Bug#1030263: telegram-desktop: Telegram-Desktop ignores Shift-Key

2023-02-01 Thread Arne Wichmann
Package: telegram-desktop Version: 4.5.3+ds-1+b1 Severity: normal Hi. Since the latest upgrade, telegram-desktop ignores the shift-modifier on my system. cu AW -- Package-specific info: -- System Information: Debian Release: 11.1 APT prefers testing APT policy: (90, 'testing'), (90, 'stab

Bug#1020404: luakit: aborts at start

2022-09-22 Thread Arne Wichmann
Moin, begin quotation from Markus Demleitner (in <20220921185014.db6o56sxwieo3vnm@victor>): > On Wed, Sep 21, 2022 at 11:36:08AM +0200, Arne Wichmann wrote: > > Bail out! ERROR:common/util.c:67:strip_ansi_escapes: assertion failed (err > > == NULL): Error while compili

Bug#1020404: luakit: aborts at start

2022-09-21 Thread Arne Wichmann
Package: luakit Version: 1:2.2.1-1 Severity: grave Justification: renders package unusable Luakit aborts saying: Bail out! ERROR:common/util.c:67:strip_ansi_escapes: assertion failed (err == NULL): Error while compiling regular expression ?[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[

Bug#987784: luakit: Luakit should provide more information why it does not like a certificate

2021-04-29 Thread Arne Wichmann
Package: luakit Version: 1:2.2.1-1 Severity: wishlist Tags: upstream When I view a HTTPS-page with no usable certificate, I get a message like the following: Your connection may be insecure! A problem occurred while loading the URL https://[...] Unacceptable TLS certificate: The certificate doe

Bug#926644: xpat2: debian/watch should be updated

2019-05-13 Thread Arne Wichmann
you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@saar.de) signature.asc Description: PGP signature

Bug#878940: xpat2: Windows should be large enough to fit contents

2017-10-21 Thread Arne Wichmann
want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@saar.de) signature.asc Description: PGP signature

Bug#818262: xpat2: Buffer overflow when saving a game in xpat2

2016-03-15 Thread Arne Wichmann
eceived this although the mail probably bounced.) cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet)

Bug#785326: libavcodec56: CVE-2014-7937 - Multiple off-by-one errors in libavcodec/vorbisdec.c

2015-05-19 Thread Arne Wichmann
> > On Sat, May 16, 2015 at 03:07:57PM +0200, Sebastian Ramacher wrote: > > > > On 2015-05-15 15:22:28, Alessandro Ghedini wrote: > > > > > On Fri, May 15, 2015 at 11:05:17AM +0200, Sebastian Ramacher wrote: > > > > > > On 2015-05-14 20:41:15, Arne W

Bug#785326: libavcodec56: CVE-2014-7937 - Multiple off-by-one errors in libavcodec/vorbisdec.c

2015-05-16 Thread Arne Wichmann
6:11.3-1 > > > > > > On 2015-05-14 20:41:15, Arne Wichmann wrote: > > > > Package: libavcodec56 > > > > Version: 6:11.3-2 > > > > Severity: grave > > > > Tags: security > > > > Justification: user security hole > >

Bug#785326: libavcodec56: CVE-2014-7937 - Multiple off-by-one errors in libavcodec/vorbisdec.c

2015-05-14 Thread Arne Wichmann
Package: libavcodec56 Version: 6:11.3-2 Severity: grave Tags: security Justification: user security hole Hi, as far as I can see this has not yet been reported or fixed: CVE-2014-7937 : Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40

Bug#717544: Workaround for CVE-2013-2207

2015-03-16 Thread Arne Wichmann
an free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJVBs5EAAoJEENYfBy4DUs+5vgP/07qI3cTAKOeTbPH5BcBS+XB fNJFmOtTUdXaC9FW0YMAf/kLDtCeI5WXypY0gERyaoh4OaIdEhiWQ1nEIcBD/C0T Z09s0D1L/1lypK3sCz+PO34IlF

Bug#698920: fvwm: In FvwmWinList, the list shows the title names instead of the icon names

2015-02-21 Thread Arne Wichmann
don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) -BEGIN PGP S

