Bug#310803: bzip2: CAN-2005-1260 decompression bomb vulnerability

2005-05-26 Thread Geoff Crompton
Package: bzip2 Version: 1.0.2-6 Severity: critical Justification: breaks the whole system See http://www.securityfocus.com/bid/13657 for more info. Quoting from MDKSA-2005:091 A vulnerability was found where specially crafted bzip2 archives would cause an infinite loop in the decompressor,

Bug#307240: gallery bug #307240

2005-05-26 Thread Guilherme de S. Pastore
package gallery submitter 307240 ! thanks Please, ignore the translation previously submitted, as it has several absurd mistakes, that totally change the meaning of the messages. I must ask you that you please use the attached translation instead. In behalf of the Debian-BR Localization Team,

Bug#309606: [ia64] FTBFS: testsuite failure

2005-05-26 Thread Steve Langasek
tags 309606 patch thanks The attached patch fixes this alignment error on ia64. I've prepared a 0-day NMU for this issue, which must be fixed before pcre3 4.5-1.2 can be installed in testing to fix RC bug #308997, and will be uploading shortly to unstable. Thanks, -- Steve Langasek postmodern

Bug#310757: There are file systems without POSIX semantics

2005-05-26 Thread gary ng
Forgive me ignorance. Would the same situation happens in say SMB/CIFS ? To the server, the authentication would still be whoever mount it from the client side. I don't think this is a bug(if it is at all) worth RC status. __ Do you Yahoo!?

Bug#310804: kernel-source-2.6.8: CAN-2005-0356 RFC1323 spec DoS

2005-05-26 Thread Geoff Crompton
Package: kernel-source-2.6.8 Version: 2.6.8-15 Severity: important See http://www.securityfocus.com/bid/13676 for more information. In short, a DoS exists when a machine uses PAWS (Protection Against Wrapped Sequence Numbers). Quoting from securityfocus: The issue manifests if an attacker

Bug#307237: mailagent bug #307237

2005-05-26 Thread Guilherme de S. Pastore
package mailagent reopen 307237 ! severity 307237 important thanks Hello, there! I'm sorry for this, but the previously submitted translation has several absurd mistakes, that totally change the meaning of the messages, misleading the user (i.e. making them type something they don't want to).

Bug#307147: #307147 has been fixed since fai 2.8.1 - the bug is open to track the workaround

2005-05-26 Thread Holger Levsen
Hi, from the fai 2.8.1 changelog: * FAIBASE/10-misc: do not call tune2fs when using 2.6 kernel. This may hang the system This is fix or better workaround for a kernel bug. So I opened #307147, to track that kernel bug, so that we won't forget to remove that workaround from fai, once

Bug#273180: reproducible

2005-05-26 Thread Eduard Bloch
Hello, this or a similar problem is reproducible for me. I just need to run xscreensaver-demo and run the preview 1-3 times. At some point, after exiting the preview, the GUI freezes (not refreshing any more) and ps shows me a zombie process of the recently started screensaver. The suspicious

Bug#310805: gnupg: fully exportable armored homedir is completely impossible now!

2005-05-26 Thread gambarimasu+reportbug
Package: gnupg Version: 1.4.1-1 Severity: important i hope this will make sense to you. please ask if it does not. this is REALLY important to some people. over the years gpg has gotten harder and harder to script properly(1), and what used to work no longer works(2). the big issue is that

Bug#310645: drscheme

2005-05-26 Thread Andrew Donnellan
How confused am I? drscheme only confilicts with old versions of mzscheme. But what's the reason? Is it needed because you have to remove old mzscheme packages first, then install a new mzscheme, then install drscheme? Andrew

Bug#310722: acknowledged by developer (Re: Bug#310722: udev does not cause snd-pcm-oss to be loaded (for /dev/dsp) without seperate administrator action)

2005-05-26 Thread Roland Turner (Debian)
Whether or not this workaround is a simple administrative action does not make it a non-bug. In order to fix the problem I had to work out that You should have read README.Debian instead, or just installed alsa-base which does everything needed to load snd-pcm-oss. Apologies for not being

Bug#310759: store grub backup file under /var/backup

2005-05-26 Thread martin f krafft
also sprach Erich Schubert [EMAIL PROTECTED] [2005.05.26.0304 +0200]: Please provide a reasoning for your report. /var/backup is the place for backups. I prefer the menu backup file to be left in /boot/grub, for the simple reason that its not a typical backup, but will be restored upon

Bug#309357: Fixed?

