Package: ltsp-server-standalone
Version: 5.4.2-5
Severity: grave
Justification: renders package unusable
Running the ltsp-build-client --arch i386
dosen't generate valid client image, thus rendering the ltsp package useless. I
suspect that there is either problem with missing apt commandline param
Processing commands for cont...@bugs.debian.org:
> found 704042 1:1.4.4-3
Bug #704042 {Done: John Paul Adrian Glaubitz }
[mongodb] CVE-2013-1892 -- mongodb: Remote shell access via run method's use of
native_helper
Marked as found in versions mongodb/1:1.4.4-3.
> thanks
Stopping processing here.
Hi Tzafrir
On Thu, Mar 28, 2013 at 09:37:30AM +0200, Tzafrir Cohen wrote:
> On Thu, Mar 28, 2013 at 06:23:32AM +0100, Salvatore Bonaccorso wrote:
> > Package: asterisk
> > Severity: grave
> > Tags: security patch upstream
> >
> > Hi,
> >
> > the following vulnerabilities were published for aster
Processing commands for cont...@bugs.debian.org:
> tags 704174 + security
Bug #704174 {Done: Michael Gilbert } [src:bind9]
CVE-2013-2266
Added tag(s) security.
> found 704174 1:9.7.3.dfsg-1
Bug #704174 {Done: Michael Gilbert } [src:bind9]
CVE-2013-2266
Marked as found in versions bind9/1:9.7.3.d
Your message dated Fri, 29 Mar 2013 01:47:48 +
with message-id
and subject line Bug#704174: fixed in bind9 1:9.8.4.dfsg.P1-6+nmu1
has caused the Debian Bug report #704174,
regarding CVE-2013-2266
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is
Hi,
I've uploaded an nmu fixing these issues. Please see attached patch.
Best wishes,
Mike
bind9.patch
Description: Binary data
Hi,
I can confirm the bug and this patch fixes it.
Basicaly it crashed in cogl_onscreen_add_frame_callback because
macro COGL_TAILQ_REMOVE in cogl_onscreen_remove_frame_callback
incorrectly removed an element from queue and corrupted the queue and
tail pointer.
--- a/cogl/cogl-queue.h
I'm not sure, if this qualifies for a "serious" severity, turning this
into an RC bug.
You can still run VDR as root with "-u root" (or USER=root in
/etc/default/vdr).
CAP_SYS_TIME is required to update the system time with the time from the
DVB broadcasters. This behavior is optional, disab
Thu, 28 Mar 2013 16:52:17 +1100 from Geoff Crompton:
> This time I did take a photo of the screen when it crashes. It's
> unfortunately a little blurry.
The following string is still recognizable:
i915_gem_init_ppgtt+0x93/0x16c [i915]
Looks like something's bad with Intel graphics driver...
---
Processing commands for cont...@bugs.debian.org:
> #request-tracker4 (4.0.7-5) UNSTABLE; urgency=low
> #
> # * Closes: #704107
> #
> limit source request-tracker4
Limiting to bugs with field 'source' containing at least one of
'request-tracker4'
Limit currently set to 'source':'request-tracker4'
Processing commands for cont...@bugs.debian.org:
> fixed 704025 olsrd/0.6.2-2.1
Bug #704025 {Done: Hans-Christoph Steiner } [olsrd] olsrd does
not connect with others on amd64
Marked as fixed in versions olsrd/0.6.2-2.1.
> fixed 704025 olsrd/0.6.3-5.1
Bug #704025 {Done: Hans-Christoph Steiner } [
Your message dated Thu, 28 Mar 2013 15:54:51 -0700
with message-id <5154ca3b.1050...@eds.org>
and subject line close
has caused the Debian Bug report #704025,
regarding olsrd does not connect with others on amd64
to be marked as done.
This means that you claim that the problem has been dealt with.
On 2013-03-25 05:43, Thorsten Glaser wrote:
tags 703852 + pending
thanks
On Sun, 24 Mar 2013, Filipus Klutiero wrote:
The scripts mwenext and mwdisext are supposed to respectively enable and
disable a MediaWiki extension. But this doesn't work anymore on new installs
following
http://anonscm.d
Processing control commands:
> severity -1 wishlist
Bug #704155 [libseccomp-dev] libseccomp-dev - No static library
Severity set to 'wishlist' from 'serious'
--
704155: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704155
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
control: severity -1 wishlist
> The libseccomp-dev package does not include a static library.
That doesn't violate policy.
