May 2008 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] Anyone use samba?
by Aaron Griffin 04 Jun '08

04 Jun '08

I saw this bug today: http://bugs.archlinux.org/task/10526 I do not use samba, but could update it and pray if no one else actually uses it. Cheers, Aaron

6 8

[arch-dev-public] [signoff] openssl-0.9.8g
by Pierre Schmitz 04 Jun '08

04 Jun '08

Hi, I just uploaded a new release of openssl to testing. It fixes some security issues (see changelog below). So please sign-off. In addition to this I had to rebuilt ntp and fix its depends to openssl. Last but not least according to the changelog openssl does not provide any root-certs anymore. If there are any apps which rely on those, we should think about providing a separate root-certs package. Pierre Changes between 0.9.8g and 0.9.8h [28 May 2008] *) Fix flaw if 'Server Key exchange message' is omitted from a TLS handshake which could lead to a cilent crash as found using the Codenomicon TLS test suite (CVE-2008-1672) [Steve Henson, Mark Cox] *) Fix double free in TLS server name extensions which could lead to a remote crash found by Codenomicon TLS test suite (CVE-2008-0891) [Joe Orton] *) Clear error queue in SSL_CTX_use_certificate_chain_file() Clear the error queue to ensure that error entries left from older function calls do not interfere with the correct operation. [Lutz Jaenicke, Erik de Castro Lopo] *) Remove root CA certificates of commercial CAs: The OpenSSL project does not recommend any specific CA and does not have any policy with respect to including or excluding any CA. Therefore it does not make any sense to ship an arbitrary selection of root CA certificates with the OpenSSL software. [Lutz Jaenicke] *) RSA OAEP patches to fix two separate invalid memory reads. The first one involves inputs when 'lzero' is greater than 'SHA_DIGEST_LENGTH' (it would read about SHA_DIGEST_LENGTH bytes before the beginning of from). The second one involves inputs where the 'db' section contains nothing but zeroes (there is a one-byte invalid read after the end of 'db'). [Ivan Nestlerode <inestlerode(a)us.ibm.com>] *) Partial backport from 0.9.9-dev: Introduce bn_mul_mont (dedicated Montgomery multiplication procedure) as a candidate for BIGNUM assembler implementation. While 0.9.9-dev uses assembler for various architectures, only x86_64 is available by default here in the 0.9.8 branch, and 32-bit x86 is available through a compile-time setting. To try the 32-bit x86 assembler implementation, use Configure option "enable-montasm" (which exists only for this backport). As "enable-montasm" for 32-bit x86 disclaims code stability anyway, in this constellation we activate additional code backported from 0.9.9-dev for further performance improvements, namely BN_from_montgomery_word. (To enable this otherwise, e.g. x86_64, try "-DMONT_FROM_WORD___NON_DEFAULT_0_9_8_BUILD".) [Andy Polyakov (backport partially by Bodo Moeller)] *) Add TLS session ticket callback. This allows an application to set TLS ticket cipher and HMAC keys rather than relying on hardcoded fixed values. This is useful for key rollover for example where several key sets may exist with different names. [Steve Henson] *) Reverse ENGINE-internal logic for caching default ENGINE handles. This was broken until now in 0.9.8 releases, such that the only way a registered ENGINE could be used (assuming it initialises successfully on the host) was to explicitly set it as the default for the relevant algorithms. This is in contradiction with 0.9.7 behaviour and the documentation. With this fix, when an ENGINE is registered into a given algorithm's table of implementations, the 'uptodate' flag is reset so that auto-discovery will be used next time a new context for that algorithm attempts to select an implementation. [Ian Lister (tweaked by Geoff Thorpe)] *) Backport of CMS code to OpenSSL 0.9.8. This differs from the 0.9.9 implemention in the following ways: Lack of EVP_PKEY_ASN1_METHOD means algorithm parameters have to be hard coded. Lack of BER streaming support means one pass streaming processing is only supported if data is detached: setting the streaming flag is ignored for embedded content. CMS support is disabled by default and must be explicitly enabled with the enable-cms configuration option. [Steve Henson] *) Update the GMP engine glue to do direct copies between BIGNUM and mpz_t when openssl and GMP use the same limb size. Otherwise the existing "conversion via a text string export" trick is still used. [Paul Sheer <paulsheer(a)gmail.com>] *) Zlib compression BIO. This is a filter BIO which compressed and uncompresses any data passed through it. [Steve Henson] *) Add AES_wrap_key() and AES_unwrap_key() functions to implement RFC3394 compatible AES key wrapping. [Steve Henson] *) Add utility functions to handle ASN1 structures. ASN1_STRING_set0(): sets string data without copying. X509_ALGOR_set0() and X509_ALGOR_get0(): set and retrieve X509_ALGOR (AlgorithmIdentifier) data. Attribute function X509at_get0_data_by_OBJ(): retrieves data from an X509_ATTRIBUTE structure optionally checking it occurs only once. ASN1_TYPE_set1(): set and ASN1_TYPE structure copying supplied data. [Steve Henson] *) Fix BN flag handling in RSA_eay_mod_exp() and BN_MONT_CTX_set() to get the expected BN_FLG_CONSTTIME behavior. [Bodo Moeller (Google)] *) Netware support: - fixed wrong usage of ioctlsocket() when build for LIBC BSD sockets - fixed do_tests.pl to run the test suite with CLIB builds too (CLIB_OPT) - added some more tests to do_tests.pl - fixed RunningProcess usage so that it works with newer LIBC NDKs too - removed usage of BN_LLONG for CLIB builds to avoid runtime dependency - added new Configure targets netware-clib-bsdsock, netware-clib-gcc, netware-clib-bsdsock-gcc, netware-libc-bsdsock-gcc - various changes to netware.pl to enable gcc-cross builds on Win32 platform - changed crypto/bio/b_sock.c to work with macro functions (CLIB BSD) - various changes to fix missing prototype warnings - fixed x86nasm.pl to create correct asm files for NASM COFF output - added AES, WHIRLPOOL and CPUID assembler code to build files - added missing AES assembler make rules to mk1mf.pl - fixed order of includes in apps/ocsp.c so that e_os.h settings apply [Guenter Knauf <eflash(a)gmx.net>] *) Implement certificate status request TLS extension defined in RFC3546. A client can set the appropriate parameters and receive the encoded OCSP response via a callback. A server can query the supplied parameters and set the encoded OCSP response in the callback. Add simplified examples to s_client and s_server. [Steve Henson] -- archlinux.de

