Nabble - debian-release

Please unblock linux-2.6/2.6.26-8

2008-10-11T08:10:16Z

Hi folks

Please unblock linux-2.6/2.6.26-8.

It includes several bug and security fixes. Also it adds the
oldstyle-Xen patch from SuSE, which is no really pretty but a working
solution for the people out there who uses Xen.

Bastian

--
Captain's Log, star date 21:34.5...

signature.asc (204 bytes) Download Attachment

Please allow rubyluabridge/0.6.0-3 into Lenny

2008-10-11T07:54:26Z

Please allow rubyluabridge/0.6.0-3 into Lenny.

Changelog:

* Quit installing the shared library into /usr/lib/ruby/1.8/i486-linux
on non-x86 platforms

The debdiff is attached.

Regards,

-Roberto

--
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

diff -u rubyluabridge-0.6.0/debian/rules rubyluabridge-0.6.0/debian/rules --- rubyluabridge-0.6.0/debian/rules +++ rubyluabridge-0.6.0/debian/rules @@ -32,9 +32,10 @@ dh_testroot dh_clean -k dh_installdirs - - # Add here commands to install the package into debian/rubyluabridge. - #$(MAKE) DESTDIR=$(CURDIR)/debian/rubyluabridge install + $(MAKE) DESTDIR=$(CURDIR)/debian/rubyluabridge install + mkdir -p $(CURDIR)/debian/rubyluabridge/usr/lib/ruby/1.8/ + mv $(CURDIR)/debian/rubyluabridge/usr/local/lib/site_ruby/1.8/* $(CURDIR)/debian/rubyluabridge/usr/lib/ruby/1.8/ + rm -rf $(CURDIR)/debian/rubyluabridge/usr/local # Build architecture-independent files here. @@ -48,7 +49,7 @@ dh_installchangelogs dh_installdocs dh_installexamples - dh_install + dh_install --sourcedir=$(CURDIR)/debian/rubyluabridge dh_installman dh_link dh_strip diff -u rubyluabridge-0.6.0/debian/libluabridge-ruby1.8.install rubyluabridge-0.6.0/debian/libluabridge-ruby1.8.install --- rubyluabridge-0.6.0/debian/libluabridge-ruby1.8.install +++ rubyluabridge-0.6.0/debian/libluabridge-ruby1.8.install @@ -1 +1 @@ -rubyluabridge.so usr/lib/ruby/1.8/i486-linux +usr/lib/ruby/1.8/*/rubyluabridge.so diff -u rubyluabridge-0.6.0/debian/changelog rubyluabridge-0.6.0/debian/changelog --- rubyluabridge-0.6.0/debian/changelog +++ rubyluabridge-0.6.0/debian/changelog @@ -1,3 +1,10 @@ +rubyluabridge (0.6.0-3) unstable; urgency=medium + + * Quit installing the shared library into /usr/lib/ruby/1.8/i486-linux + on non-x86 platforms + + -- Roberto C. Sanchez <roberto@...> Sat, 11 Oct 2008 10:24:54 -0400 + rubyluabridge (0.6.0-2) unstable; urgency=high * Bump Standards-Version to 3.8.0 (no changes).

signature.asc (196 bytes) Download Attachment

Re: Bug#492837: remove mozilla-bookmarksftp from lenny

2008-10-11T07:44:24Z

Indeed it is useless in lenny, thus should be removed from release for
the sake of clarity, but I would drag it within sid -- may be some
effort would appear to fix it up to be compatible with firefox 3.0, so
we could patch it within Debian.

Cheers
Yarik

On Sat, 11 Oct 2008, Thomas Viehmann wrote:

> Hi,

> according to the discussion in #492837, mozilla-bookmarksftp is
> completely unusable with the lenny's version of iceweasel and "fixing"
> will be finding a new upstream (because it's dead) and uploading that.
> That's too invasive at this point of the release cycle, so
> mozilla-bookmarksftp should be removed from lenny if not lenny and unstable.

> Kind regards

> T.
--
Yaroslav Halchenko
Research Assistant, Psychology Department, Rutgers-Newark
Student Ph.D. @ CS Dept. NJIT
Office: (973) 353-5440x263 | FWD: 82823 | Fax: (973) 353-1171
101 Warren Str, Smith Hall, Rm 4-105, Newark NJ 07102
WWW: http://www.linkedin.com/in/yarik

signature.asc (204 bytes) Download Attachment

Re: unblock mc

2008-10-11T06:51:50Z

* Patrick Winnertz [Thu, 09 Oct 2008 12:33:46 +0200]:

> Hey,

> > I don't understand the diff very well. A lot of stuff is dropped from
> > 07_srpm_support.patch without any mention in the changelog...
> I accidentally patched in a mc.ext.in.orig file... this file is completely
> removed since it is useless.

> Hope this helps

Ok, unblocked.

--
Adeodato Simó dato at net.com.org.es
Debian Developer adeodato at debian.org

Listening to: Polar - It looks like tomorrow

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: Please migrate 2.6.27 to the lenny release

2008-10-11T06:28:46Z

Michael Vogt <lists@...> writes:

> Hey,
> I just would like to know, if you are going to include the new 2.6.27
> kernel into the lenny-release (or at least rebuild the initrd as
> written in [1] as default). It has some bugfixes with pata_marvell
> (See changelog [2], commit
> 5b66c829bf5c65663b2f68ee6b42f6e834cd39cd). Without this fix, you are
> unable to use the IDE-Drives which are connected with Marvell 6121.

I don't believe it will be done however this fix could be
backported. Is this fix included in last kernel stable update
(2.6.26.y)?

--
O T A V I O S A L V A D O R
---------------------------------------------
E-mail: otavio@... UIN: 5906116
GNU/Linux User: 239058 GPG ID: 49A5F855
Home Page: http://otavio.ossystems.com.br
---------------------------------------------
"Microsoft sells you Windows ... Linux gives
you the whole house."

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

please consider openjdk-6 6b11-9 for testing

2008-10-11T06:27:37Z

Fixes an installation problem (RC #499669), and now builds reliably on
the s390 buildd.

Matthias

openjdk-6 (6b11-9) unstable; urgency=low

* Don't use our version of uname on 64bit archs.

-- Matthias Klose <doko@...> Mon, 06 Oct 2008 06:09:06 +0000

openjdk-6 (6b11-8) unstable; urgency=medium

* Build-depend on fastjar (>= 2:0.95-4) to generate proper jar files.
* Apply fix taken from the IcedTea trunk:
- Update the "Fix segfaults with arbitrary long locale variables" patch.
* Provide our version of uname, which is used all over the build. Some
buildds don't default to 32bit userland.
* openjdk-6-jre-headless: Make libnss-mdns a suggestion instead of a
recommendation.
* Extend heap during activation of class data sharing. Closes: #499669.

-- Matthias Klose <doko@...> Sun, 05 Oct 2008 12:18:54 +0200

openjdk-6 (6b11-7) unstable; urgency=low

* Apply fixes taken from the IcedTea trunk:
- Add atomic operations for the m68k zero port (maybe the build
finishes before lenny is released ...).
- Fix segfaults with arbitrary long locale variables. Closes: #497666.
- Remove checks for maximum allowable cryptographic strength.

-- Matthias Klose <doko@...> Sat, 13 Sep 2008 10:00:22 +0200

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

please consider twisted 8.1.0-4 for testing

2008-10-11T06:23:28Z

please consider twisted 8.1.0-4 for testing, fixing an upgrade problem
with the plugin cache, a build failure on GNU/kFreeBSD and some minor
things.

Matthias

twisted (8.1.0-4) unstable; urgency=low

* Move the cache update from python-twisted into python-twisted-core.
Closes: #500942.

