Bug#661158: closed by Julien Cristau (Re: Bug#661158: xserver-xorg-core: breaks libxi6)
Excerpts from Debian Bug Tracking System's message of Mon Feb 27 22:36:10 +0100 2012: > This is an automatic notification regarding your Bug report > which was filed against the xserver-xorg-core package: > > #661158: xserver-xorg-core: breaks libxi6 > > It has been closed by Julien Cristau . > > Their explanation is attached below along with your original report. > If this explanation is unsatisfactory and you have not received a > better one in a separate message then please contact Julien Cristau > by > replying to this email. > > On Fri, Feb 24, 2012 at 17:10:21 +0100, Michal Suchanek wrote: > > > Package: xserver-xorg-core > > Version: 2:1.11.99.902-1 > > Severity: important > > > > > > X server breaks libxi 1.3.6 causing xinput and gtk crashes. > > > > Working version is 2:1.4.5-1 > > > > broken 2:1.3-6 > > > > fallout #661021 #659728 > > > Can't be fixed in the server, this should be fixed in libXi. > Still the X server should add the Breaks: so that it is not installed with the broken libxi (which is in stable which means it will never be fixed in Debian). Thanks Michal -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1330425672-sup-3...@virtual.ruk.cuni.cz
Bug#642433: crashes on pressing random keys on the keyboard while screen locked
Package: xserver-xorg-core Version: 2:1.11.99.902-1 Severity: normal Hello, this might be fixed with http://patchwork.freedesktop.org/patch/9199/ However, X does not build so can't tell. Thanks Michal -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228105631.22981.57054.report...@optiplex960.ruk.cuni.cz
Bug#661158: closed by Julien Cristau (Re: Bug#661158: xserver-xorg-core: breaks libxi6)
On Tue, Feb 28, 2012 at 11:42:43 +0100, Michal Suchanek wrote: > Still the X server should add the Breaks: so that it is not installed X is a network protocol, dependencies don't allow to force what version is on the other side of the wire. > with the broken libxi (which is in stable which means it will never be > fixed in Debian). > Wrong. It will be fixed in libxi where it needs to be fixed. Cheers, Julien -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228104856.ga25...@crater2.logilab.fr
Bug#642433: closed by Cyril Brulebois (Re: Bug#642433: crashes on pressing random keys on the keyboard while screen locked)
Excerpts from Debian Bug Tracking System's message of Tue Feb 28 12:09:30 +0100 2012: > This is an automatic notification regarding your Bug report > which was filed against the xserver-xorg-core package: > > #642433: xserver-xorg-core: crashes on pressing random keys on the keyboard > while screen locked > > It has been closed by Cyril Brulebois . > > Their explanation is attached below along with your original report. > If this explanation is unsatisfactory and you have not received a > better one in a separate message then please contact Cyril Brulebois > by > replying to this email. > > Michal Suchanek (28/02/2012): > > Package: xserver-xorg-core > > Version: 2:1.11.99.902-1 > > Severity: normal > > > > Hello, > > > > this might be fixed with http://patchwork.freedesktop.org/patch/9199/ > > However, X does not build so can't tell. > > I'm not getting this and I see no trace, no log, *nothing* in your “bug > report” so closing. Get some glasses then. Thanks Michal -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1330434166-sup-8...@virtual.ruk.cuni.cz
Bug#661022: mesa: Color distorsion with XBMC media player
On 02/23/2012 09:15 PM, Eric Valette wrote: Because I was wondering why I was unable to correctly watch any video as the bug is present in experimental version and also that you may update to 8.0.1. to fix it. Tested via rebuilding 8.0.1 + debian directory => works fine indeed. -- eric -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f4cef5e.7010...@free.fr
Bug#661627: init script x11-common creates directories in insecure manners
