Debian Bug report logs - #464712
bump shlibs to >= 2.10

version graph

Package: libcap2; Maintainer for libcap2 is Christian Kastner <ckk@debian.org>; Source for libcap2 is src:libcap2 (PTS, buildd, popcon).

Reported by: Ralf Hildebrandt <ralf.hildebrandt@charite.de>

Date: Fri, 8 Feb 2008 15:57:01 UTC

Severity: normal

Fixed in version libcap2/2.15-2

Done: Torsten Werner <twerner@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Ralf Hildebrandt <ralf.hildebrandt@charite.de>:
New Bug report received and forwarded. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ralf Hildebrandt <ralf.hildebrandt@charite.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: warning: `avahi-daemon' uses 32-bit capabilities (legacy support in use)
Date: Fri, 08 Feb 2008 16:53:36 +0100
Package: avahi-daemon
Version: 0.6.22-2
Severity: normal


A recent kernel (2.6.24-git18 (SMP w/4 CPU cores)) reports:
[   12.623370] warning: `avahi-daemon' uses 32-bit capabilities (legacy support in use)

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-git18 (SMP w/4 CPU cores)
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages avahi-daemon depends on:
ii  adduser                       3.105      add and remove users and groups
ii  bind9-host [host]             1:9.4.2-3  Version of 'host' bundled with BIN
ii  dbus                          1.1.2-1    simple interprocess messaging syst
ii  libavahi-common3              0.6.22-2   Avahi common library
ii  libavahi-core5                0.6.22-2   Avahi's embeddable mDNS/DNS-SD lib
ii  libc6                         2.7-6      GNU C Library: Shared libraries
ii  libcap1                       1:1.10-14  support for getting/setting POSIX.
ii  libdaemon0                    0.12-1     lightweight C library for daemons 
ii  libdbus-1-3                   1.1.2-1    simple interprocess messaging syst
ii  libexpat1                     1.95.8-4   XML parsing C library - runtime li
ii  lsb-base                      3.1-24     Linux Standard Base 3.1 init scrip

Versions of packages avahi-daemon recommends:
ii  libnss-mdns                   0.10-3     NSS module for Multicast DNS name 

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Ted Percival <ted@midg3t.net>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #10 received at 464712@bugs.debian.org (full text, mbox, reply):

From: Ted Percival <ted@midg3t.net>
To: 464712@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Patch for 32-bit capabilities warning
Date: Thu, 03 Jul 2008 14:23:16 +1000
[Message part 1 (text/plain, inline)]
tags 464712 patch
thanks

Avahi needs to be built against libcap2 instead of libcap1 to avoid this
warning from the kernel.

Build-Depend on libcap2-dev (>= 2.10-1) to avoid possibly-insecure
use of v2 capabilities. See kernel/capability.c in the Linux source
for details (look for warn_deprecated_v2).
[avahi-libcap-debian.patch (text/x-diff, inline)]
Build against libcap2

Removes a warning about deprecated 32-bit capabilities.
Build-Depends on libcap2-dev (>= 2.10-1) to avoid possibly-insecure
use of v2 capabilities. See kernel/capability.c in the Linux source
for details (look for warn_deprecated_v2).

Fixes Debian bug #464712.

diff a/debian/control b/debian/control
--- a/debian/control
+++ b/debian/control
@@ -9,7 +9,7 @@ Build-Depends: debhelper (>= 5.0.37.2),
                cdbs (>= 0.4.43),
                pkg-config,
                python-support (>= 0.6),
-               libcap-dev [!hurd-i386 !kfreebsd-i386 !kfreebsd-amd64 !netbsd-i386],
+               libcap2-dev (>= 2.10-1) [!hurd-i386 !kfreebsd-i386 !kfreebsd-amd64 !netbsd-i386],
                libgdbm-dev,
                libglib2.0-dev (>= 2.4),
                libgtk2.0-dev (>= 2.4),

Tags added: patch Request was from Ted Percival <ted@midg3t.net> to control@bugs.debian.org. (Thu, 03 Jul 2008 04:27:02 GMT) (full text, mbox, link).


Reply sent to Michael Biebl <biebl@debian.org>:
You have taken responsibility. (full text, mbox, link).


Notification sent to Ralf Hildebrandt <ralf.hildebrandt@charite.de>:
Bug acknowledged by developer. (full text, mbox, link).