Plugins should update the cache on package install (postinst) and
removal (postrm remove) by updating the cache. See the postinst
script of python-twisted-core how to update the cache.

* Fix PortableGtkReactor (now able to run trial test suite with the gtk2
reactor). Closes: #499311.
* Don't install twisted/test/generator_failure_tests.py, syntax errors
with python2.4. Closes: #492830.
* Fix manhole to work with python-gtk2 (>= 2.10). Closes: #469105.
* mktap(1) description of options fixed in an earlier version.
Closes: #278194.
* mktap news fixed in an earlier version. Closes: #278196.
* Fix build failure on GNU/kFreeBSD (Petr Salinger). Closes: #490770.

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: Bug#497110: partman-dmraid: obsolete component; should not be included in Lenny

2008-10-11T06:07:40Z

Thomas Viehmann wrote:

> Hi,
>
> Frans Pop wrote:
>> Please remove partman-dmraid (source and udeb) from Lenny.
>
>> Because of recent changes in libparted, partman and other D-I components
>> that have now migrated to testing this udeb is no longer needed. I'll
>> also file a BR against ftp.d.o requesting removal from unstable.
> The unstable removal is done, so IIUIC the package should be on its way
> out of testing as well.

Also removed its udebs from testing.

Cheers

Luk

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Please unblock xmlto/0.0.20-3

2008-10-11T05:59:37Z

Please unblock xmlto:

> xmlto (0.0.20-3) unstable; urgency=low
>
> * debian/control (Suggests): Added xmltex now providing passivetex
> (closes: #416622, #440518). Thanks to Robert Wohlrab.
> (Description): Added information about fop/docbook-xsl as
> alternative to passivetex.
> * debian/patches/499200_cannot_parse_XSLTPARAMS.dpatch: Added.
> - xmlto.in: Fixed error message using --stringparam switch
> (closes: #499200). Thanks to Zed Pobre.
> * debian/patches/00list: Adjusted.

These fixes 2 important bugs:

#416622, #440518: passivetex had been removed a while ago. Now a user
informed me that it has been re-added as part of the xmltex package. So
xmltex has been added to Suggests in debian/control. This re-adds
important functionality to the package (DVI/PDF/PS output).

#499200: Using the --stringparam option results in an error just because
a variable was not declared as a variable. The fix was pretty easy
(debian/patches/499200_cannot_parse_XSLTPARAMS.dpatch).

Further the description in debian/control has been extended by one
sentence to tell about docbook-xsl/fop as alternative to passivetex.

The debdiff is attached. The changes are safe.

Regards, Daniel

[debdiff]

diff -u xmlto-0.0.20/debian/control xmlto-0.0.20/debian/control --- xmlto-0.0.20/debian/control +++ xmlto-0.0.20/debian/control @@ -3,7 +3,9 @@ Priority: optional Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@...> Uploaders: Daniel Leidert (dale) <daniel.leidert@...> -Build-Depends: debhelper (>> 5), dpatch, docbook-xsl (>= 1.64.1.0), docbook-xml (>= 4.2-8), xsltproc (>= 1.0.29), libxml2-utils, libpaper-utils, sgml-base +Build-Depends: debhelper (>> 5), dpatch, docbook-xsl (>= 1.64.1.0), + docbook-xml (>= 4.2-8), xsltproc (>= 1.0.29), libxml2-utils, + libpaper-utils, sgml-base Standards-Version: 3.7.3 Homepage: http://cyberelk.net/tim/software/xmlto/ Vcs-Browser: http://svn.debian.org/wsvn/debian-xml-sgml/packages/xmlto/trunk/ @@ -14,7 +16,7 @@ Architecture: any Depends: ${shlibs:Depends}, xsltproc (>= 1.1.12-8), docbook-xsl (>= 1.64.1.0), docbook-xml (>= 4.2-8), debianutils (>= 1.16), libxml2-utils, sgml-base Recommends: libpaper-utils -Suggests: fop | passivetex (>= 1.23), w3m | lynx | links +Suggests: fop | passivetex (>= 1.23) | xmltex (>= 1.9.debian.1), w3m | lynx | links Description: XML-to-any converter xmlto is a front-end to an XSL toolchain. It chooses an appropriate stylesheet for the conversion you want and applies it using an external @@ -29 +31 @@ - required. + required. Alternatively docbook-xsl and fop produce PDF and PS output. diff -u xmlto-0.0.20/debian/changelog xmlto-0.0.20/debian/changelog --- xmlto-0.0.20/debian/changelog +++ xmlto-0.0.20/debian/changelog @@ -1,3 +1,16 @@ +xmlto (0.0.20-3) unstable; urgency=low + + * debian/control (Suggests): Added xmltex now providing passivetex + (closes: #416622, #440518). Thanks to Robert Wohlrab. + (Description): Added information about fop/docbook-xsl as + alternative to passivetex. + * debian/patches/499200_cannot_parse_XSLTPARAMS.dpatch: Added. + - xmlto.in: Fixed error message using --stringparam switch + (closes: #499200). Thanks to Zed Pobre. + * debian/patches/00list: Adjusted. + + -- Daniel Leidert (dale) <daniel.leidert@...> Thu, 09 Oct 2008 11:03:38 +0200 + xmlto (0.0.20-2) unstable; urgency=low * debian/rules (get-orig-source): Use uscan and its --repack feature. diff -u xmlto-0.0.20/debian/patches/00list xmlto-0.0.20/debian/patches/00list --- xmlto-0.0.20/debian/patches/00list +++ xmlto-0.0.20/debian/patches/00list @@ -2,0 +3 @@ +499200_cannot_parse_XSLTPARAMS only in patch2: unchanged: --- xmlto-0.0.20.orig/debian/patches/499200_cannot_parse_XSLTPARAMS.dpatch +++ xmlto-0.0.20/debian/patches/499200_cannot_parse_XSLTPARAMS.dpatch @@ -0,0 +1,25 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 499200_cannot_parse_XSLTPARAMS.dpatch by Daniel Leidert (dale) <daniel.leidert@...> +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: * xmlto.in: Using the --stringparam option results in an error message: +## DP: 'warning: failed to load external entity "XSLTPARAMS" [..]'. The patch +## DP: has been suggested by Zed Pobre. +## DP: +## DP: <URL:http://bugs.debian.org/499200> + +@DPATCH@ +diff -urNad trunk~/xmlto.in trunk/xmlto.in +--- trunk~/xmlto.in 2008-10-09 10:47:10.000000000 +0200 ++++ trunk/xmlto.in 2008-10-09 10:48:23.000000000 +0200 +@@ -272,8 +272,8 @@ + ;; + --stringparam) + MYPARAM="$2" +- XSLTPARAMS="XSLTPARAMS --stringparam ${MYPARAM%=*}" +- XSLTPARAMS="XSLTPARAMS $MYPARAM#*=}" ++ XSLTPARAMS="$XSLTPARAMS --stringparam ${MYPARAM%=*}" ++ XSLTPARAMS="$XSLTPARAMS $MYPARAM#*=}" + shift 2 + ;; + --noclean)

Re: Lenny-ignore tag request for #477751 (sgml-base)

2008-10-11T05:52:37Z

Am Freitag, den 10.10.2008, 16:40 +0200 schrieb Daniel Leidert:
> Am Dienstag, den 07.10.2008, 15:11 +0200 schrieb Daniel Leidert:
>
> > Second try: Bug http://bugs.debian.org/477751 (sgml-base) is about how
> > the whole catalog system works. To "solve" it a full design change is
> > necessary and planned for Lenny+1. I would like to tag this bug
> > `lenny-ignore'.
>
> Any objections? Otherwise I'm going to tag it.