2005-05-26 Thread Andrew Donnellan
Is 309357 fixed or not? If so, what versions of apt and aptitude are fixed? (apt 0.5.28.6 and aptitude 0.2.15.9-2?) Put a workaround in the release notes. Andrew Donnellan -- Heritage Linux Group http://www.heritagelinux.tk

Bug#310678: AW: Bug#310678 acknowledged by developer (Bug#310479: fixed in lvm-common 1.5.19)

2005-05-26 Thread Patrick Caulfield
Michael Setzer wrote: Patrick, I'm not pretty sure if I got you right. After upgrading lvm-common to 1.5.19 the error is still there and my system is still unbootable (same error message as described already). It certainly fixed the problem for the original reporter. Once I'd see the

Bug#310757: There are file systems without POSIX semantics

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 11:12:04PM -0700, gary ng wrote: Forgive me ignorance. Would the same situation happens in say SMB/CIFS ? To the server, the authentication would still be whoever mount it from the client side. I don't think this is a bug(if it is at all) worth RC status. SMB/CIFS

Bug#310757: There are file systems without POSIX semantics

2005-05-26 Thread martin f krafft
also sprach gary ng [EMAIL PROTECTED] [2005.05.26.0812 +0200]: Forgive me ignorance. Would the same situation happens in say SMB/CIFS ? To the server, the authentication would still be whoever mount it from the client side. If I mount a SMB/CIFS share with umask 0700, nobody but myself can

Bug#310805: gnupg: fully exportable armored homedir is completely impossible now!

2005-05-26 Thread t takahashi
severity: normal OK, with some kludging, we can finally get the old kludges to export and import the homedir. However, the following output still occurs, presumably because the key is no longer ultimately trusted, and -q fails to suppress that output, and it is not clear how to do --edit-key in

Bug#310806: afio: enhanced pipe device command line patch

2005-05-26 Thread Gabor Kiss
Package: afio Version: 2.5-3-kissg-1 Severity: wishlist Tags: patch This patch allows variables in '!' prefixed device (i.e. pipe) names. - %V will be replaced with current volume number - %S will be replaced with volume size (in bytes) - %% stands for % itself -- System Information: Debian

Bug#309797: bug #309797 patch_v2

2005-05-26 Thread Eric Dorland
* Oleg Verych ([EMAIL PROTECTED]) wrote: Strange... Didn't notice new gmail's feature with saving drafts, sorry. Patches also are in there: http://flower.upol.cz/~olecom/bugs/m-264912_fpu/patches/ Ok, what does this patch do exactly? Is there an upstream bug with this patch? -- Eric

Bug#75853: Let your child grow with the best software...

2005-05-26 Thread Clementina
Understanding OEM software http://ayri.g5kvjxy9v8g5vzg.gastmjgast6.com Seek not happiness too greedily, and be not fearful of happiness. Whenever I get married I start buying Gourmet Magazine. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble?

Bug#80878: Office XP - $60

2005-05-26 Thread Elijah
Any Software just in under $15-$99, Xp-adobe etc http://inaxnb.7wtma67imh7wmqp.harknihark7.com The first duty of love is to listen. Here's some words of wisdom sprayed painted on a wall in Berkeley: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe.

Bug#70572: 75% Off for All New Software.

2005-05-26 Thread Simon
Photos, drawings, graphics...learn to create them...then share them all... http://gzr.fmjciefqc7f4cgx.japekejape8.com When anger rises, think of the consequences. Publish and be damned! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble?

Bug#67718: Let your child grow with the best software...

2005-05-26 Thread Pius
OS-Adobe-Macromedia etc All under $15-$99 CDS http://rvfcca.pwt4a6p0mzpw4q7.gastmjgast6.com Just think of the tragedy of teaching children not to doubt. The quality, not the longevity, of one's life is what is important. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Bug#45291: Popular software at low low prices.

2005-05-26 Thread Jo
Three steps to the software you need at the prices you want http://mcwl.vkhaycd6a5vkswd.gastmjgast6.com Coincidences are spiritual puns. BEFRIEND, v.t. To make an ingrate. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact

Bug#255276: slapd/slapcat hang in endless loops

2005-05-26 Thread Torsten Landschoff
Hi Steve, On Wed, May 25, 2005 at 05:02:42PM -0700, Steve Langasek wrote: The attached patch adds calling db4.2_recover to slapd.init on every slapd startup. Are there any objections to applying this patch for sarge? I'll apply it with some adaptions. Most prominently it should check for

Bug#155819: For professional documents use professional software...

2005-05-26 Thread Ike
Software taking a bite out of your budget? Try OEM! http://watns.7wbmao704z7emq7.tatnmtat0.com There are two rules for success: 1) Never tell everything you know. One more drink and I'll be under the host. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe.

