Re: List of FTBFS in Ubuntu

2010-12-10 Thread Olaf van der Spek
On Fri, Dec 10, 2010 at 2:38 AM, Fernando Lemos wrote: > Hi Olaf, Roger > > On Thu, Dec 9, 2010 at 11:00 AM, Olaf van der Spek > wrote: > [...] >>> Now, pkg-config isn't standardised /either/, but it's useful because >>> it will work with any standards-conforming compiler.  It's just a >>> gener

Re: Bug#606543: clamav-freshclam: affected by privilege escalation vulnerability in logrotate

2010-12-10 Thread Michael Tautschnig
(CC'ed debian-devel as this was a not-so-well coordinated MBF without announcement to debian-devel, dd-list, usertags; so maybe at least further discussion can happen there) Hi Florian, [...] > > These lines from this package's maintainer scripts suggest that it likely > is affected by the vulne

Re: Bug#606543: clamav-freshclam: affected by privilege escalation vulnerability in logrotate

2010-12-10 Thread Olaf van der Spek
On Fri, Dec 10, 2010 at 9:43 AM, Michael Tautschnig wrote: >> These lines from this package's maintainer scripts suggest that it likely >> is affected by the vulnerability: >> >> --- >> chmod 640 $FRESHCLAMLOGFILE >> chown "$d

Re: privilege escalation and potential data loss in logrotate

2010-12-10 Thread Sandro Tosi
(copying the thread to debian-devel, where mass-bug-fills *has to* be discussed, not d-qa) On Sat, Nov 20, 2010 at 08:23, Florian Zumbiehl wrote: > Hi, > > The short summary: > > 1. There is a privilege escalation vulnerability in stable's logrotate, >   verified to work for switching from the po

Re: privilege escalation and potential data loss in logrotate

2010-12-10 Thread Paul Martin
On Fri, Dec 10, 2010 at 10:17:53AM +0100, Sandro Tosi wrote: > If you really care about this problem, which is nice, try to get > logrotate fixed. As I have said before, I do welcome patches that don't break existing functionality or introduce new race conditions. None of my emails to Florian ar

Re: Bug#606543: clamav-freshclam: affected by privilege escalation vulnerability in logrotate

2010-12-10 Thread Holger Levsen
Hi, On Freitag, 10. Dezember 2010, Michael Tautschnig wrote: > (CC'ed debian-devel as this was a not-so-well coordinated MBF without > announcement to debian-devel, dd-list, usertags; so maybe at least further > discussion can happen there) thanks for that. I've reassigned all these bugs to logr

Re: privilege escalation and potential data loss in logrotate

2010-12-10 Thread Olaf van der Spek
On Fri, Dec 10, 2010 at 11:00 AM, Paul Martin wrote: > On Fri, Dec 10, 2010 at 10:17:53AM +0100, Sandro Tosi wrote: > >> If you really care about this problem, which is nice, try to get >> logrotate fixed. > > As I have said before, I do welcome patches that don't break existing > functionality or

Re: List of FTBFS in Ubuntu

2010-12-10 Thread Roger Leigh
On Thu, Dec 09, 2010 at 02:00:24PM +0100, Olaf van der Spek wrote: > On Mon, Dec 6, 2010 at 4:34 PM, Roger Leigh wrote: > >> I was wondering why you considered the auto linking stuff to be so > >> horrible. > >> IMO the best solution would be to get auto link support into GCC too. > > > > It's no

Re: List of FTBFS in Ubuntu

2010-12-10 Thread Olaf van der Spek
On Fri, Dec 10, 2010 at 1:09 PM, Roger Leigh wrote: >> So? > > When we write code, we write it with the intention and expectation > that it will be built using a standards-conforming compiler.  I.e. > one which implements the C and/or C++ language specification, and > which also implements standar

Bug#606493: gnome-screensaver: Fails to authenticate users with NIS on amd64

2010-12-10 Thread Dietrich Clauss
Mark Brown wrote: > The most likely culprit here would seem to be a glibc issue or a local > misconfiguration caused during the upgrade. Oh, I used the term 'upgrade', which was misleading. The system where the bug occurs is an amd64 squeeze installation from scratch, done last week. (Upgrade fr

Re: List of FTBFS in Ubuntu

2010-12-10 Thread Vincent Danjean
Hi, On 10/12/2010 13:59, Olaf van der Spek wrote: > On Fri, Dec 10, 2010 at 1:09 PM, Roger Leigh wrote: >> People who do need this can build multiple versions, install them >> into different prefixes and then set PKG_CONFIG_PATH to select >> the variant they want at configure time. Unlike Boos

Re: List of FTBFS in Ubuntu

2010-12-10 Thread Olaf van der Spek
On Fri, Dec 10, 2010 at 3:28 PM, Vincent Danjean wrote: > [C] selection of the "tool chain" >  Comment: this seems to be very boost specific! Not necessary at the moment. >    For what I saw, there is the MT/no thread choice. Are there others ? >  It is possible that boost will be used by differ