I got an ok by Osamu Aoki and went for it.

Regards, Daniel

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Please allow postgresql-common 91 into testing

2008-10-11T05:16:31Z

Hi release team,

p-common 91 just updates two debconf translations and bumps
standards-version, no code changes at all. It has been in unstable for
a month without problems:

postgresql-common (91) unstable; urgency=low
.
* Update Brazilian Portugese debconf translations, thanks Eder L. Marques!
(Closes: #493031)
* Add Romanian debconf translations, thanks Igor Stirbu!
(Closes: #491823)
* debian/control: Bump Standards-Version (no changes necessary).

Can you please let this into testing?

Thanks,

Martin
--
Martin Pitt | http://www.piware.de
Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org)

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

remove mlview from lenny

2008-10-11T04:22:08Z

Hi,

mlview seems to have quite a few crasher bugs (#500940, #500619) and is
dead as a parrot upstream (one unanswered user question in 2007, no ML
activity at all in 2008).
As such, it'd be best to not continue having it in unsteble, let alone
release it with lenny.

Kind regards

T.
--
Thomas Viehmann, http://thomas.viehmann.net/

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

remove mozilla-bookmarksftp from lenny

2008-10-11T04:13:45Z

Hi,

according to the discussion in #492837, mozilla-bookmarksftp is
completely unusable with the lenny's version of iceweasel and "fixing"
will be finding a new upstream (because it's dead) and uploading that.
That's too invasive at this point of the release cycle, so
mozilla-bookmarksftp should be removed from lenny if not lenny and unstable.

Kind regards

T.
--
Thomas Viehmann, http://thomas.viehmann.net/

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: Please allow cups 1.3.8-1lenny2 into testing (security update)

2008-10-11T04:12:07Z

Martin Pitt [2008-10-11 13:10 +0200]:
> cups (1.3.8-1lenny2) unstable; urgency=high

Whoops, forgot to attach debdiff, here it comes.

Martin
--
Martin Pitt | http://www.piware.de
Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org)

diff -u cups-1.3.8/debian/changelog cups-1.3.8/debian/changelog
--- cups-1.3.8/debian/changelog
+++ cups-1.3.8/debian/changelog
@@ -1,3 +1,26 @@
+cups (1.3.8-1lenny2) unstable; urgency=high
+
+ * Urgency high due to security fixes.
+ * debian/control: Package development moved to bzr, update Vcs- tags.
+ * Add CVE-2008-3641_hpgl_filter_overflow.dpatch: Fix buffer overflow
+ triggered by invalid number of pens in the HPGL filter. (CVE-2008-3641,
+ STR #2911)
+ * Add CVE-2008-3639_sgi_filter_overflow.dpatch: Fix buffer overflow due to
+ unchecked boundary in the SGI filter. (CVE-2008-3639, STR #2918)
+ * Add CVE-2008-3640_texttops_overflow.dpatch: Fix buffer overflow by
+ specifying invalidly large or negative page metrics. (CVE-2008-3640,
+ STR #2919)
+ * Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change
+ introduced in STR #2911, because it changes the color mapping (e. g. "SP1"
+ would now select a white pen instead of a black one, and "SP0" would not
+ be valid at all any more). Also fix a remaining off-by-one loop. (STR
+ #2966)
+ * Add admin-fr-translation.dpatch: Update the French admin.tmpl, to have the
+ missing "Find new printer" button and the "Subscriptions" section. Thanks
+ to Yves-Alexis Perez! (Closes: #475270)
+
+ -- Martin Pitt <mpitt@...> Sat, 11 Oct 2008 12:53:30 +0200
+
cups (1.3.8-1lenny1) unstable; urgency=medium

Cherrypick bug fixes from trunk/experimental which need to go into Lenny.
diff -u cups-1.3.8/debian/control cups-1.3.8/debian/control
--- cups-1.3.8/debian/control
+++ cups-1.3.8/debian/control
@@ -13,8 +13,8 @@
Martin Pitt <mpitt@...>, Roger Leigh <rleigh@...>,
Martin-Éric Racine <q-funk@...>, Masayuki Hatta (mhatta) <mhatta@...>,
Jeff Licquia <licquia@...>
-Vcs-Svn: svn://svn.debian.org/svn/pkg-cups/cupsys/trunk
-Vcs-Browser: http://svn.debian.org/wsvn/pkg-cups/cupsys/trunk
+Vcs-Bzr: bzr+ssh://bzr.debian.org/pkg-cups/cups/lenny
+Vcs-Browser: http://bazaar.launchpad.net/~pitti/cups/debian-lenny

Package: libcups2
Priority: optional
diff -u cups-1.3.8/debian/patches/00list cups-1.3.8/debian/patches/00list
--- cups-1.3.8/debian/patches/00list
+++ cups-1.3.8/debian/patches/00list
@@ -2,6 +2,9 @@
manpage-typos.dpatch
pdftops-cups-1.4.dpatch
pdftops-dont_fail_on_cancel.dpatch
+CVE-2008-3641_hpgl_filter_overflow.dpatch
+CVE-2008-3639_sgi_filter_overflow.dpatch
+CVE-2008-3640_texttops_overflow.dpatch

# patches accepted and committed upstream
freebsd.dpatch
@@ -11,6 +14,8 @@
ppd-poll-with-client-conf.dpatch
# no answer yet, po4a might not be appropriate
manpage-translations.dpatch
+admin-fr-translation.dpatch
+hpgl-regression.dpatch