Message #17 received at 464712-close@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>
To: 464712-close@bugs.debian.org
Subject: Bug#464712: fixed in avahi 0.6.23-2
Date: Sat, 05 Jul 2008 12:47:03 +0000
Source: avahi
Source-Version: 0.6.23-2

We believe that the bug you reported is fixed in the latest version of
avahi, which is due to be installed in the Debian FTP archive:

avahi-autoipd_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-autoipd_0.6.23-2_i386.deb
avahi-daemon_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-daemon_0.6.23-2_i386.deb
avahi-dbg_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-dbg_0.6.23-2_i386.deb
avahi-discover_0.6.23-2_all.deb
  to pool/main/a/avahi/avahi-discover_0.6.23-2_all.deb
avahi-dnsconfd_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-dnsconfd_0.6.23-2_i386.deb
avahi-ui-utils_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-ui-utils_0.6.23-2_i386.deb
avahi-utils_0.6.23-2_i386.deb
  to pool/main/a/avahi/avahi-utils_0.6.23-2_i386.deb
avahi_0.6.23-2.diff.gz
  to pool/main/a/avahi/avahi_0.6.23-2.diff.gz
avahi_0.6.23-2.dsc
  to pool/main/a/avahi/avahi_0.6.23-2.dsc
libavahi-client-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-client-dev_0.6.23-2_i386.deb
libavahi-client3_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-client3_0.6.23-2_i386.deb
libavahi-common-data_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-common-data_0.6.23-2_i386.deb
libavahi-common-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-common-dev_0.6.23-2_i386.deb
libavahi-common3_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-common3_0.6.23-2_i386.deb
libavahi-compat-howl-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-compat-howl-dev_0.6.23-2_i386.deb
libavahi-compat-howl0_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-compat-howl0_0.6.23-2_i386.deb
libavahi-compat-libdnssd-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-compat-libdnssd-dev_0.6.23-2_i386.deb
libavahi-compat-libdnssd1_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-compat-libdnssd1_0.6.23-2_i386.deb
libavahi-core-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-core-dev_0.6.23-2_i386.deb
libavahi-core5_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-core5_0.6.23-2_i386.deb
libavahi-glib-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-glib-dev_0.6.23-2_i386.deb
libavahi-glib1_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-glib1_0.6.23-2_i386.deb
libavahi-gobject-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-gobject-dev_0.6.23-2_i386.deb
libavahi-gobject0_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-gobject0_0.6.23-2_i386.deb
libavahi-qt3-1_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-qt3-1_0.6.23-2_i386.deb
libavahi-qt3-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-qt3-dev_0.6.23-2_i386.deb
libavahi-qt4-1_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-qt4-1_0.6.23-2_i386.deb
libavahi-qt4-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-qt4-dev_0.6.23-2_i386.deb
libavahi-ui-dev_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-ui-dev_0.6.23-2_i386.deb
libavahi-ui0_0.6.23-2_i386.deb
  to pool/main/a/avahi/libavahi-ui0_0.6.23-2_i386.deb
python-avahi_0.6.23-2_all.deb
  to pool/main/a/avahi/python-avahi_0.6.23-2_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 464712@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Biebl <biebl@debian.org> (supplier of updated avahi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 05 Jul 2008 13:49:06 +0200
Source: avahi
Binary: avahi-daemon avahi-dnsconfd avahi-autoipd python-avahi avahi-utils avahi-discover libavahi-common3 libavahi-common-data libavahi-common-dev libavahi-core5 libavahi-core-dev libavahi-client3 libavahi-client-dev libavahi-glib1 libavahi-glib-dev libavahi-gobject0 libavahi-gobject-dev libavahi-qt3-1 libavahi-qt3-dev libavahi-qt4-1 libavahi-qt4-dev libavahi-compat-howl0 libavahi-compat-howl-dev libavahi-compat-libdnssd1 libavahi-compat-libdnssd-dev libavahi-ui0 libavahi-ui-dev avahi-ui-utils avahi-dbg