Bug#155752: Download + CDS all OS and all under $15-$99 just

2005-05-26 Thread Tony
Name-brand software at low, low, low, low prices http://boqnvi.ip4xlz0txsipf1i.diceigdice4.com Nothing fails like success. (Of Jesus): A parish demogogue. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#310807: Installing on NVidia nForce2 based PC

2005-05-26 Thread Martin Leopold
Package: installation-reports Debian-installer-version: RC2/RC3 netinst iso (25. may 2005) uname -a: N/A Date: 25. may. 2005, Method: Booted netinst. image from CD-drive Machine: Homebrew Processor: 1,7 GHz AMD Athlon 2100+ Memory: 512 MB Root Device: IDE Root Size/partition table: N/A Output

Bug#141576: What IS OEM software and why do you care?

2005-05-26 Thread Louis
Learn to build simple and clean websites that can bring in the dough... http://mgdmb.e30thdw7t6eltxw.japekejape8.com Conservatives are not necessarily stupid, but most stupid people are conservatives. Be careful that victories do not carry the seed of future defeats. -- To

Bug#20977: Popular software at low low prices.

2005-05-26 Thread Bod
Let your child grow with the best software... http://foxcpc.krozn1kvzc29z3k.japekejape8.com DRAMATIST, n. One who adapts plays from the French. The palest ink is better than the best memory. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble?

Bug#85088: Photos, drawings, graphics...learn to create them...then share them all...

2005-05-26 Thread Ferdinand
Name-brand software at low, low, low, low prices http://qdj.el0thvw7bowltfw.japekejape8.com The supreme accomplishment is to blur the line between work and play. Those who welcome death have only tried it from the ears up. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Bug#97208: OS-Adobe-Macromedia etc All under $15-$99 CDS

2005-05-26 Thread Jessy
What IS OEM software and why do you care? http://hmya.fmju0exqcpx4cyf.japekejape8.com Great ideas need landing gear as well as wings. Nostalgia isn't what it used to be. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Bug#310793: Perl DB_File data not backwards compatible

2005-05-26 Thread Bill Allombert
retitle 310793 [Release notes] perl DB_File migration from 2.0 to 4.2 thanks On Wed, May 25, 2005 at 07:58:28PM -0600, Jeremy Nickurak wrote: Just went through a woody-sarge update, and pretty much everything went fine, with one exception. I have a perl script that manages some data on this

Bug#94197: Software by the original manufacturerat generic prices

2005-05-26 Thread Philip
Bring on the best software...at the most reasonable prices! http://yaji.ipmxlzitfsipfj0.harknihark7.com Last week, I went to Philadelphia, but it was closed. Golf is a good walk spoiled. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble?

Bug#310808: meld: Meld 0.9.5 requires pygtksourceview

2005-05-26 Thread Andreas Neudecker
Package: meld Version: 0.9.4.1+20050125-4 Severity: normal Meld doesn't display line numbers any more. When opening the settings dialogue (or looking at the Meld homepage at http://meld.sourceforge.net/index.html ) that Meld now requires pygtksourceview for syntax highlighting and displaying

Bug#310809: slapd fails on upgrade 2.1.30 - 2.2.25

2005-05-26 Thread Alastair McKinstry
Package: slapd Version: 2.1.30-3 Severity: serious slapd fails on attempts to upgrade from 2.1.30 to 2.2.25. Looking at the ldif file in backup, 'slapadd' chokes on attribute entries of the form: userCertificate;binary:: The 2.1.30 database was created cleanly using slapadd with ';binary:'

Bug#310801: Failed: mips(el) (cobalt): no aptitude package in woody for mips(el)

2005-05-26 Thread Bill Allombert
retitle 310801 [Release notes] no working aptitude on woody hppa/mips/mipsel thanks On Thu, May 26, 2005 at 04:35:30PM +1200, Ewen McNeill wrote: but it doesn't include aptitude at this stage. It seems to me that either: (a) aptitude should be built for Woody on all Sarge architectures, and

Bug#310790: [Pkg-zope-developers] Bug#310790: awk warning on unpack

2005-05-26 Thread Fabio Tranchitella
Il giorno gio, 26/05/2005 alle 02.32 +0200, martin f krafft ha scritto: Package: zope2.7 Version: 2.7.5-2 Severity: minor Preparing to replace zope2.7 2.7.5-2 (using .../zope2.7_2.7.5-2_i386.deb) ... awk: cmd. line:1: warning: escape sequence `\.' treated as plain `.' Unpacking replacement

Bug#310810: php4-cgi: missing information on about fastcgi support being compiled-in.

2005-05-26 Thread Clement 'nodens' Hermann
Package: php4-cgi Severity: minor Hi, I had to look into the source package to find out that php4-cgi was compiled with fastcgi support. I think it's great, but it should be said in the package description, it would save people time ;) Cheers, -- System Information: Debian Release: 3.1 APT

Bug#310817: tipptrainer: Tipptrainer crashes when selecting a 2nd lesson after finishing the first.

