Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-20 Thread Craig Small
Source: wordpress Version: 4.8.1+dfsg-1 Severity: grave Tags: security Justification: user security hole Wordpress 4.8.2 is out which fixes 9 security issues[1] $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vuln

Bug#876274: wordpress: 9 security bugs in wordpress 4.8.1 and earlier

2017-09-20 Thread Craig Small
roved setup for the next round of bugs. Not started the mappings yet but it's on my list. The WPvuln guy has mapped only the first SQLi. - Craig -- Craig Small https://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linuxhttps://www.debian.org/ csmall at : debian.o

Bug#870126: ecryptfs-mount-private: mount: No such file or directory

2017-07-29 Thread Craig Small
Package: ecryptfs-utils Version: 111-4 Severity: important I have setup the standard home ~/Private directory. It looks like it is confused about which key to use. For the last few months or so, I get this (key IDs changed but consistent in report): $ ecryptfs-mount-private Enter your login pa

Bug#835654: [Pkg-net-snmp-devel] Orphaning net-snmp?

2017-04-20 Thread Craig Small
of the darkness. There had been need of rain for many days. >"Only a promise," Lao Er said. > Pearl S. Buck - Dragon Seed > > > ___ > Pkg-net-snmp-devel mailing list &

Bug#847597: wordpress enforces installation of MariaDB

2016-12-09 Thread Craig Small
l-client | virtual-mysql-client" That second package should mean you're safe to upgrade wordpress AND keep mysql. - Craig -- Craig Small (@smallsees) http://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linux http://www.debian.org/ csmall at : debian.org GPG fingerpr

Bug#833148: ddclient: update CloudFlare API to v4

2016-08-01 Thread Craig Small
* Bump Standards-Version to 3.9.8 (no changes required) * Update Vcs-Browser, Vcd-Git to use https URLs + [ Craig Small ] + * Update CloudFlare API to v4 + -- Martin Pitt Wed, 22 Jun 2016 17:44:54 +0200 ddclient (3.8.3-1) unstable; urgency=medium diff --git a/debian/patches/cloudflar

Bug#852858: ssl-cert-check: Enable checks for xmpp servers

2017-01-27 Thread Craig Small
Package: ssl-cert-check Version: 3.29-1 Severity: wishlist Tags: patch Most modern openssl client code will be able to connect to a XMPP server either on the client or server port and check the SSL certificate. This patch enables ssl-cert-check to use that feature so you can check your XMPP serve

Bug#852758: procps: pkill returns success on failure due to operation not permitted

2017-02-03 Thread Craig Small
kill one and not the other. The other programs use 1 so we have used this for pkill too. The upstream commit is at https://gitlab.com/procps-ng/procps/commit/625d0809daa5b666d9f5834bebcdc458799221f3 - Craig -- Craig Small (@smallsees) http://dropbear.xyz/ csmall at : enc.com

Bug#840680: [pkg-gnupg-maint] Bug#840680: dirmngr: Dirmngr not always responding

2016-10-27 Thread Craig Small
Hi Daniel, I'm not sure if this helps, but using the connect manager gave an odd result. If I start connect manager, then gpg --send-key works immediately, it looks just like your gpg-connect-agent output. On another screen, I use gpg --send-key and that works. The key gets sent and all is good.

Bug#842879: get start date from local VPS, not underlying actual computer

2016-11-02 Thread Craig Small
Hi Dan, On Wed, 2 Nov 2016, 11:30 AM 積丹尼 Dan Jacobson wrote: ps should have a way to get the process start time from the local instance of the VPS, not the entire underlying computer. For real VPS they do because there is a separate instance of the /proc filesystem. $ sleep 4& ps -eo pid,cmd,s

Bug#842879: no alternate way to find how long they have been running?

2016-11-02 Thread Craig Small
stat the processes' stat file perhaps? Using a find? $ ps -o lstart 2730 STARTED Mon Oct 31 16:03:54 2016 $ stat /proc/2730/stat File: '/proc/2730/stat' Size: 0 Blocks: 0 IO Block: 1024 regular empty file Device: 4h/4d Inode: 15018747Links: 1 Access: (0

Bug#842879: [jidanni 126520274] ps dates wrong

2016-11-03 Thread Craig Small
On Thu, Nov 3, 2016 at 1:21 PM DreamHost Customer Support Team < supp...@dreamhost.com> wrote: > We use 'linux-vserver' on our VPS servers. Please note that one of the > major disadvantages of the linux-vserver package is that many hardware > related system calls, as well as /proc and /sys nodes a

Bug#842879: use uptime, not btime, else wrong start times on some systems

2016-11-05 Thread Craig Small
On Sun, 6 Nov 2016, 10:18 AM 積丹尼 Dan Jacobson wrote: > Craig, it turns out ps is using the wrong file in the first place! > If it used /proc/uptime it would surely never have this problem on any > system Thats a big call to say it won't have a problem on any system. The problem is lots of syste

Bug#845480: /bin/ps depends on /usr/lib/... which makes the system unbootable

2016-11-23 Thread Craig Small
Actually its not ps, its libsystemd that is pulling this dependency in. ps is linked to libsystemd which is in /lib and $ ldd /lib/x86_64-linux-gnu/libsystemd.so | grep usr liblz4.so.1 => /usr/lib/x86_64-linux-gnu/liblz4.so.1 (0x7fa2cf30) There is also this on the systemd bug https://bugs.

