Bug#281593: Still problems with BBC?

2005-01-18 Thread Hilko Bengen
Graeme,

could you please try whether you have the same problems with the
current version (4.5.2) of Drupal?

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#272256: nail: make nail a full replacement of mailx?

2005-01-20 Thread Hilko Bengen
Jordi Mallach <[EMAIL PROTECTED]> writes:

> On Wed, Sep 22, 2004 at 03:41:03PM +0200, Hilko Bengen wrote:
>> > I mean including providing virtual package mailx, and using diversions,
>> > etc. Why not?
>> Not sureI'd rather have Alternatives for /bin/mail, with the packages
>> mailx, mailutils and nail (any others?) working together.
> Does nail support the standard features in /bin/mail?

The documentation claims that it does.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#341292: aptitude: UI bug: wrong use of "minibuffer" display

2005-11-29 Thread Hilko Bengen
Package: aptitude
Version: 0.4.0-3
Severity: normal

Aptitude displays "Some packages were broken and have been fixed:",
followed by a possibly large list of packages after I hit U, g.

If the UI option "Use a minibuffer-style prompt where possible" is
enabled, a giant "minibuffer" is created for the message at this point
and I haven't found any way to make it disappear.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages aptitude depends on:
ii  apt [libapt-pkg-libc6.3-6-3.1 0.6.42.3   Advanced front-end for dpkg
ii  libc6 2.3.5-8GNU C Library: Shared libraries an
ii  libgcc1   1:4.0.2-4  GCC support library
ii  libncursesw5  5.5-1  Shared libraries for terminal hand
ii  libsigc++-2.0-0c2 2.0.16-1   type-safe Signal Framework for C++
ii  libstdc++64.0.2-4The GNU Standard C++ Library v3

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc 0.4.0-3English manual for aptitude, a ter

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#341437: drupal: Security update breaks functionality

2005-11-30 Thread Hilko Bengen
Package: drupal
Version: 4.5.6-1
Severity: critical
Tags: pending

The valid_input_data function was removed, but some modules still use
it. I will provide an updated package as soon as a patch is available.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#344064: ipodder: Typo in iPodderGui.py

2005-12-19 Thread Hilko Bengen
Chris AtLee <[EMAIL PROTECTED]> writes:

> Package: ipodder
> Version: 2.1.9-2
> Severity: normal
>
> iPodderGui.py line 3464 should read:
> if errno == core.CRITICAL_MINSPACE_EXCEEDED:
>
> instead of
> if errno == iPodder.CRITICAL_MINSPACE_EXCEEDED:

Why?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#336719: Can you reproduce this on 4.5.3-4?

2005-11-05 Thread Hilko Bengen
notfound 336719 4.5.3-4
thank you

"Matthew A. Nicholson" <[EMAIL PROTECTED]> writes:

> I don't use 4.5.3, I use 4.5.5.  I can download 4.5.3 and compare the 
> source changes, but I don't use it and it's not an option for me to test 
> with it.  Give me a few hours and i'll get back to you. :)



4.5.3-4 is the current version in stable and that has a higher
priority for me right now than the version in testing/unstable.

This change got introduced to session.inc after 4.5.3:

 function sess_destroy($key) {
-  db_query("DELETE FROM {sessions} WHERE sid = '$key'");
+  db_query("DELETE FROM {sessions} WHERE sid = '%d'", $key);
 }

... and this is the last change that supposedly fixes the logout
problem.

 function sess_destroy($key) {
-  db_query("DELETE FROM {sessions} WHERE sid = '%d'", $key);
+  db_query("DELETE FROM {sessions} WHERE sid = '%s'", $key);
 }

db_query uses sprintf to replace placeholder expressions if passed
more than one argument and it seems to me that using %s does the same
thing as PHP's string expansion as in 4.5.3.

I have removed version 4.5.3-4 from this bug. If you disagree, feel
free to add it again with a "found" statement to [EMAIL PROTECTED], with a
rationale.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#338539: ipodder called incorrectly as iPodder by Gnome 2.12

2005-11-10 Thread Hilko Bengen
DW Price <[EMAIL PROTECTED]> writes:

> Package: ipodder
> Version: 2.1.9-1
>
> After installation, ipodder will not run from the Gnome 2.12 sound & 
> video menu. The error is that "iPodder" cannot be run. Linking 
> /usr/bin/ipodder to /usr/bin/iPodder solves the problem.

It does work for me in xfce4. Mhm...

What about removing that link and changing the line "Exec=iPodder" to
"Exec=ipodder" in /usr/share/applications/ipodder.desktop ? Does this
also fix the problem? (Possibly after re-starting Gnome?)

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#336719: Can you reproduce this on 4.5.3-4?

2005-11-11 Thread Hilko Bengen
Florian Weimer <[EMAIL PROTECTED]> writes:

>> db_query uses sprintf to replace placeholder expressions if passed
>> more than one argument and it seems to me that using %s does the
>> same thing as PHP's string expansion as in 4.5.3.
>
> What about SQL injection? Doesn't db_query protect against it, while
> PHP's string expansion doesn't?

At second glance, it does seem like it: db_query performs quoting on
those arguments which are then added via snprintf().

Do you have any idea how the $key parameter to sess_destroy
(includes/session.inc) is generated?

Cheers,
-Hilko who is once again shocked how little he knows about PHP's
   internal magic


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#346380: aptitude: Segmentation fault

2006-01-07 Thread Hilko Bengen
Package: aptitude
Version: 0.4.1-1
Severity: grave

When trying to update the packages list (pressing "u" in the GUI)
today, I got this warning:

,
| W: GPG error: http://ftp.de.debian.org sid Release: The following signatures 
couldn't be verified because the public key is not available: NO_PUBKEY 
010908312D230C5F
| W: GPG error: http://ftp.de.debian.org experimental Release: The following 
signatures couldn't be verified because the public key is not available: 
NO_PUBKEY 010908312D230C5F
`

Nevertheless, I started the upgrade ("U", "g" in the GUI).

aptitude told me:
  "Some packages were broken and have been fixed:...".

I didn't change anything in the list presented to me and told it to
start the upgrade ("g").

aptitude told me:
  "WARNING: untrusted version of the following packages will be
   installed!..." with a list of packages.

I selected "Abort Installation", exited the Preview buffer ("q") and
tried to update the package list again. aptitude exited with a
segmentation fault:

,
| Ouch!  Got SIGSEGV, dying..
| Segmentation fault (core dumped)
`

I saw very little in the GUI just before the crash, but it appeared as
if the download of the first file had been started.

I have uploaded the core files (core.23303, core.23498) to
.

Cheers,
-Hilko

,[ /etc/apt/sources.list ]
| 
| # deb http://ftp.de.debian.org/debian/ sarge main contrib non-free
| deb http://ftp.de.debian.org/debian/ sid main contrib non-free
| deb-src http://ftp.de.debian.org/debian/ sid main contrib non-free
| 
| # deb http://security.debian.org/ sarge/updates main
| 
| deb http://ftp.de.debian.org/debian/ experimental main contrib non-free
| deb-src http://ftp.de.debian.org/debian/ experimental main contrib non-free
| 
| #deb ftp://ftp.nerim.net/debian-marillat/ unstable main
| #deb-src ftp://ftp.nerim.net/debian-marillat/ unstable main
| 
| #deb-src http://eric.lavar.de/comp/linux/debian/ experimental/
| 
| 
`


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages aptitude depends on:
ii  apt [libapt-pkg-libc6.3-6-3.1 0.6.43 Advanced front-end for dpkg
ii  libc6 2.3.5-9GNU C Library: Shared libraries an
ii  libgcc1   1:4.0.2-5  GCC support library
ii  libncursesw5  5.5-1  Shared libraries for terminal hand
ii  libsigc++-2.0-0c2a2.0.16-2   type-safe Signal Framework for C++
ii  libstdc++64.0.2-5The GNU Standard C++ Library v3

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc 0.4.1-1English manual for aptitude, a ter

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#346380: aptitude: Segmentation fault

2006-01-07 Thread Hilko Bengen
I have been able to reproduce this bug in a simpler setting. Calling
aptitude with an up-to-date package list, I immediately started the
upgrade ("U", "g"), exited the Preview buffer ("q"), and updated the
package lists again ("u"). Segmentation fault.

I have uploaded the resulting core file core.23873 to the same place.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#346380: aptitude: Segmentation fault

2006-01-07 Thread Hilko Bengen
I have been able to reproduce this bug in a simpler setting. Calling
aptitude with an up-to-date package list, I immediately started the
upgrade ("U", "g"), exited the Preview buffer ("q"), and updated the
package lists again ("u"). Segmentation fault.

I have uploaded the resulting core file core.23873 to the same place.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#314984: Please reconsider fixing this issue

2005-12-29 Thread Hilko Bengen
I don't want to start yet another discussion about profanity or
obscenity here.

When I learned this afternoon that hacks (i.e. FlipText) which are
enabled in a default installation and eventually get run because
random mode is selected as default, I was quite upset for two reasons:

* Users do not generally expect a screen saver to cause network
  traffic. Even in 2005 there are still Debian users whose network
  connectivity is non-broadband and/or metered by volume or time spent
  online for whom xscreensaver's default behavior may cause
  "interesting" surprises. Just think of laptops with GSM or UMTS
  modems for a non-third-world example...

* I haven't looked at the mechanisms used by xscreensaver-text to
  fetch content from URLs at all, but the security implications of a
  potential error in the code that retreives untrusted content from
  the net don't exactly cause a warm, fuzzy feeling.

Please consider changing the default behavior as follows:

1. Provide a short file /usr/share/doc/xscreensaver/README.textmode in
   which contains a concise description on the available options.

2. Change the app-defaults files so that either this file
   (*textMode: text?) or maybe just a pointer to instructions
   (*textMode: string?) is displayed per default.

Alternatively, modify xscreensaver-text to provide a more helpful
message if it can't find the binary (fortune per default) it is
supposed to call.

If you want me to provide a tested patch against the package in sid,
just drop me a line.

Thanks for listening.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#345288: mantis: Plethora of vulnerabilities

2005-12-30 Thread Hilko Bengen
Thijs Kinkhorst <[EMAIL PROTECTED]> writes:

> If/when I'll upload to unstable I'll orphan the package, unless Hilko
> wants to keep on maintaining it for now.

Have said vulnerabilities been fixed in 0.19.4? If yes, I suppose I
could do a quick uploead for unstable.

No, I do not want to keep maintaining Mantis.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#345353: O: mantis

2005-12-30 Thread Hilko Bengen
Package: wnpp
Severity: normal

I originally adopted the Mantis package because I hoped that a
previous employer would start using the .deb instead of local
installations. This didn't happen, so I have never really been a user
of the package maintained by me.

What's worse: Support from upstream in general and especially security
handling has been less than optimal. Quite frankly: My patience has
been exhausted by now. If nobody wants to take over this package, we
should consider not releasing it with etch.

Threre is quite a number of outstanding security issues (#345288). 
Before I cease working on the package altogether, I'll try to assist
the security team in providing a package for sarge.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#345348: ipodder: Contains invalidly-licensed feedparser.py

2005-12-30 Thread Hilko Bengen
Joe Wreschnig <[EMAIL PROTECTED]> writes:

> This package contains a version of Mark Pilgrim's Universal Feed Parser,
> without a proper license [0]. On December 28th, a relicensed (and
> updated) version of feedparser was uploaded in the python-feedparser
> package.

I have noticed the package and will upload a new ipodder package
shortly.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#345390: wmii: Please provide a session definition.

2005-12-30 Thread Hilko Bengen
Package: wmii
Version: 2-2
Severity: wishlist

IMO, it would be a Good Thing to be able to select wmii as a session
from gdm etc..

Please provide a file /usr/share/xsessions/wmii.desktop like this.

