- Arch-dev-public - lists.archlinux.org

[arch-dev-public] git commit access
by Aaron Griffin 06 Jun '08

06 Jun '08

Hey guys, Just wanted to let you all know that we have given git push access to the AUR to both callan and loui. We set them up with ONLY git-shell accounts so they can't muck with gerolde or break anything. Cheers, Aaron

1 0

[arch-dev-public] [signoff] openssl, ca-certificates and run-parts
by Pierre Schmitz 06 Jun '08

06 Jun '08

Hi, as mentioned in another thread the new openssl package now depends on ca- certificates because openssl does not provide certs anymore. run-parts is another dependency for the update-hook scripts of ca-certificates. So please sign-off those packages for moving into [core]. Pierre -- archlinux.de

4 4

[arch-dev-public] [signoff] ntfs-3g 1.0.2531-1
by Thomas Bächler 05 Jun '08

05 Jun '08

I forgot to send this message, please sign off. Just an upstream update, nothing exciting on our end.

4 3

[arch-dev-public] [signoff] syslog-ng 2.0.9-1
by Eric Belanger 05 Jun '08

05 Jun '08

In testing for both arches. Please signoff. minor upstream update from 2.0.6 to 2.0.9 Upstream changelog: 2.0.9 Sun, 23 Mar 2008 21:36:47 +0100 Bugfixes: * Fixed handling more than 256 destinations by changing the reference counter type of LogMessages to a 16 bit value. * Fixed a possible SIGABRT crash if the hosts file passed to dns-cache-hosts() had multiple entries with the same IP address. * Fixed a possible crash during startup if "-g" was specified without using "-u". 2.0.8 Thu, 31 Jan 2008 12:38:21 +0100 Bugfixes: * Fixed a regression in 2.0.7 that caused destination files not to be reopened when syslog-ng was reopened. This causes potential problems with log rotation. * Fixed DNS cache size checking, persistent DNS cache entries were also counted against dns_cache_size() which might decrease cache space significantly when a large /etc/hosts file is in use. * Fixed a bug that caused the persistent DNS cache (e.g. /etc/hosts) to be reloaded for all name resolution requests. Other changes: * Fixed sample configuration file for RedHat. * Some portability changes in loggen. * Added cygwin packaging files to contrib/cygwin-packaging. 2.0.7 Thu, 03 Jan 2008 07:01:59 +0100 Bugfixes: * Fixed UNIX domain socket destinations on Solaris. * Fixed flow-control behaviour for follow-mode source files. * Added the "mark" keyword to be an alias of "mark_freq" for compatibility with syslog-ng 1.6. * Fixed message loss in destination files during configuration reloads if syslog-ng is heavily loaded. * Fixed a possible segmentation fault in the dns-cache-host() file parsing code for improperly formatted host files. * Fixed possible "Insufficient buffer space" errors in the STREAMS driver. * Fixed the starvation of the timer used to reap unused destination files, which could cause some files never to be closed under heavy load. * Fixed ISO timestamp parsing for timestamps that have no timezone information or have a too long fraction of a second portion. * Added a workaround for possible deadlocks on /proc/kmsg and user terminals. * Fixed program name parsing that caused problems for TAG values that include the '/' character. This problem was introduced by 2.0.6. Other changes: * The fsync() option was implemented. * Added support for file sources that do not exist at startup. * Added support the "--persist-file" configuration option. * Added support for timestamps used by some LinkSys routers. * Added loggen tool to generate syslog messages at the specified rate. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[arch-dev-public] Crazy Schedule
by Jeff Mickey 05 Jun '08

05 Jun '08

So I graduated from college about a month ago, and things have been pretty hectic. My laptop from which I do most of my arch development is almost dead (I'm writing this email from my father's mac) I graduated from college and got a job. I have to get a new place to live, internet connection, tv, water, blah blah blah. Oh, and I had surgery today... So let's call this a sabbatical until I come back. I had hoped to do arch work while I was home with my parents in the middle of this whole move thing, but the laptop is not happy with me. Anyone can update anything of mine if they want. // jeff -- . : [ + carpe diem totus tuus + ] : .

