RFE: phpicalendar

2008-09-10 Thread Al Nikolov
Hi! Please do freeze exception for this upload: phpicalendar (2.24-2) unstable; urgency=low . * Do not autocreate Apache conf.d links when install/upgrade (Closes: #498490) Thanks in advance! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Con

Re: dmraid fixes for lenny (d-i related)

2008-09-10 Thread Luk Claes
Otavio Salvador wrote: > Hello, Hi Otavio > A regression has been identified on parted (#497110) side and while > debugging it a number of simple and really useful improvements has > been found and ported from Ubuntu. > > Two of those changes affect packages that aren't part of Debian > Installe

Getting Debian to release the PowerPC port

2008-09-10 Thread Rogério Brito
Dear Paul, I would like to ask you a few things: * which is the official dtc git repository? I ask it here because dtc.ozlabs.org doesn't seem to work, but this is what is linked to from the page and the device-tree-compiler package on Debian has an outdated page (it

Approval for upload of shorewall-shell/4.0.13-2

2008-09-10 Thread Roberto C . Sánchez
Greetings, Today, upstream for Shorewall released the following: http://article.gmane.org/gmane.comp.security.shorewall/20456 http://www.shorewall.net/pub/shorewall/4.0/shorewall-4.0.13/patch-shell-4.0.13.1 I'd like to upload shorewall-shell/4.0.13-2: * Update copyright file to new proposed f

Re: fix for 445595 - smpeg NMU

2008-09-10 Thread Pierre Habouzit
On Wed, Sep 10, 2008 at 01:14:36AM +, Russell Coker wrote: > On Tuesday 26 August 2008 05:54, Pierre Habouzit <[EMAIL PROTECTED]> wrote: > > On Mon, Aug 25, 2008 at 12:49:49PM +, Russell Coker wrote: > > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445595 > > > > The patch is broken.

Asking for inclusion of cdrw-taper 0.4-2.1 in lenny

2008-09-10 Thread Sebastien Delafond
Dear Release Masters, cdrw-taper 0.4-2.1 closes 496380[0], which is marked "grave/security", and 497743[1]. The debdiff corresponding to htis NMU can be found here[2]. Could we possibly include 0.4-2.1 in lenny ? Cheers, --Seb [0] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496380 [1] htt

dmraid fixes for lenny (d-i related)

2008-09-10 Thread Otavio Salvador
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, A regression has been identified on parted (#497110) side and while debugging it a number of simple and really useful improvements has been found and ported from Ubuntu. Two of those changes affect packages that aren't part of Debian Installer

Freeze exception request for crosshurd_1.7.33

2008-09-10 Thread Michael Banck
Hi, crosshurd_1.7.33 fixes a rather severe problem when using it to install Debian GNU/Hurd, see #493129. As libpthread-stubs0 is not Essential, it was not downloaded/unpacked automatically when it became available, but the core Hurd packages now depend on it; without it, the Hurd hangs at bootup

Re: Ada packages for Lenny

2008-09-10 Thread Luk Claes
Ludovic Brenta wrote: > Marc 'HE' Brockschmidt <[EMAIL PROTECTED]> writes: >> Ludovic Brenta <[EMAIL PROTECTED]> writes: >>> Yes, I did read that, and I followed this to the letter: I contacted >>> debian-release about uploading to testing-proposed-updates. I reiterate >>> my request for unblock, a

Re: Please unblock pango1.0/1.20.5-2

2008-09-10 Thread Luk Claes
Otavio Salvador wrote: > Josselin Mouette <[EMAIL PROTECTED]> writes: > >> Le samedi 30 août 2008 à 19:25 +0200, Luk Claes a écrit : >>> Josselin Mouette wrote: Hi, please consider pango1.0/1.20.5-2 for lenny. There is only one significant change, which was requested by Malayal

Please unblock dtc-xen 0.3.21-1

2008-09-10 Thread Thomas Goirand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Here's the changelog: * New upstream release correcting the killVPS() method that was notworking. * Removed the link in /var/www to satisfy the Debian policy. * Added comments in README.Debian on how to manually activate the stats page. *

freeze exception request: zoph

2008-09-10 Thread Edelhard Becker
Hi release team, since my package zoph entered testing i fixed #417259 really after it has been unarchived by Lucas Nussbaum on Sat, 09 Aug 2008 and reopened by me on Mon, 11 Aug 2008 (see 0.7.1-2 below). In Lenny this bug is RC as noticed by Thijs Kinkhorst in a comment. With 0.7.3-2 i fixed ano

