Bug#325369: kdebase: kdm should NOT use /dev/urandom -- doing so deliberately weakens the security of the system
Package: kdebase Version: 4:3.4.2-1 Severity: important Tags: security I strenuously disagree with the upstream decision taken to point kdm at /dev/urandom instead of /dev/random for entropy. Using /dev/urandom is fine for unserious application that need a source of (pseudo-)random numbers, such as games. Display managers like kdm and xdm do not read /dev/random for frivolous purposes, however -- they use it to get a seed for a session authorization key (in the case of xdm, for the XDM-AUTHORIZATION-1 protocol, and maybe MIT-MAGIC-COOKIE-1 as well). A few years ago someone (maybe it was me, I don't remember) wrote a patch to xdm that implements a "randomStream" resource -- older version of xdm, from which kdm was forked a long time ago, used "/dev/mem" as its entropy source, and as that file was not anywhere to close to entropic, the code would read 8MB of data and hash it. Reading 8MB from /dev/random is indeed stupid -- but reading that much data from /dev/urandom instead is not the right fix. The right fix is to read only the data you need from a known entropic source. In the case of xdm (and almost certainly kdm), that's just a few bytes. Reading the bits for the crypto key from /dev/urandom might be fine for distributions like Linspire that run the graphical desktop as root by default, but it's not for us. We should be as secure as we can reasonably be by default. Once #76336 was fixed, the complaints I was getting about xdm taking "forever" to start ceased. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=76336;archive=yes If you'd like to discuss this further, I suggest the debian-devel mailing list. It may be that most people disagree with me, though I hope not. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (500, 'stable') Architecture: powerpc (ppc) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.9-powerpc-smp Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#289599: Update patch
Package: kdelibs
Followup-For: Bug #289599
Hi,
The patch send by Robert Millan is leaving a dependency on
libasound2-dev for kdelibs4-dev, which is not satisfiable on
kfreebsd-i386.
Please find attached an updated patch to do that. I have put all the
upstream part in a .dpatch, including the modifications needed in the
generated configure script, but you may prefer to regenerate it from
configure.in.in.
Bye,
Aurelien
-- System Information:
Debian Release: testing/unstable
Architecture: kfreebsd-i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: GNU/kFreeBSD 5.3-1
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Authors: rmh, aurel32
Status: in BTS
diff -u kdelibs-3.4.2/debian/control kdelibs-3.4.2/debian/control
--- kdelibs-3.4.2/debian/control
+++ kdelibs-3.4.2/debian/control
@@ -3,7 +3,7 @@
Priority: optional
Maintainer: Debian Qt/KDE Maintainers
Uploaders: Isaac Clerencia <[EMAIL PROTECTED]>, Pierre Habouzit <[EMAIL
PROTECTED]>, Christopher Martin <[EMAIL PROTECTED]>, Adeodato Simó <[EMAIL
PROTECTED]>, Riku Voipio <[EMAIL PROTECTED]>
-Build-Depends: cdbs (>= 0.4.27), debhelper (>= 4.2.30), autotools-dev,
binutils (>= 2.14.90.0.7), docbook-to-man, gawk, gettext, libart-2.0-dev (>=
2.3.17), libarts1-dev (>= 1.4.2), libasound2-dev, libaspell-dev, libbz2-dev,
libcupsys2-dev, libfam-dev (>= 2.7.0-7.2), libidn11-dev, libjasper-1.701-dev,
