Bug#1057843: Guidelines for affected users

2023-12-10 Thread Tim Connors
anyone who last updated 3 weeks ago would have encountered, nor in the current bookworm-security version. -- Tim Connors

Bug#990069: Still broken in ssh 8.4p1-5, libc6 2.31-13

2021-10-04 Thread Tim Connors
1 2020 /etc/init.d/ssh -rwxr-xr-x 1 root root 4056 Mar 13 2021 /etc/init.d/ssh.dpkg-new and ssh isn't yet started - I did that manually because I knew the problem was going to arise. -- Tim Connors

Bug#844285: pidgin: steals (warps) mouse cursor (not just focus) when new message comes in [SEC=UNCLASSIFIED]

2016-11-13 Thread Tim Connors
Package: pidgin Version: 2.11.0-0+deb8u1 Severity: grave Tags: security Justification: user security hole Dear Maintainer, Like bugs #399786 and #518339, the mouse is warped to an open conversation window when a new message comes into that conversation. Typing a password at the time, and your

Bug#734688: Logs are not rotated for a month

2016-05-09 Thread Tim Connors
inds a base file whose .gz already exists, recursively call itself again to start rotating down to the current file, which can then be compressed and resume where we were? Sorry no patches, already after my bedtime, and this has already been languishing in my todo list for a couple of weeks. -- Tim Connors

Bug#753133: postr: flickr API went SSL only today

2014-06-29 Thread Tim Connors
Package: postr Version: 0.13-1 Severity: grave Tags: patch Justification: renders package unusable API went SSL only today: https://www.flickr.com/help/forum/en-us/72157645440333073/ My basic little patch seems to work for the handful of things I've tried, but I've probably missed something.

Bug#721303: udisks: breaks LVM and deadlocks LVM related IO to system [SEC=UNCLASSIFIED]

2013-08-29 Thread Tim Connors
Package: udisks Version: 1.0.4-7 Severity: critical Justification: breaks unrelated software lvm snapshot removal has been broken in debian for a few years now. lvremove has a good chance at any moment to deadlock IO to a box. If you happen to be lucky enough to have dmsetup still in cache, you

Bug#663200: Bug#659878: cannot set terminal process group (-1): Inappropriate ioctl for device

2013-05-10 Thread Tim Connors
On Fri, 10 May 2013, Tim Connors wrote: Actually, the other thing you lose (I presuming caused by acting on bug #628843) is tty resizing by SIGWINCH. ttys are really useful, it turns out. I have shedloads of up-to-date security patched RHEL5/6 machines, and I've never come across

Bug#612313: open-vm-source: does not compile on squeeze kernels 2.6.32

2011-02-07 Thread Tim Connors
Package: open-vm-source Version: 1:8.4.2-261024-1 Severity: critical I need the vmxnet module since we only have ESXi 3.5 here, but open-vm-source won't compile with the squeeze kernel: QUILT_PATCHES=debian/patches \ quilt --quiltrc /dev/null pop -a -R || test $? = 2 rm -rf .pc

Bug#604993: dash as /bin/sh causes $PPID to be wrong in child when invoked via system() call

2010-11-25 Thread Tim Connors
Package: dash Version: 0.5.5.1-7.2 Severity: grave Any calls to system() invokes sh -c prog args When /bin/sh is linked to dash, if prog is a shell script (/bin/sh or /bin/bash), that shell script sees $PPID as being the sh -c process. If /bin/sh is linked to bash, prog sees $PPID as being

Bug#596630: disk full leads to xauth nulling out the Xauthority file completely instead of just failing to create entry

2010-09-12 Thread Tim Connors
Package: xauth Version: 1:1.0.3-2 Severity: grave Justification: causes non-serious data loss If I have a non zero ~/.Xauthority file, then create a file in my home directory that fills the disk, and ssh in again (not closing the original X or ssh session so the Xauthority entries for those are

Bug#526409: [Evolution] Bug#526409: evolution: permissions on mailbox folders are set wrong

2009-05-04 Thread Tim Connors
On Mon, 4 May 2009, Yves-Alexis Perez wrote: On ven, 2009-05-01 at 11:25 +1000, Tim Connors wrote: Package: evolution Version: 2.24.5-3 Severity: grave Tags: security Justification: user security hole tconn...@denman:~$ l /home/maree/.evolution/mail/local/Sent -rw-r--r-- 1 maree

