RFS: piwik

[Fabrizio Regalli]

Dear mentors,

I am looking for a sponsor for my package "piwik".

* Package name: piwik
  Version : 1.2-1
  Upstream Author : Fabrizio Regalli 
* URL : http://www.piwik.org
* License : GPL v3
  Section : web


It builds these binary packages:
piwik  - Open source web analytics

The package appears to be lintian clean.

The upload would fix these bugs: 609521

My motivation for maintaining this package is: this software helps who
want use a web statistic program without  use Google analytics or some
other software like that.


The package can be found on mentors.debian.net:
- URL: http://mentors.debian.net/debian/pool/main/p/piwik
- Source repository: deb-src http://mentors.debian.net/debian unstable
main contrib non-free
- dget
http://mentors.debian.net/debian/pool/main/p/piwik/piwik_1.2-1.dsc

I would be glad if someone uploaded this package for me.

Kind regards
 Fabrizio Regalli



signature.asc
Description: This is a digitally signed message part

Re: RFS: subversion (updated package) [lenny-backports, 1.6.12dfsg-5~bpo50+1]

[Michael Diers]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 2011-03-04 00:01, Michael Diers wrote:
> Dear mentors and backporters,
> 
> I am looking for a sponsor for the new version 1.6.12dfsg-5~bpo50+1
> of my existing backport of package "subversion".
> 
> The new version addresses the following issues, please see also the
> attached BSA draft notice:
> 
> CVE-2011-0715
>   Subversion's mod_dav_svn Apache HTTPD server module will dereference
>   a NULL pointer if a lock token is sent in a HTTP request by a
>   Subversion client which has not authenticated to the server.
>   http://subversion.apache.org/security/CVE-2011-0715-advisory.txt
[...]

The security notice is to be called BSA-026, updated draft is attached.

- -- 
Michael Diers, elego Software Solutions GmbH, http://www.elego.de
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (Cygwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1wwFUACgkQcEKlWnqVgz0p1wCghpRnrh4kdJ47kgDoLPZA0rUb
HWQAniye5iwQabtfZRj6MMRVRIVxEHI3
=5KMm
-END PGP SIGNATURE-
[ Please replace  with your name and send the text as a
  gpg inline signed mail to debian-backports-annou...@lists.debian.org. ]

Subject: [BSA-026] Security Update for subversion

 uploaded new packages for subversion which fixed the
following security problems:

CVE-2011-0715
  Subversion's mod_dav_svn Apache HTTPD server module will dereference
  a NULL pointer if a lock token is sent in a HTTP request by a
  Subversion client which has not authenticated to the server.
  http://subversion.apache.org/security/CVE-2011-0715-advisory.txt
  
For the lenny-backports distribution the problems have been fixed in
version 1.6.12dfsg-5~bpo50+1.

For the stable distribution (squeeze) the problems have been fixed in
version 1.6.12dfsg-5.

For the unstable distribution (sid) the problems have been fixed in
version 1.6.16dfsg-1. This version is expected to be migrated to the
testing distribution (wheezy) shortly.

If you don't use pinning (see [1]) you have to update the package
manually via "apt-get -t lenny-backports install " with
the packagelist of your installed packages affected by this update.
[1] 

We recommend to pin (in /etc/apt/preferences) the backports repository to
200 so that new versions of installed  backports will be installed
automatically.

  Package: *
  Pin: release a=lenny-backports
  Pin-Priority: 200

Re: RFS: piwik

[Nicolas]

Hi,

your package is not lintian clean !

W: piwik: executable-not-elf-or-script
./usr/share/piwik/plugins/UserSettings/images/os/WP7.gif
W: piwik: executable-not-elf-or-script
./usr/share/piwik/plugins/UserSettings/images/os/W61.gif
W: piwik: executable-not-elf-or-script
./usr/share/piwik/plugins/UserSettings/images/os/W65.gif
W: piwik: executable-not-elf-or-script
./usr/share/piwik/plugins/UserSettings/images/os/MAE.gif

You must remove execution permissions on theses icons.