Architecture: source all i386
Version: 0.6.23-2
Distribution: unstable
Urgency: low
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Description: 
 avahi-autoipd - Avahi IPv4LL network address configuration daemon
 avahi-daemon - Avahi mDNS/DNS-SD daemon
 avahi-dbg  - Avahi - debugging symbols
 avahi-discover - Service discover user interface for avahi
 avahi-dnsconfd - Avahi DNS configuration tool
 avahi-ui-utils - Avahi GTK+ utilities
 avahi-utils - Avahi browsing, publishing and discovery utilities
 libavahi-client-dev - Development files for the Avahi client library
 libavahi-client3 - Avahi client library
 libavahi-common-data - Avahi common data files
 libavahi-common-dev - Development files for the Avahi common library
 libavahi-common3 - Avahi common library
 libavahi-compat-howl-dev - Development headers for the Avahi Howl compatibility library
 libavahi-compat-howl0 - Avahi Howl compatibility library
 libavahi-compat-libdnssd-dev - Development headers for the Avahi Apple Bonjour compatibility lib
 libavahi-compat-libdnssd1 - Avahi Apple Bonjour compatibility library
 libavahi-core-dev - Development files for Avahi's embeddable mDNS/DNS-SD library
 libavahi-core5 - Avahi's embeddable mDNS/DNS-SD library
 libavahi-glib-dev - Development headers for the Avahi glib integration library
 libavahi-glib1 - Avahi glib integration library
 libavahi-gobject-dev - Development headers for the Avahi GObject library
 libavahi-gobject0 - Avahi GObject library
 libavahi-qt3-1 - Avahi Qt 3 integration library
 libavahi-qt3-dev - Development headers for the Avahi Qt 3 integration library
 libavahi-qt4-1 - Avahi Qt 4 integration library
 libavahi-qt4-dev - Development headers for the Avahi Qt 4 integration library
 libavahi-ui-dev - Development headers for the Avahi GTK+ User interface library
 libavahi-ui0 - Avahi GTK+ User interface library
 python-avahi - Python utility package for Avahi
Closes: 464712 488947
Changes: 
 avahi (0.6.23-2) unstable; urgency=low
 .
   * debian/control
     - Add myself to Uploaders.
     - Build against libcap2 instead of libcap1 to avoid kernel warning about
       using legacy support of 32-bit capabilities. Add a Build-Depends on
       libcap2-dev (>= 2.10) to avoid possibly insecure use of v2 capabilities.
       Thanks to Ted Percival for the patch. (Closes: #464712)
     - Fix spelling of GTK+ in description.
     - Drop -1 revision from python-gdbm build dependency.
   * debian/libavahi-gobject0.symbols
     - Fix incorrect package name and #MINVER# stanza. (Closes: #488947)
   * debian/patches/02_avahi-ui.disable-translations.patch
     - Disable translatable strings in the avahi-ui desktop files. The build
       system doesn't process them correctly yet and we end up with broken
       desktop files otherwise.
Checksums-Sha1: 
 85e522058dc6150c7fd5b3467b90bf3e0497596c 2294 avahi_0.6.23-2.dsc
 6c0bc38fb886485adc211a00c6b154c7da94217d 29564 avahi_0.6.23-2.diff.gz
 26a04caa16b0db7b39ed91a6b3721dde2cb55a91 29012 python-avahi_0.6.23-2_all.deb
 a3afce904326feaf42c51ff30c8cd773fd5a99c5 36402 avahi-discover_0.6.23-2_all.deb
 28572960235ff75f81ba11a3e263eeafe7c708ec 87222 avahi-daemon_0.6.23-2_i386.deb
 ef2eb40a691c19ad475c516254a38083c14e646f 38006 avahi-dnsconfd_0.6.23-2_i386.deb
 de7f14eccce9f1eae049ee71e7a95a8eb4ee6ed6 47770 avahi-autoipd_0.6.23-2_i386.deb
 ea440678d3a247607c1591f525fb598036ab5b18 50708 avahi-utils_0.6.23-2_i386.deb
 5c988c8f53152c41805412d8db0ab164d95b546d 46986 libavahi-common3_0.6.23-2_i386.deb
 ca22d9f7f3958d5518697e5cec37a0a2c05bc3a9 31638 libavahi-common-data_0.6.23-2_i386.deb
 d5558e224a6c4c6031de793cf15cc6b363f80048 65816 libavahi-common-dev_0.6.23-2_i386.deb
 97a7ba280e757c52a33dd0a12e5499b394d480d9 114518 libavahi-core5_0.6.23-2_i386.deb