Re: List of FTBFS in Ubuntu

2010-12-10 Thread Vincent Danjean
On 10/12/2010 16:59, Olaf van der Spek wrote: > On Fri, Dec 10, 2010 at 3:28 PM, Vincent Danjean wrote: >> [C] selection of the "tool chain" >> Comment: this seems to be very boost specific! > > Not necessary at the moment. > >>For what I saw, there is the MT/no thread choice. Are there oth

Re: apt-diff: a tool to diff filesystem content against APT

2010-12-10 Thread Tristan Schmelcher
On Thu, Dec 9, 2010 at 11:12 PM, Goswin von Brederlow wrote: > Osamu Aoki writes: > >> On Fri, Dec 10, 2010 at 12:06:45AM +0900, Osamu Aoki wrote: >>> Hi, >>> >>> On Wed, Dec 08, 2010 at 12:52:28PM -0800, Tristan Schmelcher wrote: >>> > On Tue, Dec 7, 2010 at 11:30 PM, Goswin von Brederlow >>>

Re: Bug#606449: ITP: cnagios -- terminal interface for viewing nagios host and service objects

2010-12-10 Thread Joachim Breitner
Hi Bernhard, Am Donnerstag, den 09.12.2010, 12:03 +0100 schrieb Bernhard Hauser: > Package: wnpp > Severity: wishlist > Owner: Bernhard Hauser > > * Package name: cnagios > Version : 0.27 > Upstream Author : Steve Rader > * URL : ftp://noc.hep.wisc.edu/pub/src/cnagio

Re: privilege escalation and potential data loss in logrotate

2010-12-10 Thread Florian Zumbiehl
Hi, > On Fri, Dec 10, 2010 at 10:17:53AM +0100, Sandro Tosi wrote: > > > If you really care about this problem, which is nice, try to get > > logrotate fixed. > > As I have said before, I do welcome patches that don't break existing > functionality or introduce new race conditions. Let me quote

Re: privilege escalation and potential data loss in logrotate

2010-12-10 Thread Florian Zumbiehl
Hi, > (copying the thread to debian-devel, where mass-bug-fills *has to* be > discussed, not d-qa) As such I would suggest completely moving this thread over to d-devel and dropping d-qa from subsequent mails. [...] > > If I don't see any solution emerging in a reasonable time frame, my next > >

Feliz Año 2011..!!!

2010-12-10 Thread Vigo Cans
Hola!!! Muchas Bendiciones para ti y tu familia, deseo invitarte a "Bendita la lluvia" es una comunidad privada cuya actividad se realiza exclusivamente a través de Internet. Es nació como iniciativa de un grupo de líderes de diferentes países y continentes, que tienen amplia experiencia en progra

Re: Bug#606543: clamav-freshclam: affected by privilege escalation vulnerability in logrotate

2010-12-10 Thread Florian Zumbiehl
Hi, > [...] > > > > These lines from this package's maintainer scripts suggest that it likely > > is affected by the vulnerability: > > > > --- > > chmod 640 $FRESHCLAMLOGFILE > > chown "$dbowner":adm $FRESHCLAMLOGFILE > > -

Re: Bug#606543: clamav-freshclam: affected by privilege escalation vulnerability in logrotate

2010-12-10 Thread Florian Zumbiehl
Hi, > On Fri, Dec 10, 2010 at 9:43 AM, Michael Tautschnig wrote: > >> These lines from this package's maintainer scripts suggest that it likely > >> is affected by the vulnerability: > >> > >> --- > >> chmod 640 $FRESHCLAMLOG

Re: apt-diff: a tool to diff filesystem content against APT

2010-12-10 Thread Osamu Aoki
HI, On Fri, Dec 10, 2010 at 12:02:44PM -0800, Tristan Schmelcher wrote: > On Thu, Dec 9, 2010 at 11:12 PM, Goswin von Brederlow > wrote: > > Osamu Aoki writes: > > > >> On Fri, Dec 10, 2010 at 12:06:45AM +0900, Osamu Aoki wrote: > >>> Hi, > >>> > >>> On Wed, Dec 08, 2010 at 12:52:28PM -0800, Tr

Re: apt-diff: a tool to diff filesystem content against APT

2010-12-10 Thread Russ Allbery
Osamu Aoki writes: > As I read manpage of dh_md5sums, it states: >-x, --include-conffiles >Include conffiles in the md5sums list. Note that this > information is redundant since it is included elsewhere in debian > packages. > I have no idea what this is. The *.conffiles fil

Re: apt-diff: a tool to diff filesystem content against APT

2010-12-10 Thread Peter Samuelson
[Osamu Aoki] > As I read manpage of dh_md5sums, it states: >-x, --include-conffiles >Include conffiles in the md5sums list. Note that this > information is redundant since it is included elsewhere in debian > packages. "Note that this information is redundant" - that's rich.