[01:28] I'd like to request the phpmyadmin sync to maverick be 3.3.6 instead of 3.3.5.1, I believe this is bug fix only, but can I get a MOTU ack before I make the change and then a comment in the bug once I update? details in debian 594755 [01:28] Debian bug 594755 in phpmyadmin "phpmyadmin: Please package 3.3.6" [Wishlist,Fixed] http://bugs.debian.org/594755 [01:38] micahg, 3.3.6 was uploaded to Debian: why do you want the ACK *before* you change the report? Just modify the description to include the additional changelog entry, and modify the version in the bug, and *then* get your ACK. [01:39] Folks are usually happier about ACKing stuff when it's in the desired state (and nobody will ask why not use 3.3.6 that way) [01:39] persia: because I have a report for 3.3.5 and want to make sure someone will do something before morning with it :) [01:39] 3.3.5.1 that is [01:39] What's that bug number? [01:39] bug 622900 [01:39] Launchpad bug 622900 in phpmyadmin (Ubuntu) "Please sync phpmyadmin 4:3.3.5.1-1 (universe) from Debian unstable (main)" [Medium,Confirmed] https://launchpad.net/bugs/622900 [01:41] I'm unsure anyone will do anything to it during beta freeze (although I'd be glad to be mistaken). [01:41] well, it's an unseeded universe package so there shouldn't be a reason not to [01:41] but yeah, I expected as much as well [01:41] Yeah, but the archive-admins usually seem to let these things collect during freezes, to avoid mistakes. [01:42] this one should've been pushed thorugh actually since it's a security update [01:42] You might want to link it to the CVE's :) [01:42] am I better off just trying to get this sync'd from testing now and file my other sync after freeze [01:43] hmmm...I linked the other bug I filed, But I guess I should link this one as well [01:43] I think it's better in general to just add 3.3.6, but I understand your concerns about timing. [01:44] Do we happen to have a semi-automated test-suite for phpmyadmin? [01:44] CVE added :) [01:44] both? [01:44] persia: no, just the one that's actually affected [01:44] changelog says CVE-2010-3055 CVE-2010-3056 [01:44] The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3055) [01:44] Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, [01:45] persia: as you can see from ubottu changelog is wrong :) [01:45] heh, indeed :) [01:45] the other one affect hardy [01:46] Anyway, I doubt you'll have huge problems if you just update that bug. [01:47] Leave a note at the bottom saying you've updated the version, and seek another sponsor. You can't pull from the archive-admin queue, so being diligent with comments can be important so that folks don't think you're hijacking an ACK. [01:47] especially being a bugfix release [01:47] * ajmitch finds a "you're about to expire" message from LP [01:47] The main obstacle is finding a MOTU who will test phpmyadmin for you, but that oughtn't be impossible. [01:47] wow [01:48] wow? [01:48] a message saying you're about to expire :) [01:48] that happens every year [01:48] well, I would hope it's just your membership ;) [01:48] of course ;) [01:49] but it'd probably mean losing indirect membership in *lots* of teams :) [01:49] persia: I'll do my usually backport and test build before I update, then comment and subscribe sponsors as you've suggested [01:49] micahg, Good luck. [01:50] ajmitch: micahg was making a joke about expire == death [01:50] maco: I know that [01:50] oh [01:50] persia: thanks, BTW I think I figured out how to get the java dependencies to build with a trip through multiverse, but I'm going to check with debian-java still [01:50] * ajmitch isn't completely dense :) [01:50] I wrote it like that for a reason [01:51] ajmitch: i dont know who around here has english as a first language so puns sometimes go over poorly [01:51] maco: We have English as a first language, not American :) [01:52] makes for interesting misunderstanding at times [01:52] but for all i know you're like persia and up in the middle of the night! [01:52] * ajmitch isn't that many timezones away from