August 2010 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] [signoff] openssl 1.0.0a-3
by Pierre Schmitz 12 Aug '10

12 Aug '10

Hello, there was a double free issue discovered in openssl. This might be used for remote code injection/execution. See http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0085.html or http://www.heise.de/security/meldung/Schwachstelle-in-OpenSSL-1-0-x-1053085… I have applied the proposed upstream patch http://marc.info/?l=openssl-dev&m=128129628800826&w=2 (it's not in cvs yet though, but at least it should not harm) Of course the test suite is still passed and the mention cert no longer crashes openssl. Please sign off. Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre

3 2

[arch-dev-public] Fwd: a kernel26-xen bug?
by Tobias Powalowski 11 Aug '10

11 Aug '10

---------- Weitergeleitete Nachricht ---------- Betreff: a kernel26-xen bug? Datum: Sonntag 08 August 2010, 23:21:49 Von: VPSee <vpseecom(a)gmail.com> An: tpowa(a)archlinux.org Kopie: thomas(a)archlinux.org, raczkow(a)gmail.com Hi, I followed a guide to build a xen domu kernel for archlinux VPS: # makepkg --asroot # pacman -U kernel26-xen-2.6.34.1-1-i686.pkg.tar.xz # pacman -U kernel26-xen-headers-2.6.34.1-1-i686.pkg.tar.xz It's all fine, my i686 new kernel can run without a problem. The problem I found is that when I tried to increase the archlinux domu's memory to 1024MB, the new domu only accept 726048k: ---- top - 19:23:40 up 28 min, 1 user, load average: 0.00, 0.01, 0.00 Tasks: 41 total, 1 running, 40 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 726048k total, 192192k used, 533856k free, 11108k buffers Swap: 0k total, 0k used, 0k free, 160220k cached ---- If I do "xm mem-set archlinux 512", the archlinux domu can decrease the memory to 512mb without a problem. If I do "xm mem-set archlinux 1024", the domu can only take 726048k. my xen configuration file for the domu is: ---- name = "arch" bootloader = "/usr/bin/pygrub" vcpus = 2 maxmem = "1024" memory = "1024" ---- I also get the same report from other users who are using our archlinux VPS. It's a strange problem. I first thought it's a 64/32bit mixed kernel and userland problem. Can you please give me a hint? Thanks, -- VPSee http://www.vpsee.com ------------------------------------------------------------- -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

2 1

[arch-dev-public] [signoff] kernel26-lts 2.6.32.18-1
by Andreas Radke 11 Aug '10

11 Aug '10

Next upstream stable release. See http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.18 Please signoff. -Andy

2 1

[arch-dev-public] [signoff] kernel26 2.6.34.3-1
by Thomas Bächler 11 Aug '10

11 Aug '10

Upstream update. This package is NOT in testing (2.6.35 currently resides there), but at: http://dev.archlinux.org/~thomas/kernel26/ Please sign off.

3 3

[arch-dev-public] [signoff] gcc-4.5.0-7
by Allan McRae 11 Aug '10

11 Aug '10

That backport fix is unlikely to land on the 4.5 branch soon unless a release manager approves it as there is a freeze for 4.5.1 which looks to be release in a week or two. Changes: Fix template code expansion (FS#20242) Fix libstdc++ man page source (FS#20249) Signoff both, Allan

4 4

[arch-dev-public] [signoff] glibc-2.12.1-1
by Allan McRae 11 Aug '10

11 Aug '10

Upstream "update"... the only thing that has changed since our last "2.12" release is a documentation change and the version bump so there is really nothing new here. Valgrind should be patched not to need a recompile against 2.12.x releases and it seems to still work here with a quick test. Signoff both, Allan

2 1

[arch-dev-public] [signoff] autoconf-2.67-1
by Allan McRae 11 Aug '10

11 Aug '10

Upstream update. Test suite passes. Signoff, Allan

2 1

[arch-dev-public] FluxBB update round two
by Pierre Schmitz 10 Aug '10

10 Aug '10

Hi all, there is a new FluxBB release (1.4.2: http://fluxbb.org/forums/viewtopic.php?id=4504) I have tested the update locally (with innodb this time). They have enlarged the post.message column from text to mediumtext. Unfortunately this means rewriting the whole table for innodb; so their web update script cannot be used. (yes, I already complained and will open a bug report) My plan is to issue the following command manually before the update: alter table posts change message message mediumtext This takes about 10 minutes here and it seems the DB is not locked during that time. (So, is it correct that we can keep the forums online then?) If nobody objects I'll do the update tonight. (about now + 13h) Greetings, Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre

3 4

[arch-dev-public] [signoff] nano 2.2.5-1
by Andreas Radke 10 Aug '10

10 Aug '10

upstream update. please signoff. -Andy http://www.nano-editor.org/dist/v2.2/ChangeLog : GNU nano 2.2.5 - 2010.08.05 2010-08-04 Lauri Kasanen <curaga@operamail.comcuraga@operamail.com> * doc/syntax/mgp.nanorc: New Magicpoint syntax highlighting definition 2010-08-04 Peter <exodus@savannah> * doc/syntax/tex.nanorc: No longer highlight escaped comments 2010-06-20 Chris Allegretta <chrisa(a)asty.org> * New rc file option allow_insecure_backup, allows the previous security fixes for backup files to be overridden if you're really positive you want to. Fixes Savannah bug 29732 by Brian Szymanski <skibrianski>. 2010-05-23 Chris Allegretta <chrisa(a)asty.org> * files.c (write_file): Don't even try to chown() the backup file unless we're root, since it's probably going to fail if we're editing a file we don't own. Fixes Savannah bug 29514: [nano 2.2.2] backup should ignore chown errors.

2 1

[arch-dev-public] [signoff] psmisc-22.12-1
by Eric Bélanger 09 Aug '10

09 Aug '10

Hi, psmisc-22.12-1 is in [testing]. It's a minor upstream update. Please test and signoff. Thanks, Eric

2 2