,
| [Desktop Entry]
| Name=wmii
| Comment=wmii window manager
| Exec=/usr/bin/wmii
| Type=Application
`

Thanks

Cheers,
-Hilko

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages wmii depends on:
ii  libc62.3.5-8 GNU C Library: Shared libraries an
ii  libx11-6 6.8.2.dfsg.1-11 X Window System protocol client li
ii  xlibs6.8.2.dfsg.1-11 X Window System client libraries m

Versions of packages wmii recommends:
ii  python2.3-libixp [python-libi 2-2Python bindings for libixp

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#314984: Please reconsider fixing this issue

2006-01-01 Thread Hilko Bengen
Josselin Mouette <[EMAIL PROTECTED]> writes:

> Le jeudi 29 décembre 2005 à 22:57 +0100, Hilko Bengen a écrit :
>> * Users do not generally expect a screen saver to cause network
>>   traffic. Even in 2005 there are still Debian users whose network
>>   connectivity is non-broadband and/or metered by volume or time spent
>>   online for whom xscreensaver's default behavior may cause
>>   "interesting" surprises. Just think of laptops with GSM or UMTS
>>   modems for a non-third-world example...
>
> xscreensaver is retrieving the RSS feed, which isn't a really big
> file, 

No matter how small the request, in a dial-up situation this means
that unnecessary and potentially costly traffic is generated.

> and it is retrieving it only once for each hack using
> xscreensaver-text.

Are you sure about that? If you select the output of fortune to be
used, fortune is run again and again.

> And it's not as if it couldn't be easily deactivated.

If a user absolutely wants his screenblanker to be a RSS reader, he
can just as easily turn that functionality on.

Just use a sane default which doesn't need to generate network traffic
just to draw nice graphics on the screen.

> Anyway, I wouldn't call planet.debian.org "untrusted content". This
> site can only receive contributions from Debian developers.

planet.d.o. has no technical measures that prevent libel, slander,
offensive language etc. from being aggregated, let alone illegal
content. As such, I can't trust the content aggregated by planet.d.o..

What triggered my comment on this bug report was my boss's (negative)
astonishment about the notion that a screenblanker printed a blog
entry about the 22C3 conference to the screen of a freshly installed
workstation. While nobody got into trouble here, I know of a few
companies that use Debian in workstation configurations where
something like this _would_ have led to negative consequences.

(If you say that something with the culture is fundamentally wrong in
those firms, I'll totally agree with you, but changing the default
configuration of xscreensaver would be much easier than attempting to
change some PHB's attitude.)

Cheers,
-Hilko



Bug#345288: mantis: Plethora of vulnerabilities

2006-01-02 Thread Hilko Bengen
Moritz Muehlenhoff <[EMAIL PROTECTED]> writes:

> Hilko Bengen wrote:
>> Thijs Kinkhorst <[EMAIL PROTECTED]> writes:
>> 
>> > If/when I'll upload to unstable I'll orphan the package, unless Hilko
>> > wants to keep on maintaining it for now.
>> 
>> Have said vulnerabilities been fixed in 0.19.4? If yes, I suppose I
>> could do a quick uploead for unstable.
>
> It's hard to tell because all the bugs that relate to the security
> problems are still private.

Security by obscurity, again. Just great.

> However, the descriptions seem to match, so I assume they're all
> fixed in 0.19.4.

The CVS repository is still public, one can probably have a look at
the diffs between 0.19.3 and 0.19.4.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#335992: RFA: mantis -- web-based bug tracking system

2005-10-27 Thread Hilko Bengen
Package: wnpp
Severity: normal

I request an adopter for the mantis package since I no longer use it. 
A few security-related bugs have been filed for which the status quo
is unclear.

Upstream does not seem to support the "stable" 0.19.2 version any
longer and wants users to upgrade to an 1.0 prerelease which can't be
considered stable so far.

If no-one has the time to take over the package, an NMU to fix the
security issues is appreciated -- and encouraged.

The package description is:
 Mantis is a PHP/MySQL/web-based bug tracking system. The software
 resides on a webserver while any web browser should be able to
 function as a client. It is released under the terms of the GNU GPL.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#336719: Can you reproduce this on 4.5.3-4?

2005-11-03 Thread Hilko Bengen
The current version in sarge (w/ security updates) is 4.5.3-4 and from
looking at upstream's CVS tree, it appears to me as if the bug leading
to the security vulnerability was introduced _after_ 4.5.3.

Can you confirm that this bug exists in 4.5.3-4?

Moreover, merging the PostgreSQL-related issues with this security bug
does _not_ seem to be a good idea to me.

Cheers,
-Hilko, reading up on BTS documentation


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#312202: drupal: Fix for Postgres Session Error

2005-06-08 Thread Hilko Bengen
Mike McCallister <[EMAIL PROTECTED]> writes:

> Package: drupal
> Version: 4.5.3-2
> Followup-For: Bug #312202
>
>
> Browsing through the Drupal CVS repository, looking for a fix for this
> issue, I came across the following patch that resolves this issue for me
> without requiring a database structure change:
>
> http://cvs.drupal.org/viewcvs/drupal/drupal/includes/session.inc?r1=1.13&r2=1.14&diff_format=h

This patch is apparently against the wrong version of the file. The
version of session.inc in Drupal 4.5.3-2 is

// $Id: session.inc,v 1.8.2.1 2005/01/10 19:35:37 dries Exp $

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#312473: ulog-acctd: contradictory instructions for 'hash table size'

2005-06-08 Thread Hilko Bengen
Adeodato Simó <[EMAIL PROTECTED]> writes:

> # hash table size = 65537
>
>   From /usr/share/info/ulog-acctd.info.gz:o
>
>* `hash table size = SIZE': `ulog-acctd' uses a hash table and
>  linked lists to store the collected accounting data in memory.
>  SIZE should be set to a power of 2. The default value is 65536.
>
>  This has changed in version 0.4.2
>
>   Perhaps (I don't know) it doesn't matter much, but I believe it'd be
>   best to give consistent instructions.

Of course.

Thank you for pointing this out. As the hash function changed in
0.4.2, code (and documentation) are correct -- the config file isn't.

IF you set hash table size to 65537, ulog-acctd should set it to the
next power of 2: 131072. (You can check this in the syslog.)

Cheers,
-Hilko



Bug#312202: drupal: Fix for Postgres Session Error

2005-06-09 Thread Hilko Bengen
tags 312202 moreinfo
thanks

Mike McCallister <[EMAIL PROTECTED]> writes:

> I understand that the specific URL I provided compares two later
> versions of the session.inc code, but I read through the change
> history of that file from 1.8.2.1 to 1.14, and the earlier changes
> are not helpful in resolving the specific issue I encountered. 

Could you please prepare for me a patch against 4.5.3 that does what
you want?

Thanks,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#313358: mantis: Adding note fails after upgrade

2005-06-13 Thread Hilko Bengen
Max Gilead <[EMAIL PROTECTED]> writes:

> Package: mantis
> Version: 0.19.2-3
> Severity: normal
>
>
> When adding a bug note I get:
>
> /mantis/bugnote_add.php:
>
> APPLICATION ERROR #401
>
> Database query failed. Error received from database was #1054: Unknown
> column 'note_type' in 'field list' for the query: INSERT INTO
> mantis_bugnote_table
> (bug_id, reporter_id, bugnote_text_id, view_state, date_submitted,
> last_modified, note_type, note_attr )
> VALUES
> ('2735', '2','2845', '10', '2005-06-13 11:17:13','2005-06-13 11:17:13', '0', 
> '')

>From what version did you upgrade? 0.17.x? Was the database upgraded?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#311817: Please allow drupal 4.5.3-1

2005-06-03 Thread Hilko Bengen
Package: drupal
Version: 4.5.2-0
Severity: critical
Tags: security, sarge

John Goerzen <[EMAIL PROTECTED]> writes:

> On Fri, Jun 03, 2005 at 10:56:47AM +0200, Hilko Bengen wrote:
>> Steve Langasek <[EMAIL PROTECTED]> writes:
>> 
>> So, you are not accepting my drupal_4.5.3-1 (or -2) package into sarge
>> because 4.5.3 fixes more than cited security issue?
>
> Why are you not using the simple patch available at
> http://drupal.org/drupal-4.6.1

I had only been told that 4.5.3 which is supposed to fix some security
issue had been released. Hoping that the release team would simply
accept it into sarge, I just packaged that.

BTW: Dries Buytaert, one of the main developers of Drupal, just told
me that most of the other fixes in 4.5.3 are input checks. Moreover,
the 4.5.3-2 package I uploaded also adds Vietnamese Debconf
translations, which might qualify it for inclusion in Sarge.

Again, there is _no_ added functionality over 4.5.2 in 4.5.3. I
frankly don't see why the issue is still being discussed and casual
comments are made about what a maintainer should do to "get it right".

I'd rather not be responsible for stressing the security team nor the
release team too much a few days before Sarge is going to be released. 
OTOH, I _have_ uploaded a package which fixes the security issue and I
suppose I could just sit there and assume that this is ok until told
otherwise.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#304813: libmail-box-perl: Makefile.PL gets installed

2005-04-15 Thread Hilko Bengen
Package: libmail-box-perl
Version: 2.060-1
Severity: normal

Makefile.PL should not be installed into /usr/share/perl5/Mail, should it?

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages libmail-box-perl depends on:
ii  libdigest-hmac-perl   1.01-3 create standard message integrity 
ii  libfile-remove-perl   0.29-1 remove files and directories, acce
ii  libio-stringy-perl2.110-1Perl5 modules for IO from scalars 
ii  libmailtools-perl 1.62-1 Manipulate email in perl programs
ii  libmime-types-perl1.15-1 Perl extension for determining MIM
ii  libobject-realize-later-perl  0.15-3 Delayed creation of objects
ii  libtimedate-perl  1.1600-4   Time and date functions for Perl
ii  liburi-perl   1.35-1 Manipulates and accesses URI strin
ii  libuser-identity-perl 0.90-2 manages different identities/roles
ii  perl  5.8.4-8Larry Wall's Practical Extraction 
ii  perl-base [libscalar-list-uti 5.8.4-8The Pathologically Eclectic Rubbis

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#300755: ifupdown-scripts-zg2: Support for proxy arp

2005-04-16 Thread Hilko Bengen
Marc Haber <[EMAIL PROTECTED]> writes:

> I have pulled the identical set_bool_value function from your script
> and the redirect script to common-functions and have committed the
> result to svn.

Ok.

> Can your script be linked with the same priority like the redirect
> scripts?

Since it uses the same mechanism, I assume yes.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#305652: Package should be architecture independent

2005-04-21 Thread Hilko Bengen
Jordi Mallach <[EMAIL PROTECTED]> writes:

> On Thu, Apr 21, 2005 at 10:13:34AM +0200, Jordi Mallach wrote:
>> Consider the following patch, which fixes this behaviour.
>
> Actually, the following patch is better, after discussing with some
> buildd admins.

Did you choose the -1.1 Debian revision because the changelog entry
carried your name -- or is there another reason for that?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#310084: drupal: Update Japanese po-debconf template trasnlation

2005-05-22 Thread Hilko Bengen
Hideki Yamane <[EMAIL PROTECTED]> writes:

>  I've updated ja.po to fix untranslated lines.
>  Could you apply it, please?

[x] done. Do you want write access to the CVS repository at
alioth.debian.org?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#292647: more info

2005-01-31 Thread Hilko Bengen
severity 292647 important
thanks

Same reason as for #292887: "drupal was not included in woody, so this
upgrade issue is not RC for sarge."


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#293120: drupal 4.5.2-1 causes: Table 'drupal.users_roles' doesn't exist

2005-02-01 Thread Hilko Bengen
James Clark <[EMAIL PROTECTED]> writes:

> Fatal error: Table 'drupal.users_roles' doesn't exist query: SELECT r.rid,
> r.name FROM role r INNER JOIN users_roles ur ON ur.rid = r.rid WHERE
> ur.uid = 1 in /usr/share/drupal/includes/database.mysql.inc on line 125

Unfortunately, you didn't tell me from which version you upgraded.
It looks as if the database upgrade procedure hadn't been run. You can
still run it manually.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#293144: openvpn: write status file for each configuration

2005-02-01 Thread Hilko Bengen
Package: openvpn
Version: 1.99+2.rc6-1
Severity: wishlist

Please consider adding a line

--status /var/run/openvpn.$NAME.status 10 \

to the openvpn startup arguments in the start_vpn() function.

