Bug#676478: cuetools: please consider depending on id3v2 | python-mutagen

2012-06-07 Thread Rogério Brito
Package: cuetools
Version: 1.3.1-12
Severity: wishlist

Hi.

cuetools depends on id3v2 which is currently badly broken (see its
bugreports and their age).

OTOH, mid3v2 from python-mutagen is a drop-in replacement for id3v2 with
many fixes (and is actively maintained upstream).

Therefore, it would be great to have cuetools be updated to have its
dependencies be satisfied by python-mutagen instead of forcing a broken
package on the users.

Regards.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (350, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.4-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cuetools depends on:
ii  id3v2  0.1.12-2
ii  libc6  2.13-33

Versions of packages cuetools recommends:
ii  flac  1.2.1-6

cuetools suggests no packages.

-- no debconf information

-- 
Rogério Brito : rbrito@{ime.usp.br,gmail.com} : GPG key 4096R/BCFC
http://rb.doesntexist.org/blog : Projects : https://github.com/rbrito/
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br



--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120607083000.ga16...@ime.usp.br



Bug#676501: [apt-build] Problem with package-revision +b2

2012-06-07 Thread Christoph Mühlmann

Package: apt-build
Version: 0.12.43
Severity: normal

--- Please enter the report below this line. ---
Dear maintainer,

I'm not sure, if this is the same as in bug #434859, which was closed in 
0.12.42:


I tried to recompile the sources of package ufraw from testing 
(0.18-1.1) locally with apt-build.


While comilation run without problems, "apt-get update; apt-get -u 
dist-upgrade" didn't upgrade the ufraw-packages from the previous 
installed version from testing (0.18-1.1+b2), because the package 
created by apt-build had a lower version-number (0.18-1.1+apt-build1).


Besides that, this results in an automatic "downgrade" of the package 
from +apt-build1 to +b2 on any (dist-)upgrade, as long as apt-pinning is 
not used (which I don't want to use at the moment).


Perhaps there's a way to set the version-information to 
"0.18-1.1+b2-apt-build1" or similar on those cases?


sincerely,

Christoph Mühlmann


--- System information. ---
Architecture: i386
Kernel: Linux 3.2.0-2-686-pae

Debian Release: wheezy/sid
500 unstable qgis.org
500 testing-proposed-updates ftp.de.debian.org
500 testing www.deb-multimedia.org
500 testing security.debian.org
500 testing ftp.de.debian.org
500 stable dl.google.com

--- Package information. ---
Depends (Version) | Installed
=-+-
debconf (>= 0.5) | 1.5.43
OR debconf-2.0 |
libc6 (>= 2.1) | 2.13-32
perl | 5.14.2-11
apt (>= 0.5) | 0.9.5.1
gcc | 4:4.6.2-4
g++ | 4:4.6.2-4
dpkg-dev (>= 1.9) | 1.16.3
libappconfig-perl (>= 1.5) | 1.66-1
libapt-pkg-perl (>= 0.1.11) | 0.1.26+b1
devscripts | 2.11.7
apt-utils | 0.9.5.1


Recommends (Version) | Installed
==-+-===
fakeroot | 1.18.3-1
build-essential | 11.5


Package's Suggests field is empty.





--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4fd09c55.3000...@hswt.de



Bug#674006: libwvstreams4.6-base 4.6.1-4 ----- wvdial stopped working

2012-06-07 Thread gregor herrmann
On Wed, 06 Jun 2012 21:37:30 +1000, Peter Drysdale wrote:

> As you were the kind DD who fixed the gcc 4.7 failure to build for
> libwvstreaams4.6-base, I am emailing you
> regarding this bug since you might be able to do a QA upload.

Thanks for adding all these informations to the bug log!
 
> I attach the Fedora version of the patch. It may need to be refreshed
> for use in
> Debian.
> 
> The original discussion at Fedora for this bug is found at:
> http://permalink.gmane.org/gmane.linux.redhat.fedora.extras.cvs/779635
> 
> Would you be able to refresh this patch and upload to Debian?

