Proposed patch to aptitude in stable to fix a low-impact security bug

2011-04-03 Thread Daniel Burrows
home directory isn't set. (Closes: #612034) diff --git a/src/edit_pkg_hier.cc b/src/edit_pkg_hier.cc index 7189580..213a97f 100644 --- a/src/edit_pkg_hier.cc +++ b/src/edit_pkg_hier.cc @@ -1,6 +1,6 @@ // edit_pkg_hier.cc // -// Copyright (C) 2000-2001, 2004-2006 Daniel Burrows

Re: aptitude plans for the squeeze cycle

2009-08-17 Thread Daniel Burrows
On Sun, Aug 16, 2009 at 02:41:08PM +0200, Marc Brockschmidt m...@marcbrockschmidt.de was heard to say: Heya, As announced on dda [RT1], we want to get an impression when releasing Squeeze is feasible. We have proposed a (quite ambitious) freeze in December 2009, and some developers have

Re: Pre-approval for cwidget upload to fix a deadlock (511708 and friends)

2009-01-29 Thread Daniel Burrows
On Wed, Jan 28, 2009 at 07:57:05PM +0100, Luk Claes l...@debian.org was heard to say: Daniel Burrows wrote: And just for the sake of completeness, here's the debdiff for my proposed upload. Please upload and ping us again when the version is installed in the archive, TIA. Looks like

Pre-approval for cwidget upload to fix a deadlock (511708 and friends)

2009-01-27 Thread Daniel Burrows
Hi, release team, I've finally tracked down a nasty deadlock in the cwidget code (#511708 and friends). The symptoms are that under certain conditions, which include but may not be limited to running an etch kernel and being afflicted by the Curse of the Devil Bunny [0], the curses interface

Re: Pre-approval for cwidget upload to fix a deadlock (511708 and friends)

2009-01-27 Thread Daniel Burrows
+ + * Backport a fix for a nasty deadlock that was causing aptitude to +freeze up after running dpkg. (Closes: #511708) + + -- Daniel Burrows dburr...@debian.org Tue, 27 Jan 2009 23:18:01 -0800 + cwidget (0.5.12-3) unstable; urgency=low * Fix the string truncation fix so that it doesn't

Requesting approval for upload of aptitude 0.4.11.10-1lenny1 to testing-proposed-updates

2008-10-06 Thread Daniel Burrows
(Closes: #497287) + Dutch (Closes: #497965) + Kurdish + Japanese (Closes: #494816) + Lithuanian (Closes: #496504) + Norwegian Bokmål + Simplified Chinese (Closes: #497550) + Ukranian -- Daniel Burrows [EMAIL PROTECTED] Fri, 05 Sep 2008 22:03:07 -0700

Re: Please add a freeze exception for aptitude 0.4.11.9

2008-09-06 Thread Daniel Burrows
On Mon, Sep 01, 2008 at 07:43:03AM +0200, Luk Claes [EMAIL PROTECTED] was heard to say: Daniel Burrows wrote: I am writing to request a freeze exception for aptitude 0.4.11.9-1. This release improves a number of translations and includes a few small bug-fixes that were targeted at lenny

Re: Please add a freeze exception for aptitude 0.4.11.9

2008-09-06 Thread Daniel Burrows
On Sat, Sep 06, 2008 at 04:50:25PM +0200, Marc 'HE' Brockschmidt [EMAIL PROTECTED] was heard to say: Daniel Burrows [EMAIL PROTECTED] writes: Thanks. I noticed last night that aptitude hasn't transitioned into testing yet: it looks like new versions of libept and libwibble were uploaded

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-06-08 Thread Daniel Burrows
On Wed, May 28, 2008 at 07:58:53PM -0700, Daniel Burrows [EMAIL PROTECTED] was heard to say: On Wed, May 28, 2008 at 02:27:55PM +, Debian Bug Tracking System [EMAIL PROTECTED] was heard to say: Changes: apt (0.7.14) unstable; urgency=low [snip] [ Otavio Salvador

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-05-30 Thread Daniel Burrows
Security team: Bryan Donlan discovered a security hole in the interaction between apt and aptitude. apt provides a function GetLock() as a convenient way to obtain an exclusive lock using a lockfile. aptitude uses this to create a lock file controlling its own state, which since version

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-05-29 Thread Daniel Burrows
On Thu, May 29, 2008 at 09:51:44AM -0300, Otavio Salvador [EMAIL PROTECTED] was heard to say: Daniel Burrows [EMAIL PROTECTED] writes: On Wed, May 28, 2008 at 02:27:55PM +, Debian Bug Tracking System [EMAIL PROTECTED] was heard to say: Changes: apt (0.7.14) unstable; urgency=low