Thanks,
-Hilko

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (50, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.28-ataraxia
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages openvpn depends on:
ii  debconf 1.4.42   Debian configuration management sy
ii  libc6   2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  liblzo1 1.08-2   data compression library
ii  libssl0.9.7 0.9.7e-3 SSL shared libraries

-- debconf information:
  openvpn/change_init: true
* openvpn/stop2upgrade: false
  openvpn/default_port:
* openvpn/create_tun: false


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#293439: mantis.postinst failed

2005-02-03 Thread Hilko Bengen
Apparently, bash's line number count is confused by the <

Bug#294103: ..huh? ulog-acctd-0.4.3-1 still doesn't install here

2005-02-08 Thread Hilko Bengen
close 294103
thanks
Arnt Karlsen <[EMAIL PROTECTED]> writes:

> Package: ulog-acctd
> Version: 0.4.3-1
> Followup-For: Bug #294103

Well, the bug was closed in 0.4.3-2 :-)

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#308257: doesn't clean up properly due to syntax error in postrm

2005-05-09 Thread Hilko Bengen
severity 308257 grave
thank you

Frank Lichtenheld <[EMAIL PROTECTED]> writes:

> Package: mantis
> Severity: important
>
> mantis leaves its symlink /etc/apache/conf.d/mantis around after
> purging which hinders apache from starting.

Justification: Removing the package renders another subsystem
unusable.

A fix is underway.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#307767: drupal: Please include extractor.php

2005-05-09 Thread Hilko Bengen
daniel <[EMAIL PROTECTED]> writes:

> Package: drupal
> Version: 4.5.2-3
> Severity: wishlist
>
> The extractor.php script is useful to generate pot files, for
> instance for custom modules. It would be nice to have it in the
> Debian package.

Finding the script would have been easier for me if you had pointed me
to the contrib CVS. ;-)

Do you think that including actual po files from the CVS might make
sense? BTW, since you appear to be somwhat of an active user, could
you help me with packaging 4.6.0?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#307821: drupal: New upstream version (4.6.0)

2005-05-09 Thread Hilko Bengen
tags 307821 pending
thank you

"Jamin W. Collins" <[EMAIL PROTECTED]> writes:

> Package: drupal
> Version: 4.5.2-3
> Severity: wishlist
>
> Upstream has released 4.6.0 on April 15th, 2005.  This update includes a
> number of enhancements.

I'm aware of this; unfortunately I don't have enough time to produce a
quality package without external help.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#307821: drupal: New upstream version (4.6.0)

2005-05-09 Thread Hilko Bengen
"Jamin W. Collins" <[EMAIL PROTECTED]> writes:

>> I'm aware of this; unfortunately I don't have enough time to produce a
>> quality package without external help.
>
> Is there a public repository with the packaging work?

Yes. Go over to alioth.debian.org and look for pkg-drupal.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#299695: xfig-doc: Fix "Suggests:" line

2005-03-15 Thread Hilko Bengen
Package: xfig-doc
Version: 1:3.2.5-alpha5-3
Severity: wishlist

[EMAIL PROTECTED]:~$ apt-cache show xfig-doc
[...]
Suggests: xfig, mozilla-firebird | x-www-browser | www-browser, xpdf-reader | 
pdf-viewer
[...]

mozilla-firebird was replaced by mozilla-firefox. Please update the
suggests line accordingly.

Thanks,
-Hilko

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#300755: ifupdown-scripts-zg2: Support for proxy arp

2005-03-21 Thread Hilko Bengen
Package: ifupdown-scripts-zg2
Version: 0.2-2
Severity: wishlist

Please include attached file which enables proxy-arp for a given
network interface if "proxy-arp 1" is set in /e/n/i.



proxyarp
Description: Binary data


Bug#300755: ifupdown-scripts-zg2: Support for proxy arp

2005-03-22 Thread Hilko Bengen
Marc Haber <[EMAIL PROTECTED]> writes:

> tags #300755 moreinfo
> thanks
>
> On Mon, Mar 21, 2005 at 04:56:48PM +0100, Hilko Bengen wrote:
>> Please include attached file which enables proxy-arp for a given
>> network interface if "proxy-arp 1" is set in /e/n/i.
>
> Please also write some docs about how to use this new option.

Option name: proxy-arp
Type: boolean
Default: Keep system-wide setting
Example: proxy-arp 1
If set to 1, Proxy-ARP will be enabled for the interface: Address
Resolution Protocol request packets intended for other machines will
be answered through this interface. Use with caution.
Used by:proxyarp


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#300769: [Gunnar Ritter] Re: [nail-devel] [Ryan Lovett] Bug#300769: nail: "Invalid character" message

2005-03-22 Thread Hilko Bengen
Ryan,

could you please try an upgrade to 11.22-1 from unstable? If that
doesn't help, please try to provide the additional information Gunnar
requested.

Cheers,
-Hilko

--- Begin Message ---
Hilko Bengen <[EMAIL PROTECTED]> wrote:

> What could have caused his problem?

From: Ryan Lovett <[EMAIL PROTECTED]>

> Version: 11.20-1

Please always upgrade to the most recent version before reporting bugs,
as described in the README. I do not really like to spend my time looking
for possible bugs that might have caused or affected a problem but have
already been fixed in the meantime.

In this case, it could be the bug in the default /etc/nail.rc which has
been fixed in 11.21 ("charsets" instead of "sendcharsets"). If so, please
exchange this file with the most recent version manually because it is
not overwritten by a later "make install". Then check that the "set" nail
command includes "utf-8" for the "sendcharsets" variable, e.g. as with
the current default 'sendcharsets="iso-8859-1,utf-8"'.

> When replying to an email with an octal 222 character, (hex 0092) nail
> reports:
>
> Invalid or incomplete multibyte or wide character
> . . . message not sent.
>
> and then doesn't save the dead letter message. The context of the email
> suggested that the character was some sort of apostrophe.

It probably was the <ʼ> character in the Windows-1252 encoding. What is
the value of the content-type header field of the original message?

> mailx was able to send the message.

Maybe, but what it sent violated the Internet message standards, so
recipients will usually not be able to read the character correctly.

> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

How does the offending character look when nail prints it to your
terminal? It should be one of <ʼ>  <╴> (an apostrophe, a reversed
question mark, and some sort of question mark in inversed color). If
there appears an empty <> sequence in that list, your Unicode font
setup is incomplete. With a working font setup, you should be able
to see either the correct character or a substitute (in case of an
invalid MIME declaration).

Gunnar

--- End Message ---


Bug#300755: ifupdown-scripts-zg2: Support for proxy arp

2005-03-22 Thread Hilko Bengen
More accurate description of what happens with Proxy ARP:

" IF set to 1, Proxy-ARP will be enabled for this interface: ARP
requests for non-local addresses will then be answered by this
interface, provided that received packets to the specified address
would not be routed through it. See the Linux Advanced Routing &
Traffic Control HOWTO for possible scenarios where this may be useful. "


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#305868: ulog-acctd: Wrong permissions on log files.

2005-06-28 Thread Hilko Bengen
Laurent Fousse <[EMAIL PROTECTED]> writes:

> tag 305868 patch
> thanks
>
>> The log files account.log and debug.log have the execute bit set,
>> which is unneeded.
>
> And here's the patch.

This could also be acheived by setting a umask. I have never seen your
problem -- how do you start ulog-acctd?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#305868: ulog-acctd: Wrong permissions on log files.

2005-06-28 Thread Hilko Bengen
Laurent Fousse <[EMAIL PROTECTED]> writes:

> I think the correct approach to text file creation is to ask for
> "0666" mode (or stricter) and let the umask restrict it further --
> no point in asking for the execute bit at file creation for a log
> file.

Right. I will put a 0666 in the binary and a umask 022 into the init.d
script. Does that sound okay to you?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#316307: fakeroot: fakeroot execs interactive /bin/sh

2005-06-29 Thread Hilko Bengen
Package: fakeroot
Version: 1.4
Severity: grave

As of version 1.4, fakeroot gives me an interactive /bin/sh before
executing the command given on the command line:

,
| $ fakeroot debian/rules clean
| sh-3.00$ exit
| dh_testdir
| dh_testroot
| dh_clean
| [...]
`


After downgrading to 1.2.10, it worked all right:

,
| $ fakeroot debian/rules clean
| dh_testdir
| dh_testroot
| dh_clean
`

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages fakeroot depends on:
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an

fakeroot recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#316362: acknowledged by developer (Bug#316362: fixed in drupal 4.5.4-1)

2005-07-01 Thread Hilko Bengen
Aleksey I Zavilohin <[EMAIL PROTECTED]> writes:

> Hmm, where fix in stable? I think you can`t upload new version in
> sarge. Maybe need contact with Security Team?

I have done that. Alas, there hasn't been any response yet.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301394: [INTL:pt_PT] Portuguese translation for drupal package

2005-03-25 Thread Hilko Bengen
tags 301394 +pending
thanks

Miguel Figueiredo <[EMAIL PROTECTED]> writes:

> Package: drupal
> Version: 4.5.2
> Severity: wishlist
> Tag: patch, l10n
>
> Here goes a Portuguese translation for the Drupal package. Feel free
> to use it.

Thanks.

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301408: ITP: ipodder -- an Internet audio program ("podcast") download tool

2005-03-25 Thread Hilko Bengen
Package: wnpp
Severity: wishlist

* Package name: ipodder
  Version : 2.0
  Upstream Author : Adam Curry et. al.
* URL or Web page : http://ipodder.sourceforge.net
* License : GPL
  Description : an Internet audio program ("podcast") download tool

iPodder is a Podcasting application, allowing users to capture and
listen to Internet audio programs.

It allows users to select and download shows and music and to play
whenever they want on their iPods, portable digital media players, or
computers automatically, after specifying which music or shows they
want to listen to.

Homepage: http://ipodder.sourceforge.net/

Upstream's main development and testing platform seems to be Windows
and MacOS X -- the Linux version offered for download is still 1.1. 
However, I have successfully run the 2.0 version checked out from CVS.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301408: ITP: ipodder -- an Internet audio program ("podcast") download tool

2005-03-25 Thread Hilko Bengen
Florian Weimer <[EMAIL PROTECTED]> writes:

> * Hilko Bengen:
>
>> * Package name: ipodder
>
>> It allows users to select and download shows and music and to play
>> whenever they want on their iPods, portable digital media players, or
>> computers automatically, after specifying which music or shows they
>> want to listen to.
>
> Is ipodder only usable with an iPod, or is it independent?

Ah, good question, thanks. It only downloads MP3s that are referenced
via RSS feeds and optionally feeds them to Windows Media Player or
iTunes on those other operating system.

I'll change the long description accordingly.

> If the latter is the case, the package name borders on trademark
> infringement. 8-/

Ohwell, I'd say that this is upstream's problem. If they are forced to
rename their tool, we will rename the package, too.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301566: python-4suite: python-4suite-doc fails in postinst

2005-03-26 Thread Hilko Bengen
Package: python-4suite
Version: 0.99cvs20041008-5
Severity: grave

The output pretty much says it all:

Setting up python-4suite-doc (0.99cvs20041008-5) ...
cannot create dhelp file '/usr/share/doc/python-4suite-doc/html/.dhelp': No 
such file or directory
dpkg: error processing python-4suite-doc (--configure):
 subprocess post-installation script returned error exit status 2

It turns out that the html directory doesn't exist -- creating it
causes the postinst script to be run without any error.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages python-4suite depends on:
ii  python-xml 0.8.4-1   XML tools for Python [dummy packag
ii  python2.3-4suite   0.99cvs20041008-5 An open-source platform for XML an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301577: python-4suite: python-4suite-doc fails in postinst

2005-03-26 Thread Hilko Bengen
Package: python-4suite
Version: 0.99cvs20041008-5
Severity: grave

The output pretty much says it all:

Setting up python-4suite-doc (0.99cvs20041008-5) ...
cannot create dhelp file '/usr/share/doc/python-4suite-doc/html/.dhelp': No 
such file or directory
dpkg: error processing python-4suite-doc (--configure):
 subprocess post-installation script returned error exit status 2

It turns out that the html directory doesn't exist -- creating it
causes the postinst script to be run without any error. It looks as if
the HTML documentation simply was not included in the package.