Bug#845480: /bin/ps depends on /usr/lib/... which makes the system unbootable

2016-11-27 Thread Craig Small
en 23. Nov 2016 um 23:15 schrieb Axel Beckert: > > Craig Small wrote: > > > Actually its not ps, its libsystemd that is pulling this dependency > in. ps > > > is linked to libsystemd which is in /lib and > > > $ ldd /lib/x86_64-linux-gnu/libsystemd.so | grep usr

Bug#845480: /bin/ps depends on /usr/lib/... which makes the system unbootable

2016-11-27 Thread Craig Small
x27;m not sure if booting with /usr unmounted is still a valid way of booting or not or if there is a work-around, but it basically comes down to how the systemd libraries operate. - Craig -- Craig Small (@smallsees) https://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linux

Bug#845480: /bin/ps depends on /usr/lib/... which makes the system unbootable

2016-11-27 Thread Craig Small
PGP SIGNED MESSAGE- > Hash: SHA512 > > Hello Craig, > > Am So den 27. Nov 2016 um 11:12 schrieb Craig Small: > > There is a reason for linking to libsystemd and it is to do with > accessing > > the systemd type parameters that can be applied to a process. >

Bug#846079: procps: Can't upgrade with aptitude

2016-11-28 Thread Craig Small
Tags 846079 moreinfo Tags 846079 unreproducible Severity 846079 normal Thankyou Hi, there should be more output saying what else is going wrong. it looks like two other people have done the same thing (thanks both of you) with no problems . Generally this sort of problem boils down to two sorts

Bug#851310: wordpress: Eight security issues in wordpress 4.7

2017-01-13 Thread Craig Small
Source: wordpress Version: 4.7+dfsg-2 Severity: grave Tags: upstream security Justification: user security hole There are a bunch of security holes in wordpress 4.7. Eight! security issues! The best summary of them is at [1] which lists them as: WordPress 4.3-4.7 - Potential Remote Command Exec

Bug#849365: libphp-phpmailer: CVE-2016-10033 (wordpress not vulnerable)

2016-12-28 Thread Craig Small
should be noted somewhere wordpress, for once, isn't vulnerable. - Craig 1: https://core.trac.wordpress.org/ticket/37210 -- Craig Small (@smallsees) http://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linux http://www.debian.org/ csmall at : debian.org GPG fingerpri

Bug#837090: wordpress: CVE-2016-6896 CVE-2016-6897

2016-09-09 Thread Craig Small
On Fri, Sep 9, 2016 at 3:39 AM Salvatore Bonaccorso wrote: > the following vulnerabilities were published for wordpress. > > CVE-2016-6896[0] and CVE-2016-6897[1]. It was reported that they at > least affect 4.5.3, no earlier version were so far checked, since no > full details to fixes given. Th

Bug#837090: wordpress CVEs (was: Re: Bug#837090: wordpress: CVE-2016-6896 CVE-2016-6897)

2016-09-10 Thread Craig Small
On Sat, Sep 10, 2016 at 6:25 PM Salvatore Bonaccorso wrote: > HI Craig, > > Thanks for looking into it. Some comments, and adding the security > team alias. > > On Fri, Sep 09, 2016 at 09:13:46PM +, Craig Small wrote: > > On Fri, Sep 9, 2016 at 3:39 AM Salvato

Bug#840680: dirmngr: Dirmngr not always responding

2016-10-21 Thread Craig Small
Package: dirmngr Version: 2.1.15-4 Followup-For: Bug #840680 Possibly the same problem but --send-keys hangs most of the time and never times out. At the same time dirmngr-client --ping also hangs. I never seen so many ENOSYS before, this is stracing an existing dirmngr so perhaps its the strace

Bug#841909: /usr/bin/gpg: Configuration error over ssh

2016-10-24 Thread Craig Small
Package: gnupg Version: 2.1.15-4 Severity: normal File: /usr/bin/gpg Since the latest upgrade, I am unable to sign anything using a ssh shell. $ gpg --sign gpg.txt File 'gpg.txt.gpg' exists. Overwrite? (y/N) y gpg: signing failed: Configuration error gpg: signing failed: Configuration error The

Bug#841909: [pkg-gnupg-maint] Bug#841909: /usr/bin/gpg: Configuration error over ssh

2016-10-25 Thread Craig Small
> Control: tags 841909 + moreinfo > Hi Craig-- > > On Mon 2016-10-24 07:13:25 -0400, Craig Small wrote: > > Since the latest upgrade, I am unable to sign anything using a ssh > > shell. > > > > $ gpg --sign gpg.txt > > File 'gpg.txt.gpg' exis

Bug#832148: fix SIGPWR warning on kfreebsd

2016-08-28 Thread Craig Small
saw that message before you went 'dammit, im going to fix that'. - Craig -- Craig Small (@smallsees) http://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linux http://www.debian.org/ csmall at : debian.org GPG fingerprint:5D2F B320 B825 D939 04D2 0519 3938 F96B DF50 FEA5

Bug#810018: Additional info possibly relevant for procps-base/pidof ...