Regards,
Nicolas


2011/3/4 Fabrizio Regalli 

> Dear mentors,
>
> I am looking for a sponsor for my package "piwik".
>
> * Package name: piwik
>  Version : 1.2-1
>  Upstream Author : Fabrizio Regalli 
> * URL : http://www.piwik.org
> * License : GPL v3
>  Section : web
>
>
> It builds these binary packages:
> piwik  - Open source web analytics
>
> The package appears to be lintian clean.
>
> The upload would fix these bugs: 609521
>
> My motivation for maintaining this package is: this software helps who
> want use a web statistic program without  use Google analytics or some
> other software like that.
>
>
> The package can be found on mentors.debian.net:
> - URL: http://mentors.debian.net/debian/pool/main/p/piwik
> - Source repository: deb-src http://mentors.debian.net/debian unstable
> main contrib non-free
> - dget
> http://mentors.debian.net/debian/pool/main/p/piwik/piwik_1.2-1.dsc
>
> I would be glad if someone uploaded this package for me.
>
> Kind regards
>  Fabrizio Regalli
>
>

Re: RFS: piwik

[Fabrizio Regalli]

On Fri, 2011-03-04 at 11:42 +0100, Nicolas wrote:
> Hi,
> 
> 
> your package is not lintian clean !

Are you sure?

> 
> W: piwik:
> executable-not-elf-or-script 
> ./usr/share/piwik/plugins/UserSettings/images/os/WP7.gif
> W: piwik:
> executable-not-elf-or-script 
> ./usr/share/piwik/plugins/UserSettings/images/os/W61.gif
> W: piwik:
> executable-not-elf-or-script 
> ./usr/share/piwik/plugins/UserSettings/images/os/W65.gif
> W: piwik:
> executable-not-elf-or-script 
> ./usr/share/piwik/plugins/UserSettings/images/os/MAE.gif
> 
> 
> You must remove execution permissions on theses icons.
> 

I use dh_fixperms for fix permission problem and my lintian looks like:

$ lintian -i -I --show-overrides --pedantic ../piwik_1.2-1_all.deb
P: piwik: no-upstream-changelog
N: 
N:The package does not install an upstream changelog file. If
upstream
N:provides a changelog, it should be accessible as
N:/usr/share/doc//changelog.gz.
N:
N:It's currently unclear how best to handle multiple binary packages
from
N:the same source. Some maintainers put a copy of the upstream
changelog
N:in each package, but it can be quite long. Some include it in one
N:package and add symlinks to the other packages, but this requires
there
N:be dependencies between the packages. Some only include it in a
N:"central" binary package and omit it from more ancillary packages.
N:
N:Refer to Debian Policy Manual section 12.7 (Changelog files) for
N:details.
N:
N:Severity: pedantic, Certainty: wild-guess
N: 

Regards,
Fabrizio




signature.asc
Description: This is a digitally signed message part

Re: RFS: piwik

[Fabrizio Regalli]

Just another thing to be sure.
Yesterday mentors.debian.net had some problems uploading packages and
maybe there was an old version in the repository.
I upload it again now.
Could you please check it now?

Thanks.
Regards,
Fabrizio


On Fri, 2011-03-04 at 11:54 +0100, Fabrizio Regalli wrote:
> On Fri, 2011-03-04 at 11:42 +0100, Nicolas wrote:
> > Hi,
> > 
> > 
> > your package is not lintian clean !
> 
> Are you sure?
> 
> > 
> > W: piwik:
> > executable-not-elf-or-script 
> > ./usr/share/piwik/plugins/UserSettings/images/os/WP7.gif
> > W: piwik:
> > executable-not-elf-or-script 
> > ./usr/share/piwik/plugins/UserSettings/images/os/W61.gif
> > W: piwik:
> > executable-not-elf-or-script 
> > ./usr/share/piwik/plugins/UserSettings/images/os/W65.gif
> > W: piwik:
> > executable-not-elf-or-script 
> > ./usr/share/piwik/plugins/UserSettings/images/os/MAE.gif
> > 
> > 
> > You must remove execution permissions on theses icons.
> > 
> 
> I use dh_fixperms for fix permission problem and my lintian looks like:
> 
> $ lintian -i -I --show-overrides --pedantic ../piwik_1.2-1_all.deb
> P: piwik: no-upstream-changelog
> N: 
> N:The package does not install an upstream changelog file. If
> upstream
> N:provides a changelog, it should be accessible as
> N:/usr/share/doc//changelog.gz.
> N:
> N:It's currently unclear how best to handle multiple binary packages
> from
> N:the same source. Some maintainers put a copy of the upstream
> changelog
> N:in each package, but it can be quite long. Some include it in one
> N:package and add symlinks to the other packages, but this requires
> there
> N:be dependencies between the packages. Some only include it in a
> N:"central" binary package and omit it from more ancillary packages.
> N:
> N:Refer to Debian Policy Manual section 12.7 (Changelog files) for
> N:details.
> N:
> N:Severity: pedantic, Certainty: wild-guess
> N: 
> 
> Regards,
> Fabrizio
> 
> 



