Follow-up Comment #3, bug #13381 (project findutils):
Followup - this isn't a denial of updatedb service because updatedb does not
use -follow or -L. However, the problem is significant from a security
perspective in other contexts.
Once again, -L should not be used in security-sensitive envir
Processing commands for [EMAIL PROTECTED]:
> tag 314764 + fixed-in-experimental
Bug#314764: poldi: FTBFS in experimental: Not using -fPIC to build shared lib.
Tags were: experimental
Tags added: fixed-in-experimental
> quit
Stopping processing here.
Please contact me if you need assistance.
Deb
Package: gimp-help
Version: 2+0.8-2
Severity: serious
Tags: patch
When building 'gimp-help' in a clean 'unstable' chroot,
I get the following error:
/bin/sh: ./menus/zh_CN/menus-view-zoom.png: Permission denied
Converting ./menus/zh_CN/menus-view.png
/bin/sh: ./menus/zh_CN/menus-view.png: Permiss
Package: tomcat5
Version: 5.0.30-1
Severity: grave
Tags: experimental
Justification: renders package unusable
After installation, configuring (via /etc/defaults/tomcat5, where I set
up JAVA_HOME) and starting tomcat5, I got the following in log files:
# cat /var/log/tomcat5/catalina_2005-06-20.lo
Alban,
I reinstalled ssh 4.1p1-4 and did etc/init.d/rmnologin
--> No change, I cannot login by ssh.
Unfortunately ssh wasn't the only package to be upgraded the last time.
But today I only installed ssh and the openssh-packages that came with
it.
Peter
--
To UNSUBSCRIBE, email to [EMAIL PROT
Processing commands for [EMAIL PROTECTED]:
> severity 314480 important
Bug#314480: dbus-1 does not start because of segmentation fault
Severity set to `important'.
> ressign 314480 libc6
Unknown command or malformed arguments to command.
> merge 246288 314480
Bug#246288: getgrouplist causes segf
severity 314480 important
ressign 314480 libc6
merge 246288 314480
thanks,
On Thu, Jun 16, 2005 at 05:17:02PM +0200, Christian dare wrote:
> The problem come with nis :
>
> Without nis : no problem with dbus-1
> With nis : segmentation fault in dbus-1
Known libc6 bug :(
Sjoerd
--
A lifetime
On Wed, Jun 08, 2005 at 04:08:52PM +0200, Martin Kos wrote:
> Package: winbind
> Version: 3.0.10-1
> Severity: grave
> After upgrading the server to sarge the access from windows clients to the
> samba server stopped working. all the samba packages have been upgraded
> from 3.0.10-1 to 3.0.14-a. i
Package: ftp.debian.org
Severity: serious
Regards,
Filip
--
If Windows is the answer, I want the problems back!
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
hi steve
> Can you try to re-join the ADS domain using the 3.0.14a version of the
> tools? It's possible that there was a silent file format change between
> 3.0.10 and 3.0.14a that went unnoticed.
i'll try that and see if it helps.
>> i'll see if i can try winbind versions between 3.0.10-1 and
Package: multisync
Version: 0.82-5.1
Severity: grave
Justification: renders package unusable
Upon launching Multisync my two sync pairs (irmc-bt <-> evo2 and
backup <-> evo2) say, respectively:
- Unable to open calendar (the only thing I sync on irmc-bt <-> evo2)
- Unable to open addressbook
Package: libruby1.8
Version: 1.8.2-7
Severity: grave
Tags: security fixed-upstream
Please consider about this issue[1]. This has already been fixed on
upstream CVS r1.4[2][3], however, I don't have certain idea whether I
should treat this issue as a security issue or normal (but grave ;)
bug withi
Your message dated Mon, 20 Jun 2005 12:23:48 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Bug#314639: Bug should be closed
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your r
Package: heimdal
Severity: grave
Tags: security patch
Heimdal contains a remotely exploitable buffer overflow in the getterminaltype()
function. This has been fixed in the new upstream versions 0.6.5 and 0.7.0.
URL: http://www.pdc.kth.se/heimdal/advisory/2005-06-20/
I've extracted the security re
On Sat, 2005-06-18 at 15:29 +0200, [EMAIL PROTECTED] wrote:
> Thi is a followup for your report:
> http://bugs.debian.org/307912
>
> Are you able to reproduce it with latest glibc, libnspr4 and
> evoluton in sid ?
No, it is no longer reproducible with current sid versions of these
packages.
