Processed: upgrading severity

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> merge 278190 278191
Bug#278190: xtrlock unlocks upon very long input
Bug#278191: xtrlock unlocks upon very long input
Merged 278190 278191.

> severity 278190 critical
Bug#278190: xtrlock unlocks upon very long input
Bug#278191: xtrlock unlocks upon very long input
Severity set to `critical'.

> tags 278190 security
Bug#278190: xtrlock unlocks upon very long input
There were no tags set.
Bug#278191: xtrlock unlocks upon very long input
Tags added: security

> quit
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#288143: xsok: patch to support window manager close button

[Peter De Wachter]

Package: xsok
Version: 1.02-13
Tags: patch
Followup-For: Bug #288143

This patch adds support for the WM_DELETE_WINDOW protocol, so that
closing xsok windows with the window manager's close button works
properly. No large changes were needed, I just added the required X
magic.

Peter De Wachter


-- System Information:
Debian Release: testing/unstable
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8

Versions of packages xsok depends on:
ii  libc6   2.3.2.ds1-13ubuntu2.2GNU C Library: Shared libraries an
ii  libice6 4.3.0.dfsg.1-6ubuntu25.1 Inter-Client Exchange library
ii  libsm6  4.3.0.dfsg.1-6ubuntu25.1 X Window System Session Management
ii  libx11-66.8.1-1ubuntu10  X Window System protocol client li
ii  libxaw7 4.3.0.dfsg.1-6ubuntu25.1 X Athena widget set library
ii  libxext64.3.0.dfsg.1-6ubuntu25.1 X Window System miscellaneous exte
ii  libxmu6 4.3.0.dfsg.1-6ubuntu25.1 X Window System miscellaneous util
ii  libxpm4 4.3.0.dfsg.1-6ubuntu25.1 X pixmap library
ii  libxt6  4.3.0.dfsg.1-6ubuntu25.1 X Toolkit Intrinsics
ii  xlibs   4.3.0.dfsg.1-6ubuntu25.1 X Window System client libraries m

-- no debconf information
Only in xsok-hack/src: Makefile
diff -ur xsok-1.02/src/Xaw-help.c xsok-hack/src/Xaw-help.c
--- xsok-1.02/src/Xaw-help.c	1994-11-24 12:00:00.0 +0100
+++ xsok-hack/src/Xaw-help.c	2005-01-15 07:50:57.0 +0100
@@ -24,9 +24,12 @@
 #include 
 
 static int help_active = 0;
-static Widget help, helppaned, helppanel, helptext, helpclose;
+Widget help;
+static Widget helppaned, helppanel, helptext, helpclose;
 extern const char *keyfilename;	/* from X-widget.c */
 
+static void popdown_help_cb(Widget w, XtPointer a, XtPointer b);
+
 static void selecttopic(Widget w, XtPointer number, XtPointer garbage) {
 char filename[200];
 const char *s = XtName(w);
@@ -51,7 +54,7 @@
 topicsbutton = XtCreateManagedWidget("Topic",   menuButtonWidgetClass, helppanel,Args, 1);
 topicsmenu   = XtCreatePopupShell("topicsmenu", simpleMenuWidgetClass, topicsbutton, NULL, ZERO);
 helpclose	 = XtCreateManagedWidget("Close Help",	commandWidgetClass,helppanel,NULL, ZERO);
-XtAddCallback(helpclose, XtNcallback, popdown_help, NULL);
+XtAddCallback(helpclose, XtNcallback, popdown_help_cb, NULL);
 
 XtSetArg(Args[0], XtNlabel, TXT_HELP_KEYS);
 w = XtCreateManagedWidget("Help0", smeBSBObjectClass, topicsmenu, Args, 1);
@@ -67,6 +70,7 @@
 	}
 }
 
+XtRealizeWidget(help);
 }
 
 void popup_help(void) {
@@ -76,11 +80,15 @@
 XtPopup(help, XtGrabNone);
 }
 
-void popdown_help(Widget w, XtPointer a, XtPointer b) {
+void popdown_help(void) {
 if (!help_active)
 	return;		/* request pending => deny another one */
 help_active = 0;
 XtPopdown(help);
 }
 
+static void popdown_help_cb(Widget w, XtPointer a, XtPointer b) {
+popdown_help();
+}
+
 #endif
diff -ur xsok-1.02/src/Xaw-main.c xsok-hack/src/Xaw-main.c
--- xsok-1.02/src/Xaw-main.c	1995-10-14 18:22:28.0 +0100
+++ xsok-hack/src/Xaw-main.c	2005-01-15 07:46:29.0 +0100
@@ -21,6 +21,8 @@
 static Widget messagebox, container, desktop;
 static Widget dialog, popup, paned;
 static Window mainwindow;
+static Atom atom_wm_protocols;
+static Atom atom_wm_delete_window;
 
 
 void show_message(const char *str, ...) {
@@ -112,6 +114,21 @@
 popup_confirm(prompt);
 }
 
