March 2016 - Arch-general - lists.archlinux.org

[arch-general] JasPer vulnerabilities
by Harrison Wells 07 Mar '16

07 Mar '16

Is the package JasPer in extra repo vulnerable to CVE-2016-1577, CVE-2016-2089 and CVE-2016-2116? I noticed that the version number of JasPer is same in Debian, Ubuntu and Arch, i.e. 1.900.1. Debian and Ubuntu seem to have updated/patched it, is Arch not vulnerable to it? With regards, Harrison Wells

3 4

[arch-general] Missing Dependency virtualbox-host-dkms
by Chr1s 06 Mar '16

06 Mar '16

Cheers Replacing the `virtualbox-host-modules' with the `virtualbox-host-dkms' package causes a "modprobe: FATAL: Module vboxdrv not found in directory /lib/modules/4.4.3-1-ARCH". The whole misc (/lib/modules/4.4.3-1-ARCH/kernel/misc/) directory is missing. You need to install the `linux-headers' package for a working dkms. DKMS than can make the modules and creates the misc folder with all virtualbox *ko files. Is it possible to add the `linux-headers' package as a dependency for the `virtualbox-host-dkms' package or miss I something? Thanks Kind regards Chris

5 6

[arch-general] Wifi disconnects every few minutes
by Fulcrum 06 Mar '16

06 Mar '16

Hi everybody, I have an Alfa AWUS036H USB Wifi adapter (Ralink Technology, Corp. RT2870/RT3070 Wireless Adapter). It's using rt2800usb driver. I use netctl to connect to wifi.Here is my netctl profile: Description='Mine' Interface=wlp0s18f2u4 Connection=wireless Security=none ESSID=ncepu-student IP=static Address='10.110.7.7/24' Gateway='10.110.7.254' DNS=("8.8.8.8";"8.8.4.4") The problem is that 'ip addr show' says that I'm still connected to my wifi AP. I can see my IP and everything but I can't access internet. I can't even ping google or any other server. When I try to curl a local LAN web server, it says 'there is no route to xxx.xxx.xxx.xxx', where xxx.xxx.xxx.xxx is my local router. So I have to disconnect and reconnect every few minutes to use internet. Here are ping results to a local server (while still connected to wifi, as per 'ip addr'): PING yyy.yyy.yyy.yyy (yyy.yyy.yyy.yyy) 56(84) bytes of data. From 10.110.7.7 icmp_seq=1 Destination Host Unreachable From 10.110.7.7 icmp_seq=2 Destination Host Unreachable From 10.110.7.7 icmp_seq=3 Destination Host Unreachable From 10.110.7.7 icmp_seq=4 Destination Host Unreachable From 10.110.7.7 icmp_seq=5 Destination Host Unreachable From 10.110.7.7 icmp_seq=6 Destination Host Unreachable ^C --- yyy,yyy.yyy.yyy ping statistics --- 6 packets transmitted, 0 received, +6 errors, 100% packet loss, time 5008ms Where yyy.yyy.yyy.yyy is a server that is always available to all PCs connected to local LAN or wifi. I read somewhere that netctl and dhcp don't work well together so I changed DHCP to static IP*. I even tried changing the wifi access points (There are multiple APs around me). In all cases, I am able to connect to the AP and use internet, but only for a few minutes. For debugging, I removed the usb cable, and reattached the wifi adapter.Here are some entries from dmesg showing the plugging in of the adapter and subsequent connection trials. Note that I disconnected and reconnected the AP around [21713.142829]. [20962.199042] usb 6-4: new high-speed USB device number 3 using ehci-pci [20962.455180] usb 6-4: reset high-speed USB device number 3 using ehci-pci [20962.595540] ieee80211 phy1: rt2x00_set_rt: Info - RT chipset 3070, rev 0201 detected [20962.651113] ieee80211 phy1: rt2x00_set_rf: Info - RF chipset 0005 detected [20962.651670] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht' [20962.685678] rt2800usb 6-4:1.0 wlp0s18f2u4: renamed from wlan0 [20987.396145] ieee80211 phy1: rt2x00lib_request_firmware: Info - Loading firmware file 'rt2870.bin' [20987.396184] ieee80211 phy1: rt2x00lib_request_firmware: Info - Firmware detected - version: 0.29 [20987.851414] IPv6: ADDRCONF(NETDEV_UP): wlp0s18f2u4: link is not ready [20989.368562] wlp0s18f2u4: authenticate with 74:25:8a:3f:79:d1 [20989.425297] wlp0s18f2u4: send auth to 74:25:8a:3f:79:d1 (try 1/3) [20989.434313] wlp0s18f2u4: authenticated [20989.439817] wlp0s18f2u4: associate with 74:25:8a:3f:79:d1 (try 1/3) [20989.444114] wlp0s18f2u4: RX AssocResp from 74:25:8a:3f:79:d1 (capab=0x8421 status=0 aid=130) [20989.450763] wlp0s18f2u4: associated [20989.450812] IPv6: ADDRCONF(NETDEV_CHANGE): wlp0s18f2u4: link becomes ready [21700.838273] ieee80211 phy1: rt2x00queue_flush_queue: Warning - Queue 14 failed to flush [21705.251761] IPv6: ADDRCONF(NETDEV_UP): wlp0s18f2u4: link is not ready [21713.142829] wlp0s18f2u4: authenticate with 74:25:8a:3f:79:d1 [21713.199602] wlp0s18f2u4: send auth to 74:25:8a:3f:79:d1 (try 1/3) [21713.201715] wlp0s18f2u4: authenticated [21713.204008] wlp0s18f2u4: associate with 74:25:8a:3f:79:d1 (try 1/3) [21713.210193] wlp0s18f2u4: RX AssocResp from 74:25:8a:3f:79:d1 (capab=0x8421 status=0 aid=130) [21713.218064] wlp0s18f2u4: associated [21713.218114] IPv6: ADDRCONF(NETDEV_CHANGE): wlp0s18f2u4: link becomes ready [21803.494111] INFO: NMI handler (perf_event_nmi_handler) took too long to run: 1.026 msecs I hope someone here can help me find a solution to this incredibly annoying problem. *With DHCP, I got disconnected from the wifi AP with 'journalctl' showing some errors about 'carrier lost'. With 'static IP', I don't get disconnected but can't access internet either.