Bug#508087: closed by Bastian Blank (no bug)

2014-09-07 Thread Arne Wichmann
. > -- Spock, "Day of the Dove", stardate unknown > > -- Weitergeleitete Nachricht -- > From: Arne Wichmann > To: Debian Bug Tracking System > Cc: > Date: Sun, 07 Dec 2008 20:18:40 +0100 > Subject: lvm2: should not uninstall when th

Bug#717544: Patch for CVE-2013-2207

2014-03-04 Thread Arne Wichmann
begin quotation from Moritz Muehlenhoff (in <20140301122144.ga11...@inutil.org>): > Version: 2.18-1 > > On Fri, Aug 23, 2013 at 02:13:40PM +0200, Arne Wichmann wrote: > > tags #717544 + patch > > > > Hi. > > > > A patch for CVE-2013-2207 is av

Bug#646020: Ping: CVE-2011-3624

2014-02-14 Thread Arne Wichmann
begin quotation from Antonio Terceiro (in <20140212131039.ga2...@debian.org>): > On Mon, Feb 10, 2014 at 03:49:31PM +0100, Arne Wichmann wrote: > > There has been no action on this bug for over a year now. Is there any plan > > to do something about this? > > not qui

Bug#738572: libav-tools: CVE-2011-3935

2014-02-10 Thread Arne Wichmann
Package: libav-tools Version: 6:9.11-1 Severity: grave Tags: security Justification: user security hole Hi... As far as I can see, CVE-2011-3935 [1] applies to libav-tools. As the descriptions for the problem are bit low on information I use a high severity - feel free to lower it if that is not

Bug#646020: Ping: CVE-2011-3624

2014-02-10 Thread Arne Wichmann
an free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#735287: logcheck: invent conditional logging

2014-01-14 Thread Arne Wichmann
Package: logcheck Version: 1.3.15 Severity: wishlist Hi... There is one thing I would like to have in logcheck for quite a long time already: Invent a mechanism by which a pattern is only mailed (or not mailed) if another pattern was seen a given time before it (or also possibly after it). For

Bug#726578: Ping: pwgen: Multiple vulnerabilities in passwords generation

2014-01-14 Thread Arne Wichmann
Thank you for reacting quickly! begin quotation from Theodore Ts'o (in <20140112234500.ga15...@thunk.org>): > On Sun, Jan 12, 2014 at 09:27:14PM +0100, Arne Wichmann wrote: > > This grave problem is now open for more than two months. Is there any plan > > to resolve

Bug#722540: Ping: CVE-2013-4289 CVE-2013-4290

2014-01-12 Thread Arne Wichmann
self. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#726578: Ping: pwgen: Multiple vulnerabilities in passwords generation

2014-01-12 Thread Arne Wichmann
ou but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#735105: libnss3: CVE-2013-1741 in wheezy

2014-01-12 Thread Arne Wichmann
27;t support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#735105: libnss3: CVE-2013-1741 in wheezy

2014-01-12 Thread Arne Wichmann
Package: libnss3 Version: 2:3.14.5-1 Severity: important Tags: security, wheezy, squeeze Hi! You recently fixed CVE-2013-1741 in unstable, but it is still open for wheezy and squeeze. cu AW -- System Information: Debian Release: 7.3 APT prefers stable APT policy: (500, 'stable') Architectu

Bug#698920: fvwm: In FvwmWinList, the list shows the title names instead of the icon names

2013-11-12 Thread Arne Wichmann
begin quotation from Dan Espen (in ): > Arne Wichmann writes: > > > begin quotation from Schaaf, Jonathan P (GE Healthcare) (in > > ): > >> > Ok, doing some tests it seems that the logic of setting window/icon > >> > names in fvwm is broken. >

Bug#254615: Tar 1.27 supports ACL's

2013-11-07 Thread Arne Wichmann
ou must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#698920: fvwm: In FvwmWinList, the list shows the title names instead of the icon names

2013-11-06 Thread Arne Wichmann
yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#698920: fvwm: In FvwmWinList, the list shows the title names instead of the icon names