 614b5750c126fe5b4c0465b522e2425be9855fa8 150988 libavahi-core-dev_0.6.23-2_i386.deb
 7cfd454919c2b790916453b6df77e1abb708ee87 51058 libavahi-client3_0.6.23-2_i386.deb
 874a367c492950c8d10c3539ce333966b9afbb21 60846 libavahi-client-dev_0.6.23-2_i386.deb
 1c1f6a3d0d04e8fd15136cf3077a5c58d9669d0d 31458 libavahi-glib1_0.6.23-2_i386.deb
 2a8cf7a6c5db64fed24169878149034228672b96 32618 libavahi-glib-dev_0.6.23-2_i386.deb
 4b5b1e8548901c7c5c864f4ed914ac4a3b0284f3 41250 libavahi-gobject0_0.6.23-2_i386.deb
 4f7fb62daec453c545b1d5bcb526129228a2eb17 48152 libavahi-gobject-dev_0.6.23-2_i386.deb
 c9c88455fa0c9424c4dd529e9f839c50f95e1a7f 32862 libavahi-qt3-1_0.6.23-2_i386.deb
 a66b1011871987b4629e0fb57994ea8dc0883382 33184 libavahi-qt3-dev_0.6.23-2_i386.deb
 1bec71d7bacd935019777767ff5b278f9179c144 30990 libavahi-qt4-1_0.6.23-2_i386.deb
 e70af2ac1dd1b4848113043f8dc06687c8a514f8 31646 libavahi-qt4-dev_0.6.23-2_i386.deb
 f77f0f44c6e0942455eb9355798c0bf8a65779c3 46154 libavahi-compat-howl0_0.6.23-2_i386.deb
 f56cb0ac4d474a0c0eba81cff349040bae36a2f0 59084 libavahi-compat-howl-dev_0.6.23-2_i386.deb
 7676c49c98d5d812217879d46c4c0a0e88c346b6 39720 libavahi-compat-libdnssd1_0.6.23-2_i386.deb
 a035717e98b37a0df61888116a4e25364fe56eba 58640 libavahi-compat-libdnssd-dev_0.6.23-2_i386.deb
 595fbcb21dc33c064ad3beaf9f0c6af0729fae26 44824 libavahi-ui0_0.6.23-2_i386.deb
 dbe48c1988645ea4248ddf8fec7d592464c0e247 46360 libavahi-ui-dev_0.6.23-2_i386.deb
 98eadaae90ee22efada3cd381226dd0d4a5eeaad 33660 avahi-ui-utils_0.6.23-2_i386.deb
 6bb1577203cc0a319325ee967a9c28b9402a0701 649978 avahi-dbg_0.6.23-2_i386.deb
Checksums-Sha256: 
 70a4e9138aef363326454c93485425bc4e0ab4aa5fd5b2dc817090f4ba623dda 2294 avahi_0.6.23-2.dsc
 9b48d01c41593a92dc6cd61f6e369a3cb86457f343109329cf41b5f1d3700749 29564 avahi_0.6.23-2.diff.gz
 670bab20150e41ba295e6dbd06367ffe3cea55cfce6c195c454767ae73c63b8e 29012 python-avahi_0.6.23-2_all.deb
 f4a9d3b5b542c82327f116d7e8a780992efec5c217d545ea1deb594fcd889e8e 36402 avahi-discover_0.6.23-2_all.deb
 d97a94fb70d4576861207251d1afaa56f54746f24587190ccfb2c5600db81cda 87222 avahi-daemon_0.6.23-2_i386.deb
 180bc00b5e04fa8ca25bdbc417d3332762125a48138c7d12e48700d444f1ae58 38006 avahi-dnsconfd_0.6.23-2_i386.deb
 427e4bc20ff5e2652c8187ab89c00a7b8fda8cf994c72c4279627f53da9f2a52 47770 avahi-autoipd_0.6.23-2_i386.deb
 572168381c96a78a882ccb570af631da5357d8f5d3665694d5ebdd700afb1ed0 50708 avahi-utils_0.6.23-2_i386.deb
 8290677a3b600db413dc488a6c3fa4439a3ebc3f6cea16ab09e6ce71c7877f6a 46986 libavahi-common3_0.6.23-2_i386.deb
 cde95d56469374141168fea97ad1e2d7b2f47145b352bf967d7a61c74f5dafd0 31638 libavahi-common-data_0.6.23-2_i386.deb
 ac664ef416dd250394eca6bd5e4dc26cb64bdd550fe1ec34f1e1af6ad3a355bf 65816 libavahi-common-dev_0.6.23-2_i386.deb
 562a484d17aedb1065503e19723d9c5b4e987450c6b66f22982d42faeef57d95 114518 libavahi-core5_0.6.23-2_i386.deb
 744828df63ae27be1326c4e846aaa9abc380afec02ef0cd573890d5de4c854a3 150988 libavahi-core-dev_0.6.23-2_i386.deb
 c8d4d8a622edab718404a6e8a9f5fa6782a05083a7cb839190265833d6588d6d 51058 libavahi-client3_0.6.23-2_i386.deb
 e823988cecd06db139db9ccf22f9d8d6be1b4411b114aaa7d730a68ae7b52f4f 60846 libavahi-client-dev_0.6.23-2_i386.deb
 21d85b0c289720e8080f90621858cc40205dd5a6dba22767f5827e21cf24343a 31458 libavahi-glib1_0.6.23-2_i386.deb
 a9add7be8b292703bf508cf05a476f7b3d5c3c765103f9f4a2a24502a2efb637 32618 libavahi-glib-dev_0.6.23-2_i386.deb
 14d823eaa96ec150780309fbfdf3e3899b7d2529a48df5bfa7dcd69497863d77 41250 libavahi-gobject0_0.6.23-2_i386.deb
 8ef316f2f59a5e226394e7cce4e9330c50dc384184c5ca9fa6e277ca001ab3a7 48152 libavahi-gobject-dev_0.6.23-2_i386.deb
 1fc374b290f5a2fadbcb04ac15b87d774895bb433edff09db66bcea134aa63ec 32862 libavahi-qt3-1_0.6.23-2_i386.deb
 c688301cee4d2c145c86ca6a81d7486e205c7703a0bd940bc781de0fe6e21d1e 33184 libavahi-qt3-dev_0.6.23-2_i386.deb
 5bf4c209ca17ce971d34dcd3b159b13a992cbd62669d2691abc3fd6e780b17a1 30990 libavahi-qt4-1_0.6.23-2_i386.deb
