Bug#683934: ITP: publicsuffix -- An accurate, machine-parseable list of domain name suffixes

2012-08-05 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: publicsuffix Version : 20120704 Upstream Author : Public Suffix Maintainers * URL : http://publicsuffix.org/ * License : MPL-2 Programming Lang: data Description : An accurate

Bug#683941: debhelper: dh_lintian(1) mentions debian/source.lintian-overrides, but lintian(1) prefers debian/source/lintian-overrides

2012-08-05 Thread Daniel Kahn Gillmor
Package: debhelper Version: 9.20120608 Severity: normal dh_lintian(1) says: debian/source.lintian-overrides These files are not installed, but will be scanned by lintian to provide overrides for the source package. but lintian(1) (version 2.5.10) says: [...]

Bug#683948: ITP: libdomain-publicsuffix-perl -- Parse a domain to determine the public suffix

2012-08-05 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: libdomain-publicsuffix-perl Version : 0.05 Upstream Author : Nicholas Melnick * URL : http://search.cpan.org/dist/Domain-PublicSuffix/ * License : Artistic | GPL-1+ Programming Lang

Bug#681493: any followup on pet.debian.net pseudopackage?

2012-08-06 Thread Daniel Kahn Gillmor
hi there-- what's the status with getting pet.debian.net as an official pseudopackage on the BTS? there are already 3 bugs assigned to it according to http://bugs.debian.org/pet.debian.net but it doesn't seem to have been set up officially (there is no maintainer). is there anything else i can d

Bug#677173: keyboard switched to slowkeys mode today for me as well

2012-08-06 Thread Daniel Kahn Gillmor
My X11 session switched to slowkeys mode today without my having held the shift key down for 10 consecutive seconds, as far as i know. I don't think there's anything in the log here that is indicates anything, but i thought i'd send it along for further edification. starting at 22745.777, you can

Bug#679640: replicable problem

2012-08-10 Thread Daniel Kahn Gillmor
Control: found 679640 2:1.4-1 Control: found 679640 2:1.4.1-2 I can confirm that certain multipart/signed PGP/MIME message parts are not being validated correctly with enigmail versons 1.4-1 or 1.4.1-2, when using icedove 10.0.5-1 or 10.0.6-1 or 11.0-1. In particular, the problematic messages app

Bug#679640: bug 679640 is forwarded to http://thread.gmane.org/gmane.comp.mozilla.enigmail.general/17161/focus=17234

2012-08-11 Thread Daniel Kahn Gillmor
Control: forwarded 679640 http://thread.gmane.org/gmane.comp.mozilla.enigmail.general/17161/focus=17234 Upstream appears to believe the solution is to upgrade to enigmail 1.4.3, according to the above link. --dkg -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org wit

Bug#679640: bug 679640 is forwarded to http://thread.gmane.org/gmane.comp.mozilla.enigmail.general/17161/focus=17234

2012-08-11 Thread Daniel Kahn Gillmor
On 08/11/2012 04:48 PM, Willi Mann wrote: > As long as no newer icedove version occurs in experimental (or > unstable), I cannot upload newer enigmail versions. However, in case > there's any brave man here, or brave woman! > I've built enigmail 1.4.3 against icedove > 11. Note however, that this

Bug#686881: scsitools fails to install under debootstrap --variant=fakechroot

2012-09-06 Thread Daniel Kahn Gillmor
Package: scsitools Version: 0.12-2.1 Severity: normal I'm doing a debootstrap fakechroot install as a normal user like this: fakeroot fakechroot debootstrap --include=scsitools --variant=fakechroot testing testroot this results in the following output, followed by debootstrap returning a non-z

Bug#686923: debirf: document root=/dev/ram0

2012-09-07 Thread Daniel Kahn Gillmor
Control: tags 686923 + moreinfo On 09/07/2012 03:52 AM, Matt Taggart wrote: > I was having problems booting a debirf image that had a 98MB initramfs > image, it would load the kernel and the initramfs image and then complain > "Boot failed: press a key to retry, or wait for reset". > After some

Bug#686965: insserv: fails to set up rc*.d/ symlinks when invoked under debootstrap --variant=fakechroot

2012-09-07 Thread Daniel Kahn Gillmor
Package: insserv Version: 1.14.0-4 Severity: normal under debootstrap's --variant=fakechroot, insserv appears to fail to set up the symlinks in /etc/rc*.d/ properly. below see two runs, the first as superuser, the second as a non-privileged user. 0 root@stylus:~# debootstrap testing test [...] I

Bug#685715: debirf: separate mirrors for build and runtime

2012-09-07 Thread Daniel Kahn Gillmor
On 08/23/2012 04:56 PM, Matt Taggart wrote: > I was thinking it would be nice if you could specify different mirrors > for build time vs runtime. For example you might want > > * to build using a local approx cache, but have the result use > public mirrors > * to build using a public mirror, b

Bug#686881: scsitools fails to install under debootstrap --variant=fakechroot

2012-09-07 Thread Daniel Kahn Gillmor
Control: tags 686881 + patch On 09/06/2012 06:47 PM, Daniel Kahn Gillmor wrote: > there seems to be at least two problems with the postinst script: a > brittle attempt to mkdir /dev/scsi, and some attempts to update-rc.d, > which i found after working around the mkdir error by l