2016-04-17 Thread Craig Small
g/procps/issues/4 On Wed, Jan 20, 2016 at 3:15 AM Andreas Henriksson wrote: > Hello Craig Small. > > Here's a small status update which might be relevant to consider > for this bug report regarding procps-base / pidof. > > The policy-related service management tools

Bug#830313: watch: segfaults with --color

2016-07-08 Thread Craig Small
Hi Josh, Thanks for looking into this, I only do some simple use of watch so don't see the problems. I agree, if it doesn't understand something then stop messing around and drop out. Patch 0001 was already fixed upstream commit 6fcb6900 has a similar fix The other three patches have been applie

Bug#830313: watch: segfaults with --color

2016-07-08 Thread Craig Small
there seems to be a problem, watch is now not interpreting any ansi sequences. im bisecting it now to work out what went wrong, one of the patches didnt apply cleanly so i suspect that one. On Sat, Jul 9, 2016 at 3:12 PM Josh Triplett wrote: > On Sat, Jul 09, 2016 at 04:59:07AM +0000, Cr

Bug#830313: watch: segfaults with --color

2016-07-08 Thread Craig Small
I messed up the manual patch when it wouldn't apply. I put the return before the attrset() That'll do it! - Craig On Sat, Jul 9, 2016 at 3:38 PM Craig Small wrote: > there seems to be a problem, watch is now not interpreting any ansi > sequences. > im bisecting it now to

Bug#830734: procps: FTBFS[!linux]: 'HOST_NAME_MAX' undeclared

2016-07-10 Thread Craig Small
On Mon, Jul 11, 2016 at 7:39 AM Aaron M. Ucko wrote: > Source: procps > Version: 2:3.3.12-1 > Severity: important > Justification: fails to build from source (but built successfully in the > past) > > Builds of procps for kFreeBSD and the Hurd have been failing: > Builds on mine, I tested specifi

Bug#830733: procps: FTBFS[i386]: FAIL: strtod_nol_or_err("123") != 123.000000

2016-07-10 Thread Craig Small
freebsd amd64 has the host definition and kfreebsd i386 does not. As I said, kfreebsd has include problems all the time (most of the ifdefs are for it) - Craig -- Craig Small (@smallsees) http://dropbear.xyz/ csmall at : enc.com.au Debian GNU/Linux http://www.debian.org/ csmall at : debian.org GPG fingerprint:5D2F B320 B825 D939 04D2 0519 3938 F96B DF50 FEA5

Bug#830733: procps: FTBFS[i386]: FAIL: strtod_nol_or_err("123") != 123.000000

2016-07-10 Thread Craig Small
Can you apply this patch to your setup and see if it checks? You really only need to compile lib/test_strod_nol and run it. - Craig On Mon, Jul 11, 2016 at 8:00 AM Craig Small wrote: > On Mon, Jul 11, 2016 at 7:33 AM Aaron M. Ucko wrote: > >> Source: procps >> V

Bug#830734: procps: FTBFS[!linux]: 'HOST_NAME_MAX' undeclared

2016-07-11 Thread Craig Small
rhaps it is there but something is not including local_lim.h? On Mon, Jul 11, 2016 at 8:26 PM Aurelien Jarno wrote: > On 2016-07-10 18:50, Aaron M. Ucko wrote: > > Craig Small writes: > > > > > local_lim.h is part of libc6-dev version 2.19-18+deb8u4 > > > So what

Bug#830772: procps: FTBFS on i386: strtod_nol_or_err("123") != 123.000000

2016-07-11 Thread Craig Small
Hang on, you can help with something else. Did watch compile? I'm getting mixed errors that HOST_NAME_MAX is not defined. - Craig On Mon, Jul 11, 2016 at 9:02 PM Craig Small wrote: > No problems Emilio it happens. Already got a fix by skipping the test. > > - Craig > >

Bug#830772: procps: FTBFS on i386: strtod_nol_or_err("123") != 123.000000

2016-07-11 Thread Craig Small
No problems Emilio it happens. Already got a fix by skipping the test. - Craig On Mon, Jul 11, 2016 at 8:45 PM Emilio Pozuelo Monfort wrote: > Control: forcemerge -1 830733 > > On 11/07/16 12:29, Emilio Pozuelo Monfort wrote: > > Your package failed to build on i386: > > Sorry, I didn't notice

Bug#827198: wordpress: Update nginx example configuration for php7

2016-07-11 Thread Craig Small
Sorry Jeremy, Sure thing just let me know when you do it. - Craig On Tue, 12 Jul 2016 12:21 Jeremy Bicha wrote: > Hi, it's been a month with no response. > > How about I just push this minor patch to collab-maint git? > > Thanks, > Jeremy > -- Craig Small (@smalls