> It
Package: alex
Version: 2.0-3
Severity: serious
When building 'alex' on i386/unstable, I get the following error:
==fptools== /usr/bin/make boot -wr;
in /alex-2.0/alex/templates
--
Package: ipkungfu
Version: 0.5.2-3
Severity: critical
Justification: renders entire system inaccessible
Don't do this:
# apt-get install ipkungfu
Because then you have to do this:
- Grab spare monitor and keyboard
- Lug spare monitor and keyboard across the room/city/state/country
- Crawl into
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> clone 315074 -1
Bug#315074: ipkungfu: Renders system inaccessible
Bug 315074 cloned as bug 315076.
> retitle -1 initscript attempts to source defaults, but sources directory
> inste
Your message dated Mon, 20 Jun 2005 15:22:51 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Resolving bugs due to sarge release
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now you
Your message dated Mon, 20 Jun 2005 15:22:51 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Resolving bugs due to sarge release
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now you
On Mon, Jun 20, 2005 at 09:11:30AM +0200, jmt wrote:
> Other test :
>
> Having a chroot with ia32 libs, I 'apt-get install'-ed geomview (1.8.1-8) and
> its runs ok.
Ah! Sorry, but I skimmed your original bug report too quickly and I
didn't realize that you're on a 64-bit machine.
> I have ha
Package: util-linux
Version: 2.12p-3
Severity: serious
Justification: unknown (FTBFS)
util-linux 2.12p-5 FTBFS on i386 in sid:
cc -c -pipe -O2 -mcpu=i486 -fomit-frame-pointer -I../lib -Wall
-Wmissing-prototypes -Wstrict-prototypes -DNCH=1
-D_FILE_OFFSET_BITS=64 -DSBINDIR=\"/sbin\" -DUSRSBINDIR=
Package: heimdal-servers
Severity: critical
Tags: security
The following is from Secunia advisory SA15718 which may be found at
http://secunia.com/advisories/15718/
DESCRIPTION:
A vulnerability has been reported in Heimdal, which potentially can
be exploited by malicious people to compromise a v
Processing commands for [EMAIL PROTECTED]:
> severity 315071 normal
Bug#315071: logcheck: LogCheck won't start/work
Severity set to `normal'.
> stop
Stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bugs database)
Mon, 20 Jun 2005 12:12:21 +0400,
Paul Romanchenko <[EMAIL PROTECTED]> wrote:
> After installation, configuring (via /etc/defaults/tomcat5, where I set
> up JAVA_HOME) and starting tomcat5, I got the following in log files:
>
> # cat /var/log/tomcat5/catalina_2005-06-20.log
> Using CATALINA_BASE:
As input I used the attached file, here is the full command I used:
[EMAIL PROTECTED]:~/mysources/deb-live$ dfsbuild -c dfs.cfg -w deblive1
Using working directory: /home/elcuco/mysources/deb-live/deblive1
Using library directory: /usr/lib/dfsbuild
Running: cdebootstrap --debug -v -d
unstable /ho
severity 315071 normal
stop
On Mon, 20 Jun 2005, root wrote:
> Package: logcheck
> Version: 1.2.39
> Severity: grave
> Justification: renders package unusable
well it works for most of our users.
also it seems your system has strange choices.
therefor downgrading.
> I have installed logcheck,
Hi,
I use exim4 with mailman. Mailman requires pipes in the /etc/aliases to
work properly. One of the things that you can set on the exim
configuration file is what user and group to run the piped programs.
Here is what I use on my exim4 configuration file:
system_aliases:
debug_print = "R: syst
Your message dated Mon, 20 Jun 2005 17:46:13 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug #307912 - evolution: relocation error: /usr/lib/libnspr4.so
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this i
Your message dated Mon, 20 Jun 2005 12:34:08 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#315036: fixed in gimp-help 2+0.8-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now
Package: sudo
Severity: critical
Tags: security
Version: 1.6.8p7-1.1
Please see attached announcement.
bye,
-christian-
--- Begin Message ---
Sudo version 1.6.8, patchlevel 9 is now available, which fixes a
race condition in Sudo's pathname validation. This is a security
issue.
Summary:
A
Is this bug filed just to keep Xen out of sarge?
The irc snippet shows how to get it out of sarge, but no info on why it needs
to be kept out of sarge.
Now that sarge has been released, could xen be put into testing?
--
Bob Tanner <[EMAIL PROTECTED]> | Phone : (952)943-8700
http://www
I'm kind of out of time to do this test (I'd have to set up a special
machine for it), but here is some supplement information...
Interesting to note on this sample of log entries, real accounts 'greg'
and 'cheryl' are tested, no other 'first name' accounts are. On Jun 14,
a more random first-name
Package: libgphoto2
Severity: grave
Justification: renders package unusable
Hi alltogether,
I just wanted to play with libgphoto2 and tried to rebuild the package,
but came across the following error:
[EMAIL PROTECTED]:/tmp $ apt-get source libgphoto2
Reading Package Lists... Done
Building Depen
Manolo Díaz schrieb:
> If I install grace6 without previously install grace the program exits
> with error, otherwise it works all right.