Bug#680235: debirf: wheezy minimal image segfaults during boot

2012-09-08 Thread Daniel Kahn Gillmor
Control: tags 680235 + unreproducible moreinfo Hi Lucas-- On 07/04/2012 10:40 AM, Lucas Nussbaum wrote: > I generate a wheezy 'minimal' image using debirf (running it as root, > since running it as normal user fails). > > After generation, I try to boot it using: > kvm -m 512 -kernel vmlinuz-3.2

Bug#687399: sysvinit.postinst fails under debootstrap --variant=fakechroot when /dev/initctl exists

2012-09-12 Thread Daniel Kahn Gillmor
Package: sysvinit Version: 2.88dsf-31 Severity: normal Control: found 2.88dsf-32 If i have a GNU/Linux system with /dev/initctl present, and i debootstrap with --variant=fakechroot as a non-privileged user, the debootstrap fails with : Setting up sysvinit (2.88dsf-32) ... sysvinit: creating /run

Bug#687410: sysvinit: non-privileged user can cause sysvinit.postinst to fail

2012-09-12 Thread Daniel Kahn Gillmor
Package: sysvinit Version: 2.88dsf-31 Severity: normal sysvinit.postinst has the following code: PID="$(pidof /sbin/init || true)" [...] kill -s USR1 "$PID" But a normal user can cause "pidof /sbin/init" to produce more than one output, e.g. with "chpst -b /sbin/init ca

Bug#687407: xdotool: FTBFS: cannot load such file -- xdo_test_helper

2012-09-12 Thread Daniel Kahn Gillmor
On 09/12/2012 09:20 AM, Lucas Nussbaum wrote: > Source: xdotool > Version: 1:2.20100701.2961-3 > Severity: serious > Tags: wheezy sid > User: debian...@lists.debian.org > Usertags: qa-ftbfs-20120912 qa-ftbfs > Justification: FTBFS in wheezy on amd64 > > Hi, > > During a rebuild of all packages in

Bug#687399: sysvinit.postinst fails under debootstrap --variant=fakechroot when /dev/initctl exists

2012-09-12 Thread Daniel Kahn Gillmor
On 09/12/2012 05:30 PM, Roger Leigh wrote: > We should probably wrap all of the restart logic (except the inittab > stuff) in ischroot checks. Messing with the host's /dev is not > worth risking. There was a reason why we did it this way though; it > wasn't unintentional. I'll have to remember t

Bug#687915: linux-image-3.2.0-3-686-pae: general protection fault when plugging in power on Asus EeePC 900

2012-09-16 Thread Daniel Kahn Gillmor
Package: src:linux Version: 3.2.23-1 Severity: normal I had the wireless card enabled for a couple minutes before noticing that the battery on this Asus EeePC 900 was rather low. I plugged it into wall power, and immediately as the battery started charging the following error message showed up on

Bug#688042: publicsuffix: rename effective_tlds.dat to publicsuffix.dat

2012-09-18 Thread Daniel Kahn Gillmor
s few reverse dependencies, the time to make this change is sooner rather than later. --dkg --- Begin Message --- Hi Daniel, Sorry for the delay in getting back to you. On 05/08/12 17:07, Daniel Kahn Gillmor wrote: I'm looking into packaging the public suffix list for inclusion w

Bug#704648: notmuch-emacs: M-x notmuch-show-reply on an encrypted message should insert encryption tags into the mml buffer

2013-04-03 Thread Daniel Kahn Gillmor
Package: notmuch-emacs Version: 0.15.2-1 Severity: normal When i'm viewing an encrypted message in notmuch-emacs, and i hit R (or M-x notmuch-show-reply), it drops me into an mml compose buffer with the decrypted message body properly quoted and attributed. If I go ahead and send that reply, the

Bug#689150: xul-ext-firebug: firebug 1.9.2~b2-1 causes breakage with iceweasel 20

2013-04-03 Thread Daniel Kahn Gillmor
Package: xul-ext-firebug Version: 1.9.2~b2-1 Followup-For: Bug #689150 Control: retitle 689150 Upgrade xul-ext-firebug to version 1.11.1 iceweasel 20 (currently in experimental) breaks pretty badly when firebug 1.9.2~b1-1 is installed and enabled. Some misbehaviors i've noticed, when using a clea

Bug#704698: python-openid: openid.sqlstore crashes when response_nonce has > 40 chars after the timestamp

2013-04-04 Thread Daniel Kahn Gillmor
on: ii python 2.7.3-4 ii python-support 1.0.15 python-openid recommends no packages. python-openid suggests no packages. -- debconf-show failed commit 559f9cbb3b7718c2dde63db5bc7672a7b5dfc1ee Author: Daniel Kahn Gillmor Date: Thu Apr 4 14:24:17 2013 -0400 Do not crash when

Bug#704706: RFP: python-browserid -- a python library for the BrowserID Protocol (Mozilla Persona)

2013-04-04 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist * Package name: python-browserid Version : 0.10.0 Upstream Author : Mozilla Identity Team * URL : https://github.com/PyBrowserID * License : MPL 2.0 Programming Lang: Python Description : a python library for the Browser

Bug#704707: trac-authopenid crashes when an OpenID provider does not provide a full name

2013-04-04 Thread Daniel Kahn Gillmor
Package: trac-authopenid Version: 0.4.1-1 Severity: normal Tags: patch upstream Control: forwarded -1 https://github.com/dairiki/authopenid-plugin/pull/7 Without the attached patch, when an OpenID provider declines to provide a full name, trac crashes by accessing the authname variable before it w

Bug#704707: trac-authopenid crashes when an OpenID provider does not provide a full name