Re: Please unblock pango1.0/1.20.5-2

2008-09-10 Thread Otavio Salvador
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josselin Mouette <[EMAIL PROTECTED]> writes: > Le samedi 30 août 2008 à 19:25 +0200, Luk Claes a écrit : >> Josselin Mouette wrote: >> > Hi, >> > >> > please consider pango1.0/1.20.5-2 for lenny. There is only one >> > significant change, which was r

Re: Ada packages for Lenny

2008-09-10 Thread Ludovic Brenta
Marc 'HE' Brockschmidt <[EMAIL PROTECTED]> writes: > Ludovic Brenta <[EMAIL PROTECTED]> writes: >> Yes, I did read that, and I followed this to the letter: I contacted >> debian-release about uploading to testing-proposed-updates. I reiterate >> my request for unblock, and that I reiterate that I a

Re: gcjwebplugin runs untrusted code without sandbox

2008-09-10 Thread Osamu Aoki
Hi, On Tue, Sep 09, 2008 at 11:11:45PM +0100, Ben Hutchings wrote: > On Tue, Sep 09, 2008 at 03:12:54PM +0200, Robert Millan wrote: ... > When a user navigates to a web page, they want to see that page. Any > prompts on the way tend to be interpreted as "do you want to see this > web page or not?

Re: gcjwebplugin runs untrusted code without sandbox

2008-09-10 Thread Robert Millan
On Tue, Sep 09, 2008 at 11:11:45PM +0100, Ben Hutchings wrote: > > I can't believe you're actually arguing that the solution against blindly > > trusting a website is blindly trusting a binary blob. > > I would rather use a secure free plugin than a secure non-free plugin, > but apparently that do

Re: gcjwebplugin runs untrusted code without sandbox

2008-09-10 Thread Robert Millan
On Tue, Sep 09, 2008 at 11:11:45PM +0100, Ben Hutchings wrote: > It's not arbitrary. As it stands, this package is a security hole > just waiting to be exploited if it gets released. I take it "gdebi" (or whatever it's called) is also a security hole then? It installs untrusted data when the use

Unblocks for some NMUs

2008-09-10 Thread Chris Lamb
Hi -release, Please unblock: aptoncd 0.1-1.2 gdrae 0.1-1.1) pmccabe 2.4+nmu2 aptoncd (0.1-1.2) unstable; urgency=medium * Non-maintainer upload. * Replace usage of hard-coded and predictable temporary directory names to prevent against symlink-based attacks. Based on a patch by Marc

Re: freeze exception request: rus-ispell and ispell-et

2008-09-10 Thread Holger Levsen
Hi, On Tuesday 09 September 2008 13:20, Martin-Éric Racine wrote: > It turns out that I had to partially roll-back the changes in ispell. > > http://mentors.debian.net/debian/pool/main/r/rus-ispell/rus-ispell_0.99g5-4 >.dsc uploaded to ftp-master. regards, Holger pgp2W16cfJfRQ.pgp Des

Re: freeze exception for cacao-oj6

2008-09-10 Thread Bastian Blank
On Fri, Sep 05, 2008 at 11:16:02PM +0200, Matthias Klose wrote: > - s390: rebuilt by hand on raptor/unstable without problems. >Bastian pointed to #479952 as a possible reason. would it >be possible to do a test-rebuild on the machine which is >used security updates? Works according t

Re: freeze exception for cacao-oj6

2008-09-10 Thread Florian Weimer
* Matthias Klose: > - s390: rebuilt by hand on raptor/unstable without problems. >Bastian pointed to #479952 as a possible reason. would it >be possible to do a test-rebuild on the machine which is >used security updates? I think we can apply a real security patch to all the Sun-base

Please unblock ruby1.8/1.8.7.72-1 (Was: permission to upload ruby1.8 1.8.7p72?)

2008-09-10 Thread Lucas Nussbaum
On 09/09/08 at 20:35 +0200, Luk Claes wrote: > >> So, question: can I prepare and upload 1.8.7p72? > > Yes, please upload. Uploaded. Please unblock ruby1.8/1.8.7.72-1 Cheers, Lucas -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTE

please unblock openoffice.org 1:2.4.1-9

2008-09-10 Thread Rene Engelhard
Hi, unfortunately the decision to fix the senddoc issue in openoffice.org with post-processing a file instead of updating ooo-build (which in this state of the freeze and given my connectivity right now would have been a hassle) caused a regression in that a script which has to be +x wasn't anym

Re: conky for lenny (exception possible?)

2008-09-10 Thread Kapil Hari Paranjape
Hello, On Wed, 10 Sep 2008, Marc 'HE' Brockschmidt wrote: > > If not, I would backport some of the bug fixes (like the buffer > > overflow) and create a 1.6.0-2. > > Please do. I have created the necessary changes. (The interdiff between 1.6.0-1 and 1.6.0-2) is attached. Could you please confir