March 2014 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 13 Mar '14

13 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 7 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 10 fully signed off packages * 16 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (7 total) == * man-pages-3.62-1 (any) * apr-util-1.5.3-3 (i686) * mesa-10.1.0-3 (i686) * nvidia-304xx-utils-304.121-2 (i686) * apr-util-1.5.3-3 (x86_64) * mesa-10.1.0-3 (x86_64) * nvidia-304xx-utils-304.121-2 (x86_64) == Incomplete signoffs for [core] (3 total) == * man-pages-3.62-1 (any) 1/2 signoffs * readline-6.3-3 (i686) 0/1 signoffs * readline-6.3-3 (x86_64) 1/2 signoffs == Incomplete signoffs for [extra] (13 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * apr-util-1.5.3-3 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * ibus-1.5.6-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * mesa-10.1.0-3 (i686) 0/1 signoffs * nvidia-304xx-utils-304.121-2 (i686) 0/1 signoffs * apr-util-1.5.3-3 (x86_64) 0/2 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * ibus-1.5.6-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * mesa-10.1.0-3 (x86_64) 0/2 signoffs * nvidia-304xx-utils-304.121-2 (x86_64) 0/2 signoffs == Completed signoffs (10 total) == * mkinitcpio-17-1 (any) * netctl-1.6-1 (any) * bash-4.3-2 (i686) * sudo-1.8.10-1 (i686) * systemd-211-1 (i686) * util-linux-2.24.1-2 (i686) * bash-4.3-2 (x86_64) * sudo-1.8.10-1 (x86_64) * systemd-211-1 (x86_64) * util-linux-2.24.1-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. tpowa - 2 signoffs 2. djgera - 2 signoffs 3. bpiotrowski - 2 signoffs 4. anatolik - 1 signoffs

1 0

[arch-dev-public] Incremental update for TeXLive 2013
by Rémy Oudompheng 12 Mar '14

12 Mar '14

Hello, I am going to push updated TeXLive packages to [extra]. The following bugs are expected to be fixed: https://bugs.archlinux.org/task/34932 https://bugs.archlinux.org/task/28560 https://bugs.archlinux.org/task/28514 Regards, Rémy.

1 0

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 12 Mar '14

12 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 7 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 6 fully signed off packages * 17 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (7 total) == * netctl-1.6-1 (any) * sudo-1.8.10-1 (i686) * systemd-211-1 (i686) * sudo-1.8.10-1 (x86_64) * systemd-211-1 (x86_64) * ibus-1.5.6-1 (i686) * ibus-1.5.6-1 (x86_64) == Incomplete signoffs for [core] (8 total) == * keyutils-1.5.9-1 (i686) 0/1 signoffs * readline-6.3-3 (i686) 0/1 signoffs * sudo-1.8.10-1 (i686) 0/1 signoffs * systemd-211-1 (i686) 0/1 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs * readline-6.3-3 (x86_64) 1/2 signoffs * sudo-1.8.10-1 (x86_64) 1/2 signoffs * systemd-211-1 (x86_64) 1/2 signoffs == Incomplete signoffs for [extra] (9 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * ibus-1.5.6-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * ibus-1.5.6-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs == Completed signoffs (6 total) == * mkinitcpio-17-1 (any) * netctl-1.6-1 (any) * bash-4.3-2 (i686) * util-linux-2.24.1-2 (i686) * bash-4.3-2 (x86_64) * util-linux-2.24.1-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. tpowa - 4 signoffs 2. djgera - 4 signoffs 3. thomas - 2 signoffs 4. bpiotrowski - 2 signoffs 5. anatolik - 1 signoffs

1 0

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 11 Mar '14

11 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 6 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 3 fully signed off packages * 25 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (6 total) == * dosfstools-3.0.26-1 (i686) * readline-6.3-3 (i686) * util-linux-2.24.1-2 (i686) * dosfstools-3.0.26-1 (x86_64) * readline-6.3-3 (x86_64) * util-linux-2.24.1-2 (x86_64) == Incomplete signoffs for [core] (10 total) == * dosfstools-3.0.26-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * readline-6.3-3 (i686) 0/1 signoffs * util-linux-2.24.1-2 (i686) 0/1 signoffs * dosfstools-3.0.26-1 (x86_64) 1/2 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs * readline-6.3-3 (x86_64) 0/2 signoffs * util-linux-2.24.1-2 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (15 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 1/2 signoffs * freetype2-2.5.3-1 (x86_64) 1/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (3 total) == * mkinitcpio-17-1 (any) * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. bpiotrowski - 1 signoffs 2. thomas - 1 signoffs 3. djgera - 1 signoffs

1 0

[arch-dev-public] Disowned [agg]
by Jakob Gruber 10 Mar '14

10 Mar '14

Hi, I just disowned [agg], anybody interested in picking it up? It is a dependency of gnash-common, and has one open bug: https://bugs.archlinux.org/task/39268 https://www.archlinux.org/packages/community/x86_64/agg/ Jakob

1 0

[arch-dev-public] Upgrading Apache to 2.4
by Anatol Pomozov 10 Mar '14

10 Mar '14

Hi, One of my TU application proposals was updating apache package to 2.4. The 2.4 branch exists for 2 years, actively developed and is recommended by upstream. Taking into account that many distros moved to 2.4 already I do not expect serious problems with moving Arch to 2.4. I would like to look at this issue. In addition to version bump I wan to cleanup the PKGBUILD file e.g. "itk" is an apache module now and we do not need to apply a huge pile of patches to apache sources - it can be a separate package 'mod_itk'. So how can I update the apache package? I do not have access to [extra] so I see 2 ways to resolve the issue: 1) Move apache and its dependencies from [extra] to [community]. I update apache and rebuild mod_* packages. 2) I create apache24 and mod_itk modules and after some testing devs will move it to [extra], replace content of 'apache' and rebuild dependencies. What is the preferred solution?