2 1

[arch-dev-public] New temporary place for pkg_diff.html
by Daniel Isenmann 04 Jun '08

04 Jun '08

Hi everybody, we all know that Andy is moving to his new apartement and waiting for his internet connection. At the moment the pkd_diff.html at his html directory is out of date. Because of that, I will run the script (because I have written it and have it here) once a day irregularly and upload it to my html directory here: http://dev.archlinux.org/~daniel/pkg_diff.html After Andy is online again, it will be on the old place again. Cheers, Daniel

4 4

[arch-dev-public] Anyone use samba?
by Aaron Griffin 04 Jun '08

04 Jun '08

I saw this bug today: http://bugs.archlinux.org/task/10526 I do not use samba, but could update it and pray if no one else actually uses it. Cheers, Aaron

6 8

[arch-dev-public] [signoff] openssl-0.9.8g
by Pierre Schmitz 04 Jun '08

04 Jun '08

Hi, I just uploaded a new release of openssl to testing. It fixes some security issues (see changelog below). So please sign-off. In addition to this I had to rebuilt ntp and fix its depends to openssl. Last but not least according to the changelog openssl does not provide any root-certs anymore. If there are any apps which rely on those, we should think about providing a separate root-certs package. Pierre Changes between 0.9.8g and 0.9.8h [28 May 2008] *) Fix flaw if 'Server Key exchange message' is omitted from a TLS handshake which could lead to a cilent crash as found using the Codenomicon TLS test suite (CVE-2008-1672) [Steve Henson, Mark Cox] *) Fix double free in TLS server name extensions which could lead to a remote crash found by Codenomicon TLS test suite (CVE-2008-0891) [Joe Orton] *) Clear error queue in SSL_CTX_use_certificate_chain_file() Clear the error queue to ensure that error entries left from older function calls do not interfere with the correct operation. [Lutz Jaenicke, Erik de Castro Lopo] *) Remove root CA certificates of commercial CAs: The OpenSSL project does not recommend any specific CA and does not have any policy with respect to including or excluding any CA. Therefore it does not make any sense to ship an arbitrary selection of root CA certificates with the OpenSSL software. [Lutz Jaenicke] *) RSA OAEP patches to fix two separate invalid memory reads. The first one involves inputs when 'lzero' is greater than 'SHA_DIGEST_LENGTH' (it would read about SHA_DIGEST_LENGTH bytes before the beginning of from). The second one involves inputs where the 'db' section contains nothing but zeroes (there is a one-byte invalid read after the end of 'db'). [Ivan Nestlerode <inestlerode(a)us.ibm.com>] *) Partial backport from 0.9.9-dev: Introduce bn_mul_mont (dedicated Montgomery multiplication procedure) as a candidate for BIGNUM assembler implementation. While 0.9.9-dev uses assembler for various architectures, only x86_64 is available by default here in the 0.9.8 branch, and 32-bit x86 is available through a compile-time setting. To try the 32-bit x86 assembler implementation, use Configure option "enable-montasm" (which exists only for this backport). As "enable-montasm" for 32-bit x86 disclaims code stability anyway, in this constellation we activate additional code backported from 0.9.9-dev for further performance improvements, namely BN_from_montgomery_word. (To enable this otherwise, e.g. x86_64, try "-DMONT_FROM_WORD___NON_DEFAULT_0_9_8_BUILD".) [Andy Polyakov (backport partially by Bodo Moeller)] *) Add TLS session ticket callback. This allows an application to set TLS ticket cipher and HMAC keys rather than relying on hardcoded fixed values. This is useful for key rollover for example where several key sets may exist with different names. [Steve Henson] *) Reverse ENGINE-internal logic for caching default ENGINE handles. This was broken until now in 0.9.8 releases, such that the only way a registered ENGINE could be used (assuming it initialises successfully on the host) was to explicitly set it as the default for the relevant algorithms. This is in contradiction with 0.9.7 behaviour and the documentation. With this fix, when an ENGINE is registered into a given algorithm's table of implementations, the 'uptodate' flag is reset so that auto-discovery will be used next time a new context for that algorithm attempts to select an implementation. [Ian Lister (tweaked by Geoff Thorpe)] *) Backport of CMS code to OpenSSL 0.9.8. This differs from the 0.9.9 implemention in the following ways: Lack of EVP_PKEY_ASN1_METHOD means algorithm parameters have to be hard coded. Lack of BER streaming support means one pass streaming processing is only supported if data is detached: setting the streaming flag is ignored for embedded content. CMS support is disabled by default and must be explicitly enabled with the enable-cms configuration option. [Steve Henson] *) Update the GMP engine glue to do direct copies between BIGNUM and mpz_t when openssl and GMP use the same limb size. Otherwise the existing "conversion via a text string export" trick is still used. [Paul Sheer <paulsheer(a)gmail.com>] *) Zlib compression BIO. This is a filter BIO which compressed and uncompresses any data passed through it. [Steve Henson] *) Add AES_wrap_key() and AES_unwrap_key() functions to implement RFC3394 compatible AES key wrapping. [Steve Henson] *) Add utility functions to handle ASN1 structures. ASN1_STRING_set0(): sets string data without copying. X509_ALGOR_set0() and X509_ALGOR_get0(): set and retrieve X509_ALGOR (AlgorithmIdentifier) data. Attribute function X509at_get0_data_by_OBJ(): retrieves data from an X509_ATTRIBUTE structure optionally checking it occurs only once. ASN1_TYPE_set1(): set and ASN1_TYPE structure copying supplied data. [Steve Henson] *) Fix BN flag handling in RSA_eay_mod_exp() and BN_MONT_CTX_set() to get the expected BN_FLG_CONSTTIME behavior. [Bodo Moeller (Google)] *) Netware support: - fixed wrong usage of ioctlsocket() when build for LIBC BSD sockets - fixed do_tests.pl to run the test suite with CLIB builds too (CLIB_OPT) - added some more tests to do_tests.pl - fixed RunningProcess usage so that it works with newer LIBC NDKs too - removed usage of BN_LLONG for CLIB builds to avoid runtime dependency - added new Configure targets netware-clib-bsdsock, netware-clib-gcc, netware-clib-bsdsock-gcc, netware-libc-bsdsock-gcc - various changes to netware.pl to enable gcc-cross builds on Win32 platform - changed crypto/bio/b_sock.c to work with macro functions (CLIB BSD) - various changes to fix missing prototype warnings - fixed x86nasm.pl to create correct asm files for NASM COFF output - added AES, WHIRLPOOL and CPUID assembler code to build files - added missing AES assembler make rules to mk1mf.pl - fixed order of includes in apps/ocsp.c so that e_os.h settings apply [Guenter Knauf <eflash(a)gmx.net>] *) Implement certificate status request TLS extension defined in RFC3546. A client can set the appropriate parameters and receive the encoded OCSP response via a callback. A server can query the supplied parameters and set the encoded OCSP response in the callback. Add simplified examples to s_client and s_server. [Steve Henson] -- archlinux.de