Cheers,
-Hilko

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages python-4suite depends on:
ii  python-xml 0.8.4-1   XML tools for Python [dummy packag
ii  python2.3-4suite   0.99cvs20041008-5 An open-source platform for XML an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301741: mysql-server: Wildcard accounts lead to unnecessary confusion

2005-03-27 Thread Hilko Bengen
Package: mysql-server
Version: 4.0.24-3
Severity: important

This is the state the MySQL user database is in after a fresh install.

mysql> select Host, User, Password from user;
+---+--+--+
| Host  | User | Password |
+---+--+--+
| localhost | root |  |
| ataraxia  | root |  |
| localhost |  |  |
| ataraxia  |  |  |
| localhost | debian-sys-maint | 574952o84q75o3r8 |
+---+--+--+
6 rows in set (0.00 sec)

I then used phpMyAdmin to create a database and a user which I granted
access to the database. As can be seen below, a password has been set
for the user.

mysql> select Host, User, Password from user where User='bengen';
+--++--+
| Host | User   | Password |
+--++--+
| %| bengen | 4655p05o05s11sno |
+--++--+
1 row in set (0.00 sec)

However, trying to access the database by specifying this user and
entering the password, this gives me the following error:

[EMAIL PROTECTED]: $ mysql -u bengen bengen -p
Enter password:
ERROR 1045: Access denied for user: '[EMAIL PROTECTED]' (Using password: YES)

I then changed the Host field of my newly created user and tried
again:

mysql> update user set Host='localhost' where User='bengen';
Query OK, 1 row affected (0.00 sec)

Voila! After reloading the privileges, I was granted access to my
database.

It appears to me as if a host entry with wildcard user was checked
before a user entry with a wildcard host. This might make perfect
sense, but I fail to see the reason why the two wildcard users are
there in the first place. 

They might not be a security risk, as they don't have any privileges
associated with them. But they will surely lead to confusion in cases
where the DBA wants to set up username/password pairs as the only
means of access control.

Please consider removing the two wildcard accounts from the default
installation.

Thanks,
-Hilko

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages mysql-server depends on:
ii  adduser  3.63Add and remove users and groups
ii  debconf  1.4.46  Debian configuration management sy
ii  gawk 1:3.1.4-2   GNU awk, a pattern scanning and pr
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libdbi-perl  1.46-6  Perl5 database interface by Tim Bu
ii  libmysqlclient12 4.0.24-3mysql database client library
ii  libstdc++5   1:3.3.5-12  The GNU Standard C++ Library v3
ii  libwrap0 7.6.dbs-8   Wietse Venema's TCP wrappers libra
ii  mailx1:8.1.2-0.20040524cvs-4 A simple mail user agent
ii  mysql-client 4.0.24-3mysql database client binaries
ii  mysql-common 4.0.24-3mysql database common files (e.g. 
ii  passwd   1:4.0.3-31sarge1change and administer password and
ii  perl 5.8.4-8 Larry Wall's Practical Extraction 
ii  psmisc   21.6-1  Utilities that use the proc filesy
ii  zlib1g   1:1.2.2-4   compression library - runtime

-- debconf information:
  mysql-server/really_downgrade_from_41: false
  mysql-server/start_on_boot: true
  mysql-server/postrm_remove_databases: false
* mysql-server/mysql_install_db_notes:
  mysql-server/nis_warning:
  mysql-server/mysql_update_hints1:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#301866: kvim: Can't be upgraded together with vim

2005-03-28 Thread Hilko Bengen
Package: kvim
Version: 1:6.3-068+1
Severity: important

Just see below.

I suppose my upgrade would have been ok if the new version of the vim
package had been installed before kvim. An apt-get -f install
afterwards fixed things.

Cheers,
-Hilko

[EMAIL PROTECTED]: ~ $ sudo apt-get upgrade
Password:
[...]
Fetched 6839kB in 59s (115kB/s)
Reading Package Lists... Done
Reading Package Lists... Done
Building Dependency Tree... Done
The following packages have been kept back:
  mozilla-firefox-gnome-support
The following packages will be upgraded:
  dash kvim libaspell15 libc-client2002edebian libieee1284-3 libxml2 mlock
  uw-imapd vim vim-common xnee
11 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Need to get 7057kB of archives.
After unpacking 0B of additional disk space will be used.
Do you want to continue? [Y/n]
[...]
Preconfiguring packages ...
(Reading database ... 201708 files and directories currently installed.)
Preparing to replace dash 0.5.2-2 (using .../archives/dash_0.5.2-3_i386.deb) 
...Unpacking replacement dash ...
Preparing to replace kvim 1:6.3-068+1 (using .../kvim_1%3a6.3-068+2_i386.deb) 
...
Unpacking replacement kvim ...
dpkg: error processing /var/cache/apt/archives/kvim_1%3a6.3-068+2_i386.deb 
(--unpack):
 trying to overwrite `/usr/share/pixmaps/vim-16.xpm', which is also in package 
vim
Preparing to replace vim 1:6.3-068+1 (using .../vim_1%3a6.3-068+2_i386.deb) ...
Unpacking replacement vim ...
Preparing to replace vim-common 1:6.3-068+1 (using 
.../vim-common_1%3a6.3-068+2_all.deb) ...
Unpacking replacement vim-common ...
Preparing to replace libaspell15 0.60.2+20050121-1 (using 
.../libaspell15_0.60.2+20050121-2_i386.deb) ...
Unpacking replacement libaspell15 ...
Preparing to replace mlock 7:2002edebian1-7 (using 
.../mlock_7%3a2002edebian1-8_i386.deb) ...
Unpacking replacement mlock ...
Preparing to replace libc-client2002edebian 7:2002edebian1-7 (using 
.../libc-client2002edebian_7%3a2002edebian1-8_i386.deb) ...
Unpacking replacement libc-client2002edebian ...
Preparing to replace libieee1284-3 0.2.9-3 (using 
.../libieee1284-3_0.2.10-1_i386.deb) ...
Unpacking replacement libieee1284-3 ...
Preparing to replace libxml2 2.6.16-4 (using .../libxml2_2.6.16-6_i386.deb) ...
Unpacking replacement libxml2 ...
Preparing to replace uw-imapd 7:2002edebian1-7 (using 
.../uw-imapd_7%3a2002edebian1-8_i386.deb) ...
Unpacking replacement uw-imapd ...
Preparing to replace xnee 1.08-1 (using .../archives/xnee_1.08-2_i386.deb) ...
Unpacking replacement xnee ...
Errors were encountered while processing:
 /var/cache/apt/archives/kvim_1%3a6.3-068+2_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages kvim depends on:
ii  kdelibs4 4:3.3.2-4.0.2   KDE core libraries
ii  libc62.3.2.ds1-20GNU C Library: Shared libraries an
ii  libgcc1  1:3.4.3-12  GCC support library
ii  libgpmg1 1.19.6-19   General Purpose Mouse - shared lib
ii  libice6  4.3.0.dfsg.1-12.0.1 Inter-Client Exchange library
ii  libncurses5  5.4-4   Shared libraries for terminal hand
ii  libqt3c102-mt3:3.3.3-8   Qt GUI Library (Threaded runtime v
ii  libsm6   4.3.0.dfsg.1-12.0.1 X Window System Session Management
ii  libstdc++5   1:3.3.5-12  The GNU Standard C++ Library v3
ii  libx11-6 4.3.0.dfsg.1-12.0.1 X Window System protocol client li
ii  libxt6   4.3.0.dfsg.1-12.0.1 X Toolkit Intrinsics
pn  vim  Not found.
ii  xlibs4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#316905: drupal: Cron job makes Call to undefined function: mysql_connect()

2005-07-04 Thread Hilko Bengen
close 316905
thank you

Norbert Veber <[EMAIL PROTECTED]> writes:

> I just installed drupal for the first time ie. it was not an upgrade.
> The web part of it seems to be working, however every 5 minutes I get an
> email like this:
>
> From: Cron Daemon <[EMAIL PROTECTED]>
> Subject: Cron <[EMAIL PROTECTED]>  [ -x 
> /usr/share/drupal/scripts/cron.sh ] && /usr/share/drupal/scripts/cron.sh
> To: [EMAIL PROTECTED]
>
> Fatal error: Call to undefined function:  mysql_connect() in 
> /usr/share/drupal/includes/database.mysql.inc on line 31

This is not a bug in the Drupal package. Your PHP installation does not load
MySQL support.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#317943: php4-cgi: The -b parameter to the FastCGI binary does not accept pathnames

2005-07-12 Thread Hilko Bengen
Package: php4-cgi
Version: 4:4.3.10-15
Severity: important

(I have submitted this bug upstream also. See #33663 at bugs.php.net.)

I would like to start an instance of the FastCGI interpreter which
listens to a Unix Domain socket. libfcgi would this, but the wrapper
code in cgi_main.c differentiates only between

php4-cgi -b $ADDRESS:$PORT

and

php4-cgi -b [:]$PORT

If the colon is missing, it is assumed that the user wants a TCP socket
which is not bound to a specific address and thus a colon is prepended.
This breaks passing a path to a Unix Domain socket.

Fix: Since libfcgi apparently accepts the port only in numeric form
anyhow, I have simply added a check whether the first character of the
argument is a digit. In this case, it is assumed to be a port and
prepended with a colon. If not, it is assumed to be a pathname.
Alternatively, one could altogether remove the code which prepends the
colon and document the behavior.

Cheers,
-Hilko

diff -ui cgi_main.c.orig cgi_main.c
--- cgi_main.c.orig 2005-07-12 15:04:19.0 +0200
+++ cgi_main.c  2005-07-12 15:53:48.0 +0200
@@ -1140,12 +1140,12 @@
/* this must be done to make FCGX_OpenSocket work correctly 
   bug 23664 */
close(0);
-   /* Pass on the arg to the FastCGI library, with one exception.
-* If just a port is specified, then we prepend a ':' onto the
-* path (it's what the fastcgi library expects)
+   /* Pass on the arg to the FastCGI library, with one exception. 
+* If just a numeric port is specified, then we prepend a ':'
+* onto the path (it's what the fastcgi library expects)
 */

-   if (strchr(bindpath, ':') == NULL) {
+   if ( isdigit(bindpath[0]) && (strchr(bindpath, ':') == NULL) ) {
char *tmp;
 
tmp = malloc(strlen(bindpath) + 2);

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages php4-cgi depends on:
ii  debconf [debconf-2.0]   1.4.52   Debian configuration management sy
ii  libbz2-1.0  1.0.2-7  high-quality block-sorting file co
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libcomerr2  1.38-1   common error description library
ii  libdb4.24.2.52-19Berkeley v4.2 Database Libraries [
ii  libexpat1   1.95.8-3 XML parsing C library - runtime li
ii  libkrb531.3.6-3  MIT Kerberos runtime libraries
ii  libmagic1   4.12-1   File type determination library us
ii  libpcre35.0-1.1  Perl 5 Compatible Regular Expressi
ii  libssl0.9.7 0.9.7g-1 SSL shared libraries
ii  libzzip-0-120.12.83-5library providing read access on Z
ii  mime-support3.34-1   MIME files 'mime.types' & 'mailcap
ii  php4-cli4:4.3.10-15  command-line interpreter for the p
ii  php4-common 4:4.3.10-15  Common files for packages built fr
ii  zlib1g  1:1.2.2-7compression library - runtime

php4-cgi recommends no packages.