libkrb5-dev, libldap2-dev, libopenexr-dev (>= 1.2.2-3), libpcre3-dev,
libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev, libssl-dev, libtiff4-dev (>=
3.7.3-1), libxml2-dev, libxml2-utils, libxslt1-dev, sharutils, texinfo
+Build-Depends: cdbs (>= 0.4.27), debhelper (>= 4.2.30), autotools-dev,
binutils (>= 2.14.90.0.7), docbook-to-man, gawk, gettext, libart-2.0-dev (>=
2.3.17), libarts1-dev (>= 1.4.2), libasound2-dev [!kfreebsd-i386 !hurd-i386],
libaspell-dev, libbz2-dev, libcupsys2-dev, libfam-dev (>= 2.7.0-7.2),
libidn11-dev, libjasper-1.701-dev, libkrb5-dev, libldap2-dev, libopenexr-dev
(>= 1.2.2-3), libpcre3-dev, libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev,
libssl-dev, libtiff4-dev (>= 3.7.3-1), libxml2-dev, libxml2-utils,
libxslt1-dev, sharutils, texinfo
Build-Depends-Indep: doxygen, qt3-doc, graphviz, gsfonts-x11
Standards-Version: 3.6.2
@@ -67,7 +67,7 @@
Package: kdelibs4-dev
Section: libdevel
Architecture: any
-Depends: kdelibs4c2 (= ${Source-Version}), kdelibs-bin (= ${Source-Version}),
libart-2.0-dev (>= 2.3.17), libarts1-dev (>= 1.4.2), libasound2-dev,
libaspell-dev, libbz2-dev, libcupsys2-dev, libfam-dev, libidn11-dev,
libjasper-1.701-dev, libkrb5-dev, libopenexr-dev (>= 1.2.2-3), libpcre3-dev,
libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev, libssl-dev, libtiff4-dev (>=
3.7.3-1), libxml2-dev, libxml2-utils, libxslt1-dev
+Depends: kdelibs4c2 (= ${Source-Version}), kdelibs-bin (= ${Source-Version}),
libart-2.0-dev (>= 2.3.17), libarts1-dev (>= 1.4.2), ${libasound2-dev},
libaspell-dev, libbz2-dev, libcupsys2-dev, libfam-dev, libidn11-dev,
libjasper-1.701-dev, libkrb5-dev, libopenexr-dev (>= 1.2.2-3), libpcre3-dev,
libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev, libssl-dev, libtiff4-dev (>=
3.7.3-1), libxml2-dev, libxml2-utils, libxslt1-dev
Provides: kdelibs-dev
Replaces: kdebase-dev (<< 4:3.4.0)
Description: development files for the KDE core libraries
diff -u kdelibs-3.4.2/debian/rules kdelibs-3.4.2/debian/rules
--- kdelibs-3.4.2/debian/rules
+++ kdelibs-3.4.2/debian/rules
@@ -32,0 +33,5 @@
+
+binary-predeb/kdelibs4-dev::
+ifeq (linux,$(DEB_HOST_ARCH_OS))
+ echo "libasound2-dev=libasound2-dev" >>debian/libarts1-dev.substvars
+endif
diff -u kdelibs-3.4.2/debian/changelog kdelibs-3.4.2/debian/changelog
--- kdelibs-3.4.2/debian/changelog
+++ kdelibs-3.4.2/debian/changelog
@@ -1,3 +1,9 @@
+kdelibs (4:3.4.2-2+kbsd) unreleased; urgency=low
+
+ * Added support for GNU/kFreeBSD, patch by Robert Millan.
+
+ -- Aurelien Jarno <[EMAIL PROTECTED]> Sat, 27 Aug 2005 23:03:45 +0200
+
kdelibs (4:3.4.2-2) unstable; urgency=low
+++ Changes by Christopher Martin and Adeodato Simó:
only in patch2:
unchanged:
--- kdelibs-3.4.2.orig/debian/patches/21_kdelibs.diff
+++ kdelibs-3.4.2/debian/patches/21_kdelibs.diff
@@ -0,0 +1,156 @@
+--- kde.orig/configure.in.in 2005-05-23 14:17:19.0 +0200
kde.patched/configure.in.in2005-08-27 23:48:59.0 +0200
+@@ -47,7 +47,7 @@
+ KDE_CHECK_STL
+ AC_HEADER_DIRENT
+ AC_HEADER_STDC
+-AC_CHECK_HEADERS(sys/param.h sys/mman.h sys/time.h sysent.h strings.h
sys/stat.h sys/select.h paths.h malloc.h limits.h sys/soundcard.h dlfcn.h
termios.h)
++AC_CHECK_HEADERS(sys/param.h sys/mman.h sys/time.h sysent.h strings.h
sys/stat.h sys/select.h paths.h malloc.h limits.h sys/soundcard.h dlfcn.h
termios.h sys/prctl.h)
+
+ DCOPIDL2CPP="compiled"
+ DCOPIDL="compiled"
+@@ -118,7 +118,7 @@
+ AC_CHECK_MKSTEMPS
+ AC_CHECK_MKSTEMP
