- Arch-dev-public - lists.archlinux.org

[arch-dev-public] [signoff] expat-2.0.1-3
by Allan McRae 14 Dec '09

14 Dec '09

Fix CVE-2009-3560. Signoff both, Allan

2 1

[arch-dev-public] [signoff] toolchain
by Allan McRae 14 Dec '09

14 Dec '09

kernel-headers-2.6.32-1: - upstream update - more patching to scsi.h for userspace compatibility (FS#17408) glibc-2.11.1-1: - upstream update gcc-4.4.2-4: - use latest 4.4 snapshot binutils-2.20-3: - just a rebuild (no relevant new fixes on 2.20 cvs branch) Allan

4 3

[arch-dev-public] [signoff] automake-1.11.1-1
by Allan McRae 13 Dec '09

13 Dec '09

Minor upstream update. Converted to arch-any package. Upstream changelog: * Bugs introduced by 1.11: - The `parallel-tests' test driver works around a GNU make 3.80 bug with trailing white space in the test list (`TESTS = foo $(EMPTY)'). * Long standing bugs: - On Darwin 9, `pythondir' and `pyexecdir' pointed below `/Library/Python' even if the `--prefix' argument pointed outside of a system directory. AM_PATH_PYTHON has been fixed to ignore the value returned from python's `get_python_lib' function if it points outside the configured prefix, unless the `--prefix' argument was either `/usr' or below `/System'. - The testsuite does not try to change the mode of `ltmain.sh' files from a Libtool installation (symlinked to test directories) any more. - AM_PROG_GCJ uses AC_CHECK_TOOLS to look for `gcj' now, so that prefixed tools are preferred in a cross-compile setup. - The distribution is tarred up with mode 755 now by the `dist*' targets. This fixes a race condition where untrusted users could modify files in the $(PACKAGE)-$(VERSION) distdir before packing if the toplevel build directory was world-searchable. This is CVE-2009-4029. Build x86_64, tested on i686. Signoff, Allan

2 2

[arch-dev-public] [signoff] gpm-1.20.6-4
by Eric Bélanger 12 Dec '09

12 Dec '09

Hi, gpm 1.20.6-4 is in testing. Changes: * Added profile for extra security on multi-user-console (close FS#17243) * Removed the need of texinfo depends Please test and signoff. Eric

3 7

[arch-dev-public] Integrity Check x86_64: core, extra, community 11-12-2009
by repomaint＠archlinux.org 11 Dec '09

11 Dec '09

================================================== = Integrity Check x86_64 of core,extra,community = ================================================== Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Missing Dependencies ---------------------- community/eclipse-ve --> 'eclipse<3.3' extra/archboot --> 'libdownload>=1.3-3' extra/digikam --> 'liblcms' Missing Makedepends --------------------- extra/kdelibs3 --> 'autoconf<2.64' extra/v86d --> 'kernel26<2.6.30' Repo Hierarchy for Dependencies --------------------------------- extra/haskell-hashed-storage depends on community/haskell-zlib (0 extra (make)deps to pull) extra/munin depends on community/perl-html-template (0 extra (make)deps to pull) extra/munin depends on community/perl-log-log4perl (0 extra (make)deps to pull) extra/munin-node depends on community/perl-net-server (0 extra (make)deps to pull) extra/pan depends on community/gmime22 (0 extra (make)deps to pull) Repo Hierarchy for Makedepends -------------------------------- core/ca-certificates depends on extra/ruby (25 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (26 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/groff depends on extra/ghostscript (144 extra (make)deps to pull) core/groff depends on extra/netpbm (45 extra (make)deps to pull) core/groff depends on extra/psutils (145 extra (make)deps to pull) core/iputils depends on extra/docbook-xsl (26 extra (make)deps to pull) core/iputils depends on extra/libxslt (25 extra (make)deps to pull) core/iputils depends on extra/opensp (28 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (25 extra (make)deps to pull) extra/dbus-python depends on community/docutils (0 extra (make)deps to pull) extra/gnome-speech depends on community/espeak (2 extra (make)deps to pull : portaudio docutils) extra/grml-zsh-config depends on community/txt2tags (0 extra (make)deps to pull) extra/xqf depends on community/chrpath (0 extra (make)deps to pull) Packages found in tree, but not in db --------------------------------------- extra/openoffice-en-US Summary --------- Missing PKGBUILDs: 0 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 0 Invalid archs: 0 Missing (make)dependencies: 5 Repo hierarchy problems: 21 Circular dependencies: 0 In db, but not in tree: 0 In tree, but not in db: 1

1 0

[arch-dev-public] Integrity Check i686: core, extra, community 11-12-2009
by repomaint＠archlinux.org 11 Dec '09

