Re: Accepted freeradius 1.0.2-4 (i386 source all)

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 09:17:09PM -0400, Paul Hampson wrote: > Format: 1.7 > Date: Mon, 23 May 2005 18:53:51 +1000 > Source: freeradius > Binary: freeradius-mysql freeradius-krb5 freeradius freeradius-iodbc > freeradius-ldap freeradius-dialupadmin > Architecture: source i386 all > Version: 1.0.2-

Re: FWD: Accepted imagemagick 6:6.0.6.2-2.4 (i386 source)

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 03:33:23PM -0400, Joey Hess wrote: > Please review for sarge. Approved (and urgency bumped). Thanks, -- Steve Langasek postmodern programmer signature.asc Description: Digital signature

Re: please approve enigmail 2:0.91-4

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 09:18:57PM +0200, Alexander Sack wrote: > please approve enigmail 2:0.91-4. It is just a respin for mozilla 1.7.8. Approved. Thanks, -- Steve Langasek postmodern programmer signature.asc Description: Digital signature

Re: consider adding apt-cacher 0.9.2 to Sarge

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 09:19:33AM +0200, Eduard Bloch wrote: > please consider adding apt-cacher 0.9 to Sarge. It's not an easy > decission but I would do that. The current version had following > problems (summary): > - for many it is not useable well with apache2: seems to leave many >zomb

Re: Please accept nautilus-media 0.8.1-3 into sarge

2005-05-26 Thread Rafael B. Pitrovski
> It's difficult to consider a change that we haven't seen. Please upload > your change to unstable. But it's a bug's correction, right?!

Re: FreeRADIUS 1.0.2-4 security fix upload for sponsorship

2005-05-26 Thread Horms
On Tue, May 24, 2005 at 01:33:10AM +1000, Paul Hampson wrote: > Horms, > > Here's FreeRADIUS 1.0.2-4 for sponsorship. It's a set of security fixes > SQL driver, one a two-byte buffer overflow, and one an SQL injection > attack. > > I've already discussed this on debian-release, although I am CCin

Question regarding kernel-source package versions

2005-05-26 Thread Roberto C. Sanchez
Today I noticed that the versions of kernel-source-2.4.27 and kernel-source-2.6.8 in Sarge and Sid differ. In and of itself, that is not particularly interesting. However, both packages have had one or two updates in the last few weeks. Again, nothing interesting. However, both packages have fix

Re: Please accept nautilus-media 0.8.1-3 into sarge

2005-05-26 Thread Steve Langasek
Emil, On Thu, May 26, 2005 at 08:41:57AM -0700, Emil Soleyman-Zomalan wrote: > Nautilus-media crashes Nautilus whenever a user browses a directory > containing .wav files. I was recently made aware of a patch that > disables this feature. > I have not yet uploaded the package to any of the reposi

Re: Please let oregano into testing again

2005-05-26 Thread Steve Langasek
Maximiliano, On Thu, May 26, 2005 at 09:27:03PM -0300, Maximiliano Curia wrote: > As was reported in [1], an incompatibility between oregano and libcairo was > introduced with the upload of libcairo1 version 0.4. We've been chasing > this bug for a while, and since we could find no fix, oregano w

Please let oregano into testing again

2005-05-26 Thread Maximiliano Curia
Hi, As was reported in [1], an incompatibility between oregano and libcairo was introduced with the upload of libcairo1 version 0.4. We've been chasing this bug for a while, and since we could find no fix, oregano was removed from testing a couple of days ago. But today, finally, upstream manage

Re: Accepted osh 1.7-13 (i386 source)

2005-05-26 Thread Joey Hess
Oohara Yuuma wrote: >* urgency set to high because this version fixes a buffer overflow > that causes unauthorized privilege escalation (thanks to Charles > Stevenson > <[EMAIL PROTECTED]> for the bug report) >* main.c: s/strcpy/strncpy/ and s/strcat/strncat/ to avoid a buffer >

Grab any d-v-d. (with any encryption) to you computer.