Bug#830734: procps: FTBFS[!linux]: 'HOST_NAME_MAX' undeclared

2016-07-12 Thread Craig Small
On Mon, Jul 11, 2016 at 11:13 PM Aurelien Jarno wrote: > Can you tell me which file contains this definition? > >From my reply in the bug report: csmall@freebsd1:~$ grep '[[:space:]]HOST_NAME_MAX[[:space:]]' `find /usr/include -type f` /usr/include/x86_64-linux-gnu/bits/local_lim.h:#define HOST_

Bug#830734: procps: FTBFS[!linux]: 'HOST_NAME_MAX' undeclared

2016-07-13 Thread Craig Small
On Tue, Jul 12, 2016 at 11:43 PM Aaron M. Ucko wrote: > Craig Small writes: > > > /usr/include/x86_64-linux-gnu/bits/local_lim.h:#define HOST_NAME_MAX 64 > > I just took a closer look and noticed the "-linux-" in this path. This > is not a header I would expec

Bug#831348: procps: includes /bin/kill.procps/kill on kfreebsd

2016-07-14 Thread Craig Small
rsesw5 6.0+20160625-1 > ii libprocps6 2:3.3.12-2 > ii libtinfo56.0+20160625-1 > ii lsb-base 9.20160629 > > Versions of packages procps recommends: > ii psmisc 22.21-2.1 > > procps suggests no packages. > > -- no debc

Bug#831396: procps: [ps] fails on kfreebsd

2016-07-15 Thread Craig Small
On Sat, Jul 16, 2016 at 1:21 AM Carsten Leonhardt wrote: > # ps > Error: /proc must be mounted > /proc must be mounted basically means "I tried opening a file under /proc and failed". I just compiled procps 3.3.12 on the Debian kfreebsd machine asdfasdf and worked fine. Unfortunately I am unable

Bug#831396: procps: [ps] fails on kfreebsd

2016-07-16 Thread Craig Small
On Sat, Jul 16, 2016 at 7:20 PM Carsten Leonhardt wrote: > 3857 ps NAMI "/proc/sys/vm/min_free_kbytes" > 3857 ps RET open -1 errno 2 No such file or directory > Ah ha, I think I know the problem. And it is related to the kernel version. asdfasdf has this: $ more /proc/sys/kern

Bug#1062250: Please add ucd-snmp/lmSensors MIB module to monitor lm_sensors data

2024-01-31 Thread Craig Small
> On a system reporting temperatures via "sensors", trying to enumerate the > corresponding OIDs via: > snmpwalk -v 2c -c public localhost LM-SENSORS-MIB::lmSensors > yields no result. > $ snmpwalk -v 2c -c public 127.0.0.1 LM-SENSORS-MIB::lmSensors | grep ': temp[0-9]' LM-SENSORS-MIB::lmTempSens

Bug#1059649: NTP does not keep accurate time on bookworm

2024-02-01 Thread Craig Small
On Sat, 30 Dec 2023 at 06:15, Rob Janssen wrote: > After the upgrade, the snmptrapd service no longer starts. > The error message is: couldn't open udp:162 -- errno 13 ("Permission > denied") > Could you tell me how you start snmptrapd? There are two ways: The default systemd way. The socket is c

Bug#1059649: NTP does not keep accurate time on bookworm

2024-02-01 Thread Craig Small
On Fri, 2 Feb 2024 at 08:54, Rob Janssen wrote: > I am using systemd. > Where are you seeing this error? The systemd socket is the thing that opens up the socket, so shouldn't matter what the snmptrapd process is running as. When I reboot, I get this: $ sudo ss -unlp | grep 162 UNCONN 0 0

Bug#1064968: marked as done (net-snmp: CVE-2024-26464)

2024-02-28 Thread Craig Small
> > As per https://www.cve.org/CVERecord?id=CVE-2024-26464 the CVE has > been rejected now. > > Reason: This candidate was withdrawn by its CNA. Further investigation > showed that it was not a security issue. > I did wonder myself how it could be a security issue. Wonder if it is one of those auto

Bug#1042887: procps: CVE-2023-4016 ps buffer overflow External

2023-08-10 Thread Craig Small
tags -1 fixed-upstream The probable fix is at https://gitlab.com/procps-ng/procps/-/commit/2c933ecba3bb1d3041a5a7a53a7b4078a6003413 The issue is the -C command allocates memory using malloc(length of arg * size of struct). In odd situations, you could have a very large arg, the multiplication ove

Bug#1076352: procps: leftover conffiles

2024-07-17 Thread Craig Small
On Tue, 16 Jul 2024 at 10:20, Chris Hofstaedtler wrote: > I'd suggest to add the following to your package; dpkg should then > clean up the conffile automatically. Please test it, however. > >echo 'remove-on-upgrade /etc/sysctl.conf' >> debian/procps.conffiles Oh, I've not seen that method be