persia [01:52] (though he's USian, but you could be indonesian or something :P) [01:53] * ajmitch thought persia was still in/around .jp [01:53] he is [01:53] & I'm at UTC+12 [01:54] * persia is now, but was spanning timezones wildly December <-> early august (no single timezone for more than 3 weeks) [01:54] i was noting his originally-US-ness as a "but he doesnt count because english is his first" [01:54] No it isn't: it's something I picked up as a young child though (and no longer use my first) [01:54] new zealand is quite english [01:55] persia: oh [01:55] persia: so what's your first? [01:55] and does english now count as your native or not? *confused* [01:56] French, but I never learned more than a 6-year old needs to know, and haven't used it reliably in so long that it's painful to do more than read slowly. [01:56] * persia has no idea if english counts as "native", and doesn't really care. [01:56] well if you ever move to quebec, and have kids, it decides what language they are educated in [01:56] if english is your native, they learn in english. if it's not, they learn in french [01:57] No it doesn't. It decides which language they are educated in if there is no expressed parental preference. [01:57] (whether you speak english as a second language and are ignorant of french is irrelevant...weirdly) [01:57] thats not what IdleOne said...and he lives there [01:57] * persia knows folks who chose to raise their kids in their less strong language in Quebec [01:58] s/less strong/later learned/ [01:58] he said about a chinese coupe in quebec who both spoke english but their kids were forced to go to the french school [01:58] *couple [01:58] That's different. One gets treated slightly differently if one is new to Quebec. [01:59] where 'new' == < 20 years residence [01:59] And there's greater support for expressing preference if the preference is for French school. [01:59] * persia thought it was 30, but yeah, something like that [01:59] haha [02:01] yay xenophobia? [02:01] o [02:01] no, they just smirk and act tolerant [02:01] It's marketed as "cultural preservation" rather than xenophobia. [02:01] persia: is it true that if you were to become a japanese citizen you'd have a different coloured passport because you're naturalised? (for that matter: are you one?) [02:02] I don't know about passport colours. [02:03] Becoming Japanese requires one of A) being within a couple generations of someone who was Japanese, with full documentation + 10 years residence *OR* > 20 years residence and good reports from a intrusive investigation. I have yet to qualify. [02:03] ah [02:03] s/R*/R* (B) / [02:03] i knew it was *really really hard* [02:03] but didnt know it was 20 years hard [02:04] More, just takes a really long time. [02:04] persia isn't even a citizen of this world I don't think :p [02:04] it makes gaining NZ citizenship look trivial [02:04] nixternal, The handy bit being that one can purchase passports from a variety of places to mask that :) [02:04] i recall reading someone's naturalisation story who was married to a japanese woman, and he said that if he'd had so much as a speeding ticket, that couldve disqualified [02:04] persia: oh i know, i live a few miles from a passport dealer or 2 [02:05] me too! [02:05] that is, i live not far from the State Department [02:05] * persia prefers nixernal's dealers : one-time charge vs. lifetime taxation [02:05] maco: i live not to far from the martinez brothers === echidnaman is now known as JontheEchidna [05:37] wgrant: ubuntuwire mozilla list seems to be broke, but the rest seem to work [05:47] stalcup: ping [07:45] good morning [07:54] hey dholbach [07:55] heya didrocks [09:24] I know that there is a command-line program that prints out the sections in which a source package exists. What is the command? [09:25] Could you rephrase? You could get that with grep-dctrl (or just grepping Sources files), but I wonder if you want something more complex that deals with binaries in several sections from the same source. [09:31] persia: It is a