Re: [Mageia-dev] Mageia Cauldron: Bad RPM's while update via urpmi

2011-07-02 Thread David Walser
Wolfgang Bornath wrote: This explains it! Change the mirror, you are using ibiblio which has been reported numerous times in the forum and the mailing lists to be syncing very badly. I don't know about badly, but I found it to be a little bit behind. If you are located in north america, use

[Mageia-dev] Import request: apache-mod_suexec

2011-07-30 Thread David Walser
https://bugs.mageia.org/show_bug.cgi?id=1466 Just wanted to make sure this one didn't fall through the cracks. The apache maintainer should probably take care of this since it builds right from the apache source. It's a simple import and rebuild. Thanks!

[Mageia-dev] Import request: apcupsd

2011-07-30 Thread David Walser
https://bugs.mageia.org/show_bug.cgi?id=1462 I also wanted to make sure this wasn't missed, as it's an important package (for monitoring APC brand UPSs). It's also a simple import and rebuild. Thanks!

Re: [Mageia-dev] ANN: X11 now starts on tty1

2011-12-17 Thread David Walser
Anssi Hannula wrote: On 16.12.2011 20:16, Colin Guthrie wrote: Hi Just in case you didn't notice, X11 now starts on tty1 by default. So if you want a text login shell, make sure you go to tty2! I've not actually updated it for sysvinit now I think about it, so I'll have to update the

Re: [Mageia-dev] boot-nonfree.iso ?

2011-12-29 Thread David Walser
Thomas Backlund wrote: Now this does not fix the radeon-firmware issue, as this is only to get installer running on all hw. (I probably will remove radeon-firmware again as it's not needed/used by the installer) For the radeon-firmware (and other nonfree firmware) issue, we still need to

Re: [Mageia-dev] Conflicts between kde 4.7.90 and laptop-mode-tools

2011-12-29 Thread David Walser
Frank Griffin wrote: On 12/28/2011 11:36 AM, Balcaen John wrote: Le mercredi 28 décembre 2011 11:34:08 Frank Griffin a écrit : [...] But the question still stands in modified form: is anything else on a Mageia system using laptop-mode-tools, or has everything moved to pm-utils ? If I rip

Re: [Mageia-dev] php-5.4RC3

2011-12-29 Thread David Walser
Thomas Spuhler wrote: php-5.4RC3 will hit the mirrors soon. It may beak a few things. Hello Thomas, I was just wondering if you'd seen this since you hadn't changed it to ASSIGNED status: https://bugs.mageia.org/show_bug.cgi?id=3895 I was also curious if you are on the IRC.

Re: [Mageia-dev] boot-nonfree.iso ?

2011-12-29 Thread David Walser
David Walser wrote: Thomas Backlund wrote: Now this does not fix the radeon-firmware issue, as this is only to get installer running on all hw. (I probably will remove radeon-firmware again as it's not needed/used by the installer) For the radeon-firmware (and other nonfree firmware) issue

Re: [Mageia-dev] boot-nonfree.iso ?

2011-12-29 Thread David Walser
Thomas Backlund wrote: 29.12.2011 22:39, David Walser skrev: David Walser wrote: Thomas Backlund wrote: Now this does not fix the radeon-firmware issue, as this is only to get installer running on all hw. (I probably will remove radeon-firmware again as it's not needed/used by the installer

Re: [Mageia-dev] mentors + apprentices

2012-01-01 Thread David Walser
andre999 wrote: Hi everyone, Happy new year, and I hope that everyone has made a resolution to help Mageia to be a better distro. So qualified packagers, if you haven't already, would you like to mentor one of our eager apprentice candidates ? luigiwalser (David Walser), who

Re: [Mageia-dev] references to outside web sites/wiki

2012-01-07 Thread David Walser
Wolfgang Bornath wrote: 2012/1/5 Buchan Milne bgmi...@zarb.org: -Possibly considering contacting large mirror sites (e.g. mirrors.kernel.org) who currently mirror Mandriva, but not Mageia? Just for the records: mirrors.kernel.org mirror Mageia. But surely there are more large sites to be

Re: [Mageia-dev] references to outside web sites/wiki

2012-01-07 Thread David Walser
Glen Ogilvie wrote: On Wednesday, 4 January 2012 23:56:01 Romain d'Alverny wrote: On Wed, Jan 4, 2012 at 22:36, Johnny A. Solbu coo...@solbu.net wrote: On Wednesday 04 January 2012 21:06, Romain d'Alverny wrote: wiki.mandriva.com may be shut down for good in just a few days What?

[Mageia-dev] Security updates needing testing (please help)

2012-01-08 Thread David Walser
There are a number of needed security updates for Mageia 1 that have already been built and just need QA testing so that they can be released. Most of them have testcases already described in the comments. Please help test these if you can so we can get these updates released. Needs testing

Re: [Mageia-dev] Security updates needing testing (please help)

2012-01-09 Thread David Walser
Thank you to Dave Hodgins, David Geiger, Claire Robinson, and Thomas Backlund for helping to get some of these cleared out! Updated status below. There are a number of needed security updates for Mageia 1 that have already been built and just need QA testing so that they can be released.