11 Dec '09

================================================ = Integrity Check i686 of core,extra,community = ================================================ Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Missing Dependencies ---------------------- community/eclipse-ve --> 'eclipse<3.3' extra/archboot --> 'libdownload>=1.3-3' Missing Makedepends --------------------- extra/kdelibs3 --> 'autoconf<2.64' extra/v86d --> 'kernel26<2.6.30' Repo Hierarchy for Dependencies --------------------------------- extra/haskell-hashed-storage depends on community/haskell-zlib (0 extra (make)deps to pull) extra/munin depends on community/perl-html-template (0 extra (make)deps to pull) extra/munin depends on community/perl-log-log4perl (0 extra (make)deps to pull) extra/munin-node depends on community/perl-net-server (0 extra (make)deps to pull) extra/pan depends on community/gmime22 (0 extra (make)deps to pull) Repo Hierarchy for Makedepends -------------------------------- core/ca-certificates depends on extra/ruby (25 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (26 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/groff depends on extra/ghostscript (143 extra (make)deps to pull) core/groff depends on extra/netpbm (45 extra (make)deps to pull) core/groff depends on extra/psutils (144 extra (make)deps to pull) core/iputils depends on extra/docbook-xsl (26 extra (make)deps to pull) core/iputils depends on extra/libxslt (25 extra (make)deps to pull) core/iputils depends on extra/opensp (28 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (25 extra (make)deps to pull) extra/gnome-speech depends on community/espeak (1 extra (make)deps to pull : portaudio) extra/grml-zsh-config depends on community/txt2tags (0 extra (make)deps to pull) extra/xqf depends on community/chrpath (0 extra (make)deps to pull) Packages found in tree, but not in db --------------------------------------- extra/openoffice-en-US Summary --------- Missing PKGBUILDs: 0 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 0 Invalid archs: 0 Missing (make)dependencies: 4 Repo hierarchy problems: 20 Circular dependencies: 0 In db, but not in tree: 0 In tree, but not in db: 1

1 0

[arch-dev-public] [signoff] sudo-1.7.2p2-1
by Allan McRae 11 Dec '09

11 Dec '09

Minor upstream update. Upstream ChangeLog: Major changes between sudo 1.7.2p1 and 1.7.2p2: * Fixed a a bug where the negation operator in a Cmnd_List was not being honored. * Sudo no longer produces a parse error when #includedir references a directory that contains no valid filenames. * The sudo.man.pl and sudoers.man.pl files are now included in the distribution for people who wish to regenerate the man pages. * Fixed the emulation of krb5_get_init_creds_opt_alloc() for MIT kerberos. * When authenticating via PAM, set PAM_RUSER and PAM_RHOST early so they can be used during authentication. Signoff both. Allan

3 2

[arch-dev-public] [signoff] libldap 2.4.20
by Andrea Scarpino 10 Dec '09

10 Dec '09

Hi, minor upstream release. Changelog: OpenLDAP 2.4.20 Release (2009/11/27) Fixed client tools with LDAP options (ITS#6283) Fixed liblber embedded NUL values in BerValues (ITS#6353) Fixed liblber inverted LBER_USE_DER test (ITS#6348) Fixed liblber to return failure on certain failures (ITS#6344) Fixed libldap connection initialization (ITS#6386) Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) Fixed libldap uninitialized return value (ITS#6355) Fixed libldap unlimited timeout (ITS#6388) Added slapd handling of hex server IDs (ITS#6297) Added slapd syncrepl contextCSN storing in subentry (ITS#6373) Fixed slapd asserts in minimal environment (ITS#6361) Fixed slapd authid-rewrite parsing (ITS#6392) Fixed slapd checks of str2filter (ITS#6391) Fixed slapd configArgs initialization (ITS#6363) Fixed slapd debug handling of LDAP_DEBUG_ANY (ITS#6324) Fixed slapd db_open with connection_fake_init (ITS#6381) Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) Fixed slapd inclusion of ac/unistd.h (ITS#6342) Fixed slapd invalid dn log message (ITS#6309) Fixed slapd lockup on shutdown (ITS#6372) Fixed slapd onetime leak (ITS#6398) Fixed slapd RID range to be decimal only (ITS#6394) Fixed slapd sl_free to better reclaim memory (ITS#6380) Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) Fixed slapd syncrepl to use correct SID (ITS#6367) Fixed slapd termination for one level DNs (ITS#6338) Fixed slapd tls_accept to retry in certain cases (ITS#6304) Fixed slapd-bdb/hdb cache corruption (ITS#6341) Fixed slapd-bdb/hdb entry cache (ITS#6360) Fixed slapd-ldap leak (ITS#6326) Fixed slapd-relay bind segfault (ITS#6337) Fixed slapo-accesslog ensure CSNs are normalized (ITS#6400) Fixed slapo-memberof operational attr updates (ITS#6329) Fixed slapo-pcache entry dupe (ITS#6310) Fixed slapo-syncprov checkpoint conversion (ITS#6370) Fixed slapo-syncprov deadlock (ITS#6335) Fixed slapo-syncprov memory leak (ITS#6376) Fixed slapo-syncprov out of order changes (ITS#6346) Fixed slapo-syncprov psearch with stale cookie (ITS#6397) Build Environment Added additional operations for ITS#6332 Fixed memrchr define (ITS#6351) Fixed slapd MAXPATHLEN handling (ITS#6342) Added test050 rapid add/mod/del sequence (ITS#6368) Fixed test057 handling of memberof/refint (ITS#6343) Fixed slapd test error ignoring (ITS#6345) Fixed liblutil constant (ITS#5909) Documentation admin24 fix RFC4511 and other references (ITS#6399) ldap_get_dn(3) typos (ITS#5366) ldap.conf(5) clarify comment usage (ITS#6384) slapd.conf(5) note hex server IDs (ITS#6297) slapd-config(5) note hex server IDs (ITS#6297) Please build for x86_64 and signoff both. Thanks -- Andrea `bash` Scarpino Arch Linux Developer

