Processed: Re: Bug#774192: CVE-2014-9057

2014-12-29 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + patch Bug #774192 [src:movabletype-opensource] movabletype-opensource: CVE-2014-9057 Added tag(s) patch. > found -1 5.1.4+dfsg-4 Bug #774192 [src:movabletype-opensource] movabletype-opensource: CVE-2014-9057 Marked as found in versions movabletype-opensourc

Bug#774192: CVE-2014-9057

2014-12-29 Thread Salvatore Bonaccorso
Control: tags -1 + patch Control: found -1 5.1.4+dfsg-4 Hi Dominic, On Tue, Dec 30, 2014 at 02:56:31AM +0100, Moritz Muehlenhoff wrote: > Source: movabletype-opensource > Severity: grave > Tags: security > > Hi, > please see https://movabletype.org/news/2014/12/6.0.6.html Attaches is the extra

Processed: tagging 774185

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 774185 + pending Bug #774185 [libsys-virt-perl] libsys-virt-perl: Wrong runtime dependency on libvirt-bin Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 774185: http://bugs.debian.org/

Processed: severity of 774185 is serious ..., found 774185 in 1.2.9-1

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # Justification: Maintainers opinion > severity 774185 serious Bug #774185 [libsys-virt-perl] libsys-virt-perl: Relax dependency on libvirt-bin to recommends Severity set to 'serious' from 'normal' > retitle 774185 libsys-virt-perl: Wrong runtime

Processed: user debian-secur...@lists.debian.org, usertagging 774192, tagging 774192 ..., usertagging 774194 ...

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > user debian-secur...@lists.debian.org Setting user to debian-secur...@lists.debian.org (was car...@debian.org). > usertags 774192 + tracked There were no usertags set. Usertags are now: tracked. > tags 774192 + upstream fixed-upstream Bug #774192

Bug#774191: Please sponsor dbab, the dnsmasq-based ad-blocker

2014-12-29 Thread Tong Sun
Hi Wookey, Thanks for your help, the dbab package is now officially included in Debian repo, and we have a bug report opened already. Due to the fact that dbab was removed from mentors, including the upgraded version 1.2.2-1, I've re-uploaded it to mentors again, closing bug #774191 as well this

Bug#774191: [dbab] wrong path

2014-12-29 Thread Tong Sun
On Mon, Dec 29, 2014 at 8:34 PM, Dimitris wrote: > just installed this package, (thanks for packaging it, looks > interesting... :-) ) > > but it is unusable, dbab service doesnt start and standalone commands > fail on a fresh install. Hi dimitris, Thanks for your interest and sorry for the pro

Bug#774194: CVE-2014-9218 CVE-2014-9219

2014-12-29 Thread Moritz Muehlenhoff
Package: phpmyadmin Severity: grave Tags: security Please see: http://www.phpmyadmin.net/home_page/security/PMASA-2014-17.php http://www.phpmyadmin.net/home_page/security/PMASA-2014-18.php Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject

Bug#774192: CVE-2014-9057

2014-12-29 Thread Moritz Muehlenhoff
Source: movabletype-opensource Severity: grave Tags: security Hi, please see https://movabletype.org/news/2014/12/6.0.6.html Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#774191: [dbab] wrong path

2014-12-29 Thread Dimitris
Package: dbab Version: 1.1.2-1 Severity: grave --- Please enter the report below this line. --- hey, just installed this package, (thanks for packaging it, looks interesting... :-) ) but it is unusable, dbab service doesnt start and standalone commands fail on a fresh install. problem is in the

Bug#755597: marked as done (django-conneg: Please ensure it works with Django 1.7)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Tue, 30 Dec 2014 01:33:27 + with message-id and subject line Bug#755597: fixed in django-conneg 0.9.4-2 has caused the Debian Bug report #755597, regarding django-conneg: Please ensure it works with Django 1.7 to be marked as done. This means that you claim that the problem

Bug#773784: marked as done (libnftnl 1.0.2-1 should not be released with jessie)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 16:30:22 -0800 with message-id and subject line Closing #773783, #773784 has caused the Debian Bug report #773784, regarding libnftnl 1.0.2-1 should not be released with jessie to be marked as done. This means that you claim that the problem has been dealt wit

Bug#773783: marked as done (nftables 0.3 should not be released with jessie)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 16:30:22 -0800 with message-id and subject line Closing #773783, #773784 has caused the Debian Bug report #773783, regarding nftables 0.3 should not be released with jessie to be marked as done. This means that you claim that the problem has been dealt with. I