Re: [Mageia-dev] Security updates needing testing (please help)

2012-01-09 Thread David Walser
Thank you to Dave Hodgins, David Geiger, Claire Robinson, Manuel Hiebel, and Thomas Backlund for helping to get some of these cleared out! Updated status below. There are a number of needed security updates for Mageia 1 that have already been built and just need QA testing so that they can

Re: [Mageia-dev] [RFC] Moving various packages/codecs to tainted

2012-01-09 Thread David Walser
Anssi Hannula wrote: Hi all! As I've noted in some previous emails, our core/tainted media codec split-up is currently arbitrary without any specific logic. As far as I remember, the tainted policy is that codecs for formats that are claimed to be covered by patents should be there.

Re: [Mageia-dev] [RFC] Moving various packages/codecs to tainted

2012-01-09 Thread David Walser
Anssi Hannula wrote: On 10.01.2012 01:30, David Walser wrote: Anssi Hannula wrote: Hi all! As I've noted in some previous emails, our core/tainted media codec split-up is currently arbitrary without any specific logic. As far as I remember, the tainted policy is that codecs for formats

Re: [Mageia-dev] Fwd: Re: [Kolab-devel] Supercolliding a PHP array - DoS Attacks

2012-01-09 Thread David Walser
Thomas Spuhler wrote: I got this from the Kolab folks: -- Forwarded Message -- -Message original- De: ABBAS Alain alain.ab...@libertech.fr Envoyé: 9 janvier 2012 22:48:02 UTC A: kolab-us...@kolab.org Cc: kolab-de...@kolab.org Sujet : [Kolab-devel]

Re: [Mageia-dev] [RFC] Moving various packages/codecs to tainted

2012-01-11 Thread David Walser
andre999 wrote: We're talking about codecs, essentially the decoders which are used to read encoded files. If the patent claims are valid/enforceable (and most aren't), it is up to the patent holder to decide if it is in their interest to enforce the patent claims. Since they will

Re: [Mageia-dev] Security updates needing testing (please help)

2012-01-16 Thread David Walser
The QA team is doing a great job getting things tested. A lot of new packages have been pushed to updates_testing recently, so more help is still welcome to clear it out. Most of them are security updates. Just to highlight some... Needs testing on i586:

Re: [Mageia-dev] Over-zealous rpmlint policy (rejecting rt)

2012-01-16 Thread David Walser
Michael Scherer wrote: Le jeudi 12 janvier 2012 à 11:12 +0200, Buchan Milne a écrit : I am trying to get rt (3.8.11) into the distro (a package that I am using on a different distro in a production environment), to be followed up with the rt (4.0.4) I have queued (which I am testing in

Re: [Mageia-dev] Packagers meeting

2012-01-29 Thread David Walser
Anne nicolas wrote: Hi there Could we have our weekly meeting tomorrow, same time, same place? Misc is not available at the moment and I will be in another meeting and late for sure. For tomorrow's meeting: - FOSDEM reminder - isos content: define DVD iso content - Define focus until

Re: [Mageia-dev] OSS sound support

2012-02-05 Thread David Walser
Colin Guthrie wrote: 'Twas brillig, and Thierry Vignaud at 08/10/11 20:05 did gyre and gimble: On 8 October 2011 19:35, Colin Guthrie mag...@colin.guthr.ie wrote: I've just pushed some changes that disable OSS sound under PulseAudio sound profile. If you want to use OSS apps with PulseAudio,

Re: [Mageia-dev] [RFE] Bundled copies of system libraries - call for participation

2012-02-07 Thread David Walser
Florian Hubold wrote: I've just whipped up https://wiki.mageia.org/en/Packages_carrying_bundled_copies_of_system_libraries It's purpose is listing and maybe documenting the reasons why some packages carry bundled copies of system libraries. I've begun with ffmpeg, as it has a rather bad

[Mageia-dev] urw-fonts

2012-02-11 Thread David Walser
The urw-fonts package is a confusing mess with multiple copies of the same fonts, coming from different sources and different times. One of the things in the package is urw-fonts-1.0.7pre40. There is now a urw-fonts-1.0.7pre44 available:

[Mageia-dev] procps / procps-ng

2012-02-11 Thread David Walser
There is a fork of procps called procps-ng, which I think lives here: http://www.ohloh.net/p/procps-ng Debian has switched to using it, as can be seen here: http://packages.debian.org/changelogs/pool/main/p/procps/procps_3.3.2-3/changelog Should we switch to it as well, or stick with procps?

[Mageia-dev] removal of .la from libxt breaks xpdf build

2012-02-11 Thread David Walser
D Morgan asked us to say if removal of .la files broke anything. It breaks xpdf, and I don't know if it's fixable. xpdf needs libXt.la to build libxpdf.la, and the xpdf build is heavily dependent on libxpdf.la. See xpdf-3.03-shared.diff for example.