+static void handle_wm_messages(Widget w, XtPointer client_data, XEvent *event, Boolean *cont) {
+if (event->type == ClientMessage
+&& event->xclient.message_type == atom_wm_protocols
+&& event->xclient.data.l[0] == atom_wm_delete_window) {
+if (w == toplevel)
+rq_LeaveSok();
+else if (w == popup)
+cmd_Cancel();
+#ifdef ONLINE_HELP
+else if (w == help)
+popdown_help();
+#endif
+}
+}
+
 static String fallback_resources[] = { 
 "*beNiceToColormap:			false",
 "*shapeStyle:			Rectangle",
@@ -325,23 +342,37 @@
 sound = XtCreateManagedWidget("Sound", toggleWidgetClass, buttonpanel, NULL, 0);
 #endif
 
+graphic.width = graphic.height = 0;
+graphic.autolayout = 1;
+XtRealizeWidget(toplevel);
+XSync(dpy, 0);
+mainwindow = XtWindow(toplevel);
+XSetIconName(dpy, mainwindow, "xsok");
+SetTitle();
+table  = XtWindow(desktop);
+
 /* OK. Now do the pop-up shells */
 popup = XtCreatePopupShell("prompt", transientShellWidgetClass, toplevel, NULL, 0);
 dialog = XtCreateManagedWidget("dialog", dialogWidgetClass, popup, NULL, 0);
 XawDialogAddButton(dialog, "ok", Ok, (XtPointer)dialog);
 XawDialogAddButton(dialog, "cancel", Cancel, (XtPointer)dialog);
+XtRealizeWidget(popup);
 
 #ifdef ONLINE_HELP
 create_help();
 #endif
-graphic.width = graphic.height = 0;
-graphic.autolayout = 1;
-XtRealizeWidget(toplevel);
-XSync(dpy, 0);
- 

Processed: cron-lib.pl probably exit()s somewhere

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> tags 289464 +woody
Bug#289464: webmin-core: Scheduled Cron Jobs doesn't show nothing
There were no tags set.
Tags added: woody

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#289464: cron-lib.pl probably exit()s somewhere

[Arthur Korn]

tags 289464 +woody
thanks

Hi

Investigating a customers support request I tracked the problem
down to foreign_require() on cron being broken (exits).

Following I paste my notes, in case they might be helpful (inverse
chronological order):

Date: 2005-01-12 16:43
Sender: arthur
Logged In: YES 
user_id=126

I tried to install a fresh current cron module (only the 
cron module) from webmin.com. This failed since KAPA has 
webmin 0.94 and webmin.com has 1.170 (which is in testing 
too). 
 
Then I fetched webmin-core from debian and untarred the 
cron module from there. Didn't work either (same error as 
we had in the first place). 
 
Further I noticed that the acl_security.pl form (shown in 
the "webmin users" module) is broken too. I couldn't
find
or get it to produce logs error messages. It seems to 
terminate before producing any output for all CGIs in 
webmin/cron/*. It can't be a die() or a compilation error, 
I tried this and they _allways_ lead to an error being 
sent to the user. 
 
Maybe they should try with a current Webmin first, since 
it works for me with the webmin from testing/unstable 
(1.160). 


Date: 2005-01-12 15:41
Sender: arthur
Logged In: YES 
user_id=126

When I try to access the cron module in webmin on KAPA I 
get this: 
 
Beim Laden von https://localhost:1/cron/ ist folgender 
Fehler aufgetreten: 
 
 
Verbindung zu Rechner localhost ist unterbrochen 
 
Which kinda explains the problem ... 

Date: 2004-12-24 13:42
Sender: arthur
Logged In: YES 
user_id=126

Hmm, fiddling around with my installation here it looks 
like it can't be the cron module entirely missing. Maybe 
it just fails or such. I need shell access on the affected 
machine to tell for shure. 
 
For the content-type header not to be printed, something 
in this code has to exit: 
 
require './afbackup-lib.pl'; # not specific to this script 
&foreign_require('cron', 'cron-lib.pl'); 
 
if ($in{'submit'}) { # only for saving 
} 
 
my %job; # cant exit 
@job{qw(mins hours days months weekdays)} = split(/\s+/, 
$in{'custom'}); # cant exit 
 
&afheader('edit_schedule_custom'); # not specific 
 
 
So you see, the foreign_require is a strong candidate. 


Date: 2004-12-24 13:32
Sender: arthur
Logged In: YES 
user_id=126

Check whether the webmin cron module is available. 
 