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-05-29 Thread Daniel Burrows
On Thu, May 29, 2008 at 07:52:38AM -0700, Daniel Burrows [EMAIL PROTECTED] was heard to say: On Thu, May 29, 2008 at 09:51:44AM -0300, Otavio Salvador [EMAIL PROTECTED] was heard to say: Daniel Burrows [EMAIL PROTECTED] writes: On Wed, May 28, 2008 at 02:27:55PM +, Debian Bug

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-05-29 Thread Daniel Burrows
On Thu, May 29, 2008 at 08:42:56PM -0700, Daniel Burrows [EMAIL PROTECTED] was heard to say: On Thu, May 29, 2008 at 07:52:38AM -0700, Daniel Burrows [EMAIL PROTECTED] was heard to say: On Thu, May 29, 2008 at 09:51:44AM -0300, Otavio Salvador [EMAIL PROTECTED] was heard to say: Daniel

Re: Bug#482476: marked as done (Security: Unsafe lock file creation can be used to truncate arbitrary files)

2008-05-28 Thread Daniel Burrows
On Wed, May 28, 2008 at 02:27:55PM +, Debian Bug Tracking System [EMAIL PROTECTED] was heard to say: Changes: apt (0.7.14) unstable; urgency=low [snip] [ Otavio Salvador ] * Apply patch to avoid truncating of arbitrary files. Thanks to Bryan Donlan [EMAIL PROTECTED] for

Preparing a new aptitude release.

2008-03-12 Thread Daniel Burrows
Hello, everyone. I've got enough bug-fixes and new features into the aptitude source tree that I think it's time for a new release. This includes: * Use the same configuration option as apt to disable Recommends, so --without-recommends works again. (#448561) * Make update work even

Best practices for handling API (not ABI) breaks?

2008-03-08 Thread Daniel Burrows
Hi, I'm the maintainer of libsigc++-2.0, a typesafe callback library for C++. Upstream has just released a new version, 2.2, which preserves the version 2.0 ABI but is not source-compatible: programs that compiled against the 2.0 series will break with this new release. There are 114

binNMU of aptitude

2008-01-10 Thread Daniel Burrows
Hi, Could you please schedule a binNMU of aptitude? It needs to be rebuilt to match the newly uploaded version of apt. Thanks, Daniel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: binNMU of aptitude

2008-01-10 Thread Daniel Burrows
On Thu, Jan 10, 2008 at 06:38:31AM -0800, Daniel Burrows [EMAIL PROTECTED] was heard to say: Could you please schedule a binNMU of aptitude? It needs to be rebuilt to match the newly uploaded version of apt. Umm, nevermind, looks like this happened between when I started composing

Re: Can aptitude be rebuilt on stable?

2008-01-03 Thread Daniel Burrows
On Thu, Jan 03, 2008 at 02:09:43PM +0100, Martin Zobel-Helas [EMAIL PROTECTED] was heard to say: On Sun Dec 30, 2007 at 11:44:35 -0800, Daniel Burrows wrote: I was recently reminded that the version of aptitude in etch still has bug #415468, now re-opened as bug #438725. To summarize

Re: Can aptitude be rebuilt on stable?

2008-01-03 Thread Daniel Burrows
On Thu, Jan 03, 2008 at 05:53:15AM -0800, Daniel Burrows [EMAIL PROTECTED] was heard to say: OK, that's what I more-or-less expected, but I figured I had an obligation to at least try, once, to get a useful manpage into stable. :) Umm, that should of course read more useful. As you

Can aptitude be rebuilt on stable?

2007-12-30 Thread Daniel Burrows
I was recently reminded that the version of aptitude in etch still has bug #415468, now re-opened as bug #438725. To summarize, it means that aptitude's manpage looks like this: To select a particular version of the package, append “\fB=version\fR” to the package name:

Re: Bug#456646: aptitude: depends on libgcc1 from experimental

2007-12-17 Thread Daniel Burrows
On Mon, Dec 17, 2007 at 11:21:49AM +0100, Michal Politowski [EMAIL PROTECTED] was heard to say: aptitude 0.4.10-1 depends on libgcc1 (= 1:4.3), which is only available in experimental. Ow. So, release team, is the correct way of handling this without making everyone even more angry at me to

Re: Bug#456646: aptitude: depends on libgcc1 from experimental

2007-12-17 Thread Daniel Burrows
On Mon, Dec 17, 2007 at 03:59:51PM +0100, Luk Claes [EMAIL PROTECTED] was heard to say: Daniel Burrows wrote: On Mon, Dec 17, 2007 at 11:21:49AM +0100, Michal Politowski [EMAIL PROTECTED] was heard to say: aptitude 0.4.10-1 depends on libgcc1 (= 1:4.3), which is only available

Re: apt transition - please bump urgency of libept

2007-12-16 Thread Daniel Burrows
(this is an expansion of a reply I dashed off earlier to Otavio on my way to dinner) On Sun, Dec 16, 2007 at 10:42:41PM -0200, Otavio Salvador [EMAIL PROTECTED] was heard to say: I'd like to ask you to postpone any other aptitude upload, for sid, until we're moved current APT to testing

Re: please hint xarchon 0.50-10.1

2007-01-02 Thread Daniel Burrows
On Tue, Jan 02, 2007 at 10:30:47PM +0100, A Mennucc [EMAIL PROTECTED] was heard to say: hi I NMUd xarchon 0.50-10.1 the new version fixes the bug 111342: Missing font prevents starting new game This bug was posted in 2001 as 'grave' but was then downgraded as 'normal' by the

Push aptitude 0.4.4-1 into testing?