signature.asc
Description: This is a digitally signed message part

RFS: authprogs

[Alex Mestiashvili]

Package name: authprogs
License : GPL
Description : A simple wrapper for SSH's resticted commands via 
pubkey auth.
Authprogs is a wrapper script which lets you control which hosts can run 
authorized

commands via SSH using SSH Identities.

Bug#616126: ITP: -- A simple wrapper for SSH's resticted commands via 
pubkey auth


I found this script quite useful .

http://www.hackinglinuxexposed.com/tools/authprogs/

The package can be found here  :
http://www.biotec.tu-dresden.de/~alex/authprogs/

only debian directory here :
https://elite.bshellz.net/svn/rsvn/authprogs/trunk/

Lintian is clear .

Thank you

Alex


--
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4d70cb6b.4070...@biotec.tu-dresden.de

Re: RFS: antennavis (updated package - resolves FTBFS with binutils-gold)

[Sven Hoexter]

On Thu, Mar 03, 2011 at 04:54:37PM +0100, Jakub Wilk wrote:

Hi,

> I don't know what kind of change we are talking about here, but I
> certainly disagree with your "never ever!". Sometimes there are
> valid reasons to amend existing changelog entries; please see
> Developers Reference 5.1 for an example.

Hmpf, yes indeed. There had to be an exception, thanks.

But I personally disagree with the exception. Even in case of CVE
numbers or similar things that's still some information that didn't
exist in the past so IMO it shouldn't be added there. If needed one
should add it to a new changelog entry for a new revision but not
edit some past entries already in the wild.
Donno if I'm alone with this opinion and I'm not eager to fight it
with claws here. ;)

Sven
-- 
And I don't know much, but I do know this:
With a golden heart comes a rebel fist.
 [ Streetlight Manifesto - Here's To Life ]


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110304120151.GF2111@marvin

Re: RFS: antennavis (updated package - resolves FTBFS with binutils-gold)

[Sven Hoexter]

On Thu, Mar 03, 2011 at 05:55:59PM +0200, Nanakos Chrysostomos wrote:

Hi,

> I really don't have the same problem.

That's rather strange.


> Please try to include the opengl library on the command line as well as the 
> glut library. Try adding -lGL to the end of LDFLAGS in the Makefile file and 
> build
> the package without using the pbuilder.
> Let me know of the result please.

Yes, that works. It's enough to add -lGL to the patch.

Another mistake on my side: I thought that this software requires some
antenna hardware and is more for testing but it seems to be only visualization
of models so I think I can test it myself. So no need to bother the ham
people. Sorry.

Sven
-- 
And I don't know much, but I do know this:
With a golden heart comes a rebel fist.
 [ Streetlight Manifesto - Here's To Life ]


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110304121437.GG2111@marvin

Re: RFS: antennavis (updated package - resolves FTBFS with binutils-gold)

[Nanakos Chrysostomos]

On Fri, Mar 04, 2011 at 01:14:37PM +0100, Sven Hoexter wrote:
> On Thu, Mar 03, 2011 at 05:55:59PM +0200, Nanakos Chrysostomos wrote:
> 
> Hi,
> 
> > I really don't have the same problem.
> 
> That's rather strange.
> 
> 
> > Please try to include the opengl library on the command line as well as the 
> > glut library. Try adding -lGL to the end of LDFLAGS in the Makefile file 
> > and build
> > the package without using the pbuilder.
> > Let me know of the result please.
Hi,

> 
> Yes, that works. It's enough to add -lGL to the patch.