This is actually a declared webmin dependency, but I never 
thought about checking what webmin does when such dep's 
are not satisfied after webmin upgrades and suchlike (only 
on module install). 



[It all started with a message from a customer complaining that he can't
modify his backup schedules when he want's to use the "custom" method
(which uses cron-lib.pl forms)]

ciao, 2ri
-- 
Secure email, spread GPG, clearsign all mail. http://www.gnupg.org
.
Following the First World War, Austrian journalist Karl Wiegand made 
an interesting observation. "How are nations ruled and led into war?" 
he asked. "Politicians lie to journalists and then believe those lies 
when they see them in print." This may seem cynical, but it was true 
then, and it is true today.
  -- 
http://www.disinfopedia.org/wiki.phtml?title=Weapons_of_mass_deception


signature.asc
Description: Digital signature

Processed: s/exit(0)/last/ ?

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> severity 285762 grave
Bug#285762: tempname() in web-lib.pl does not create a temp file
Severity set to `grave'.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Processed: solved

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> reassign 289464 webmin
Bug#289464: webmin-core: Scheduled Cron Jobs doesn't show nothing
Bug reassigned from package `webmin-core' to `webmin'.

> severity 289464 grave
Bug#289464: webmin-core: Scheduled Cron Jobs doesn't show nothing
Severity set to `grave'.

> tags 285762 +woody
Bug#285762: tempname() in web-lib.pl does not create a temp file
There were no tags set.
Tags added: woody

> merge 289464 285762
Bug#285762: tempname() in web-lib.pl does not create a temp file
Bug#289464: webmin-core: Scheduled Cron Jobs doesn't show nothing
Merged 285762 289464.

> tags 285762 +patch
Bug#285762: tempname() in web-lib.pl does not create a temp file
Tags were: woody
Bug#289464: webmin-core: Scheduled Cron Jobs doesn't show nothing
Tags added: patch

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#289464: solved

[Arthur Korn]

reassign 289464 webmin
severity 289464 grave
tags 285762 +woody
merge 289464 285762
tags 285762 +patch
thanks

Looks like this was an end-of-a-long-night security "fix" ...

--- /tmp/web-lib.pl.origSat Jan 15 14:20:55 2005
+++ /usr/share/webmin/web-lib.plSat Jan 15 14:10:48 2005
@@ -95,7 +95,7 @@
 "/tmp/.webmin";
 while($tries++ < 10) {
local @st = lstat($tmp_dir);
-   exit(0) if ($st[4] == $< && (-d _) && ($st[2] & 0777) == 0755);
+   last if ($st[4] == $< && (-d _) && ($st[2] & 0777) == 0755);
if (@st) {
unlink($tmp_dir) || rmdir($tmp_dir) ||
system("/bin/rm -rf ".quotemeta($tmp_dir));


-- 
Secure email, spread GPG, clearsign all mail. http://www.gnupg.org
.
< hjw> statistics are like a bikini, what they reveal is suggestive, 
what they conceal is vital.


signature.asc
Description: Digital signature

Bug#285762: s/exit(0)/last/ ?

[Arthur Korn]

severity 285762 grave
thanks

Hi

I'm not exatly shure what this exit is supposed to do, but the
whole while loop makes far more sense to me when the "exit(0)"
is replaced with a "last".

grave since this error breaks everything (just exits) that uses
tempname(), which is somewhat a showstopper.

ciao, 2ri
-- 
Secure email, spread GPG, clearsign all mail. http://www.gnupg.org
.
Der beste Beweis fr die Existenz ausserirdischer _Intelligenz_ ist 
der, dass noch niemand versucht hat, Kontakt mit uns aufzunehmen.
 -- Bill Watterson


signature.asc
Description: Digital signature

You last chance to save on your

[Chahal]

Stop paying high prices for the meds you need! We can help you save by buying 
overseas.

Don't believe me? Check out this link, whats the worst that could happen. You 
save some money?

http://www.cotj.com/pharm/tangy/


Yours,

Josephine   









  

A man's home is his castle, in a manor of speaking.
Not interested?
http://pjat.com/z.php

Bug#197934: Xpaint 2.7.0 packages built and tested, should I NMU?

[Javier Fernández-Sanguino Peña]

On Tue, Jan 04, 2005 at 03:58:56PM +0100, Florian Ernst wrote:
> Hello Javier,
> 
> I read in  you were going to NMU
> xpaint. Do you still have any plans regarding this?
> 

No, I don't. I actually don't know where I dropped those.

> If not I'd like to take over (together with Hugo Vanwoerkom) by
> packaging the newest upstream release, now that the package has been
> orphaned for quite some time...

Please do.

Regards

Javier


signature.asc
Description: Digital signature