-- debconf information:
  php4/update_cgi_php_ini: true


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#330682: mantis: Several vulnerabilities in Mantis

2005-10-19 Thread Hilko Bengen
Thijs Kinkhorst <[EMAIL PROTECTED]> writes:

> Hello,
>
> On Thu, 29 Sep 2005, Moritz Muehlenhoff <[EMAIL PROTECTED]> wrote:
>> mantis 1.0.0-rc2 fixed these security problems, that seem to be missing in
>> the latest DSA upload that fixed several others:
>> 
>> - 0006097: [security] user ID is cached indefinately (thraxisp)
>> - 0006189: [security] List of users (in filter) visible for unauthorized 
>> users. (thraxisp)
>> 
>> Besides that there was a CVE assignment (CAN-2005-3091) for a 
>> Cross-Site-Scripting
>> vulnerability that refers the Mantis bug 5751, for which I can't find a 
>> referenced
>> fix in the 0.19.2-4 changelog as well.
>
> Three weeks later, there has been no response yet from the maintainer,
> perhaps you are busy with other projects? Since I think it's important
> that RC bugs get fixed in a timely manner, I am looking into preparing
> an NMU for this within the next week. This is of course no offense but
> an effort to help improve the quality of Debian.

No offense taken. My impression was that those bugs had all been fixed
in the last security update, as Joey suggested.

> Please let me know if you oppose to an NMU. I will post a patch as
> soon as I have one.

Please go ahead. 

I am no longer a user of Mantis. If you are interested, you can take
over the package, too.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#331708: iPodder often crashes upon adding new podcasts.

2005-10-19 Thread Hilko Bengen
tag 331708 +moreinfo
thanks

Uwe Hermann <[EMAIL PROTECTED]> writes:

> iPodder crashes very often on me when I add new podcasts. CPU usage goes
> up to 100% and stays there, iPodder doesn't react on any input.
> The only thing I can do is kill the process...

This has not happened to me so far. Could you please provide some more
information -- does this only happen on specific URLs? Is anything
output to stdout if you run ipodder from an xterm?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#328448: iPodderData folder still being created

2005-10-04 Thread Hilko Bengen
Simon Males <[EMAIL PROTECTED]> writes:

> With the updated package I moved iPodderData to .ipodder, but on launch 
> iPodderData folder is still being created.

I noticed that this happens with my installation, too. Seems that the
appdata_dir entry in ipodder.cfg is not settable by the GUI. Changing
it through an editor fixed this for me.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#328463: drupal: /usr/lib/postgresql/lib/plpgsql.so not available anymore

2005-10-06 Thread Hilko Bengen
Ingo Juergensmann <[EMAIL PROTECTED]> writes:

> After PostgreSQL migrated to the support of multiple PSQL instances
> installed on the same box, such as 7.4 and 8.0, the following library wasn't
> found anymore by drupal:
>
> /usr/lib/postgresql/lib/plpgsql.so

I suspect that this has something to do with your PHP installation
rather than Drupal. Drupal does not load plpgsql.so directly.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#312230: Don't "fix" the db schema.

2005-10-06 Thread Hilko Bengen
The `uid' field in the `sessions' table should not be 0. The
corresponding SQL statement in the PHP code should be fixed instead.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#272098: Any progress with SLIME?

2005-09-09 Thread Hilko Bengen
Is anyone still working on this?

I just made a package of SLIME 1.2.1 last night for myself. It's about
complete and almost-ready-for-unstable, as far as I'm concerned. 

I'd like to upload in the next few days if nobody objects.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#272098: Any progress with SLIME?

2005-09-09 Thread Hilko Bengen
René van Bevern <[EMAIL PROTECTED]> writes:

> Slime has been rejected from NEW. More information is here:
> http://common-lisp.net/pipermail/cl-debian/2005-August/000283.html
>
> I don't know if these issues have been solved by now.

It seems that they have resolved everything but the non-free
nregexp.lisp license. Somebody suggested using ppcre instead.

Cheers,
-Hilko



Bug#326686: ipodder: fails to start

2005-09-16 Thread Hilko Bengen
Simon Males <[EMAIL PROTECTED]> writes:

> I have the same problem. Though unable to remove libwxgtk2.4-python as 
> bittorando-gui depends on it. Is this still considered a solution?

libwxgtk2.4-python does not exist in unstable any more. This is a bug
with bittorrent-gui. I'm going to file a bug on that.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#323914: mantis: dangling symlink to adodb

2005-08-20 Thread Hilko Bengen
Jeremy Laine <[EMAIL PROTECTED]> writes:

> Package: mantis
> Version: 0.19.2-3
> Severity: important
>
> During installation, a symlink is created from
> /usr/share/mantis/gui/core/adodb to /usr/share/adodb, but this is
> incorrect, it should point to /usr/share/php/adodb

The location of adodb has changed in unstable. Will be fixed in next
release of Mantis package.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#325141: mantis: users cannot signup

2005-08-26 Thread Hilko Bengen
Klemens Kasemaa <[EMAIL PROTECTED]> writes:

> Package: mantis
> Version: 0.19.2-4
> Severity: grave
> Tags: patch
> Justification: renders package unusable

Please describe what you tried, what reaction you'd expect from Mantis
and what you got.

With a fresh installation, I could very well sign up and login
afterwards. Thus, for me the bug, as it was reported, is not
reproducible.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#325141: mantis: users cannot signup

2005-08-26 Thread Hilko Bengen
tags 325141 unreproducible
severity 325141 normal
thank you

Klemens Kasemaa <[EMAIL PROTECTED]> writes:

>> With a fresh installation, I could very well sign up and login
>> afterwards. Thus, for me the bug, as it was reported, is not
>> reproducible.
>
> problem is described here:
> http://www.mantisbt.org/mantis/view.php?id=4995 fix is in version
> 1.0.0a1, but it would be nice to include it in Sarge package as
> well.

The submitter of that bug report states that he upgraded to an (not
further specified) snapshot taken from CVS. Probably he refers to the
development tree towards 1.0final.

Are you experiencing an actual problem with the 0.19.2-4 package from
Sarge? I tried to reproduce the bug earlier today and failed:
Everything works fine on a freshly installed system.

Please tell me how to reproduce the bug, starting from a system (or
chroot environment) without any trace of the mantis package installed. 

As a responsible Debian developer, I am certainly not going to
backport seemingly random changes from upstream's development tree
without (1) proof that anything needs to be fixed and (2) a certain
understanding of those changes.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#333574: Does not work with PHP set up as CGI / FastCGI

2005-10-12 Thread Hilko Bengen
Package: dokuwiki
Version: 0.0.20050922-4
Severity: important
Tags: patch

When PHP in a CGI or FastCGI setup is used to run Dokuwiki, Dokuwiki
thinks that the base URI is the base URI of the PHP interpreter: The
first page is shown, but all the inline images, CSS, and relative
links are wrong. Using REQUEST_URI before or instead of SCRIPT_NAME in
inc/init.php fixes things.

I have also contacted upstream, so this might be fixed in the next
release.

Cheers,
-Hilko

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dokuwiki depends on:
ii  debconf [debconf-2.0] 1.4.58 Debian configuration management sy
ii  php4  4:4.4.0-3  server-side, HTML-embedded scripti
ii  ucf   2.002  Update Configuration File: preserv

Versions of packages dokuwiki recommends:
ii  apache [httpd-cgi]1.3.33-8   versatile, high-performance HTTP s
ii  apache2-mpm-prefork [httpd-cg 2.0.54-5   traditional model for Apache2

-- debconf information:
* dokuwiki/system/accessible: localhost only
  dokuwiki/webservers: apache
* dokuwiki/system/documentroot: /dokuwiki
  dokuwiki/system/localnet: 10.0.0.0/24
* dokuwiki/system/purgepages: true

Patch:

--- inc/init.php.orig   2005-10-11 15:17:37.0 +0200
+++ inc/init.php2005-10-11 15:17:43.0 +0200
@@ -157,6 +157,8 @@
 
   if($conf['basedir']){
 $dir = $conf['basedir'].'/';
+  }elseif($_SERVER['REQUEST_URI']){
+$dir = dirname($_SERVER['REQUEST_URI']).'/';
   }elseif($_SERVER['SCRIPT_NAME']){
 $dir = dirname($_SERVER['SCRIPT_NAME']).'/';
   }elseif($_SERVER['DOCUMENT_ROOT'] && $_SERVER['SCRIPT_FILENAME']){


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#329418: ipodder: Crashes on startup

2005-09-21 Thread Hilko Bengen
John Goerzen <[EMAIL PROTECTED]> writes:

> Package: ipodder
> Version: 2.1-1
> Severity: important
>
> $ ipodder
> [,  'ipodder.players.NoPlayer'>]
> Traceback (most recent call last):
>   File "/usr/share/ipodder/iPodderGui.py", line 148, in ?
>   class MySplashScreen(wx.SplashScreen):
>   AttributeError: 'module' object has no attribute 'SplashScreen'

Version 2.1-2 conflicts against libwxgtk2.4-python because of this
error message. Do you have libwxgtk2.4-python (which has been removed
from unstable) installed?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#326686: ipodder: fails to start

2005-09-05 Thread Hilko Bengen
Cyril Brulebois <[EMAIL PROTECTED]> writes:

> Package: ipodder
> Version: 2.1-1
> Severity: important
>
> Hi. When trying to start ipodder, I've got that crash:
>
> ---8<---8<---8<---8<---8<---
> $ ipodder
> [, ]
> Traceback (most recent call last):
>   File "/usr/share/ipodder/iPodderGui.py", line 148, in ?
> class MySplashScreen(wx.SplashScreen):
> AttributeError: 'module' object has no attribute 'SplashScreen'
> ---8<---8<---8<---8<---8<---

Uh. This is strange. Do you have any other version of pygtk
(python-wxgtk2.4?) installed?

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#326890: ipodder: xmms starting problem at podcast with german umlaute

2005-09-06 Thread Hilko Bengen
Mirko Weber <[EMAIL PROTECTED]> writes:

> at my System i cant start downloads directly from iPodder with xmms
> at a Poddcast, which has german umlaute in his playlistname. 
> Everything from iPodder (downloading, deleting) goes, but the remote
> start of xmms not.

Could you please provide the podcast you tried to play with XMMS?

Thanks,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#326686: ipodder: fails to start

2005-09-06 Thread Hilko Bengen
Jim <[EMAIL PROTECTED]> writes:

> I had the exact same problem, however the following seems to have solved  
> the issue:
>
> # apt-get install python-wxgtk2.4
>
> (which in turn removes libwxgtk2.4-python)

Ah, thank you very much. Since libwxgtk2.4-python is a leftover from
Sarge, it's not a bug in the ipodder package itself, I think.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Bug#326987: python2.3-xmms: Throws UnicodeEncodeError exception on non-ASCII filenames

2005-09-06 Thread Hilko Bengen
Package: python2.3-xmms
Version: 2.04-2
Severity: important
Tags: patch

I just received a bugreport against iPodder (see #326890), and I
believe, that python-xmms behaves wrongly here. I was able to add
non-ASCII filenames to the XMMS playlist without an exception after
making the changes below which make sure that each filename is
UTF8-encoded. 

To my knowledge, this does not break any ASCII pathnames, but it might
be better to check for the current locale or something here.