Package: x11-common Version: 1:7.5+8 Tags: security The init script "x11-common" creates directories "/tmp/.X11-unix" and "/tmp/.ICE-unix" in insecure manners. $ cat -n /etc/init.d/x11-common [...] 33if [ -e $SOCKET_DIR ] && [ ! -d $SOCKET_DIR ]; then 34 mv $SOCKET_DIR $SOCKET_DIR.$$ 35fi 36mkdir -p $SOCKET_DIR 37chown root:root $SOCKET_DIR 38chmod 1777 $SOCKET_DIR [...] 47if [ -e $ICE_DIR ] && [ ! -d $ICE_DIR ]; then 48 mv $ICE_DIR $ICE_DIR.$$ 49fi 50mkdir -p $ICE_DIR 51chown root:root $ICE_DIR 52chmod 1777 $ICE_DIR If a local user is able to place a symlink before the service starts (for example before the package installation process), he could gain root privileges. For example, the symlink would point to an arbitrary directory (/etc), so it won't match the conditions (lines 33 and 47) and the arbitrary directory will get its permissions changed (lines 38 and 52). As a solution, I would suggest to take care of the "mkdir" return codes (line 36 and 50). To do not change permissions on failures. Thanks. -- http://vladz.devzero.fr PGP key 8F7E2D3C from pgp.mit.edu -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228173102.ga14...@devzero.fr
Bug#661627: init script x11-common creates directories in insecure manners
On Tue, Feb 28, 2012 at 18:31:02 +0100, vladz wrote: > Package: x11-common > Version: 1:7.5+8 > Tags: security > > > The init script "x11-common" creates directories "/tmp/.X11-unix" and > "/tmp/.ICE-unix" in insecure manners. > > $ cat -n /etc/init.d/x11-common > [...] > 33if [ -e $SOCKET_DIR ] && [ ! -d $SOCKET_DIR ]; then > 34 mv $SOCKET_DIR $SOCKET_DIR.$$ > 35fi > 36mkdir -p $SOCKET_DIR > 37chown root:root $SOCKET_DIR > 38chmod 1777 $SOCKET_DIR > [...] > 47if [ -e $ICE_DIR ] && [ ! -d $ICE_DIR ]; then > 48 mv $ICE_DIR $ICE_DIR.$$ > 49fi > 50mkdir -p $ICE_DIR > 51chown root:root $ICE_DIR > 52chmod 1777 $ICE_DIR > > If a local user is able to place a symlink before the service starts > (for example before the package installation process), he could gain > root privileges. > > For example, the symlink would point to an arbitrary directory (/etc), > so it won't match the conditions (lines 33 and 47) and the arbitrary > directory will get its permissions changed (lines 38 and 52). > > As a solution, I would suggest to take care of the "mkdir" return codes > (line 36 and 50). To do not change permissions on failures. > This script is set -e AFAICT, which means it already does care about the mkdir return code. Cheers, Julien -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228174257.ga28...@crater2.logilab.fr
Bug#661627: init script x11-common creates directories in insecure manners
On Tue, Feb 28, 2012 at 06:42:59PM +0100, Julien Cristau wrote: > > As a solution, I would suggest to take care of the "mkdir" return codes > > (line 36 and 50). To do not change permissions on failures. > > > This script is set -e AFAICT, which means it already does care about the > mkdir return code. Yes but with the "-p" option, mkdir always return 0 (success): $ mkdir /tmp/dir $ mkdir /tmp/dir mkdir: cannot create directory `/tmp/dir': File exists $ echo $? 1 $ mkdir -p /tmp/dir $ echo $? 0 I have a working PoC if needed. Regards, -- http://vladz.devzero.fr PGP key 8F7E2D3C from pgp.mit.edu -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228180523.gb14...@devzero.fr
Bug#661627: init script x11-common creates directories in insecure manners
On Tue, Feb 28, 2012 at 06:42:59PM +0100, Julien Cristau wrote: > > As a solution, I would suggest to take care of the "mkdir" return codes > > (line 36 and 50). To do not change permissions on failures. And as a solution, I suggested to check the return code of "mkdir" (ran without -p). -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228181359.ga14...@devzero.fr
Bug#661627: init script x11-common creates directories in insecure manners
On Tue, Feb 28, 2012 at 19:05:23 +0100, vladz wrote: > On Tue, Feb 28, 2012 at 06:42:59PM +0100, Julien Cristau wrote: > > > As a solution, I would suggest to take care of the "mkdir" return codes > > > (line 36 and 50). To do not change permissions on failures. > > > > > This script is set -e AFAICT, which means it already does care about the > > mkdir return code. > > Yes but with the "-p" option, mkdir always return 0 (success): > > $ mkdir /tmp/dir > $ mkdir /tmp/dir > mkdir: cannot create directory `/tmp/dir': File exists > $ echo $? > 1 > $ mkdir -p /tmp/dir > $ echo $? > 0 > Right, makes sense. I can drop the -p, I guess. Not sure what impact that would have on things assuming they can use /tmp/.X11-unix (I wouldn't really like to fix this just to have the same issue elsewhere). Looking at trans_mkdir (http://cgit.freedesktop.org/xorg/lib/libxtrans/tree/Xtransutil.c#n480) it *looks* like it should be safe, though. Cheers, Julien signature.asc Description: Digital signature
Bug#661073: xorg: crashes running: emacs, gv, various web pages