+ AC_CHECK_MKDTEMP
+-AC_CHECK_FUNCS(strtoll socket seteuid setegid strfmon stpcpy gettimeofday)
++AC_CHECK_FUNCS(strtoll socket seteuid setegid strfmon stpcpy
Bug#325292: closed for wrong reason
Teun's initial complaint was libqt3-mt replaces libqt3c102-mt but does not provide libqt3c102-mt This is not your run of the mill "KDE is broken" bug, but a more fundamental misunderstanding of ABI transition. You should rather direct Teun et al. to Steve Langasek's message http://lists.debian.org/debian-devel-announce/2005/07/msg7.html which says, in part, The library package renames, libfoo1 -> libfoo1c2, libfoo1c102 -> libfoo1c2, or libfoo1c102 -> libfoo1, are done because there is an ABI change *without an upstream soname change*. Since there is no soname change, the files installed by the renamed package will also not change -- which means, just like for any other packages with overlapping files, you *must* conflict with the previous library package name. You must *not* add a Provides: libfoo1 or Provides: libfoo1c102 to the new package; this transition is happening because of an ABI transition, which means the new package will NOT provide the same interface as the old one, and setting Provides will lead apt to give your users broken package combinations. Regards, -Steve -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#289599: new patch
Hi!
I'm attaching a new, up-to-date patch for building kdelibs on GNU/kFreeBSD.
Please could you forward/commit the relevant part to upstream?
--
Robert Millan
diff -ur kdelibs-3.4.2.old/configure.in.in kdelibs-3.4.2/configure.in.in
--- kdelibs-3.4.2.old/configure.in.in 2005-05-23 14:17:19.0 +0200
+++ kdelibs-3.4.2/configure.in.in 2005-08-27 23:48:59.0 +0200
@@ -47,7 +47,7 @@
KDE_CHECK_STL
AC_HEADER_DIRENT
AC_HEADER_STDC
-AC_CHECK_HEADERS(sys/param.h sys/mman.h sys/time.h sysent.h strings.h
sys/stat.h sys/select.h paths.h malloc.h limits.h sys/soundcard.h dlfcn.h
termios.h)
+AC_CHECK_HEADERS(sys/param.h sys/mman.h sys/time.h sysent.h strings.h
sys/stat.h sys/select.h paths.h malloc.h limits.h sys/soundcard.h dlfcn.h
termios.h sys/prctl.h)
DCOPIDL2CPP="compiled"
DCOPIDL="compiled"
@@ -118,7 +118,7 @@
AC_CHECK_MKSTEMPS
AC_CHECK_MKSTEMP
AC_CHECK_MKDTEMP
-AC_CHECK_FUNCS(strtoll socket seteuid setegid strfmon stpcpy gettimeofday)
+AC_CHECK_FUNCS(strtoll socket seteuid setegid strfmon stpcpy gettimeofday
tcgetattr tcsetattr)
AH_BOTTOM([
/* provide a definition for a 32 bit entity, usable as a typedef, possibly
diff -ur kdelibs-3.4.2.old/debian/control kdelibs-3.4.2/debian/control
--- kdelibs-3.4.2.old/debian/control2005-08-27 13:06:22.0 +0200
+++ kdelibs-3.4.2/debian/control2005-08-27 15:16:22.0 +0200
@@ -3,7 +3,7 @@
Priority: optional
Maintainer: Debian Qt/KDE Maintainers
Uploaders: Isaac Clerencia <[EMAIL PROTECTED]>, Pierre Habouzit <[EMAIL
PROTECTED]>, Christopher Martin <[EMAIL PROTECTED]>, Adeodato Sim?? <[EMAIL
PROTECTED]>, Riku Voipio <[EMAIL PROTECTED]>
-Build-Depends: cdbs (>= 0.4.27), debhelper (>= 4.2.30), autotools-dev,
binutils (>= 2.14.90.0.7), docbook-to-man, gawk, gettext, libart-2.0-dev (>=
2.3.17), libarts1-dev (>= 1.4.2), libasound2-dev, libaspell-dev, libbz2-dev,
libcupsys2-dev, libfam-dev (>= 2.7.0-7.2), libidn11-dev, libjasper-1.701-dev,
libkrb5-dev, libldap2-dev, libopenexr-dev (>= 1.2.2-3), libpcre3-dev,
libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev, libssl-dev, libtiff4-dev (>=