Traceback (most recent call last):
  File "./iPodderGui.py", line 2563, in OnEpisodesListLeftDown
self.PlayEpisode(path)
  File "./iPodderGui.py", line 2625, in PlayEpisode
self.ipodder.config.player.play_file(path,rude=True)
  File "/home/bengen/src/deb/ipodder/ipodder/ipodder/players.py", line 151, in 
play_file
xmms.enqueue_and_play_launch_if_session_not_started( [ filename ] )
  File "/usr/lib/python2.3/site-packages/xmms/control.py", line 368, in 
enqueue_and_play_launch_if_session_not_started
enqueue_and_play(seq, session)
  File "/usr/lib/python2.3/site-packages/xmms/control.py", line 294, in 
enqueue_and_play
playlist_add_allow_relative(seq, session)
  File "/usr/lib/python2.3/site-packages/xmms/control.py", line 279, in 
playlist_add_allow_relative
playlist_add(abs_seq, session)
UnicodeEncodeError: 'ascii' codec can't encode character u'\xf6' in position 
68: ordinal not in range(128)

--- pyxmms-2.04.orig/src/_xmmscontrolmodule.c
+++ pyxmms-2.04/src/_xmmscontrolmodule.c
@@ -313,7 +313,7 @@
 {
 /* Retreive a string from the sequence */
 item = PySequence_Fast_GET_ITEM(fast_seq, i);
-if ((py_internal_str = PyString_AsString(item)) == NULL)
+   if ((py_internal_str = 
PyString_AsString(PyUnicode_AsUTF8String(item))) == NULL)
 goto error;
 
 /* In case xmms would write to py_internal_str ... */
@@ -391,7 +391,7 @@
 for (i=0; i < seq_len; i++)
 {
 item = PySequence_Fast_GET_ITEM(fast_seq, i);
-if ((str = PyString_AsString(item)) == NULL)
+   if ((str = PyString_AsString(PyUnicode_AsUTF8String(item))) == NULL)
 goto error;
 
 /* In case xmms would write to the string... */


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages python2.3-xmms depends on:
ii  libc6   2.3.5-6  GNU C Library: Shared libraries an
ii  libglib1.2  1.2.10-10The GLib library of C routines
ii  python2.3   2.3.5-8  An interactive high-level object-o
ii  xmms1.2.10+cvs20050209-2 Versatile X audio player that look

python2.3-xmms recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#326890: ipodder: xmms starting problem at podcast with german umlaute

2005-09-06 Thread Hilko Bengen
After an hour of debugging, I think that I have tracked down the bug
in python-xmms and submitted a bug.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#393457: mpd: mpd hangs when SEEKing in a track that has been PAUSEd

2007-01-23 Thread Hilko Bengen
severity 393457 grave
thank you

mpd also hangs when one tries to seek in a paused song.

,
| [EMAIL PROTECTED]:~ $ mpc playlist
| [EMAIL PROTECTED]:~ $ mpc add 
bengen/mash-up/cheekyboy_billy_ocean_vs_britney.mp3
| adding: bengen/mash-up/cheekyboy_billy_ocean_vs_britney.mp3
| [EMAIL PROTECTED]:~ $ mpc play
| cheekyboy vs billy ocean vs britney - carribean slave for you
| [playing] #1/1   0:00 (0%)
| volume: 71%   repeat: onrandom: off
| [EMAIL PROTECTED]:~ $ mpc pause
| cheekyboy vs billy ocean vs britney - carribean slave for you
| [paused]  #1/1   0:06 (3%)
| volume: 71%   repeat: onrandom: off
| [EMAIL PROTECTED]:~ $ mpc seek '30%'
| error: connection timeout
`

It just hangs, doesn't accept new connections, and can't be shutdown
using the init script.

I have been able to reproduce this behavior with other MP3, OGG, WAV,
and MOD files. IMO, this makes the program pretty much unusable.

Cheers,
-Hilko

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages mpd depends on:
ii  libao2 0.8.6-4   Cross Platform Audio Output Librar
ii  libasound2 1.0.13-1  ALSA library
ii  libaudiofile0  0.2.6-6   Open-source version of SGI's audio
ii  libc6  2.3.6.ds1-10  GNU C Library: Shared libraries
ii  libflac7   1.1.2-6   Free Lossless Audio Codec - runtim
ii  libid3tag0 0.15.1b-10ID3 tag reading library from the M
ii  libmad00.15.1b-2.1   MPEG audio decoder library
ii  libmikmod2 3.1.11-a-6A portable sound library
ii  libmpcdec3 1.2.2-1   Musepack (MPC) format library
ii  libogg01.1.3-2   Ogg Bitstream Library
ii  libshout3  2.2.2-1   MP3/Ogg Vorbis broadcast streaming
ii  libspeex1  1.1.12-3  The Speex Speech Codec
ii  libtheora0 0.0.0.alpha7.dfsg-1.1 The Theora Video Compression Codec
ii  libvorbis0a1.1.2.dfsg-1.2The Vorbis General Audio Compressi
ii  libvorbisenc2  1.1.2.dfsg-1.2The Vorbis General Audio Compressi
ii  libvorbisfile3 1.1.2.dfsg-1.2The Vorbis General Audio Compressi
ii  zlib1g 1:1.2.3-13compression library - runtime

mpd recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#393457: can't reproduce the bug on my system now.

2007-01-24 Thread Hilko Bengen
I was using the ALSA output when I hit the bug, but I can't reproduce
it any more now. :-(

Feel free to reset the bug severity to normal.

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#402725: rss2email: r2e run does not check for errors on mail submission

2006-12-12 Thread Hilko Bengen
Package: rss2email
Version: 1:2.60-1.1
Severity: grave

r2e run does not mind when the MTA does not accept messages. It
happily marks articles as processed, even when it got a non-zero
return from sendmail or a 4xx or 5xx from the SMTP connection.

I'll try to come up with a patch for this issue.

Cheers,
-Hilko

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages rss2email depends on:
ii  python2.4.4-1An interactive high-level object-o
ii  python-feedparser 4.1-6  Universal Feed Parser for Python
ii  python-support0.5.6  automated rebuilding support for p

rss2email recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#402725: rss2email: r2e run does not check for errors on mail submission

2006-12-12 Thread Hilko Bengen
Joey Hess <[EMAIL PROTECTED]> writes:

> Actually, if no mail is sent over the SMTP connection,
> smtplib.sendmail should raise an SMTPRecipientsRefused exception.
> This exception is trapped and rss2email exits with an error message.

I'll need to check that. (I only experienced the bug with the sendmail
interface).

> I don't feel that this bug actually qualifies as grave severity. The
> potential for actual data loss depends on obscure situations where
> the data in the rss feed/blog vanishes after rss2email consumes it.

My issue is not so much about mails getting lost here, but rather
about the combination of 

(a) the state file being worthless WRT what messages need to be
fetched without the user noticing
and
(b) the state file not easily being read and modified with a text
editor.

> Relying on an email system as the only way to retreive data is a bad
> assumption to make today; you'll lose data anyway even if rss2email
> doesn't fail, due to bogus spam traps, etc.

I still maintain that mail (and state) loss due to a simple return
code not being checked is entirely rss2email's fault.

If fetchmail or a tool with similar goals behaved like this where it
could be avoided, there would be little doubt that this is
unacceptable and needs to be fixed.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#400624: This is a security issue

2006-12-13 Thread Hilko Bengen
severity 400624 grave
thank you

Since urlsnarf is usually used on a terminal to have a look at
requested URLs in real-time, a malicious attacker could use requests
with escape sequences to execute arbitrary code.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#400624: dsniff: urlsnarf should sanitize sniffed requests

2006-12-13 Thread Hilko Bengen
Steve Langasek <[EMAIL PROTECTED]> writes:

>> Since urlsnarf is usually used on a terminal to have a look at
>> requested URLs in real-time, a malicious attacker could use
>> requests with escape sequences to execute arbitrary code.
>
> By this reasoning, cat would have a grave bug for allowing users to
> send untrusted files to the terminal without escaping.

Nah. 

urlsnarf is designed specifically to display URIs from HTTP requests
out of sniffed network traffic, and there are various RfCs that define
pretty well what characters in a URI are valid and what characters
aren't.

Comparing urlsnarf to cat does not make any sense.

> If a terminal can be exploited to cause arbitrary code execution
> through control sequences in a file being displayed, we should
> consider this a bug in the terminal.

It would _also_ be a bug in the terminal application.

As a user of urlsnarf, I'd expect ASCII output that will not mess up
my terminal in whatever way.

By the way, since CVE-2003-0020, the Apache webserver has been doing
the same log file sanitizing.

> I don't see any reason that dsniff should be picked on here 

I am not picking on anything or anybody here, only trying to fix bugs
where appropriate.

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#400400: dh-make-perl: Generated Build-Depends-Indep field makes no sense

2006-11-25 Thread Hilko Bengen
Package: dh-make-perl
Version: 0.24
Severity: serious
Tags: patch

When trying to create a .deb from DateTime-Format-ISO8601-0.0403,
dh-make-perl put the following line into debian/control:

 Build-Depends-Indep: 5.8.8-6.1

>From looking at an older version of dh-make-perl, I guessed that
something along the lines of

 Build-Depends-Indep: perl (>= 5.8.8-6.1)

is what you had in mind. The attached patch should do the trick.

Cheers,
-Hilko

--- dh-make-perl.orig   2006-11-25 23:54:15.0 +0100
+++ dh-make-perl2006-11-25 23:54:52.0 +0100
@@ -145,7 +145,7 @@
 #my $section = 'interpreters';
 my $section = 'perl';
 my $depends = '${perl:Depends}';
-my $bdependsi = $perl_pkg->{Version};
+my $bdependsi = 'perl (>= '.$perl_pkg->{Version}.')';
 my $bdepends = 'debhelper (>= 5.0.0)';
 my $maintainer = get_maintainer();
 my $arch = 'all';

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dh-make-perl depends on:
ii  debhelper 5.0.42 helper programs for debian/rules
ii  dpkg-dev  1.13.24package building tools for Debian
ii  fakeroot  1.5.10 Gives a fake root environment
ii  libmodule-depends-perl0.10-1 identify the dependencies of a dis
ii  libyaml-perl  0.62-1 YAML Ain't Markup Language (tm)
ii  make  3.81-3 The GNU version of the "make" util
ii  perl  5.8.8-6.1  Larry Wall's Practical Extraction 
ii  perl-modules [libpod-parser-p 5.8.8-6.1  Core Perl modules

Versions of packages dh-make-perl recommends:
ii  apt-file  2.0.8.2APT package searching utility -- c
ii  libmodule-build-perl  0.26-1 Subclassable and make-independant 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#400624: dsniff: urlsnarf should sanitize sniffed requests

2006-11-27 Thread Hilko Bengen
Package: dsniff
Version: 2.4b1+debian-15
Severity: important
Tags: patch

urlsnarf directly outputs the user name, URL, Referer-URL, and the
User-Agent string of every HTTP request it sees on the wire, without
any sanitizing. Since it does not escape illegal characters, HTTP
requests containing non-ASCII bytes or double quote characters may
confuse most trying to parse CLF-style log files.

The attached patch modifies urlsnarf so that non-ASCII bytes are
escaped with \0xNN. Double quotes are escaped as \", and the backslash
is escaped as \\. (This is what Apache also seems to be doing.)