2013-04-04 Thread Daniel Kahn Gillmor
Hi Jeremy-- On 04/04/2013 04:48 PM, Daniel Kahn Gillmor wrote: > Without the attached patch, when an OpenID provider declines to provide a full > name, trac crashes by accessing the authname variable before it was > initialized. I've just pushed this fix into the collab-maint

Bug#704714: Right-click context menu contains all possible menu items

2013-04-04 Thread Daniel Kahn Gillmor
On 04/04/2013 06:17 PM, Mike Hommey wrote: > On Thu, Apr 04, 2013 at 03:05:36PM -0700, Josh Triplett wrote: >> Since upgrading to version 20, the right-click context menu now contains >> every possible menu item that can possibly appear in any context, rather >> than just the items relevant for the

Bug#704765: xul-ext-monkeysphere fails to work with iceweasel 20

2013-04-05 Thread Daniel Kahn Gillmor
Package: xul-ext-monkeysphere Version: 0.6.1-1 Severity: normal Tags: upstream xul-ext-monkeysphere no longer behaves properly with iceweasel 20, as found in experimental :( I don't see any trigger when an X.509 certificate warning happens. This is potentially pretty serious for those users who

Bug#704607: Removing Trac from wheezy?

2013-04-05 Thread Daniel Kahn Gillmor
On Fri 2013-04-05 16:13:12 -0400, Daniel Kahn Gillmor wrote: > On Thu 2013-04-04 11:23:42 -0400, W. Martin Borgert wrote: >> If you have an idea about solving #704607 without introducing a >> new (better said: old) jQuery package, this would be great. Maybe >> we need to bac

Bug#682353: Crashes my X11 (KDE) session on upgrade

2013-04-05 Thread Daniel Kahn Gillmor
On Wed 2013-03-27 15:46:59 -0400, Daniel Kahn Gillmor wrote: > On Fri 2013-03-15 01:08:00 -0400, Daniel Kahn Gillmor wrote: > >> Ugh, this is a bad result, but i don't think the bug is in 0.8.1 -- the >> crashing bug is in the earlier version (0.8-2), and one of the ch

Bug#704913: git-bzr fails to properly clone bzr::http://bzr.savannah.gnu.org/r/grub/trunk/grub

2013-04-07 Thread Daniel Kahn Gillmor
Package: git-bzr Version: 1:1.8.2-1 Severity: important I tried to look at grub's bzr repository with git-bzr (version 1:1.8.2-1) as well as with bzr (version 2.6.0~bzr6526-1). i did two checkouts: git clone bzr::http://bzr.savannah.gnu.org/r/grub/trunk/grub grub.git bzr branch http://bzr.savann

Bug#682353: Package stuck in migration

2013-04-11 Thread Daniel Kahn Gillmor
On 04/10/2013 10:00 AM, Demetris Demetriou wrote: > Since this is a fix for a RC bug can you, as the maintainer, submit an > unblock request? The release team already unblocked 0.8.1-1, which resolves the problem going forward, but #682353 was re-opened against it. As you can see from http://bug

Bug#705288: unblock: msva-perl/0.8.1-2

2013-04-12 Thread Daniel Kahn Gillmor
ion agent. (Addresses: #682353) + + -- Daniel Kahn Gillmor Sat, 06 Apr 2013 00:01:07 -0400 + msva-perl (0.8.1-1) testing-proposed-updates; urgency=low * incorporated minimized upstream changesets to deal with wheezy. diff -Nru msva-perl-0.8.1/debian/NEWS msva-perl-0.8.1/debian/NEWS --- msva-perl-0.8.

Bug#700639: icedove: Assertion failure: pRec->state != _PR_PID_REAPED, at uxproces.c:521 (SIGABRT)

2013-04-13 Thread Daniel Kahn Gillmor
On 04/13/2013 01:01 PM, Guido Günther wrote: > This is about spawning external processes. Could that be gpg from > enigmail? Could you try if this also happens with all extensions > disabled? yes, it almost certainly is due to gpg being spawned from enigmail. however, it doesn't happen in any so

Bug#626885: system hangs on shutdown if systemd is pid 1

2012-11-27 Thread Daniel Kahn Gillmor
Hi Michael-- On 11/16/2012 09:17 PM, Michael Biebl wrote: > I was looking through some old bugs, and was wondering if you still > encounter this issue on a recent sid/wheezy system with systemd 44-5? > > I think we worked out all possible issues regarding sysvinit and systemd > and its handling o

Bug#694827: fakechroot fails to search chroot for multiarch paths

2012-11-30 Thread Daniel Kahn Gillmor
Package: fakechroot Version: 2.16-1 Severity: important Control: -1 affects debirf debootstrap On an up-to-date wheezy system, fakechroot fails to search the proper multiarch paths within the chroot. This can be seen as a non-privileged user with the following commands: mkdir root fakeroot fakec

Bug#694864: [Pkg-fonts-devel] Bug#694864: ttf-liberation not available for ARCH i386 in multiarch amd64 environment

2012-12-01 Thread Daniel Kahn Gillmor
Hi Detlev-- On 12/01/2012 08:58 AM, Detlev Brodowski wrote: > Package: ttf-liberation > Version: 1.07.2-6 > Severity: normal > > Hello maintainer, > > Please make the package multiarch ready. I think you need only to add the tag > "Multi-Arch: foreign" to the control file. > > Background: > In

Bug#694864: [Pkg-fonts-devel] Bug#694864: Bug#694864: ttf-liberation not available for ARCH i386 in multiarch amd64 environment