6 14

[arch-dev-public] New nvidia drivers in testing
by Thomas Bächler 03 Jun '08

03 Jun '08

The new nvidia drivers have finally been released. They are in testing now for both architectures. I upload them completely untested, as my desktop is unaccessible until tomorrow. I dropped the libnvidia-wfb from the package, as it does the same as Xorg's libwfb and our xorg-server is sufficiently new (at least as far as I was told). Please report and working/non-working GPUs, I hope we can move this to extra soon.

3 3

[arch-dev-public] Moving and a birthday (this weekend)
by Aaron Griffin 02 Jun '08

02 Jun '08

Hey guys, I wanted to let you know I am moving apartments this weekend, and Sunday is also my birthday (woo?). So I will be pretty much offline. I will be around to check email every so often though, so if something important comes up, send me a direct mail and I'll get to it. Cheers, Aaron

3 4

[arch-dev-public] abs tree checker
by Xavier 01 Jun '08

01 Jun '08

Hello, stonecrest wrote a very useful script in my opinion a while ago : http://www.archlinux.org/pipermail/arch/2007-November/016238.html However, it hasn't been updated since the svn move and the new abs. It had a feature to fetch the abs tree itself, using csup directly. But anyway it is not required, abs can be used manually instead, so I just removed that part. The second problem is the directory structure, which is now different for core/extra/etc, where the package dir are on the first level, compared to community which still has the old layout with an additional level of category. This breaks the following function : def repo_from_path(path): return path.split("/")[-4] It should be -4 for community and -3 for the rest. Instead I just used 3, but it will only work on /var/abs/ tree (or any other structure with just 2 directory levels). Anyway, this was just two quick hacks to get the script working again and see what were its results now. And it is still far from perfect :) I think this script is something that packagers (of the official repos) should check regularly to ensure the quality of arch pkgbuilds and packages. So here is the result I get currently : $ ./check_archlinux.py --abs-tree=/var/abs ======================== = i686 Integrity Check = ======================== Performing integrity checks... ==> parsing pkgbuilds ==> checking dependencies ==> checking makedepends ==> checking archs ==> checking for circular dependencies ==> checking repo packages Missing PKGBUILDs ------------------- /community/devel/codeblocks/PKGBUILD /community/devel/php-apc/PKGBUILD /community/kde/kima/PKGBUILD /community/system/pommed/PKGBUILD /community/x11/gpomme/PKGBUILD /community/x11/e/PKGBUILD /community/lib/python-ctypes/PKGBUILD /community/lib/python-elementtree/PKGBUILD /community/multimedia/miro/PKGBUILD /community/gnome/cheese/PKGBUILD Mismatched Pkgnames --------------------- 'dbhub' vs. /community/daemons/dbhub/PKGBUILD 'dina-font' vs. /community/x11/dina-font/PKGBUILD 'offlineimap' vs. /community/network/offlineimap/PKGBUILD Missing Dependencies ---------------------- fldigi-docs --> 'acroread' gnome-media --> 'gstreamer0.10-gconf' listen --> 'gstreamer0.10-gconf' listen --> 'gstreamer0.10-alsa' listen --> 'gstreamer0.10-mad' listen --> 'gstreamer0.10-vorbis' perl-mail-dkim --> 'perl-digest-sha' perl-app-cli --> 'perl-locale-maketext-simple' striim --> 'gstreamer0.10-mad' striim --> 'gstreamer0.10-gnomevfs' medit --> 'gcc-objc' soundconverter --> 