. | If you're used to access Zope as http://localhost:8080/, you'll | now have to use http://localhost:9673/. | | For further information about configuring ZServer, please refer | to /usr/share/doc/zope/README.Debian. | | Press Enter to continue: dpkg: error processing zope (--configure): | subprocess post-installation script returned error exit status 1 | Errors were encountered while processing: | zope | E: Sub-process /usr/bin/dpkg returned an error code (1) | apt-get failed. | Package installation failed A complete build log can be found at http://buildd.debian.org/build.php?arch=sparc&pkg=zope-zpatterns&ver=0.4.3p2-0.2 -- James --- Received: (at 128444-close) by bugs.debian.org; 16 Jan 2002 20:11:55 + >From [EMAIL PROTECTED] Wed Jan 16 14:11:55 2002 Return-path: <[EMAIL PROTECTED]> Received: from auric.debian.org [206.246.226.45] (mail) by master.debian.org with esmtp (Exim 3.12 1 (Debian)) id 16QwPb-0006EZ-00; Wed, 16 Jan 2002 14:11:55 -0600 Received: from troup by auric.debian.org with local (Exim 3.12 1 (Debian)) id 16QwMW-0003Ze-00; Wed, 16 Jan 2002 15:08:44 -0500 From: Colin Watson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] X-Katie: $Revision: 1.66 $ Subject: Bug#128444: fixed in zope-zpatterns 0.4.3p2-0.3 Message-Id: <[EMAIL PROTECTED]> Sender: James Troup <[EMAIL PROTECTED]> Date: Wed, 16 Jan 2002 15:08:44 -0500 Delivered-To: [EMAIL PROTECTED] We believe that the bug you reported is fixed in the latest version of zope-zpatterns, which has been installed in the Debian FTP archive: zope-zpatterns_0.4.3p2-0.3.diff.gz to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3.diff.gz zope-zpatterns_0.4.3p2-0.3.dsc to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3.dsc zope-zpatterns_0.4.3p2-0.3_i386.deb to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Colin Watson <[EMAIL PROTECTED]> (supplier of updated zope-zpatterns package) (This message was
zope-zpatterns_0.4.3p2-0.3_i386.changes INSTALLED
Installing: zope-zpatterns_0.4.3p2-0.3.diff.gz to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3.diff.gz zope-zpatterns_0.4.3p2-0.3.dsc to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3.dsc zope-zpatterns_0.4.3p2-0.3_i386.deb to pool/main/z/zope-zpatterns/zope-zpatterns_0.4.3p2-0.3_i386.deb Announcing to debian-devel-changes@lists.debian.org Closing bugs: 128444 Thank you for your contribution to Debian.
clisp_2.27-0.2_i386.changes INSTALLED
Installing: clisp-doc_2.27-0.2_all.deb to pool/main/c/clisp/clisp-doc_2.27-0.2_all.deb clisp_2.27-0.2.diff.gz to pool/main/c/clisp/clisp_2.27-0.2.diff.gz clisp_2.27-0.2.dsc to pool/main/c/clisp/clisp_2.27-0.2.dsc clisp_2.27-0.2_i386.deb to pool/main/c/clisp/clisp_2.27-0.2_i386.deb Announcing to debian-devel-changes@lists.debian.org Closing bugs: Thank you for your contribution to Debian.
Bug#129285: kde-i18n: possibly has a trademark issue
On 16/01/02, Josip Rodin wrote: > On Tue, Jan 15, 2002 at 12:59:31PM +0100, Christian Kurz wrote: > > > stop mirroring the package, and appear in court to say "they're > > > nuts!"), but hey... > > No, it would be that only, they would also receive a fine which can > > either be lots of money for them or even a term of imprisonment. > How can you get fined if the suit is rebuffed in court? Has it really been rebuffed or did they simply reach an agreement out of court? And also this only one case and not a general rule. There could also show up a suit in court against a deban reseller, where no agreement is reached out of court and therefor the reseller get's finded. Christian -- Debian Developer (http://www.debian.org) 1024/26CC7853 31E6 A8CA 68FC 284F 7D16 63EC A9E6 67FF 26CC 7853 pgpRaoEyIaikE.pgp Description: PGP signature
Bug#129285: kde-i18n: possibly has a trademark issue
On Wed, Jan 16, 2002 at 01:32:54PM +0100, Martin Michlmayr wrote: > > How can you get fined if the suit is rebuffed in court? > > There only was an out-of-court agreement. That was because SuSE couldn't wait with their sales in Germany until they would win the suit, I thought. (cf. the Register article) -- 2. That which causes joy or happiness.