3.7.3-1), libxml2-dev, libxml2-utils, libxslt1-dev, sharutils, texinfo
+Build-Depends: cdbs (>= 0.4.27), debhelper (>= 4.2.30), autotools-dev,
binutils (>= 2.14.90.0.7), docbook-to-man, gawk, gettext, libart-2.0-dev (>=
2.3.17), libarts1-dev (>= 1.4.2), libasound2-dev [!kfreebsd-i386 !hurd-i386],
libaspell-dev, libbz2-dev, libcupsys2-dev, libfam-dev (>= 2.7.0-7.2),
libidn11-dev, libjasper-1.701-dev, libkrb5-dev, libldap2-dev, libopenexr-dev
(>= 1.2.2-3), libpcre3-dev, libqt3-mt-dev (>= 3:3.3.4-4), libsasl2-dev,
libssl-dev, libtiff4-dev (>= 3.7.3-1), libxml2-dev, libxml2-utils,
libxslt1-dev, sharutils, texinfo
Build-Depends-Indep: doxygen, qt3-doc, graphviz, gsfonts-x11
Standards-Version: 3.6.2
diff -ur kdelibs-3.4.2.old/kdecore/kmountpoint.cpp
kdelibs-3.4.2/kdecore/kmountpoint.cpp
--- kdelibs-3.4.2.old/kdecore/kmountpoint.cpp 2005-05-23 14:16:21.0
+0200
+++ kdelibs-3.4.2/kdecore/kmountpoint.cpp 2005-08-27 16:26:09.0
+0200
@@ -224,7 +224,7 @@
{
KMountPoint::List result;
-#ifdef HAVE_GETMNTINFO
+#if defined(HAVE_GETMNTINFO) && defined(MNT_NOWAIT)
struct statfs *mounted;
diff -ur kdelibs-3.4.2.old/kdecore/kpty.cpp kdelibs-3.4.2/kdecore/kpty.cpp
--- kdelibs-3.4.2.old/kdecore/kpty.cpp 2005-05-23 14:16:21.0 +0200
+++ kdelibs-3.4.2/kdecore/kpty.cpp 2005-08-27 15:15:37.0 +0200
@@ -95,24 +95,24 @@
# endif
#endif
-#if defined (__FreeBSD__) || defined (__NetBSD__) || defined (__OpenBSD__) ||
defined (__bsdi__) || defined(__APPLE__)
+#if defined(HAVE_TCGETATTR)
+# define _tcgetattr(fd, ttmode) tcgetattr(fd, ttmode)
+#elif defined(TIOCGETA)
# define _tcgetattr(fd, ttmode) ioctl(fd, TIOCGETA, (char *)ttmode)
+#elif defined(TCGETS)
+# define _tcgetattr(fd, ttmode) ioctl(fd, TCGETS, (char *)ttmode)
#else
-# if defined(_HPUX_SOURCE) || defined(__Lynx__)
-# define _tcgetattr(fd, ttmode) tcgetattr(fd, ttmode)
-# else
-# define _tcgetattr(fd, ttmode) ioctl(fd, TCGETS, (char *)ttmode)
-# endif
+# error
#endif
-#if defined (__FreeBSD__) || defined (__NetBSD__) || defined (__OpenBSD__) ||
defined (__bsdi__) || defined(__APPLE__)
+#if defined(HAVE_TCSETATTR) && defined(TCSANOW)
+# define _tcsetattr(fd, ttmode) tcsetattr(fd, TCSANOW, ttmode)
+#elif defined(TIOCSETA)
# define _tcsetattr(fd, ttmode) ioctl(fd, TIOCSETA, (char *)ttmode)
+#elif defined(TCSETS)
+# define _tcsetattr(fd, ttmode) ioctl(fd, TCSETS, (char *)ttmode)
#else
-# ifdef _HPUX_SOURCE
-# define _tcsetattr(fd, ttmode) tcsetattr(fd, TCSANOW, ttmode)
-# else
-# define _tcsetattr(fd, ttmode) ioctl(fd, TCSETS, (char *)ttmode)
-# endif
+# error
#endif
#if defined (_HPUX_SOURCE)
diff -ur kdelibs-3.4.2.old/kinit/kinit.cpp kdelibs-3.4.2/kinit/kinit.cpp
--- kdelibs-3.4.2.old/kinit/kinit.cpp 2005-07-20 11:19:21.0 +0200
+++ kdelibs-3.4.2/kinit/kinit.cpp 2005-08-27 15:15:37.0 +0200
@@
Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency
* Martin Schulze [Sat, 27 Aug 2005 12:05:19 +0200]: > Why the )*(#%$ does a KDE package depend on the exact Debian version > of another KDE package? That should not be the case in the first place. Braindamaged inherited build system. We've are taking care of it in the 3.4 packages. -- Adeodato Simó EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621 From the moment I picked your book up until I put it down I was convulsed with laughter. Some day I intend reading it. -- Groucho Marx
Bug#325292: marked as done (libqt3-mt: breaks dependencies in 462 packages: replaces libqt3c102-mt but doesnot provide libqt3c102-mt)