# Debian patches
removecvstag.dpatch
only in patch2:
unchanged:
--- cups-1.3.8.orig/debian/patches/admin-fr-translation.dpatch
+++ cups-1.3.8/debian/patches/admin-fr-translation.dpatch
@@ -0,0 +1,63 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## admin-fr-translation.dpatch by Yves-Alexis Perez <corsac@...>
+##
+## DP: Update the French admin.tmpl, to have the missing "Find new printer"
+## DP: button and the "Subscriptions" section. (Debian #475270, STR #2963)
+@DPATCH@
+diff -urNad trunk~/templates/fr/admin.tmpl trunk/templates/fr/admin.tmpl
+--- trunk~/templates/fr/admin.tmpl 2007-03-19 17:01:28.000000000 +0100
++++ trunk/templates/fr/admin.tmpl 2008-10-09 10:25:11.000000000 +0200
+@@ -6,6 +6,9 @@
+ <P>
+ <A HREF="/admin?op=add-printer"><IMG
+ SRC="/images/button-add-printer.gif" ALT="Ajouter une imprimante" CLASS="button"></A>
++<A HREF="/admin?op=find-new-printers"><IMG
++SRC="/images/button-find-new-printers.gif"
++ALT="Trouver de nouvelles imprimantes" CLASS="button"></A>
+ <A HREF="/printers/"><IMG SRC="/images/button-manage-printers.gif"
+ ALT="Administrer les imprimantes" CLASS="button"></A>
+ {have_samba?<A HREF="/admin/?op=export-samba"><IMG
+@@ -13,13 +16,6 @@
+ CLASS="button"></A>:}
+ </P>
+
+-{#device_uri=0?:<P><B>Nouvelles imprimantes détectées:</B></P><UL>{[device_uri]
+-<LI><A HREF="/admin?op=add-printer&{device_options}"><IMG
+-SRC="/images/button-add-this-printer.gif" ALT="Ajouter cette imprimante" CLASS="button"
+-ALIGN="MIDDLE"></A>
+-{device_make_and_model} ({device_info})</LI>
+-}</UL>}
+-
+ <H2 CLASS="title">Classes</H2>
+
+ <P>
+@@ -67,10 +63,10 @@
+ imprimantes partagées par d'autres systèmes<BR>
+ <INPUT TYPE="CHECKBOX" NAME="SHARE_PRINTERS" {?share_printers}> Partager les
+ imprimantes publiques connectées à ce système<BR>
+- <INPUT TYPE="CHECKBOX" NAME="REMOTE_ANY" {?remote_any}> Allow printing from the Internet<BR>
++ <INPUT TYPE="CHECKBOX" NAME="REMOTE_ANY" {?remote_any}> Autoriser l'impression depuis Internet<BR>
+ <INPUT TYPE="CHECKBOX" NAME="REMOTE_ADMIN" {?remote_admin}> Autoriser
+ l'administration à distance<BR>
+-{have_gssapi?<INPUT TYPE="CHECKBOX" NAME="KERBEROS" {?kerberos}> Use Kerberos authentication<BR>:}
++{have_gssapi?<INPUT TYPE="CHECKBOX" NAME="KERBEROS" {?kerberos}> Utiliser l'identification par Kerberos<BR>:}
+ <INPUT TYPE="CHECKBOX" NAME="USER_CANCEL_ANY" {?user_cancel_any}> Autoriser les
+ utilisateurs à annuler n'importe quelle tâche ( pas seulement les leurs )<BR>
+ <INPUT TYPE="CHECKBOX" NAME="DEBUG_LOGGING" {?debug_logging}> Enregistrer les
+@@ -83,3 +79,16 @@
+
+ </TD></TR>
+ </TABLE>
++
++<H2 CLASS="title">Abonnements</H2>
++
++<P>
++<A HREF="/admin/?op=add-rss-subscription"><IMG SRC="/images/button-add-rss-subscription.gif" ALT="S'abonner au RSS" CLASS="button"></A>
++</P>
++
++{notify_subscription_id?<TABLE WIDTH="100%" CELLSPACING="0" CELLPADDING="0" SUMMARY="Abonnements RSS">
++<THEAD><TR CLASS="data"><TH>ID</TH><TH>Nom</TH><TH>?v?nements</TH><TH>File</TH></TR></THEAD>
++<TBODY>{[notify_subscription_id]
++<TR><TD><A HREF="{notify_recipient_uri}">{notify_subscription_id}</A></TD><TD NOWRAP><A HREF="{notify_recipient_uri}">{notify_recipient_name}</A> <A HREF="/admin/?op=cancel-subscription&notify_subscription_id={notify_subscription_id}"><IMG SRC="/images/button-cancel-subscription.gif" CLASS="button" ALT="Cancel RSS Subscription"></A> </TD><TD>{notify_events}</TD><TD NOWRAP> {notify_printer_name?{notify_printer_name}:All Queues}</TD></TR>}
++</TBODY>
++</TABLE>:}
only in patch2:
unchanged:
--- cups-1.3.8.orig/debian/patches/hpgl-regression.dpatch
+++ cups-1.3.8/debian/patches/hpgl-regression.dpatch
@@ -0,0 +1,29 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## hpgl-regression.dpatch by Martin Pitt <mpitt@...>
+##
+## DP: Revert the SP_select_pen() enumeration change introduced in STR #2911,
+## DP: because it changes the color mapping (e. g. "SP1" would now select a
+## DP: white pen instead of a black one, and "SP0" would not be valid at all
+## DP: any more). Also fix a remaining off-by-one loop. (STR #2966)
+@DPATCH@
+diff -urNad trunk~/filter/hpgl-attr.c trunk/filter/hpgl-attr.c
+--- trunk~/filter/hpgl-attr.c 2008-10-09 22:12:03.000000000 +0200
++++ trunk/filter/hpgl-attr.c 2008-10-10 10:55:46.000000000 +0200
+@@ -214,7 +214,7 @@
+ "DEBUG: HP-GL/2 \'NP\' command with invalid number of "
+ "parameters (%d)!\n", num_params);
+
+- for (i = 0; i <= PenCount; i ++)
++ for (i = 0; i < PenCount; i ++)
+ Pens[i].width = PenWidth;
+
+ PC_pen_color(0, NULL);
+@@ -433,7 +433,7 @@
+ fprintf(stderr, "DEBUG: HP-GL/2 \'SP\' command with invalid pen (%d)!\n",
+ (int)params[0].value.number);
+ else
+- PenNumber = (int)params[0].value.number - 1;
++ PenNumber = (int)params[0].value.number;
+
+ if (PageDirty)
+ printf("%.3f %.3f %.3f %.2f SP\n", Pens[PenNumber].rgb[0],
only in patch2:
unchanged:
--- cups-1.3.8.orig/debian/patches/CVE-2008-3640_texttops_overflow.dpatch
+++ cups-1.3.8/debian/patches/CVE-2008-3640_texttops_overflow.dpatch
@@ -0,0 +1,90 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## CVE-2008-3640_texttops_overflow.dpatch by Martin Pitt <mpitt@...>
+##
+## DP: Fix buffer overflow by specifying invalidly large or negative page
+## DP: metrics. (CVE-2008-3640, STR #2919)
+
+@DPATCH@
+diff -urNad lenny~/filter/textcommon.c lenny/filter/textcommon.c
+--- lenny~/filter/textcommon.c 2008-07-12 00:48:49.000000000 +0200
++++ lenny/filter/textcommon.c 2008-10-08 09:15:55.000000000 +0200
+@@ -3,7 +3,7 @@
+ *
+ * Common text filter routines for the Common UNIX Printing System (CUPS).
+ *
+- * Copyright 2007 by Apple Inc.
++ * Copyright 2007-2008 by Apple Inc.
+ * Copyright 1997-2007 by Easy Software Products.
+ *
+ * These coded instructions, statements, and computer programs are the
+@@ -605,14 +605,38 @@
+ !strcasecmp(val, "yes");
+
+ if ((val = cupsGetOption("columns", num_options, options)) != NULL)
++ {
+ PageColumns = atoi(val);
+
++ if (PageColumns < 1)
++ {
++ _cupsLangPrintf(stderr, _("ERROR: Bad columns value %d!\n"), PageColumns);
++ return (1);
++ }
++ }
++
+ if ((val = cupsGetOption("cpi", num_options, options)) != NULL)
++ {
+ CharsPerInch = atof(val);
+
++ if (CharsPerInch <= 0.0)
++ {
++ _cupsLangPrintf(stderr, _("ERROR: Bad cpi value %f!\n"), CharsPerInch);
++ return (1);
++ }
++ }
++
+ if ((val = cupsGetOption("lpi", num_options, options)) != NULL)
++ {
+ LinesPerInch = atof(val);
+
++ if (LinesPerInch <= 0.0)
++ {
