- Arch-dev-public - lists.archlinux.org

[arch-dev-public] [signoff] kernel26-lts-2.6.27.41-1
by Tobias Powalowski 16 Dec '09

16 Dec '09

Hi guys, Changed the module path to constantly use 2.6.27-lts, that binary modules doesn't need to rebuild on every little version bump. please signoff for both arches. greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

2 1

[arch-dev-public] Release announcement for filesystem 2009.11-1
by Allan McRae 16 Dec '09

16 Dec '09

Seems I forgot all about this package in [testing].... Here is a short draft release announcement so it can be moved. --DRAFT-- The filesstem-2009.11-1 package has removed LC_COLLATE=C from /etc/profile as this caused incorrect sorting on some locales (See FS#15250). Any scripts relying on this value should manually set the LC_COLLATE variable. --END DRAFT-- Allan

2 2

[arch-dev-public] Packaging Chromium for [extra]
by Pierre Schmitz 16 Dec '09

16 Dec '09

Hi devs, I did have a closer look at chromium recently and it did improve a lot. Even though it's called "beta" it is really usable and feature complete. There is quite a high demand for it (the binary version in AUR has neraly 800 votes). I would like to make a peoper package for it and provide that in our repo. The AUR packages are either svn trunk builds or repackaged ubuntu debs with ugly symlinks to libs with other so names. My idea is to build a tar out of their svn tag and build a clean package with that. What do you think? (it's about chromium btw. and not Chrome which is Google's build with some "extras") -- Pierre Schmitz, https://users.archlinux.de/~pierre

6 14

[arch-dev-public] [signoff] glib2 2.22.3-1
by Ionut Biru 15 Dec '09

15 Dec '09

hi, please sign off -- Ionut

4 4

[arch-dev-public] [signoff] coreutils-8.2-1
by Allan McRae 15 Dec '09

15 Dec '09

Fairly minor bug fix release over 8.1 which has been in [testing] for a long time, but a major jump over what is currently in [core]. I have been using the pre-release snapshots without any issues. Upstream ChangeLog: ** Bug fixes id's use of mgetgroups no longer writes beyond the end of a malloc'd buffer [bug introduced in coreutils-8.1] id no longer crashes on systems without supplementary group support. [bug introduced in coreutils-8.1] rm once again handles zero-length arguments properly. The rewrite to make rm use fts introduced a regression whereby a command like "rm a '' b" would fail to remove "a" and "b", due to the presence of the empty string argument. [bug introduced in coreutils-8.0] sort is now immune to the signal handling of its parent. Specifically sort now doesn't exit with an error message if it uses helper processes for compression and its parent ignores CHLD signals. [bug introduced in coreutils-6.9] tail without -f no longer access uninitialized memory [bug introduced in coreutils-7.6] timeout is now immune to the signal handling of its parent. Specifically timeout now doesn't exit with an error message if its parent ignores CHLD signals. [bug introduced in coreutils-7.6] a user running "make distcheck" in the coreutils source directory, with TMPDIR unset or set to the name of a world-writable directory, and with a malicious user on the same system was vulnerable to arbitrary code execution [bug introduced in coreutils-5.0] Signoff both, Allan

4 4

[arch-dev-public] [signoff] expat-2.0.1-4
by Allan McRae 15 Dec '09

15 Dec '09

Jan pointed out another issue that needed patched in expat so here goes -4. ChangeLog: Add fixes for CVE-2009-3560 (in -3 previously in [testing]) and CVE-2009-3720. CVE = security issue so is there any chance I can get more that one signoff in two days this time? Allan

2 1

[arch-dev-public] [signoff] expat-2.0.1-3
by Allan McRae 14 Dec '09

14 Dec '09

Fix CVE-2009-3560. Signoff both, Allan

2 1

[arch-dev-public] [signoff] toolchain
by Allan McRae 14 Dec '09

14 Dec '09

kernel-headers-2.6.32-1: - upstream update - more patching to scsi.h for userspace compatibility (FS#17408) glibc-2.11.1-1: - upstream update gcc-4.4.2-4: - use latest 4.4 snapshot binutils-2.20-3: - just a rebuild (no relevant new fixes on 2.20 cvs branch) Allan

4 3

[arch-dev-public] [signoff] automake-1.11.1-1
by Allan McRae 13 Dec '09

13 Dec '09

Minor upstream update. Converted to arch-any package. Upstream changelog: * Bugs introduced by 1.11: - The `parallel-tests' test driver works around a GNU make 3.80 bug with trailing white space in the test list (`TESTS = foo $(EMPTY)'). * Long standing bugs: - On Darwin 9, `pythondir' and `pyexecdir' pointed below `/Library/Python' even if the `--prefix' argument pointed outside of a system directory. AM_PATH_PYTHON has been fixed to ignore the value returned from python's `get_python_lib' function if it points outside the configured prefix, unless the `--prefix' argument was either `/usr' or below `/System'. - The testsuite does not try to change the mode of `ltmain.sh' files from a Libtool installation (symlinked to test directories) any more. - AM_PROG_GCJ uses AC_CHECK_TOOLS to look for `gcj' now, so that prefixed tools are preferred in a cross-compile setup. - The distribution is tarred up with mode 755 now by the `dist*' targets. This fixes a race condition where untrusted users could modify files in the $(PACKAGE)-$(VERSION) distdir before packing if the toplevel build directory was world-searchable. This is CVE-2009-4029. Build x86_64, tested on i686. Signoff, Allan

2 2

[arch-dev-public] [signoff] gpm-1.20.6-4
by Eric Bélanger 12 Dec '09

12 Dec '09

Hi, gpm 1.20.6-4 is in testing. Changes: * Added profile for extra security on multi-user-console (close FS#17243) * Removed the need of texinfo depends Please test and signoff. Eric

3 7