2005-05-26 Thread Dashawn
Blackmail http://www.get4fast.com/ Where there's muck there's brass Confusion not only reigns, it pours. Most people are other people. Devil's Advocate Knock on wood No Dice -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

FWD: Accepted imagemagick 6:6.0.6.2-2.4 (i386 source)

2005-05-26 Thread Joey Hess
Please review for sarge. - Forwarded message from Joey Hess <[EMAIL PROTECTED]> - From: Joey Hess <[EMAIL PROTECTED]> Date: Thu, 26 May 2005 13:17:06 -0400 To: debian-devel-changes@lists.debian.org Subject: Accepted imagemagick 6:6.0.6.2-2.4 (i386 source) Reply-To: debian-devel@lists.debi

please approve enigmail 2:0.91-4

2005-05-26 Thread Alexander Sack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, please approve enigmail 2:0.91-4. It is just a respin for mozilla 1.7.8. Thanks, - -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' O

Please accept nautilus-media 0.8.1-3 into sarge

2005-05-26 Thread Emil Soleyman-Zomalan
Nautilus-media crashes Nautilus whenever a user browses a directory containing .wav files. I was recently made aware of a patch that disables this feature. I have not yet uploaded the package to any of the repositories. I would greatly appreciate it if you would consider accepting it into sarge.

Re: wget 1.9.1-12 fixes symlink attack (CAN-2004-2014) #308622

2005-05-26 Thread Joey Hess
Noèl Köthe wrote: > wget 1.9.1-12 fixes symlink attack (CAN-2004-2014) (Debian bug#308622). > > changelog: > > wget (1.9.1-12) unstable; urgency=high > >* reverted symlink patch from Adam > (closes: Bug#310318) >* applied backported patch from Hrvoje Niksic/upstream from wget 1.10

Re: Freeze exceptions: parmetis, ccc, babel, illuminator; please be considerate to busy developers

2005-05-26 Thread Adam C Powell IV
On Thu, 2005-05-19 at 07:40 -0700, Steve Langasek wrote: > On Wed, May 18, 2005 at 06:36:07AM -0400, Adam C Powell IV wrote: > > I'm writing to request freeze exceptions for the following packages: > > > * ccc: closes 305897 (which should have been important since it > > directs user

egroupware 1.0.0.007-2.dfsg-3 for sarge

2005-05-26 Thread Peter Eisentraut
I have another one-line fix in egroupware that I want to propose for sarge: egroupware (1.0.0.007-2.dfsg-3) unstable; urgency=medium * Fixed PAM authentication (closes: #306729) -- Peter Eisentraut <[EMAIL PROTECTED]> Tue, 24 May 2005 11:11:11 +0200 The actual fix is merely: --- egroupware

Re: Accepted lbreakout2 2.5.2-2 (i386 source all)

2005-05-26 Thread Joey Hess
Daniel Burrows wrote: > lbreakout2 (2.5.2-2) unstable; urgency=high > . >* Apply backported security fixes for bad usage of s*printf/scanf. > Thanks to Moritz Muehlenhoff for spotting the problem in the upstream > changelog and for sifting through the diff to find the relevant fixes

Re: Bug#310644: zope bugs

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 01:56:28PM +0200, martin f krafft wrote: > also sprach Steve Langasek <[EMAIL PROTECTED]> [2005.05.26.1308 +0200]: > > I don't think this is RC; you're welcome to sort out what you > > believe to be the correct solution, and upload -- and if there's > > time, we can consider

Re: Bug#310644: zope bugs

2005-05-26 Thread martin f krafft
also sprach Steve Langasek <[EMAIL PROTECTED]> [2005.05.26.1308 +0200]: > I don't think this is RC; you're welcome to sort out what you > believe to be the correct solution, and upload -- and if there's > time, we can consider it. I will rather spend my time on other RC things then. Can we includ

Re: Bug#310644: zope bugs

2005-05-26 Thread Steve Langasek
On Thu, May 26, 2005 at 11:18:04AM +0200, martin f krafft wrote: > also sprach Steve Langasek <[EMAIL PROTECTED]> [2005.05.26.1110 +0200]: > > Does the package fail to install in this case? That's perfectly reasonable > > behavior if the user is ignoring critical questions from debconf. The > > s

wget 1.9.1-12 fixes symlink attack (CAN-2004-2014) #308622

2005-05-26 Thread Noèl Köthe
Hello, wget 1.9.1-12 fixes symlink attack (CAN-2004-2014) (Debian bug#308622). changelog: wget (1.9.1-12) unstable; urgency=high * reverted symlink patch from Adam (closes: Bug#310318) * applied backported patch from Hrvoje Niksic/upstream from wget 1.10 to fix symlink attack (

Re: Bug#310644: zope bugs

2005-05-26 Thread Tore Anderson
* Steve Langasek > Does the package fail to install in this case? That's perfectly > reasonable behavior if the user is ignoring critical questions from > debconf. The solution for such cases is for the user to either > preseed the debconf cache, or not expect non-interactive installs to > work.