Cheers,
-Hilko

#! /bin/sh /usr/share/dpatch/dpatch-run
## 10_urlsnarf_escape.dpatch by Hilko Bengen <[EMAIL PROTECTED]>
##
## DP: Escape user, vhost, uri, referer, agent strings in log

@DPATCH@
--- dsniff-2.4b1+debian~/urlsnarf.c 2006-11-27 17:09:54.0 +0100
+++ dsniff-2.4b1+debian/urlsnarf.c  2006-11-27 17:08:41.0 +0100
@@ -84,6 +84,42 @@
return (tstr);
 }
 
+static char *
+escape_log_entry(char *string)
+{
+   char *out;
+   unsigned char *c, *o;
+   size_t len;
+
+   if (!string)
+   return NULL;
+
+   /* Determine needed length */
+   for (c = string, len = 0; *c; c++, len++) {
+   if ((*c < 32) || (*c >= 128))
+   len += 3;
+   if ((*c == '"') || (*c =='\\'))
+   len++;
+   }
+   out = malloc(len+1);
+   if (!out)
+   return NULL;
+   for (c = string, o = out; *c; c++, o++) {
+   if ((*c < 32) || (*c >= 128)) {
+   *(o++) = '\\';
+   *(o++) = 'x';
+   snprintf(o++, 3, "%02x", *c);
+   } else if ((*c == '"') || ((*c =='\\'))) {
+   *(o++) = '\\';
+   *o = *c;
+   } else {
+   *o=*c;
+   }
+   }
+   out[len]='\0';
+   return out;
+}
+
 static int
 process_http_request(struct tuple4 *addr, u_char *data, int len)
 {
@@ -142,18 +178,23 @@
buf_tok(NULL, NULL, i);
}
}
-   if (user == NULL)
-   user = "-";
-   if (vhost == NULL)
-   vhost = libnet_addr2name4(addr->daddr, Opt_dns);
-   if (referer == NULL)
-   referer = "-";
-   if (agent == NULL)
-   agent = "-";
-   
+   user = escape_log_entry(user);
+   vhost = escape_log_entry(vhost);
+   uri = escape_log_entry(uri);
+   referer = escape_log_entry(referer);
+   agent = escape_log_entry(agent);
+
printf("%s - %s [%s] \"%s http://%s%s\"; - - \"%s\" \"%s\"\n",
   libnet_addr2name4(addr->saddr, Opt_dns),
-  user, timestamp(), req, vhost, uri, referer, agent);
+  (user?user:"-"), timestamp(), req, 
+  (vhost?vhost:libnet_addr2name4(addr->daddr, Opt_dns)), 
+  uri, (referer?referer:"-"), (agent?agent:"-"));
+
+   if (user) free(user);
+   if (vhost) free(vhost);
+   if (uri) free(uri);
+   if (referer) free(referer);
+   if (agent) free(agent);
}
fflush(stdout);

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dsniff depends on:
ii  libc62.3.6.ds1-8 GNU C Library: Shared libraries
ii  libdb4.3 4.3.29-6Berkeley v4.3 Database Libraries [
ii  libnet1  1.1.2.1-2   library for the construction and h
ii  libnids1.21  1.21-0  IP defragmentation TCP segment rea
ii  libpcap0.8   0.9.5-1 System interface for user-level pa
ii  libssl0.9.8  0.9.8c-3SSL shared libraries
ii  openssl  0.9.8c-3Secure Socket Layer (SSL) binary a

dsniff recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#401077: rss2email: r2e doesn't lock feeds file

2006-11-30 Thread Hilko Bengen
Package: rss2email
Version: 1:2.60-1
Severity: grave

Although there is code in rss2email.py for locking the feeds.dat file
in which all the state information is stored, this is never used on
Debian systems, only on SunOS/Solaris:

,
| unix = 0
| try:
| import fcntl
| if sys.version.find('sunos') != -1:
| unix = 1
| except:
| pass
`

According to the python documentation, fcntl is only available on Unix
platforms, so any check on sys.version should not be necessary at all.

I have lost the state data twice (once due to a full /home partition,
once because of multiple instances of r2e running at the same time),
thus the "Severity: grave".

Cheers,
-Hilko

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages rss2email depends on:
ii  python-feedparser 4.1-6  Universal Feed Parser for Python
ii  python-support0.5.6  automated rebuilding support for p

rss2email recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#289624: drupal: When asked to keep existing conf, upgrade messes with it

2005-01-10 Thread Hilko Bengen
Mark Robinson <[EMAIL PROTECTED]> writes:

> Package: drupal
> Version: 4.5.1-1
> Severity: serious
> Justification: Policy 10.7.3

Sorry, I don't fully understand your bug report. I guess that you
think there's something wrong with the way /etc/drupal/conf.php is
handled.

> Fatal error: Table 'drupal.users_roles' doesn't exist query: SELECT r.rid,
> r.name FROM role r INNER JOIN users_roles ur ON ur.rid = r.rid WHERE ur.uid
> = 0 in /usr/share/drupal/includes/database.mysql.inc on line 125

You get this because the database structure has not been updated for
Drupal 4.5. You can either let the package do this or do this
manually. That's likely not a bug.

-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#289792: mantis depends on apache only (instead of apache or apache2)

2005-01-11 Thread Hilko Bengen
Adrian Zaugg <[EMAIL PROTECTED]> writes:

> Package: mantis
> Version: 0.17.1-3
   
This is apparently the version found in woody. The version in sarge is
0.17.5-8, IIRC.

> If you have installed apache2 as your webserver, you may not want to
> install apache, too. Mantis should depend on apache or apache2 (or
> maybe httpd).

The 0.19 versions in unstable do.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#296278: nagios-plugins: check_disk -p does not work as before 1.4

2005-02-21 Thread Hilko Bengen
Package: nagios-plugins
Version: 1.4-2
Severity: normal

[EMAIL PROTECTED]: ~ $ /usr/lib/nagios/plugins/check_disk -V
check_disk (nagios-plugins 1.4) 1.56
[EMAIL PROTECTED]: ~ $ df
Filesystem   1K-blocks  Used Available Use% Mounted on
[...]
/dev/hde6  2883672   1689180   1048008  62% /var
[EMAIL PROTECTED]: ~ $ ls -lad /var/log
drwxr-xr-x  11 root root 4096 2005-02-21 09:33 /var/log
[EMAIL PROTECTED]: ~ $ /usr/lib/nagios/plugins/check_disk -p /var
DISK OK - free space: /var 1023 MB (36%);| /var=1793MB;2816;2816;0;2816
[EMAIL PROTECTED]: ~ $ /usr/lib/nagios/plugins/check_disk -p /var/log
DISK CRITICAL - free space:| [/var/log not found]

Whereas the check_disk plugin prior to 1.4 returned its values for
any directory below /var. (Prior to 1.4, the plugin parsed the output of
df. Now it uses its own routines to determine paths.)

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (50, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-686-smp
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages nagios-plugins depends on:
ii  bind9-host [host]  1:9.2.4-1 Version of 'host' bundled with BIN
ii  dnsutils   1:9.2.4-1 Clients provided with BIND
ii  fping  2.4b2-to-ipv6-10  sends ICMP ECHO_REQUEST packets to
ii  iputils-ping [ping]3:20020927-2  Tools to test the reachability of 
ii  libc6  2.3.2.ds1-20  GNU C Library: Shared libraries an
ii  libldap2   2.1.30-3  OpenLDAP libraries
ii  libmysqlclient12   4.0.23-7  mysql database client library
ii  libnet-snmp-perl   5.0.1-1   Script SNMP connections
ii  libpq3 7.4.7-2   PostgreSQL C client library
ii  libssl0.9.70.9.7e-3  SSL shared libraries
ii  ntp1:4.2.0a+stable-2 Network Time Protocol: network uti
ii  ntp-simple 1:4.2.0a+stable-2 Network Time Protocol: daemon for 
ii  ntpdate1:4.2.0a+stable-2 The ntpdate client for setting sys
ii  procps 1:3.2.5-1 /proc file system utilities
ii  qstat  2.7-1 Command-line tool for querying qua
ii  radiusclient1  0.3.2-8   /bin/login replacement which uses 
ii  smbclient  3.0.10-1  a LanManager-like simple client fo
ii  snmp   5.1.2-6   NET SNMP (Simple Network Managemen

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#376177: Reproducing the bug

2007-02-14 Thread Hilko Bengen
found 376177 4.3.99.2-1
thanks

I have seen both xfdesktop and xfce4-menu-plugin processes that had
grown larger than 300MB here recently.

For xfce4-menu-plugin, it is quite easy to produce a memory leak that
is possibly related to the bug:

* Right-click the button, select "Edit Properties"
* Repeatedly toggle "Show icons in menu"
* Optionally select all the submenus so all icons are shown.

With each iteration, the plugin takes an additional 2MB of virtual
memory, more if one selects the submenus.

Running strace on the plugin while toggling the switch shows that it
reads a huge number of .desktop files in various locations --
~/.local/share/applications, /usr/share/applications,
/usr/share/gnome/apps, /home/bengen/.kde/share/apps,
/usr/share/applnk.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#402015: Patch for the issue

2007-03-22 Thread Hilko Bengen
tags 402015 +patch
thank you

emacs-snapshot-gtk w/ speedbar 1:1.0pre3-6
 C-h i ... works fine.
 C-x f /usr/share/python/pyversions.py ... works fine

After installing semantic (+ ede, eieio) and rebooting emacs:
 C-h i ... works fine.
 C-x f /usr/share/python/pyversions.py ... works fine

After installing ecb (+ cogre, cedet-contrib) and rebooting emacs:
 C-h i ... 
 eval: Recursive `require' for feature `sb-info'
 C-x f /usr/share/python/pyversions.py ... 
 File mode specification error: (error "Recursive `require' for feature 
`sb-info'")

I just pulled "$Id: sb.info.el,v 1.20 [...]" as indicated by Riccardo
Murri, rebuilt the cedet source package, and I can confirm that this
fixes the issue:

After upgrading speedbar to locally-built version 1:1.0pre3-6.1:
 C-h i ... works fine.
 C-x f /usr/share/python/pyversions.py ... works fine

Well, so it looks like bug in semantic that is probably exposed
through ecb.

The .dpatch file I used is attached below.

HTH,
-Hilko

##!/bin/sh -e
## 05_recursive_require_fix_sb-info.dpatch by Hilko Bengen <[EMAIL PROTECTED]>
##
## All lines beginning with \`## DP:' are a description of the patch.
## DP: Fix "Recursive `require' for feature sb-info"  in sb-info.el.

if [ $# -ne 1 ]; then
echo >&2 "`basename $0`: script expects -patch|-unpatch as argument"
exit 1
fi
case "$1" in
-patch) patch -f --no-backup-if-mismatch --dry-run -p1 < $0 && patch -f 
--no-backup-if-mismatch -p1 < $0
;;
-unpatch) patch -f --no-backup-if-mismatch -R -p1 < $0;;
*)
echo >&2 "`basename $0`: script expects -patch|-unpatch as 
argument"
exit 1;;
esac

exit 0

diff -urN cedet-1.0pre3.orig/speedbar/sb-info.el 
cedet-1.0pre3/speedbar/sb-info.el
--- cedet-1.0pre3.orig/speedbar/sb-info.el  2005/06/30 01:48:56 1.19
+++ cedet-1.0pre3/speedbar/sb-info.el   2006/06/23 08:26:16 1.20 HEAD
@@ -5,7 +5,7 @@
 ;; Author: Eric M. Ludlam <[EMAIL PROTECTED]>
 ;; Version: 0.3
 ;; Keywords: file, tags, tools
-;; X-RCS: $Id: sb-info.el,v 1.19 2005/06/30 01:48:56 zappo Exp $
+;; X-RCS: $Id: sb-info.el,v 1.20 2006/06/23 08:26:16 ponced Exp $
 ;;
 ;; This file is patch of GNU Emacs.
 ;;
@@ -247,9 +247,9 @@
   (Info-speedbar-hierarchy-buttons nil 0)
   )
 
+(provide 'sb-info)
+
 ;;; Overriding preinstalled code.
 ;;;###autoload
 (eval-after-load "info" '(require 'sb-info))
-
-(provide 'sb-info)
 ;;; sb-info.el ends here


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#387109: Does ulog-acctd support logfile > 2GB ?

2006-09-12 Thread Hilko Bengen
Fabrice LORRAIN <[EMAIL PROTECTED]> writes:

> Hence my question, Does ulog-acctd support manipulating >2GB log
> files. Comments ?

Sorry, I don't know. Probably not. It's one of those cases where I
would have said "2 gigs fo logfiles should be enough for everybody" if
somebody had brought up that question.

I'll look into it, though.

Cheers,
-Hilko



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#387109: Does ulog-acctd support logfile > 2GB ?

2006-09-12 Thread Hilko Bengen
Fabrice LORRAIN <[EMAIL PROTECTED]> writes:

Please try adding -D_FILE_OFFSET_BITS=64 to src/Makefile and
recompiling the package.

