Bug#932284: installation-guide: Update docs for apt-setup/localX/key preseeding config

2019-07-17 Thread Moritz Muehlenhoff
Source: installation-guide Severity: normal apt-setup 1:0.151 slightly changed the implementation of how Secure Apt keys are preseeded for local repositories. Attached patch updates the existing documentation to reflect that. Cheers, Moritz diff -aur installation-guide-20190622.orig/en/a

Bug#851774: fixed in apt-setup 1:0.151

2019-07-17 Thread Moritz Muehlenhoff
On Fri, Jul 12, 2019 at 09:07:45AM +, Cyril Brulebois wrote: > apt-setup (1:0.151) unstable; urgency=medium > . >[ Moritz Mühlenhoff ] >* When preseeding a local repository via apt-setup/localX/repository, > the repository key for Secure Apt needs to be configured with > apt

Bug#851774: fixed in apt-setup 1:0.151

2019-08-16 Thread Moritz Muehlenhoff
On Thu, Aug 15, 2019 at 04:25:53PM +0200, Cyril Brulebois wrote: > Hi, > > Moritz Muehlenhoff (2019-07-17): > > On Fri, Jul 12, 2019 at 09:07:45AM +, Cyril Brulebois wrote: > > > apt-setup (1:0.151) unstable; urgency=medium > > > . > > >[ Mori

Bug#851774: fixed in apt-setup 1:0.151

2019-09-09 Thread Moritz Muehlenhoff
On Fri, Aug 16, 2019 at 09:10:50AM +0200, Moritz Muehlenhoff wrote: > > Many thanks, I'll be submitting a buster-pu bug accordingly. I wouldn't > > mind an extra confirmation after it's been published in a point release > > (peace of mind and all that). > &

Bug#942270: task-spanish depends on removed manpages-es

2019-10-13 Thread Moritz Muehlenhoff
Source: tasksel Severity: grave task-spanish depends on manpages-es, which has been removed from the archive. Cheers, Moritz

Bug#950192: Please remove build dep on aboot

2020-01-29 Thread Moritz Muehlenhoff
Package: debian-installer Severity: important aboot has a open RC bug (#949955), but d-i still build depends on it. alpha isn't a release arch for a long time anyway. Cheers, Moritz

Bug#902724: CVE-2018-1000517

2018-06-29 Thread Moritz Muehlenhoff
Package: busybox Version: 1:1.27.2-2 Severity: important Tags: security This was assigned CVE-2018-1000517: https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e Cheers, Moritz

Bug#908167: Add firefox-esr-l10n-ne-np to task-nepali-desktop

2018-09-06 Thread Moritz Muehlenhoff
Package: tasksel Version: 3.45 Severity: wishlist I noticed that starting with the 60.x series Firefox ESR now provides a firefox-esr-l10n-ne-np language pack. That sounds like a useful thing to add to task-nepali-desktop Cheers, Moritz

Bug#979317: Create list of packages installed by d-i?

2021-01-05 Thread Moritz Muehlenhoff
Package: finish-install Severity: wishlist It would be useful if finish-install would create a final list of all packages installed during d-i (like /var/log/installer/packages.txt). When using a configuration layer like Puppet or Ansible this would allow to differentiate packages pulled in by d-

Bug#985674: CVE-2021-28831

2021-03-21 Thread Moritz Muehlenhoff
Package: busybox Version: 1:1.30.1-6+b1 Severity: important Tags: security X-Debbugs-Cc: Debian Security Team This was assigned CVE-2021-28831: https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd Cheers, Moritz

Bug#1035854: Bookworm netboot image fails in VM

2023-05-10 Thread Moritz Muehlenhoff
Package: installation-reports Severity: normal Boot method: network Image version: netboot daily from 2023-05-09 Date: 2023-05-10 I've successfully tested the Bookworm installer on a few Dell PowerEdge servers (with rc1, rc2 and dailies) and it's working fine on baremetal using the netboot image

Bug#1035854: Bookworm netboot image fails in VM

2023-05-10 Thread Moritz Muehlenhoff
On Wed, May 10, 2023 at 11:35:14AM +0200, Cyril Brulebois wrote: > Hallo Moritz, > > And thanks for the report… > > Moritz Mühlenhoff (2023-05-10): > > Moritz Muehlenhoff wrote: > > > call. $MENU is set to '/usr/bin/main-menu' and in fact running > &g

Bug#1010264: CVE-2022-28391

2022-04-28 Thread Moritz Muehlenhoff
On Wed, Apr 27, 2022 at 11:29:00PM -0400, Theodore Ts'o wrote: > Neither seems to be security related. Are you sure this was correctly > filed against e2fsprogs? Apologies, I reported multiple incoming new issues from the CVE feed and I must have mis-pasted the wrong Emacs buffer into the report.