2013-10-29 Thread Arne Wichmann
RING) = "icon" WM_NAME(STRING) = "nix" (560) aw@anhrefn $ echo -ne "\033]2;title\007" (561) aw@anhrefn $ xprop -id 0x282 |grep WM_.*NAME|grep -v LOCALE WM_ICON_NAME(STRING) = "icon" WM_NAME(STRING) = "title" In any of the rxvt-cases, WM_NAME is di

Bug#728208: liblcms1: CVE-2013-4160 - lcms can be made to crash

2013-10-29 Thread Arne Wichmann
Package: liblcms1 Version: 1.19.dfsg-1.2 Severity: important Tags: security Dear Maintainer, CVE-2013-4160 also applies to lcms. cu AW -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable'), (50, 'unstable'), (40, 'experimental'

Bug#717009: closed by Reinhard Tartler (Bug#717009: fixed in libav 6:9.9-1)

2013-10-29 Thread Arne Wichmann
replying to this email. some of these still do not seem fixed to me... > Date: Tue, 16 Jul 2013 02:14:18 +0200 > From: Arne Wichmann > To: Debian Bug Tracking System > Subject: libavcodec53: CVEs CVE-2013-0844 to CVE-2013-0874, CVE-2013-3670, > CVE-2013-3672, CVE-2013-3674 >

Bug#689423: eglibc: Patch for CVE-2012-4424

2013-10-10 Thread Arne Wichmann
to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#687530: eglibc: Patch for CVE-2012-4412

2013-10-10 Thread Arne Wichmann
to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#712840: CVE-2013-1961 in tiff3 - fix for stable?

2013-08-23 Thread Arne Wichmann
Hi! Is there any fix in stable for tiff3 planned? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) A

Bug#717178: CVE-2013-4788 - upstream bugreport

2013-08-23 Thread Arne Wichmann
ne can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#717544: Patch for CVE-2013-2207

2013-08-23 Thread Arne Wichmann
27;t support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#601337: Events related bug reports

2013-08-07 Thread Arne Wichmann
you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#717009: libavcodec53: CVEs CVE-2013-0844 to CVE-2013-0874, CVE-2013-3670, CVE-2013-3672, CVE-2013-3674

2013-07-15 Thread Arne Wichmann
Package: libavcodec53 Version: 6:0.8.7-1 Severity: grave Tags: security Justification: user security hole Dear Maintainer, I have here another series of CVEs for libav. Some of these are fixed, some of these I was not able to check. Those without comment were checked by me and seem valid - at lea

Bug#646150: www.debian.org: please define a policy for event locations

2013-07-10 Thread Arne Wichmann
d.o. for the time being. If somebody pops up and is willing to maintain the events list I am willing to revert this. cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#703071: CVE-2011-1187, CVE-2012-0475, CVE-2013-{0773,0775,0776,0780,0782,0783}

2013-04-30 Thread Arne Wichmann
ly as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#703071: CVE-2011-1187, CVE-2012-0475, CVE-2013-{0773,0775,0776,0780,0782,0783}

2013-03-14 Thread Arne Wichmann
self. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#646570: boot error

2013-03-06 Thread Arne Wichmann
7;t want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#681564: "fix"

2013-02-08 Thread Arne Wichmann
as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#684889: CVE-2012-3480 - stable update?

2013-02-05 Thread Arne Wichmann
Hi! Is there any plan to fix CVE-2012-3480 / #684889 in stable? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debi

Bug#681888: CVE-2012-3406: exploits in the wild, upstream report?

2013-02-05 Thread Arne Wichmann
icted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#681564: webgui: apache2 segfaults - same here

2013-01-18 Thread Arne Wichmann
Fust FYI: I have mostly the same problems here. cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann

Bug#694483: CVEs: CVE-2012-2882 CVE-2012-5359 CVE-2012-5360 CVE-2012-5361

2013-01-04 Thread Arne Wichmann
Mon, Nov 26, 2012 at 8:30 PM, Arne Wichmann wrote: > > > I have here another series of CVEs for ffmpeg/libav: > > > > CVE-2012-2882 > > Libav's ogg decoder is a bit different to the one in FFmpeg. Can you > please provide a testfile so that we can test if this is