'gstreamer0.10-gnomevfs' soundconverter --> 'gstreamer0.10-vorbis' soundconverter --> 'gstreamer0.10-lame' soundconverter --> 'gstreamer0.10-flac' soundconverter --> 'gstreamer0.10-mad' flumotion --> 'gstreamer0.10-libpng' flumotion --> 'gstreamer0.10-vorbis' flumotion --> 'gstreamer0.10-theora' flumotion --> 'gstreamer0.10-ogg' fdlog --> 'acroread' jokosher --> 'gstreamer0.10-gnomevfs' gnustep-gui --> 'gcc-objc' kungfu --> 'gstreamer0.10-dvdread' kungfu --> 'gstreamer0.10-mpeg2dec' kungfu --> 'gstreamer0.10-libpng' kungfu --> 'gstreamer0.10-theora' perl-critic --> 'perl-readonly' thoggen --> 'gstreamer0.10-theora' thoggen --> 'gstreamer0.10-dvdread' thoggen --> 'gstreamer0.10-a52dec' thoggen --> 'gstreamer0.10-mpeg2dec' thoggen --> 'gstreamer0.10-vorbis' thoggen --> 'gstreamer0.10-ogg' perl-graphics-colornames --> 'perl-module-load' exaile --> 'gstreamer0.10-gnomevfs' exaile --> 'gstreamer0.10-gconf' bmpx --> 'gstreamer0.10-alsa' bmpx --> 'gstreamer0.10-cdparanoia' archboot --> 'rt2x00-cvs' archboot --> 'iwlwifi' ion-modules --> 'ion' ion-modules --> 'ion-scripts' gnustep-back --> 'gcc-objc' quodlibet --> 'gstreamer0.10-mad' quodlibet --> 'gstreamer0.10-vorbis' gnustep-base --> 'gcc-objc' muine --> 'gstreamer0.10-faad' Missing Makedepends --------------------- perl-app-cli --> 'perl-locale-maketext-simple' perl-time-duration --> 'perl-test-pod-coverage' pandoc --> 'haskell-mtl' pygoocanvas --> 'pygobject-doc' perl-graphics-colornames --> 'perl-module-load' totem-plugin --> 'gstreamer0.10-gconf' gensplash --> 'klibc-beyond' Unmet Dependency Provisions ----------------------------- fldigi-docs --> 'fldigi=2.10' d4x --> 'openssl<=0.9.8' bincimap --> 'openssl<=0.9.8' arora-git --> 'qt>=4.4.0' drscheme --> 'openssl<=0.9.8' eclipse-ve --> 'eclipse<3.3' socat --> 'openssl<=0.9.8' qc-usb --> 'kernel26<2.6.25' libfwbuilder --> 'openssl<=0.9.8' acerhk --> 'kernel26<2.6.25' martian --> 'kernel26<=2.6.25-0' Unmet Makedepends Provisions ------------------------------ wpa_supplicant --> 'kernel26<2.6.25' v86d --> 'kernel26<2.6.25' Repo Hierarchy for Makedepends -------------------------------- extra/xosd depends on community/xmms extra/flac depends on community/xmms core/iputils depends on extra/jade core/madwifi-utils depends on extra/sharutils core/e2fsprogs depends on extra/bc core/madwifi depends on extra/sharutils Invalid Archs --------------- libofa --> x64_86 kexec-tools --> 686 zsnes --> ppc mod_perl --> x64_86 minicom --> !x86_64 Circular Dependencies ----------------------- coreutils>pam>db>coreutils eclipse-ecj>gcc-gcj>eclipse-ecj archboot>archboot Missing Repo Packages ----------------------- postgis-1.2.1-1 in community/os/i686 lmms-0.3.2-1 in community/os/i686 sakura-2.1.0-2 in community/os/i686 'dina-font'-2.89-2 in community/os/i686 qc-usb-0.6.6-6 in community/os/i686 musicmanager-0.9.8-1 in community/os/i686 open-vm-tools-modules-2008.04.14-1 in community/os/i686 proj-4.5.0-2 in community/os/i686 'offlineimap'-5.99.14-1 in community/os/i686 'dbhub'-'0.450'-3 in community/os/i686 open-vm-tools-2008.04.14-1 in community/os/i686 gnash-common-0.8.2-1 in extra/os/i686 evolution-data-server-2.22.1.1-1 in extra/os/i686 enscript-1.6.4-3 in extra/os/i686 Summary --------- Dirs with missing PKGBUILDs: 10 Duplicate PKGBUILDs: 0 Missing (make)dependencies: 55 Unmet provisioned (make)dependencies: 13 Circular dependencies: 3 Invalid archs: 5 Missing packages in repos: 14 Mismatching PKGBUILD names: 3 Repo hierarchy problems: 6