 52c0ecb5b4800a303d3cdfe643b8f63a264465c6f5e17b1c822bac95097e654a 31646 libavahi-qt4-dev_0.6.23-2_i386.deb
 1477e450d7a604e6dd7cc86fa125cecbb42488abae9cf4b770abee202ac22bb6 46154 libavahi-compat-howl0_0.6.23-2_i386.deb
 5e205bda7da97377798b1f4ff256d4ea7fe377a8313b207b7a66aeb9ec8df67b 59084 libavahi-compat-howl-dev_0.6.23-2_i386.deb
 e7401a8f8e59046984bdce57216f8188240e97a6f1093a23b3637c9a908e056a 39720 libavahi-compat-libdnssd1_0.6.23-2_i386.deb
 58ec67170a7bd2a4b013376f6ac194818fd15ac4a1c2c0d0e22339c128d61df1 58640 libavahi-compat-libdnssd-dev_0.6.23-2_i386.deb
 2d3a6e749f93610a71171290de15ea2b2144872a22bdbcb4c9ff9e4872bc2dc7 44824 libavahi-ui0_0.6.23-2_i386.deb
 bc5df8fa1bafd8940040312e15916b6cb70f36d9ed2ba4e097bd07684d8decd6 46360 libavahi-ui-dev_0.6.23-2_i386.deb
 35f19ff1a121a09f3a97ee4c9de58bf4d04479e534384df00a9b8f6639bbed44 33660 avahi-ui-utils_0.6.23-2_i386.deb
 d85c3da5d2595333d7f8e96cf2a864971751663beb59176ab9e5d369d00a1d8d 649978 avahi-dbg_0.6.23-2_i386.deb
Files: 
 2e016a0ba2e1f3261fea66c73d83a5e8 2294 net optional avahi_0.6.23-2.dsc
 6b55de89f459efd7e938291cc62477a5 29564 net optional avahi_0.6.23-2.diff.gz
 01bc4a950dd28629219f34376d28280d 29012 python optional python-avahi_0.6.23-2_all.deb
 8d667182425f6029c14ef031e98661b2 36402 net optional avahi-discover_0.6.23-2_all.deb
 50d77368a88d9a994989ea3482a7ebda 87222 net optional avahi-daemon_0.6.23-2_i386.deb
 d89fde1f94c32d96736ec571c168c7a9 38006 net optional avahi-dnsconfd_0.6.23-2_i386.deb
 067247f24624d44bea4c1ca0284dc64a 47770 net optional avahi-autoipd_0.6.23-2_i386.deb
 a1ed1d2c9637afb5d80c6af6b359140f 50708 net optional avahi-utils_0.6.23-2_i386.deb
 14a58a8b717d026423be9d9656fb3e9d 46986 libs optional libavahi-common3_0.6.23-2_i386.deb
 2b9914f17096aef50db8363d0df92e25 31638 libs optional libavahi-common-data_0.6.23-2_i386.deb
 d5f37cd7920d93e10dbef07952106bb4 65816 libdevel optional libavahi-common-dev_0.6.23-2_i386.deb
 714ffc7c0dcd8eb67b84ad37bfd3a524 114518 libs optional libavahi-core5_0.6.23-2_i386.deb
 db19eb2343781627e8975db34b4e81dc 150988 libdevel optional libavahi-core-dev_0.6.23-2_i386.deb
 0b62f6a091a85af59c8058e6f8723a34 51058 libs optional libavahi-client3_0.6.23-2_i386.deb
 d614f9672bfe08dd722216959301621a 60846 libdevel optional libavahi-client-dev_0.6.23-2_i386.deb
 7fcef641a05192ba15900dfeea2b4d0a 31458 libs optional libavahi-glib1_0.6.23-2_i386.deb
 35fe32b08ea9406457fd05cba9823f39 32618 libdevel optional libavahi-glib-dev_0.6.23-2_i386.deb
 cc41ed387d48fca07ad72bc9a67716c0 41250 libs optional libavahi-gobject0_0.6.23-2_i386.deb
 71453a6df58c21144bb4ab8f258be7c4 48152 libdevel optional libavahi-gobject-dev_0.6.23-2_i386.deb
 7ef48843eef565902a3557807a223f8d 32862 libs optional libavahi-qt3-1_0.6.23-2_i386.deb
 bbfcfba9a087d69821707b4a4f960b4d 33184 libdevel optional libavahi-qt3-dev_0.6.23-2_i386.deb
 a9832bb5402d4df57d329e4477bdf011 30990 libs optional libavahi-qt4-1_0.6.23-2_i386.deb
 3eaf7957b7c5a11e8477152fd840bcab 31646 libdevel optional libavahi-qt4-dev_0.6.23-2_i386.deb
 3a30ff38b8a261ea896d1c4d8e3bdf11 46154 libs optional libavahi-compat-howl0_0.6.23-2_i386.deb
 0ec51f3645cb00cdbdc88cf112c27531 59084 libdevel optional libavahi-compat-howl-dev_0.6.23-2_i386.deb
 eb2007039db791472ce0684a2fc07044 39720 libs optional libavahi-compat-libdnssd1_0.6.23-2_i386.deb
 0f31fff55d2e73f4729f69bcb3b971c0 58640 libdevel optional libavahi-compat-libdnssd-dev_0.6.23-2_i386.deb
 07497439e00d1ba0b14c0b3aa5113a6c 44824 libs optional libavahi-ui0_0.6.23-2_i386.deb
 6bee253dcb97583592bf23afff25fe6c 46360 libdevel optional libavahi-ui-dev_0.6.23-2_i386.deb
 5f83ca4b2735538df987144171749c09 33660 libs optional avahi-ui-utils_0.6.23-2_i386.deb
 1b6981ff978b4ea98f9fed5a493962e7 649978 libdevel extra avahi-dbg_0.6.23-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkhvaz0ACgkQh7PER70FhVTWzwCgguSDvx/f/tkQWheGYAJCm3Q/
n9EAnR5zix1qDMgIEnjkWbLkHTZm4Mag
=Yv1E
-----END PGP SIGNATURE-----