2005-05-26 Thread Andreas Neudecker
Package: tipptrainer Version: 0.6.0-1 Severity: important Hi. Tipptrainer keeps crashing on me when I start a 2nd after finishing a first one. Step-by-step: - Start tipptrainer. - When the dialoge box PinGoS Tipptrainer appears select Lesson - You get a Lesson selection dialogue. Select

Bug#310811: [balsa] Crashes when reading message

2005-05-26 Thread Simon Brandmair
Package: balsa Version: 2.3.0-2sarge1 Severity: normal Balsa crashes when it tries to read a specific message. It is complete reproducible here. Stack trace with gdb: ---Type return to continue, or q return to quit--- Program received signal SIGSEGV, Segmentation fault. [Switching to Thread

Bug#310812: imagemagick: [CAN-2005-1739] infinite loop with crafted XWD files

2005-05-26 Thread Martin Pitt
Package: imagemagick Version: 6:6.0.6.2-2.3 Severity: critical Tags: security patch Justification: breaks unrelated software Hi! Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1739 http://www.ubuntulinux.org/support/documentation/usn/usn-132-1 for details and

Bug#310814: w3-url-e21: URL redirection patch correction

2005-05-26 Thread Thierry Emery
Package: w3-url-e21 Version: 2001.11.08-8 Severity: normal Tags: patch Sorry, my patch for URL redirection (Bug#310453) caused problems in: - `w3-maybe-start-image-download' and `w3-maybe-start-background-image-download' (in package w3-el-e21), which need more than 1 callback argument, -

Bug#310815: gforge: [CAN-2005-0299] path traversal vulnerability

2005-05-26 Thread Martin Pitt
Package: gforge Version: 3.1-31 Severity: grave Tags: security Justification: user security hole Hi! The changelog shows no trace that this is fixed: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0299 http://www.securityfocus.com/bid/12318 However, I did not actually check the

Bug#310816: releaseforge tries to write to /root/.releaseforge for non-root users

2005-05-26 Thread Patrick Cornelissen
Package: releaseforge Version: 0.7.1-4 Severity: grave Justification: renders package unusable Here is what I got when I started releaseforge: [EMAIL PROTECTED]:~$ releaseforge Traceback (most recent call last): File /usr/lib/python2.3/logging/config.py, line 109, in fileConfig h =

Bug#309357: Fixed?

2005-05-26 Thread Bill Allombert
On Thu, May 26, 2005 at 04:48:51PM +1000, Andrew Donnellan wrote: Is 309357 fixed or not? If so, what versions of apt and aptitude are fixed? (apt 0.5.28.6 and aptitude 0.2.15.9-2?) It is fixed in sarge, that not the question. Put a workaround in the release notes. See

Bug#178854: Not wishlist item, this actually stops apt-get from working

2005-05-26 Thread James Youngman
Package: apt Version: 0.5.28.6 Followup-For: Bug #178854 I understand how you could view this as a wishlist item, but the fact is that when a repository returns a 302, the resulting set of downloaded data files is such that it is not possible to upgrade any packages. Here is an example:- #

Bug#310139: kmd: Integer overflow in ELF header parsing

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 02:37:26PM +0100, Roger Leigh wrote: I have done an NMU to rebuild against the new binutils-dev. The changes are as detailed in the diff below. Release Team: please could you approve this for sarge? Yep, approved. Thanks, -- Steve Langasek postmodern programmer

Bug#308458: nagios-plugins: Possibly solution

2005-05-26 Thread Manuel Duran Aguete
Package: nagios-plugins Version: 1.4-6 Followup-For: Bug #308458 I was able to resolve this problem setting line 74 of check_ping.c to setlocale (LC_ALL, C); -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux

Bug#310822: php4-auth-pam: pam_auth.so compiled against wrong PHP version?

2005-05-26 Thread Robert Sander
Package: php4-auth-pam Version: 0.4-7 Severity: grave Justification: renders package unusable Hi! pam_auth.so resides in /usr/lib/php4/20020429-zts and not /usr/lib/php4/20020429 and is obviously compiled against a PHP4 version that is not the standard in Debian. The module cannot be loaded.

Bug#310810: php4-cgi: missing information on about fastcgi support being compiled-in.