In general yes but ...
 
> I am unable to do this since I am a lowly uploader for an unrelated
> packages festival and speech-tools.
> I have no archive upload privileges to Debian.

... you could still prepare a package (and send the debdiff to this
bug) and test it and check if it affects other reverse dependencies.
 
> If you are unable to address this, do you know the correct DD to
> assist since it appears to me the package is
> an orphan?

I'm afraid there is no "correct DD" for an orphaned package :)

If you prepare an updated package you can also cc the debian-qa or
debian-mentors mailing lists, so others can have a look at the diff.
 

Cheers,
gregor


-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Tina Turner: Better Be Good To Me


signature.asc
Description: Digital signature


Bug#673918: thttpd: New /etc/init.d script has bad logic and exits before starting daemon.

2012-06-07 Thread Owen Marshall
tags 673918 moreinfo
thanks

> I solved this by commneting out all lines between the setting of
> variables and the "set -e" line before the case statment.

It sounds to me like you forgot to set /etc/default/thttpd to
ENABLED=yes. Did you make that change before editing the init.d script?

-- 
Owen Marshall
omarsh...@appriss.com | x3828



-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/yxeobovgr37@appriss.com



Processed: your mail

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 673918 + moreinfo
Bug #673918 [thttpd] thttpd: New /etc/init.d script has bad logic and exits 
before starting daemon.
Added tag(s) moreinfo.
> thank you
Stopping processing here.

Please contact me if you need assistance.
-- 
673918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=673918
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.133907992824557.transcr...@bugs.debian.org



Processed: your mail

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 674342 + fixed-upstream
Bug #674342 [src:gnunet-fuse] fatal error: GNUnet/gnunet_ecrs_lib.h: No such 
file or directory
Added tag(s) fixed-upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
674342: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674342
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.133909318031578.transcr...@bugs.debian.org



Bug#674342: gnunet-fuse FTBFS

2012-06-07 Thread Bertrand Marc
GNUnet-fuse 0.9.3 is out, and it seems to build fine with gcc 4.7. So 
this bug is fixed upstream.


I'll try to update the package as soon as possible, but it depends on 
GNUnet 0.9.3 which I need to package first.


Cheers,
Bertrand



--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4fd0ef0e.5070...@gmail.com



Processed (with 1 errors): merging 434859 676501

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> merge 434859 676501
Bug #434859 {Done: Dominique Lasserre } [apt-build] 
apt-build doesn't handles correctly packages revision terminated with "+b1"
Unable to merge bugs because:
done of #676501 is '' not 'Dominique Lasserre '
Failed to merge 434859: Did not alter merged bugs
Debbugs::Control::set_merged('transcript', 'GLOB(0x3402950)', 
'requester', 'Dominique Lasserre ', 'request_addr', 
'cont...@bugs.debian.org', 'request_msgid', 
'<1339095102-269-bts-lasserr...@gmail.com>', 'request_subject', ...) called at 
/usr/lib/debbugs/service line 872
eval {...} called at /usr/lib/debbugs/service line 871

> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
434859: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434859
676501: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676501
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.13390951129413.transcr...@bugs.debian.org



Processed: reopening 434859

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reopen 434859
Bug #434859 {Done: Dominique Lasserre } [apt-build] 
apt-build doesn't handles correctly packages revision terminated with "+b1"
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-add them.
Bug reopened
No longer marked as fixed in versions apt-build/0.12.42.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
434859: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434859
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.133909538011009.transcr...@bugs.debian.org



Processed: merging 434859 676501

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> merge 434859 676501
Bug #434859 [apt-build] apt-build doesn't handles correctly packages revision 
terminated with "+b1"
Bug #434859 [apt-build] apt-build doesn't handles correctly packages revision 
terminated with "+b1"
Marked as found in versions apt-build/0.12.43.
Bug #676501 [apt-build] [apt-build] Problem with package-revision +b2
Marked as found in versions apt-build/0.12.28.
Merged 434859 676501
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
434859: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434859
676501: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676501
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.133909538611066.transcr...@bugs.debian.org