Information forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Ted Percival <ted@midg3t.net>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #22 received at 464712@bugs.debian.org (full text, mbox, reply):

From: Ted Percival <ted@midg3t.net>
To: 464712@bugs.debian.org
Cc: control@bugs.debian.org
Subject: avahi-daemon needs "Depends libcap2 (>= 2.10)" too
Date: Wed, 09 Jul 2008 16:41:44 +1000
reopen 464712
found avahi-daemon/0.6.23-2
thanks

The libcap2 dependency is more nuanced than I realised. In order to
avoid a similar warning (warning: `avahi-daemon' uses deprecated v2
capabilities in a way that may be insecure.") the libcap2 package must
be >= 2.10 as well (not just libcap2-dev).

I guess this versioned "Depends" should be added explicitly.

For details see
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=kernel/capability.c;h=901e0fdc3fffa3b32fca26e0aa4e1985b244bd10;hb=HEAD#l55
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ca05a99a54db1db5bca72eccb5866d2a86f8517f
https://bugzilla.redhat.com/show_bug.cgi?id=447518




Bug reopened, originator not changed. Request was from Ted Percival <ted@midg3t.net> to control@bugs.debian.org. (Wed, 09 Jul 2008 06:45:04 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Sven Joachim <svenjoac@gmx.de>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #29 received at 464712@bugs.debian.org (full text, mbox, reply):

From: Sven Joachim <svenjoac@gmx.de>
To: Ted Percival <ted@midg3t.net>
Cc: 464712@bugs.debian.org, libcap2@packages.debian.org
Subject: Re: Bug#464712: avahi-daemon needs "Depends libcap2 (>= 2.10)" too
Date: Wed, 09 Jul 2008 09:24:51 +0200
On 2008-07-09 08:41 +0200, Ted Percival wrote:

> reopen 464712
> found avahi-daemon/0.6.23-2
> thanks
>
> The libcap2 dependency is more nuanced than I realised. In order to
> avoid a similar warning (warning: `avahi-daemon' uses deprecated v2
> capabilities in a way that may be insecure.") the libcap2 package must
> be >= 2.10 as well (not just libcap2-dev).
>
> I guess this versioned "Depends" should be added explicitly.
>
> For details see
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=kernel/capability.c;h=901e0fdc3fffa3b32fca26e0aa4e1985b244bd10;hb=HEAD#l55
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ca05a99a54db1db5bca72eccb5866d2a86f8517f
> https://bugzilla.redhat.com/show_bug.cgi?id=447518

Would it not be better to fix this in libcap2's shlibs file?  I.e. use

libcap 2 libcap2 (>= 2.10-1)

there and let avahi-daemon and other packages build-depend on
libcap2-dev (>= 2.10-3), assuming that 2.10-3 is the version containing
that shlibs file.