2005-05-26 Thread Adam Conrad
Clement 'nodens' Hermann wrote: Package: php4-cgi Severity: minor I had to look into the source package to find out that php4-cgi was compiled with fastcgi support. Actually, just executing the binary with -v would show you that it was compiled with FastCGI support as well, but I agree that

Bug#310820: secvpnmon don't restore connection

2005-05-26 Thread Vladimir Stavrinov
Package: secvpn Version: 2.20 Severity: important After few month of using secvpn without problems, it don't restore connection now. The usual scenario is shown in the log: May 25 23:37:07 den logger: secvpn: testvpn den - fog returns ERROR May 25 23:37:17 den logger: secvpn: stopping vpn from

Bug#310818: remind: rem script expands repeat parameter

2005-05-26 Thread Frederik Juul Christiani
Package: remind Version: 03.00.22-4sarge1 Severity: normal Tags: patch The /usr/bin/rem script lets the shell expand the repeat parameter. The repeat parameter '*rep' is expanded by bash if a suitable match is found. If there is a file matching *7 (ie. foo7), the repeat parameter '*7' will be

Bug#310819: apt-build: Does not stop when --patch file fails

2005-05-26 Thread Tim Phipps
Package: apt-build Version: 0.12.4 Severity: important And --patch-strip doesn't work, you have to use --patch_strip. I've got a patch to utils-linux that enables me to run a diskless system by having /etc/mtab be a symlink to somewhere else. Without the patch some programs don't work since they

Bug#310790: [Pkg-zope-developers] Bug#310790: awk warning on unpack

2005-05-26 Thread martin f krafft
also sprach Fabio Tranchitella [EMAIL PROTECTED] [2005.05.26.1017 +0200]: debian/zope2.7.prerm, here the patch. Thanks! -- .''`. martin f. krafft [EMAIL PROTECTED] : :' :proud Debian developer, admin, user, and author `. `'` `- Debian - when you have better things to do than

Bug#309357: Fixed?

2005-05-26 Thread Andrew Donnellan
Maybe report this as a bug to get actual *attention*. vorlon said it's ok to report release notes bugs against upgrade-reports. After this is all done Bug#309357 should be closed. Andrew On 5/26/05, Bill Allombert [EMAIL PROTECTED] wrote: On Thu, May 26, 2005 at 04:48:51PM +1000, Andrew

Bug#310827: CAN-2005-1290: Multiple cross-site scripting vulnerability

2005-05-26 Thread Martin Pitt
Package: phpbb2 Version: 2.0.13+1-6 Severity: important Tags: security Hi! phpbb2's changelog does not make it clear whether the three issues mentioned in http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1290 are already fixed. Can you please check this? If they are still present,

Bug#310825: gnomemeeting FTBFS with gcc-4.0, failing in pwlib headers

2005-05-26 Thread Matthias Klose
Package: pwlib Severity: wishlist Tags: patch https://bugzilla.ubuntu.com/show_bug.cgi?id=10722 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#310824: w3-url-e21: url-retrieve-synchronously sometimes locks up Emacs

2005-05-26 Thread Thierry Emery
Package: w3-url-e21 Version: 2001.11.08-8 Severity: important Tags: patch `url-retrieve-synchronously' sometimes locks up Emacs (beware: C-g can become ineffective), for instance when retrieving a lot of images (e.g. http://www.free.fr/). This is solved through backporting this function from the

Bug#310826: leafnode logcheck files needs tweaking

2005-05-26 Thread Nikita V. Youshchenko
Package: leafnode Version: 1.11.2.rel-1 Severity: minor After upgrade to leafnode 1.11.2 from some earlier version (probably 1.10.8), I started to receive messages from logcheck with lines like May 26 09:47:01 zigzag fetchnews[26755]: fido7.ru.cd.record: 1 article fetched (to 8254), 0 killed

Bug#310644: zope bugs

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 06:43:43PM +0200, martin f krafft wrote: also sprach Tore Anderson [EMAIL PROTECTED] [2005.05.25.1814 +0200]: Even with this patch applied, I would think the bug would still appear with DEBIAN_FRONTEND=noninteractive, no? Yes, and then we have a problem because

Bug#310805: gnupg: fully exportable armored homedir is completely impossible now!

2005-05-26 Thread t takahashi
another example of unnecessary accessing of homedir is when you want to compress a file. when you do gpg --store, homedir access is unnecessary but gpg tries to access it (perhaps to find preferences?). however, there is no way to turn off its errors or have it simply default.

Bug#310644: zope bugs

2005-05-26 Thread martin f krafft
also sprach Steve Langasek [EMAIL PROTECTED] [2005.05.26.1110 +0200]: Does the package fail to install in this case? That's perfectly reasonable behavior if the user is ignoring critical questions from debconf. The solution for such cases is for the user to either preseed the debconf cache,

Bug#310828: afio: pipes should be like real devices

2005-05-26 Thread Gabor Kiss
Package: afio Version: 2.5-3-kissg-1 Severity: wishlist It would be useful if afio would handle output pipes (archive name prefixed with '!') like real devices. SIGPIPE should not abort the processing if subprocess returns 0 status (success). In this case pipe should be reopened. This way End Of

Bug#310829: Printing fully justified text

2005-05-26 Thread Michael Graham
Package: abiword-gnome Version: 2.2.7-3 Severity: normal If I ask Abiword to fully justify a paragraph of text it displays on screen but when I print or create a PS the text is left justified. Could this be a libgnomeprint bug? See attached for example -- System Information: Debian Release:

Bug#309357: Fixed?

