- Arch-dev-public - lists.archlinux.org

[arch-dev-public] [signoff] openssh-5.7p1-1
by Gaetan Bisson 26 Jan '11

26 Jan '11

Hi everyone, OpenSSH 5.7 has just been released. Due to Guillaume's work on this package, the upgrade was quite straightforward and openssh-5.7p1-1 is now in [testing]. All tests pass on both architectures. Enjoy your shiny new ECDSA keys! (And then please signoff.) -- Gaetan Changes since OpenSSH 5.6 ========================= Features: * Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656) is NOT implemented. Certificate host and user keys using the new ECDSA key types are supported - an ECDSA key may be certified, and an ECDSA key may act as a CA to sign certificates. ECDH in a 256 bit curve field is the preferred key agreement algorithm when both the client and server support it. ECDSA host keys are preferred when learning a host's keys for the first time, or can be learned using ssh-keyscan(1). * sftp(1)/sftp-server(8): add a protocol extension to support a hard link operation. It is available through the "ln" command in the client. The old "ln" behaviour of creating a symlink is available using its "-s" option or through the preexisting "symlink" command * scp(1): Add a new -3 option to scp: Copies between two remote hosts are transferred through the local host. Without this option the data is copied directly between the two remote hosts. * ssh(1): automatically order the hostkeys requested by the client based on which hostkeys are already recorded in known_hosts. This avoids hostkey warnings when connecting to servers with new ECDSA keys, since these are now preferred when learning hostkeys for the first time. * ssh(1)/sshd(8): add a new IPQoS option to specify arbitrary TOS/DSCP/QoS values instead of hardcoding lowdelay/throughput. bz#1733 * sftp(1): the sftp client is now significantly faster at performing directory listings, using OpenBSD glob(3) extensions to preserve the results of stat(3) operations performed in the course of its execution rather than performing expensive round trips to fetch them again afterwards. * ssh(1): "atomically" create the listening mux socket by binding it on a temporary name and then linking it into position after listen() has succeeded. This allows the mux clients to determine that the server socket is either ready or stale without races. stale server sockets are now automatically removed. (also fixes bz#1711) * ssh(1)/sshd(8): add a KexAlgorithms knob to the client and server configuration to allow selection of which key exchange methods are used by ssh(1) and sshd(8) and their order of preference. * sftp(1)/scp(1): factor out bandwidth limiting code from scp(1) into a generic bandwidth limiter that can be attached using the atomicio callback mechanism and use it to add a bandwidth limit option to sftp(1). bz#1147 BugFixes: * ssh(1)/ssh-agent(1): honour $TMPDIR for client xauth and ssh-agent temporary directories. bz#1809 * ssh(1): avoid NULL deref on receiving a channel request on an unknown or invalid channel; bz#1842 * sshd(8): remove a debug() that pollutes stderr on client connecting to a server in debug mode; bz#1719 * scp(1): pass through ssh command-line flags and options when doing remote-remote transfers, e.g. to enable agent forwarding which is particularly useful in this case; bz#1837 * sftp-server(8): umask should be parsed as octal * sftp(1): escape '[' in filename tab-completion * ssh(1): Typo in confirmation message. bz#1827 * sshd(8): prevent free() of string in .rodata when overriding AuthorizedKeys in a Match block * sshd(8): Use default shell /bin/sh if $SHELL is "" * ssh(1): kill proxy command on fatal() (we already killed it on clean exit); * ssh(1): install a SIGCHLD handler to reap expiried child process; bz#1812 * Support building against openssl-1.0.0a Portable OpenSSH Bugfixes: * Use mandoc as preferred manpage formatter if it is present, followed by nroff and groff respectively. * sshd(8): Relax permission requirement on btmp logs to allow group read/write * bz#1840: fix warning when configuring --with-ssl-engine * sshd(8): Use correct uid_t/pid_t types instead of int. bz#1817 * sshd(8): bz#1824: Add Solaris Project support. * sshd(8): Check is_selinux_enabled for exact return code since it can apparently return -1 under some conditions.

