Re: Postinsts barfing when mysqld not running
On ma, 2007-08-20 at 12:48 -0400, Barry deFreese wrote: > I suppose another option would be to prompt the user for 1. Connect to > remote db 2. Use local db 3. Leave unconfigured but that just means > more prompting that we don't like, no? Isn't dbconfig-common meant to handle this? -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: XSB-Url header for Upstream Homepages
On ma, 2007-08-20 at 07:06 +1000, Luke Yelavich wrote: > Users see the homepage in the description. I doubt they will see the > homepage in another X** field. I say leave in description. Tools like gnome-app-install can more easily extract it from an X- field than from the description, making it easier for those tools to display the url in a standard location. -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: XSB-Url header for Upstream Homepages
On zo, 2007-08-19 at 20:37 +0200, Reinhard Tartler wrote: > Hi fellow ubuntu developers, > > in the past, we have been adding Urls to the project homepages to the > package description. ATM, there is a (small) debate if a XSB-Url header > should be invented for this purpose. > > How do you feel about that? The information should already be in debian/copyright, why duplicate it? -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Future of REVU and Debian Mentors
On ma, 2007-07-30 at 15:54 +0200, Reinhard Tartler wrote: > Writing it as django application helps with the following problems: > > * easy setting up (uses internal webserver and sqlite database) Using the internal webserver for production sites is *not* recommended. It's even discouraged :) But it takes only a few lines of apache config to set up with mod_python, here's what I use (on dapper so with django in an odd place) for the pastebin. ServerName paste.ubuntu-nl.org ServerAlias pastebin.ubuntu-nl.org AddDefaultCharset utf-8 SetHandler python-program PythonHandler django.core.handlers.modpython SetEnv DJANGO_SETTINGS_MODULE ubuntu_nl.pastebin_settings PythonPath "['/usr/local/django', '/home/dennis/web', '/usr/local/pygments'] + sys.path" PythonDebug on ErrorLog /var/log/apache2/ubuntu-nl.org_error.log LogLevel warn CustomLog /var/log/apache2/ubuntu-nl.org_access.log combined ServerSignature Off -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Use based meta packages
On ma, 2007-07-02 at 11:46 +0100, Jono Bacon wrote: > There is every possibility I am smoking crack with this idea, but I > wanted to get your feedback before it gets forgotten in the mist. I've proposed it in the past -- didn't get too positive feedback back then, but maybe that changed now. I very much like the idea (see http://mirror3.ubuntulinux.nl/dists/feisty-seveas/seveas-meta ) -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: OpenBox package and Xrandr
On di, 2007-05-15 at 22:12 -0800, Jimmy Mitchener wrote: > The openbox deb is not currently linked against Xrandr, so whenever I > resize my screen I have to restart openbox. If you could link against > it for future builds that would be wonderful. Please filebugs and feature requests at http://bugs.ubuntu.com -- mailing lists are not suitable for tracking things. -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: New Name for Hopefuls?
On wo, 2007-05-16 at 16:07 +0100, Andy Price wrote: > Hi folks > > I was reading the MOTU/NewMentoring wiki page (it's a great idea, BTW) > and it occured to me that "Hopefuls" might not be the best term to use > for new contributors. Thundercats! -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Community Council meeting - March 20 18:00 UTC
Hello everybody, The Ubuntu Community Council will meet again on Tuesday March 20, 18:00 UTC in #ubuntu-meeting on FreeNode. The meeting agenda can be found on https://wiki.ubuntu.com/CommunityCouncilAgenda If you want to add yourself or something you wish to discuss to the agenda, please try and do so before Sunday to give the meeting attendees a chance to prepare. If you have any questions about the council or the process regarding becoming a member, feel free to contact me. If your locoteam wants to be approved, feel free to ask for assistance in #ubuntu-locoteams -- Dennis K. Community Council Secretary signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: call for votes: KDE4 uploads to universe
On wo, 2007-03-14 at 08:31 -0700, George Farris wrote: > 1 month and the the new repository for 7.10 will open and they can go > in there, is that too much to ask. Yes, because feisty+1 will be unstable for a while No, because after release the kde4 packages in feisty can't easily be updated and will be obsolete *very* quickly I'm glad I don't have to make this decision :) -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: zeroinstall-injector
On wo, 2007-01-10 at 22:02 +0100, Gabriel Puliatti wrote: > > imho it's not a solution at all. We work with source and can include > > things in the repositories. I don't think Ubuntu should go and make > > non-opensource programs easier to install. > > Uh. > > $ sudo apt-get install linux-restricted-modules-2.6.17-10-generic Guess which part of Ubuntu I don't neccessarily agree with :) -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: zeroinstall-injector