++ _cupsLangPrintf(stderr, _("ERROR: Bad lpi value %f!\n"), LinesPerInch);
++ return (1);
++ }
++ }
++
+ if (PrettyPrint)
+ PageTop -= 216.0f / LinesPerInch;
+
+diff -urNad lenny~/filter/texttops.c lenny/filter/texttops.c
+--- lenny~/filter/texttops.c 2008-07-12 00:48:49.000000000 +0200
++++ lenny/filter/texttops.c 2008-10-08 09:15:55.000000000 +0200
+@@ -173,6 +173,14 @@
+ SizeColumns = (PageRight - PageLeft) / 72.0 * CharsPerInch;
+ SizeLines = (PageTop - PageBottom) / 72.0 * LinesPerInch;
+
++ if (SizeColumns <= 0 || SizeColumns > 32767 ||
++ SizeLines <= 0 || SizeLines > 32767)
++ {
++ _cupsLangPrintf(stderr, _("ERROR: Unable to print %dx%d text page!\n"),
++ SizeColumns, SizeLines);
++ exit(1);
++ }
++
+ Page = calloc(sizeof(lchar_t *), SizeLines);
+ Page[0] = calloc(sizeof(lchar_t), SizeColumns * SizeLines);
+ for (i = 1; i < SizeLines; i ++)
+@@ -187,6 +195,13 @@
+ else
+ ColumnWidth = SizeColumns;
+
++ if (ColumnWidth <= 0)
++ {
++ _cupsLangPrintf(stderr, _("ERROR: Unable to print %d text columns!\n"),
++ PageColumns);
++ exit(1);
++ }
++
+ /*
+ * Output the DSC header...
+ */
only in patch2:
unchanged:
--- cups-1.3.8.orig/debian/patches/CVE-2008-3641_hpgl_filter_overflow.dpatch
+++ cups-1.3.8/debian/patches/CVE-2008-3641_hpgl_filter_overflow.dpatch
@@ -0,0 +1,136 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## CVE-2008-3641_hpgl_filter_overflow.dpatch by Martin Pitt <mpitt@...>
+##
+## DP: Fix buffer overflow triggered by invalid number of pens in the HPGL
+## DP: filter. (CVE-2008-3641, STR #2911)
+
+@DPATCH@
+diff -urNad lenny~/filter/hpgl-attr.c lenny/filter/hpgl-attr.c
+--- lenny~/filter/hpgl-attr.c 2008-07-12 00:48:49.000000000 +0200
++++ lenny/filter/hpgl-attr.c 2008-10-08 08:58:40.000000000 +0200
+@@ -197,8 +197,18 @@
+
+ if (num_params == 0)
+ PenCount = 8;
+- else if (num_params == 1 && params[0].value.number <= 1024)
+- PenCount = (int)params[0].value.number;
++ else if (num_params == 1)
++ {
++ if (params[0].value.number < 1 || params[0].value.number > MAX_PENS)
++ {
++ fprintf(stderr,
++ "DEBUG: HP-GL/2 \'NP\' command with invalid number of "
++ "pens (%d)!\n", (int)params[0].value.number);
++ PenCount = 8;
++ }
++ else
++ PenCount = (int)params[0].value.number;
++ }
+ else
+ fprintf(stderr,
+ "DEBUG: HP-GL/2 \'NP\' command with invalid number of "
+@@ -235,7 +245,7 @@
+
+ if (num_params == 0)
+ {
+- for (i = 0; i <= PenCount; i ++)
++ for (i = 0; i < PenCount; i ++)
+ if (i < 8)
+ {
+ Pens[i].rgb[0] = standard_colors[i][0];
+@@ -256,7 +266,14 @@
+ }
+ else if (num_params == 1 || num_params == 4)
+ {
+- i = (int)params[0].value.number;
++ i = (int)params[0].value.number - 1;
++
++ if (i < 0 || i >= PenCount)
++ {
++ fprintf(stderr,
++ "DEBUG: HP-GL/2 \'PC\' command with invalid pen (%d)!\n", i + 1);
++ return;
++ }
+
+ if (num_params == 1)
+ {
+@@ -330,7 +347,15 @@
+
+ if (num_params == 2)
+ {
+- pen = (int)params[1].value.number;
++ pen = (int)params[1].value.number - 1;
++
++ if (pen < 0 || pen >= PenCount)
++ {
++ fprintf(stderr,
++ "DEBUG: HP-GL/2 \'PW\' command with invalid pen (%d)!\n",
++ pen + 1);
++ return;
++ }
+
+ Pens[pen].width = w;
+
+@@ -345,7 +370,7 @@
+ * Set width for all pens...
+ */
+
+- for (pen = 0; pen <= PenCount; pen ++)
++ for (pen = 0; pen < PenCount; pen ++)
+ Pens[pen].width = w;
+
+ if (PageDirty)
+@@ -399,14 +424,16 @@
+ param_t *params) /* I - Parameters */
+ {
+ if (num_params == 0)
+- PenNumber = 1;
+- else if (params[0].value.number <= PenCount)
+- PenNumber = (int)params[0].value.number;
+- else
++ PenNumber = 0;
++ else if (num_params > 1)
+ fprintf(stderr,
+- "DEBUG: HP-GL/2 \'SP\' command with invalid number or value "
+- "of parameters (%d, %d)!\n", num_params,
++ "DEBUG: HP-GL/2 \'SP\' command with invalid number of parameters "
++ "(%d)!\n", num_params);
++ else if (params[0].value.number <= 0 || params[0].value.number >= PenCount)
++ fprintf(stderr, "DEBUG: HP-GL/2 \'SP\' command with invalid pen (%d)!\n",
+ (int)params[0].value.number);
++ else
++ PenNumber = (int)params[0].value.number - 1;
+
+ if (PageDirty)
+ printf("%.3f %.3f %.3f %.2f SP\n", Pens[PenNumber].rgb[0],
+diff -urNad lenny~/filter/hpgltops.h lenny/filter/hpgltops.h
+--- lenny~/filter/hpgltops.h 2008-07-12 00:48:49.000000000 +0200
++++ lenny/filter/hpgltops.h 2008-10-08 08:58:40.000000000 +0200
+@@ -26,6 +26,14 @@
+ # define M_PI 3.14159265358979323846
+ #endif /* M_PI */
+
++
++/*
++ * Maximum number of pens we emulate...
++ */
++
++#define MAX_PENS 1024
++
++
+ /*
+ * Parameter value structure...
+ */
+@@ -108,10 +116,10 @@
+ /* Current pen position */
+ PenScaling VALUE(1.0f), /* Pen width scaling factor */
+ PenWidth VALUE(1.0f); /* Default pen width */
+-VAR pen_t Pens[1024]; /* State of each pen */
++VAR pen_t Pens[MAX_PENS]; /* State of each pen */
+ VAR int PenMotion VALUE(0), /* 0 = absolute, 1 = relative */
+ PenValid VALUE(0), /* 1 = valid position, 0 = undefined */
+- PenNumber VALUE(1), /* Current pen number */
++ PenNumber VALUE(0), /* Current pen number */
+ PenCount VALUE(8), /* Number of pens */
+ PenDown VALUE(0), /* 0 = pen up, 1 = pen down */
+ PolygonMode VALUE(0), /* Drawing polygons? */
only in patch2:
unchanged:
--- cups-1.3.8.orig/debian/patches/CVE-2008-3639_sgi_filter_overflow.dpatch
+++ cups-1.3.8/debian/patches/CVE-2008-3639_sgi_filter_overflow.dpatch
@@ -0,0 +1,43 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## CVE-2008-3639_sgi_filter_overflow.dpatch by Martin Pitt <mpitt@...>
+##
+## DP: Fix buffer overflow due to unchecked boundary in the SGI filter.
+## DP: (CVE-2008-3639, STR #2918)
+@DPATCH@
+diff -urNad lenny~/filter/image-sgilib.c lenny/filter/image-sgilib.c
+--- lenny~/filter/image-sgilib.c 2008-07-12 00:48:49.000000000 +0200
++++ lenny/filter/image-sgilib.c 2008-10-08 09:07:25.000000000 +0200
+@@ -640,13 +640,14 @@
+ if (ch & 128)
+ {
+ for (i = 0; i < count; i ++, row ++, xsize --, length ++)
+- *row = getc(fp);
++ if (xsize > 0)
++ *row = getc(fp);
+ }
+ else
+ {
+ ch = getc(fp);
+ length ++;
+- for (i = 0; i < count; i ++, row ++, xsize --)
++ for (i = 0; i < count && xsize > 0; i ++, row ++, xsize --)
+ *row = ch;
+ }
+ }
+@@ -685,13 +686,14 @@
+ if (ch & 128)
+ {
+ for (i = 0; i < count; i ++, row ++, xsize --, length ++)
+- *row = getshort(fp);
++ if (xsize > 0)
++ *row = getshort(fp);
+ }
+ else
+ {
+ ch = getshort(fp);
+ length ++;
+- for (i = 0; i < count; i ++, row ++, xsize --)
++ for (i = 0; i < count && xsize > 0; i ++, row ++, xsize --)
+ *row = ch;
+ }
+ }