Cheers,
-Hilko



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#732968: libwine-dev: arch-dependent file in "Multi-Arch: same" package

2013-12-23 Thread Hilko Bengen
* Jakub Wilk:

> libwine-dev is marked as "Multi-Arch: same", but the following file is
> architecture-dependent:
>
> /usr/include/wine/windows/rmxftmpl.h

This looks like an endianess issue.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#732715: Patch

2013-12-25 Thread Hilko Bengen
Control: tag -1 upstream
Control: tag -1 patch

After looking at the reference conuters using Devel::Peek (modified
reproducer program is attached), it looks to me as if the "Attempt to
free unreferenced scalar" message affected only the last entry in the
list: REFCNT=1 where it should be at least 2. The first entry gets
REFCNT=1, all other get REFCNT=2. I suspect that the reference counters
get messed up at the end of the loop and that this has something to do
with the POP_MULTICALL macro.

Setting $_ to undef (at least that's what I think GvSV(PL_defgv) means)
before the POP_MULTICALL seems to fix the problem here.

Cheers,
-Hilko

#!/usr/bin/perl

use 5.010;
# use blib;
use List::MoreUtils;
use Devel::Peek;

my @files = qw< foo bar baz qux >;
my @groups = List::MoreUtils::part (
sub {
given ($_) {
when ('foo') { return 0 }
when ('bar') { return 1 } 
when ('baz') { return 2 }
when ('qux') { return 3 }
}
},
@files,
);
Dump \@files;
say STDERR '---';
Dump \@groups;
Index: liblist-moreutils-perl-0.33/MoreUtils.xs
===
--- liblist-moreutils-perl-0.33.orig/MoreUtils.xs	2011-08-04 11:39:36.0 +0200
+++ liblist-moreutils-perl-0.33/MoreUtils.xs	2013-12-25 18:48:53.047764311 +0100
@@ -1310,6 +1310,7 @@
 	av_push(tmp[idx], args[i]);
 	SvREFCNT_inc(args[i]);
 }
+GvSV(PL_defgv) = &PL_sv_undef;
 POP_MULTICALL;
 
 EXTEND(SP, last);


Bug#737950: liblinear1 pulls in more than description

2014-02-18 Thread Hilko Bengen
* Marco Tedaldi:

> Depends: libblas3gf | libblas.so.3gf | libatlas3gf-base, libc6 (>=
> 2.2.5), libgcc1 (>= 1:4.1.1), libstdc++6 (>= 4.1.1)
> Recommends: liblinear-tools (= 1.8+dfsg-1)
> Suggests: liblinear-dev (= 1.8+dfsg-1)
>
> All these dependencies are already met on my system. But it still
> wants to install a huge load of other packages.
> 
> [...]

Are the dependencies also pulled in if you do

apt-get -oAPT::Install-Recommends=false install liblinear1

? If not, you may want to set that option in /etc/apt/apt.conf or
/etc/apt/apt.conf.d/.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#727283: Fixed in 6.40-0.2

2014-01-22 Thread Hilko Bengen
I uploaded nmap 6.40-0.2 to DELAYED/10 last night. It uses dh-autoreconf
and while I was at it, I took the liberty to modernize the package a
bit. Feel free to reschedule or cancel as needed.

Cheers,
-Hilko

nmap (6.40-0.2) unstable; urgency=low

  * Yet another non-maintainer upload.
  * Modernize Debian build
- Use Debhelper 9, with --parallel
- Use dh-autoreconf (Closes: #727283)
- Bump Standards-Version
- Update git URL

 -- Hilko Bengen   Tue, 21 Jan 2014 23:12:31 +0100



nmap_6.40-0.2.diff.gz
Description: Binary data


Bug#660826: For those who care about ElasticSearch: build dependencies, RFH

2014-01-23 Thread Hilko Bengen
After struggling off and on with several projects' mostly Maven-based
build systems (and our tool support for Maven), I have finally gotten
ElasticSearch 1.0.0 RC1 to build on a Debian/unstable box without
network connectivity. The dependencies used to build the package have
been provided through individual locally built Debian packages.

I do not feel comfortable with uploading the dozen-or-so packages to
unstable right away because the quality of those packages is not up to
my standards and I do not really want to maintain them myself. I am no
Java developer and I have found out just enough about Maven and
maven-*-helper to be able to cause some damage using copy&paste
techniques. (I have, however, come to form strong opinions about
software library models that are based upon eternal availability of
unmaintained, buggy versions rather than a desire to provide stable
APIs/ABIs. But I digress.)

So, I need some help.

As a first step, I am going to document the various required
dependencies in the form of RFP bugs that are going to be linked to this
bug (#660826: RFP Elasticsearch) and I will try to make my efforts
available through git repositories as a possible starting point for
whoever wants to pick up from there.

The following packages that are not yet in Debian were needed:

- Apache Lucene 4.6 (lucene3 which is available is not enough.)
- A newer netty (3.9.0.Final is wanted, we have 3.2.6.Final in
  unstable.)
- spatial4j
- compress-lzf 0.9.6 (API breakage with a class becoming abstract after
  that. WTF?)
- hyperic-sigar
- carrotsearch-hppc
- icu4j-49 (Not sure if the exact "major" version is needed or if it's
  possible to just go the current fifty-something version instead.)

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#736513: morfologik-stemming: Contains blobs that are needed for building.

2014-01-24 Thread Hilko Bengen
Source: morfologik-stemming
Version: 1.5.0-0.1
Severity: grave

The source package contains .jar files without sources. When they are
deleted, the build fails.

carrotsearch-hppc is not even in Debian right now...

Cheers,
-Hilko

$ apt-get source libmorfologik-stemming-java
Picking 'morfologik-stemming' as source package instead of 
'libmorfologik-stemming-java'
[...]
$ cd morfologik-stemming-1.5.0/
$ find -name '*.jar'
./lib/junit-benchmarks-0.1.0.jar
./lib/hppc-0.3.2.jar
./lib/junit-4.7.jar
./lib/commons-cli-1.2.jar
$ find -name '*.jar' | xargs rm
$ dpkg-buildpackage -uc -us -b
[...]
compile:
[javac] Compiling 41 source files to 
/home/bengen/tmp/morfologik-stemming-1.5.0/tmp/build
[javac] warning: [options] bootstrap class path not set in conjunction with 
-source 1.6
[javac] 
/home/bengen/tmp/morfologik-stemming-1.5.0/src/morfologik/fsa/FSAUtils.java:11: 
error: package com.carrotsearch.hppc does not exist
[javac] import com.carrotsearch.hppc.IntIntOpenHashMap;
[javac] ^
[...]
BUILD FAILED
/home/bengen/tmp/morfologik-stemming-1.5.0/build.xml:53: Compile failed; see 
the compiler error output for details.

Total time: 4 seconds
make: *** [debian/stamp-ant-build] Error 1
dpkg-buildpackage: error: debian/rules build gave error exit status 2


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#660826: Another (indirect) build dependency

2014-01-24 Thread Hilko Bengen
morfologik-stemming 1.8.3 is needed to build lucene4


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#660826: For those who care about ElasticSearch: build dependencies, RFH

2014-01-24 Thread Hilko Bengen
* Sylvestre Ledru:

> Just to make sure I understand, you did the proof of concept but you
> are not planning to go forward.

I see most of the listed packages as means to an end: a working ES
package that can be built from sources without having to deal with the
Maven-specific assumptions that are simply broken from Debian's point of
view.

As stated, I am no Java developer and don't really understand Maven and
Debian's tools to deal with Maven well enough to fix problems --
therefore I don't really see myself as competent in maintaining those
packages.

> You are looking for people to complete the work ?

Pretty much. I am looking for people to take over maintainership of the
packages that ElasticSearch depends upon.

Now, I could have just put a line like

Maintainer: Debian Java maintainers 


into the debian/control files and could have just uploaded the packages
after posting quick ITPs with a plan to immediately forget about the
packages, but that's what I'd consider antisocial behavior.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#736619: sisu-guice: Source contains large number of blobs that are not needed for building

2014-01-25 Thread Hilko Bengen
Source: sisu-guice
Version: 3.1.1-1
Severity: grave

The binary files below are contained in the source tarball, but no
source is provided. Luckily, the package can still be built

Cheers,
-Hilko

sisu-guice-3.1.1 $ find -name \*.jar | xargs du -sch
504K./extensions/struts2/lib/jsp-api-2.1.jar
3.5M./extensions/struts2/lib/core-3.1.1.jar
112K./extensions/struts2/lib/jetty-util-6.1.0.jar
620K./extensions/struts2/lib/jsp-2.1.jar
452K./extensions/struts2/lib/jetty-6.1.0.jar
224K./extensions/struts2/lib/ognl-3.0.jar
864K./extensions/struts2/lib/freemarker-2.3.16.jar
60K ./extensions/struts2/lib/commons-fileupload-1.2.1.jar
1012K   ./extensions/struts2/lib/ant-1.6.5.jar
88K ./extensions/struts2/lib/commons-io-1.3.2.jar
632K./extensions/struts2/lib/javassist.jar
1000K   ./extensions/struts2/lib/xwork-core-2.2.1.jar
104K./extensions/struts2/lib/servlet-api-2.5.jar
756K./extensions/struts2/lib/struts2-core-2.2.1.jar
40K ./extensions/struts2/lib/commons-logging-1.0.4.jar
108K./extensions/persist/lib/hibernate-entitymanager.jar
424K./extensions/persist/lib/antlr-2.7.5h3.jar
824K./extensions/persist/lib/db4o-6.4.14.8131-java5.jar
124K./extensions/persist/lib/hibernate-search.jar
448K./extensions/persist/lib/xwork-2.0.4.jar
8.0K./extensions/persist/lib/aopalliance.jar
64K ./extensions/persist/lib/commons-io.jar
308K./extensions/persist/lib/dom4j-1.6.1.jar
164K./extensions/persist/lib/ognl-2.6.7.jar
316K./extensions/persist/lib/cglib-nodep-2.2.jar
2.1M./extensions/persist/lib/hibernate3.jar
612K./extensions/persist/lib/hsqldb.jar
72K ./extensions/persist/lib/easymock.jar
12K ./extensions/persist/lib/jta.jar
64K ./extensions/persist/lib/oro-2.0.8.jar
360K./extensions/persist/lib/log4j-1.2.14.jar
16K ./extensions/persist/lib/jboss-archive-browsing.jar
452K./extensions/persist/lib/javassist.jar
224K./extensions/persist/lib/jaxen-1.1-beta-7.jar
52K ./extensions/persist/lib/ejb3-persistence.jar
560K./extensions/persist/lib/commons-collections.jar
104K./extensions/persist/lib/servlet-api-2.5.jar
356K./extensions/persist/lib/hibernate-annotations.jar
40K ./extensions/persist/lib/commons-logging-1.0.4.jar
104K./extensions/servlet/lib/build/servlet-api-2.5.jar
4.0K./lib/javax.inject.jar
8.0K./lib/aopalliance.jar
384K./lib/build/felix-2.0.5.jar
132K./lib/build/jdiff/jdiff.jar
1.8M./lib/build/jdiff/xerces.jar
112K./lib/build/jarjar-1.1.jar
380K./lib/build/spring-beans.jar
1.8M./lib/build/doclava.jar
120K./lib/build/junit.jar
20K ./lib/build/munge.jar
64K ./lib/build/easymock.jar
284K./lib/build/cglib-2.2.2.jar
1.6M./lib/build/guava-11.0.1.jar
44K ./lib/build/asm-3.3.1.jar
20K ./lib/build/javax.inject-tck.jar
12K ./lib/build/safesax.jar
656K./lib/build/bnd-0.0.384.jar
176K./lib/build/spring-core.jar
40K ./lib/build/commons-logging-1.0.4.jar
25M total


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#736619: sisu-guice: Source contains large number of blobs that are not needed for building

2014-01-25 Thread Hilko Bengen
* Hilko Bengen:

> The binary files below are contained in the source tarball, but no
> source is provided. Luckily, the package can still be built

... after the files have been removed, I meant to say.

Cheers,
-Hilko


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



  1   2   3   4   5   6   7   8   9   10   >