> If then I purge grace I get the same problem again.
>
> Could you confirm or deny this, please?
You mean
$ aptitude search grace
p grace
Package: wzdftpd
Severity: serious
Justification: no longer builds from source
See the buildlog here:
http://buildd.debian.org/fetch.php?&pkg=wzdftpd&ver=0.5.3-3&arch=ia64&stamp=1119066132&file=log&as=raw
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy
Processing commands for [EMAIL PROTECTED]:
> retitle 315132 wzdftpd: FTBFS
Bug#315132: wzdftpd: FTBFS - postgresql-dev transition
Changed Bug title.
> thanks
Stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bugs
Hello,
I had the same segfault problem yesterday, and I managed to track it down.
I have a "testing" system with the following packages:
ipython 0.6.15-1, python2.3 2.3.5-4, libreadline4 4.3-15
The cause for the segfaults is the following patch:
python2.3 (2.3.5-4) unstable; urgency=low
* Modu
retitle 315132 wzdftpd: FTBFS
thanks
retitling; I don't know that this is caused by the postgres transition,
that's just a theory
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processing commands for [EMAIL PROTECTED]:
> tags 314876 +pending
Bug#314876: ipython: segmentaion fault
Tags were: unreproducible
Tags added: pending
> thanks
Stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bug
Processing commands for [EMAIL PROTECTED]:
> tag 314876 etch
Bug#314876: ipython: segmentaion fault
Tags were: pending unreproducible
Tags added: etch
>
End of message, stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, D
tags 314876 +pending
thanks
* Octavian Cerna wrote:
[...]
> The problem was fixed by an upload of python2.3 (2.3.5-5), with a
> corrected readline patch: "Fix build using gcc-4.0. Rename
> history_length to _history_length."
>
> This bug is fixed in sid, and can be closed when the new python
> en
Processing commands for [EMAIL PROTECTED]:
> retitle 315055 RM: innovation3d -- RoM; orphaned upstream, broken
Bug#315055: please remove innovation3d from Debian (RoM, orphaned upstream,
does not build anymore)
Changed Bug title.
> retitle 315012 RM: nautilus-media -- RoM; superseded by totem
Bu
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> tags 315072 sid
Bug#315072: alex: FTBFS: GenericTemplate.hs:10:1: lexical error
There were no tags set.
Tags added: sid
>
End of message, stopping processing here.
Please contact me
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> reassign 315065 heimdal-servers
Bug#315065: Remotely exploitable buffer overflow in getterminaltype function
Bug reassigned from package `heimdal' to `heimdal-servers'.
>
End of mess
Your message dated Mon, 20 Jun 2005 16:32:43 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#312525: fixed in xmms-jack 0.14-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now y
> Yay, sarge is out. By the time etch comes around these packages will be
> ready for stable.
So, is schooltool *currently* in a releasable state? If you don't think so,
it would be nice to keep it out of testing until it is.
--
Steve Langasek
postmodern programmer
--
To UNSUBSCRIBE, email
Package: aiksaurus
Version: 1.0.1+cvs.2004.03.15+dev-0.12-0.2
Severity: serious
libstdc++2.10-dev won't be available, when gcc-2.96 is removed on
ia64.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Package: tuxtype
Version: 1.0-4
Severity: serious
libstdc++2.10-glibc2.2 won't be available, when gcc-2.96 is removed on
ia64.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> severity 315127 serious
Bug#315127: libgphoto2: FTBFS using dpkg-buildpackage on ppc
Severity set to `serious'.
>
End of message, stopping processing here.
Please contact me if you
Your message dated Mon, 20 Jun 2005 17:17:22 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#314889: fixed in bigloo 2.6f+2.7a-050620-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> severity 315065 critical
Bug#315065: Remotely exploitable buffer overflow in getterminaltype function
Severity set to `critical'.
> merge 315065 315086
Bug#315065: Remotely exploitab
Processing commands for [EMAIL PROTECTED]:
> severity 314813 important
Bug#314813: dfsbuild: can not build a "stable" live cd, the output is: "E:
Unknown suite etch"
Severity set to `important'.
> severity 315154 important
Bug#315154: add etch to /usr/share/cdebootstrap/suites
Severity set to `i
severity 314813 important
severity 315154 important
tag 315154 patch
thanks
bug #314813: downgrade from grave to important since "Justification:
renders package unusable" isn't true. building for stable,unstable
works, while testing doesn't.