Bug#696447: wesnoth-1.11-dm: Game dies with Error: invalid side(1) found

2012-12-20 Thread Arne Wichmann
Package: wesnoth-1.11-dm Version: 1:1.11.0-1 Severity: normal Dear Maintainer, While playing 'Delfadors Memoirs' in the Szenario DM-Dark_Sky_Over_Weldyn the game dies with "Error while playing the game: game_error: invalid side(1) found in unit definition". I will try to attach the relevant save

Bug#694483: CVEs: CVE-2012-2882 CVE-2012-5359 CVE-2012-5360 CVE-2012-5361

2012-11-26 Thread Arne Wichmann
Source: libav Version: 0.8.4 Severity: grave Tags: security Justification: user security hole Dear Maintainer, I have here another series of CVEs for ffmpeg/libav: CVE-2012-2882 CVE-2012-5359 CVE-2012-5360 CVE-2012-5361 For the last 3 http://technet.microsoft.com/en-us/security/msvr/msvr12-017

Bug#688847: Unclear status of CVE-2012-2774 CVE-2012-2783 CVE-2012-2791 CVE-2012-2797 CVE-2012-2803 CVE-2012-2804

2012-11-26 Thread Arne Wichmann
? Are they fixed? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.

Bug#677195: CVE-2012-2673 - still open in stable

2012-09-21 Thread Arne Wichmann
Hi... This bug is still open in stable - is there any plan for a fix? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debi

Bug#681888: Patch for CVE-2012-3406

2012-09-21 Thread Arne Wichmann
ne can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#684527: openssl: CVE-2011-5095 - The remote SSL/TLS server accepts a weak Diffie-Hellman public value

2012-08-10 Thread Arne Wichmann
Package: openssl Version: 0.9.8o-4squeeze13 Severity: grave Tags: security Justification: user security hole openssl in squeeze (at least up to 0.9.8o-4squeeze13) is vulnerable to CVE-2011-5095 [1]. For reference you might have a look at [2] - the problem seems to be that fips/dh/fips_dh_key.c doe

Bug#349251: Ping

2012-08-10 Thread Arne Wichmann
t yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#663579: CVE-2012-1147 - Not on *nix

2012-07-16 Thread Arne Wichmann
an free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#670636: April security release - fixed in stable-security

2012-07-16 Thread Arne Wichmann
one can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#675872: closed by Debian FTP Masters (Bug#680362: Removed package(s) from unstable)

2012-07-09 Thread Arne Wichmann
found 675872 5.1.63-0+squeeze1 thanks This is still open in stable. cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debi

Bug#483217: texlive-latex-base: 483217: status?

2012-06-29 Thread Arne Wichmann
begin quotation from Norbert Preining (in <20120627143050.ge25...@gamma.logic.tuwien.ac.at>): > On Mi, 27 Jun 2012, Arne Wichmann wrote: > > Given that, the relevant files should be removed from debian, as they are > > not DFSG-free. Am I wrong there? > > Yes

Bug#618968: Ping - netgen license problems

2012-06-28 Thread Arne Wichmann
begin quotation from Francesco Poli (in <20120625215725.69523c3a3df0a27f62672...@paranoici.org>): > On Mon, 25 Jun 2012 10:36:50 +0200 Arne Wichmann wrote: > > > So, at least as far as I can see, there are a number of things to be done > > in various time frames: >

Bug#483217: texlive-latex-base: 483217: status?

2012-06-27 Thread Arne Wichmann
begin quotation from Norbert Preining (in <20120619024124.gd14...@gamma.logic.tuwien.ac.at>): > On Sa, 16 Jun 2012, Arne Wichmann wrote: > > > Bug #483217 about licensing issues in files by Donald Arseneau was given > > > an exception for lenny. Do you plan to do

Bug#618968: Ping - netgen license problems

2012-06-25 Thread Arne Wichmann
begin quotation from Francesco Poli (in <20120620232034.ae7eb33bd4efe458d8ed7...@paranoici.org>): > On Sat, 16 Jun 2012 18:38:00 +0200 Arne Wichmann wrote: > > This serious bug is now open without any action for more than a year. Is > > that supposed to change? >

Bug#631051: Ping - onemore build problem

2012-06-17 Thread Arne Wichmann
crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#618876: Ping - non-free data