Verba Volant
We have been requested to insert the following email address, "[EMAIL PROTECTED]", in the Verba Volant Newsletter database. Through this daily service you will receive a quotation, selected from amongst the most celebrated philosophers, writers and poets of all time and translated into many languages and dialects by volunteers worldwide. If you would like to confirm your subscription to Verba Volant, please click on the following link: http://www.logos.net/owa-l/press.subscribe?lang=en&[EMAIL PROTECTED] If you do not wish to click on the link, your subscription will be cancelled. Thank you for your time. Verba Volant Il nous a été demandé d'ajouter l'adresse électronique "[EMAIL PROTECTED]" dans la liste des destinataires de Verba Volant, un service qui tous les jours vous adressera une citation sélectionnée parmi les uvres des meilleurs philosophes, écrivains, poètes de tous les temps et traduite en de très nombreuses langues grâce à des volontaires du monde entier. Pour confirmer l'inscription à Verba Volant, veuillez vous connecter au lien suivant: http://www.logos.net/owa-l/press.subscribe?lang=fr&[EMAIL PROTECTED] Si vous préférez ne pas cliquer sur le lien, vous ne recevrez rien. Merci dans tous les cas de nous avoir accordé quelques secondes. Verba Volant Se nos ha solicitado insertar la dirección de correo electrónico "[EMAIL PROTECTED]" en el listado de envíos de Verba Volant, un servicio que diariamente le enviará citas elegidas entre los mejores filosofos, escritores, poetas, etc., traducidas a varios idiomas y dialectos. Dichas citas están traducidas por voluntarios que se conectan a nuestra web desde todo el mundo. Si quiere confirmar la suscripción a Verba Volant, le rogamos entre en: http://www.logos.net/owa-l/press.subscribe?lang=es&[EMAIL PROTECTED] Si no entra en la dirección señalada no recibirá las citas. Muchas gracias por el tiempo que nos ha dedicado. Verba Volant Ci è stato chiesto di inserire l'indirizzo di posta elettronica "[EMAIL PROTECTED]" nellelenco dei destinatari di Verba Volant, un servizio che ogni giorno ti invierà una citazione scelta tra quelle dei migliori filosofi, scrittori, poeti di tutti i tempi e tradotta in moltissime lingue e dialetti grazie alla collaborazione di volontari da tutto il mondo. Se desideri confermare l'iscrizione, ti preghiamo di collegarti al seguente link: http://www.logos.net/owa-l/press.subscribe?lang=it&[EMAIL PROTECTED] Nel caso preferissi non cliccare sul link, non riceverai nulla. Grazie comunque per i secondi che ci hai dedicato. Cordiali saluti.
Bug#129285: kde-i18n: possibly has a trademark issue
* Josip Rodin <[EMAIL PROTECTED]> [20020116 12:10]: > How can you get fined if the suit is rebuffed in court? There only was an out-of-court agreement. -- Martin Michlmayr [EMAIL PROTECTED]
Bug#129285: kde-i18n: possibly has a trademark issue
On Tue, Jan 15, 2002 at 12:59:31PM +0100, Christian Kurz wrote: > > stop mirroring the package, and appear in court to say "they're nuts!"), but > > hey... > > No, it would be that only, they would also receive a fine which can > either be lots of money for them or even a term of imprisonment. How can you get fined if the suit is rebuffed in court? -- 2. That which causes joy or happiness.
Bug#129461: psptools: lines still dropped and duplicated
Package: psptools
Version: 1.2.2-6
Severity: normal
Here is the current problem after my patch #129437.
The psplpr is dropping lines and duplicating lines.
I have tried several solutions and have solved the
problem is some cases yet there could be consequences
because of the large variety of possible postscript.
This program should have an experienced perl programmer
who can follow the code to really fix this.
This could be my last report on this subject unless
eventually I learn enough perl before anybody fixes this.
Don
[EMAIL PROTECTED]
##
this shows a DSC (first line = %!PS) psplpr error
notice the %%BoundingBox is dropped and the %%%Creator is duplicated
##
267c267,288
< %%%BoundingBox: 54 72 558 720
---
> %%BeginSetup
> %%BeginFeature: *OKColorRenderStyle Saturation
> globaldict /[EMAIL PROTECTED] known not
> {globaldict begin /[EMAIL PROTECTED] 1 def end}if
> globaldict /[EMAIL PROTECTED] get 5 ne{
> /DefaultColorRendering
> [null /Saturation null null null]
> globaldict /[EMAIL PROTECTED] get get
> dup null ne{
> findcolorrendering pop /ColorRendering findresource /ColorRendering
> defineresource setcolorrendering
> }{pop pop}ifelse
> }if
> globaldict /[EMAIL PROTECTED] get 1 eq{
> globaldict begin
> /[EMAIL PROTECTED] {currentcolorrendering /CRDName get}stopped
> {pop pop null}if def
> end
> }if
> %%EndFeature
> %%EndSetup
> %%%Creator: Mozilla (NetScape) HTML->PS
##
this shows a non DSC (first line = %!) psplpr error
notice the %%BoundingBox is dropped and the showsheet
from mpage 2up is duplicated.
##
1a2,21
> %%BeginFeature: *OKColorRenderStyle Saturation
> globaldict /[EMAIL PROTECTED] known not
> {globaldict begin /[EMAIL PROTECTED] 1 def end}if
> globaldict /[EMAIL PROTECTED] get 5 ne{
> /DefaultColorRendering
> [null /Saturation null null null]
> globaldict /[EMAIL PROTECTED] get get
> dup null ne{
> findcolorrendering pop /ColorRendering findresource /ColorRendering
> defineresource setcolorrendering
> }{pop pop}ifelse
> }if
> globaldict /[EMAIL PROTECTED] get 1 eq{
> globaldict begin
> /[EMAIL PROTECTED] {currentcolorrendering /CRDName get}stopped
> {pop pop null}if def
> end
> }if
> %%EndFeature
> %!
267c287,306
< %%%BoundingBox: 54 72 558 720
---
> %%BeginSetup
> %%BeginFeature: *OKColorRenderStyle Saturation
> globaldict /[EMAIL PROTECTED] known not
> {globaldict begin /[EMAIL PROTECTED] 1 def end}if
> globaldict /[EMAIL PROTECTED] get 5 ne{
> /DefaultColorRendering
> [null /Saturation null null null]
> globaldict /[EMAIL PROTECTED] get get
> dup null ne{
> findcolorrendering pop /ColorRendering findresource /ColorRendering
> defineresource setcolorrendering
> }{pop pop}ifelse
> }if
> globaldict /[EMAIL PROTECTED] get 1 eq{
> globaldict begin
> /[EMAIL PROTECTED] {currentcolorrendering /CRDName get}stopped
> {pop pop null}if def
> end
> }if
> %%EndFeature
274a314,315
> %%EndSetup
> /showsheet { showpage } bind def