single command that lists the distros -> section pairs of a source package [09:32] Do you really mean "section"? Maybe "component" (that would be madison-lite or rmadison, depending on your environment) [09:34] persia: yes, component [09:34] persia: yes its rmadison [09:35] OK. Be aware that there is no guaranteed correspondence between the component in which a source package appears and the component in which one of it's binary packages appear. [09:41] persia: haha, yes I know that! [09:42] persia: Thanks btw1 === azeem_ is now known as azeem === hannesw_ is now known as hannesw [10:38] Hello === bilalakhtar_ is now known as bilalakhtar === ivoks_away is now known as ivoks [11:46] ara: good bye, hello, good bye, hello again [11:46] bilalakhtar, :) [12:35] hi [12:35] can someone please guide me about https://bugs.launchpad.net/ubuntu/+source/xen-meta/+bug/540110 ? [12:35] Launchpad bug 540110 in xen-meta (Ubuntu) "ubuntu-xen-server has broken dependencies (dup-of: 538917)" [Undecided,New] [12:35] Launchpad bug 538917 in xen-tools (Ubuntu) "xen-tools is not available in lucid" [Undecided,New] === dholbach_ is now known as dholbach [12:48] could someone approve: LP #626711 [12:48] Launchpad bug 626711 in sl-modem (Ubuntu) "Sync sl-modem 2.9.11~20100718-2 (restricted) from Debian unstable (non-free)" [Wishlist,New] https://launchpad.net/bugs/626711 [13:00] AnAnt: you need a core-dev for this and main/resticted is currently in BetaFreeze [13:00] geser: it's a bug fix [13:00] AnAnt, You ought apply for permission to manage that directly: after all, it's your work on the package that enabled it to be good enough to move back into main/restricted. [13:00] Still, BetaFreeze. [13:01] AnAnt: BetaFreeze, all uploads to main/restricted needs approval [13:01] persia: so I should subscribe ubuntu-release to the bug ? [13:01] No. It's a soft freeze. [13:01] persia: so what should I do ? [13:01] But all uploads to stuff that appears on images are supposed to be limited to things necessary to fix images. [13:01] AnAnt: is it important enough to get into the Beta or can it wait till after the Beta? [13:03] I think it can wait after beta, that's the bug it fixes: LP #626231 [13:03] Launchpad bug 626231 in sl-modem (Ubuntu) "ALSA modem detection in init script broken in non-English locales" [High,Triaged] https://launchpad.net/bugs/626231 [13:03] it is not necessary to fix images [13:04] Then it's better to wait until after Beta to actually do it. [13:04] But it could get posted to the archive-admins now. [13:04] Anyway, needs a sponsor who can upload it (more likely to be found in ubuntu-devel). [13:04] persia: so, if I apply for PPU for sl-modem, you would endorse my application ? [13:05] And I reiterate that I believe you should apply to be a PPU for sl-modem, as the recent re-promotion of sl-modem is precisely the case that sabdfl used as one of the justifications for PPUs in the first place. [13:05] AnAnt, Absolutely, and without reservation. I clearly remember working with you to pull it *out* of main back when it didn't work, and your work in Debian to ensure it's good enough that it got pulled back in. === xfaf is now known as zul [13:45] persia: done === Guest52681 is now known as SEJeff_work [15:35] hi all [15:38] Hi there. [15:41] !hi | iulian [15:41] iulian: Hi! Welcome to #ubuntu-motu! Feel free to ask questions and help people out. The channel guidelines are at https://wiki.ubuntu.com/IRC/Guidelines . Enjoy your stay! [16:14] didrocks: do you forward changes to Debian? [16:21] ari-tczew: of course, I forward my changes to debian [16:22] didrocks: how about kiki? [16:23] ari-tczew: that changes doesn't impact debian as it's for python 2.6 distro only (and debian is in freeze). In any case, those little changes can be send when we merge back [16:23] didrocks: about any case: we should send changes to Debian ASAP, no when we are merging. [16:25] ari-tczew: thanks, but I'm an ubuntu dev for 3 years now and I have access to svn/git commit in some Debian team. Consequently, I think I know when I