Bug#435058: File Your Claim !
-- Fondazione di vitiirio Italy has choosen you among the 40 lucky recepient to receive $500.000.00USD,you are to contact Mrs Maria Carolla with the following Ref:(N-222-6747, E-900- 56).and your personal details such as names and location. Email:[EMAIL PROTECTED] With Regards. Sir Mario Domenico Fondazion Officer -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#407652: ITA: html2ps -- HTML to PostScript converter
Hello Steaphan! Do you still intend to adopt html2ps? If not I am happy to do it. I maintain a number of packages in debian already with the debian-perl team as well as the swedish dictionary package. Please reply if you are interested in packaging html2ps. Warm regards, Jeremiah -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#506310: ITP: python-django-dmigrations -- Simple migrations tool for Django
Package: wnpp Severity: wishlist Owner: Chris Lamb [EMAIL PROTECTED] X-Debbugs-Cc: [EMAIL PROTECTED] * Package name: python-django-dmigrations Version : 0.3.1 Upstream Authors: Simon Willison and Tomasz Wegrzanowski * URL : http://code.google.com/p/dmigrations/ * License : BSD Programming Lang: Python Description : Simple migrations tool for Django dmigrations offers a simple but flexible way of managing changes to the database in your Django projects. It is a replacement for Django's built in syncdb command. With dmigrations, every change to your database (including the creation of your initial tables) is bundled up in a migration. Migrations are Python files that live in a migrations directory and can be applied and un-applied (reverted) in sequence. dmigrations aims to be compatible with workflows involving distributed revision control. This package will eventually obsolete the python-django-evolution package in experimental). Regards, -- ,''`. : :' : Chris Lamb `. `'` [EMAIL PROTECTED] `- signature.asc Description: PGP signature
Bug#349540: #349540 ITP: Jacorb
Hello, just interested: any news on the ITP: for jacorbß thx. -- Noèl Köthe noel debian.org Debian GNU/Linux, www.debian.org signature.asc Description: Dies ist ein digital signierter Nachrichtenteil
Bug#506224: ITP: mpi-defaults -- Meta-packages depending on appropriate MPI -dev and -bin packages for each platform
Hi again, and sorry for causing accidental posts to
[EMAIL PROTECTED] -- I don't know how to do X-Debbugs-CC in
Evolution.
On Thu, 2008-11-20 at 12:35 +0100, Ondrej Certik wrote:
On Thu, Nov 20, 2008 at 11:14 AM, Manuel Prinz [EMAIL PROTECTED] wrote:
Am Mittwoch, den 19.11.2008, 09:05 -0600 schrieb Dirk Eddelbuettel:
I think we should put either debian or mpi first. How about
mpi-default-{dev,bin}
or even
mpi-debian-default-{dev,bin}
to make it even clearer that it is just 'us' (ie Debian) defining a default
for us, rather misconstruing that more than two decades (I'm guessing) of
competing mpi implementations have ended ? ;-)
Good guessing. But I'm confident we can solve that problem in one way or
another in a shorter time frame.
Comments ?
Well, why not debian-default-mpi-{bin,dev}? ;)
Seriously, I do not care that much. A name is a name. If we're lucky,
the package might be gone by release of Squeeze.
I like Dirk's suggestion more:
mpi-default-{dev,bin}
But as you said, a name is just a name.
I like this suggestion, and have just posted the new package for comment
in the alioth debian-science repository:
git://git.debian.org/git/debian-science/packages/mpi-defaults.git
http://git.debian.org/?p=debian-science/packages/mpi-defaults.git;a=summary
It uses the PETSc system, which Build-Depends on an arch-dependent MPI
implementation, then rules uses readlink to determine which one is the
default alternative, and sets substvars appropriately, whether openmpi,
lam, or mpich*. That way, if we want to change the defaults, we just
need to change the Build-Depends in control. In many other ways it
follows the example of java-common.
Also, I made it GPL 2+, and made the copyright in the model of
java-common.
Feedback anyone?