3 3

[arch-dev-public] new arch-events mailinglist (next event FrosCon)
by Pierre Schmitz 31 May '08

31 May '08

Hi, there is a new mailinglist about Arch related events: http://archlinux.org/mailman/listinfo/arch-events This list is meant for organisation and discussion about upcoming events such as FrosCon 2008. If you are interested in taking part of this conference and/or want to help with organisation please subscribe to this public list. Pierre -- archlinux.de

2 2

[arch-dev-public] licenses
by Paul Mattal 31 May '08

31 May '08

I've started a pet project.. going through and adding licenses for packages without them. Not sure how long I'll be able to keep at it, but I'll just keep going as long as I can stand it. I encourage you all to add licenses for packages you maintain, if you can, while you're in there updating them. There's MANY packages without them (over 1000). I got through finding licenses for 64 packages in a couple of hours; they're not always easy to track down. It's much easier when you already have the source downloaded and can just look for a COPYING or LICENSE file. Cheat sheet for what we call the various GPL variants in the license=() array: * (L)GPL - (L)GPLv2 or any later version * (L)GPL2 - (L)GPL2 only * (L)GPL3 - (L)GPL3 or any later version I just added the license line to the trunk PKGBUILD.. nothing more. So you should get these on your next rebuild. Just an attempt to contribute some grunt work to the cause. - P

2 2

[arch-dev-public] [PATCH] Allow repo name to be specified on command line
by dpmcgee＠gmail.com 31 May '08