Best wishes,
Mike
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Your message dated Fri, 29 Mar 2013 08:52:12 +1100
with message-id <201303290852.18001.m...@purcell.id.au>
and subject line Re: Bug#661419: krusader: Crash at start with 'floating point
exception' after update
has caused the Debian Bug report #661419,
regarding krusader: Crash at start with 'float
Sigh... I give up. We should leave 0.6.2-2.1 in wheezy and take our chances
with it.
I personally believe this kind of thing is a violation of the Debian Social
Contract #4 *"Our priorities are our users and free software*" but it seems
most people in Debian think that the policy trumps everythi
Processing commands for cont...@bugs.debian.org:
> notfound 694933 1.2.1.1-2
Bug #694933 {Done: Joachim Breitner } [src:haskell-warp]
haskell-warp: FTBFS: unsatisfiable build-dependency:
libghc-blaze-builder-conduit-dev (<< 0.5)
No longer marked as found in versions haskell-warp/1.2.1.1-2.
> tha
Package: src:bind9
Version: 1:9.8.4.dfsg.P1-6
Severity: grave
http://cxsecurity.com/issue/WLB-2013030255
https://kb.isc.org/article/AA-00879
This bug also affects all programs which use libdns.
Regards,
--
Wolfgang Walter
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
wi
Processing commands for cont...@bugs.debian.org:
> severity 696727 important
Bug #696727 [cheese] cheese does not start with Gtk-Warning
Severity set to 'important' from 'grave'
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
696727: http://bugs.debian.org/cgi-bin
severity 696727 important
thanks
(Downgrading since no evidence that it fails for the majority)
On 28 Mar 2013, at 18:56, Emilio Pozuelo Monfort wrote:
> After that I'd try with another tool
> that doesn't use gstreamer, then we can pinpoint whether this is a gstreamer
> bug
> or not.
Already
Processing commands for cont...@bugs.debian.org:
> severity 703242 important
Bug #703242 [nova] Bugging issue with nova-consoleauth on newest nova build
2012.1.1-15
Severity set to 'important' from 'grave'
>
End of message, stopping processing here.
Please contact me if you need assistance.
--
On 03/28/2013 07:44 PM, Hans-Christoph Steiner wrote:
Its a bad idea to just throw this patch into the ancient version of olsrd
(0.6.2) and hope it works, olsrd has proven itself fragile to changes. We
have a whole testing setup for working with 0.6.3-5 (and soon -6), including
deployed package
On 03/28/2013 03:26 PM, Jonathan Dowland wrote:
> On Thu, Mar 28, 2013 at 10:21:30AM +, Jonathan Dowland wrote:
>> UI ("No device found"). Interesting stuff. I'm going to try splicing some
>> debug statements into the code to see at what point it reaches and whether
>> that helps get any furthe
Processing commands for cont...@bugs.debian.org:
> reopen 704025
Bug #704025 {Done: John Paul Adrian Glaubitz }
[olsrd] olsrd does not connect with others on amd64
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-a
Hey Adrian, I appreciate your willingness to contribute here, but you should
have contacted us before doing an NMU. I'm a co-maintainer of this package
with Roland Stigge, and I was directly working on this problem in the
package's SVN repo. Also, we already have a longstanding unblock request
#6
Your message dated Thu, 28 Mar 2013 18:37:34 +
with message-id
and subject line Bug#704126: Removed package(s) from unstable
has caused the Debian Bug report #704030,
regarding python-bcrypt: CVE-2013-1895: concurrency issue leading to auth bypass
to be marked as done.
This means that you cla
Package: libvirt0
Version: 1.0.2-3
Severity: grave
The lxc support in libvirt mounts the root cgroups within the container.
Per default the guest have the permission needed to move processes out
of it's own cgroup into the root cgroup. This can evade restrictions
imposed by the device cgroup or re
Package: libseccomp-dev
Version: 1.0.1-2
Severity: serious
The libseccomp-dev package does not include a static library.
Bastian
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Fo
Package: vdr
Version: 1.7.28-1
Severity: serious
vdr tries to drop almost all capabilities except of CAP_SYS_TIME,
CAP_SYS_NICE and CAP_NET_RAW. It does this without checking the current
capability set, which may not include any of them[1], and fails hard if this
does not work.
| capget(0x2008052
On 03/28/2013 04:51 PM, Kevin Coyner wrote:
Just saw this and would have to concur. The package has a very small
following and can be removed.
It can probably be replaced with python-passlib, can't it?