On wo, 2007-01-10 at 18:59 +, Thomas Leonard wrote: > In other words, Zero Install isn't a complete security system, but > it's a necessary part of a solution. imho it's not a solution at all. We work with source and can include things in the repositories. I don't think Ubuntu should go and make non-opensource programs easier to install. -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: MOTU standard subscriber for bugs in source packages in Universe
On di, 2006-09-19 at 15:44 -0500, Brad Bollenbach wrote: > g) change list configuration to drop bugmail for main. Does mailman actually support filtering on the content of X-Headers? -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: #ubuntu-motu-school Topic
On wo, 2006-08-09 at 20:35 -0500, Brandon Holtsclaw wrote: > Anyone see any objections to this? if not I'll poke him on IRC tonight > about it. I have one: the ical feed does not contain the subject of the classes so it's pretty useless :) -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: motu bot was: Easier MOTUing
On wo, 2006-07-12 at 12:15 +0200, Daniel Holbach wrote: > Hello everybody, > > On Mi, 2006-07-12 at 12:10 +0200, Reinhard Tartler wrote: > > What is the bot supposed to do? Who admins him? > > the idea was to have a bot which can answer frequently asked questions. > This already happens in #ubuntu (Ubotu). Dennis Kaarsemaker was kind > enough to add it to #ubuntu-motu and explain its usage on > https://wiki.ubuntu.com/UbotuUsage > > I think it's a good idea, once we start feeding facts to the bot and we > should just try and see how good it works for us. ubotu has basic access control to prevent people from adding crap - just poke me or anyone in the output of the %moderators command to get added. The wikipage above has more info on that. -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Merges
On ma, 2006-07-03 at 15:41 +0200, Stefan Potyra wrote: > And of course I assume, that Dennis test-builded each ;) s/each/most/ -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Merges
On ma, 2006-07-03 at 14:39 +0200, Stefan Potyra wrote: > > aclock.app, agenda.app, camera.app, cddb.bundle, cenon.app, charmap.app, > > connect.app, cynthiune.app, displaycalibrator.app, easydiff.app, > > edenmath.app, gnuwash.app, gomoku.app, latex.service, lusernet.app, > > meta-gnustep, mines.app, mpdcon.app, plopfolio.app, poe.app, > > preview.app, price.app, projectcenter.app, rssreader.app, shisen.app, > > stepbill.app, stepulator.app, textedit.app, timemon.app, > > wrapperfactory.app, zipper.app: > > > > Only ubuntu changes were a gnustep transition, these changes are also > > present in the latest Debian package. > > Yes, I'll remember that transition well. I'm fine with these (and just about > filing sync bugs...) btw.: it would be great, if you could file these bugs > yourself, then a MOTU only needs to give ok. If you want to file some bugs > right now, you can start from z->a (I'm just filing from a->z, then we can > meet in the middle ;)) Will do, but beware: there is one gnustep pacakge (which of course is not in this list) that needs a merge instead of a sync. > > preload: > > > > Ubuntu change was a fix in the postinst, this change is also present in > > the latest debian version. > > > > read-edid: > > > > Ubuntu changes are merged in the Debian package > > > > sffview: > > > > Ubuntu changes also present in debian package > > Maybe s.o. else can look over these? What more information do you need? The changes are all included, I checked it :) -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Merges
Hi MOTU, I've investigated a few outstanding merges, and there are quite a few that can simply be synced (see below), can someone request a sync? I also want to do some real merges, can someone sponsor them for me? aclock.app, agenda.app, camera.app, cddb.bundle, cenon.app, charmap.app, connect.app, cynthiune.app, displaycalibrator.app, easydiff.app, edenmath.app, gnuwash.app, gomoku.app, latex.service, lusernet.app, meta-gnustep, mines.app, mpdcon.app, plopfolio.app, poe.app, preview.app, price.app, projectcenter.app, rssreader.app, shisen.app, stepbill.app, stepulator.app, textedit.app, timemon.app, wrapperfactory.app, zipper.app: Only ubuntu changes were a gnustep transition, these changes are also present in the latest Debian package. preload: Ubuntu change was a fix in the postinst, this change is also present in the latest debian version. read-edid: Ubuntu changes are merged in the Debian package sffview: Ubuntu changes also present in debian package -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Ubuntu Welcome Center
On do, 2006-05-11 at 21:36 +0800, Joel Bryan T. Juliano wrote: > Haller, > > just want to Please STOP mailing these things to all the mailing lists... -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: UNMETDEPS
On ma, 2006-05-08 at 14:19 +0200, Reinhard Tartler wrote: > If you spot any other packages which are still affected, please file a > bug and don't hesitate to subscribe or straight assign that bug to me > so that it gets my attention. At your service ;) https://launchpad.net/bugs/43600 -- Dennis K. Time is an illusion, lunchtime doubly so. signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: It's the HUG DAY!
