September 2011 - Aur-general - lists.archlinux.org

[aur-general] Deletion request
by Baptiste Careil 06 Sep '11

06 Sep '11

Hello, Please delete cslp [1]. I have replaced it by libcslp-svn [2]. Thanks. [1] https://aur.archlinux.org/packages.php?ID=29914 [2] https://aur.archlinux.org/packages.php?ID=51986 -- Baptiste Careil

2 1

[aur-general] [request] Package removal - Package naming not standard
by Fernando 06 Sep '11

06 Sep '11

I created umph-prompt https://aur.archlinux.org/packages.php?ID=52212 Then I realize it doesn't follow the standard perl packaging name, so I created perl-umph-prompt. https://aur.archlinux.org/packages.php?ID=52217 Please, delete umph-prompt from aur if possible. -- http://about.me/fernandogrd

2 1

[aur-general] Merge request: yakuake-git and yakuake-qt4-svn
by Jekyll Wu 06 Sep '11

06 Sep '11

yakuake-git[1] and yakuake-qt4-svn[2] are essentially the same. They both pull code from git://anongit.kde.org/yakuake. Since the upstream has switched from svn to git, I would suggest deleting the -svn package or merging it into the -git pakcage. [1] https://aur.archlinux.org/packages.php?ID=41530 [2] https://aur.archlinux.org/packages.php?ID=30056

3 3

[aur-general] [Disown request] iscan-plugin-gt-x770
by D. Can Celasun 06 Sep '11

06 Sep '11

Hi TUs, Can someone please orphan iscan-plugin-gt-x770 [1]. The maintainer hasn't updated the package in over 2 years. I have an up-to-date PKGBUILD and I'm wiling to maintain it. Thanks. [1] http://aur.archlinux.org/packages.php?ID=29170

2 1

[aur-general] Deletion request : nmapsi4-svn
by Jekyll Wu 06 Sep '11

06 Sep '11

This package[1] is orphaned and the upstream[2] uses git now. [1] http://aur.archlinux.org/packages.php?ID=32628 [2] http://www.nmapsi4.org/node/5

2 1

[aur-general] Securing the AUR website
by Pierre Schmitz 05 Sep '11

05 Sep '11

Hi TUs, the AUR still handles user logins and sessions in a insecure way that can easily be exploited. The last approach to use https by default was denied a long time ago. But I hope you guys will reconsider this decision. To prevent session hijacking, mtm attacks or whatnot I'd recommend the following: * Redirect all http traffic to https by default * Set session.cookie_secure = 1 in your php.ini * If you use setcookie() make sure to set the secure parameter to true * If you don't require any javascript to access your session data it's also a good idea to set all cookie to httponly (again via php.ini and if you use setcookie() directly) The optional https access as we have now wont work here. Even if you never forget to add the s to http when you login session data is also transferred via http. So once you click a non-https link to the AUR it would be possible for an attacker to hijack your session. Greetings, Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre

19 73

[aur-general] [Deletion request] amule-remote-cvs
by Jekyll Wu 05 Sep '11

05 Sep '11

This package[1] is outdated and orphaned, and the tarball is old, non-official and un-reachable(at least for me). [1] http://aur.archlinux.org/packages.php?ID=10606

2 1

[aur-general] Removal request (ptscotch)
by Michele Mocciola 05 Sep '11

05 Sep '11

Please, remove ptscotch package (http://aur.archlinux.org/packages.php?ID=23389) it's a duplicate of ptscotch-mpich2. Thanks!

2 1

[aur-general] Ayatana cleanup
by Balló György 05 Sep '11

05 Sep '11

Hi TUs, please delete the following packages: - fixed_appmenu-qt - https://aur.archlinux.org/packages.php?ID=50325 - duplicate of appmenu-qt - fixed_qt-appmenu - https://aur.archlinux.org/packages.php?ID=50314 - duplicate of qt-appmenu - bamf-bin - https://aur.archlinux.org/packages.php?ID=51288 - duplicate of bamf - bamf-daemon - https://aur.archlinux.org/packages.php?ID=48687 - duplicate of bamf - plasma-message-indicator - https://aur.archlinux.org/packages.php?ID=45498 - I uploaded it in a new name: plasma-widget-message-indicator - unity-place-applications - https://aur.archlinux.org/packages.php?ID=45670- renamed to unity-lens-applications - unity-place-files - https://aur.archlinux.org/packages.php?ID=45753 - renamed to unity-lens-files And please orphan the following packages, because they are outdated, and the maintainer (Gianfrix<https://aur.archlinux.org/account.php?Action=AccountInfo&ID=14295>) not responded for my e-mail more than one weeks: - indicator-messages - https://aur.archlinux.org/packages.php?ID=32052 - gnome-session-ubuntu - https://aur.archlinux.org/packages.php?ID=44214 -- Thanks, City-busz

2 2

[aur-general] [Deletion request] fcitx4 and fcitx4vim
by Jekyll Wu 04 Sep '11

04 Sep '11

fcitx4[1] is outdated and orphaned, and fcitx-4.1.0 is already in [extra] . fcitx4vim[2] is orphaned and based upon fcitx-3, and AFAIK the patch has already been merged into upstream. [1] - http://aur.archlinux.org/packages.php?ID=43279 [2] - http://aur.archlinux.org/packages.php?ID=31246

2 1