2012-06-17 Thread Arne Wichmann
crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#637488: Ping - remove t1lib

2012-06-17 Thread Arne Wichmann
begin quotation from Adam D. Barratt (in <1339930157.7014.2.ca...@jacala.jungle.funky-badger.org>): > On Sun, 2012-06-17 at 12:14 +0200, Arne Wichmann wrote: > > Just to remember... As far as I can see there are no more rdepends left. > > Are there any more reasons not to r

Bug#634131: Ping - import error

2012-06-17 Thread Arne Wichmann
self. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#637488: Ping - remove t1lib

2012-06-17 Thread Arne Wichmann
t it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#629730: Ping - FTBFS

2012-06-16 Thread Arne Wichmann
yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#629154: Ping - packages using python-support are configured before they are usable

2012-06-16 Thread Arne Wichmann
but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#609537: Ping - /etc/init.d/mysql stop problems

2012-06-16 Thread Arne Wichmann
ou must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#627174: Ping - FTBFS

2012-06-16 Thread Arne Wichmann
crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#626391: Ping - venkman crashes

2012-06-16 Thread Arne Wichmann
27;t support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#625657: Transient problem - not RC

2012-06-16 Thread Arne Wichmann
ou but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#623382: Ping - gnat fatal error - gone away?

2012-06-16 Thread Arne Wichmann
self, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#599523: Ping - unexpected downgrades

2012-06-16 Thread Arne Wichmann
self. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#618968: Ping - netgen license problems

2012-06-16 Thread Arne Wichmann
ou but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#610885: Ping

2012-06-16 Thread Arne Wichmann
crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#579522: Ping

2012-06-16 Thread Arne Wichmann
ne can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#603405: Ping

2012-06-16 Thread Arne Wichmann
yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#538822: Ping

2012-06-16 Thread Arne Wichmann
ne can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#483217: texlive-latex-base: 483217: status?

2012-06-16 Thread Arne Wichmann
se his work in a more useful > way? And for wheezy again? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debi

Bug#665012: CVE-2012-1570 not yet fixed in stable

2012-06-03 Thread Arne Wichmann
begin quotation from Moritz Mühlenhoff (in <20120416154357.GA4565@pisco.westfalen.local>): > On Mon, Apr 16, 2012 at 12:43:40AM +0100, Nicholas Bamber wrote: > > On 15/04/12 16:18, Arne Wichmann wrote: > > >Found: 665012 1.4.03-1.1 > > > > > >As far as

Bug#675872: mysql-server-5.1: CVE-2012-0882 - one more underspecified security problem

2012-06-03 Thread Arne Wichmann
Package: mysql-server-5.1 Version: 5.1.61-0+squeeze1 Severity: important Hi. Quoting from the RedHat Bugreport [1]: CVE-2012-0882: unspecified remote exploit (released with VulnDisco Pack Professional 9.17). This is mostly a heads-up as there is not enough information to fix this bug. See also:

Bug#628455: CVE-2011-1521 again

2012-06-03 Thread Arne Wichmann
icted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#672660: linux-2.6: CVE-2012-0810 kernel-rt: stack corruption when task gets scheduled out using the debug stack

2012-05-12 Thread Arne Wichmann
Package: linux-2.6 Version: 3.2.16-1 Severity: grave Tags: security Justification: user security hole This seems to have slipped through the kernel-sec repository... Citing Redhat: The issue is that the int3 handler uses a per CPU debug stack, and calls do_traps() with interrupts enabled but pre

Bug#672218: rsyslog: Logrotate error message

2012-05-09 Thread Arne Wichmann
Package: rsyslog Version: 5.8.11-1 Severity: normal Dear Maintainer, For some time now I receive some new error messages by mail from cron: /etc/cron.daily/logrotate: invoke-rc.d: action rotate is unknown, but proceeding anyway.