On wo, 2006-03-29 at 17:56 +0200, Daniel Holbach wrote: > In addition to that we added [2] - a page where you can list your most > annoying bugs. Fixing these bugs will give extra points and extra hugs > of course. If you really need a hug, just hug the h^Hbugbot. At pitti's request he now hugs back :) -- Dennis K. - Linux for human beings - http://www.ubuntu.com - Linux voor iedereen - http://www.ubuntu-nl.org signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Change of UVF exceptions process
On di, 2006-02-28 at 00:48 +0100, Daniel Holbach wrote: > > If you want to get UVF exception for something, please > * file a bug > * stating the reason why (other bugs it fixes, etc) > * attach diffstat, changelog and build-/install-log (as files) > * assign it to 'motu-uvf' I sent a few messages earlier this week requesting syncs/UVF exceptions for nut (package is unusable in Dapper, debian maintainer uploaded fixes to debian already) and graphmonkey (cleaning up by debian maintainer). No one actually responded yet - should I file bugs for these too? -- Dennis K. - Linux for human beings - http://www.ubuntu.com - Linux voor normale mensen - htp://www.ubuntu-nl.org signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
[Fwd: UVF Exception Request: Graphmonkey]
Forwarded Message > From: Benjamin Seidenberg <[EMAIL PROTECTED]> > Date: Mon, 27 Feb 2006 17:58:09 -0500 > (Please CC me for any followups, I don't subscribe to the list, this > mail is being forwarded for me). > > I'm the Debian Maintainer The upstream release of graphmonkey 1.3 was > quite braindead. There are three copies of the binary in the upstream > tarball and the make system is quite screwed, as well as other issues. > The situation is much better in 1.5 because I bugged upstream (though > still not perfect). Can the Debian package 1.5-2 be shipped instead? > Otherwise, I think I'd perfer to see graphmonkey not shipped at all. > If 1.3 is shipped, please remove me from the maintainer field (though > I doubt this is neccessary). > > Thanks, > Benjamin Seidenberg -- Dennis K. - Linux for human beings - http://www.ubuntu.com - Linux voor normale mensen - htp://www.ubuntu-nl.org signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
[CAN-2006-0579] Heap overflow in mplayer
Summary
A potential buffer overflow was found in the ASF demuxer, and further
analysis showed that the bug was in some more generic code in demuxer.h,
used to create and resize buffers. You can read the original bug report
here media-video/mplayer ASF File Parsing Integer Overflow
(CAN-2006-0579) on Gentoo Bugzilla.
Severity
High (arbitrary remote code execution under the user ID running the
player) when streaming an ASF file from a malicious server, medium
(local code execution under the user ID running the player) if you play
a malicious ASF file locally. At the time the buffer overflow was fixed
there was no known exploit.
A debdiff for a breezy-security upload is attached.
--
Dennis K.
- Linux for human beings: http://www.ubuntu.com
- Linux voor iedereen:http://www.ubuntu-nl.org
diff -u mplayer-1.0-pre7cvs20050716/debian/patches/00list mplayer-1.0-pre7cvs20050716/debian/patches/00list
--- mplayer-1.0-pre7cvs20050716/debian/patches/00list
+++ mplayer-1.0-pre7cvs20050716/debian/patches/00list
@@ -5,0 +6 @@
+57_demuxer_heap_overflow
diff -u mplayer-1.0-pre7cvs20050716/debian/changelog mplayer-1.0-pre7cvs20050716/debian/changelog
--- mplayer-1.0-pre7cvs20050716/debian/changelog
+++ mplayer-1.0-pre7cvs20050716/debian/changelog
@@ -1,3 +1,10 @@
+mplayer (1:1.0-pre7cvs20050716-0.1ubuntu9.1) breezy; urgency=low
+
+ * debian/patches/57_demuxer_heap_overflow.dpatch:
+- CAN-2006-0579: heap overflow in mplayer demuxer routines
+
+ -- Dennis Kaarsemaker <[EMAIL PROTECTED]> Sun, 26 Feb 2006 00:02:54 +0100
+
mplayer (1:1.0-pre7cvs20050716-0.1ubuntu9) breezy; urgency=low
* Install codecs.conf
only in patch2:
unchanged:
--- mplayer-1.0-pre7cvs20050716.orig/debian/patches/57_demuxer_heap_overflow.dpatch
+++ mplayer-1.0-pre7cvs20050716/debian/patches/57_demuxer_heap_overflow.dpatch