Bug#772008: CVE request: mpfr: buffer overflow in mpfr_strtofr

2014-12-29 Thread Moritz Muehlenhoff
On Mon, Dec 08, 2014 at 01:45:12PM +0100, Vasyl Kaigorodov wrote: > Hello, > > A buffer overflow was reported [1] in mpfr. > This is due to incorrect GMP documentation for mpn_set_str about the > size of a buffer (discussion is at [1]; first fix in the GMP > documentation is at [2]). This bug is p

Bug#764630: RFS: javatools 0.48 [RC]

2014-12-29 Thread Markus Koschany
On Sun, 21. Dec 09:57 tony mancill wrote: > On 12/15/2014 12:06 AM, Mathieu Malaterre wrote: > > On Sun, Dec 14, 2014 at 6:50 PM, Markus Koschany wrote: > > [...] > >> Actually what was the reasoning behind the choice to use a custom shell > >> script like jarwrapper instead of jexec to register

Bug#772862: marked as done (wordpress: Trigger cycle causes dpkg to fail processing)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 22:00:07 + with message-id and subject line Bug#772862: fixed in wordpress 4.1+dfsg-1 has caused the Debian Bug report #772862, regarding wordpress: Trigger cycle causes dpkg to fail processing to be marked as done. This means that you claim that the proble

Processed: Fwd: Bug#773865: unblock: imagemagick/8:6.8.9.9-4 [security]

2014-12-29 Thread Debian Bug Tracking System
Processing control commands: > severity -1 serious Bug #770009 [imagemagick] Imagemagick FTBFS on mips on mips-aql-* not on ball Severity set to 'serious' from 'important' -- 770009: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770009 Debian Bug Tracking System Contact ow...@bugs.debian.org

Bug#773916: marked as done (libical: Ship different constant values accross builds)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 21:26:01 + with message-id and subject line Bug#773916: fixed in libical 1.0-1.2 has caused the Debian Bug report #773916, regarding libical: Ship different constant values accross builds to be marked as done. This means that you claim that the problem has

Bug#748728: marked as done (id-utils and libuser: error when trying to install together)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 21:26:11 + with message-id and subject line Bug#748728: fixed in libuser 1:0.60~dfsg-1.2 has caused the Debian Bug report #748728, regarding id-utils and libuser: error when trying to install together to be marked as done. This means that you claim that the

Bug#773671: [Pkg-javascript-devel] Bug#773671: libv8-3.14: multiple security issues

2014-12-29 Thread Moritz Mühlenhoff
On Mon, Dec 29, 2014 at 12:28:30PM +0100, Bálint Réczey wrote: > Hi Moritz, > > 2014-12-29 3:01 GMT+01:00 Moritz Mühlenhoff : > > On Sun, Dec 21, 2014 at 03:19:42PM -0500, Michael Gilbert wrote: > >> package: src:libv8-3.14 > >> severity: grave > >> tags: security > >> > >> Hi, > >> > >> the follo

Processed: tagging 773916

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 773916 + patch Bug #773916 [libical-dev] libical: Ship different constant values accross builds Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 773916: http://bugs.debian.org/cgi-bin/bugre

Bug#773916: libical: Ship different constant values accross builds

2014-12-29 Thread Dimitri John Ledkov
On Thu, 25 Dec 2014 16:46:14 +0100 =?iso-8859-1?B?Suly6W15?= Bobbio wrote: > Package: libical-dev > Version: 1.0-1.1 > Severity: critical > User: reproducible-bui...@lists.alioth.debian.org > Usertags: randomness > > Hi! > > While working on the “reproducible builds” effort [1], we have notic

Processed: tagging 773416, found 773416 in 1:0.7.3-2

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 773416 + upstream fixed-upstream Bug #773416 {Done: Nguyen Cong } [ettercap] ettercap: CVE-2014-6395 CVE-2014-6396 CVE-2014-9376 CVE-2014-9377 CVE-2014-9378 CVE-2014-9379 CVE-2014-9380 CVE-2014-9381 Added tag(s) upstream and fixed-upstream.