Bug#670076: pam: CVE-2011-3628 - pam_motd does not sanitize environment

2012-04-22 Thread Arne Wichmann
Source: pam Severity: normal Tags: security Hi, citing from ubuntu (https://bugs.launchpad.net/ubuntu/+source/pam/+bug/610125/comments/0): > pam_motd calls the scripts in /etc/update-motd.d/ as root without > sanitising the environment. While that is acceptable when called for > instance by sshd

Bug#656716: displays text/x-gettext attachment with internal viewer ignoring ~/.mailcap

2012-04-22 Thread Arne Wichmann
ourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#631017: crash on group reply

2012-04-22 Thread Arne Wichmann
ou but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#423931: Forward this?

2012-04-21 Thread Arne Wichmann
yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#585559: mutt: tokyocabinet is slower than gdbm

2012-04-21 Thread Arne Wichmann
So, what happened to these benchmarks? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann

Bug#619405: Forward this?

2012-04-21 Thread Arne Wichmann
lf. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#665012: CVE-2012-1570 not yet fixed in stable

2012-04-15 Thread Arne Wichmann
crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#652631: www.debian.org: please clarify the distinction between 'events@d.o' and 'debian-events-*@lists.d.o'

2012-02-27 Thread Arne Wichmann
Mon, Dec 26, 2011 at 01:30:10AM +0100, Bernd Zeimetz wrote: > > On 12/25/2011 11:11 PM, Arne Wichmann wrote: > > [...] > > >> b) at least for those who have access to Debian machines nothing is > > >>happening behind the scene, given that 'events

Bug#655154: woof: No space left on device when /tmp is full

2012-01-08 Thread Arne Wichmann
expect instead? I would have expected that woof does not use /tmp to cache large files. A cache in the destination directory seems more appropriate. Yours, arne wichmann -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (990, 'testing'), (500, &#x

Bug#646570: boot error

2011-12-30 Thread Arne Wichmann
mply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#652631: www.debian.org: please clarify the distinction between 'events@d.o' and 'debian-events-*@lists.d.o'

2011-12-25 Thread Arne Wichmann
> > Bernd Zeimetz wrote: > >> On 12/18/2011 01:03 PM, Arne Wichmann wrote: > >> > begin quotation from Luca Capello (in <877h2jm9bv@gismo.pca.it>): > >> > I do not like the way things are handled in that mail. I do not feel that > >> > cen

Bug#650555: python2.7: distutils creates .pypirc insecurely

2011-11-30 Thread Arne Wichmann
Package: python2.7 Version: 2.7.2-7 Severity: important Tags: security Just to have it visible from python2.7, too: -- begin citation -- distutils uses this method to create .pypirc: def _store_pypirc(self, username, password): """Creates

Bug#641738: Ping

2011-11-14 Thread Arne Wichmann
self. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#648021: fail2ban: Logfile in UTC, localtime UTC+1 -> no entrioes found

2011-11-09 Thread Arne Wichmann
yourself, just don't support it. Noone can free you but yourself. (crag, on Debian Planet) Arne Wichmann (a...@linux.de) signature.asc Description: Digital signature

Bug#646570: extlinux: "Boot error" on boot

2011-10-29 Thread Arne Wichmann
begin quotation from Daniel Baumann (in <4ea5.1010...@progress-technologies.net>): > On 10/26/2011 11:42 AM, Arne Wichmann wrote: > > anhrefn# /sbin/fdisk -l /dev/hda [...] /dev/hda3 * 3984120 > > 586067264 291041572+ 83 Linux > > something is fishy h

Bug#646570: extlinux: "Boot error" on boot

2011-10-26 Thread Arne Wichmann
begin quotation from Daniel Baumann (in <4ea7d30e.9060...@progress-technologies.net>): > On 10/26/2011 11:13 AM, Arne Wichmann wrote: > > /boot: /dev/hda3 on / type ext3 (rw) > > does that partition has the bootable flag? anhrefn# /sbin/fdisk -l /dev/hda [...] /dev

Bug#646570: extlinux: "Boot error" on boot

2011-10-26 Thread Arne Wichmann
begin quotation from Daniel Baumann (in <4ea7c0cc.80...@progress-technologies.net>): > On 10/26/2011 10:00 AM, Arne Wichmann wrote: > > I tried that, the outcome did not change. > > what filesystem does your /boot use? how does your > /etc/default/extlinux, /boot/ext

  1   2   >