Bug#1061944: wrong description for --unit in vmstat(1)

2024-07-19 Thread Craig Small
tags -1 fixed-upstream On Tue, 30 Jan 2024 at 22:30, Wenbin Lv wrote: > The description for --unit in vmstat(1) writes, "this does not change the > swap (si/so) or block (bi/bo) fields". This is inconsistent with the text in > section "FIELD DESCRIPTION FOR VM MODE", and "vmstat -S M" does chan

Bug#1072533: procps: flaky autopkgtest:

2024-07-19 Thread Craig Small
On Tue, 4 Jun 2024 at 05:57, Paul Gevers wrote: > I looked at the results of the autopkgtest of your package, because it > showed up in the glibc regressions. I noticed that it regularly fails on > amd64, ppc64el and s390x. For your info, as it seems to correlate, those > are the architectures whe

Bug#1076510: procps: "vm.max_map_count = 65530" : Value too small for gaming

2024-07-19 Thread Craig Small
reassign -1 linux-sysctl-defaults On Thu, 18 Jul 2024 at 00:33, Davius wrote: >I was playing on Steam and experiment Crashes in some games. > >Increasing vm.max_map_count to 1048576 solve this issue creating a file in > /etc/sysctl.d to change the value. >This increased value is now

Bug#729569: [watch] -g only reacts to visible output

2024-07-19 Thread Craig Small
tags -1 fixed-upstream We use the ncurses library to store the displayed characters and use that library to determine what has changed. It only holds the visible parts, so changes outside the ncurses window are not stored and cannot be compared. I've added a note to the watch manpage which all we

Bug#1076745: logcheck-database: cron rules

2024-07-22 Thread Craig Small
Package: logcheck-database Version: 1.4.3 Severity: normal Hi, I'm getting logcheck entries like: Jul 23 06:02:01 myhost CRON[566969]: pam_unix(cron:session): session opened for user logcheck(uid=124) by logcheck(uid=0) The relevant mis-matching line is in paranoid.d/cron: ^(\w{3} [ :0-9]{1

Bug#810018: New Essential package procps-base

2023-11-19 Thread Craig Small
On Wed, 15 Nov 2023 at 23:03, Guillem Jover wrote: > I'm all in for shrinking the essential-set. If there is consensus to > switch pidof implementations that also seems fine to me in the abstract. > But this shuffling around of essential-ness and new tiny packages and > stuff seems a bit unnecess

Bug#1072533: procps: flaky autopkgtest:

2024-06-04 Thread Craig Small
On Tue, 4 Jun 2024 at 05:57, Paul Gevers wrote: > I looked at the results of the autopkgtest of your package, because it > showed up in the glibc regressions. I noticed that it regularly fails on > amd64, ppc64el and s390x. For your info, as it seems to correlate, those > are the architectures whe

Bug#1036630: procps: unowned /usr/bin/ps on filesystem after upgrade to bookworm

2024-06-10 Thread Craig Small
On Tue, 11 Jun 2024 at 00:15, Chad William Seys wrote: > > Hmm, was there a cleanup or migration script which failed to run? > > On 6/8/24 09:30, Paul Slootman wrote: > > On Tue, 23 May 2023 09:06:31 -0500 C Seys wrote: > > > >> After upgrading to bookworm there is an unowned /usr/bin/ps on the

Bug#1072831: getting memory info fails when running under lxc

2024-06-10 Thread Craig Small
On Sun, 9 Jun 2024 at 01:03, Paul Slootman wrote: > # free > free: Unable to create meminfo structure That's procps_meminfo_new() failing but /proc/meminfo exists. The function: checks the parameters allocates some memory for the structure runs meminfo_make_hash_failed(), which sets up the h

Bug#1059997: razercfg: pyrazer modules installed in incorrect location

2024-03-24 Thread Craig Small
Package: razercfg Version: 0.42+ds-4 Followup-For: Bug #1059997 Hi, You have double "dist-packages" in the install path. $ python3 Python 3.11.8 (main, Feb 7 2024, 21:52:08) [GCC 13.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> from pyrazer import * Tr

Bug#1068632: dh-exec still broken

2024-05-20 Thread Craig Small
On Mon, 20 May 2024 at 02:03, Kip Warner wrote: > I would like to keep this bug report open still. > I have reopened it. > I can confirm that it does not work. dh_missing does not report any > warnings anymore, but the resulting package does not contain anything > that I specified in my .instal

Bug#1069828: [debian trixie] [package procps] w segmentation fault

2024-04-25 Thread Craig Small
Control: forwarded -1 https://gitlab.com/procps-ng/procps/-/issues/301 Control: tags -1 fixed-upstream On Thu, 25 Apr 2024 at 22:36, David wrote: > Hello, it seems there is a bug in the debian package "procps" with the > "w"utility. > it produce a segfault when using the "-s" argument. > I tried