Cheers,
-Adam
--
GPG fingerprint: D54D 1AEE B11C CE9B A02B C5DD 526F 01E8 564E E4B6
Engineering consulting with open source tools
http://www.opennovation.com/
signature.asc
Description: This is a digitally signed message part
Bug#506224: ITP: mpi-defaults -- Meta-packages depending on appropriate MPI -dev and -bin packages for each platform
Am Donnerstag, den 20.11.2008, 09:45 -0500 schrieb Adam C Powell IV: It uses the PETSc system, which Build-Depends on an arch-dependent MPI implementation, then rules uses readlink to determine which one is the default alternative, and sets substvars appropriately, whether openmpi, lam, or mpich*. That way, if we want to change the defaults, we just need to change the Build-Depends in control. In many other ways it follows the example of java-common. Sounds good. Also, I made it GPL 2+, and made the copyright in the model of java-common. I've no strong feelings about that. Feedback anyone? I was just wondering why you depend on debhelper = 3, while compat is set to 5. Souldn't you depend on = 5 then? All other things look good, though I did not test it yet. Thanks for your work! Best regards Manuel signature.asc Description: Dies ist ein digital signierter Nachrichtenteil
Bug#407652: ITA: html2ps -- HTML to PostScript converter
I wish to, yes, but I am not a DD, so I would need a sponsor. If you are a DD, then you would probably be a better choice, since you would also need someone to sponsor your work. Jeremiah C. Foster wrote: Hello Steaphan! Do you still intend to adopt html2ps? If not I am happy to do it. I maintain a number of packages in debian already with the debian-perl team as well as the swedish dictionary package. Please reply if you are interested in packaging html2ps. Warm regards, Jeremiah -- Steaphan Greene [EMAIL PROTECTED] Lecturer, Computer Science, Binghamton University GPG public key: http://www.cs.binghamton.edu/~sgreene/gpg.key.txt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging as pending bugs that are closed by packages in NEW
Processing commands for [EMAIL PROTECTED]: # Thu Nov 20 19:03:08 UTC 2008 # Tagging as pending bugs that are closed by packages in NEW # http://ftp-master.debian.org/new.html # # Source package in NEW: scalemail tags 377089 + pending Bug number 377089 not found. (Is it archived?) # Source package in NEW: scalemail tags 380941 + pending Bug number 380941 not found. (Is it archived?) # Source package in NEW: scalemail tags 378905 + pending Bug number 378905 not found. (Is it archived?) # Source package in NEW: iw tags 499537 + pending Bug#499537: ITP: iw -- tool for configuring Linux wireless devices There were no tags set. Tags added: pending # Source package in NEW: alsa-plugins tags 497636 + pending Bug#497636: [libasound2-plugins] Description doesn't mention pulseaudio plugin There were no tags set. Tags added: pending # Source package in NEW: alsa-plugins tags 436201 + pending Bug#436201: libasound2-plugins: Could we get an ia32 package for amd64? There were no tags set. Tags added: pending # Source package in NEW: eresi tags 434826 + pending Bug#434826: ITP: eresi -- ERESI Reverse Engineering Software Interface There were no tags set. Tags added: pending # Source package in NEW: sagemath tags 455292 + pending Bug#455292: ITP: sagemath -- Mathematics software written in Python There were no tags set. Bug#497177: ITP: sagemath -- Mathematics software written in Python Tags added: pending # Source package in NEW: tstools tags 505304 + pending Bug#505304: ITP: tstools -- set of tools for reporting on and manipulating MPEG data There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#469982: Trivial Garbage package