5 15

[arch-dev-public] [signoff] nilfs-utils 2.0.21
by Ionuț Bîru 26 Jan '11

26 Jan '11

Hi, new bug fix release. Please test and signoff. Users signoffs are welcome. Changelog: nilfs-utils-2.0.21 Fri Jan 21, 2011 JST * get rid of the warning telling disk format is unstable * change license of libraries and header files to LGPL; crc was replaced with an LGPL implementation along with this. * discard blocks at mkfs time * add verbose option to mkfs.nilfs2 * kill gcc warnings -- Ionuț

1 0

[arch-dev-public] [signoff] kernel26-lts 2.6.32.28-2
by Tobias Powalowski 26 Jan '11

26 Jan '11

Latest LTS kernel is in testing, fixed udev crash #22343 fixed ext3 default mount option #22544 please signoff for both arches greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

2 1

[arch-dev-public] [signoff] perl-5.12.2-2
by Ángel Velásquez 25 Jan '11

25 Jan '11

Summary: * Patch added fix-h2ph-and-tests.patch to close FS#22518 [1] * PKGBUILD cleaned Sign-off both Archs (tested on chroots) [1] https://bugs.archlinux.org/task/22518 -- Angel Velásquez angvp @ irc.freenode.net Arch Linux Developer / Trusted User Linux Counter: #359909 http://www.angvp.com

2 1

[arch-dev-public] [signoff] libcap-2.20-1
by Allan McRae 25 Jan '11

25 Jan '11

Upstream update: * Latest kernel capabilites supported: now includes CAP_SYSLOG (patch from Sergey Senozhatsky) * $(CFLAGS) Makefile fixes from Torsten Werner * Default to installing setcap with an inheritable capability. o You can disable this feature with: make RAISE_SETFCAP=no install We require using "RAISE_SETFCAP=no" as setting that capability fails under fakeroot. I'm not entire sure what this affects... but I can always rebuild as root if someone points out that this is super important. Signoff both, Allan

3 3

[arch-dev-public] Stepping down... for now
by Daniel J Griffiths (Ghost1227) 25 Jan '11

25 Jan '11

As much as I really hate to do it, I've decided that it's time to step down as an Arch Dev/TU. I love Arch, and will continue to contribute as time permits, but work has made it impossible as of late to keep up with my responsibilities to Arch. For those who don't know, I've been working as the CTO of a social media marketing and design company called Twelve31 Interactive for a while now, and I recently purchased a local bar as well. There just doesn't seem to be enough time in the day for everything and something has to give. At some point in time in the (hopefully not too far off) future, I fully intend to reapply and hope that you all will be willing to take me back. I will, however, stay on long enough to make sure that all of the more important packages I maintain find good homes.

3 2

[arch-dev-public] [signoff] kernel-2.6.36.3-2
by Tobias Powalowski 25 Jan '11

25 Jan '11

Upstream update. This package is NOT in testing (2.6.37 currently resides there), but at: http://dev.archlinux.org/~tpowa/kernel26/ fixed udev crash #22343 fixed ext3 default mount option #22544 please signoff for both arches. greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

2 1

[arch-dev-public] [signoff] pacman 3.4.3-1
by Dan McGee 24 Jan '11

24 Jan '11

Upstream changes: http://projects.archlinux.org/pacman.git/tree/NEWS?id=v3.4.3 -Dan

6 6

Re: [arch-dev-public] [signoff] pacman 3.4.3-1
by Thomas Bächler 24 Jan '11

24 Jan '11

Am 24.01.2011 17:59, schrieb Andrea Scarpino: > On Monday 24 January 2011 10:52:30 Dan McGee wrote: >> One more for x86_64 would be good since I don't actually use this package. > Signoff x86_64 > Me too.

2 1

Re: [arch-dev-public] [arch-dev] [signoff] dhcpcd 5.2.10-1
by Ronald van Haren 23 Jan '11

23 Jan '11

---------- Doorgestuurd bericht ---------- Van: "Gaetan Bisson" <bisson(a)archlinux.org> Datum: 23 jan. 2011 10:01 Onderwerp: Re: [arch-dev] [signoff] dhcpcd 5.2.10-1 Aan: "Development Discussion for Arch Linux" <arch-dev(a)archlinux.org> [2011-01-22 20:16:04 +0100] Ronald van Haren: > Simple bugfix release. Please signoff. > > For detailed upstream changelog see [1], there is no easy way to copy it here. I can signoff for i686 but you probably meant to send this message to arch-dev-public. -- Gaetan Yes, forwarding. Ronald

1 0