Processed: tagging 676501

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 676501 + confirmed
Bug #676501 [apt-build] [apt-build] Problem with package-revision +b2
Bug #434859 [apt-build] apt-build doesn't handles correctly packages revision 
terminated with "+b1"
Added tag(s) confirmed.
Added tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
434859: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434859
676501: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676501
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.133910281914027.transcr...@bugs.debian.org



Bug#676501: [apt-build] Problem with package-revision +b2

2012-06-07 Thread Dominique Lasserre
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Christoph,

thank you for reporting (reopening) this bug. I actually misunderstood
#434859 . Afterwards I don't know why...

apt-build currently uses debchange to increase (source) version number.
If source and binary versions differ you can encounter such problems.

You do not get exactly the source of those rebuild packages (with +b...
suffix). You only get source of last human change (in your ufraw case a
NM-upload).
You have to check newest binary version somehow and use it as base
source version (then increase it with debchange).


There occurs a big transition in apt-build (perhaps complete rewrite) so
I'm sorry that all not very important bugs won't get processed next
time. In other words: If you do not use pinnings you have to recompile
those packages the standard way (or repack them...).


Kind regards

Dominique Lasserre
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJP0RbsAAoJENONJ1Ky5PTzbe8H/R72TF9sLRt7Ul4lzZEuhJJi
Z7L2SKn+jr/LbE0moSoBLC3vbu70IuWl8d2lWt5U+nubI64XFrHNinPfg3i2cYd5
ErNil/3aRdmT4sn6vVaBCBRzs/DVOu0lGqzQ0FoiHZcnuxlsZrCWfWC8eVWNpF5R
Re5OHQBAaL7GwoZ84sjOydMOOQnWfQjFVd+qzQUSRc6+0/qNBV6MRyYpIC4Mh+lI
VW4EVq+ZfInHRh9HoXO1T4LHrkB5aRRMIZSHRgIQKQ1y5/V8D9WzeW+N+Nuj9gvs
ucFbbmokW77Wy71npGy63oH7WeBUOtwBurJwS+duoZfGmRsaujarodx+BqhObbc=
=tKIu
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4fd11707.3030...@gmail.com



Bug#671088: Removed package(s) from unstable

2012-06-07 Thread Debian FTP Masters
We believe that the bug you reported is now fixed; the following
package(s) have been removed from unstable:

libmusicbrainz-2.1 |  2.1.5-6.2 | source
libmusicbrainz4-dev |  2.1.5-6.2 | amd64, armel, armhf, i386, ia64, 
kfreebsd-amd64, kfreebsd-i386, mips, mipsel, powerpc, s390, s390x, sparc
libmusicbrainz4-dev | 2.1.5-6.2+b1 | hurd-i386
libmusicbrainz4c2a |  2.1.5-6.2 | amd64, armel, armhf, i386, ia64, 
kfreebsd-amd64, kfreebsd-i386, mips, mipsel, powerpc, s390, s390x, sparc
libmusicbrainz4c2a | 2.1.5-6.2+b1 | hurd-i386
python-musicbrainz |  2.1.5-6.2 | all

--- Reason ---
RoQA; obsolete, does not work with recent XML API
--

Note that the package(s) have simply been removed from the tag
database and may (or may not) still be in the pool; this is not a bug.
The package(s) will be physically removed automatically when no suite
references them (and in the case of source, when no binary references
it).  Please also remember that the changes have been done on the
master archive (ftp-master.debian.org) and will not propagate to any
mirrors (ftp.debian.org included) until the next cron.daily run at the
earliest.

