May 2008 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] [signoff] patch 2.5.9-1
by Andreas Radke 08 May '08

08 May '08

an old outstanding update someone found and flagged. other distros(Debian, Gentoo, Frugal) also use 2.5.9 as their last stable release. -Andy Changes in versions 2.5.8 and 2.5.9: bug fixes only. Changes in version 2.5.7: * patch -D now outputs preprocessor lines without comments, as required by POSIX 1003.1-2001. Changes in version 2.5.6: * File names in context patches may now contain spaces, so long as the context patch headers use a tab to separate the file name from the time stamp. * Perforce is now supported. * Patch lines beginning with "#" are comments and are ignored. Changes in version 2.5.5: * The bug reporting address is now <bug-patch(a)gnu.org>.

4 4

[arch-dev-public] broken database entries
by Xavier 08 May '08

08 May '08

Hello, there are regularly some broken entries, with a FILENAME mismatch for example. A while ago, I reported a bug for two broken entries along with a simple one-line command that anyone can run to detect them : http://bugs.archlinux.org/task/9337 for i in /var/lib/pacman/sync/*/*; do grep -A1 FILENAME $i/desc | tail -n1 | grep -v $(basename $i) && echo $(basename $i); done This currently returns one broken entry : devtools, also reported here : http://bugs.archlinux.org/task/10262 Maybe this information is already obsolete with the new db scripts on the way (well, anyone can dream). And apparently a new devtools will come with the new db script, so that should also fix the db entry issue. This mail is simply a reminder that it's very easy to check the sync dbs for this kind of mismatch, and that 10262 can probably be closed when a new devtools is added.

2 1

[arch-dev-public] libldap 2.3.40-1
by Tom K 08 May '08

08 May '08

Hi all. In testing now, for both arches. Latest upstream release. Also in testing, openldap and openldap-clients from the extra repo. T.

5 7

[arch-dev-public] postgres move
by Pierre Schmitz 08 May '08

08 May '08

Hi all, how is the status of postgres in testing? It is blocking php from being move to extra. postgres is in testing for 3 month now; so could it be moved to extra as well? Pierre -- archlinux.de

5 7

[arch-dev-public] SVN repo view
by Aaron Griffin 08 May '08

08 May '08

This is being sent out to the public list, as the last discussion was internal. We now have a web front end to our PKGBUILDs at the URL: http://repos.archlinux.org Yes, it's themed, and yes, it's paged. You can also use it to view the old CVS repos too. Oh, also, it uses enscript to color PKGBUILDs, and I forced it to detect PKGBUILD files as bash. If someone wants to go crazy and make an enscript file (/usr/share/enscript/hl/*) for a PKGBUILD, then this viewer could be all the more better. Cheers, Aaron

2 5

[arch-dev-public] New DB scripts
by Aaron Griffin 07 May '08

07 May '08

Hey all, I'm comfortable enough with the new db scripts to throw them out in the wild. So, I've placed them at /arch-new for you to play with. Here are some caveats, however: * This will not update the website DB. Use at your discresion. Once these are "approved", then Eliott can move the new-model web changes out and the front end WILL be updated on a cron job. * There will be a warning about ~/staging/${REPO}64/ existing. This is expected. Because we have the arch in the filename, we don't need extra dirs anymore. Don't worry, the scripts handle it gracefully and a new devtools release will do away with pushing to the '64' dirs. Then we can clean up our staging dirs a bit. * I didn't fully test removal, because I didn't have anything to remove. If someone has a package to remove, let me know so I can test it properly. If you try, let me know if it fails. Neat things: * This can now _kinda_ create on-the-fly repos, but I locked it down a tad to prevent abuse. The following pattern should make a brand new repo with no problem: archrelease foobar-i686 ssh archlinux.org /arch-new/db-update foobar i686 Now, this actually requires someone with the right privileges to create /home/ftp/foobar, because I didn't want 400 repos being sent out to all our mirrors. * Should be much faster on the svn checkout and all that stuff * Uses repo-add which means we get the 5 or 6 DB values that we've been missing since pacman 3.0 was released. Now, when I "move these live", the following need to be done at the same time. * I need to rebuild ALL dbs with repo-add once, just to get some data for old packages in there. * We need to move the newmodel code so the front end is updated * We _should_ release a new devtools, for the staging dir changes Extra notes: * All cleanup scripts should be able to function off of a repo DB file, and be runnable as a cron job. I am going to be setting up Thomas' ftpdir-cleanup script as a cron job which will clean up all package files that are NOT in the db. No more dupe cleaning, yay! * packages.txt has been broken since we moved to svn. No one has noticed, I think. Should this be done away with, or should it be adapted as a cron-able task?