Hi Barry! On Wed, 19 Nov 2008 05:04:28 +0100, Barry deFreese wrote: Luca Capello wrote: snip I do not like to pollute the debian/ folder with single-line files. Obviously, this is my opinion on this matter, so feel free to follow it or not. Now that I think of it, one advantage of using .docs and .install files is that their content can be automatically parsed, but AFAIK there has not been such a tool yet. I've left them for now. Fine as well. snip You are a DD, thus your Alioth login is now bdefreese [1]. Since Alioth uses the developer SSH keys by default [2], you should already be able to access to Alioth with bdefreese as well. I would prefer to add you as bdefreese, since this is fixed while your -guest account will eventually disappear. Is there any reason I should add you with your old -guest account? OK, I fixed my bdefreese account so that is fine. Though I'm sad to lose all the stuff tied to me for the hurd and games teams to date. :( I added you to the Debian CL team: welcome! Thx, bye, Gismo / Luca pgppQVLex5l1R.pgp Description: PGP signature
Processed: ITP: python-zanshin -- Python module to access caldav servers
Processing commands for [EMAIL PROTECTED]: retitle 503879 ITP: python-zanshin -- Python module to access CalDAV servers Bug#503879: RFP: python-zanshin -- twisted-style caldav library Changed Bug title to `ITP: python-zanshin -- Python module to access CalDAV servers' from `RFP: python-zanshin -- twisted-style caldav library'. owner 503879 [EMAIL PROTECTED] Bug 503879 [wnpp] ITP: python-zanshin -- Python module to access CalDAV servers Owner recorded as [EMAIL PROTECTED] thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#503879: ITP: python-zanshin -- Python module to access caldav servers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 retitle 503879 ITP: python-zanshin -- Python module to access CalDAV servers owner 503879 [EMAIL PROTECTED] thanks Thomas, I have commited an initial version of the packaging for python-zanshin in the Python Modules repository: http://svn.debian.org/viewsvn/python-modules/packages/python-zanshin/trunk/ I'll be uploading it shortly, but in the meantime feel free to give it a look and comment if you see anything you'd like changed. Cheers, Jeremy -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkklySwACgkQ4mJJZqJp2Sd7KgCeOtZ1FATzcZtD5R7s+xYCWnpB 3RoAoIMsSZaZCyQLjsEOaf8NawG7tXD/ =Ar4h -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#506224: ITP: mpi-defaults -- Meta-packages depending on appropriate MPI -dev and -bin packages for each platform
On Thu, 2008-11-20 at 16:48 +0100, Manuel Prinz wrote: Am Donnerstag, den 20.11.2008, 09:45 -0500 schrieb Adam C Powell IV: Feedback anyone? I was just wondering why you depend on debhelper = 3, while compat is set to 5. Souldn't you depend on = 5 then? Not sure. My reasoning was that it doesn't require any capabilities of debhelper 3. But I think you're right, that's inconsistent and should be changed. All other things look good, though I did not test it yet. Thanks for your work! No problem, it was quite simple. -Adam -- GPG fingerprint: D54D 1AEE B11C CE9B A02B C5DD 526F 01E8 564E E4B6 Engineering consulting with open source tools http://www.opennovation.com/ signature.asc Description: This is a digitally signed message part
Bug#491015: Is anyone intends to work on this?
On Mon, 3 Nov 2008, [EMAIL PROTECTED] wrote: Hi, I uploaded 0.10.0-1 to mentors.debian.net some time ago. I am not a developer, so the upload needs to be sponsored. I've just built and checked the package, and it looks OK, except for liblog4cxx10's Conflicts/Replaces (should be moved to the -dev package) and liblog4cxx10-dev's Depends (mising dependancy on libaprutil1-dev and possibly zlib1g-dev, unnecessary dependancy on libxml2-dev - which could be also removed from Build-Depends). I can sponsor the upload if you fix the issues. Regards, robert signature.asc Description: Digital signature
Processed: WNPP bugs maintenance
Processing commands for [EMAIL PROTECTED]: package wnpp Ignoring bugs not assigned to: wnpp severity 475090 normal Bug#475090: ITA: usepackage -- utility to manage environment variables from within dotfiles Bug#495158: ITA: usepackage -- utility to manage environment variables from within dotfiles Severity set to `normal' from `wishlist' severity 502451 wishlist Bug#502451: RFP: megatunix -- MegaTunix is the only tuning software for Unix (and now Win32) class operating systems that supports all existing megasquirt firmwares Severity set to `wishlist' from `normal' tags 451936 - pending Bug#451936: ITP: ttf-ubuntu-title -- The font