Adrian
--
.''`. John Paul Adrian Glaubitz
: :' : Debian Developer - glaub...@debian.org
On Thu, Mar 28, 2013 at 11:52 AM, John Paul Adrian Glaubitz <
glaub...@physik.fu-berlin.de> wrote:
> On 03/28/2013 04:51 PM, Kevin Coyner wrote:
>
>> Just saw this and would have to concur. The package has a very small
>> following and can be removed.
>>
>
> It can probably be replaced with python
Just saw this and would have to concur. The package has a very small
following and can be removed.
Kevin
On Thu, Mar 28, 2013 at 11:12 AM, John Paul Adrian Glaubitz <
glaub...@physik.fu-berlin.de> wrote:
> Hi,
>
> after talking with the release team, the package has now been requested to
> be
Adrian
Many thanks for your work in creating the patch. However, it seems to be
built against version 0.2. The version in the Debian repositories is 0.1-1,
so your patch cannot be directly applied.
I'll work on bringing the package up to date to version 0.2, and then will
apply your patch.
Thank
Greetings, Fellow Debichemists,
> Package: libopenms1
> Version: 1.9.0-2
> Severity: serious
> OpenMS upstream does not provide a stable ABI of libOpenMS. So neither
> the patch to add one nor this package name are appropriate.
I am back to you about this bug. After a few mails exchanged with th
Your message dated Thu, 28 Mar 2013 16:14:18 +0100
with message-id <20130328151418.ga13...@xanadu.blop.info>
and subject line Re: UDD: vcs importer broken since PET moved to alioth
has caused the Debian Bug report #702087,
regarding UDD: vcs importer broken since PET moved to alioth
to be marked as
Hi,
after talking with the release team, the package has now been requested
to be removed, see [1].
Adrian
> [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704126
--
.''`. John Paul Adrian Glaubitz
: :' : Debian Developer - glaub...@debian.org
`. `' Freie Universitaet Berlin - gla
Your message dated Thu, 28 Mar 2013 14:48:41 +
with message-id
and subject line Bug#704025: fixed in olsrd 0.6.3-5.1
has caused the Debian Bug report #704025,
regarding olsrd does not connect with others on amd64
to be marked as done.
This means that you claim that the problem has been dealt
On Thu, Mar 28, 2013 at 10:21:30AM +, Jonathan Dowland wrote:
> UI ("No device found"). Interesting stuff. I'm going to try splicing some
> debug statements into the code to see at what point it reaches and whether
> that helps get any further.
I've poked around a little, attached is a backtra
Processing commands for cont...@bugs.debian.org:
> found 704025 0.6.3-5
Bug #704025 {Done: John Paul Adrian Glaubitz }
[olsrd] olsrd does not connect with others on amd64
Marked as found in versions olsrd/0.6.3-5 and reopened.
> thanks
Stopping processing here.
Please contact me if you need assi
found 704025 0.6.3-5
thanks
According to the discussion [1], the version in unstable is affected as
well. Therefore tagging the bug report as such.
I just did the NMU for testing, would also do it for unstable by
packaging upstream 0.6.4 if no one steps up.
Will file an unblock request now
Package: cheese
Version: 3.4.2-2
Followup-For: Bug #696727
I didn’t use Cheese before, but to test this bug I installed cheese
from wheezy on my machine (which is running mostly experimental GNOME),
and it segfaults. A full gdb stacktrace is attached.
--
Dmitry Shachnev
-- System Information:
De
Your message dated Thu, 28 Mar 2013 13:47:59 +
with message-id
and subject line Bug#704025: fixed in olsrd 0.6.2-2.1
has caused the Debian Bug report #704025,
regarding olsrd does not connect with others on amd64
to be marked as done.
This means that you claim that the problem has been dealt
Hi Mattia,
Mattia Dongili writes:
> I don't see a valid reason to get a newer version in wheezy at this
> stage of the freeze.
I agree.
Adam, here is the diffstat between the version currently in wheezy
(upstream git commit f07ee8aa562b7cee0138a88219169f501fd9c041) and the
version which is in th
Your message dated Thu, 28 Mar 2013 11:34:57 +
with message-id
and subject line Bug#703919: fixed in kvpm 0.8.6-2+deb7u1
has caused the Debian Bug report #703919,
regarding kvpm: When moving a disk partition, if another partition is mounted
the data being moved may become corrupted.
to be mar
Your message dated Thu, 28 Mar 2013 11:17:29 +
with message-id
and subject line Bug#702965: fixed in procps 1:3.3.3-3
has caused the Debian Bug report #702965,
regarding procps: ps dies with SIGSEGV on kernels > 3.2.29 and lots of
supplementary groups
to be marked as done.