4 6

[arch-dev-public] [signoff] m4-1.4.11-1
by Andreas Radke 07 May '08

07 May '08

new version in testing for both arches. please signoff. -Andy * Noteworthy changes in Version 1.4.11 (2008-04-02) [stable] Released by Eric Blake, based on git version 1.4.10a ** Security fixes for the -F option, for bugs present since -F was introduced in 1.3: Avoid core dump with 'm4 -F file -t undefined', and avoid arbitrary code execution with certain file names. ** Fix regression introduced in 1.4.9b in the `divert' builtin when more than 512 kibibytes are saved in diversions on platforms like NetBSD or darwin where fopen(name,"a+") seeks to the end of the file. ** The output of the `maketemp' and `mkstemp' builtins is now quoted if a file was created. This is a minor security fix, because it was possible (although rather unlikely) that an unquoted string could match an existing macro name, such that use of the `mkstemp' output would trigger inadvertent macro expansion and operate on the wrong file name. ** Enhance the `defn' builtin to support concatenation of multiple text arguments, as required by POSIX. However, at this time, it is not possible to concatenate a builtin macro with anything else; a warning is now issued if this is attempted, although a future version of M4 may lift this restriction to match other implementations. ** Enhance the `format' builtin to parse all C99 floating point numbers, even on platforms where strtod(3) is buggy, although the replacement function does have the known issue of rounding errors when parsing some decimal floating point values. This fixes testsuite failures introduced in 1.4.9b. ** Enhance the `index' builtin to guarantee linear behavior, in spite of the surprisingly large number of systems with a brain-dead quadratic strstr(3). ** A number of portability improvements inherited from gnulib.

3 2

[arch-dev-public] [signoff] pkgconfig 0.23-1
by Andreas Radke 07 May '08

07 May '08

minor update in testing for both arches. -Andy pkg-config 0.23 === - Add support for setting sysroot through PKG_CONFIG_SYSROOT_DIR in the environment. - Update included glib to 1.2.10. - Other minor fixes, including a segfault.

2 1

[arch-dev-public] APNG patch in libpng
by Travis Willard 06 May '08

06 May '08

Hey guys, Recent exploit found in libpng < 1.2.27 (http://bugs.archlinux.org/task/10192#comment27550) is getting a lot of attention in our forums and bugtrackers, however since the APNG patch (included for firefox3's sake - http://bugs.archlinux.org/task/9570) isn't updated for the new libpng version yet, I'm blocked on updating this. If I drop APNG from libpng to ensure we get updates as quick as possible, this means firefox3 will need to be rebuilt without system PNG. If this happens, that means firefox3 will be using a vulnerable version of the library, but I can react quicker to vulnerabilities like this in the future. I'm not sure what is the best course of action. Wait until a new APNG patch is released? Update and force firefox3 to rebuild? >From the libpng website: "The pngtest sample application distributed with libpng, pngcrush, and certain versions of ImageMagick are known to be affected, but the bug is otherwise believed to be quite rare." - if the bug is quite rare, can we put it off? Any input?

2 8

[arch-dev-public] [signoff] dialog 20080318-1
by Andreas Radke 05 May '08

05 May '08

new upstream release with minor changes. in testing for both arches. also added some minor requested features #10060 and utf8 support #8984. binary file size didn't increased too much. should be also ok with our installer. our iso builders should test it! -Andy -- $Id: CHANGES,v 1.248 2008/03/16 20:13:15 tom Exp $ -- Thomas E. Dickey <dickey(a)invisible-island.net> This version of dialog was originally from a Debian snapshot. I've done this to it: 2008/03/16 + modify dlg_mouse_wgetch() to loop only on errors that it detects, rather than on errors forwarded from dlg_getc(), in case those are due to a disconnected terminal (report by Anatoli Sakhnik). + allow "default" color in dialogrc file (request by Dashing). + fix an indexing error in formbox (Debian #469190, report by Dmitry Gomerman, patch by Vladimir Mezentsev). + add bindings for CTL/N, CTL/P to checklist, fselect and menubox widgets (prompted by discussion with John Gatewood Ham). + add be(a)latin.po, th.po and update zh_TW.po from http://translationproject.org/latest/dialog/ > patches by Peter Astrand: + modify dlg_auto_sizefile() to ensure the computed height and width do not extend beyond the screen size. + use unctrl() to make inputstr.c work with Solaris curses. > patches by Yura Kalinichenko: + extend pause widget to use ok/cancel buttons (the former giving the same result as a timeout), rather than an exit-button. + fix initialization parameter of inputbox for multibyte characters.

3 4