2012-12-01 Thread Daniel Kahn Gillmor
hmm, ok, so vorlon pointed me to: https://wiki.ubuntu.com/MultiarchSpec#Dependencies_involving_Architecture:_all_packages as an explaination of why Architecture: all packages need to be explicitly marked as Multi-Arch: foreign. In particular, it's to avoid causing a problem where dependencies ar

Bug#694864: [Pkg-fonts-devel] Bug#694864: Bug#694864: Bug#694864: Bug#694864: Bug#694864: ttf-liberation not available for ARCH i386 in multiarch amd64 environment

2012-12-02 Thread Daniel Kahn Gillmor
On 12/02/2012 06:14 AM, Christian PERRIER wrote: > Quoting Vasudev Kamath (kamathvasu...@gmail.com): > >> Preparing all packages with Multi-Arch: foreign will be difficult at >> this point I guess, considering amount of packages maintained by >> pkg-fonts. [1] >> >> Are we planning this for Wheezy

Bug#695157: sed: --in-place (or -i) changes permissions on a file with ACLs applied

2012-12-04 Thread Daniel Kahn Gillmor
Package: sed Version: 4.2.1-10 Severity: normal It appears that sed -i tampers with the permissions on a file that has ACLs in place. Below is an example of it granting group read access to a given file (and revoking read access to another user): 0 dkg@pip:/srv/dkg$ getfacl test # file: test # o

Bug#695245: grub-efi-amd64 does not detect control key presses

2012-12-05 Thread Daniel Kahn Gillmor
Package: grub-efi-amd64 Version: 2.00-7 Severity: normal Using grub-efi-amd64 on this thinkpad x200, i cannot get it to recognize the control key. This makes editing more difficult than it needs to be, and it means that the instructions like "ctrl-x to boot" are impossible to carry out. --dk

Bug#695246: grub-efi-amd64 has no linux16, fails to boot memtest86+ (multiboot also fails)

2012-12-05 Thread Daniel Kahn Gillmor
Package: grub-efi-amd64 Version: 2.00-7 Severity: normal I've installed grub-efi-amd64 2.00-7 and memtest86+ 4.20-1.1 on this Thinkpad x220. However, the memtest86+ boot options don't work: * the normal memtest86+ stanza complains that there is no linux16 command. * the "experimental multi

Bug#685716: debirf: have network-dhcp use a variable to control device

2012-12-06 Thread Daniel Kahn Gillmor
On 09/06/2012 04:04 PM, Matt Taggart wrote: > It would be nice if you could set a kernel command line variable to control > the device too. That way you could use the same debirf image and just set > the device at boot time, rather than needing to build separate images. It > could function simil

Bug#695246: grub-efi-amd64 has no linux16, fails to boot memtest86+ (multiboot also fails)

2012-12-11 Thread Daniel Kahn Gillmor
Control: reassign 695246 memtest86+ On 12/05/2012 10:23 PM, Daniel Kahn Gillmor wrote: > I've installed grub-efi-amd64 2.00-7 and memtest86+ 4.20-1.1 on this > Thinkpad x220. However, the memtest86+ boot options don't work: > > * the normal memtest86+ stanza complains th

Bug#695738: docker version 1.5 is available upstream

2012-12-11 Thread Daniel Kahn Gillmor
Package: docker Version: 1.4-5 Severity: wishlist https://icculus.org/openbox/2/docker/ suggests that https://icculus.org/openbox/2/docker/docker-1.5.tar.gz is now available. it would be nice to have this in experimental, until wheezy is released. at that point we can move it to unstable. th

Bug#705636: grub-pc-bin: "/usr/sbin/grub-bios-setup: Not found" when using grub-install --target=i386-pc

2013-04-17 Thread Daniel Kahn Gillmor
Package: grub-pc-bin Version: 2.00-13 Severity: normal I'm running grub-efi-amd64 on this host ("alice"); but i want to be able to install and work with the grub-pc bootloader as well, since i use alice to prepare boot media for other machines. So i have grub-pc-bin installed, alongside I think

Bug#705725: sks maintainer scripts should avoid excessive chowns

2013-04-18 Thread Daniel Kahn Gillmor
Package: sks Version: 1.1.3-2+b1 Severity: normal The sks maintainer scripts have a number of chown operations, including some which are recursive chowns. When run under a kernel that does not implement linking restrictions at the filesystem level, this opens a path for privilege escalation from

Bug#700639: icedove: Assertion failure: pRec->state != _PR_PID_REAPED, at uxproces.c:521 (SIGABRT)

2013-04-22 Thread Daniel Kahn Gillmor
On Sat 2013-04-13 13:01:46 -0400, Guido Günther wrote: > gdb's "thread apply all bt full" might give further hints. The nspr > code itself didn't change since ages so we ought to find out what > triggers it. Sorry about being that vague. well, the segv just happened again with the following backt

Bug#700639: icedove: Assertion failure: pRec->state != _PR_PID_REAPED, at uxproces.c:521 (SIGABRT)

2013-04-22 Thread Daniel Kahn Gillmor
On 04/22/2013 02:11 PM, Guido Günther wrote: > Could you check if enigmal (or any other not icedove related extension) > shows up? I thought maybe i should look for shared objects, since that's part of the current enigmail implementation, but these are the only references to '\.so' files in the ba

Bug#706008: iceweasel / nss bug or problem

2013-04-23 Thread Daniel Kahn Gillmor
On 04/23/2013 09:45 AM, franz schaefer wrote: > export NSS_ALLOW_WEAK_SIGNATURE_ALG=1 > > it would be good to have an option to allow this on a site by site basis in > the browser. > > the nss website says the above environment setting does: > >> Enables the use of MD2 and MD4 inside signatur

Bug#706081: nettle: new upstream version 2.7

2013-04-24 Thread Daniel Kahn Gillmor
Package: nettle Version: 2.6-1 Severity: wishlist nettle 2.7 was released today. if that could get that into experimental, i'd be very happy. thanks for maintaining nettle for debian! --dkg -- System Information: Debian Release: 7.0 APT prefers testing APT policy: (500, 'testing'),

Bug#706226: iceweasel: image titles not displayed when hovering (breaks XKCD!)