1 0

[arch-general] libxp.so.6 not found
by Fulcrum 04 Mar '16

04 Mar '16

Hi I need to run a GUI tool. It runs fine under Ubuntu but when I try to run under Arch, it says: >./gmv ./gmv: error while loading shared libraries: libXp.so.6: cannot open shared object file: No such file or directory Earlier, multiple other libraries were missing too, such as libxt, but I was able to install them using pacman. FYI I have enabled [multilib] repository in my pacman.conf file. >ldd gmv linux-gate.so.1 (0xf771f000) libGL.so.1 => /usr/lib32/libGL.so.1 (0xf7625000) libGLU.so.1 => /usr/lib32/libGLU.so.1 (0xf7595000) libXt.so.6 => /usr/lib32/libXt.so.6 (0xf752d000) libXmu.so.6 => /usr/lib32/libXmu.so.6 (0xf750d000) libXext.so.6 => /usr/lib32/libXext.so.6 (0xf74f5000) libXp.so.6 => not found libXpm.so.4 => not found libX11.so.6 => /usr/lib32/libX11.so.6 (0xf73a5000) libm.so.6 => /usr/lib32/libm.so.6 (0xf734d000) libc.so.6 => /usr/lib32/libc.so.6 (0xf7195000) libpthread.so.0 => /usr/lib32/libpthread.so.0 (0xf7175000) libgcc_s.so.1 => /usr/lib32/libgcc_s.so.1 (0xf7155000) libdl.so.2 => /usr/lib32/libdl.so.2 (0xf714d000) libstdc++.so.6 => /usr/lib32/libstdc++.so.6 (0xf6fd5000) libSM.so.6 => /usr/lib32/libSM.so.6 (0xf6fc5000) libICE.so.6 => /usr/lib32/libICE.so.6 (0xf6fa5000) libxcb.so.1 => /usr/lib32/libxcb.so.1 (0xf6f7d000) /lib/ld-linux.so.2 (0xf76f5000) libuuid.so.1 => /usr/lib32/libuuid.so.1 (0xf6f75000) libXau.so.6 => /usr/lib32/libXau.so.6 (0xf6f6d000) libXdmcp.so.6 => /usr/lib32/libXdmcp.so.6 (0xf6f65000) Pacman says that I have libxp already installed (though there is no libxp from multilib repo): >pacman -Ss libxp extra/libxp 1.0.3-1 [installed] X11 X Print Library extra/libxpm 3.5.11-1 [installed] X11 pixmap library Could any body help me figure this out? As per my understanding, my GUI tool needs 32-bit libraries. The other libraries that I installed had some packages like 'lib32-xyz' from multilib repo. But libxp has no 32 bit package. Regards, Fulcrum

2 2

[arch-general] libvirt and VirtualBox
by Jukka Salmi 03 Mar '16

03 Mar '16

Hello On an up-to-date Arch x86-64 system, I fail to manage VirtualBox VMs with libvirt virsh: $ virsh -c vbox:///session error: failed to connect to the hypervisor error: internal error: unable to initialize VirtualBox driver API Is this supposed to work out of the box? Both VirtualBox (5.0.14-1) and libvirt (1.3.2-1) are installed from the community repository, and VirtualBox support seems to be compiled in: $ virsh -V Virsh command line tool of libvirt 1.3.2 [...] Compiled with support for: Hypervisors: QEMU/KVM LXC UML OpenVZ VMware PHYP VirtualBox ESX Test [...] Furthermore, both VirtualBox alone (i.e. when managed by VBoxManage or similar) and libvirt when used to manage QEMU/KVM sessions work fine. Any hints about what I'm missing? TIA & cheers, Jukka -- This email fills a much-needed gap in the archives.

