Bug#129104: cgiemail: buffer overflow and script reading vulnerabilities

2002-04-08 Thread Thomas Smith
On Mon, Apr 08, 2002 at 02:50:18PM -0500, Colin Watson wrote: > Better fixes are available, though. I'd forgotten that the last > message in this bug left it up to me to test them ... I'll have a look > today or tomorrow and see if we can get this sorted. > > -- Colin Watson [EMAIL PROTECTED] Ther

Bug#110610: sarg: segfaults with corrupt input from past runs of sqmgrlog

2002-04-08 Thread Tim Bell
> I notice that the version of "sarg" currently available is 1.2.1-1 (in > both testing and unstable). > > Could you please attempt to verify if this problem also exists in the new > version ? Yes, it seems to be fixed now, so the bug may be closed. -- To UNSUBSCRIBE, email to [EMAIL PROTECTE

Bug#129104: cgiemail: buffer overflow and script reading vulnerabilities

2002-04-08 Thread Colin Watson
On Mon, Apr 08, 2002 at 10:36:31AM -0400, Bruce R. Lewis wrote: > A recent message on debian-devel-announce shows cgiemail having been > removed from the upcoming release. > > Has the buffer overflow fix for cgicso been checked in? If not, one > option is to remove cgicso entirely, as it is reall

Bug#141838: kdelibs3-crypto: package cannot be installed when kdelibs3 is already there

2002-04-08 Thread root
Package: kdelibs3-crypto Version: 4:2.2.1-11 Severity: grave Justification: renders package unusable This is the result of apt-get -f install: Adding `diversion of /usr/lib/kde2/kio_https.la to /usr/lib/kde2/kio_https-nossl.la by kdelibs3-crypto' Adding `diversion of /usr/lib/kde2/kio_https.so to

Bug#141825: kyahoo: Receiving the basic smilie :) doesn't show the picture, and there is some text appended to each received line

2002-04-08 Thread Simon Burnet
Package: kyahoo Version: 0.7.0-7 Severity: normal There are two bugs in this report. Both are minor inconveniences. 1) The smilie :) doesn't appear on incoming messages. 2) Some junk is appended after the end of each incoming message. Please interpret [] as a square box, which I can't include, b

Bug#129104: cgiemail: buffer overflow and script reading vulnerabilities

2002-04-08 Thread Bruce R. Lewis
A recent message on debian-devel-announce shows cgiemail having been removed from the upcoming release. Has the buffer overflow fix for cgicso been checked in? If not, one option is to remove cgicso entirely, as it is really not useful except at MIT, and its existence probably confuses some peopl

Bug#141760: ssh2: init.d file has wrong default port

2002-04-08 Thread Brian White
Package: ssh2 Version: 2.0.13-7 When SSH2 starts, it tries to read the port number from the config file. If it is not present, it sets PORT=. However, SSH2 starts on port 22 if that parameter is not set. This prevents the "stop" and "restart" directives from working: wolf:~$ ls -l /var/run/

Bug#141613: [patch] freedce: package dependencies

2002-04-08 Thread Peter Samuelson
tags 141613 patch thanks for debian/changelog: * Non-developer ... non-upload * Merge freedce-dceidl and freedce-uuid into libfreedce-dev (closes: #141613) * libfreedce-dev Depends: libdcethreads-dev * Move uuid back to /usr/bin: it is used for application development, not system

Processed: [patch] freedce: package dependencies

2002-04-08 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > tags 141613 patch Bug#141613: freedce: idl compiler needs devel environment Tags added: patch > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

Bug#141613: freedce: package dependencies

2002-04-08 Thread Peter Samuelson
[I wrote] > The DCE IDL compiler won't do much without its include files. Thus I > would recommend combining freedce-dceidl and libfreedce-dev into one > package, or at least making the former depend on the latter. Also, libfreedce-dev needs to depend on libdcethreads-dev. The include files inc