December 2009 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] Packaging Chromium for [extra]
by Pierre Schmitz 16 Dec '09

16 Dec '09

Hi devs, I did have a closer look at chromium recently and it did improve a lot. Even though it's called "beta" it is really usable and feature complete. There is quite a high demand for it (the binary version in AUR has neraly 800 votes). I would like to make a peoper package for it and provide that in our repo. The AUR packages are either svn trunk builds or repackaged ubuntu debs with ugly symlinks to libs with other so names. My idea is to build a tar out of their svn tag and build a clean package with that. What do you think? (it's about chromium btw. and not Chrome which is Google's build with some "extras") -- Pierre Schmitz, https://users.archlinux.de/~pierre

6 14

[arch-dev-public] [signoff] glib2 2.22.3-1
by Ionut Biru 15 Dec '09

15 Dec '09

hi, please sign off -- Ionut

4 4

[arch-dev-public] [signoff] coreutils-8.2-1
by Allan McRae 15 Dec '09

15 Dec '09

Fairly minor bug fix release over 8.1 which has been in [testing] for a long time, but a major jump over what is currently in [core]. I have been using the pre-release snapshots without any issues. Upstream ChangeLog: ** Bug fixes id's use of mgetgroups no longer writes beyond the end of a malloc'd buffer [bug introduced in coreutils-8.1] id no longer crashes on systems without supplementary group support. [bug introduced in coreutils-8.1] rm once again handles zero-length arguments properly. The rewrite to make rm use fts introduced a regression whereby a command like "rm a '' b" would fail to remove "a" and "b", due to the presence of the empty string argument. [bug introduced in coreutils-8.0] sort is now immune to the signal handling of its parent. Specifically sort now doesn't exit with an error message if it uses helper processes for compression and its parent ignores CHLD signals. [bug introduced in coreutils-6.9] tail without -f no longer access uninitialized memory [bug introduced in coreutils-7.6] timeout is now immune to the signal handling of its parent. Specifically timeout now doesn't exit with an error message if its parent ignores CHLD signals. [bug introduced in coreutils-7.6] a user running "make distcheck" in the coreutils source directory, with TMPDIR unset or set to the name of a world-writable directory, and with a malicious user on the same system was vulnerable to arbitrary code execution [bug introduced in coreutils-5.0] Signoff both, Allan

4 4

[arch-dev-public] [signoff] expat-2.0.1-4
by Allan McRae 15 Dec '09

15 Dec '09

Jan pointed out another issue that needed patched in expat so here goes -4. ChangeLog: Add fixes for CVE-2009-3560 (in -3 previously in [testing]) and CVE-2009-3720. CVE = security issue so is there any chance I can get more that one signoff in two days this time? Allan

2 1

[arch-dev-public] [signoff] expat-2.0.1-3
by Allan McRae 14 Dec '09

14 Dec '09

Fix CVE-2009-3560. Signoff both, Allan

2 1

[arch-dev-public] [signoff] toolchain
by Allan McRae 14 Dec '09

14 Dec '09

kernel-headers-2.6.32-1: - upstream update - more patching to scsi.h for userspace compatibility (FS#17408) glibc-2.11.1-1: - upstream update gcc-4.4.2-4: - use latest 4.4 snapshot binutils-2.20-3: - just a rebuild (no relevant new fixes on 2.20 cvs branch) Allan

4 3

[arch-dev-public] [signoff] automake-1.11.1-1
by Allan McRae 13 Dec '09

13 Dec '09

Minor upstream update. Converted to arch-any package. Upstream changelog: * Bugs introduced by 1.11: - The `parallel-tests' test driver works around a GNU make 3.80 bug with trailing white space in the test list (`TESTS = foo $(EMPTY)'). * Long standing bugs: - On Darwin 9, `pythondir' and `pyexecdir' pointed below `/Library/Python' even if the `--prefix' argument pointed outside of a system directory. AM_PATH_PYTHON has been fixed to ignore the value returned from python's `get_python_lib' function if it points outside the configured prefix, unless the `--prefix' argument was either `/usr' or below `/System'. - The testsuite does not try to change the mode of `ltmain.sh' files from a Libtool installation (symlinked to test directories) any more. - AM_PROG_GCJ uses AC_CHECK_TOOLS to look for `gcj' now, so that prefixed tools are preferred in a cross-compile setup. - The distribution is tarred up with mode 755 now by the `dist*' targets. This fixes a race condition where untrusted users could modify files in the $(PACKAGE)-$(VERSION) distdir before packing if the toplevel build directory was world-searchable. This is CVE-2009-4029. Build x86_64, tested on i686. Signoff, Allan