31 May '08

From: Dan McGee <dan(a)archlinux.org> Move the extrapkg script to the name repopkg. All of the corepkg/extrapkg etc. scripts will retain their same behavior; however if the program is called with the name repopkg the first parameter passed will be used as the repository name to upload to. Note that the non-existence of this directory on the remote end will probably result in failure. Signed-off-by: Dan McGee <dan(a)archlinux.org> --- Makefile | 14 ++++++++------ extrapkg => repopkg | 7 +++++-- 2 files changed, 13 insertions(+), 8 deletions(-) rename extrapkg => repopkg (96%) diff --git a/Makefile b/Makefile index 384e7e0..75c83c9 100644 --- a/Makefile +++ b/Makefile @@ -1,13 +1,14 @@ all: install: - # extrapkg/checkpkg and friends + # repopkg/checkpkg and friends mkdir -p $(DESTDIR)/usr/bin install -m 755 checkpkg $(DESTDIR)/usr/bin - install -m 755 extrapkg $(DESTDIR)/usr/bin - ln -sf extrapkg $(DESTDIR)/usr/bin/corepkg - ln -sf extrapkg $(DESTDIR)/usr/bin/testingpkg - ln -sf extrapkg $(DESTDIR)/usr/bin/unstablepkg + install -m 755 repopkg $(DESTDIR)/usr/bin + ln -sf repopkg $(DESTDIR)/usr/bin/corepkg + ln -sf repopkg $(DESTDIR)/usr/bin/extrapkg + ln -sf repopkg $(DESTDIR)/usr/bin/testingpkg + ln -sf repopkg $(DESTDIR)/usr/bin/unstablepkg # arch{co,release,rm} install -m 755 archco $(DESTDIR)/usr/bin install -m 755 archrelease $(DESTDIR)/usr/bin @@ -23,8 +24,9 @@ install: uninstall: # remove all files we installed rm $(DESTDIR)/usr/bin/checkpkg - rm $(DESTDIR)/usr/bin/extrapkg + rm $(DESTDIR)/usr/bin/repopkg rm $(DESTDIR)/usr/bin/corepkg + rm $(DESTDIR)/usr/bin/extrapkg rm $(DESTDIR)/usr/bin/testingpkg rm $(DESTDIR)/usr/bin/unstablepkg rm $(DESTDIR)/usr/sbin/mkarchroot diff --git a/extrapkg b/repopkg similarity index 96% rename from extrapkg rename to repopkg index fa72c53..04b6451 100755 --- a/extrapkg +++ b/repopkg @@ -13,7 +13,7 @@ if [ -r ~/.makepkg.conf ]; then source ~/.makepkg.conf fi -cmd=`basename $0` +cmd=$(basename $0) if [ ! -f PKGBUILD ]; then echo "No PKGBUILD file" @@ -38,7 +38,10 @@ if [ ! -f $pkgfile ]; then fi fi -if [ "$cmd" == "extrapkg" ]; then +if [ "$cmd" == "repopkg" ]; then + repo="$1" + shift +elif [ "$cmd" == "extrapkg" ]; then repo="extra" elif [ "$cmd" == "corepkg" ]; then repo="core" -- 1.5.5.3

3 3

[arch-dev-public] Staging directories on gerolde
by Thayer Williams 30 May '08

30 May '08

On Fri, May 30, 2008 at 10:16 AM, Travis Willard <travis(a)archlinux.org> wrote: > On Fri, May 30, 2008 at 1:01 PM, Thayer Williams <thayer(a)archlinux.org> wrote: >> I've updated the kde-common package for i686, but I can't build it for >> x86_64. I guess it's time to start looking for a 3rd computer... > > Actually, this is one of those packages that could easily be for the > 'any' arch. Basically, since it's all scripts, and all of 'em are > just copied into the proper locations, you can cheat - change your > arch in makepkg.conf, rebuild the package (generating an x86_64 > package, which is identical to the i686 one) and upload it, then > change back your makepkg.conf > > Since you're not building any code, this'll work fine. ...splitting this thread before its deviates further: I just attempted to commit an x86_64 package and extrapkg spat out: scp: staging/extra64/add/kde-common-3.5.9-2-x86_64.pkg.tar.gz: No such file or directory md5sum: staging/extra64/add/kde-common-3.5.9-2-x86_64.pkg.tar.gz: No such file or directory File got corrupted during upload, cancelled. I had removed the {repo}64 dirs from ~/staging last week after reading somewhere that we didn't need these any longer. However, as soon as I added them again the package committed as expected. Is this is a bug or did I miss something else about the staging dirs?

2 2

[arch-dev-public] Questions about Archlinux branding/artwork for KDE
by Thayer Williams 30 May '08

30 May '08

I'm putting together a new package that will contain artwork and branding for KDE. While reviewing the existing kde-common package, I noticed we're also providing defaults for font types and sizes as well as general konqueror settings. I don't plan to include the preferences in the branding package, but I was wondering whether we should be providing these at all. Are the KDE defaults so bad that we need to override them? I figured now would be a good time to discuss this since the existing package will be getting a major overhaul. As far as I can tell, the only things that appear necessary are the kdm rc.d scripts and related environment files...

7 20