2006-12-18 Thread Daniel Burrows
Hi folks, I was wondering if it would be possible to push aptitude 0.4.4-1 into testing. It's been waiting for over a month without any serious trouble, and while it is a new upstream, the changes are primarily translation updates, documentation fixes, and fixes for annoying but non-critical

Re: Bug#396331: upgrade-reports: sarge to etch removes kernels

2006-11-01 Thread Daniel Burrows
On Tue, Oct 31, 2006 at 02:51:26PM -0800, Steve Langasek [EMAIL PROTECTED] was heard to say: On Tue, Oct 31, 2006 at 08:57:25AM -0800, Kevin B. McCarty wrote: Installing the new kernel first means the old kernels will be removed, udev will be installed, only a few necessary packages are

Re: Please hint aptitude into testing

2005-04-23 Thread Daniel Burrows
Is this request being rejected, or did it just get deferred too long and fall off the first screen of the relevant people's mailboxes? :P Thanks, Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ |Is it too late to extricate myself

Re: woody-sarge upgrade removes perl (and a bunch of other stuff)

2005-04-06 Thread Daniel Burrows
. Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ | Microsoft, n: | | A company that makes pretty good mice. | \ Evil Overlord, Inc: http

Re: Fwd: apt-get dist-upgrade will remove metapackages

2005-04-05 Thread Daniel Burrows
. Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ | I haven't lost my mind, | | I know exactly where I left it. | \--- Be like the kid in the movie! Play chess! -- http

python-gtk2 and testing

2004-11-18 Thread Daniel Burrows
scripts? Thanks, Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ | You are standing west of a white house. There is a mailbox here. | \- Does your computer have Super Cow Powers? --- http://www.debian.org -/ pgpuLLLzhu7UR.pgp Description: PGP

Re: Woody-Sarge upgrade report

2004-11-15 Thread Daniel Burrows
this would result in an unreadable dump of garbage to the screen if you're upgrading the whole system. Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ | But what *does* kill me bloody well leaves me dead! | | -- Terry

Re: [andreas.krueger@dv-ratio.com: Need apt-get dist-downgrade or similar when Sarge comes out.]

2004-09-23 Thread Daniel Burrows
-- /--- Daniel Burrows [EMAIL PROTECTED] --\ | Will the last person to leave the Universe please | | turn off the lights and close the door? | \ The Turtle Moves! -- http://www.lspace.org

aptitude - testing?

2004-09-22 Thread Daniel Burrows
if anyone does want to move it to testing, it's ready. Daniel -- /--- Daniel Burrows [EMAIL PROTECTED] --\ | You are in a maze of twisty little signatures, all alike. | \-- (if (not (understand-this)) (go-to http://www.schemers.org

Re: packages stalld in t-p-u by missing builds

2004-09-17 Thread Daniel Burrows
I've uploaded a new version of aptitude to unstable that folds in all the changes from t-p-u, plus a few additional translation updates. Daniel -- / Daniel Burrows [EMAIL PROTECTED] ---\ | I've struggled with reality for thirty-five years

Re: packages stalld in t-p-u by missing builds

2004-09-16 Thread Daniel Burrows
someone is looking into this, by the way -- I was about to send off an email of my own asking why my (and, apparently, everyone else's) t-p-u uploads aren't getting built on enough architectures to go in. Daniel -- / Daniel Burrows [EMAIL PROTECTED

Re: libqt3-compat-headers, noteedit, and arm

2004-09-05 Thread Daniel Burrows
cause reject emails. testing-proposed-updates rejects uploads that are newer than the unstable version of the package. I can generate one (by uploading a newer version of some package to t-p-u) and send a sample here if you want :). Daniel -- /-- Daniel Burrows [EMAIL PROTECTED

Re: libqt3-compat-headers, noteedit, and arm

2004-09-05 Thread Daniel Burrows
(the autobuilder is apparently broken) ... but yeah, that's the size of it. Daniel -- / Daniel Burrows [EMAIL PROTECTED] ---\ | It is said that someone at a party once asked | | the famous philosopher Ly Tin Weedle, 'why

Re: FTFBS in sarge

2004-09-02 Thread Daniel Burrows
and in sarge by noteedit 2.7.1-0sarge1. tse3 has been waiting on the m68k buildd, but it appears that it was finally built on m68k today, so hopefully it can move into sarge and clear this up. Daniel -- / Daniel Burrows [EMAIL PROTECTED