2 2

[arch-dev-public] [signoff] gpm-1.20.6-4
by Eric Bélanger 12 Dec '09

12 Dec '09

Hi, gpm 1.20.6-4 is in testing. Changes: * Added profile for extra security on multi-user-console (close FS#17243) * Removed the need of texinfo depends Please test and signoff. Eric

3 7

[arch-dev-public] Integrity Check x86_64: core, extra, community 11-12-2009
by repomaint＠archlinux.org 11 Dec '09

11 Dec '09

================================================== = Integrity Check x86_64 of core,extra,community = ================================================== Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Missing Dependencies ---------------------- community/eclipse-ve --> 'eclipse<3.3' extra/archboot --> 'libdownload>=1.3-3' extra/digikam --> 'liblcms' Missing Makedepends --------------------- extra/kdelibs3 --> 'autoconf<2.64' extra/v86d --> 'kernel26<2.6.30' Repo Hierarchy for Dependencies --------------------------------- extra/haskell-hashed-storage depends on community/haskell-zlib (0 extra (make)deps to pull) extra/munin depends on community/perl-html-template (0 extra (make)deps to pull) extra/munin depends on community/perl-log-log4perl (0 extra (make)deps to pull) extra/munin-node depends on community/perl-net-server (0 extra (make)deps to pull) extra/pan depends on community/gmime22 (0 extra (make)deps to pull) Repo Hierarchy for Makedepends -------------------------------- core/ca-certificates depends on extra/ruby (25 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (26 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/groff depends on extra/ghostscript (144 extra (make)deps to pull) core/groff depends on extra/netpbm (45 extra (make)deps to pull) core/groff depends on extra/psutils (145 extra (make)deps to pull) core/iputils depends on extra/docbook-xsl (26 extra (make)deps to pull) core/iputils depends on extra/libxslt (25 extra (make)deps to pull) core/iputils depends on extra/opensp (28 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (25 extra (make)deps to pull) extra/dbus-python depends on community/docutils (0 extra (make)deps to pull) extra/gnome-speech depends on community/espeak (2 extra (make)deps to pull : portaudio docutils) extra/grml-zsh-config depends on community/txt2tags (0 extra (make)deps to pull) extra/xqf depends on community/chrpath (0 extra (make)deps to pull) Packages found in tree, but not in db --------------------------------------- extra/openoffice-en-US Summary --------- Missing PKGBUILDs: 0 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 0 Invalid archs: 0 Missing (make)dependencies: 5 Repo hierarchy problems: 21 Circular dependencies: 0 In db, but not in tree: 0 In tree, but not in db: 1

1 0

[arch-dev-public] Integrity Check i686: core, extra, community 11-12-2009
by repomaint＠archlinux.org 11 Dec '09

11 Dec '09

================================================ = Integrity Check i686 of core,extra,community = ================================================ Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Missing Dependencies ---------------------- community/eclipse-ve --> 'eclipse<3.3' extra/archboot --> 'libdownload>=1.3-3' Missing Makedepends --------------------- extra/kdelibs3 --> 'autoconf<2.64' extra/v86d --> 'kernel26<2.6.30' Repo Hierarchy for Dependencies --------------------------------- extra/haskell-hashed-storage depends on community/haskell-zlib (0 extra (make)deps to pull) extra/munin depends on community/perl-html-template (0 extra (make)deps to pull) extra/munin depends on community/perl-log-log4perl (0 extra (make)deps to pull) extra/munin-node depends on community/perl-net-server (0 extra (make)deps to pull) extra/pan depends on community/gmime22 (0 extra (make)deps to pull) Repo Hierarchy for Makedepends -------------------------------- core/ca-certificates depends on extra/ruby (25 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (26 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/groff depends on extra/ghostscript (143 extra (make)deps to pull) core/groff depends on extra/netpbm (45 extra (make)deps to pull) core/groff depends on extra/psutils (144 extra (make)deps to pull) core/iputils depends on extra/docbook-xsl (26 extra (make)deps to pull) core/iputils depends on extra/libxslt (25 extra (make)deps to pull) core/iputils depends on extra/opensp (28 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (25 extra (make)deps to pull) extra/gnome-speech depends on community/espeak (1 extra (make)deps to pull : portaudio) extra/grml-zsh-config depends on community/txt2tags (0 extra (make)deps to pull) extra/xqf depends on community/chrpath (0 extra (make)deps to pull) Packages found in tree, but not in db --------------------------------------- extra/openoffice-en-US Summary --------- Missing PKGBUILDs: 0 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 0 Invalid archs: 0 Missing (make)dependencies: 4 Repo hierarchy problems: 20 Circular dependencies: 0 In db, but not in tree: 0 In tree, but not in db: 1

1 0