used to create the Ubuntu logo Tags were: pending Tags removed: pending noowner 503976 Bug 503976 [wnpp] RFP: zfec -- high performance Reed-Solomon erasure coding tool Removed annotation that Bug was owned by zooko [EMAIL PROTECTED]. owner 506224 Adam C Powell IV [EMAIL PROTECTED] Bug 506224 [wnpp] ITP: mpi-defaults -- Meta-packages depending on appropriate MPI -dev and -bin packages for each platform Owner recorded as Adam C Powell IV [EMAIL PROTECTED]. owner 499316 Paul Gevers [EMAIL PROTECTED] Bug 499316 [wnpp] ITA: nedit -- powerful, customizable, Motif based text editor Owner recorded as Paul Gevers [EMAIL PROTECTED]. retitle 506147 RFP: lxsplit -- A command-line files splitter and joiner Bug#506147: RFP: lxsplit - A GPL command-line splitter and joiner for files Changed Bug title to `RFP: lxsplit -- A command-line files splitter and joiner' from `RFP: lxsplit - A GPL command-line splitter and joiner for files'. owner 506112 Luke Faraone [EMAIL PROTECTED] Bug 506112 [wnpp] ITP: libpam-ppp -- PAM module for the PPP system Owner recorded as Luke Faraone [EMAIL PROTECTED]. retitle 499186 ITP: libapache2-mod-auth-sasl -- SASL authentication backend provider for Apache Bug#499186: ITP: libapache2-mod-auth-sasl - SASL authenticatio backend provider for Apache Changed Bug title to `ITP: libapache2-mod-auth-sasl -- SASL authentication backend provider for Apache' from `ITP: libapache2-mod-auth-sasl - SASL authenticatio backend provider for Apache'. owner 506095 [EMAIL PROTECTED] Bug 506095 [wnpp] ITP: tryton -- Enterprise Ressource Planning Owner recorded as [EMAIL PROTECTED] owner 506151 Marcin Owsiany [EMAIL PROTECTED] Bug 506151 [wnpp] ITP: apt-forktracer -- a utility for managing package versions Owner recorded as Marcin Owsiany [EMAIL PROTECTED]. severity 503184 wishlist Bug#503184: RFP: libapache2-mod-auth-shadow -- Apache2 module for authentication using shadow Severity set to `wishlist' from `normal' severity 496737 wishlist Bug#496737: RFP: liboauth -- secure authentication for desktop and web applications Severity set to `wishlist' from `normal' severity 495158 normal Bug#495158: ITA: usepackage -- utility to manage environment variables from within dotfiles Bug#475090: ITA: usepackage -- utility to manage environment variables from within dotfiles Severity set to `normal' from `normal' severity 496787 normal Bug#496787: RFA: gnade -- GNat Ada Database Environment Severity set to `normal' from `wishlist' thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#470365: Time for a RFS ? - Was: Re: mod_auth_cas packaging
Hi Oliver Craig, On Mon, 2008-11-17 at 14:58 +0100, Olivier Berger wrote: Great. I suppose it's a validation to proceed with RFS, then. Michele, can you manage that ? yes. Tomorrow I'll roll out the latest package on my servers and if no issues are spotted I'll proceed with the official RFS. regards, Michele -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#506378: RFP: videoporama -- turn a series of images into a video/DVD slideshow
Package: wnpp Severity: wishlist * Package name: videoporama Version : 0.6.2 Upstream Author : Ponchaut Olivier [EMAIL PROTECTED] * URL : http://users.edpnet.be/opvg/images2dv/index_en.html * License : GPL Programming Lang: Python Description : turn a series of images into a video/DVD slideshow Videoporama is a tool which turns a series of images or photos into a video slideshow. The following options are available: . - transitions between images - support for 4:3 or 16:9 image geometry - display time and transition type can be set for each image - sound support (wav, ogg or MP3) - output in PAL, NTSC or SECAM - support output file formats : Raw dv, AVI type 1 2, MPEG (VCD, SVCD, XVCD DVD) - background image or color Here is a sample (downsampled) video: http://users.edpnet.be/opvg/images2dv/demo_horse.avi -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#495542: Fixing the /tmp usage and a bug in validate PGT()
Hi,
On Tuesday 18 November 2008, Olivier Berger wrote:
FYI, I have prepared another package (available at
http://mentors.debian.net/debian/pool/main/l/libcas-php/libcas-php_1.0.1-2.
dsc)
Ok, let's see.