Bug#1065810: tech-ctte: Call for votes on TC membership of Craig Small

2024-04-25 Thread Craig Small
gt; > > > On Mon 18 Mar 2024 at 10:43am +08, Sean Whitton wrote: > > > >> The vote has concluded. The result is that the Technical Committee > >> recommends that Craig Small be appointed by the Debian Project > >> Leader to the Technical Committee. > &g

Bug#1068017: Y2038-safe replacements for utmp/wtmp and lastlog

2024-05-07 Thread Craig Small
On Wed, 8 May 2024 at 09:03, Jun MO wrote: > 1) I hope there will still be the original > w(1)/last(1)/lastb(1)/lastlog(1)/faillog(1) > tools which can still read *old* format utmp/wtmp/lastlog in Debian at > least for > a while after switch to Y2038-safe replacements. Those tools can read > I c

Bug#1068632: dh-exec-install - dh_missing fails when using arch or indep

2024-04-08 Thread Craig Small
Package: dh-exec Version: 0.29 Severity: normal In a multi-binary package, if there is a dh-exec-install .install or .manpages file for one of the packages, then these files are not carried across and logged for dh_install so dh_missing fails if you use the other type of build. For example, on t

Bug#1069091: wordpress: Stored XSS in Avatar block

2024-04-16 Thread Craig Small
Package: wordpress Version: 6.5+dfsg1-1 Severity: important Tags: security X-Debbugs-Cc: Debian Security Team In WordPress < 6.5.2 there is a stored XSS in the Avatar block. You have to have certain things enabled for it to work so it won't impact everyone. References: https://wpscan.com/blog/

Bug#1072831: getting memory info fails when running under lxc

2024-06-23 Thread Craig Small
Control: tags -1 fixed-upstream On Tue, 11 Jun 2024 at 21:16, Paul Slootman wrote: > I see I missed the case lseek() fails with another errno. > Updated patch attached. Thanks Paul, This was applied upstream at https://gitlab.com/procps-ng/procps/-/commit/104b3ce3df67092eeb868ba5e019cb895ebdf32

Bug#1074156: procps: Depend or Recommend linux-sysctl-defaults

2024-06-23 Thread Craig Small
On Mon, 24 Jun 2024 at 05:57, Ben Hutchings wrote: > Please consider dropping /usr/lib/sysctl.d/99-protect-links.conf and > adding linux-sysctl-defaults to Depends or Recommends instead, once > that package is available in testing. Hi Ben, This sounds like a great idea, config stuff for systemd-

Bug#1072831: getting memory info fails when running under lxc

2024-06-23 Thread Craig Small
On Sun, 9 Jun 2024 at 01:03, Paul Slootman wrote: > I am running a number of virtual systems under lxc via libvirt. > This means these systems share the host kernel (not like qemu where a > whole virtual machine is emulated). Hi Paul, I did the following (as root) lxc-create --name debtest2 --t

Bug#1022573: transition: procps

2022-10-24 Thread Craig Small
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition The procps library is now finally changing. Over 20 years ago there was a library to assist with the procps binaries but the API wasn't very good nor not really intentioned for use outsid

Bug#1022575: wordpress: Wordpress 6.0.3 security release 16 issues

2022-10-24 Thread Craig Small
Package: wordpress Version: 6.0.2+dfsg1-1 Severity: important Tags: security X-Debbugs-Cc: Debian Security Team WordPress 6.0.3 is out and fixes many, many, many security issues: * Stored XSS via wp-mail.php (post by email) * Open redirect in `wp_nonce_ays` * Sender’s email address is exposed in

Bug#991720: psmisc: When I run killall -9 name-process , the contain "-" can not find the process and do not kill it

2022-11-02 Thread Craig Small
On Sat, 31 Jul 2021 at 05:45, Mauricio Tagliaferro wrote: (no body text) I suspect its not the hyphen but the length of the command. $ ln -s /bin/sleep ./name-process $ ./name-process 100 & [2] 49256 $ killall -9 name-process [2]- Killed ./name-process 100 This was killall 23.

Bug#1025495: procps: FTBFS on s390x: test failure

2022-12-06 Thread Craig Small
On Tue, 6 Dec 2022 at 06:51, Sebastian Ramacher wrote: > FAIL: check_fatal_proc_unmounted > FAIL library/tests/test_pids (exit status: 1) > Not sure why the s390 (correctly) failed this test. The issue is that the second value, which is the process VSS returns 0 so it fails. The failed check is

Bug#1025506: procps: trying to overwrite 'free.1.gz', which is also in package manpages-zh

2022-12-06 Thread Craig Small
On Tue, 6 Dec 2022 at 11:03, Witold Baryluk wrote: > trying to overwrite '/usr/share/man/zh_CN/man1/free.1.gz', which is also > in package manpages-zh 1.6.3.6-1 > dpkg: error while cleaning up: > new procps package post-removal script subprocess returned error exit > status 1 > > After uninstal

Bug#1025790: procps: 'ps -o comm= ' output dropped '' for zombies

2022-12-08 Thread Craig Small
On Fri, 9 Dec 2022 at 17:51, Petter Reinholdtsen wrote: > Since 2022-12-05 the Debian sid builds of linuxcnc have failed. After > some days scratching our heads, we discovered that the problem > originated from 'ps' changout its output format. Running 'ps -o comm= > ' used to include '' if the