Bug#735492: Please remove recommends on intlfonts

2014-01-15 Thread Moritz Muehlenhoff
Source: tasksel Severity: normal Various tasksel tasks recommend X fonts from intlfonts, e.g. task-ukrainian-desktop, task-portuguese-desktop, task-italian-desktop, task-greek-desktop, task-french-desktop are recommending xfonts-intl-european. I think we should remove these; X fonts are really to

Bug#699390: debian-policy: soften the wording recommending menu files

2014-01-22 Thread Moritz Muehlenhoff
On Sun, May 12, 2013 at 02:04:01AM +0200, Michael Biebl wrote: > Hi Russ, hi Sune, > > I'd like to second this request to reword the current section in the > policy regarding menu files, suggesting fdo .desktop files as the > recommended mechanism and make it clear that .menu files are only really

Bug#776186: busybox: CVE-2014-9645

2015-03-02 Thread Moritz Muehlenhoff
On Mon, Jan 26, 2015 at 04:49:27AM +0100, Cyril Brulebois wrote: > Michael Gilbert (2015-01-25): > > control: tag -1 patch, pending > > > > Hi, > > > > I uploaded an nmu fixing this issue to delayed/15. Please let me know > > if I can shorten or if you want to do a maintainer upload instead. >

Bug#782571: Status message during initial overwrite not wrapped

2015-04-14 Thread Moritz Muehlenhoff
Package: partman-crypto Version: 80 Severity: normal Hi, I installed jessie with yesterday's debian-testing-amd64-netinst and chose the graphical d-i with German i18n. One output from partman-crypto was truncated/not line-wrapped, so only the following was displayed (in one line): --

Bug#782573: Installation on Thinkpad X250 worked fine

2015-04-14 Thread Moritz Muehlenhoff
Package: installation-reports Severity: normal Boot method: CD Image version: debian-testing-amd64-netinst.iso from 13-04-2015 Date: 13-04-2015 Machine: Lenovo ThinkPad X250 Summary: Everything went really well, good job! I especially like new desktop selection, which makes KDE installations muc

Bug#879732: CVE-2017-15874 / CVE-2017-15873

2017-10-25 Thread Moritz Muehlenhoff
Package: busybox Version: 1:1.27.2-1 Severity: important Tags: security Hi, please see: CVE-2017-15873 The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation. https://bugs.busybox.net/show_bug.cg

Bug#879732: CVE-2017-15874 / CVE-2017-15873

2017-10-25 Thread Moritz Muehlenhoff
On Wed, Oct 25, 2017 at 07:27:42PM +0200, Christoph Biedl wrote: > Tags: upstream confirmed > > Moritz Muehlenhoff wrote... > > > Hi, > > please see: > > Thanks for the heads-up, we'll try to get this fixed as soon as > possible. For the moment, I&

Re: Please review announcement of upcoming release of Debian 4.0r4 "etch-and-a-half"

2008-07-27 Thread Moritz Muehlenhoff
On Sat, Jul 26, 2008 at 04:24:20PM +0200, Alexander Reichle-Schmehl wrote: > Hi! > > Attached you'll find the current draft for the announcement of > "etch-and-a-half". Please review it; current schedule for it to be send > out is tomorrow. > One minor bit; while dcc was also subject to secur

Re: Scheduling linux-2.6 2.6.18-9

2006-12-15 Thread Moritz Muehlenhoff
Frederik Schueler wrote: > If you have any last minute changes which are that important they cannot=20 > wait for the first point release kernel, please list them here so we can > discuss them. The 2.6.18.6 stable series patches posted by Chris include some fixes we should include: - fixes data co

Bug#274665: installation-reports: Installation report on Thinkpad X31

2004-10-03 Thread Moritz Muehlenhoff
Package: installation-reports Version: foo Severity: normal Debian-installer-version: Daily build from 2004-09-30 uname -a: Linux galadriel 2.6.8-1-386 #1 Mon Sep 13 23:29:55 EDT 2004 i686 GNU/Linux Date: 2004-10-01 Method: PXE netboot Machine: IBM Thinkpad X31 Processor: Pentium M 1400 Memory:

Re: sarge3 kernel build & r3

2006-06-06 Thread Moritz Muehlenhoff
Martin Schulze wrote: > It would be good if we would be able some day to release kernel > updates in a more timely fashion and also not accumulate this many > security updates in one update. However, due to the number of > architectures and affected packages I'm not sure this goal can be met > any

Re: sarge3 kernel build & r3

2006-06-12 Thread Moritz Muehlenhoff
dann frazier wrote: > On Tue, Jun 06, 2006 at 01:32:42PM -0600, dann frazier wrote: > > On Tue, Jun 06, 2006 at 09:23:45PM +0200, Frans Pop wrote: > > > The more arches are built by the same person, the easier coordination is. > > > So your offer is very welcome. > > > > > > Note that you'll need

Bug#393786: [sparc] CD-ROM support broken in esp driver

2008-11-29 Thread Moritz Muehlenhoff
On Mon, Oct 23, 2006 at 06:10:51PM +0300, Meelis Roos wrote: >>> No. It is only present for sparc64 but missing for sparc32 (again with >>> 17. Oct netinst image, todays not tried). >> >> Hmm. I doubt that. If I check the contents of an initrd for the same CD >> image you used (sparc netinst from 1

Re: Installation report HP-715/64 (HIL)

2008-12-24 Thread Moritz Muehlenhoff
On Tue, Dec 23, 2008 at 12:35:51PM +0100, Helge Deller wrote: > Moritz Muehlenhoff wrote: > >> The boot-kernel (2.6.18) does not detect this keyboard on the HIL bus. > >> It seems the needed .config values are not set when it was built. > >> To solve this prob

Re: Installation report HP-715/64 (HIL)

2008-12-24 Thread Moritz Muehlenhoff
reassign 416208 debian-installer thanks On Wed, Dec 24, 2008 at 04:19:51PM +0100, Frans Pop wrote: > On Wednesday 24 December 2008, Moritz Muehlenhoff wrote: > > > Is it possible that someone from the debian-installer teams add this > > > "modprobe hilkbd" somewh

Re: Draft for lenny release announcement

2009-02-09 Thread Moritz Muehlenhoff
On 2009-02-09, Alexander Reichle-Schmehl wrote: > This is a multi-part message in MIME format. > --040603030801070601030404 > Content-Type: text/plain; charset=ISO-8859-15 > Content-Transfer-Encoding: 7bit > > [ Sorry for the cross post; just trying to make sure everyone is aware of >

Re: linux-latest-2.6 update in stable incomplete

2007-08-19 Thread Moritz Muehlenhoff
On 2007-08-18, dann frazier <[EMAIL PROTECTED]> wrote: > On Sat, Aug 18, 2007 at 01:20:11PM +0200, Bastian Blank wrote: >> Hi folks >> >> The linux-latest-2.6 update in 4.0r1 was incomplete. arm still have the >> version 6, anything else 6etch1. This is a serious problem as arm will >> be uninstal

Bug#635548: Affected by variant of CVE-2011-0097

2011-07-26 Thread Moritz Muehlenhoff
Package: udhcpc Severity: grave Tags: security Dear Busybox maintainers, it was discovered that busybox's udhcpc is also affected by https://www.isc.org/software/dhcp/advisories/cve-2011-0997 This has been assigned CVE-2011-2716. Cheers, Moritz -- System Information: Debian Release: w

Bug#358348: installation-report: Installation report for etch2 beta on Powerbook G4

2006-03-22 Thread Moritz Muehlenhoff
Package: installation-report Severity: normal Yesterday I installed Debian with the Etch2 d-i on a friend's G4 Powerbook. Some observations: 1. He had MacOS X occupying the whole hard disc, so we backuped all data and re-installed MacOS to repartition the disk. The standard MacOS installation pro

Bug#358348: installation-report: Installation report for etch2 beta on Powerbook G4

2006-04-03 Thread Moritz Muehlenhoff
Frans Pop wrote: > > He had MacOS X occupying the whole hard disc, so we backuped all data > > and re-installed MacOS to repartition the disk. The standard MacOS > > installation procedure created a 32k HFS+ partition, followed by 134 MB > > free disk space and followed by the real MacOS partition.

Bug#696658: Everything worked fine, well done!

2012-12-25 Thread Moritz Muehlenhoff
Package: installation-reports Version: 2.49 Severity: normal -- Package-specific info: Boot method: CD Image version: Weekly build from 2012-12-24 Date: Machine: Barebone desktop system with Nvidia chipset bought six months ago. (No specific hardware information, since I'm filing this report f