Packages are usually not removed from testing by hand. Testing tracks
unstable and will automatically remove packages which were removed
from unstable when removing them from testing causes no dependency
problems. The release team can force a removal from testing if it is
really needed, please contact them if this should be the case.

We try to close Bugs which have been reported against this package
automatically.  But please check all old bugs, if they where closed
correctly or should have been re-assign to another package.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 671...@bugs.debian.org.

The full log for this bug can be viewed at http://bugs.debian.org/671088

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmas...@debian.org.

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1sckxi-00075s...@franck.debian.org



Bug#671088: Removed package(s) from unstable

2012-06-07 Thread Debian FTP Masters
Version: 2.1.5-6.2+rm

Dear submitter,

as the package libmusicbrainz-2.1 has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/671088

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmas...@debian.org.

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1sckxm-00075z...@franck.debian.org



Bug#384139: marked as done (infinite loop when www.musicbrainz.org is down)

2012-06-07 Thread Debian Bug Tracking System
Your message dated Thu, 07 Jun 2012 21:46:36 +
with message-id 
and subject line Bug#671088: Removed package(s) from unstable
has caused the Debian Bug report #384139,
regarding infinite loop when www.musicbrainz.org is down
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
384139: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384139
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dcd
Version: 0.99.2-3
Severity: normal

If there is a problem connecting to www.musicbrainz.org, dcd will enter
a infinite loop, not recognizing the error. I don't know if this is dcd
or libmusicbrainz fault, though.

socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4
fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(4, {sa_family=AF_INET, sin_port=htons(80),
sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in
progress)
select(5, NULL, [4], NULL, {0, 0})  = 1 (out [4], left {0, 0})
select(5, NULL, [4], NULL, {0, 0})  = 1 (out [4], left {0, 0})
send(4, "POST /cgi%2dbin/mq%5f2%5f1.pl HT"..., 3745, 0) = -1
ECONNREFUSED (Connection refused)
select(5, NULL, [4], NULL, {0, 0})  = 0 (Timeout)
nanosleep({0, 1000}, NULL)  = 0
select(5, NULL, [4], NULL, {0, 0})  = 0 (Timeout)
nanosleep({0, 1000}, NULL)  = 0
select(5, NULL, [4], NULL, {0, 0})  = 0 (Timeout)
...

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8)

Versions of packages dcd depends on:
ii  libc6 2.3.6-15   GNU C Library: Shared libraries
ii  libmusicbrainz4c2a2.1.2-5Second generation incarnation of t
ii  libstdc++64.1.1-5The GNU Standard C++ Library v3

dcd recommends no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Version: 2.1.5-6.2+rm

Dear submitter,

as the package libmusicbrainz-2.1 has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/671088

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmas...@debian.org.

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)

--- End Message ---


Bug#663618: marked as done (libmusicbrainz-2.1: CPPFLAGS hardening flags missing)

2012-06-07 Thread Debian Bug Tracking System
Your message dated Thu, 07 Jun 2012 21:46:36 +
with message-id 
and subject line Bug#671088: Removed package(s) from unstable
has caused the Debian Bug report #663618,
regarding libmusicbrainz-2.1: CPPFLAGS hardening flags missing
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
663618: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663618
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libmusicbrainz-2.1
Version: 2.1.5-6.2
Severity: important
Tags: patch

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dear Maintainer,

The CPPFLAGS hardening flags are missing because they are not set
in debian/rules.

