- Arch-dev-public - lists.archlinux.org

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 12 Mar '14

12 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 7 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 6 fully signed off packages * 17 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (7 total) == * netctl-1.6-1 (any) * sudo-1.8.10-1 (i686) * systemd-211-1 (i686) * sudo-1.8.10-1 (x86_64) * systemd-211-1 (x86_64) * ibus-1.5.6-1 (i686) * ibus-1.5.6-1 (x86_64) == Incomplete signoffs for [core] (8 total) == * keyutils-1.5.9-1 (i686) 0/1 signoffs * readline-6.3-3 (i686) 0/1 signoffs * sudo-1.8.10-1 (i686) 0/1 signoffs * systemd-211-1 (i686) 0/1 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs * readline-6.3-3 (x86_64) 1/2 signoffs * sudo-1.8.10-1 (x86_64) 1/2 signoffs * systemd-211-1 (x86_64) 1/2 signoffs == Incomplete signoffs for [extra] (9 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * ibus-1.5.6-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * ibus-1.5.6-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs == Completed signoffs (6 total) == * mkinitcpio-17-1 (any) * netctl-1.6-1 (any) * bash-4.3-2 (i686) * util-linux-2.24.1-2 (i686) * bash-4.3-2 (x86_64) * util-linux-2.24.1-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. tpowa - 4 signoffs 2. djgera - 4 signoffs 3. thomas - 2 signoffs 4. bpiotrowski - 2 signoffs 5. anatolik - 1 signoffs

1 0

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 11 Mar '14

11 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 6 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 3 fully signed off packages * 25 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (6 total) == * dosfstools-3.0.26-1 (i686) * readline-6.3-3 (i686) * util-linux-2.24.1-2 (i686) * dosfstools-3.0.26-1 (x86_64) * readline-6.3-3 (x86_64) * util-linux-2.24.1-2 (x86_64) == Incomplete signoffs for [core] (10 total) == * dosfstools-3.0.26-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * readline-6.3-3 (i686) 0/1 signoffs * util-linux-2.24.1-2 (i686) 0/1 signoffs * dosfstools-3.0.26-1 (x86_64) 1/2 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs * readline-6.3-3 (x86_64) 0/2 signoffs * util-linux-2.24.1-2 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (15 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 1/2 signoffs * freetype2-2.5.3-1 (x86_64) 1/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (3 total) == * mkinitcpio-17-1 (any) * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. bpiotrowski - 1 signoffs 2. thomas - 1 signoffs 3. djgera - 1 signoffs

1 0

[arch-dev-public] Disowned [agg]
by Jakob Gruber 10 Mar '14

10 Mar '14

Hi, I just disowned [agg], anybody interested in picking it up? It is a dependency of gnash-common, and has one open bug: https://bugs.archlinux.org/task/39268 https://www.archlinux.org/packages/community/x86_64/agg/ Jakob

1 0

[arch-dev-public] Upgrading Apache to 2.4
by Anatol Pomozov 10 Mar '14

10 Mar '14

Hi, One of my TU application proposals was updating apache package to 2.4. The 2.4 branch exists for 2 years, actively developed and is recommended by upstream. Taking into account that many distros moved to 2.4 already I do not expect serious problems with moving Arch to 2.4. I would like to look at this issue. In addition to version bump I wan to cleanup the PKGBUILD file e.g. "itk" is an apache module now and we do not need to apply a huge pile of patches to apache sources - it can be a separate package 'mod_itk'. So how can I update the apache package? I do not have access to [extra] so I see 2 ways to resolve the issue: 1) Move apache and its dependencies from [extra] to [community]. I update apache and rebuild mod_* packages. 2) I create apache24 and mod_itk modules and after some testing devs will move it to [extra], replace content of 'apache' and rebuild dependencies. What is the preferred solution?