signature.asc (204 bytes) Download Attachment

Please allow cups 1.3.8-1lenny2 into testing (security update)

2008-10-11T04:10:23Z

Hi release team,

cups 1.3.9 has been released two days ago with three security
fixes [1]. The HPGL one caused a regression [2] which I tracked down
and fixed in our packages; unfortunately upstream didn't respond to
the patch yet, but I'm very confident in it.

I backported the security fixes, applied the regression fix, and fixed a
harmless l10n bug, and uploaded to unstable:

cups (1.3.8-1lenny2) unstable; urgency=high

* Urgency high due to security fixes.
* debian/control: Package development moved to bzr, update Vcs- tags.
* Add CVE-2008-3641_hpgl_filter_overflow.dpatch: Fix buffer overflow
triggered by invalid number of pens in the HPGL filter. (CVE-2008-3641,
STR #2911)
* Add CVE-2008-3639_sgi_filter_overflow.dpatch: Fix buffer overflow due to
unchecked boundary in the SGI filter. (CVE-2008-3639, STR #2918)
* Add CVE-2008-3640_texttops_overflow.dpatch: Fix buffer overflow by
specifying invalidly large or negative page metrics. (CVE-2008-3640,
STR #2919)
* Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change
introduced in STR #2911, because it changes the color mapping (e. g. "SP1"
would now select a white pen instead of a black one, and "SP0" would not
be valid at all any more). Also fix a remaining off-by-one loop. (STR
#2966)
* Add admin-fr-translation.dpatch: Update the French admin.tmpl, to have the
missing "Find new printer" button and the "Subscriptions" section. Thanks
to Yves-Alexis Perez! (Closes: #475270)

-- Martin Pitt <mpitt@...> Sat, 11 Oct 2008 12:53:30 +0200

Please allow this into testing.

However, I'd actually like to get the full 1.3.9 into Lenny. It is
already in experimental and contains quite a few of our patches, as
well as fixes two handfuls of other bug fixes, and no new features
(see [2] for the changelog and [3] for an upstream debdiff). Would you
accept this as well? If so, I'll prepare an update and upload ASAP.

Thanks,

Martin

[1] http://www.cups.org/articles.php?L575
[2] http://www.cups.org/str.php?L2966
[3] http://launchpadlibrarian.net/18391186/cups_1.3.8-12_1.3.9-1.diff.gz

--
Martin Pitt | http://www.piware.de
Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org)

signature.asc (204 bytes) Download Attachment

Please migrate 2.6.27 to the lenny release

2008-10-11T02:54:02Z

Hey,
I just would like to know, if you are going to include the new 2.6.27
kernel into the lenny-release (or at least rebuild the initrd as written
in [1] as default). It has some bugfixes with pata_marvell (See
changelog [2], commit 5b66c829bf5c65663b2f68ee6b42f6e834cd39cd). Without
this fix, you are unable to use the IDE-Drives which are connected with
Marvell 6121.

Greets,
Michael Vogt

(please CC me)

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495271
[2] http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[SRM] r5 schedule

2008-10-11T02:35:22Z

Hi,

i currently plan to make a mostly "bugfix-only r5 release" (only the
DSAs and some selected other packages) next week, without any changes to
D-I. If you think that is wrong (because there is an urgent bug that
needs to be fixed) please speak up til Tuesday.

If ftpmasters agree, we will do the point-release on the next weekend.

Thx
Martin
--
Martin Zobel-Helas <zobel@...> | Debian System Administrator
Debian & GNU/Linux Developer | Debian Listmaster
Public key http://zobel.ftbfs.de/5d64f870.asc - KeyID: 5D64 F870
GPG Fingerprint: 5DB3 1301 375A A50F 07E7 302F 493E FB8E 5D64 F870

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: Bug#497110: partman-dmraid: obsolete component; should not be included in Lenny

2008-10-11T00:08:27Z

Hi,

Frans Pop wrote:
> Please remove partman-dmraid (source and udeb) from Lenny.

> Because of recent changes in libparted, partman and other D-I components
> that have now migrated to testing this udeb is no longer needed. I'll
> also file a BR against ftp.d.o requesting removal from unstable.
The unstable removal is done, so IIUIC the package should be on its way
out of testing as well.

Kind regards

T.
--
Thomas Viehmann, http://thomas.viehmann.net/

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Bug#497110: partman-dmraid: obsolete component; should not be included in Lenny

2008-10-10T17:42:41Z

retitle 497110 partman-dmraid: obsolete, keep out of Lenny
severity 497110 serious
submitter 497110 !
thanks

Please remove partman-dmraid (source and udeb) from Lenny.

Because of recent changes in libparted, partman and other D-I components
that have now migrated to testing this udeb is no longer needed. I'll
also file a BR against ftp.d.o requesting removal from unstable.

Cheers,
FJP

signature.asc (204 bytes) Download Attachment

Some security-related requests

2008-10-10T16:39:27Z

- Please unblock imagemagick (7:6.3.7.9.dfsg1-2.1) and graphicsmagick
(1.1.11-3.2) for CVE-2008-1096.

- Someone from the release team copied wireshark and some other packages
from testing-security to Lenny (thanks), please do the same for
r-base (2.7.1-1+lenny1)

- It would be nice if #497871 could be considered for Lenny since it
can be used to address problems in PHP's randomness handling

Cheers,
Moritz

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Bug in libraptor1-dev

2008-10-10T16:12:30Z

Dear Debian Release,

I spoke to the maintainer of raptor about bug #498027, which exists in
Lenny, and it appears that this bug has been introduced because of a
problem with some other package during the build process. Sure enough,
I rebuilt the package, and found that the "cares" reference in the bug
disappeared.

The change seems related to a libc-ares change, but I didn't look too
deeply. I also notice that the dependency_libs line gets altered
significantly, and matches the one present in the sid package
more. In essence, a rebuild fixes things.

Therefore, I would request a binNMU of raptor on Lenny on all
architectures (including i386), so that this RC bug gets fixed.

Thanks.

Kumar
--
Kumar Appaiah

signature.asc (204 bytes) Download Attachment

aegis freeze exception

2008-10-10T13:57:19Z

Hi there,

I want to request a freeze exception for the aegis packages from
unstable. They contain mostly a pile of translation updates.

* acknowledge security NMU, thanks to Ben Hutchings
* remove dependency on mktemp, it's essential
* add patch for compatibility of one test with subversion 1.5
* fix pending l10n issues, thanks to Christian Perrier for
coordination
* Debconf translations:
- Japanese, thanks to Hideki Yamane, closes: #491039
- Swedish, thanks to Martin Bagge, closes: #491931
- Russian, thanks to Yuri Kozlov, closes: #493606
- Portuguese, thanks to Americo Monteiro, closes: #498312
- Finnish, thanks to Esko Arajaervi, closes: #498813
- Czech, thanks to Miroslav Kure, closes: #498886
- Basque, thanks to Piarres Beobide, closes: #499100
- Italian, thanks to Alessandro De Zorzi, closes: #499149
- Brazilian Portuguese, thanks to Eder L. Marques, closes:
#499327

Greetings,

Christian

--
Christian Meder, email: chris@...

The Way-Seeking Mind of a tenzo is actualized
by rolling up your sleeves.