On Tue, Feb 28, 2012 at 12:52:12 -0500, Jeffrey Sheinberg wrote: > The result - started up emacs, instant crash in the x-server. > > Attached is the xorg log file from just after the above > crash - it was actually named /var/log/Xorg.0.log.old . > You have kernel mode setting (kms) disabled. Is this intentional? Why? Cheers, Julien signature.asc Description: Digital signature
Bug#642433: crashes on pressing random keys on the keyboard while screen locked
On Tue, Feb 28, 2012 at 11:56:31 +0100, Michal Suchanek wrote: > However, X does not build so can't tell. > Say what? Cheers, Julien signature.asc Description: Digital signature
intel-gpu-tools 1.2
Hi, Is there any DD around that would like to review and sponsor my packaging of intel-gpu-tools 1.2? http://anonscm.debian.org/gitweb/?p=users/tormod-guest/intel-gpu-tools.git;a=summary Also uploaded sources to: http://alioth.debian.org/~tormod-guest/intel-gpu-tools/ Cheers, Tormod -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cal-rjfl15h9yy6bqng8dx2wk1q3ztcsuj2ecxoe+wvvbdpg...@mail.gmail.com
Bug#661650: Please, upgrade to compiz 0.8.8 in debian stable
Package: compiz Version: 0.8.4-4 Severity: normal Please, upgrade compiz in debian stable to version 0.8.8. This is latest bugfix vesion of 0.8.x stable branch issued 2011-04-21. This fixes several bugs, for instance https://bugs.launchpad.net/ubuntu/+source/compizconfig-settings-manager/+bug/778438 -- System Information: Debian Release: 6.0.4 APT prefers stable APT policy: (990, 'stable'), (500, 'stable-updates') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores) Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages compiz depends on: ii compiz-core 0.8.4-4OpenGL window and compositing mana ii compiz-gnome 0.8.4-4OpenGL window and compositing mana ii compiz-gtk0.8.4-4OpenGL window and compositing mana ii compiz-plugins0.8.4-4OpenGL window and compositing mana compiz recommends no packages. Versions of packages compiz suggests: ii compizconfig-settings-manager 0.8.4-2Compizconfig Settings Manager -- no debconf information -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120228212729.17150.22634.report...@petrel.telecom.mipt.ru
Bug#661652: pu: package libxi/2:1.3-7
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: pu Hi, libXi has had several important fixes upstream over the past year, some of which are required for operation with recent X servers (see bug#660411 e.g.). A lot of it is related to calculating the proper size of an allocation to fill in structures with the right size and alignment, so it's rather painful unfortunately. Not all of these changes are in sid yet, so whatever's decided I won't upload before that's done. The affected interfaces are part of XI2, which doesn't have a lot of users in squeeze (seems to be just xinput and synaptiks), but gets a lot more exposure now with e.g. gtk3. The proposed changes are available at http://anonscm.debian.org/gitweb/?p=users/jcristau/libxi.git;a=shortlog;h=refs/heads/debian-squeeze I'll give the changelog and some comments below. > commit 7ef340dd49a0a79ce2f25823f57d25674d74df82 > Author: Michał Masłowski > Date: Tue Feb 21 20:54:40 2012 +0100 > > Fix bus error on MIPS N32 for bug #38331. > > XIValuatorClassInfo and XIScrollClassInfo might have an address > of 4 bytes modulo 8, while they contain doubles which need 8 byte > alignment. This is fixed by adding extra padding after each structure > or array in sizeDeviceClassType and adding helper functions to > determine sizes and padding only in one place. > > Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=38331 > Signed-off-by: Michał Masłowski > Signed-off-by: Peter Hutterer > (cherry picked from commit c1a5a70b51f12dedf354102217c7cd4247ed3a4b) > > Conflicts: > > src/XExtInt.c > > [conflict fixed by dropping the Scroll and Touch classes, not present in > libXi 1.3] > > src/XExtInt.c | 127 ++-- > 1 files changed, 95 insertions(+), 32 deletions(-) > Probably affects sparc as well. I think this is #636920, will need to confirm. > commit d5dbca39dfdf666226b6bb2dc41509d6a859e51b > Author: Peter Hutterer > Date: Tue Jan 17 21:26:14 2012 +0100 > > Force class alignment to a multiple of sizeof(XID). > > Calculate length field to a multiples of sizeof(XID). XIDs are typedefs > to ulong and thus may be 8 bytes on some platforms. This can trigger a > SIGBUS if a class ends up not being 8-aligned (e.g. after XAxisInfo). > > Reported-by: Nicolai Stange > Signed-off-by: Peter Hutterer > Signed-off-by: Matthieu Herrb > (cherry picked from commit 07ced7b48219e3bc0c98806f3d7106f86d1b2ca0) > > src/XListDev.c | 27 +++ > 1 files changed, 19 insertions(+), 8 deletions(-) > Affects 