2013-04-26 Thread Daniel Kahn Gillmor
Hi Eric-- On 04/27/2013 01:10 AM, Eric Cooper wrote: > Hovering over an embedded image no longer produces a popup box with > the text of the image title. For example, the following HTML > > > > > > should cause "This is the image title." to appear in a popup box

Bug#706226: iceweasel: image titles not displayed when hovering (breaks XKCD!)

2013-04-27 Thread Daniel Kahn Gillmor
On 04/27/2013 10:39 PM, Eric Cooper wrote: > On Sat, Apr 27, 2013 at 02:35:00PM +0800, Daniel Kahn Gillmor wrote: >> Could you try it with a new browser profile in safe mode and report back >> whether you still have this problem? >> >> iceweasel -no-remote -new-instance

Bug#706722: libapache2-mod-fcgid: 2.3.7 available from upstream

2013-05-03 Thread Daniel Kahn Gillmor
Package: libapache2-mod-fcgid Version: 2.3.6 Severity: wishlist version 2.3.7 of libapache2-mod-fcgid is available from upstream. It would be great to have this in debian. Regards, --dkg -- System Information: Debian Release: 7.0 Architecture: amd64 (x86_64) Kernel: Linux 3.8-trunk-amd6

Bug#706724: iceweasel: Vertical bars are too thick

2013-05-03 Thread Daniel Kahn Gillmor
On 05/03/2013 02:33 PM, Christophe TROESTLER wrote: > Package: iceweasel > Version: 20.0-1 > Severity: minor > On the page http://dlmf.nist.gov/10.14 the vertical bars denoting the > absolute values are too thick. They render well in other browsers > like Chromium. attached is my view (with icew

Bug#706742: libgnupg-perl: $gnupg->verify() fails if signature has OpenPGP notation subpacket

2013-05-04 Thread Daniel Kahn Gillmor
can verify them with: gpg --status-fd 1 --verify test.txt.asc test.txt which produces status-fd output like the following: [GNUPG:] SIG_ID ader2rZR418urkx2zsi3l7YwtvM 2013-05-04 1367652205 [GNUPG:] GOODSIG A52401B11BFDFA5C Daniel Kahn Gillmor [GNUPG:] NOTATION_NAME t...@example.net [GN

Bug#706745: libgnupg-perl: verify() chokes when using "trust-model always"

2013-05-04 Thread Daniel Kahn Gillmor
Package: libgnupg-perl Version: 0.19-1 Severity: normal When using "--trust-model always" arguments to gpg, no TRUST_* status lines are emitted (stderr always gets "gpg: WARNING: Using untrusted key!" under this --trust-model). As a result, verify() from perl's GnuPG module chokes with: Use of u

Bug#610712: [devscripts] Allow to check cryptographic signatures

2013-05-04 Thread Daniel Kahn Gillmor
Control: tags 610712 + patch On Fri 2011-01-21 11:25:27 -0500, Emil Langrock wrote: > A more interesting approach is to make it possible to download the source > tarball and a pgp/gnupg signature which is used to verify the the > file. This is i think the approach we want to pursue. having a st

Bug#610712: [devscripts] Allow to check cryptographic signatures

2013-05-04 Thread Daniel Kahn Gillmor
On Sat 2013-05-04 05:03:36 -0400, Daniel Kahn Gillmor wrote: > The attached patch implements the above proposal, using (e.g.) > opts=pgpsigurlmangle=s/$/.asc/ and debian/upstream-signing-key.pgp. This time with the patch actually attached :/ --dkg

Bug#706859: icedove: please upload icedove 17.0.x to unstable and the current beta to experimental

2013-05-05 Thread Daniel Kahn Gillmor
Package: icedove Version: 17.0.5-1 Severity: wishlist Control: affects -1 enigmail With the release of jessie, it would be great to get icedove 17.0.x (17.0.5 at the moment) into unstable for wider testing and use. This would also permit the upload of one of the icedove betas (currently 21.0b1, a

Bug#682813: dbndns srv patch

2013-05-28 Thread Daniel Kahn Gillmor
On 05/27/2013 07:08 AM, Gerrit Pape wrote: > Hi Daniel, fine with me, go ahead if you like. thanks for the response gerrit. i've gone ahead with the upload to experimental. what do you think about making a release to unstable containing this fix and intrigeri's fix? Regards, --dkg

Bug#710307: (no subject)

2013-05-29 Thread Daniel Kahn Gillmor
Package: valgrind Version: 1:3.8.1-3 Severity: normal valgrind fails with "Illegal instruction" on mipsel: (experimental_mipsel-dchroot)dkg@eder:~$ valgrind ls Illegal instruction (experimental_mipsel-dchroot)dkg@eder:~$ this appears to make it unusable on this platform. --dkg -- Syst

