- Arch-announce - lists.archlinux.org

[arch-announce] openssh-7.0p1 deprecates ssh-dss keys
by Arch Linux: Recent news updates: Gaetan Bisson 14 Aug '15

14 Aug '15

In light of recently discovered vulnerabilities, the new `openssh-7.0p1` release deprecates keys of `ssh-dss` type, also known as DSA keys. See the [upstream announcement][1] for details. Before updating and restarting `sshd` on a remote host, make sure you do not rely on such keys for connecting to it. To enumerate DSA keys granting access to a given account, use: grep ssh-dss ~/.ssh/authorized_keys If you have any, ensure you have alternative means of logging in, such as key pairs of a different type, or password authentication. Finally, host keys of `ssh-dss` type being deprecated too, you might have to confirm a new fingerprint (for a host key of a different type) when connecting to a freshly updated server. [1]: http://lists.mindrot.org/pipermail/openssh-unix- announce/2015-August/000122.html URL: https://www.archlinux.org/news/openssh-70p1-deprecates-ssh-dss-keys/

1 0

[arch-announce] Data corruption on software RAID 0 when discard is used
by Arch Linux: Recent news updates: Evangelos Foutras 22 May '15

22 May '15

Recent Linux kernels (4.0.2+, LTS 3.14.41+), pushed to the [core] repository in the past couple of weeks, were affected by a bug that can cause data corruption on file systems mounted with the `discard` option and residing on software RAID 0 arrays. The issue has been addressed in the `linux 4.0.4-2` and `linux-lts 3.14.43-2` updates. Due to the nature of the bug, however, it is likely that data corruption has already occurred on systems running the aforementioned kernels. It is strongly advised to verify the integrity of affected file systems using `fsck` and/or restore their data from known good backups. For further information please read the [LKML post][1] by Holger Kiehl, the [related article][2] on Phoronix, as well as the [proposed fix][3] that was backported to the Arch kernels. [1]: https://lkml.org/lkml/2015/5/21/167 [2]: http://www.phoronix.com/scan.php?page=news_item&px=Linux-4-EXT4-RAID- Issue-Found [3]: http://git.neil.brown.name/?p=md.git;a=commitdiff;h=a81157768a00e8cf8a7b 43b5ea5cac931262374f URL: https://www.archlinux.org/news/data-corruption-on-software-raid-0-when-disc…

1 0

[arch-announce] Puppet 4.0 enters [community]
by Arch Linux: Recent news updates: Lukas Fleischer 17 May '15

17 May '15

Puppet 4 has been released and breaks compatibility with version 3. Therefore users will need to upgrade a server to Puppet 4 before updating their clients. Note that if only a Puppet 4 server is available, Puppet 3 clients will not work. Also a number of locations for things have changed including the config, manifest and module files. You will need to follow upgrade instructions for your servers and clients: * [https://docs.puppetlabs.com/puppet/4.0/reference/upgrade_server.html][1] * [https://docs.puppetlabs.com/puppet/4.0/reference/upgrade_agent.html][2] [1]: https://docs.puppetlabs.com/puppet/4.0/reference/upgrade_server.html [2]: https://docs.puppetlabs.com/puppet/4.0/reference/upgrade_agent.html URL: https://www.archlinux.org/news/puppet-40-enters-community/

1 0

[arch-announce] PulseAudio split
by Arch Linux: Recent news updates: Jan Steffens 16 May '15

16 May '15

Some modules have been split from the `pulseaudio` package to avoid having modules with missing dynamic libraries. Please check which modules you need and reinstall them. The split out modules are: * `pulseaudio-bluetooth`: Bluetooth (Bluez) support * `pulseaudio-equalizer`: Equalizer sink (qpaeq) * `pulseaudio-gconf`: GConf support (paprefs) * `pulseaudio-jack`: JACK sink, source and jackdbus detection * `pulseaudio-lirc`: Infrared (LIRC) volume control * `pulseaudio-xen`: Xen paravirtual sink * `pulseaudio-zeroconf`: Zeroconf (Avahi/DNS-SD) support URL: https://www.archlinux.org/news/pulseaudio-split/

1 0

[arch-announce] xorg-server 1.17.1 is now available
by Arch Linux: Recent news updates: Laurent Carlier 15 Feb '15