2005-05-26 Thread Bill Allombert
On Thu, May 26, 2005 at 07:13:52PM +1000, Andrew Donnellan wrote: Maybe report this as a bug to get actual *attention*. vorlon said it's I don't understand ? This *is* bug #309357 ! ok to report release notes bugs against upgrade-reports. After this is all done Bug#309357 should be closed.

Bug#310830: tar: FTBFS (amd64/gcc-4.0): static declaration of 'argp_program_version' follows non-static declaration

2005-05-26 Thread Andreas Jochens
Package: tar Version: 1.15.1-1 Severity: normal Tags: patch When building 'tar' on amd64/unstable with gcc-4.0, I get the following error: if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I../lib -I../lib -I../src-O2 -g -Wall -MT genfile.o -MD -MP -MF .deps/genfile.Tpo -c -o genfile.o genfile.c; \ then

Bug#310816: releaseforge tries to write to /root/.releaseforge for non-root users

2005-05-26 Thread Roberto C. Sanchez
pacakge releaseforge tags 310816 + upstream forwarded 310816 [EMAIL PROTECTED] severity 310816 important thanks Cornelis, Thanks for the bug report. I have already been communicating with the upstream author about the ptential problems (like this) that might arise from writing config files on

Bug#310831: [CAN-2005-0837] XSL parser bypass vulnerability

2005-05-26 Thread Martin Pitt
Package: icecast-server Version: 1:1.3.12-11 Severity: important Tags: security Hi! I did not find any trace in the changelog that http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0837 http://www.securityfocus.com/archive/1/393705 is fixed. Version 1.3 might not even be vulnerable,

Bug#310796: type-handling: does not work with dpkg 1.13

2005-05-26 Thread Robert Millan
On Thu, May 26, 2005 at 05:10:41AM +0200, [EMAIL PROTECTED] wrote: Package: type-handling Version: 0.2.10 Severity: normal Tags: experimental I don' know how to deal with that. It is meanly to prevent package which depends on type-handling to use it in experimental (i found out that

Bug#310816: releaseforge tries to write to /root/.releaseforge for non-root users

2005-05-26 Thread Roberto C. Sanchez
On Thu, May 26, 2005 at 11:39:26AM +0200, Patrick Cornelißen wrote: Roberto C. Sanchez schrieb: pacakge releaseforge typo? :-) I am this close - - from swapping the `a' and `k' keys on my keyboard :-) -Roberto -- Roberto C. Sanchez http://familiasanchez.net/~sanchezr signature.asc

Bug#309797: bug #309797 patch_v2

2005-05-26 Thread Oleg Verych
On 5/26/05, Eric Dorland [EMAIL PROTECTED] wrote: * Oleg Verych ([EMAIL PROTECTED]) wrote: Strange... Didn't notice new gmail's feature with saving drafts, sorry. Patches also are in there: http://flower.upol.cz/~olecom/bugs/m-264912_fpu/patches/ Ok, what does this patch do exactly? Is

Bug#308680: MySQL docs not distributable?

2005-05-26 Thread Stefan Hinz
Hi Jeroen, pleased to meet you! Sorry for keeping you waiting with this, but I'm still in the process of sorting this out with our lawyers. I'll let you know as soon as possible. /Stefan Jeroen van Wolffelaar -- Debian FTP wrote: Hi Stefan, hi all, Let me first introduce myself, I'm

Bug#308317: [Bins] Bug#308317: please support customized date strings

2005-05-26 Thread Martin Michlmayr
Hi Jérôme, * Jérôme SAUTRET [EMAIL PROTECTED] [2005-05-24 23:33]: I've tested your patch, it seems to work just fine (I've just corrected a little encoding problem). It is commited and will be included in the next release. Thanks a lot! I wasn't sure whether BINS was still maintained because

Bug#310827: CAN-2005-1290: Multiple cross-site scripting vulnerability

2005-05-26 Thread Thijs Kinkhorst
Hello Martin, Thanks for your report. On Thu, May 26, 2005 11:15, Martin Pitt wrote: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1290 Jeroen, can you check this? I'm currently unable to do that from here. Thanks. Thijs -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Bug#251434: fluxbox bugs: reported fixed by upstream

2005-05-26 Thread Matt Hope
Fluxbox developer Simon Bowden has reported the following bugs as fixed: 251434 ToggleDecor -- works for turning off decor... 220241 epiphany-browser: Fullscreen mode unavailable 223238 stopping sticked applications crashes fluxbox 230800 /usr/bin/bsetroot: xsetroot does *not* honour multiple

Bug#310833: [CAN-2005-1040] local root privilege escalation

2005-05-26 Thread Martin Pitt
Package: netapplet Severity: critical Tags: security, patch Hi Matthew! The changelog does not show any sign that http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1040 is fixed. The CAN entry is pretty empty (just points at the SuSE security announcement), but they posted a patch to

Bug#310832: gnumeric: Gnumeric crashes when opening text configurable space delimited file with see two separators as one set.