In order to address the following issues :
On Tue, Nov 18, 2008 at 09:42:29AM +0100, Olivier Berger wrote:
Le lundi 17 novembre 2008 à 15:20 -0600, Raphael Geissert a écrit :
debian/rules:
What about cleaning it up?
Sure.
done
I still see many commented-out lines, why?
dh_installman
dh_link
dh_strip
I don't see neither a manpage around nor a debian/links nor an ELF object.
If they are not used then don't call them.
debian/copyright:
Upstream Author:
Pascal Aubry
What about also displaying his email address?
Sure.
done
The Debian packaging is (C) 2008, Olivier Berger
[EMAIL PROTECTED] and
is licensed under the GPL, see `/usr/share/common-licenses/GPL'.
You should better be more specific and say exactly what version of the licence
you want.
CAS.php:
define(CAS_PGT_STORAGE_FILE_DEFAULT_PATH,'/tmp');
..
define(CAS_PGT_STORAGE_FILE_FORMAT_PLAIN,'plain');
Doesn't look good at all.
Hmmm... I guess that needs to be fixed indeed. Thanks for spotting that.
I have applied a patch in order to use /var/lib/libcas-php/pgtstorage/ and
not /tmp for storage.
I'm not quite convinced that it is a good solution. But let's hold on for a
moment on that problem (read below).
Hope I did it in a safe way.
In addition, I have tested more the proxy mode and fixed a nasty crash that
occurred in validatePGT with the new domxml-php4-to-php5.
Good
Any comments welcome
$ lintian -I -E libcas-php_1.0.1-2.dsc
I: libcas-php source: debian-watch-file-is-missing
And what about the api docs?
From CAS/client.php:
function setPGTStorageDB($user,
...
trigger_error('PGT storage into database is an experim...
If it is not supported then it should be documented and the dependency on
php-db dropped or downgraded to suggests if you insist/think there are
chances for it to be used.
I have not fully reviewed/audited the code, but the code has several
vulnerabilities (symlink attacks, directory traversal, and XSS are those I
have identified).
The symlinks attack can be launched because of predictable file names used and
the default storage directory.
To make things worst, the user's input is not sanitized, so it is possible to
predict the file name where data is going to be written to by passing an
arbitrary pgtIou GET argument. The same lack of sanitization allows an
attacker to either perform XSS or directory traversal attacks by abusing the
callback function in CAS/client.php).
Additionally the functions calling getCallbackURL when proxy mode is enabled
can lead to XSS attacks if the validation request fails. A similar situation
also applies to functions calling getURL.
Tomorrow I'll send this information to bugtraq and will file the corresponding
bug reports against packages shipping phpCAS.
I strongly recommend you and upstream to audit the code.
Best regards,
Cheers,
--
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net
signature.asc
Description: This is a digitally signed message part.
Processed: WNPP bugs maintenance
Processing commands for [EMAIL PROTECTED]: retitle 506147 ITP: lxsplit -- A simple tool for splitting and joining files Bug#506147: RFP: lxsplit -- A command-line files splitter and joiner Changed Bug title to `ITP: lxsplit -- A simple tool for splitting and joining files' from `RFP: lxsplit -- A command-line files splitter and joiner'. forcemerge 450966 506147 Bug#450966: ITP: lxsplit -- A simple tool for splitting and joining files Bug#506147: ITP: lxsplit -- A simple tool for splitting and joining files Forcibly Merged 450966 506147. thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging as pending bugs that are closed by packages in NEW
Processing commands for [EMAIL PROTECTED]: # Fri Nov 21 07:03:07 UTC 2008 # Tagging as pending bugs that are closed by packages in NEW # http://ftp-master.debian.org/new.html # # Source package in NEW: scalemail tags 377089 + pending Bug number 377089 not found. (Is it archived?) # Source package in NEW: scalemail tags 380941 + pending Bug number 380941 not found. (Is it archived?) # Source package in NEW: scalemail tags 378905 + pending Bug number 378905 not found. (Is it archived?) # Source package in NEW: openmoocow tags 505529 + pending Bug#505529: ITP: openmoocow -- Moo box simulator There were no tags set. Tags added: pending # Source package in NEW: python-django-dmigrations tags 506310 + pending Bug#506310: ITP: python-django-dmigrations -- Simple migrations tool for Django There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