The following patch fixes the issue.

diff -Nru libmusicbrainz-2.1-2.1.5/debian/rules 
libmusicbrainz-2.1-2.1.5/debian/rules
--- libmusicbrainz-2.1-2.1.5/debian/rules   2011-12-17 
13:40:15.0 +0100
+++ libmusicbrainz-2.1-2.1.5/debian/rules   2012-03-12 
18:34:07.0 +0100
@@ -35,7 +35,7 @@
dh_testdir
ln -sf /usr/share/misc/config.sub   config.sub
ln -sf /usr/share/misc/config.guess config.guess
-   ./configure $(confflags) LDFLAGS="$(LDFLAGS)" CFLAGS="$(CFLAGS)" 
CXXFLAGS="$(CFLAGS)" \
+   ./configure $(confflags) LDFLAGS="$(LDFLAGS)" CFLAGS="$(CFLAGS)" 
CXXFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" \
  --prefix=/usr
touch $@

To check if all flags were correctly enabled you can use
`hardening-check` from the hardening-includes package and check
the build log (hardening-check doesn't catch everything):

$ hardening-check /usr/lib/libmusicbrainz.so.4.0.3
/usr/lib/libmusicbrainz.so.4.0.3:
 Position Independent Executable: no, regular shared library (ignored)
 Stack protected: yes
 Fortify Source functions: yes (some protected functions found)
 Read-only relocations: yes
 Immediate binding: no not found!

(Position Independent Executable and Immediate binding is not
enabled by default.)

Use find -type f \( -executable -o -name \*.so\* \) -exec
hardening-check {} + on the build result to check all files.

Regards,
Simon

[1]: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
[2]: https://wiki.debian.org/HardeningWalkthrough
[3]: https://wiki.debian.org/Hardening

- -- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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=tJTQ
-END PGP SIGNATURE-


--- End Message ---
--- Begin Message ---
Version: 2.1.5-6.2+rm

Dear submitter,

as the package libmusicbrainz-2.1 has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/671088

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmas...@debian.org.

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)

--- End Message ---


Bug#674006: libwvstreams4.6-base 4.6.1-4 ----- wvdial stopped working

2012-06-07 Thread Peter Drysdale
Dear Gregor,

Thank you for your email. It forced me to look further into Debian
procedures and policy. Between your email and details of Debian policy
I think I have found a way forward.

To avoid noise to your account I will not copy you to subsequent emails
regarding this bug where I can avoid it. I, of course, welcome any feedback
if you choose to give it.

With the very kindest regards,
Peter


Bug#674006: libwvstreams4.6-base 4.6.1-4 ----- wvdial stopped working

2012-06-07 Thread gregor herrmann
On Fri, 08 Jun 2012 10:31:13 +1000, Peter Drysdale wrote:

> Thank you for your email. It forced me to look further into Debian
> procedures and policy. Between your email and details of Debian policy
> I think I have found a way forward.

Sounds great :)
 
> To avoid noise to your account I will not copy you to subsequent emails
> regarding this bug where I can avoid it. I, of course, welcome any feedback
> if you choose to give it.

Don't worry, I will read whatever gets added to this bug (as I'm
subscribed to it), and I'll read it only once (thanks to procmail).

And I'm happy to take a look, and maybe also upload a proposed new
version, although I'd still prefer some tests and feedback from
someone who has better knowledge of the package.
 
Thanks,
gregor

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Beatles


signature.asc
Description: Digital signature


Bug#674006: libwvstreams4.6-base 4.6.1-4 ----- wvdial stopped working

2012-06-07 Thread Peter Drysdale
The purpose of this email is to set forth the reasons for raising the
severity of this bug
and describe my intentions.

1) I intend to increase the severity to release critical.

The Debian document regarding severity states:

critical makes unrelated software on the system (or the whole system)
break, or causes serious data loss, or introduces a security hole on
systems where you install the package.


I encountered this bug when a fellow Debian user did a "apt-get
dist-upgrade" from squeeze to wheezy.
(The machine has had dist-upgrades going back as far as etch)
That machine has internet access only through a 3G modem at the site it is
located.
After the apt-get dist-upgade the machine was restarted and failed to
connect to the internet.
This made the machine completely unusable for the purposes of network
access.
Since no other forms of network access are available at that site the
machine would not have been
able to receive security updates either.
The machine was transported to a wired network site [my place :-) ] to
allow downgrading of this package
from snapshots since this bug completely prevents network access if wvdial
is used as
the only 3G dialer.
Subsequently network-manager has been installed on this machine to provide
additional 3G modem dialer support.
(Network-manager did not provide a dialer when 3G access was originally
installed on this machine).