2005-05-26 Thread Mika Toivanen
Package: gnumeric Version: 1.5.1-1 Severity: normal Gnumeric crashes when opening a text configurable space delimited file with see two separators as one checkbox set. It crashes immediately after checking the box. If see two separators as one is NOT checked, the import goes on normally.

Bug#310644: zope bugs

2005-05-26 Thread Tore Anderson
* Steve Langasek Does the package fail to install in this case? That's perfectly reasonable behavior if the user is ignoring critical questions from debconf. The solution for such cases is for the user to either preseed the debconf cache, or not expect non-interactive installs to work.

Bug#299588: Segfaults with scollkeeper 0.3.14-10 too

2005-05-26 Thread Thomas Renard
package: scrollkeeper version: 0.3.14-10 scrollkeeper-update -qv segfaulted for me after installing gnome-applets-data with an apt-get upgrade. But after the segfault every scrollkeeper-update broke by segfault. I found a silly fix: because the update worked fine with an empty

Bug#310834: ITP: evolution-groupdav -- GroupDAV connector for Evolution

2005-05-26 Thread Mirco Bauer
Package: wnpp Severity: wishlist * Package name: evolution-groupdav Version : 0.2 Upstream Author : Alvaro del Castillo * URL : http://noodle.yacoi.com/ * License : GPL Description : GroupDAV connector for Evolution Plugin for Evolution that allows to

Bug#310124: Upgrade report woody to sarge on i386: some troubles with german locales

2005-05-26 Thread allomber
clone 310124 -1 reassign -1 fonty retitle -1 fonty: /etc/init.d/console-screen.sh hang when upgrading severity -1 important thanks On Sat, May 21, 2005 at 09:57:20PM +0200, Holger Wansing wrote: - Did any packages fail to upgrade? Fonty. I was asked, if I want to restart

Bug#310827: CAN-2005-1290: Multiple cross-site scripting vulnerability

2005-05-26 Thread Jeroen van Wolffelaar
On Thu, May 26, 2005 at 11:15:07AM +0200, Martin Pitt wrote: Package: phpbb2 Version: 2.0.13+1-6 Severity: important Tags: security Hi! phpbb2's changelog does not make it clear whether the three issues mentioned in http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1290 (1) I

Bug#310703: 'dpkg-reconfigure exim4-config' restarts MTA, but with old config

2005-05-26 Thread Andreas Metzler
tags 310703 pending thanks On 2005-05-25 Joris Mooij [EMAIL PROTECTED] wrote: Package: exim4-config Version: 4.50-4 Severity: normal The command 'dpkg-reconfigure exim4-config' restarts exim4 after asking me for my new configuration (it displays Restarting MTA: exim4). Looking in the logs

Bug#241763: update

2005-05-26 Thread Mirco Bauer
I uploaded mono-debugger packages to http://debian.meebey.net/pkg-mono/mono-debugger maybe they are useful to someone, they only contain the console based (gdb-like) debugger, and doesn't integrate yet with monodevelop, the API is very unstable and changes each day. -- Regards, Mirco 'meebey'

Bug#310837: ITP: libsmartirc4net-cil -- IRC library for CLI (.NET)

2005-05-26 Thread Mirco Bauer
Package: wnpp Severity: wishlist * Package name: libsmartirc4net-cil Version : 0.3.5 Upstream Author : Mirco Bauer [EMAIL PROTECTED] * URL : http://smartirc4net.meebey.net * License : LGPL Description : IRC library for CLI (.NET) SmartIrc4net is a

Bug#310836: ITP: smuxi -- IRC client for advanced users

2005-05-26 Thread Mirco Bauer
Package: wnpp Severity: wishlist * Package name: smuxi Version : 0.5 Upstream Author : Mirco Bauer [EMAIL PROTECTED] * URL : http://smuxi.meebey.net * License : GPL Description : IRC client for advanced users smuxi - Smart MUtipleXed Irc is an IRC client

Bug#310838: [CAN-2005-1177] erroneously changes permissions and ownership of configuration files

2005-05-26 Thread Martin Pitt
Package: webmin Version: 1.180-3 Severity: critical Tags: security Hi! CAN-2005-1177 describes a bug in webmin that can cause the permissions and ownerships of configuration files to be changed when the file is modified. This is fixed in 1.200, see http://www.webmin.com/changes.html Can you