Bug#1025915: skill: -p $pid seems broken

2022-12-11 Thread Craig Small
Hi Chris, Thanks for your bug report. skill is one of those programs that isn't used or loved much, but still hangs around. That being said, it shouldn't have bugs like this! When the program was converted to use the new API, the bit of code that actually checks there is a match against the pidli

Bug#1026326: procps breaks pslist autopkgtest

2022-12-18 Thread Craig Small
On Mon, 19 Dec 2022 at 03:54, Paul Gevers wrote: > With a recent upload of procps the autopkgtest of pslist fails in > testing when that autopkgtest is run with the binary packages of procps > from unstable. It passes when run with only packages from testing. In > tabular form: > The good news is

Bug#1027270: guymager doesn't require libprocps

2023-01-02 Thread Craig Small
On Sat, 31 Dec 2022 at 22:21, Michael Prokop wrote: > I just uploaded guymager v0.8.13-2 which takes care of this. Great, that's another one down. Thanks for the quick response. - Craig

Bug#1024020: net-snmp: CVE-2022-44792 CVE-2022-44793

2023-01-02 Thread Craig Small
On Fri, 30 Dec 2022 at 18:33, Salvatore Bonaccorso wrote: > Upstream has addressed both issues with > https://github.com/net-snmp/net-snmp/commit/be804106fd0771a7d05236cff36e199af077af57 I've made a debian patch and uploaded 5.9.3+dfsg-2 that has this fix. - Craig

Bug#1027771: its nocompatible

2023-01-02 Thread Craig Small
For some reason the issue is not vim-ale its something broken in the generic vim infrastructure. debian.vim sets nocompatible which is supposed to stop the issue but it doesn't running vim -N or putting "set nocompatible" in ~/.vimrc fixes it

Bug#1025915: skill: -p $pid seems broken

2023-01-05 Thread Craig Small
On Thu, 5 Jan 2023 at 18:26, Chris Hofstaedtler wrote: > Right. For the avoidance of doubt, if you think removing it is a > better option, from my PoV, please do so. It would be nice, but we're sort-of locked in for the "user API". I would rationalise the ps command line parsing first. If you're

Bug#1027963: vmstat: does not update memory columns

2023-01-05 Thread Craig Small
On Thu, 5 Jan 2023, 19:30 Ingo Saitz, wrote: > running vmstat to produce a continuous output (eg. "vmstat 3") does not > update the values in the memory columns any more. The "main loop" just > does not fetch those values. > Hi Ingo, Thanks very much for the report and the patch. It has been appl

Bug#1023429: pgrep/pkill: remove trailing 0x00 from matching?

2022-11-14 Thread Craig Small
On Fri, 4 Nov 2022 at 12:09, Christoph Anton Mitterer wrote: > pgrep --full --exact --euid "${LOGNAME}" --list-full -- "^ssh: > ${HOME}/\.ssh/mux/.+ \[mux]$" > $ ./blah [4565] & [1] 769 $ pgrep --full --exact --list-full '^/bin/sh ./blah \[4565]$' 769 /bin/sh ./blah [4565] $ cat blah #!/b

Bug#1023429: pgrep/pkill: remove trailing 0x00 from matching?

2022-11-14 Thread Craig Small
On Tue, 15 Nov 2022 at 00:36, Christoph Anton Mitterer < cales...@scientia.org> wrote: > $ hd /proc/19557/cmdline > 73 73 68 3a 20 2f 68 6f 6d 65 2f 63 61 6c 65 73 |ssh: > /home/cales| > 0010 74 79 6f 2f 2e 73 73 68 2f 6d 75 78 2f 72 6f 6f > |tyo/.ssh/mux/roo| > 0020 74 40 6

Bug#1024218: apitrace: FTBFS with libproc2

2022-11-15 Thread Craig Small
Package: apitrace Severity: important Tags: ftbfs upstream Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the library calls

Bug#1024219: cpu-x: FTBFS with libproc2

2022-11-15 Thread Craig Small
Source: cpu-x Version: 4.5.1-1 Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the

Bug#1024220: deepin-screen-recorder: FTBFS with libproc2

2022-11-15 Thread Craig Small
Package: deepin-screen-recorder Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the

Bug#1024221: intel-gpu-tools: FTBFS with libproc2

2022-11-15 Thread Craig Small
Package: intel-gpu-tools Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the librar

Bug#1024223: obs-advanced-scene-switcher: FTBFS with libproc2

2022-11-15 Thread Craig Small
Source: obs-advanced-scene-switcher Version: 1.19.1-1 Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has

Bug#1024224: openscap-utils: FTBFS with libproc2

2022-11-15 Thread Craig Small
Package: openscap-utils Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the library