5 9

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 10 Mar '14

10 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 5 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 5 fully signed off packages * 24 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (5 total) == * tzdata-2014a-1 (any) * cinepaint-1:1.0.4-1 (i686) * python-3.3.5-1 (i686) * cinepaint-1:1.0.4-1 (x86_64) * python-3.3.5-1 (x86_64) == Incomplete signoffs for [core] (5 total) == * dhcpcd-6.3.1-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (19 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * apache-2.4.7-2 (i686) 0/1 signoffs * cinepaint-1:1.0.4-1 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * dhcp-4.3.0-1 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * python-3.3.5-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * apache-2.4.7-2 (x86_64) 0/2 signoffs * cinepaint-1:1.0.4-1 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 1/2 signoffs * dhcp-4.3.0-1 (x86_64) 0/2 signoffs * freetype2-2.5.3-1 (x86_64) 1/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * python-3.3.5-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (5 total) == * mkinitcpio-17-1 (any) * tzdata-2014a-1 (any) * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) * dhcpcd-6.3.1-1 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. fyan - 5 signoffs 2. dan - 3 signoffs 3. bpiotrowski - 1 signoffs

1 0

[arch-dev-public] Looking for maintainers for a few packages
by Allan McRae 09 Mar '14

09 Mar '14

I'm looking to offload a few packages so I can spend more time dealing with pacman (the patches pile up faster than I can deal with them and there are things I want to implement...). I essentially intend to keep dealing with the toolchain and nothing else. Here is a list of what is on offer: [core] bash + readline + ncurses * coreutils diffutils expat fakeroot file gzip less libcap patch pcre + grep sed tar texinfo which * note: there should be taken as a group. Also there are bugs associated with the bash/readline update. [extra] fakechroot gdb (should probably take expect from [core] too) valgrind Last time I looked at the gdb and valgrind testsuites, there were a lot of errors. Could be due to not clearing our CFLAGS etc before running. But they could definitely use some work. Allan

4 3

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 09 Mar '14

09 Mar '14

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 13 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 2 fully signed off packages * 26 packages missing signoffs * 3 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (13 total) == * mkinitcpio-17-1 (any) * dhcpcd-6.3.1-1 (i686) * dhcpcd-6.3.1-1 (x86_64) * apache-2.4.7-2 (i686) * clutter-1.16.4-3 (i686) * freetype2-2.5.3-1 (i686) * libevdev-1.0.1-1 (i686) * sushi-3.10.0-2 (i686) * apache-2.4.7-2 (x86_64) * clutter-1.16.4-3 (x86_64) * freetype2-2.5.3-1 (x86_64) * libevdev-1.0.1-1 (x86_64) * sushi-3.10.0-2 (x86_64) == Incomplete signoffs for [core] (7 total) == * mkinitcpio-17-1 (any) 0/2 signoffs * dhcpcd-6.3.1-1 (i686) 0/1 signoffs * grub-1:2.02.beta2-2 (i686) 0/1 signoffs * keyutils-1.5.9-1 (i686) 0/1 signoffs * dhcpcd-6.3.1-1 (x86_64) 0/2 signoffs * grub-1:2.02.beta2-2 (x86_64) 1/2 signoffs * keyutils-1.5.9-1 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (19 total) == * libreoffice-i18n-4.2.1-2 (any) 0/2 signoffs * apache-2.4.7-2 (i686) 0/1 signoffs * clutter-1.16.4-3 (i686) 0/1 signoffs * dhcp-4.3.0-1 (i686) 0/1 signoffs * freetype2-2.5.3-1 (i686) 0/1 signoffs * libevdev-1.0.1-1 (i686) 0/1 signoffs * libreoffice-4.2.1-1 (i686) 0/1 signoffs * mjpegtools-2.1.0-1 (i686) 0/1 signoffs * mono-3.2.8-1 (i686) 0/1 signoffs * sushi-3.10.0-2 (i686) 0/1 signoffs * apache-2.4.7-2 (x86_64) 0/2 signoffs * clutter-1.16.4-3 (x86_64) 0/2 signoffs * dhcp-4.3.0-1 (x86_64) 0/2 signoffs * freetype2-2.5.3-1 (x86_64) 0/2 signoffs * libevdev-1.0.1-1 (x86_64) 0/2 signoffs * libreoffice-4.2.1-1 (x86_64) 0/2 signoffs * mjpegtools-2.1.0-1 (x86_64) 0/2 signoffs * mono-3.2.8-1 (x86_64) 0/2 signoffs * sushi-3.10.0-2 (x86_64) 0/2 signoffs == Completed signoffs (2 total) == * bash-4.3-2 (i686) * bash-4.3-2 (x86_64) == All packages in [testing] for more than 14 days (3 total) == * libreoffice-4.2.1-1 (i686), since 2014-02-20 * libreoffice-4.2.1-1 (x86_64), since 2014-02-20 * libreoffice-i18n-4.2.1-2 (any), since 2014-02-21 == Top five in signoffs in last 24 hours == 1. foutrelis - 2 signoffs 2. thomas - 1 signoffs 3. anatolik - 1 signoffs