Sven





Information forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Michael Biebl <biebl@debian.org>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #34 received at 464712@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>
To: Sven Joachim <svenjoac@gmx.de>, 464712@bugs.debian.org
Cc: Ted Percival <ted@midg3t.net>, libcap2@packages.debian.org
Subject: Re: [Pkg-utopia-maintainers] Bug#464712: avahi-daemon needs "Depends libcap2 (>= 2.10)" too
Date: Wed, 09 Jul 2008 12:24:30 +0200
[Message part 1 (text/plain, inline)]
Sven Joachim wrote:
> On 2008-07-09 08:41 +0200, Ted Percival wrote:
> 
> Would it not be better to fix this in libcap2's shlibs file?  I.e. use
> 
> libcap 2 libcap2 (>= 2.10-1)
> 
> there and let avahi-daemon and other packages build-depend on
> libcap2-dev (>= 2.10-3), assuming that 2.10-3 is the version containing
> that shlibs file.
> 

I would prefer that, too.


Michael
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#464712; Package avahi-daemon. (full text, mbox, link).


Acknowledgement sent to Michael Biebl <biebl@debian.org>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>. (full text, mbox, link).


Message #39 received at 464712@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>
To: Sven Joachim <svenjoac@gmx.de>, 464712@bugs.debian.org
Cc: Ted Percival <ted@midg3t.net>, control@bugs.debian.org
Subject: Re: [Pkg-utopia-maintainers] Bug#464712: avahi-daemon needs "Depends libcap2 (>= 2.10)" too
Date: Fri, 11 Jul 2008 00:55:40 +0200
[Message part 1 (text/plain, inline)]
reassign 464712 libcap2
retitle 464712 bump shlibs to >= 2.10
thanks

Sven Joachim wrote:
> On 2008-07-09 08:41 +0200, Ted Percival wrote:
> 
>> reopen 464712
>> found avahi-daemon/0.6.23-2
>> thanks
>>
>> The libcap2 dependency is more nuanced than I realised. In order to
>> avoid a similar warning (warning: `avahi-daemon' uses deprecated v2
>> capabilities in a way that may be insecure.") the libcap2 package must
>> be >= 2.10 as well (not just libcap2-dev).
>>
>> I guess this versioned "Depends" should be added explicitly.

I don't think this would be a good idea. There will already be a 
autogenerated dependency on libcap2 from dh_shlibsdeps.

>>
>> For details see
>> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=kernel/capability.c;h=901e0fdc3fffa3b32fca26e0aa4e1985b244bd10;hb=HEAD#l55
>> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ca05a99a54db1db5bca72eccb5866d2a86f8517f
>> https://bugzilla.redhat.com/show_bug.cgi?id=447518
> 
> Would it not be better to fix this in libcap2's shlibs file?  I.e. use
> 
> libcap 2 libcap2 (>= 2.10-1)
> 
> there and let avahi-daemon and other packages build-depend on
> libcap2-dev (>= 2.10-3), assuming that 2.10-3 is the version containing
> that shlibs file.

I'm reassigning this bug to libcap2 and let its maintainer decide.
If he deems the security issue important enough, the shlibs file should 
be bumped and he should request binNMUs for all reverse-dependencies.

Cheers,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Bug reassigned from package `avahi-daemon' to `libcap2'. Request was from Michael Biebl <biebl@debian.org> to control@bugs.debian.org. (Thu, 10 Jul 2008 22:57:03 GMT) (full text, mbox, link).


Changed Bug title to `bump shlibs to >= 2.10' from `warning: `avahi-daemon' uses 32-bit capabilities (legacy support in use)'. Request was from Michael Biebl <biebl@debian.org> to control@bugs.debian.org. (Thu, 10 Jul 2008 22:57:04 GMT) (full text, mbox, link).


Tags removed: patch Request was from Michael Biebl <biebl@debian.org> to control@bugs.debian.org. (Fri, 11 Jul 2008 03:42:02 GMT) (full text, mbox, link).


Reply sent to Torsten Werner <twerner@debian.org>:
You have taken responsibility. (Wed, 03 Dec 2008 23:27:09 GMT) (full text, mbox, link).