Bug#1024225: veyon-plugins: FTBFS with libproc2

2022-11-15 Thread Craig Small
Package: veyon-plugins Severity: important Tags: upstream ftbfs Hi, The procps project is changing the libprocps library. The old API found in libprocps8 is very diferrent to what is found in libproc2. As a result, your package will FTBFS as the library name has changed as well as the library

Bug#1024218: Acknowledgement (apitrace: FTBFS with libproc2)

2022-11-15 Thread Craig Small
tags 1024218 Hi, Attached is a patch for API trace. I couldn't actually get apitrace to build on my system (even without the patch) so it's hard to test it. - Craig Description: Build for libproc2 Replace libprocps with libproc2 Author: Craig Small Reviewed-by: Craig Small L

Bug#1024219: Acknowledgement (cpu-x: FTBFS with libproc2)

2022-11-15 Thread Craig Small
For CPU-X upstream already have this working with libproc2, see. https://github.com/X0rg/CPU-X/commit/2765e68dc4650b7306255e0c10056508d5ab44f8 This is in version 4.5.2 - Craig

Bug#1024249: wordpress: update to 5.7.8+dfsg1-0+deb11u1 have missing dependencies in bullseye-security

2022-11-16 Thread Craig Small
On Wed, 16 Nov 2022 at 21:45, Uwe Bueschel wrote: > The following packages have unmet dependencies: > wordpress : Depends: libjs-underscore (>= 1.13.4~dfsg+~1.11.4) but > 1.9.1~dfsg-3 is to be installed > Depends: php-getid3 (>= 1.9.22+dfsg) but 1.9.20+dfsg-1 is to > be installed >

Bug#1024225: Acknowledgement (veyon-plugins: FTBFS with libproc2)

2022-11-16 Thread Craig Small
tags 1024225 patch thankyou Attached is a patch for veyon to work with libproc2. I cannot test it because I can't actually get veyon to build as the upstream is in a different branch and remote. It looks ok but might need some additional work. - Craig diff --git a/plugins/platform/linux/CMakeLis

Bug#1034203: snmp: specifying -Op /at all/ segfaults all snmpcmd(1) commands

2023-04-11 Thread Craig Small
On Tue, 11 Apr 2023 at 11:48, наб wrote: > This happens in all these configurations: > $ snmptranslate -Op .1 > Segmentation fault > $ snmptranslate -Op > Segmentation fault > $ snmpget -Op > Segmentation fault > Hi наб, Thanks for the report. I have passed this to upstream at http

Bug#1029069: libc6: wcswidth doesn't report correct width for :

2023-01-17 Thread Craig Small
Package: libc6 Version: 2.36-6 Severity: minor I've been trying to work out why the Chinese translation for free doesn't want to line up the columns like everyone else, report is at [1] For some reason, it thinks the strange colon used in the translation is one character wide, but its actually tw

Bug#1052034: procps: FTBFS on amd64, i386: # of unexpected failures 1

2023-09-17 Thread Craig Small
Looks like another "guess what strange thing the buildd is doing this time" problem. The failing test is (effectively) pmap -XX $pid $pid | grep KB And make sure the first numbers of each row are the same. Because it is the same process, it should be the same. There is the same test for pmap -X an

Bug#831786: dh-exec: breaks dh_install --fail-missing

2023-09-22 Thread Craig Small
On Sat, 23 Sept 2023 at 08:09, Michael Biebl wrote: > Is there some work being done to support this in dh-exec? > Is there a way I can work around this issue for now? > The short answer is, that no work has been done on that issue. The main use-case I have seen for dh-exec was for the multiarch d

Bug#1032139: snmp: snmpbulkwalk.1 mentions snmpbulkget instead of snmpbulkwalk

2023-02-28 Thread Craig Small
forwarded 1032139 https://github.com/net-snmp/net-snmp/issues/537 thankyou On Wed, 1 Mar 2023 at 01:36, наб wrote: > > I couldn't for the life of me find where I'd post this, so I trust you > understand upstream's link jungle and can forward this in my stead. > Forwarded to https://github.com/ne

Bug#1030747: Acknowledgement (fuser(1) tries to use statx() which is not available on older kernels and prints misleading error when it can't)

2023-09-01 Thread Craig Small
On Tue, 21 Feb 2023 at 10:51, Andras Korn wrote: > The changelog for 23.6 says "fuser: Use modern statn where possible", but > it's regrettably also used where not possible. > The next release of psmisc will have that fallback, see https://gitlab.com/psmisc/psmisc/-/commit/c22d1e4edbfec6e24346cd8

Bug#1049457: fuser(1) not working on libraries, possibly because of disagreement over minor device

2023-09-01 Thread Craig Small
t way. - Craig On Tue, 22 Aug 2023 at 12:07, Paul Kimoto wrote: > On Wed, Aug 16, 2023 at 11:03:14PM -0400, Paul Kimoto wrote: > > On Wed, Aug 16, 2023 at 05:25:26PM +1000, Craig Small wrote: > >> What does > >> grep -e ' 0:2[57] ' /proc/self/mountinfo

<    1   2   3   4   5   6   7   8   9   10   >