2 3

[arch-general] Heads up: If you are using SSLv2 turn it off immediately
by P. A. López-Valencia 03 Mar '16

03 Mar '16

If you are have a web server facing the public internet, turn off SSLv2 immediately. OpenSSL 1.0.2g has the fix but it will take a while to drip down to the repos as it brings with it an ABI change. The vulnerability is so bad[1], it doesn't only have a CVE number, CVE-2016-0800[4], but a name and its own website: HTTPS DROWN[1][2][3]. One third of all public web servers are open to attack[2][3] and OpenSSL may not be the only crypto library affected[1][4]. [1] http://www.theregister.co.uk/2016/03/01/drown_tls_protocol_flaw/ [2] http://www.theregister.co.uk/2016/03/01/drown_crypto_flaw_analysis/ [3] https://drownattack.com/#paper [4] https://access.redhat.com/security/cve/cve-2016-0800 -- Pedro A. López-Valencia http://about.me/palopezv/ Recession is when a neighbor loses his job. Depression is when you lose yours. -Ronald Reagan

2 2

[arch-general] Arch PXE setup with existing dhcp server/apache/vsftpd
by David C. Rankin 03 Mar '16

03 Mar '16

All, I was interested in setting up a boot server to provide Arch install, as well as several other boot/setup options. I have existing Arch servers with ISC dhcpd, apache, vsftpd, and I've installed tftp. I have looked at: https://wiki.archlinux.org/index.php/PXE https://wiki.archlinux.org/index.php/Diskless_system Both seem to have different pieces of the puzzle. The PXE page provides examples for use of dnsmasq, darktable, and tftp. However running dnsmasq would conflict with the existing ISC dhcp service and how would xinetd know how to differential between an ftp request that should invoke tftp or vsftp? The Diskless_system page, uses existing dhcp config, but then pulls files from NFS or NBD. I've looked at dozens of ubuntu and centos pages (which is primarily what you get when you search for PXE boot setup howtos), but most are of such poor quality, it is hard to tell what the salient parts of the setup are. My confusion comes in seeing how I can continue to serve the rest of my dhcp clients and also PXE boot requests (from what I can tell, it shouldn't matter, everybody still gets an address, and those non-PXE clients should ignore the additions to dhcpd.conf -- hopefully) Additionally, all other howtos show mounting the .iso loop and then copying the files to the tftpboot location. Why bother with the copy, why not just mount the .iso loop at the proper tftpboot location? If anyone know the answer to whether the PXE config additions to dhcpd.conf will conflict with normal dhcp clients? or whether having both tftp and vsftp served by xinetd is an issue? I would appreciate your answer. I think I can take if from there. If you have any other pointers about setting up a PXE boot server with this configuration I'd appreciate that as well. I'll add whatever working solution is arrived at to the wiki. Thanks -- David C. Rankin, J.D.,P.E.

2 2

[arch-general] AUR Packages no longer visible from Archlinux
by Jayesh Badwaik 01 Mar '16

01 Mar '16

Hi, I am no longer to view any AUR packages using either packer or yaourt. Is anybody else facing the same problems? $ yaourt -Ss visit community/visitors 0.7-4 A very fast web log analyzer $ -- Jayesh Badwaik

9 16

[arch-general] Boot SuperMicro H8QM8-2 w/4 Opteron 8360 - hangs on boot of install media
by David C. Rankin 01 Mar '16

01 Mar '16

All, This may be a stupid question. If so I apologize. Do I have to do anything different to boot the arch install media on a board with 4 Opteron 8360 processors (16 core total), or should the kernel just handle however many cores there are? The reason I ask is it always hangs after it says Booting Kernel (immediately after decompress). When I memtest the memory, (I have two sets and I've gone stick by stick with a minimum memory config, and I still get errors at the exact same percentage of every test.) I have rotated each stick in/out with a replacement, and replaced the whole set, but same issue. So I either have to do something different to boot with 16 core which will in turn also address the memory issue, or I have lots of bad ram or a bad mem controller in one of the processors. Hardware Info shows all cores and memory, it's just using it that is the problem :) What say the experts? Do I need to pass a kernel flag, or something similar for the 4 Opteron boot, or does it just smell like multiple failed sticks in each set? -- David C. Rankin, J.D.,P.E.

2 3