Your message dated Sat, 27 Aug 2005 08:49:20 -0400 with message-id <[EMAIL PROTECTED]> and subject line Bug#325292: libqt3-mt: breaks dependencies in 462 packages: replaces libqt3c102-mt but doesnot provide libqt3c102-mt has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -- Received: (at submit) by bugs.debian.org; 27 Aug 2005 11:53:52 + >From [EMAIL PROTECTED] Sat Aug 27 04:53:52 2005 Return-path: <[EMAIL PROTECTED]> Received: from smtp10.unit.tiscali.de [213.205.33.46] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1E8zFw-0004CP-00; Sat, 27 Aug 2005 04:53:52 -0700 Received: from smtp10.unit.tiscali.de (213.205.33.46) by smtp10.unit.tiscali.de (7.2.065.1) id 430AE79F0003E8E9; Sat, 27 Aug 2005 13:53:20 +0200 Received: from Sparta.thuis (83.129.36.15) by smtp10.unit.tiscali.de (7.2.065.1) id 430AE7B200059865; Sat, 27 Aug 2005 13:53:20 +0200 Message-ID: <[EMAIL PROTECTED]> (added by [EMAIL PROTECTED]) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Teun van Moorsel <[EMAIL PROTECTED]> To: Debian Bug Tracking System <[EMAIL PROTECTED]> Subject: libqt3-mt: breaks dependencies in 462 packages: replaces libqt3c102-mt but doesnot provide libqt3c102-mt X-Mailer: reportbug 3.16 Date: Sat, 27 Aug 2005 13:54:49 +0200 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 Package: libqt3-mt Severity: critical Justification: breaks unrelated software -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) --- Received: (at 325292-done) by bugs.debian.org; 27 Aug 2005 12:49:53 + >From [EMAIL PROTECTED] Sat Aug 27 05:49:53 2005 Return-path: <[EMAIL PROTECTED]> Received: from ppp-69-215-244-244.dsl.sfldmi.ameritech.net (shuttle.metzlers.org) [69.215.244.244] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1E9089-00032k-00; Sat, 27 Aug 2005 05:49:53 -0700 Received: from localhost (localhost [127.0.0.1]) by shuttle.metzlers.org (Postfix) with ESMTP id 6DCC71ACBC; Sat, 27 Aug 2005 08:49:21 -0400 (EDT) From: Josh Metzler <[EMAIL PROTECTED]> To: Teun van Moorsel <[EMAIL PROTECTED]>, [EMAIL PROTECTED] Subject: Re: Bug#325292: libqt3-mt: breaks dependencies in 462 packages: replaces libqt3c102-mt but doesnot provide libqt3c102-mt Date: Sat, 27 Aug 2005 08:49:20 -0400 User-Agent: KMail/1.7.2 References: <[EMAIL PROTECTED]> (added by [EMAIL PROTECTED]) In-Reply-To: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 On Saturday 27 August 2005 07:54 am, Teun van Moorsel wrote: > Package: libqt3-mt > Severity: critical > Justification: breaks unrelated software This is not really a bug. =A0KDE and qt, along with the rest of unstable is= =20 going through a gcc trasition. =A0KDE in unstable will be unsinstallable fo= r=20 the next couple weeks due to the transition. =A0libqt3-mt cannot provide=20 libqt3c102-mt, since they are not ABI compatible. You should read this e-mail: http://lists.debian.org/debian-kde/2005/08/msg00089.html You have the following options to install KDE and qt: 1) Donwgrade to testing. =A0This is the best option if you are not prepared= to=20 deal with transitions that take place in unstable. 2) Install libqt3c102-mt, arts, kdelibs, kdebase and dependencies from=20 testing, the rest of kde from unstable. 3) Install libqt3-mt from unstable and recompile any depending packages you= =20 need yourself. 4) Wait a couple of weeks until qt's depending packages have made it throug= h=20 the gcc transition. Josh -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "un