6 14

[arch-dev-public] New nvidia drivers in testing
by Thomas Bächler 03 Jun '08

03 Jun '08

The new nvidia drivers have finally been released. They are in testing now for both architectures. I upload them completely untested, as my desktop is unaccessible until tomorrow. I dropped the libnvidia-wfb from the package, as it does the same as Xorg's libwfb and our xorg-server is sufficiently new (at least as far as I was told). Please report and working/non-working GPUs, I hope we can move this to extra soon.

3 3

[arch-dev-public] Best way to force file overwrites in a package?
by Thayer Williams 03 Jun '08

03 Jun '08

I'm putting together a kmenu icon set to replace the default icons. Upon installation I want it to backup the existing icons and copy the new ones. I tried doing this with an install file, but I still get a "conflicting files" error when I try to install the package. Ideally, I'd like this to work without forcing the user to pacman -f the package. Is this possible? I've included the install file below... is there a cleaner way of performing this task? Should I even bother with backing up the old stuff? A post_remove message could instruct the user to reinstall the 'kdelibs' package instead. pre_install() { #backup existing kmenu icons mv /opt/kde/share/icons/crystalsvg/16x16/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/16x16/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/22x22/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/22x22/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/32x32/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/32x32/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/48x48/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/48x48/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/64x64/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/64x64/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/128x128/apps/kmenu.png \ /opt/kde/share/icons/crystalsvg/128x128/apps/kmenu.png.backup mv /opt/kde/share/icons/crystalsvg/scalable/apps/kmenu.svgz \ /opt/kde/share/icons/crystalsvg/scalable/apps/kmenu.svgz.backup } post_install() { echo "==> Archlinux KDE theme files can be enabled via kcontrol" } # restore original kmenu icons mv /opt/kde/share/icons/crystalsvg/16x16/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/16x16/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/22x22/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/22x22/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/32x32/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/32x32/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/48x48/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/48x48/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/64x64/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/64x64/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/128x128/apps/kmenu.png.backup \ /opt/kde/share/icons/crystalsvg/128x128/apps/kmenu.png mv /opt/kde/share/icons/crystalsvg/scalable/apps/kmenu.svgz.backup \ /opt/kde/share/icons/crystalsvg/scalable/apps/kmenu.svgz }

3 4