Re: Bug#310644: zope bugs

2005-05-26 Thread martin f krafft
also sprach Tore Anderson <[EMAIL PROTECTED]> [2005.05.26.1209 +0200]: > With regard to this particular bug, I think the default should be not > to create an instance like Martin suggested yesterday. Why a package > like Zope /insists/ on creating an instance for you is beyond me.. Zope 2.6 i

Re: Please let gwget 0.95-2 go into sarge

2005-05-26 Thread Steve Langasek
reopen 310660 tags 310660 sarge thanks David, On Wed, May 25, 2005 at 09:57:31PM -0500, David Moreno Garza wrote: > An upload of gwget2 0.95-2 has been done in order to close an RC bug > (#310660) causing FTBFS/segfault on 64-bit systems (reported on IA64). > Please consider accepting it in sarg

Re: Bug#310644: zope bugs

2005-05-26 Thread martin f krafft
also sprach Steve Langasek <[EMAIL PROTECTED]> [2005.05.26.1110 +0200]: > Does the package fail to install in this case? That's perfectly reasonable > behavior if the user is ignoring critical questions from debconf. The > solution for such cases is for the user to either preseed the debconf cach

Re: Bug#310644: zope bugs

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 06:43:43PM +0200, martin f krafft wrote: > also sprach Tore Anderson <[EMAIL PROTECTED]> [2005.05.25.1814 +0200]: > > Even with this patch applied, I would think the bug would still appear > > with DEBIAN_FRONTEND=noninteractive, no? > Yes, and then we have a problem bec

Re: kmd: Integer overflow in ELF header parsing

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 02:37:26PM +0100, Roger Leigh wrote: > I have done an NMU to rebuild against the new binutils-dev. The > changes are as detailed in the diff below. > Release Team: please could you approve this for sarge? Yep, approved. Thanks, -- Steve Langasek postmodern programmer

Re: please consider autossh-1.2g-3 for sarge

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 01:21:53PM +0200, Filippo Giunchedi wrote: > I fixed the overlapped strcpy-ed strings bug and uploaded autossh-1.2g-3 to > unstable, please consider it for sarge (and also bump priority as it is set to > low) Approved. Thanks, -- Steve Langasek postmodern programmer si

Re: Please accept gtk-smooth-engine 0.6.0.1-4 into sarge

2005-05-26 Thread Steve Langasek
On Wed, May 25, 2005 at 01:05:07PM +0200, Josselin Mouette wrote: > I have uploaded a new package for the smooth engine, which fixes 2 > crashers when using themes based on it: > - a crash that happens sometimes in the firefox print dialog; > - d4x crashing upon startup. > Please consider acceptin

Re: Please accept drscheme 209-4 into testing

2005-05-26 Thread Bill Allombert
On Wed, May 25, 2005 at 08:10:57PM -0400, Ari Pollak wrote: > drscheme 209-4 has been uploaded to sid & sucessfully built on all > architectures it has previously built on. It fixes bug #310645, an RC > bug preventing upgrading/installing of drscheme from woody (I don't know > exactly that happens

Please consider kimdaba_2.0-4 for Sarge

2005-05-26 Thread David López Moreno
Hello, kimdaba_2.0-4 has been on sid for 5 days now without any problems reported and it is built for all the architectures. Current version on Sarge is 2.0-2 and has a severity important bug filed against it (Bug: #300309). In order to fix this bug, a 2.0-3 package was uploaded, with the foll

consider adding apt-cacher 0.9.2 to Sarge

2005-05-26 Thread Eduard Bloch
Hello, please consider adding apt-cacher 0.9 to Sarge. It's not an easy decission but I would do that. The current version had following problems (summary): - for many it is not useable well with apache2: seems to leave many zombies with Apache2 in with popular configuration (#310566, #281