Bug#325292: libqt3-mt: breaks dependencies in 462 packages: replaces libqt3c102-mt but doesnot provide libqt3c102-mt
Package: libqt3-mt Severity: critical Justification: breaks unrelated software -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency
Adeodato Simó wrote: > severity 325254 serious > reassign 325254 kdegraphics,security.debian.org > retitle 325254 kdegraphics 3.3.2-2sarge1/powerpc uninstallable because of > dependency on kdelibs4 (>= 4:3.3.2-6.2) > notfound 325254 4:3.3.2-2 > found 325254 4:3.3.2-2sarge1 > thanks > > * Jochen Antesberger [Fri, 26 Aug 2005 19:25:32 -0500]: > > > Package: kdegraphics > > Version: 4:3.3.2-2 > > Severity: important > > > *** Please type your report below this line *** The security updates > > for the kdegraphics packages for Sarge on powerpc cannot be installed > > because they depend on kdelibs4 >= 4:3.3.2-6.2 while only >= > > 4:3.3.2-6.1 is available. ARGS. An advisory for kdelibs is pending but missing the mips build. Why the )*(#%$ does a KDE package depend on the exact Debian version of another KDE package? That should not be the case in the first place. > > I suppose the correct kdelibs4 package needs to be supplied by the > > security servers as well to allow the new packages to be installed and > > the security gap being closed on the powerpc architecture. Will happen "soon". Regards, Joey -- No question is too silly to ask, but, of course, some are too silly to answer. -- Perl book Please always Cc to me when replying to me on the lists.
Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency
severity 325254 serious reassign 325254 kdegraphics,security.debian.org retitle 325254 kdegraphics 3.3.2-2sarge1/powerpc uninstallable because of dependency on kdelibs4 (>= 4:3.3.2-6.2) notfound 325254 4:3.3.2-2 found 325254 4:3.3.2-2sarge1 thanks * Jochen Antesberger [Fri, 26 Aug 2005 19:25:32 -0500]: > Package: kdegraphics > Version: 4:3.3.2-2 > Severity: important > *** Please type your report below this line *** The security updates > for the kdegraphics packages for Sarge on powerpc cannot be installed > because they depend on kdelibs4 >= 4:3.3.2-6.2 while only >= > 4:3.3.2-6.1 is available. > This has been for a few days now and I cannot find any other > references about this problem on the web or news. > I suppose the correct kdelibs4 package needs to be supplied by the > security servers as well to allow the new packages to be installed and > the security gap being closed on the powerpc architecture. > Jochen > -- System Information: > Debian Release: 3.1 > Architecture: powerpc (ppc) > Kernel: Linux 2.4.27-powerpc > Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) > Versions of packages kdegraphics depends on: > ii kamera4:3.3.2-2 digital camera io_slave for > Konque > ii kcoloredit4:3.3.2-2 An editor for palette files > ii kdegraphics-kfile-plugins 4:3.3.2-2 provide meta information for > graph > ii kdvi 4:3.3.2-2 KDE dvi viewer > ii kfax 4:3.3.2-2 KDE G3/G4 Fax Viewer > ii kgamma4:3.3.2-2 Gamma correction KControl module > ii kghostview4:3.3.2-2 PostScript viewer for KDE > ii kiconedit 4:3.3.2-2 An icon editor for creating KDE > ic > ii kmrml 4:3.3.2-2 A Konqueror plugin for searching > p > ii kolourpaint 4:3.3.2-2 A Simple Paint Program for KDE > ii kooka 4:3.3.2-2 Scanner program for KDE > ii kpdf 4:3.3.2-2 PDF viewer for KDE > ii kpovmodeler 4:3.3.2-2 A