Bug#710307: (no subject)

2013-05-29 Thread Daniel Kahn Gillmor
On 05/29/2013 05:01 PM, Alessandro Ghedini wrote: > Can you provide a backtrace? I'm not sure how to do that, and i'm doubly-confused given the weird interactions between valgrind and gdb. just trying: gdb valgrind gives me: "/usr/bin/valgrind": not in executable format: File format not recog

Bug#710427: marked as done (debirf: installing apache2 requires apache2.2-common installed on host)

2013-06-02 Thread Daniel Kahn Gillmor
Just to be clear about what's going on here: * debirf relies on fakechroot and fakeroot to do "debirf make" * fakechroot and fakeroot both use LD_PRELOAD hacks to make the system pretend to be something slightly different * those LD_PRELOAD hacks rely on environment variables to know how to m

Bug#651974: dconf-editor: position of vertical split of right-hand pane is wrong

2013-06-04 Thread Daniel Kahn Gillmor
Control: -1 fixed 0.12.1-3 On 06/05/2013 12:04 AM, Michael Biebl wrote: > Version: 0.16.0-4 > > Seems to work fine with recent versions of dconf-editor, therefor > closing the bug report. thanks, i agree it seems better now. it even seems to behave properly in 0.12.1-3. --dkg signat

Bug#610712: [devscripts] Allow to check cryptographic signatures

2013-06-05 Thread Daniel Kahn Gillmor
[i'm not on the devscripts-devel list, please cc me or 610...@bugs.debian.org] On Sat 2013-05-04 05:26:55 -0400, Daniel Kahn Gillmor wrote: > On Sat 2013-05-04 05:03:36 -0400, Daniel Kahn Gillmor wrote: > >> The attached patch implements the above proposal, using (e.g.) >>

Bug#610712: [devscripts] Allow to check cryptographic signatures

2013-06-05 Thread Daniel Kahn Gillmor
On 06/05/2013 09:24 PM, James McCoy wrote: >> I took a quick look at the patch and found to things: 1) Please update >> README in addition to d/control and 2) please check the indentation. > > A little clarification on this. uscan uses (as most of the shell/Perl > scripts in devscripts do) the fo

Bug#699888: new nss packages fixing cve-2013-1620

2013-03-18 Thread Daniel Kahn Gillmor
On 03/16/2013 05:35 PM, Mike Hommey wrote: > Likewise, I'd rather know what we do wrt md5, and while at it, cacert > (the cert of which uses a md5 signature at the moment, so it effectively > doesn't work ; see bug 682470) before uploading, so as to avoid doing > two uploads. the choice of signatu

Bug#703343: posh: please ship debugging symbols in posh-dbg

2013-03-18 Thread Daniel Kahn Gillmor
Package: posh Version: 0.11 Severity: wishlist It would be nice to be able to get debugging symbols for posh by just doing "apt-get install posh-dbg". Could you ship that package separately so that a rebuild isn't needed? Thanks for posh! --dkg -- System Information: Debian Release: 7.0

Bug#703346: posh: segmentation fault when running "function x() { echo foo; }"

2013-03-18 Thread Daniel Kahn Gillmor
Package: posh Version: 0.11 Severity: normal Control: found -1 0.10.2 I can get a segfault with posh with the following command: function x( ) { echo foo; } this happens on both 0.10.2 and 0.11 attached is a backtrace from 0.11 (rebuilt with DEB_BUILD_OPTIONS=nostrip): 0 dkg@alice:~$ gdb posh

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-21 Thread Daniel Kahn Gillmor
On 03/21/2013 01:43 AM, Erik C.J. Laan wrote: > I upgraded libnss* from 2:3.13.6-2 (previously in wheezy) to 2:3.14.3-1 (new > in wheezy). > Suddenly Icedove cannot connect to my IMAP-mail server anymore. That > mail-server has > a self-signed certificate. > Thunderbird on other PCs (Win7) does n

Bug#701141: [PATCH 1/2] debian/rules: simplify view of shipped binaries for libnss3-tools

2013-03-21 Thread Daniel Kahn Gillmor
--- debian/rules | 14 -- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/debian/rules b/debian/rules index 74166be..839dfd4 100755 --- a/debian/rules +++ b/debian/rules @@ -83,8 +83,18 @@ override_dh_auto_install: $(PREPROCESS_FILES:.in=) install -m 755 -t deb

Bug#701141: [PATCH 2/2] add several useful crypto utilities to libnss3-tools (Closes: #701141)

2013-03-21 Thread Daniel Kahn Gillmor
Listed below are the tools in mozilla/dist/bin which we could ship in debian's libnss3-tools package (see http://bugs.debian.org/701141) I'm noting my consideration here about which tools to ship or not ship. "YES" means the binary was already shipped in 2:3.14.3-1 "NO" means we should not ship "

Bug#701141: [PATCH 2/2] add several useful crypto utilities to libnss3-tools (Closes: #701141)

2013-03-21 Thread Daniel Kahn Gillmor
On 03/22/2013 12:47 AM, Matthew Hall wrote: > BEAUTIFUL bug fix. Thank you so much for doing this, it is a big help for > usage of NSS, especially symkeyutil, despite the bad documentation I really > needed that one so much I had to recompile from deb src and hand copy it into > place. Well, it

Bug#701141: [PATCH 2/2] add several useful crypto utilities to libnss3-tools (Closes: #701141)