I believe these facts constitute that this bug made unrelated software
(browser, ssh , mail etc.)
broken. Since the only network access was via this package - the completely
unavailable
network seriously compromised this machine. If left it in this state it
would also have led to
security holes accumulating.

On reading of Debian guidelines I conclude this constituted a release
critical bug for this machine.

2) Subject to my ability to gain access to hardware which I do not own, I
intend to test the fedora patch
and make it available on BTS followed by preparing for a NMU to be made
available on Debian QA mailing list.
The package has been abandoned upstream (homepage links are now
non-existent).
It is also orphaned in Debian. My intention is only to prevent users
upgrading to wheezy getting a "surprise".
I urge other users reading this to move to network-manager if possible
before a dist-upgrade
since network-manager appears better supported.

I apologize for my intention not to assist in subsequent maintaining of
this package after working on this bug.
My decision is significantly influenced by the pejorative comments made
about this software by one
of the original authors at the following URL:-
http://apenwarr.ca/log/?m=200912

with best regards,
Peter


Processed: Raising severity

2012-06-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 674006 critical
Bug #674006 [libwvstreams4.6-base] wvdial stop working: Assertion `magic_number 
== -0x123678' failed
Severity set to 'critical' from 'important'
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
674006: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674006
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.13391202485532.transcr...@bugs.debian.org



Re: Bug#676478: cuetools: please consider depending on id3v2 | python-mutagen

2012-06-07 Thread Asheesh Laroia
Excerpts from Rogério Brito's message of Thu Jun 07 04:30:02 -0400 2012:
> Package: cuetools
> Version: 1.3.1-12
> Severity: wishlist
> 
> Hi.
> 
> cuetools depends on id3v2 which is currently badly broken (see its
> bugreports and their age).
> 
> OTOH, mid3v2 from python-mutagen is a drop-in replacement for id3v2 with
> many fixes (and is actively maintained upstream).
> 
> Therefore, it would be great to have cuetools be updated to have its
> dependencies be satisfied by python-mutagen instead of forcing a broken
> package on the users.
> 
> Regards.
> 
> -- System Information:
> Debian Release: wheezy/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable'), (500, 'testing'), (350, 'experimental')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 3.4-trunk-amd64 (SMP w/2 CPU cores)
> Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages cuetools depends on:
> ii  id3v2  0.1.12-2
> ii  libc6  2.13-33
> 
> Versions of packages cuetools recommends:
> ii  flac  1.2.1-6
> 
> cuetools suggests no packages.
> 
> -- no debconf information
> 

Interesting!

I "maintain" cue2toc.

I wonder if I can write a patch for cuetools that provides a
binary with the same interface as cue2toc, and also fix this
dependency on /usr/bin/id3.

It seems quite likely, actually, that both are true.

There's only one hit for 'id3' in the entire upstream git repo:

➜  cuetools git:(master) git grep id3
src/tools/cuetag.sh:id3()
src/tools/cuetag.sh:# see http://id3lib.sourceforge.net/id3/idev1.html
src/tools/cuetag.sh:id3 $trackno "$file"

Anyway, whether or not I'm the one to do it, it should be an easy
fix. The only reference to id3 is in that shell script.

-- Asheesh.


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1339130339-sup-...@rose.makesad.us



Bug#674006:

2012-06-07 Thread Peter Drysdale
Please find attached a draft patch refreshed in the Debian style.

This patch has passed build testing only on a Debian system.
It has passed testing on Fedora.

Run-time testing this patch on Debian will have to await either till I get
access to the hardware effected or another person affected by this
bug test compiles on their hardware, it works and they notify me
so I can hustle for a NMU.

best regards,
Peter


07_magic_number.diff
Description: Binary data