1 0

[arch-dev-public] Get involved with tracking security issues in Arch Linux packages
by Allan McRae 09 Mar '14

09 Mar '14

Hi all, A bit of background first! There are two main classes of security issues that our packages can suffer from: - a security issue disclosed and fixed by an update - a security issue that requires backporting of patches As a rolling release, we are fairly good at updating our software quickly, so the first type is a minimal issue in Arch. The second type of issue requires monitoring various mailing lists and noting which packages are affected by an issue and getting the patch into the Arch package. We have had some great help in this area by a user 'RbN' who has been filing bug reports about CVEs with links to the patches fixing the issue. However, it is not a one person job, and they can not keep up alone. So, I have created some infrastructure for tracking public security issues in Arch packages. We now have a public mailing list (arch-security(a)archlinux.org) and IRC channel (#archlinux-security on freenode). The initial purpose of these lists to get the Arch community helping the developers to track new security issues and create bug reports with all the needed information. It is NOT a general all purpose security discussion board (at least at this stage). *Any posts about SELinux, Tomoyo, etc, will result in the user being heavily moderated.* I'm not sure how we are going to arrange everything to share the load across people. Perhaps a wiki page with a list of CVEs for the month and who is investigating them with a bug report or package version with the fix. Things to figure out! Note all private security reports should continue to be sent to security(a)archlinux.org or the the Arch developer of the package involved. Allan

2 1

[arch-dev-public] [kde-unstable] 4.13
by Andrea Scarpino 08 Mar '14

08 Mar '14

Hi all, it's again time for a new major release of KDE. The first beta of the 4.13 series has been released[1]. As usual, you find the packages in the [kde-unstable] repo, which only contains beta/rc releases. Read install instruction from here[2]. *NOTE*: It requires [testing] enabled. The following packages have been added: * kfilemetadata * baloo * baloo-widgets * kdeedu-artikulate * kqtquickcharts KDE is migrating from Nepomuk to Baloo. Dolphin, KDEPIM and Gwenview have already been ported to Baloo, but KActivities is not (and maybe never will be ported in any 4.x release) so I disabled Nepomuk support for it. This way you can run a basic KDE desktop without Nepomuk. Anyway Amarok, KDE- Telepathy, Digikam and more still use Nepomuk, but future releases will not. You can take a look to the this list[3]. Nepomuk and Baloo can co-exists, but this is advise against and you've to manually disable Nepomuk. Please report any packaging bug to our bug tracker. KDE bugs go in the upstream bug tracker. Have a nice update and testing! Watch the list of known issues[4]. [1] http://kde.org/announcements/announce-4.13-beta1.php [2] https://wiki.archlinux.org/index.php/KDE#Unstable_releases [3] http://community.kde.org/index.php?title=Baloo/NepomukPort [4] https://wiki.archlinux.org/index.php/DeveloperWiki:KDE#Known_issues -- Andrea Arch Linux Developer

1 1

[arch-dev-public] libevdev .so bump / clutter status
by Andreas Radke 08 Mar '14

08 Mar '14

I took over libevdev. It's somehow related to the Xorg packages I maintain. But the only packages in our repo that can optionally depend on it are clutter and packages depending in it. I've put libevdev 1.0.x into staging to start the .so rebuild. I've found that the old 1.16.x clutter won't build with this new libevdev version. New clutter 1.17.x in gnome-unstable can make use of it but the rebuild should be done in gnome-unstable. It could be an option to move libevdev from staging to gnome-unstable. Can the gnome and clutter maintainers please take care of this or point me how to fix this situation? Note: Gentoo seems to disable libevdev support in clutter, Fedora has it enabled. -Andy

1 0