2013-03-21 Thread Daniel Kahn Gillmor
On 03/22/2013 01:51 AM, Mike Hommey wrote: > I'm not particularly happy with binaries with pretty generic names > ("addbuiltin" is a good example of such) ending up in /usr/bin... > But you can try to convince me otherwise. Or move them in some other > directory. hm, i think the following new bin

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-22 Thread Daniel Kahn Gillmor
On Thu 2013-03-21 10:28:31 -0400, Daniel Kahn Gillmor wrote: > The self-signed certificate in question uses RSA-MD5 as a signature. > MD5 is deprecated in general, so I suspect this is the problem. You > could probably even re-generate the same self-signed certificate with > the sa

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-24 Thread Daniel Kahn Gillmor
Hi Philonous-- On 03/24/2013 08:40 AM, Philonous Atio wrote: > Perhaps my phrasing was not quite clear, but the remote server's > certificate was NOT loaded into the Authorities section -- I wanted to > avoid the need to load the server's certificate at all. I meant to > convey that a self-signed

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-24 Thread Daniel Kahn Gillmor
On 03/23/2013 09:38 PM, Philonous Atio wrote: > I agree with dkg that "this sounds to me like a bug in the logic of the > upgraded version of NSS." It needs to be fixed> Please read the rest of my comments in this bug, Philonous -- i think you should have the remote server's certificate loaded i

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-24 Thread Daniel Kahn Gillmor
On 03/24/2013 08:41 PM, Philonous Atio wrote: > But with libnss3 2:3.14.3-1, on my system Icedove did not complete the > connection (it "hung") and issued no message. hm, i see what you mean. Maybe #703587 should be reassigned to icedove (or cloned, and the clone reassigned to icedove). I'd do t

Bug#703866: icedove: routine javascript exception in chrome://messenger/content/folderPane.js line 2477

2013-03-24 Thread Daniel Kahn Gillmor
Package: icedove Version: 10.0.12-1 Severity: normal I created a completely new icedove 10.0.12 installation on a fresh wheezy installation. I set up a simple imap account, but did not fetch mail from it yet. If i open the "error console" from the "Tools" menu, and then just mouse over anywher

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-24 Thread Daniel Kahn Gillmor
On 03/24/2013 11:05 PM, Philonous Atio wrote: > ||/ Name Version Architecture > +++-==-- > ii icedove10.0.12-1i386 > ii libnss3:i386 2:3.14.3-1 i386 Thanks for these details. I can confirm the same misbehavior of icedove 10.0.

Bug#703867: icedove: warning and error message on icedove 17.0.4 startup

2013-03-24 Thread Daniel Kahn Gillmor
Package: icedove Version: 17.0.4-1 Severity: minor Upon opening a simple icedove profile with a single IMAP account, i see the following two messages in the error console: Timestamp: 03/24/2013 11:50:48 PM Warning: Use of Mutation Events is deprecated. Use MutationObserver instead. Source File:

Bug#704018: git-buildpackage: include the name of the package being built in the debian tag message

2013-03-26 Thread Daniel Kahn Gillmor
Package: git-buildpackage Version: 0.6.0~git20120601 Severity: normal Tags: patch Currently, the message in the debian tag is just: "Debian release %s" % cp.version This is a bad idea, because it means that the signed message itself contains no mention of the project that is being worked on.

Bug#704018: git-buildpackage: include the name of the package being built in the debian tag message

2013-03-27 Thread Daniel Kahn Gillmor
Hi Guido-- Thanks for your prompt and thoughtful response, i appreciate it! git-buildpackage helps me a lot because it encodes standard workflow decisions and operations so i don't have to think about them. without this fix, i have to work around git-buildpackage and do more things manually. On

Bug#697078: tpu: xdotool/1:2.20100701.2961-3+deb7u1

2013-03-27 Thread Daniel Kahn Gillmor
-0500 +++ xdotool-2.20100701.2961/debian/changelog2013-03-27 15:07:47.0 -0400 @@ -1,3 +1,9 @@ +xdotool (1:2.20100701.2961-3+deb7u3) unstable; urgency=low + + * run test suite with SHELL=/bin/bash to help out the buildds. + + -- Daniel Kahn Gillmor Wed, 27 Mar 2013 15:04:36 -0400

Bug#697078: Info received (Bug#697078: tpu: xdotool/1:2.20100701.2961-3+deb7u1)

2013-03-27 Thread Daniel Kahn Gillmor
an/changelog2013-02-07 22:04:02.0 -0500 +++ xdotool-2.20100701.2961/debian/changelog2013-03-27 15:20:49.0 -0400 @@ -1,3 +1,9 @@ +xdotool (1:2.20100701.2961-3+deb7u3) testing-proposed-updates; urgency=low + + * run test suite with SHELL=/bin/bash to help out the buildds

Bug#682353: Crashes my X11 (KDE) session on upgrade

2013-03-27 Thread Daniel Kahn Gillmor
On Fri 2013-03-15 01:08:00 -0400, Daniel Kahn Gillmor wrote: > Ugh, this is a bad result, but i don't think the bug is in 0.8.1 -- the > crashing bug is in the earlier version (0.8-2), and one of the changes > in 0.8.1 is to improve the behavior when such an upgrade is happening &g

Bug#693884: prepared and in NEW

2013-03-28 Thread Daniel Kahn Gillmor
libjs-jquery-timepicker's packaging has been uploaded and is in the NEW queue. Anyone interested in the packaging can see it in git: http://anonscm.debian.org/gitweb/?p=pkg-javascript/jquery-timepicker.git git://anonscm.debian.org/pkg-javascript/jquery-timepicker.git members of the pkg-javascri