graphical editor for povray > scen > ii kruler4:3.3.2-2 a screen ruler and color > measureme > ii ksnapshot 4:3.3.2-2 Screenshot application for KDE > ii ksvg 4:3.3.2-2 SVG viewer for KDE > ii kuickshow 4:3.3.2-2 KDE image/slideshow viewer > ii kview 4:3.3.2-2 KDE simple image viewer/converter > ii kviewshell4:3.3.2-2 KDE generic framework for viewer > a > ii libkscan1 4:3.3.2-2 Scanner library for KDE > -- no debconf information -- Adeodato Simó EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621 Proper treatment will cure a cold in seven days, but left to itself, a cold will hang on for a week. -- Darrell Huff -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processed: Re: Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency
Processing commands for [EMAIL PROTECTED]: > severity 325254 serious Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency Severity set to `serious'. > reassign 325254 kdegraphics,security.debian.org Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency Bug reassigned from package `kdegraphics' to `kdegraphics,security.debian.org'. > retitle 325254 kdegraphics 3.3.2-2sarge1/powerpc uninstallable because of > dependency on kdelibs4 (>= 4:3.3.2-6.2) Bug#325254: kdegraphics packages broken on sarge/powerpc because of kdelibs4 dependency Changed Bug title. > notfound 325254 4:3.3.2-2 Bug#325254: kdegraphics 3.3.2-2sarge1/powerpc uninstallable because of dependency on kdelibs4 (>= 4:3.3.2-6.2) Bug marked as not found in version 4:3.3.2-2. > found 325254 4:3.3.2-2sarge1 Bug#325254: kdegraphics 3.3.2-2sarge1/powerpc uninstallable because of dependency on kdelibs4 (>= 4:3.3.2-6.2) Bug marked as found in version 4:3.3.2-2sarge1. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#325269: When the display is locked kopete sets status to "available" after a few seconds
Package: kopete Version: 4:3.3.2-5 Severity: important In kopete the auto away/auto available feature seems to be broken. Enabling the auto away/available on activity feature kopete sets the status to "away" after locking the display (correct) but updates the to "available" a few seconds later (bug) eventhough the display locked. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.10-server Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages kopete depends on: ii kdelibs4 4:3.3.2-6.1 KDE core libraries ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libfam0c1022.7.0-6 client library to control the FAM ii libgadu3 1:1.5+20050411-5 Gadu-Gadu protocol library - runti ii libgcc11:3.4.3-13GCC support library ii libice64.3.0.dfsg.1-14 Inter-Client Exchange library ii libidn11 0.5.13-1.0GNU libidn library, implementation ii libjpeg62 6b-10 The Independent JPEG Group's JPEG ii libpcre3 4.5-1.2 Perl 5 Compatible Regular Expressi ii libpng12-0 1.2.8rel-1PNG library - runtime ii libqt3c102-mt 3:3.3.4-3 Qt GUI Library (Threaded runtime v ii libsm6 4.3.0.dfsg.1-14 X Window System Session Management ii libstdc++5 1:3.3.5-13The GNU Standard C++ Library v3 ii libx11-6 4.3.0.dfsg.1-14 X Window System protocol client li ii libxext6 4.3.0.dfsg.1-14 X Window System miscellaneous exte ii libxml22.6.16-7 GNOME XML library ii libxrender10.8.3-7 X Rendering Extension client libra ii libxslt1.1 1.1.12-8 XSLT processing library - runtime ii xlibs 4.3.0.dfsg.1-14 X Keyboard Extension (XKB) configu ii zlib1g 1:1.2.2-4.sarge.2 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