This means that yo
Control: reassign -1 dkms
Control: forcemerge 690747 -1
Control: affects 690747 ndiswrapper-dkms
On Thu, Mar 28, 2013 at 10:35:04AM +0100, Patrick Matthäi wrote:
> Package: ndiswrapper-dkms
> Version: 1.57-1
> Severity: serious
> Tags: patch
>
> Hi,
>
> the module fails to build with dkms, becau
Your message dated Thu, 28 Mar 2013 11:17:29 +
with message-id
and subject line Bug#702965: fixed in procps 1:3.3.3-3
has caused the Debian Bug report #702965,
regarding procps: Signal 11 (SEGV) caught by ps (procps-ng version 3.3.3).
ps:display.c:59: please report
to be marked as done.
This
Processing commands for cont...@bugs.debian.org:
> # as per maintainer
> fixed 702965 1:3.3.4-1
Bug #702965 {Done: Craig Small } [procps] procps: ps dies
with SIGSEGV on kernels > 3.2.29 and lots of supplementary groups
Bug #704041 {Done: Craig Small } [procps] procps: Signal 11
(SEGV) caught by
Processing control commands:
> reassign -1 dkms
Bug #704122 [ndiswrapper-dkms] ndiswrapper-dkms: Fails to build module because
of missing BUILT_MODULE_NAME
Bug reassigned from package 'ndiswrapper-dkms' to 'dkms'.
No longer marked as found in versions ndiswrapper/1.57-1.
Ignoring request to alter
Package: procps
Version: 1%3.3.4-1
Upstream commit at
https://www.gitorious.org/procps/procps/commit/7933435584aa1fd75460f4c7715a3d4855d97c1c
fixed this which appeared in upstream version 3.3.4.
- Craig
--
Craig Small VK2XLZ http://enc.com.au/ csmall at : enc.com.au
Debian GNU/Linux
Your message dated Thu, 28 Mar 2013 11:03:16 +
with message-id
and subject line Bug#703444: fixed in ecere-sdk 0.44.06-1
has caused the Debian Bug report #703444,
regarding ecere-sdk: Must build-dep on and use libgif-dev instead of included
libungif
to be marked as done.
This means that you
I've just noticed that cheese is busy looping and mallocing whilst it's
seemingly doing nothing:
> PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND
>
> 18958 jon 20 0 7513m 6.2g 3236 R 92.1 80.0 20:03.57 cheese
>
--
To UNSUBSCRIBE, email t
On Wed, Mar 27, 2013 at 01:14:53PM +0100, Thorsten Glaser wrote:
> > Can you run strace on it? It looks like libproc doesn't like something
> > found in the kernel /proc filesystem but strace will tell us which one.
>
> typescript attached.
Thanks for that trace and the report. Just in case you d
On Thu, Mar 28, 2013 at 11:13:34AM +0100, John Paul Adrian Glaubitz wrote:
> How about unloading the kernel module then? I guess it's probably an
> UVC camera, so modprobe -r uvcvideo should do the trick for most
> cameras (as most of them are UVC).
Thanks for the tip. It is indeed uvcvideo, and u
On 03/28/2013 09:55 AM, Jonathan Dowland wrote:
On 27 Mar 2013, at 23:41, John Paul Adrian Glaubitz
wrote:
could anyone who is seeing the issue with Cheese freezing try to disconnect
their webcam
In my case I don't think so- it's built into the frame of my laptop screen.
How about unload
Package: virtualbox-ose
Version: 3.2.10-dfsg-1+squeeze1
Severity: grave
Tags: upstream
Justification: causes non-serious data loss
hi,
After i installed virtualbox in squeeze,it has comflict with the NVIDIA
drivers(Version304.43), some links are broken!
when i click some links lik
Processing control commands:
> severity -1 important
Bug #455769 [gnome-power-manager] gnome-power-manager: Suspend on lid close
only works every other time
Severity set to 'important' from 'critical'
--
455769: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=455769
Debian Bug Tracking System
Control: severity -1 important
On Thu, Mar 28, 2013 at 11:01:10 +0100, Daniel Pocock wrote:
>
> I recently updated a Lenovo X220T to wheezy
>
> I am using the standard wheezy kernel and gnome desktop
>
> $ dpkg --list | grep gnome-power
> ii gnome-power-manager
> 3.4.0-2
Processing commands for cont...@bugs.debian.org:
> severity 455769 critical
Bug #455769 [gnome-power-manager] gnome-power-manager: Suspend on lid close
only works every other time
Severity set to 'critical' from 'normal'
> thanks
Stopping processing here.