Bug#773722: marked as done (unzip: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 19:17:05 + with message-id and subject line Bug#773722: fixed in unzip 6.0-8+deb7u1 has caused the Debian Bug report #773722, regarding unzip: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 to be marked as done. This means that you claim that the problem has bee

Bug#773416: marked as done (ettercap: CVE-2014-6395 CVE-2014-6396 CVE-2014-9376 CVE-2014-9377 CVE-2014-9378 CVE-2014-9379 CVE-2014-9380 CVE-2014-9381)

2014-12-29 Thread Debian Bug Tracking System
Your message dated Mon, 29 Dec 2014 19:03:26 + with message-id and subject line Bug#773416: fixed in ettercap 1:0.7.3-2.1+squeeze2 has caused the Debian Bug report #773416, regarding ettercap: CVE-2014-6395 CVE-2014-6396 CVE-2014-9376 CVE-2014-9377 CVE-2014-9378 CVE-2014-9379 CVE-2014-9380 CV

Bug#774163: Unable to upgrade or install ttf-root-installer (dpkg: error processing package) because of invalid certificate on root.cern.ch

2014-12-29 Thread Carlos Alberto Lopez Perez
Seems on the past there were also problems with this file served via ftp. https://bugs.launchpad.net/ubuntu/+source/root-system/+bug/349860 signature.asc Description: OpenPGP digital signature

Bug#774163: Unable to upgrade or install ttf-root-installer (dpkg: error processing package) because of invalid certificate on root.cern.ch

2014-12-29 Thread Carlos Alberto Lopez Perez
Package: ttf-root-installer Version: 5.34.19+dfsg-1.1 Severity: grave Hi, when upgrading my system ttf-root-installer broke the upgrade because its configure script failed. I tried to purge it completely and install it again, unfortunately it broke again: $ sudo apt-get install ttf-root-install

Bug#718148: arpon: FTBFS: Could not find libnet-1.1

2014-12-29 Thread Chris
Hi, in the meantime the release of ArpON 2.7.2 should also fix those build issues: http://sourceforge.net/p/arpon/code/ci/master/tree/CHANGELOG -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Processed: Re: emacs24: a left-click in Emacs sometimes modifies the PRIMARY selection

2014-12-29 Thread Debian Bug Tracking System
Processing control commands: > tags -1 security Bug #774090 [emacs24] emacs24: a left-click in Emacs sometimes modifies the PRIMARY selection Added tag(s) security. -- 774090: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774090 Debian Bug Tracking System Contact ow...@bugs.debian.org with p

Bug#774090: emacs24: a left-click in Emacs sometimes modifies the PRIMARY selection

2014-12-29 Thread Vincent Lefevre
Control: tags -1 security On 2014-12-28 16:29:12 +0100, Vincent Lefevre wrote: > Note: This bug occurs very often and is very annoying, as one needs > to reselect what was selected (sometimes hardly possible). Moreover > the wrongly pasted text is similar to the correct text[*], meaning > that if

Bug#772233: bashism in /bin/sh script

2014-12-29 Thread Bertrand Marc
Hi Balint, Le 20/12/2014 10:49, Bálint Réczey a écrit : > 2014-12-20 10:30 GMT+01:00 Bálint Réczey : > I made a typo in the bug number, please see the fixed patch attached. > I also reuploaded the package to DELAYED/2. Thanks a lot for uploading this fix, I was unable to take care of this in the l

Bug#766920: initramfs-tools: update-initramfs makes system unbootable due to missing rootfs

2014-12-29 Thread Laur Aliste
Same issue still persists after using the "root=UUID=" syntax with grub (which is the default). Kernel line in grub command line: linux /boot/vmlinuz-3.16-2-amd64 root=UUID=11bb4d9d-8451-4632-9985-1bd9b155dba8 ro quiet Booting ends up with the following screen (with input disabled): Decom

Bug#774121: [Android-tools-devel] Bug#774121: adb sideload fails with TWRP 2.8.2.0

2014-12-29 Thread Hans-Christoph Steiner
Tags: help fixed-upstream Control: merge 738119 This adb package definitely needs some love. I won't have time to work on it for a while, but I'll contribute where I can. Ray Kohler did some work towards this goal, but its not ready for upload. For more info: https://bugs.debian.org/cgi-bin/

Bug#746109: (no subject)

2014-12-29 Thread Erwan Prioul
I was able to build the package according to the suggested fix from bug #745969 (thx Edmund). Thanks for considering the attached patch. Erwan. diff -Naur a/tokens.h b/tokens.h --- a/tokens.h 2014-12-29 16:18:19.442013464 +0100 +++ b/tokens.h 2014-12-29 16:26:12.782018555 +0100 @@ -93,7 +93,6