15 Feb '15

The new version comes with the following changes: * following ustream, xf86-video-modesetting is now provided with xorg-server package. * These packages are deprecated and moved to AUR, some are replaced by modesetting driver: xf86-video-ast, xf86-video-cirrus, xf86-video-geode, xf86 -video-mga, xf86-video-sisimedia, xf86-video-v4l URL: https://www.archlinux.org/news/xorg-server-1171-is-now-available/

1 0

[arch-announce] Transition of KDE software to the KDE Framework and Qt 5
by Arch Linux: Recent news updates: Andrea Scarpino 26 Jan '15

26 Jan '15

The KDE Software Collection has been updated to KDE Applications 14.12. The KDE developers have started porting their software to KDE Frameworks and Qt 5. For a list of the software that has been ported see [the announcement][1]. When a KDE Frameworks port of a KDE application is considered stable, it is released with KDE Applications and development and bug fixes are no longer applied to the Qt4/KDE4 version. This means that as ported versions of applications are released, we will switch to the newer version. At the same time, we are getting rid of KDE module prefixes (e.g. _kdebase-konsole -> konsole_). The result of this transition is that some packages will be using Qt5 and some will be using Qt4. We are working hard to make the transition smooth for KDE4 users, but things might look different depending on your configuration. Please adjust themes and colors as necessary for the two toolkits. See [the wiki][2] for help. We also recommend switching to Plasma 5.2 which will be released this week. Please report upstream bugs to the KDE bugzilla. Feel free to CC me. [1]: https://www.kde.org/announcements/announce-applications-14.12.0.php [2]: https://wiki.archlinux.org/index.php/KDE#Personalization URL: https://www.archlinux.org/news/transition-of-kde-software-to-the-kde-framew…

1 0

[arch-announce] Packaging changes in lirc 0.9.2
by Arch Linux: Recent news updates: Lukas Fleischer 20 Jan '15

20 Jan '15

For consistency with upstream naming, the lirc-utils package was renamed to lirc. The wpc8769l kernel drivers were dropped and can be obtained by installing [lirc-wpc8769l from the AUR][1]. Note that 0.9.2 is a major release and comes along with several upstream and packaging changes. In particular, the `irexec.service` systemd unit was removed. Please edit and copy the template `/usr/share/lirc/contrib/irexec.service` if you want to keep using that service. [1]: https://aur.archlinux.org/packages/lirc-wpc8769l/ URL: https://www.archlinux.org/news/packaging-changes-in-lirc-092/

1 0

[arch-announce] ca-certificates update
by Arch Linux: Recent news updates: Jan Steffens 11 Dec '14

11 Dec '14

The way local CA certificates are handled has changed. If you have added any locally trusted certificates: 1. Move /usr/local/share/ca-certificates/*.crt to /etc/ca-certificates/trust- source/anchors/ 2. Do the same with all manually-added /etc/ssl/certs/*.pem files and rename them to *.crt 3. Instead of `update-ca-certificates`, run `trust extract-compat` Also see `man 8 update-ca-trust` and `trust --help`. URL: https://www.archlinux.org/news/ca-certificates-update/

1 0

[arch-announce] GnuPG-2.1 and the pacman keyring
by Arch Linux: Recent news updates: Gaetan Bisson 08 Dec '14

08 Dec '14

The upgrade to gnupg-2.1 ported the pacman keyring to a new upstream format but in the process rendered the local master key unable to sign other keys. This is only an issue if you ever intend to customize your pacman keyring. We nevertheless recommend all users fix this by generating a fresh keyring. In addition, we recommend installing haveged, a daemon that generates system entropy; this speeds up critical operations in cryptographic programs such as gnupg (including the generation of new keyrings). To do all the above, run as root: pacman -Syu haveged systemctl start haveged systemctl enable haveged rm -fr /etc/pacman.d/gnupg pacman-key --init pacman-key --populate archlinux URL: https://www.archlinux.org/news/gnupg-21-and-the-pacman-keyring/

1 0

[arch-announce] Changes to Intel microcode updates
by Arch Linux: Recent news updates: Thomas Bächler 22 Oct '14

22 Oct '14

Microcode on Intel CPUs is no longer loaded automatically, as it needs to be loaded very early in the boot process. This requires adjustments in the bootloader. If you have an Intel CPU, please follow [the instructions in the wiki][1]. [1]: https://wiki.archlinux.org/index.php/Microcode#Enabling_Intel_Microcode_Upd… URL: https://www.archlinux.org/news/changes-to-intel-microcodeupdates/

1 0