March 2010 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] Integrity Check i686: core, extra, community 26-03-2010
by repomaint＠archlinux.org 26 Mar '10

26 Mar '10

================================================ = Integrity Check i686 of core,extra,community = ================================================ Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Duplicate PKGBUILDs --------------------- /srv/abs/rsync/any/community/gtk2-docs vs. /srv/abs/rsync/i686/community/gtk2-docs Missing Dependencies ---------------------- community/airsnort --> 'wlan-ng26-utils' community/sysprof-module --> 'kernel26<2.6.' Missing Makedepends --------------------- core/dash --> 'klibc>=1.5' Repo Hierarchy for Dependencies --------------------------------- extra/pan depends on community/gmime22 (0 extra (make)deps to pull) Repo Hierarchy for Makedepends -------------------------------- core/ca-certificates depends on extra/ruby (25 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (26 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/groff depends on extra/ghostscript (136 extra (make)deps to pull) core/groff depends on extra/netpbm (45 extra (make)deps to pull) core/groff depends on extra/psutils (137 extra (make)deps to pull) core/iputils depends on extra/docbook-xsl (26 extra (make)deps to pull) core/iputils depends on extra/libxslt (25 extra (make)deps to pull) core/iputils depends on extra/opensp (30 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/udev depends on extra/gobject-introspection (26 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (25 extra (make)deps to pull) core/udev-compat depends on extra/gobject-introspection (26 extra (make)deps to pull) core/udev-compat depends on extra/gperf (0 extra (make)deps to pull) core/udev-compat depends on extra/libxslt (25 extra (make)deps to pull) extra/bigloo depends on community/jdk (1 extra (make)deps to pull : jre) extra/gnome-speech depends on community/espeak (1 extra (make)deps to pull : portaudio) extra/grml-zsh-config depends on community/txt2tags (0 extra (make)deps to pull) extra/opengtl depends on community/llvm (0 extra (make)deps to pull) extra/xqf depends on community/chrpath (0 extra (make)deps to pull) Summary --------- Missing PKGBUILDs: 0 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 1 Invalid archs: 0 Missing (make)dependencies: 3 Repo hierarchy problems: 22 Circular dependencies: 0 In db, but not in tree: 0 In tree, but not in db: 0

1 0

[arch-dev-public] [signoff] gmp rebuilds and toolchain update
by Allan McRae 26 Mar '10

26 Mar '10

The gmp rebuilds are done so now is time to signoff. This signoff will cover: gmp - upstream update mpfr - gmp rebuild ppl - gmp rebuild cloog-ppl - upstream update + gmp rebuild linux-api-headers - upstream update binutils - upstream update (= new snapshot) glibc - new snapshot gcc - new snapshot + gmp rebuild coreutils - gmp rebuild It should be an easy signoff given everybody will have been using those packages for the other gmp rebuilds. Signoff both, Allan

3 2

[arch-dev-public] [signoff] openssl 0.9.8n-1
by Pierre Schmitz 25 Mar '10

25 Mar '10

This is mainly a security update, so please sign off soon. See http://openssl.org/news/secadv_20100324.txt The complete changelog: Changes between 0.9.8m and 0.9.8n [24 Mar 2010] *) When rejecting SSL/TLS records due to an incorrect version number, never update s->server with a new major version number. As of - OpenSSL 0.9.8m if 'short' is a 16-bit type, - OpenSSL 0.9.8f if 'short' is longer than 16 bits, the previous behavior could result in a read attempt at NULL when receiving specific incorrect SSL/TLS records once record payload protection is active. (CVE-2010-0740) [Bodo Moeller, Adam Langley <agl(a)chromium.org>] *) Fix for CVE-2010-0433 where some kerberos enabled versions of OpenSSL could be crashed if the relevant tables were not present (e.g. chrooted). [Tomas Hoger <thoger(a)redhat.com>] -- Pierre Schmitz, https://users.archlinux.de/~pierre

3 2

[arch-dev-public] upgrade path for some config files?
by Andreas Radke 25 Mar '10

25 Mar '10

The current cups package is missing some configuration files that I want to introduce with a new minor bugfix release. The cupsd has created probably some of these files already if needed but I want to ship empty files from now on with correct permissions like other major distributions do. This will also solve some bugs. I've put the files into backup array for future upgrades. But how should I handle the initial update. pacman -S cups shows several file conflicts because the files in the system are not under pacman control. Can a safe upgrade done by pacman without user interaction? If not we should probably announce it in a news that users will have to backup the conflicting files and will have to remerge their configuration after the update. see my commit for cups 1.4.2-4. I'll keep it in staging for now. -Andy