need to send or not something immediately [16:25] this is still a bad package in my taste, we should fix rather debian/rules, which I didn't want to do in the ubuntu packaging only but should be done with next release of kiki [16:27] didrocks: I don't deny your expierence, but reason "I'm dev since 3 years and I change will be forwarded by someone else while merging" is very weak. [16:28] ari-tczew: it's not the reason if you reread my sentence: the change is not the right solution, the correct one is to change debian/rules more heavily, which I haven't done as I didn't want to diverge too much from debian packaging [16:29] didrocks: I wrote to: in any case [16:29] didrocks: not to kiki's case [16:29] I just say, that developers don't respect some policies [16:30] don't understand your sentence, sorry "I wrote to:" [16:31] didrocks: nevermind [16:31] it's only my monologue [16:31] :] [16:33] :) === yofel_ is now known as yofel === ivoks is now known as ivoks_dinner [17:47] dh: Unknown sequence cleanbuilddir (choose from: binary binary-arch binary-indep build clean install) [17:47] what's going on? [17:47] it's FTBFS since I added cdbs to B-D === thekorn_ is now known as thekorn [18:51] for bug#511225, should I file a ff'e request separately? [18:57] https://bugs.launchpad.net/ubuntu/+source/sugar-0.88/+bug/511225 [18:57] Launchpad bug 511225 in sugar-0.88 (Ubuntu) "running sugar causes left-click not to work properly in GNOME" [Critical,Confirmed] === ivoks_dinner is now known as ivoks === xfaf is now known as zul [19:43] ari-tczew: does kolourpaint crashes g-s-d for you every time you do copy&paste? [19:45] kklimonda: yes [19:48] ari-tczew: do you just copy and paste something inside kolourpaint? [19:49] kklimonda: yes [19:49] bah, I can't reproduce it - I can see where does it crash but not why. [19:50] chrisccoulson would say "give me the xtrace log" and that would probably make sense but I'm not sure if I can read it correctly - X is scary ;) [19:51] kklimonda: apachelogger reproduced this one [19:52] kklimonda: are you running maverick? [19:52] yes, 32bit, up to date in maverick [19:52] s/in// [19:53] I've tried reproducing with both my laptop which is amd64 and in vm (x86) and no luck [19:53] kklimonda: hmmm, let's click print screen, save file; [19:53] maybe it doesn't hook into g-s-d by default? [19:54] kklimonda: open this file by kolourpaint and cut something [19:54] do I have to do some setup? [19:54] then open next kolourpaint and paste [19:54] I more like stumbled upon it ;) [19:55] ari-tczew: nope, nothing [19:56] kklimonda: so what's next? [19:56] I hope that you don't think that I'm lying [19:56] no, why? I have a coredump and I can see where does it crash [19:58] my ears are burning [19:58] :D [20:01] it's very frustratic, if only me is affected by this bug [20:02] yeah, some bugs are like that [20:04] hmm.. I can't use pbuilder-satisfydepends after all.. I'm in the right directory but it doesn't install anything :/ [20:06] ari-tczew: I can probably make a small patch to print more debug info if you are interested in debugging it further. [20:07] kklimonda: I don't know whether os make sense, because there are not people interested in fixing. [20:08] why? I'm interested in fixing it [20:10] kklimonda: can you? [20:11] what's wrong with g-s-d? [20:11] chrisccoulson: http://paste.ubuntu.com/485980/ [20:12] chrisccoulson: gdb says that it crashes at if (conversions->next == NULL && [20:22] ari-tczew: this patch may stop it from crashing (and pring critical message in log): http://pastebin.com/RuqhJ3x0 [20:23] kklimonda: in which package can I apply it? [20:23] ari-tczew: gnome-settings-daemon [20:24] kklimonda: thanks, I'll try it soon [22:23] kklimonda: okay, I built patched g-s-d, do I need to restart system? [22:27] ari-tczew, about your dh error: it's exceedingly rare that a package should be using both dh and CDBS. [22:29] persia: I've resolved the problem by adding override also for build and install [22:30] without cdbs :) [22:30] ari-tczew: cześć, dzisiaj