- Arch-dev-public - lists.archlinux.org

[arch-dev-public] retracting libxcrypt 4.4.22-1 from [testing]
by Christian Hesse 06 Jun '21

06 Jun '21

Hello everybody, the testing package libxcrypt 4.4.22-1 was reported to be bad... Andreas was forced to change his password on login, which resulted in him being locked out of his system. We are trying to clarify... So I removed libxcrypt from [testing] for the time being. -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 1

[arch-dev-public] TIER 0 Mirror Access for All
by Jelle van der Waa 03 Jun '21

03 Jun '21

Hi All, For everyone with the correct role (Developers, Trusted Users or Support Staff) the tier 0 mirror is available for usage to get the absolute latest packages. The authentication is done with a basic auth which pacman supports and a token has to be generated in archweb to be able to use the mirror. [1] Note that the mirror is mostly useful for rebuilds or when you require the absolute latest packages the server is located in Germany so might not be ideal for everyone. [1] https://archlinux.org/devel/tier0mirror/ Greetings, Jelle van der Waa

1 0

[arch-dev-public] New Arch Linux Developer: Jonas Witschel (diabonas)
by Levente Polyak 15 May '21

15 May '21

I would like to welcome Jonas Witschel (diabonas) among the Arch Linux Developers. Jonas has been a Trusted User since 2019 and lately joined the Arch Linux Security Team. We wish you good luck and joy with your new responsibilities within Arch Linux! cheers, Levente

3 3

[arch-dev-public] GCC 11 and new toolchain on [testing]
by Giancarlo Razzolini 14 May '21

14 May '21

Hi, GCC 11 and a new toolchain rebuild has lended on [testing]. So, until it's moved, if you build anything that uses gcc against testing, it'll have to wait and be moved together. Also, if you guys notice any issues, let me know. Regards, Giancarlo Razzolini

1 0

[arch-dev-public] gnupg 2.3.1-1 pulled from [testing]
by Morten Linderud 11 May '21

11 May '21

Yo! It seems like gnupg 2.3.1-1 was built and pushed to [testing] briefly before being removed. The reason from the removal is because there are changes to how gnupg verifies signatures that depends on the key UIDs being properly signed. In the case of my key, "foxboron(a)archlinux.org" is of marginal trust while "morten(a)linderud.pw" is fully trusted. Since packages are signed with "--sender foxboron(a)archlinux.org" gnupg cares about this trust level starting from 2.3.0-1. This results in failing signature checks if you have this package and attempt to fetch packages signed by me. Related issue: https://dev.gnupg.org/T4735 Why was this removed with no headsup? It caused a fair bit of confusion for a few people and the cause of this issue isn't very clear when packaged fail to verify. Ideally we should have pushed gnupg with an epoch? To testers: The best course of action is to downgrade the gnupg package to 2.2.27-1 from the package archive or your local package cache. https://archive.archlinux.org/packages/g/gnupg/ <sidenote> gnupg is terrible :) </sidenote> -- Morten Linderud PGP: 9C02FF419FECBE16

4 6

[arch-dev-public] Spring cleanup '21
by Antonio Rojas 11 May '21

11 May '21

It's been over a year since our last package cleanup and orphans keep piling up. Please head to https://archlinux.org/devel/reports/unneeded-orphans/ and adopt packages you'd like to keep in the repos. If you are not a dev and would like to adopt some orphan in [extra], reply here or ping me on IRC and I'll move it. I'll start dropping the remaining packages to AUR in about 10 days.

6 8

[arch-dev-public] Disowning ruby packages
by Felix Yan 09 May '21

09 May '21

Hi All, I am disowning most of my ruby packages since I don't use any of them nowadays. Please consider adopting the following ones as they are now orphans: ruby-cairo ruby-faraday-middleware ruby-ffi ruby-multi_json ruby-power_assert ruby-test-unit -- Regards, Felix Yan

1 0

[arch-dev-public] Deprecating systemd-swap
by Felix Yan 09 May '21

09 May '21

As per suggested by upstream [1], systemd-swap is now deprecated and will be removed from [community] in the following days. zram-generator has been added to [community] as the suggested alternative. [1] https://github.com/Nefelim4ag/systemd-swap#users-should-migrate-to-systemdz… -- Regards, Felix Yan

1 0

[arch-dev-public] Barthalion's orphan packages
by Jelle van der Waa 09 May '21

09 May '21

Hi, I've removed Barthalion as maintainer from the last packages in archweb, these packages are now orphan and would like a new maintainer. If any of the packages need to be moved to the [community] please ask :) * libnss_nis * rpcsvc-proto * dejagnu * xdg-dbus-proxy * flatpak * flatpak-builder * xdg-desktop-portal * xdg-desktop-portal-gtk Greetings, Jelle

2 1

Re: [arch-dev-public] Spring cleanup '21
by Antonio Rojas 08 May '21

08 May '21

El miércoles, 28 de abril de 2021 22:26:13 (CEST), Santiago Torres-Arias via arch-dev-public escribió: > Unless there be dragons, I could happily pick up munin and > procinfo-ng... Since nobody objected, I moved procinfo-ng to [community], please adopt (and munin too) I dropped all remaining ones to AUR, except for: - dictionaries - these are low-maintenance and it's convenient to have them in the official repos. I moved all the orphan ones to [community] though, so TUs can maintain them. - asp - since it's an Arch project, I guess we want to keep it? - icewm - seems rather popular

1 0