5 9

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 10 Mar '14

10 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 5 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 5 fully signed off packages * 24 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (5 total) == * tzdata-2014a-1 (any) * cinepaint-1:1.0.4-1 (i686) * python-3.3.5-1 (i686) * cinepaint-1:1.0.4-1 (x86_64) * python-3.3.5-1 (x86_64) == Incomplete signoffs for [core] (5 total) == * dhcpcd-6.3.1-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (19 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * apache-2.4.7-2 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * dhcp-4.3.0-1 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * apache-2.4.7-2 (x86_64) 0/2 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 1/2 signoffs * dhcp-4.3.0-1 (x86_64) 0/2 signoffs * freetype2-2.5.3-1 (x86_64) 1/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (5 total) == * mkinitcpio-17-1 (any) * tzdata-2014a-1 (any) * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) * dhcpcd-6.3.1-1 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. fyan - 5 signoffs 2. dan - 3 signoffs 3. bpiotrowski - 1 signoffs

1 0

[arch-dev-public] Looking for maintainers for a few packages
by Allan McRae 09 Mar '14

09 Mar '14

I'm looking to offload a few packages so I can spend more time dealing with pacman (the patches pile up faster than I can deal with them and there are things I want to implement...). I essentially intend to keep dealing with the toolchain and nothing else. Here is a list of what is on offer: [core] bash + readline + ncurses * coreutils diffutils expat fakeroot file gzip less libcap patch pcre + grep sed tar texinfo which * note: there should be taken as a group. Also there are bugs associated with the bash/readline update. [extra] fakechroot gdb (should probably take expect from [core] too) valgrind Last time I looked at the gdb and valgrind testsuites, there were a lot of errors. Could be due to not clearing our CFLAGS etc before running. But they could definitely use some work. Allan

4 3

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 09 Mar '14

09 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 13 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 2 fully signed off packages * 26 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (13 total) == * mkinitcpio-17-1 (any) * dhcpcd-6.3.1-1 (i686) * dhcpcd-6.3.1-1 (x86_64) * apache-2.4.7-2 (i686) * clutter-1.16.4-3 (i686) * freetype2-2.5.3-1 (i686) * libevdev-1.0.1-1 (i686) * sushi-3.10.0-2 (i686) * apache-2.4.7-2 (x86_64) * clutter-1.16.4-3 (x86_64) * freetype2-2.5.3-1 (x86_64) * libevdev-1.0.1-1 (x86_64) * sushi-3.10.0-2 (x86_64) == Incomplete signoffs for [core] (7 total) == * mkinitcpio-17-1 (any) 0/2 signoffs * dhcpcd-6.3.1-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * dhcpcd-6.3.1-1 (x86_64) 0/2 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (19 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * apache-2.4.7-2 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * dhcp-4.3.0-1 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * mjpegtools-2.1.0-1 (i686) 0/1 signoffs * mono-3.2.8-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * apache-2.4.7-2 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 0/2 signoffs * dhcp-4.3.0-1 (x86_64) 0/2 signoffs * freetype2-2.5.3-1 (x86_64) 0/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * mjpegtools-2.1.0-1 (x86_64) 0/2 signoffs * mono-3.2.8-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (2 total) == * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. foutrelis - 2 signoffs 2. thomas - 1 signoffs 3. anatolik - 1 signoffs

1 0

[arch-dev-public] Get involved with tracking security issues in Arch Linux packages
by Allan McRae 09 Mar '14

09 Mar '14

Hi all, A bit of background first! There are two main classes of security issues that our packages can suffer from: - a security issue disclosed and fixed by an update - a security issue that requires backporting of patches As a rolling release, we are fairly good at updating our software quickly, so the first type is a minimal issue in Arch. The second type of issue requires monitoring various mailing lists and noting which packages are affected by an issue and getting the patch into the Arch package. We have had some great help in this area by a user 'RbN' who has been filing bug reports about CVEs with links to the patches fixing the issue. However, it is not a one person job, and they can not keep up alone. So, I have created some infrastructure for tracking public security issues in Arch packages. We now have a public mailing list (arch-security(a)archlinux.org) and IRC channel (#archlinux-security on freenode). The initial purpose of these lists to get the Arch community helping the developers to track new security issues and create bug reports with all the needed information. It is NOT a general all purpose security discussion board (at least at this stage). *Any posts about SELinux, Tomoyo, etc, will result in the user being heavily moderated.* I'm not sure how we are going to arrange everything to share the load across people. Perhaps a wiki page with a list of CVEs for the month and who is investigating them with a bug report or package version with the fix. Things to figure out! Note all private security reports should continue to be sent to security(a)archlinux.org or the the Arch developer of the package involved. Allan

2 1