Notification sent to Ralf Hildebrandt <ralf.hildebrandt@charite.de>:
Bug acknowledged by developer. (Wed, 03 Dec 2008 23:27:09 GMT) (full text, mbox, link).


Message #50 received at 464712-close@bugs.debian.org (full text, mbox, reply):

From: Torsten Werner <twerner@debian.org>
To: 464712-close@bugs.debian.org
Subject: Bug#464712: fixed in libcap2 2.15-2
Date: Wed, 03 Dec 2008 23:02:03 +0000
Source: libcap2
Source-Version: 2.15-2

We believe that the bug you reported is fixed in the latest version of
libcap2, which is due to be installed in the Debian FTP archive:

libcap2-bin_2.15-2_i386.deb
  to pool/main/libc/libcap2/libcap2-bin_2.15-2_i386.deb
libcap2-dev_2.15-2_i386.deb
  to pool/main/libc/libcap2/libcap2-dev_2.15-2_i386.deb
libcap2_2.15-2.diff.gz
  to pool/main/libc/libcap2/libcap2_2.15-2.diff.gz
libcap2_2.15-2.dsc
  to pool/main/libc/libcap2/libcap2_2.15-2.dsc
libcap2_2.15-2_i386.deb
  to pool/main/libc/libcap2/libcap2_2.15-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 464712@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Torsten Werner <twerner@debian.org> (supplier of updated libcap2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 03 Dec 2008 23:42:19 +0100
Source: libcap2
Binary: libcap2-dev libcap2-bin libcap2
Architecture: source i386
Version: 2.15-2
Distribution: experimental
Urgency: low
Maintainer: Torsten Werner <twerner@debian.org>
Changed-By: Torsten Werner <twerner@debian.org>
Description: 
 libcap2    - support for getting/setting POSIX.1e capabilities
 libcap2-bin - basic utility programs for using capabilities
 libcap2-dev - development libraries and header files for libcap2
Closes: 464712
Changes: 
 libcap2 (2.15-2) experimental; urgency=low
 .
   * Update shlibs file libcap2 (>= 2.10). (Closes: #464712)
Checksums-Sha1: 
 876924853be799ce6c6470252284f5fd4212b38e 1168 libcap2_2.15-2.dsc
 552f4d2cf03233fcceaf8d70ebe82790a6c9e75e 4739 libcap2_2.15-2.diff.gz
 fa0fe11b749f1d46105b43c77e049e679dcd5725 17310 libcap2-dev_2.15-2_i386.deb
 0ace1d7ece18c9c2f64e2bf7bfce723f9d240f15 18152 libcap2-bin_2.15-2_i386.deb
 5799fe7ad6b76449067b0bd37497c0f972cca645 10940 libcap2_2.15-2_i386.deb
Checksums-Sha256: 
 7e2441b18567bbe75a80deeb1940d2865a544488677f576d1dae1f44834aa437 1168 libcap2_2.15-2.dsc
 8cf415203aa746ad7f6dfe928a92b0f9a6df54d9c98917df8e8b9b59988649d4 4739 libcap2_2.15-2.diff.gz
 dc7c9f018db301288fd16abdb323dcedba993ac23db2e0d33328a6048243f30a 17310 libcap2-dev_2.15-2_i386.deb
 43ca898d785a34fc6cdab54bf72b88e06f9901ed4d1003e71ff86f95477e7c9e 18152 libcap2-bin_2.15-2_i386.deb
 4b6445531fc1963ae67f68520db7639e5f2c2f2755d4cff079a6981b11813eb0 10940 libcap2_2.15-2_i386.deb
Files: 
 2ffe13c56260099b7d1352dd8bc08d9a 1168 libs optional libcap2_2.15-2.dsc
 76bf1c69f993e8c49c1423596bf34bd2 4739 libs optional libcap2_2.15-2.diff.gz
 18a1ba5dcc6f24f47c6c81441208243b 17310 libdevel optional libcap2-dev_2.15-2_i386.deb
 c2a83161339e76f780e7765bd4d5189d 18152 utils optional libcap2-bin_2.15-2_i386.deb
 8ca9efc8e1da491406e16a1b463fb78d 10940 libs optional libcap2_2.15-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkk3DFMACgkQfY3dicTPjsM4tgCgjUhcQq4BIoooGlZIiicLAtqU
FnUAoJhJ1/PxbtR3zP6kNG4RLeh/hSVZ
=4/Fa
-----END PGP SIGNATURE-----





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 26 Mar 2009 07:28:13 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Jan 11 05:28:54 2018; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.