Bug#526409: evolution: permissions on mailbox folders are set wrong

2009-04-30 Thread Tim Connors
Package: evolution Version: 2.24.5-3 Severity: grave Tags: security Justification: user security hole tconn...@denman:~$ l /home/maree/.evolution/mail/local/Sent -rw-r--r-- 1 maree maree 118474734 2009-05-01 08:16 /home/maree/.evolution/mail/local/Sent Hmmm. Would it be a good idea to set

Bug#509404: openoffice.org-common: dpkg can't configure because of dico_checkroot

2008-12-22 Thread Tim Connors
On Mon, 22 Dec 2008, Rene Engelhard wrote: Hi, Tim Connors wrote: it updates fine, and dist-upgrade finally works. From what to what? Both a test dist-upgrade etch-lenny and lenny-sid do work for me. sid-sid, somewhere between dec 1 and dec 19, ie, when there were no dictionaries-common

Bug#509404: openoffice.org-common: dpkg can't configure because of dico_checkroot

2008-12-21 Thread Tim Connors
Package: openoffice.org-common Version: 1:2.4.1-14 Severity: grave Justification: renders package unusable I can't configure openoffice.org-common, either with the version in testing (1:2.4.1-14), or with unstable (1:2.4.1-15, and the dependencies): Setting up openoffice.org-common (1:2.4.1-14)

Bug#509404: openoffice.org-common: dpkg can't configure because of dico_checkroot

2008-12-21 Thread Tim Connors
On Mon, 22 Dec 2008, Rene Engelhard wrote: tag 509404 + unreproducible tag 509404 + moreinfo thanks Rene Engelhard wrote: Tim Connors wrote: I can't configure openoffice.org-common, either with the version in testing (1:2.4.1-14), or with unstable (1:2.4.1-15, and the dependencies

Bug#491394: acpid causes CPUfreq to be limited to 800MHz - 800Mhz

2008-07-18 Thread Tim Connors
Package: acpid Version: 1.0.6-10 Severity: grave Justification: renders package unusable Even with hal turned off and gnome-power and all that crap not being installed, I have up until recently had laptop-mode-tools as the sole controller of my laptop's power management. laptop_mode is of course

Bug#459041: xterm: version 230-1 segfaults somewhere when involving cut and paste

2008-01-04 Thread Tim Connors
Package: xterm Version: 230-1 Severity: grave Justification: causes non-serious data loss Cutting text somewhere in an xterm causes it to segfault with the most recent upgrade. It may involve either the cut or paste of long lines. I'm pretty sure it happens as soon as I click the mouse to make a

Bug#457828: chkrootkit: Killing a random PID with an arbitrary signal to test whether it is a trojan is extremely unpolite

2007-12-26 Thread Tim Connors
Package: chkrootkit Version: 0.47-1.1 Severity: critical Justification: breaks unrelated software In testing for the Enye LKM, chkrootkit sends signal 58 to PID 12345. This has a chance of hitting any one process of 1/32767. On the system I am typing this on in its current state, I have 350

Bug#400329: wwwoffle: lock-files in concurrent downloading broken either way

2006-11-25 Thread Tim Connors
Package: wwwoffle Version: 2.9-2 Severity: grave Justification: causes non-serious data loss wwwoffle has the setting: # lock-files = yes | no # Enable the use of lock files to stop more than one WWWOFFLE process # from downloading the same URL at the same time (default=no).

Bug#333479: gdk-imlib1: gdk-imblib1 should not explicitly conflict with libpng2

2005-12-21 Thread Tim Connors
Thomas Bushnell BSG [EMAIL PROTECTED] Date: Tue, 11 Oct 2005 23:50:44 -0700: Ron [EMAIL PROTECTED] writes: Package: gdk-imlib1 Version: 1.9.14-22 Severity: critical Justification: breaks unrelated software Unless there is something big I am missing, gdk-imlib should certainly not take

Bug#320115: qiv: background setting in bug #294293 causes X session to become useless

2005-07-26 Thread Tim Connors
Package: qiv Version: 2.0-3 Severity: grave Justification: causes non-serious data loss I tried to reopen 294293, but obviously don't know how to do this correctly... This causes major breakage in case of fullscreen (you can't destroy a window when it is the root window!) - renders the X

Bug#312853: apt-listbugs: apt{itude,-get} upgrade: dies with ...not in gzip format...

2005-06-10 Thread Tim Connors
Package: apt-listbugs Version: 0.0.49 Severity: grave Justification: renders package unusable I have no idea where to assign this to, but it looks like apt-listbugs. I just tried to upgrade via aptitude, and it bombed out: Get:7 http://mirror.aarnet.edu.au unstable/main libgnomecanvas2-0