Bug#704158: ITP: trac-migrate -- migrate a trac environment to another database

2013-03-28 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: trac-migrate Version : 0.12+svn12737 Upstream Author : Jun Omae * URL : http://trac-hacks.org/wiki/TracMigratePlugin * License : BSD Programming Lang: Python Description

Bug#704180: p11-kit: provide package that diverts libnssckbi.so and replaces it with p11-kit-trust.so

2013-03-28 Thread Daniel Kahn Gillmor
Package: p11-kit Version: 0.17.4-1 Severity: wishlist as of 0.17.4, it looks like i can replace /usr/lib/$ARCH_TRIPLE/nss/libnssckbi.so with /usr/lib/$ARCH_TRIPLE/pkcs11/p11-kit-trust.so and systems that use libnssckbi.so (e.g. iceweasel and icedove) will now treat the system trusted root store as

Bug#704018: [git-buildpackage/master] Include the name of the package being built in the debian tag message

2013-03-29 Thread Daniel Kahn Gillmor
tag 704018 pending thanks Date: Tue Mar 26 17:41:53 2013 -0400 Author: Daniel Kahn Gillmor Commit ID: 4323cc8838ea53008e911811160182f975ffb360 Commit URL: http://git.debian.org/?p=users/agx/git-buildpackage.git;a=commitdiff;h=4323cc8838ea53008e911811160182f975ffb360 Patch URL: http

Bug#704018: [git-buildpackage/experimental] Include the name of the package being built in the debian tag message

2013-03-29 Thread Daniel Kahn Gillmor
tag 704018 pending thanks Date: Tue Mar 26 17:41:53 2013 -0400 Author: Daniel Kahn Gillmor Commit ID: 4323cc8838ea53008e911811160182f975ffb360 Commit URL: http://git.debian.org/?p=users/agx/git-buildpackage.git;a=commitdiff;h=4323cc8838ea53008e911811160182f975ffb360 Patch URL: http

Bug#701141: [PATCH 2/2] add several useful crypto utilities to libnss3-tools (Closes: #701141)

2013-03-29 Thread Daniel Kahn Gillmor
Re: Bug#701141: [PATCH 2/2] add several useful crypto utilities to libnss3-tools (Closes: #701141) On Fri 2013-03-22 02:29:53 -0400, Daniel Kahn Gillmor wrote: > i'd be fine shipping the last category and optionally the client/server > utilities with an nss- prefix if you think th

Bug#701141: [PATCH] rename the generic utilities with an nss- prefix

2013-03-29 Thread Daniel Kahn Gillmor
--- debian/rules |9 ++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/debian/rules b/debian/rules index 152a0cb..9903275 100755 --- a/debian/rules +++ b/debian/rules @@ -84,12 +84,10 @@ override_dh_auto_install: $(PREPROCESS_FILES:.in=) install -m 755 -t debian

Bug#699327: libaprutil1-dev: please ship find_apu.m4

2013-01-30 Thread Daniel Kahn Gillmor
Package: libaprutil1-dev Version: 1.4.1-3 Severity: normal debian/patches/ship_find_apu.m4.patch seems to think that it is going to cause find_apu.m4 to be shipped with one of the binary packages, but it doesn't seem to have that effect. find_apu.m4 ends up in the top level of debian/tmp, but nev

Bug#699436: marked as done (iceweasel: Rogue server certificates in fresh install)

2013-01-31 Thread Daniel Kahn Gillmor
in particular, all the certs listed in http://bugs.debian.org/699436 are known-malicious certificates; what you're seeing is a built-in preloaded blocklist. --dkg signature.asc Description: OpenPGP digital signature

Bug#497527: mpack: munpack still fails on multipart MIME messages

2013-01-31 Thread Daniel Kahn Gillmor
Package: mpack Version: 1.6-8 Followup-For: Bug #497527 Control: severity 497527 important This is still a problem with 1.6-8. Why else would you want to use munpack unless you were dealing with multipart messages? If i had to guess, i'd guess that most messages traversing the 'net today are mul

Bug#699436: marked as done (iceweasel: Rogue server certificates in fresh install)

2013-01-31 Thread Daniel Kahn Gillmor
On 01/31/2013 12:07 PM, Samuel Hym wrote: > Ok. Thank you very much for your answer, I’m relieved! > > Still, I find the way this is presented confusing: I had seen the trust > setting, which says > > Edit certificate trust settings: > . Trust > * Do not trust > > Since this is “Edit … trust”, I

Bug#699494: '/usr/share/linphone/linphone2.png': No such file or directory

2013-01-31 Thread Daniel Kahn Gillmor
Package: linphone Version: 3.5.2-10 Severity: minor I'm running the graphical linphone on a wheezy/sid system. when i run it from a terminal emulator, i see the following message (among others): (linphone:23463): Gtk-WARNING **: Could not load image 'linphone2.png': Failed to open file '/usr/sh

Bug#699496: ITP: apr-json -- JSON serializer / deserializer for use with Apache Portable Runtime (APR)

2013-01-31 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: apr-json Version : 0.0.0 Upstream Author : Moriyoshi Koizumi * URL : https://github.com/moriyoshi/apr-json * License : Apache 2.0 Programming Lang: C Description : APR-based

<    1   2   3   4   5   6   7   8   9   10   >