4 7

[arch-dev-public] [signoff] grep-2.6-1
by Allan McRae 25 Mar '10

25 Mar '10

Upstream big update. Local changelog: - Removed the multibyte locale speed-up patch (and all the patches to fix the issues it created...) as it is now included upstream. - Removed the other patches as it appears they are not being considered upstream. Upstream NEWS: * Noteworthy changes in release 2.6 (2010-03-23) [stable] ** Speed improvements grep is much faster on multibyte character sets, especially (but not limited to) UTF-8 character sets. The speed improvement is also very pronounced with case-insensitive matches. ** Bug fixes Character classes would malfunction in multi-byte locales when using grep -i. Examples which would print nothing for LC_ALL=en_US.UTF-8 include: - for ranges, echo Z | grep -i '[a-z]' - for single characters, echo Y | grep -i '[y]' - for character types, echo Y | grep -i '[[:lower:]]' grep -i -o would fail to report some matches; grep -i --color, while not missing any line containing a match, would fail to color some matches. grep would fail to report a match in a multibyte character set other than UTF-8, if another match occurred earlier in the line but started in the middle of a multibyte character. Various bugs in grep -P, caused by expressions such as [^b] or \S matching newlines, were fixed. grep -P also supports the special sequences \Z and \z, and can be combined with the command-line option -z to perform searches on NUL-separated records. grep would mistakenly exit with status 1 upon error, rather than 2, as it is documented to do. Using options like -1 -2 or -1 -v -2 results in two lines of context (the last value that appears on the command line) instead twelve (the concatenation of all the values). This is consistent with the behavior of options -A/-B/-C. Two new command-line options, --group-separator=ARGUMENT and --no-group-separator, enable further customization of the output when -A, -B or -C is being used. ** Other changes egrep accepts the -E option and fgrep accepts the -F option. If egrep and fgrep are given another of the -E/-F/-G options, they print a more meaningful error message. Signoff both, Allan

2 1

[arch-dev-public] [signoff] pcre-8.02-1
by Eric Bélanger 25 Mar '10

25 Mar '10

Hi, pcre-8.02-1 is in testing. The x86_64 pkg will be there later (wonder will build it). Please test and signoff. -minor upstream update Version 8.02 19-Mar-2010 ------------------------ 1. The Unicode data tables have been updated to Unicode 5.2.0. 2. Added the option --libs-cpp to pcre-config, but only when C++ support is configured. 3. Updated the licensing terms in the pcregexp.pas file, as agreed with the original author of that file, following a query about its status. 4. On systems that do not have stdint.h (e.g. Solaris), check for and include inttypes.h instead. This fixes a bug that was introduced by change 8.01/8. 5. A pattern such as (?&t)*+(?(DEFINE)(?<t>.)) which has a possessive quantifier applied to a forward-referencing subroutine call, could compile incorrect code or give the error "internal error: previously-checked referenced subpattern not found". 6. Both MS Visual Studio and Symbian OS have problems with initializing variables to point to external functions. For these systems, therefore, pcre_malloc etc. are now initialized to local functions that call the relevant global functions. 7. There were two entries missing in the vectors called coptable and poptable in pcre_dfa_exec.c. This could lead to memory accesses outsize the vectors. I've fixed the data, and added a kludgy way of testing at compile time that the lengths are correct (equal to the number of opcodes). 8. Following on from 7, I added a similar kludge to check the length of the eint vector in pcreposix.c. 9. Error texts for pcre_compile() are held as one long string to avoid too much relocation at load time. To find a text, the string is searched, counting zeros. There was no check for running off the end of the string, which could happen if a new error number was added without updating the string. 10. \K gave a compile-time error if it appeared in a lookbehind assersion. 11. \K was not working if it appeared in an atomic group or in a group that was called as a "subroutine", or in an assertion. Perl 5.11 documents that \K is "not well defined" if used in an assertion. PCRE now accepts it if the assertion is positive, but not if it is negative. 12. Change 11 fortuitously reduced the size of the stack frame used in the "match()" function of pcre_exec.c by one pointer. Forthcoming implementation of support for (*MARK) will need an extra pointer on the stack; I have reserved it now, so that the stack frame size does not decrease. 13. A pattern such as (?P<L1>(?P<L2>0)|(?P>L2)(?P>L1)) in which the only other item in branch that calls a recursion is a subroutine call - as in the second branch in the above example - was incorrectly given the compile- time error "recursive call could loop indefinitely" because pcre_compile() was not correctly checking the subroutine for matching a non-empty string. 14. The checks for overrunning compiling workspace could trigger after an overrun had occurred. This is a "should never occur" error, but it can be triggered by pathological patterns such as hundreds of nested parentheses. The checks now trigger 100 bytes before the end of the workspace. 15. Fix typo in configure.ac: "srtoq" should be "strtoq".

2 1

[arch-dev-public] Removing *.db.tar.gz.old files?
by Pierre Schmitz 24 Mar '10

24 Mar '10

Hi, I am just wondering if we really need those *.old backup files that the dbscripts create. Even if something really went wrong. the old file most likely wont match the package set anyway and we could easily recreate it using repo-add. So, any objection to remove those files and their creation from dbscripts? -- Pierre Schmitz, https://users.archlinux.de/~pierre

3 5

[arch-dev-public] [signoff] dbus-core 1.2.24
by Jan de Groot 24 Mar '10

24 Mar '10

Following the crasher release of 1.2.22, this should fix FS#18796. Please test and signoff.

2 1

[arch-dev-public] gmp-5 rebuilds
by Allan McRae 24 Mar '10

24 Mar '10

Hi, I have the updated gmp and a toolchain rebuilt sitting in my staging directory to be moved into [testing] once the boost downgrade is finished. I have done all the rebuilds in [core] and nothing in the rebuild list looks critical, so updating should not be too risky. xmonad users may want to hold off until haskell is updated. Allan

3 5

[arch-dev-public] [signoff] kernel26 2.6.33.1-1
by Thomas Bächler 24 Mar '10

24 Mar '10

No idea if it is time for signoff yet, I have to check that with tpowa. However, I put 2.6.31.1 in testing with these changes: - Added a trivial patch to support my touchpad (selfish, I know, but it is already accepted upstream for 2.6.34) - Removed EXT4_USE_FOR_EXT23 due to some problems that upstream isn't quite finished discussing yet - we can keep using the ext2 and ext3 drivers for now.

11 12