(Eihei Dogen Zenji)

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: #495211 - libatomic-ops FTBFS on powerpc

2008-10-10T13:32:16Z

* Mike O'Connor [Wed, 08 Oct 2008 18:08:59 -0400]:

> May I NMU my fix to T-P-U to fix this bug?

Yes, and thanks for digging up the fix.

Cheers,

--
Adeodato Simó dato at net.com.org.es
Debian Developer adeodato at debian.org

Listening to: Rosa León - ¡Ay, amor!

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Please unblock javatools 0.16

2008-10-10T13:17:21Z

I've just uploaded javatools 0.16 which closes #501516. It's a
three-line fix, please can you unblock its migration to testing.

Thanks,
Matt

--
Matthew Johnson

signature.asc (196 bytes) Download Attachment

RC bugs in LSB development packages

2008-10-10T13:07:31Z

There are 2 Serious bugs against the LSB dev package that need to be
resolved. One of them will need a freeze exception to allow a new
version of the package into testing.

First the easy one:

#478180 [lsb-build-cc2] lsb-build-cc2 depends on gcc-3.3, g++-3.3 which
isn't built anymore

I have filed a bug (though I can't find the bug number right now), asking for
all of the LSB v2 package to be completely removed from everything post Etch.
V2 of the spec has come and been gone long enough that these package are no
longer needed. The list of package which should be removed is lsb-appchk2,
lsb-build-base2, and lsb-buildcc2.

Now for the one that requires an exception:

#478174 [lsb-build-cc3] lsb-build-cc3 depends on g++-3.4 which
is not built anymore

The fix for this is part of the new version from upstream of the LSB tools.
This package is in unstable now, but this package was removed from testing
a while back during a sweep of packages that had invalid dependencies.
It's removal from testing may mean that it is not showing up on some
lists of bugs that need resolving for Lenny. It needs an exception to be
allowed back into testing now.

Due to a poor choice made almost 10 years ago, the LSB development packages
are distributed as seperate source bundles, instead of a single source bundle.
This means that the rest of the packages that should be updated at the
same time as lsb-build-cc3 are in fact seperate packages instead of being
multiple binary package from a single source package.

The complete list of related packages, which need an exception to go
into testing/lenny is lsb-appchk3, lsb-build-base3, lsb-build-cc3, and
lsb-pkgchk3.

If lsb-build-cc3 doesn't get to go into lenny, then the other v3 lsb dev
package listed above should be removed from lenny as they are out of date,
and less useful without lsb-build-cc3.

Stuare

Stuart R. Anderson anderson@...
1024D/37A79149: 0791 D3B8 9A4C 2CDC A31F
BD03 0A62 E534 37A7 9149

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Please unblock iceape 1.1.12-1

2008-10-10T13:01:02Z

Hi release team,

Iceape 1.1.12-1 is a new upstream that contains a bunch of security and
stability fixes. Its changelog:

iceape (1.1.12-1) unstable; urgency=low

* New security/stability upstream release.
* Fixes mfsa-2008-{37-38,40-46}, also known as
CVE-2008-0016, CVE-2008-3835, CVE-2008-3837, CVE-2008-4058,
CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062,
CVE-2008-4063, CVE-2008-4064, CVE-2008-4065, CVE-2008-4066,
CVE-2008-4067, CVE-2008-4068, CVE-2008-4069, CVE-2008-4070.

Cheers,

Mike

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: Bugzilla / CVE-2008-4437

2008-10-10T12:50:50Z

Hi release team,

bugzilla 3.0.5 will be accepted for testing in few days
(http://packages.qa.debian.org/b/bugzilla.html). Please accept this
change for the stable release due to security fixes.

Raphael Bossek

2008/10/10 Moritz Muehlenhoff <jmm@...>:
> Please talk to debian-release@... to get
> Bugzilla 3.0.5 unblocked for Lenny, since it fixes a
> low severity security problem:
> http://www.bugzilla.org/security/2.22.4/
>
> Cheers,
> Moritz
>

--
Raphael Bossek

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

Re: matplotlib: grave bug in lenny package

2008-10-10T10:52:07Z

Dear Release Managers,

matplotlib is almost ready for migration, except that ia64, mips and
powerpc packages need to be rebuilt on an updated chroot (where the
version of gcc and g++ are identical). (sparc is also building, but I
guess that wouldn't be much of a problem as it built there earlier).

http://buildd.debian.org/~jeroen/status/package.php?p=matplotlib&suite=testing

In spite of requesting earlier, I have been unable to get the buildd
admins to update their lenny chroots on these architectures.
Therefore, I reiterate this request to the the buildd admins. Once
this is done, a give-back should fix matplotlib for Lenny.

Thanks!

Kumar
--
Kumar Appaiah

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

please unblock kernel-package 11.005

2008-10-10T09:35:59Z

Hi,

Could you please consider unblocking kernel-package, perhaps
after it spends some time in Sid? The changes are quite extensive, but
the fact is that kernel-package was in really bad shape (I was not
kidding about the RC bug), and thus much work was required to bring it
up to release quality. I am sorry it happened so late into the release
cycle.

Why should we want to have this new version in Lenny?

The new version works with the merged x86 code in recent
kernels, while retaining compatibility with older kernel sources. It
correctly generates the right set of headers. It is again
cross-compilation friendly. The postinst no longer runs lilo when it
thinks there is no other bootloader (it used to detect grub, but not
grub2). It correctly installs firmware in a versioned location under
/lib/firmware.

More significantly, the build system has moved to a more
streamlined, make -j friendly build system While I am not sure of this
fixes some of the nagging problems we have been facing in recent
versions of kernel-package, where we used double colon rules, which
were convenient, sure, but played havoc with ordering of the rules, and
had to have various band-aids to help out with the ordering. The system
was rapidly growing complex, with clear indication that it was actually
faster.

The new target mechanism does away with doublecolon rules, and
should play better with parrallel compilation. We try to use upstream
kbuild as far as possible, to reduce churn as the files upstream
installs change. Some added checks of the Makefile are now in place so
we retain backwards compatibility. This should improve things lot wrt
header files. We also now add dependencies to more packages actually
required to build kernel images.

We also try to look for the kbuild created KERNELRELEASE
variable, which is designed to be used by distros to figure out where
modules are to be loaded from, etc. This should help reduce version
mismatches. We also prepare the kernel.release file early, to help
that.

We also refitted to support the new XEN code in mainstream, in
that the same image can be booted normally or be used as a XEN
image. This support probably needs to be improved.

The make target dependencies have been extensively reworked, to
minimize surprises and wasted effort. We also strip modules, based on
DEB_BUILD_OPTIONS (nostrip).

Extra care is now taken so we do not accidentally remove
./debian while cleaning, thanks to upstream helpfully removing ./debian
when cleaning. This should prevent dpkg-buildpackage from accidentally
shooting itself in the foot by removing ./debian as its first action.

Finally, the changes have made it possible to create a
kernel-image straight out of a git working directory, partially because
the upstream script does not think that the changes kernel-package
makes to the source make it dirty, and partially because we run the
kernel.release creation script early, just after patching the
sources, but before generating the ./debian/changelog, and this,
abetted by using KERNELRELEASE, ensures that we correctly capture the
version.

I have also added dependencies to kernel package, the kerel
source package, the kernel header package, with the basic tools
required to build a kernel, so by installing the source package, or the
header package, the user should have most of the things required to
compile their own kernel.

changelog follows.

manoj

kernel-package (11.005) unstable; urgency=critical

* [32c42dc] Fix a cut and paste typo which substituted a XEN postinst
This caused initrds not to be created. I knew there was a downside to
code hacking all-nighters.
Bug fix: "linux-image*.postinst does not create an initrd", thanks to
Sven Joachim (Closes: #501793).