Bug#310644: zope bugs

2005-05-26 Thread martin f krafft
also sprach Tore Anderson [EMAIL PROTECTED] [2005.05.26.1209 +0200]: With regard to this particular bug, I think the default should be not to create an instance like Martin suggested yesterday. Why a package like Zope /insists/ on creating an instance for you is beyond me.. Zope 2.6 is

Bug#159763: fluxbox: restart unmerges tabs (and thus hides windows)

2005-05-26 Thread Matt Hope
[Chris Waters [EMAIL PROTECTED] - 11:21AM Thursday Sep 5]: When I restart fluxbox, windows with merged tabs become windows with separate tabs, all in exactly the same location. This means that the lower windows become effectively invisible and inaccessible (at least until you move the upper

Bug#150841: Probably fixed in the 0.9.6 package

2005-05-26 Thread Matt Hope
[Dave Swegen [EMAIL PROTECTED] - 14:19PM Wednesday Dec 10]: Just installed the unofficial fluxbox 0.9.6 package, and the problem seems to have gone away. Once that version (or a later one) goes into debian proper I'll retest and if it works I'll append a note to this bug. G'day Dave,

Bug#150841: Probably fixed in the 0.9.6 package

2005-05-26 Thread Dave Swegen
On Thu, May 26, 2005 at 08:33:29PM +1000, Matt Hope wrote: [Dave Swegen [EMAIL PROTECTED] - 14:19PM Wednesday Dec 10]: Just installed the unofficial fluxbox 0.9.6 package, and the problem seems to have gone away. Once that version (or a later one) goes into debian proper I'll retest and

Bug#310839: sqwebmail: [CAN-2005-1308] Cross site scripting

2005-05-26 Thread Martin Pitt
Package: sqwebmail Version: 0.47-4 Severity: important sqwebmail seems to be vulnerable against http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1308 http://www.securityfocus.com/bid/13374 Can you please check this? Thanks, Martin -- Martin Pitt http://www.piware.de

Bug#308317: [Bins] Bug#308317: please support customized date strings

2005-05-26 Thread Martin Michlmayr
* Martin Michlmayr [EMAIL PROTECTED] [2005-05-26 10:58]: --- /usr/bin/bins 2005-05-26 10:54:34.782363312 +0100 +++ bins 2005-05-26 10:54:19.663661704 +0100 @@ -506,7 +506,7 @@ date = { Name = _(Date), EXIF = DateTimeOriginal, - Transform = '$_ = strftime

Bug#310750: Conflicts with alsa-base

2005-05-26 Thread Jacobo
No, as Adam correctly stated. In fact, his answer was so correct that I included it in the README FAQ section. OK, I take it as a sensible answer ;-) but still... how about just putting exim4-base into Suggested: or even Recommended: tags? that sounds sensible too. P.S.: Sorry for the

Bug#188982: Frozzen bubble doesn't work properly with Fluxbox

2005-05-26 Thread Matt Hope
[Thomas Petazzoni [EMAIL PROTECTED] - 16:03PM Monday Apr 14]: When I launch frozzen-bubble with the fluxbox Window Manager, the game starts in full screen, but there is a black window that allmost cover all the screen, and that only allow me to view a very very small part of the game screen.

Bug#310644: zope bugs

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 11:18:04AM +0200, martin f krafft wrote: also sprach Steve Langasek [EMAIL PROTECTED] [2005.05.26.1110 +0200]: Does the package fail to install in this case? That's perfectly reasonable behavior if the user is ignoring critical questions from debconf. The solution

Bug#310843: kopete: undefined symbol: PKCS7_content_free

2005-05-26 Thread Dmitry Panov
Package: kopete Version: 4:3.3.2-5 Severity: important Tags: experimental kopete crashes when trying to logon to MSN with the following diagnistics: kdecore (KLibLoader): WARNING: KLibrary: /usr/lib/libkdecore.so.4: undefined symbol: PKCS7_content_free kdecore (KLibLoader): WARNING:

Bug#310842: cacti: Poller silently failing

2005-05-26 Thread Mark Sheppard
Package: cacti Version: 0.8.6c-8 Severity: normal Tags: patch This is kind of a follow up to bug #309194. The fix for that was sufficient for me to get notified about errors that were happening in a cacti installation I've got which monitors a single system. However I just noticed problems with

Bug#310840: [CAN-2005-1454] SQL injection vulnerability in the radius_xlat function

2005-05-26 Thread Martin Pitt
Package: freeradius Version: 1.0.2-3 Severity: grave Tags: security freeradius seems to be vulnerable against an SQL injection: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1454 http://www.securityfocus.com/bid/13540 Thanks in advance for checking, Martin -- Martin Pitt

  1   2   3   4   5   >