Please contact me if you need assistance
Processing commands for cont...@bugs.debian.org:
> #This bug will impact everyone with extra groups and make ps and other procps
> programs crash
> severity 702965 grave
Bug #702965 [procps] procps: ps dies with SIGSEGV on kernels > 3.2.29 and lots
of supplementary groups
Bug #704041 [procps] pr
Package: ndiswrapper-dkms
Version: 1.57-1
Severity: serious
Tags: patch
Hi,
the module fails to build with dkms, because BUILT_MODULE_NAME is not defined
in the dkms.conf, here is a patch:
diff -Naur ndiswrapper-1.57.orig/debian/ndiswrapper-dkms.dkms.in
ndiswrapper-1.57/debian/ndiswrapper-dkms.
On 28/03/2013 10:16, peter green wrote:
> Sylvestre Ledru wrote:
>> No need to do a NMU here.
>>
> Ok I've attached a diff. Note: i'm currently running a test build of
> this version i'll follow up later with results from that test to confirm
> things are ok (I don't see why they wouldn't be)
OK
Sylvestre Ledru wrote:
No need to do a NMU here.
Ok I've attached a diff. Note: i'm currently running a test build of
this version i'll follow up later with results from that test to confirm
things are ok (I don't see why they wouldn't be)
diff -urN clang-3.0/debian/changelog clang-3.0.new/d
Hi Julien,
FYI, I have tested the patch disabling InRelease handling as pushed to
debootstrap's git in two situations:
* standard package; debootstrap a wheezy chroot: OK
* d-i environment (built mini.iso, installed debootstrap-udeb in it): OK
Cheers,
OdyX
--
To UNSUBSCRIBE, email to debian
Hi again,
I collected a bit more information about the device:
andi@fuzi:~$ lsusb
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1
Processing commands for cont...@bugs.debian.org:
> severity #702251 serious
Bug #702251 [otrs2] otrs2: upgrade fails from 3.1.11 to 3.2.2
Severity set to 'serious' from 'important'
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
702251: http://bugs.debian.org/cgi-
On 27 Mar 2013, at 23:41, John Paul Adrian Glaubitz
wrote:
> could anyone who is seeing the issue with Cheese freezing try to disconnect
> their webcam
In my case I don't think so- it's built into the frame of my laptop screen.
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.o
Processing commands for cont...@bugs.debian.org:
> found 703332 1:1.0~git20111214-1
Bug #703332 [libactiviz.net-cil] If they are API compatible you MUST generate
and install a GAC policy file!
Marked as found in versions activiz.net/1:1.0~git20111214-1.
> thanks
Stopping processing here.
Please
> 2: If noone can provide an answer to the above question then taking into the
> account how late we are in the freeze should we play it safe and specify a
> lower (armv6) CPU version to make sure that neon and the extra vfp registers
> don't get accidently used. I personally think that the answer
Hi Peter,
> 1: What does the "coretex-a8" CPU setting imply for clang/llvm? in
> particular does it imply neon and the extra vfp registers?
At the LLVM level, the options that have to be enabled are "NEON" and
"restrict to 16 registers". Looking at (Clang's) lib/Basic/Targets.cpp
from 3.0 (and cu
On 28/03/2013 06:31, peter green wrote:
> Ok I just had a discussion with adam conrad about this on IRC.
>
> According to him clang currently does assume that armv7 means coretex a8
> and that coretex a8 mean full vfpv3 and neon. There is a patch in ubuntu
> precise/quantal to fix this (26-armv7-
Hi,
indeed, a USB attached cam works fine here whereas the builtin laptop
camera fails completely: I have exactly the symptoms described here --
no cheese at all, process "hanging".
If I run cheese with the USB cam pluged in and switch to the builtin cam
within the cheese preferences menu, th
On Thu, Mar 28, 2013 at 06:23:32AM +0100, Salvatore Bonaccorso wrote:
> Package: asterisk
> Severity: grave
> Tags: security patch upstream
>
> Hi,
>
> the following vulnerabilities were published for asterisk.
>
> CVE-2013-2685[0]:
> Buffer Overflow Exploit Through SIP SDP Header
>
> CVE-2013-
74 matches
Mail list logo