rozmawiałeś ze strikeu, jestem jego kolegą od paczkowania ;-) [22:30] ari-tczew: tutaj trzeba po angielsku. jak po polsku to priv. [22:30] Fazer2: ^ [22:31] ari-tczew: ok ;-) [22:32] ari-tczew: I build packages for his project, I was wondering if I do everything correctly [22:33] ari-tczew: would you mind checking one package? [22:34] ari-tczew, I'm very certain that you'd do better to remove cdbs from build-depends, and sort out why dh(1) wasn't working cleanly. [22:35] persia: I removed cdbs from B-D! [22:35] Fazer2: I can take a look. are you interesting only in this one? [22:36] ari-tczew: at this time only one [22:37] ari-tczew: should I upload the deb file or some others too? [22:37] Fazer2: btw. not only me can take a look. :-) [22:37] heh, ok [22:37] Fazer2: others what? [22:38] ari-tczew: other files, i.e. those needed for packaging or created during building [22:39] ari-tczew: or just the .deb file [22:39] Fazer2: source files - /debian/ directory [22:40] ari-tczew: ok [22:40] then you'll building from source [22:40] I know how to build ;-) [22:40] ari-tczew, Ah, OK. I worried because of "ari-tczew> it's FTBFS since I added cdbs to B-D". [22:43] persia: and I reply: I've resolved the problem by adding override also for build and install. [22:43] also I removed cdbs support [22:43] it sucks [22:43] ari-tczew: here it is http://www.speedyshare.com/files/24046033/debian.tar.gz [22:43] ari-tczew: thanks in advance [22:43] Fazer2: I suggest to use bazaar [22:44] ari-tczew, OK. I missed the "also I removed cdbs support" bit. All ought be good. [22:44] persia: again language barier :( [22:44] ari-tczew: for controlling changes made in package? [22:45] ari-tczew: because the upstream uses git, so I guess you're talking about bazaar for packager [22:47] ari-tczew: btw in Ubuntu Packaging Guide I saw recommendations to use quilt [22:50] Fazer2: yes quilt 3.0 is on tour [22:51] Fazer2: IIRC launchpad has got an option like 'import from git', but I'm not sure whether it works [22:51] but it's for upstream code ship. I prefer to sharing source of package into bazaar also. [22:51] then I can grab full package source === neeraj_ is now known as neeraj [22:51] not only debian/ [22:53] Fazer2: https://wiki.ubuntu.com/BzrMaintainerHowto [22:53] bzr init and go ahead [22:54] ari-tczew: but I can do the same with git [22:55] Fazer2: ok [22:55] ari-tczew: but I'll read it, thanks [22:57] kklimonda: around? I think that your patch helps! [23:01] kklimonda: g-s-d was not crashed, but in console I got error: ** (gnome-settings-daemon:10972): CRITICAL **: convert_clipboard: assertion `conversions != NULL' failed [23:03] ari-tczew: yeah, that makes sense - that's from the patch itself. [23:04] kklimonda: do you want to forward it? [23:05] no, it's not really a solution, I was just confirming what I've found - there is a test before that should prevent this error, I wonder why it's not working :/ [23:07] ari-tczew: you can attach the patch to LP report though [23:08] kklimonda: thanks! but what about upstream? [23:08] I'm going to ask chriscc if it makes sense to forward it upstream but I think we should find the real cause of the bug.. [23:09] ari-tczew: when is final freeze/ [23:09] kklimonda: final freze of what? [23:09] of ubuntu [23:09] 10.10 [23:10] I was lazy to check it myself ;) [23:10] kklimonda: I think the 16th of September [23:11] so there isn't much time to fix it anyway.. I can forward the bug upstream and take a beating for my patch ;) [23:11] it should be fixed one way or another before freeze [23:12] kklimonda: I can test again useful of patch and I'll forward changes to bazaar [23:13] I think that seb128 can review this one [23:20] ari-tczew: can you test one more patch? [23:20] kklimonda: next patch? give it [23:31] ari-tczew: a sec, I'll see if it actually builds [23:32] kklimonda: ok, I'm working also right now. [23:44] ari-tczew: http://pastebin.com/0186shZ0 [23:49] kklimonda: I see that previous patch is useless. what's new in new patch? [23:59] kklimonda: I'll test patch tomorrow