-- Manoj Srivastava <srivasta@...> Fri, 10 Oct 2008 09:18:38 -0500

kernel-package (11.004) unstable; urgency=high

* [c68891f] A new bug fix version )closes serious bug).
This is a pure documentation change, it removes language that might
mislead people into thinking that there is any relation between
kernel-package and official kernels. (Closes: #370651)
* [680cbd4] Upstream fixed the problem of thinking the sources were dirty
* Bug fix: "Bogus version number when building from Git", thanks to Josh
Triplett (Closes: #423721).

-- Manoj Srivastava <srivasta@...> Fri, 10 Oct 2008 02:47:49 -0500

kernel-package (11.003) unstable; urgency=high

* [e12e615] Fix the build system to accommodate XEN changes, use kbuild as far as possible

These are fairly extensive changes. Firstly, we try to use upstream
kbuild as far as possible, to reduce churn as the files upstream
installs change. Some added checks of the Makefile are now in place so
we retain backwards compatibility. This should improve things lot wrt
header files. We also now add dependencies to more packages actually
required to build kernel images.

We also try to look for the kbuild created KERNELRELEASE variable,
which is designed to be used by distros to figure out where modules
are to be loaded from, etc. This should help reduce version
mismatches. We also prepare the kernel.release file early, to help
that.

We also refitted to support the new XEN code in mainstream, in that
the same image can be booted normally or be used as a XEN image. This
support probably needs to be improved.

The make target dependencies have been extensively reworked, to
minimize surprises and wasted effort. We also strip modules, based on
DEB_BUILD_OPTIONS (nostrip).

Extra care is now taken so we do not accidentally remove ./debian
while cleaning, thanks to upstream helpfully removing ./debian when
cleaning. This should prevent dpkg-buildpackage from accidentally
shooting itself in the foot by removing ./debian as its first action.

Bug fix: "No such file or directory", thanks to Marc Haber. I am fairly
sure this is fixed. The code around the cleaning has been
thoroughly revamped, and there have been a large number of test runs.
(Closes: #410035).
Bug fix: "kernel-package is suffering from bit rot, and is severely
broken", thanks to Manoj Srivastava (Closes: #475036).

Bug fix: "make-kpkg kernel_image fails on upstream 2.6.23 when
CONFIG_XEN is defined (new Xen paravirt_ops)", thanks to Ben McKeegan
Not only do we handle the normal image package, we should also provide
a working Xen setup. (Closes: #446879).

Bug fix: "Version check compares wrong vars", thanks to Matthijs
Kooijman. Actually, this is ont the case. We do check the upstream
version against our best guess of what whould be the correct string --
and then we ensure what we think is the right thing is what the URS
header thinks is the corect one. In any case, the KERNELRELEASE
changes above make this moot. (Closes: #433217).

Bug fix: "local version not set when config is out of date", thanks to
Matthijs Kooijman. Now we always run oldconfig before we create the
changelog, so things should work OK. (Closes: #432711).

Bug fix: "modules_clean after build with --append-to-version demands
correct --append-to-version", thanks to Marc Haber. Cleaning out the
dependency targets above cleaned out this bug as well. At least, it
worked for me. (Closes: #460507).

Bug fix: "fails to build 2.6.25-2 kernel source", thanks to Arthur
Marsh. This was extensively tested on 2.6.25.8 and 2.6.26.
(Closes: #480436).
* [18152d7] Document targets must that be run as root
The targets in question are binary, binary-arch, and
binary-indep. This is not out of line with other packages,
really. Fixing this would be too kludgey.
Bug fix: "make-kpkg fails with non-root user and fakeroot", thanks to
C. Dominik Bodi. (Closes: #501699)
* [7c6c88e] Make sure we always patch the sources before generating the changelog
The tricky part was to make sure that the first, minimal invocation
also did the right thing. The solution was to create a ./debian
directory just good enough to bootstrap a correct ./debian dir in the
second phase.
Bug fix: "debian target does not patch the source as
advertised", thanks to Dylan Thurston (Closes: #500897).

-- Manoj Srivastava <srivasta@...> Fri, 10 Oct 2008 00:31:31 -0500

kernel-package (11.002) unstable; urgency=high

* Redo the NMU changes.
* [814f453] use DEB_HOST_ARCH_OS
* [46753e6] Do not quote values in kernel-img.conf examples
* [9360526] add support for building lguest launcher when lguest host
support is built-in or module
Bug fix: "add support for building lguest launcher when lguest host
support is built-in or module", thanks to Paul TBBle Hampson
(Closes: #464147).
* [c7fb8b6] Fix a typo that was preventing CROSS_ARG from being passed
to the modules.
Bug fix: "Option --cross-compile=- dosn't work with target modules*",
thanks to Jose Calhariz. This is an important bug fix.
(Closes: #417948).
* [1717962] fix bashism in an example script
Bug fix: "bashism in /bin/sh script", thanks to Raphael Geissert. This
is a release goal, since using dash as /bin.sh is desirable.
(Closes: #489617).
* [1872151] Fix asm symlink issues that created broken header packages
Bug fix: "not suitable for m-a).", thanks to Valentin QUEQUET. The fix
was entirely due to Paul <bugs@...>
(Closes: #468839, #475029, #461228).
* [540ff1c] Adapt to the recent combination of i386 and amd64 images
Bug fix: "i386/x86_64 bzImage symlinks scheduled for removal in April
2010", Thanks to Frans Pop. As a result of the integration of i386 and
amd64 in the upstream kernel, kernel package failed to build debs for
a while as it could no longer find the bzImage file, until
compatibility symlinks were added. Add a version specific change for
the location of the image file. (Closes: #473705)
* [162d814] Only run a bootloader (lilo, usually) when explicitly
asked
Bug fix: "postinst doesn't grok grub2?", thanks to Trent Buck. If lilo
is installed, and the user has said run boot loader explicitly, then
run it. Do not test for grub in order to run lilo. (Closes: Bug#432124)
* [6bc983d] Remove deprecated option image_in_boot from man page,
added support and warning to postinst
Bug fix: "created kernel postinst silently ignores image_in_boot in
kernel-img.conf", thanks to pmaydell@...</a>; There
is now a postinst warning, and support is added back in, for
image_in_boot (a confusing, deprecated, and now undocumented option.
(Closes: #441317).
* [dca4a03] Set a versioned path to install kernel firmware into
Bug fix: "Firmware fall-out.", thanks to Jason
Riedy. /lib/firmware/<version> is being used as a path. Fix from Brian
Rogers. (Closes: #492516).
* [701f87d] Typo fix in man page.
Bug fix: "Typo in make-kpkg(1)", thanks to Reuben Thomas
(Closes: #442080).
* [bc8d2a9] Typo fix in debconf template.
Bug fix: "typo fixes: a vs an", thanks to Frederik Schwarzer
(Closes: #486750, #487855).
* [22c79c6] Move to a streamlined, make -j friendly build system
While I am not sure of this fixes some of the nagging problems we have
been facing in recent versions of kernel-package, where we used double
colon rules, which were convenient, sure, but played havoc with
ordering of the rules, and had to have various band-aids to help out
with the ordering. The system was rapidly growing complex, with clear
indication that it was actually faster.

The new target mechanism does away with doublecolon rules, and should
play better with parrallel compilation.

-- Manoj Srivastava <srivasta@...> Wed, 08 Oct 2008 23:49:52 -0500

--
Forgive and forget. Cervantes
Manoj Srivastava <srivasta@...> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C

--
To UNSUBSCRIBE, email to debian-release-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...