3 3

[arch-dev-public] [signoff] nano 2.2.0-1
by Andreas Radke 09 Dec '09

09 Dec '09

Major feature update. I removed the unneeded texinfo dep now covered by the post.install check. I haven't touched the line wrapping settings. Please signoff. -Andy http://www.nano-editor.org/overview.php The 2.2 release of GNU nano continues to add some features while attempting to provide continuity to users of previous versions. When possible we have elected to make new features disabled by default, as .nanorc and aliasing allows one to easily permanently enable desired features. The following improvemens and features are available in version 2.2 include: * Customizable key bindings (see the key bindings section of the nanorc man page for more details. * 'soft' line wrapping (i.e. full line display) * Full undo/redo support [EXPERIMENTAL] * Pager support (i.e. reading from stdin) * Warnings for un-writable files, external modification since opening * Abortable searching (^C after ^W) * More syntax highlighting examples (Fortran, objC, OCaml, Makefiles) * Faster syntax higlighting for complicated regexes

3 2

[arch-dev-public] [signoff] sqlite3 3.6.21-1
by Andreas Radke 08 Dec '09

08 Dec '09

monthly upstream bugfix release. please signoff. -Andy SQLite version 3.6.21 is now available on the SQLite website: http://www.sqlite.org/ SQLite version 3.6.21 is a monthly maintenance release of SQLite. Upgrading from prior versions is optional. Version 3.6.21 features an enhancement to the sqltie3_trace() interface such that the values of bound parameters are inserted into the SQL output emitted by sqlite3_trace(), making application diagnostics easier. Version 3.6.21 also features general performance improvements and a rework of the FTS3 full-text search extension for improved robustness and performance. SQLite version 3.6.21, as all versions of SQLite since 3.6.17, has been tested to 100% MC/DC and branch coverage using multiple independently developed test harnesses. As always, please let us know if you encounter any difficulties with this or any other SQLite release. D. Richard Hipp drh(a)hwaci.com SQLite Release 3.6.21 On 2009 Dec 07 (3.6.21) Changes associated with this release include the following: * The SQL output resulting from sqlite3_trace() is now modified to include the values of bound parameters. * Performance optimizations targetting a specific use case from a single high-profile user of SQLite. A 12% reduction in the number of CPU operations is achieved (as measured by valgrind). Actual performance improvements in practice may vary depending on workload. Changes include: o The ifnull() and coalesce() SQL functions are now implemented using in-line VDBE code rather than calling external functions, so that unused arguments need never be evaluated. o The substr() SQL function does not bother to measure the length its entire input string if it is only computing a prefix o Unnecessary OP_IsNull, OP_Affinity, and OP_MustBeInt VDBE opcodes are suppressed o Various code refactorizations for performance * The FTS3 extension has undergone a major rework and cleanup. New FTS3 documentation is now available. * The SQLITE_SECURE_DELETE compile-time option fixed to make sure that content is deleted even when the truncate optimization applies. * Improvements to "dot-command" handling in the Command Line Interface. * Other minor bug fixes and documentation enhancements. A complete list of SQLite releases in a single pages is also available. A detailed history of every check-in is available at http://www.sqlite.org/src/timeline.

1 0