@@ -0,0 +1,58 @@
+#! /bin/sh -e
+
+if [ $# -ne 1 ]; then
+echo >&2 "`basename $0`: script expects -patch|-unpatch as argument"
+exit 1
+fi
+case "$1" in
+ -patch) patch -f --no-backup-if-mismatch -p1 < $0;;
+ -unpatch) patch -f --no-backup-if-mismatch -R -p1 < $0;;
+*)
+echo >&2 "`basename $0`: script expects -patch|-unpatch as argument"
+exit 1;;
+esac
+exit 0
+
+Index: libmpdemux/demuxer.h
+===
+RCS file: /cvsroot/mplayer/main/libmpdemux/demuxer.h,v
+retrieving revision 1.87
+retrieving revision 1.90
+diff -u -r1.87 -r1.90
+--- Mplayer-1.0pre7try2/libmpdemux/demuxer.h 9 Feb 2006 19:39:51 - 1.87
Mplayer-1.0pre7try3/libmpdemux/demuxer.h 12 Feb 2006 17:01:30 - 1.90
+@@ -190,17 +190,19 @@
+ dp->flags=0;
+ dp->refcount=1;
+ dp->master=NULL;
+- dp->buffer=len?(unsigned char*)malloc(len+8):NULL;
+- if(len) memset(dp->buffer+len,0,8);
++ dp->buffer=NULL;
++ if (len > 0 && (dp->buffer = (unsigned char *)malloc(len + 8)))
++memset(dp->buffer + len, 0, 8);
++ else
++dp->len = 0;
+ return dp;
+ }
+
+ inline static void resize_demux_packet(demux_packet_t* dp, int len)
+ {
+- if(len)
++ if(len > 0)
+ {
+ dp->buffer=(unsigned char *)realloc(dp->buffer,len+8);
+- memset(dp->buffer+len,0,8);
+ }
+ else
+ {
+@@ -208,6 +210,10 @@
+ dp->buffer=NULL;
+ }
+ dp->len=len;
++ if (dp->buffer)
++ memset(dp->buffer + len, 0, 8);
++ else
++ dp->len = 0;
+ }
+
+ inline static demux_packet_t* clone_demux_packet(demux_packet_t* pack){
signature.asc
Description: This is a digitally signed message part
--
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: [Bug 6585] Hotplug dependency in nut-usb package
On do, 2006-02-23 at 15:59 +0100, Dennis Kaarsemaker wrote: > Nut should be synced from debian again to solve 2 quite serious bugs. In > its current state nut is not usable on Dapper. > > http://launchpad.net/bugs/6585 > http://launchpad.net/bugs/32113 A new version was uploaded to debian today, fixing #6679 -- Dennis K. - Linux for human beings: http://www.ubuntu.com - Linux voor iedereen:http://www.ubuntu-nl.org signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: [Bug 6585] Hotplug dependency in nut-usb package
On do, 2006-02-23 at 15:39 +0100, Arnaud Quette wrote: > > If you are interested in solving this bug for Ubuntu, > > you could request an UpstreamVersionFreeze exception and a sync on > > ubuntu-motu@lists.ubuntu.com (I informally requested it on IRC, but > > that's no guarantee). > > I'm interested in, but don't have much time (seen my [very incomplete] sig ;-) > would you be kind enough to relay my request for the moment, as I > suppose ubuntu-motu is moderated! I'll check later on for Ubuntu and > other membership... > > Note that a 2.0.3-2 will have to go out for (at least) the /var/run > bug (logged in lp) and the nut-cgi removing nut user... Ok, simply CC-ing this to ubuntu-motu Nut should be synced from debian again to solve 2 quite serious bugs. In its current state nut is not usable on Dapper. http://launchpad.net/bugs/6585 http://launchpad.net/bugs/32113 -- Dennis K. - Linux for human beings: http://www.ubuntu.com - Linux voor iedereen:http://www.ubuntu-nl.org signature.asc Description: This is a digitally signed message part -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
Re: Managing Divergence
On za, 2005-12-31 at 07:42 +1100, Matthew Palmer wrote:
> On Fri, Dec 30, 2005 at 07:17:08PM +, Martin Meredith wrote:
> > But still - I dont think that utnubu are doing their jobs about getting
> > our packages from ubuntu into debian ... which I hope to work on :D
>
> Is there an automatically-rebuilt list somewhere of all of the packages that
> are in Ubuntu that don't exist in Debian yet?
grep '^\(Package\|Version\)' /var/lib/dpkg/available | grep -B1 0ubuntu
(Assuming a Dapper system with {Un,Mult}iverse enabled)
--
Dennis K.
- Linux for human beings: http://www.ubuntu.com
- Linux voor iedereen:http://www.ubuntu-nl.org
signature.asc
Description: This is a digitally signed message part
--
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-motu