Bug#761170: upstream

2014-12-29 Thread Ivo De Decker
Control: tags -1 patch Hi, On Tue, Nov 25, 2014 at 10:38:44PM +0100, Lucas Nussbaum wrote: > Note that the build now fails on i386 too. > > Trying to reproduce it locally, I run into yet another problem: > > 1) Failure: > repo::iterator::fs_preserves_error > [/tmp/libgit2-0.21.1/tests/repo/i

Bug#744753: Fix for anacron (running on resume under systemd)

2014-12-29 Thread Ralf Jung
Hi, > It *also* has After=sleep.target. > > That means, depending on the timing, anacron-resume.service might be > triggered just before suspend not on resume, and it's not guaranteed > that anacron has finished before systemd-sleep is called. > > I don't think the patch was intended this way?

Processed: Re: Bug#761170: upstream

2014-12-29 Thread Debian Bug Tracking System
Processing control commands: > tags -1 patch Bug #761170 [src:libgit2] libgit2: FTBFS on multiple architectures Bug #761539 [src:libgit2] libgit2: FTBFS: Tests failures Added tag(s) patch. Added tag(s) patch. -- 761170: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761170 761539: http://bugs.

Bug#744753: Fix for anacron (running on resume under systemd)

2014-12-29 Thread Michael Biebl
Hi Ivo, I see that you uploaded a fix for #744753, using a unit file called anacron-resume: > [Unit] > Description=Run anacron jobs at resume > After=suspend.target > After=hibernate.target > After=hybrid-sleep.target > > [Service] > ExecStart=/bin/systemctl --no-block --fail start anacron.servi

Bug#768756: wader: FTBFS in jessie: Tests failures

2014-12-29 Thread Graham Inggs
I intend NMU-ing a fix for this, as per the attached debdff, pending its unblock pre-approval (bug #774134). wader-nmu.debdiff Description: Binary data

Bug#771669: segfaults with trivial usage

2014-12-29 Thread Christian Werner
On 12/01/2014 02:38 PM, Lionel Elie Mamane wrote: Hi Christian, May I draw your attention on Debian bug number 771669, which I quote below and which can be read in full at http://bugs.debian.org/771669 ? It was reported against 0.992, but I have reproduced it with 0.999 (which I'm shortly going

Bug#773671: [Pkg-javascript-devel] Bug#773671: libv8-3.14: multiple security issues

2014-12-29 Thread Bálint Réczey
Hi Moritz, 2014-12-29 3:01 GMT+01:00 Moritz Mühlenhoff : > On Sun, Dec 21, 2014 at 03:19:42PM -0500, Michael Gilbert wrote: >> package: src:libv8-3.14 >> severity: grave >> tags: security >> >> Hi, >> >> the following vulnerabilities were published for libv8-3.14. > > So if I'm understanding the d

Bug#774143: malicious HTTP request kills gearmand

2014-12-29 Thread Alexei Pastuchov
Package: gearman-job-server Version: 1.0.6-4 Status: install ok installed Installed-Size: 268 Architecture: amd64 Severity: serious A bad HTTP request force gearmand (>=0.33 AFAIK) to run in in endless loop until memory out. See bug report https://bugs.launchpad.net/gearmand/+bug/1348865 Bug fix

Bug#747141: [debhelper-devel] Bug#747141: Bug#747141: dh_installdocs --link-doc forces source-version dependencies (Was: Re: Bug#747141: closed by Niels Thykier (Bug#747141: fixed

2014-12-29 Thread Niels Thykier
On 2014-12-22 20:28, Stephen Kitt wrote: > Hi Niels, > > On Mon, 22 Dec 2014 08:25:03 +0100, Niels Thykier wrote: >>> [...] >> >> Okay, I guess I realise what happens now that breaks your case. We use >> dpkg-parsechangelog -l. During a binNMU this returns the binNMU >> version (i.e. source ver

Processed: limit source to debhelper, tagging 773965

2014-12-29 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > limit source debhelper Limiting to bugs with field 'source' containing at least one of 'debhelper' Limit currently set to 'source':'debhelper' > tags 773965 + pending Bug #773965 [debhelper] binNMUed db5.3 FTBFS due to --link-doc check Added tag(