64bit archs with strict alignment requirement. I *think* there's none of those in squeeze. > commit 088f20c3ae4d8d8b3688bf2ab7ee2ea9530f7fe2 > Author: Peter Hutterer > Date: Wed Oct 26 08:55:35 2011 +1000 > > Stop unnecessary calls to size_classes > > Xmalloc is a macro evaluating its argument twice. > > Signed-off-by: Peter Hutterer > Reviewed-by: Jeremy Huddleston > (cherry picked from commit ba83a1e58592e41f207524f106ba26dd71fe4171) > > src/XIQueryDevice.c |4 +++- > 1 files changed, 3 insertions(+), 1 deletions(-) > > commit b409d3a60e5c0ff9ca6312de19ed1ce2871532ac > Author: Peter Hutterer > Date: Wed Sep 28 11:16:42 2011 +1000 > > Remove superfluous assignment of lib->classes in XIQueryDevices. > > A few lines south from here we malloc lib->classes, this assignment is a > leftover from 225071e2e67fb65a0258397212f9826c9b25e078. > > Signed-off-by: Peter Hutterer > Reviewed-by: Chase Douglas > (cherry picked from commit 7ca05f3094958c04e8f78a786061124c58f8e1f3) > > src/XIQueryDevice.c |1 - > 1 files changed, 0 insertions(+), 1 deletions(-) > > commit be149a530c5ce1d4094ed361da3208476202d4b4 > Author: Peter Hutterer > Date: Fri Sep 23 09:04:21 2011 +1000 > > Use a separate nclasses variable in XIQueryDevice > > No functional changes, just clarifying the code. If we skip over unknown > classes, lib->num_classes != wire->num_classe. Use a separate variable to > make that change more explicit and align the code closer with > wireToDeviceChangedEvent. > > Signed-off-by: Peter Hutterer > Reviewed-by: Daniel Stone > (cherry picked from commit 5f9df47340e192d095127e3c7da180b0fb3dc286) > > src/XIQueryDevice.c |9 ++--- > 1 files changed, 6 insertions(+), 3 deletions(-) > Those three should be straightforward, and reduce the risk of conflicts with other cherry-picks. > commit 84e78db42317e34f0b7880e76b32269333fc824a > Author: Peter Hutterer > Date: Wed Oct 26 08:54:53 2011 +1000 > > Fix duplicate sizeof in copy_classes > > sizeof(bla * sizeof()) is'nt right. > > Plus add some () to the next_block call too to emphasise that *nclasses is > the multi
Re: intel-gpu-tools 1.2
On Tue, Feb 28, 2012 at 9:52 PM, Tormod Volden wrote: > Hi, > Is there any DD around that would like to review and sponsor my > packaging of intel-gpu-tools 1.2? > > http://anonscm.debian.org/gitweb/?p=users/tormod-guest/intel-gpu-tools.git;a=summary > > Also uploaded sources to: > http://alioth.debian.org/~tormod-guest/intel-gpu-tools/ Meanwhile I got some very helpful comments from Bryce (thanks!), and fixed up accordingly. I rebased my own git tree and moved my old source packages away. Tormod -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAL-rJF+3rHXqbWwmT=MQMq2rBngDDYDMdOo-xhZ5=223vrc...@mail.gmail.com
Re: intel-gpu-tools 1.2
Hi Tormod, On Tue, Feb 28, 2012 at 21:52:19 +0100, Tormod Volden wrote: > Hi, > Is there any DD around that would like to review and sponsor my > packaging of intel-gpu-tools 1.2? > > http://anonscm.debian.org/gitweb/?p=users/tormod-guest/intel-gpu-tools.git;a=summary > I'll try and have a look over the weekend. Feel free to ping me on Sat or after if you don't see anything before then. (If anyone else is around then feel free to get to this faster, I won't be mad :) ) Cheers, Julien signature.asc Description: Digital signature
Bug#661650: Please, upgrade to compiz 0.8.8 in debian stable
On Wed, Feb 29, 2012 at 01:27:29 +0400, Olleg Samoylov wrote: > Package: compiz > Version: 0.8.4-4 > Severity: normal > > Please, upgrade compiz in debian stable to version 0.8.8. This is latest > bugfix > vesion of 0.8.x stable branch issued 2011-04-21. This fixes several bugs, > for instance > https://bugs.launchpad.net/ubuntu/+source/compizconfig-settings-manager/+bug/778438 > For stable this is extremely unlikely to happen. If there are any particular fixes you'd like to see included they can be considered individually. Cheers, Julien signature.asc Description: Digital signature
Bug#584100: Search for no strings attached affairs. Completely free to join.
Search for no strings attached affairs. Completely free to join. http://lowurl.net/e3f - If you would like to not be contacted from us in the future please press on the link below: http://lowurl.net/e3g or write to: P.O. Box 36, 52 St., Vancouver, Canada -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120229012901.15...@web004.nyc1.bluetie.com
Bug#661293: (no subject)
Upgrading seems to have resolved this particular issue. -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f4dd08b.7000...@gmail.com