Ok. Fixed with a patch.
> 
> Another mistake on my side: I thought that this software requires some
> antenna hardware and is more for testing but it seems to be only visualization
> of models so I think I can test it myself. So no need to bother the ham
> people. Sorry.
> 

No problem.

Package has been re-uploaded to mentors.
Sven thanks for your time and effort on that. 

Cheers,
Chris.

P.S: I don't know yet about the tcl/tk changes you proposed. I need some time 
to test and for the changes to take effect. For now it works like a charm.

> Sven
> -- 
> And I don't know much, but I do know this:
> With a golden heart comes a rebel fist.
>  [ Streetlight Manifesto - Here's To Life ]
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/20110304121437.GG2111@marvin


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110304150551.ga3...@dinofilaria.home

Re: RFS: fgo

[Chris Baines]

Any news on a sponsor yet, I have just updated the package in the
mentors repo with a dep-5 copyright file.

Thanks,

Chris

On 7 February 2011 20:44, Chris Baines  wrote:
> Dear mentors,
>
> I am looking for a sponsor for my package "fgo".
>
> * Package name    : fgo
>  Version         : 1.3.1-1
>  Upstream Author : Robert Leda 
> * URL             :
> http://sites.google.com/site/erobosprojects/flightgear/add-ons/fgo
> * License         : WTFPL
>  Section         : games
>
> It builds these binary packages:
> fgo        - A simple GUI launcher for FlightGear
>
> The package appears to be lintian clean.
>
> My motivation for maintaining this package is: I enjoy using FlightGear
> and want to improve Debian's support for this amazing project.
>
> While waiting for the upload of the latest release of FlightGear, a new
> version of this package was released with a critical bug fix. I have
> moved the package to this version, is this a problem?
>
> The package can be found on mentors.debian.net:
> - URL: http://mentors.debian.net/debian/pool/main/f/fgo
> - Source repository: deb-src http://mentors.debian.net/debian unstable
> main contrib non-free
> - dget http://mentors.debian.net/debian/pool/main/f/fgo/fgo_1.3.1-1.dsc
>
> I would be glad if someone uploaded this package for me.
>
> Kind regards
>  Christopher Baines
>


--
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/aanlktindkw8nuw8-d9cmtjc_t+x-xahfuqr6_upqh...@mail.gmail.com

RFS: roxterm (updated package)

[Tony Houghton]

Dear mentors,

I am looking for a sponsor for the new version 1.21.2-1
of my package "roxterm".

It builds these binary packages:
roxterm- Multi-tabbed GTK/VTE terminal emulator

The package appears to be lintian clean.

The package can be found on mentors.debian.net:
- URL: http://mentors.debian.net/debian/pool/main/r/roxterm
- Source repository: deb-src http://mentors.debian.net/debian unstable main 
contrib non-free
- dget http://mentors.debian.net/debian/pool/main/r/roxterm/roxterm_1.21.2-1.dsc

I am keen to get this into unstable because the current package
(1.18.5-3) is a long way out of date due to Squeeze's freeze.

Experimental has 1.20.7-1 (again because of the freeze). Will that
automatically disappear when a newer version appears in unstable?

Kind regards
 Tony Houghton


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110304181607.68e0f...@realh.co.uk

Re: RFS: roxterm (updated package)

[Kartik Mistry]

On Fri, Mar 4, 2011 at 11:46 PM, Tony Houghton  wrote:
> Experimental has 1.20.7-1 (again because of the freeze). Will that
> automatically disappear when a newer version appears in unstable?

Yes.

-- 
Kartik Mistry
Debian GNU/Linux Developer
IRC: kart_ | Identica: @kartikm


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/AANLkTi=1-x-P2xuvUVtSHjCBi=v5g3ou4g+kp85du...@mail.gmail.com