#315154: bump severity since the results #314813.
--
Processing commands for [EMAIL PROTECTED]:
> severity 296524 serious
Bug#296524: License problem with debian memtester package
Severity set to `serious'.
>
End of message, stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator
Cesar Mendoza wrote:
> I use exim4 with mailman. Mailman requires pipes in the /etc/aliases to
> work properly. One of the things that you can set on the exim
> configuration file is what user and group to run the piped programs.
yes, but width this config, you can't run multiples piped programs w
On Tue, Feb 22, 2005 at 07:01:58PM -0600, Charles Cazabon wrote:
> Package: memtester
> Version: all
>
> Greetings,
>
> There is a licensing problem with the "memtester" package included in Debian.
> I tried to report this to the package maintainer, but your system reports the
> address is no lon
Processing commands for [EMAIL PROTECTED]:
> severity 314813 grave
Bug#314813: dfsbuild: can not build a "stable" live cd, the output is: "E:
Unknown suite etch"
Severity set to `grave'.
> thanks
Stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system adm
Your message dated Mon, 20 Jun 2005 18:17:16 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#308897: fixed in backup-manager 0.5.8-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is
On Tue, 2005-06-21 at 00:06 +0200, Jeroen van Wolffelaar wrote:
> On Tue, Feb 22, 2005 at 07:01:58PM -0600, Charles Cazabon wrote:
> > Package: memtester
> > Version: all
> >
> > Greetings,
> >
> > There is a licensing problem with the "memtester" package included in
> > Debian.
> > I tried to r
Package: kdevelop3
Version: 4:3.2.0-3
Severity: grave
Justification: causes non-serious data loss
When use New Class feature with qmake based projects, .pro file
is incorrectly modified. For example if i create new class to
files newclass.h and newclass.cpp, pro file will contain:
SOURCES += mai
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> severity 312684 important
Bug#312684: wesnoth crash at startup with no useful message
Severity set to `important'.
>
End of message, stopping processing here.
Please contact me if y
Package: cyrus-sasl2
Severity: serious
Justification: no longer builds from source
cyrus-sasl2 fails to include libpq-fe.h, which causes it to fail to
build:
if /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I..
-I../include -I../lib -I../sasldb -I../include -I/usr/include/mysq
Package: abiword
Severity: serious
Justification: no longer builds from source
abiword fails to build because its build-dependency on
libnautilus2-dev is unsatisfiable:
-> Considering libnautilus2-dev
-> Trying libnautilus2-dev
-> Cannot install libnautilus2-dev; apt errors follow:
Processing commands for [EMAIL PROTECTED]:
> # Automatically generated email from bts, devscripts version 2.8.14
> tags 315178 sid
Bug#315178: FTBFS: Build-depends on libnautilus2-dev instead of
libnautilus-extension-dev
There were no tags set.
Tags added: sid
>
End of message, stopping processi
Hello,
These are the changes I needed to make to get the tomcat5 packages
working:
The first problem seemed to be caused by a missing
commons-logging-api.jar in bin/ so I linked in the
commons-logging-api.jar from /usr/share/java.
After that, tomcat5 started, but applications were failing for la
Included is a list of usernames and corresponding passwords used in an
ssh scan I observed. It indicates to me that it is trying
statistically common (aka dumb) passwords on common usernames; I see
no evidence of an attempt to measure timings to discover valid
accounts.
Justin
Starred accounts a
Hi Justin,
Part of what I'd like to (dis)prove is that they are making a 'second
run' from this or another machine to hit that accounts that it believes
are valid...any chance you could keep your testing up for a while?
Thx,
Greg
On Mon, 2005-20-06 at 23:15 -0400, Justin Pryzby wrote:
> Includ
Package: bogofilter
Version: 0.94.14-2
Severity: serious
Justification: fails to build from source
The most recent version of bogofilter fails to build on all architectures
with the following error:
[...]
debian/rules build
test -f debian/rules
install -p -d -o root -g root -m 755 obj-db obj-t
Josh Partlow wrote:
> Hello,
>
> These are the changes I needed to make to get the tomcat5 packages
> working:
>
[...]
> The index page now displays.
>
> I hope the above is helpful.
This is really helpful - thanks a lot.
I think you are running tomcat5 on a non-free JDK ?
Wolfgang
--
To
Package: gmime2.1
Version: 2.1.15-1
Severity: serious
Tags: sid
Justification: fails to build from source
The most recent version of gmime2.1 fails to build on all architectures
except for i386 and powerpc, due to the addition of various mono-related
build-dependencies:
[...]
Some packages could
71 matches
Mail list logo