Re: [Mageia-dev] procps / procps-ng

2012-02-12 Thread David Walser
Pascal Terjan wrote: On Sun, Feb 12, 2012 at 16:13, D.Morgan dmorga...@gmail.com wrote: On Sun, Feb 12, 2012 at 1:05 AM, David Walser luigiwal...@yahoo.com wrote: There is a fork of procps called procps-ng, which I think lives here: http://www.ohloh.net/p/procps-ng Debian has switched

Re: [Mageia-dev] [changelog] [RPM] cauldron core/release postfix-2.8.8-1.mga2

2012-02-19 Thread David Walser
Guillaume Rousse wrote: Le 19/02/2012 01:08, luigiwalser a écrit : Name: postfix Relocations: (not relocatable) Version : 2.8.8 Vendor: Mageia.Org Release : 1.mga2Build Date: Sun Feb 19 01:05:54 2012

Re: [Mageia-dev] printer-filter-utils

2012-02-19 Thread David Walser
Pascal Terjan wrote: I was looking at that package, which is a collection of drivers for some printers, not updated for years It is one of the two packages requiring automake1.4, because of the included drv_z42 Looking on http://www.openprinting.org/driver/drv_z42/ original website

Re: [Mageia-dev] removal of .la from libxt breaks xpdf build

2012-02-19 Thread David Walser
Funda Wang wrote: ? 2012-2-12 ??12:08?David Walser luigiwal...@yahoo.com??? D Morgan asked us to say if removal of .la files broke anything. It breaks xpdf, and I don't know if it's fixable. xpdf needs libXt.la to build libxpdf.la, and the xpdf build is heavily dependent on libxpdf.la

Re: [Mageia-dev] [changelog] cauldron core/release phpmyadmin-3.4.10-1.mga2

2012-02-19 Thread David Walser
zezinho wrote: Name: phpmyadmin Relocations: (not relocatable) Version : 3.4.10Vendor: Mageia.Org Release : 1.mga2Build Date: Sun Feb 19 22:50:32 2012 zezinho zezinho 3.4.10-1.mga2: + Revision: 211010 -

Re: [Mageia-dev] removal of .la from libxt breaks xpdf build

2012-02-19 Thread David Walser
wrote: On Sun, Feb 19, 2012 at 15:55, David Walser luigiwal...@yahoo.com wrote: Funda Wang wrote: ? 2012-2-12 ??12:08?David Walser luigiwal...@yahoo.com??? D Morgan asked us to say if removal of .la files broke anything. It breaks xpdf, and I don't know if it's fixable. xpdf needs libXt.la

Re: [Mageia-dev] removal of .la from libxt breaks xpdf build

2012-02-19 Thread David Walser
David Walser wrote: Pascal Terjan wrote: On Sun, Feb 19, 2012 at 17:23, Pascal Terjan pter...@gmail.com wrote: On Sun, Feb 19, 2012 at 17:08, Pascal Terjan pter...@gmail.com wrote: On Sun, Feb 19, 2012 at 16:29, Pascal Terjan pter...@gmail.com wrote: On Sun, Feb 19, 2012 at 16:23, Pascal

Re: [Mageia-dev] removal of .la from libxt breaks xpdf build

2012-02-20 Thread David Walser
D.Morgan wrote: On Mon, Feb 20, 2012 at 11:18 AM, Funda Wang fundaw...@gmail.com wrote: I guess it is another problem, which has no relationship with lesstif or gcc. a fixed xpdf is on the BS now Thank you D Morgan, Funda Wang, and everyone else that helped along the way. Sometimes it

Re: [Mageia-dev] printer-filter-utils

2012-02-20 Thread David Walser
Florian Hubold wrote: Am 19.02.2012 15:59, schrieb David Walser: Pascal Terjan wrote: I was looking at that package, which is a collection of drivers for some printers, not updated for years It is one of the two packages requiring automake1.4, because of the includeddrv_z42 Looking

Re: [Mageia-dev] check on mga1 may needs some changes

2012-02-25 Thread David Walser
Thomas Spuhler wrote: http://check.mageia.org/1/spuhler/updates_mandriva_2010_2.html Shows that Mandriva has a newer version, 0.97.3. We have the same version in upgrade. Yes, this page is mostly working, but there are still a few issues. See https://bugs.mageia.org/show_bug.cgi?id=3930

[Mageia-dev] Build system broken

2012-02-25 Thread David Walser
For some reason, the build system is trying to install libnss3 into every chroot. I don't know why. It is also trying to install the current version in Cauldron, rather than a known good version. The issue was introduced when nspr was updated to version 4.9, because the package provides

Re: [Mageia-dev] OSS sound support

2012-02-26 Thread David Walser
Kamil Rytarowski wrote: On 06.02.2012 11:11, EatDirt wrote: On 10/10/11 11:20, Guillaume Rousse wrote: Just for curiosity, where is OSS support needed nowadays ? Quake and co ? At least for wmix and wmsmixer too :) chris. I have found a walkaroud for this - use psdsp from

Re: [Mageia-dev] [packages-commits] [215093] SILENT: Fix install

2012-02-26 Thread David Walser
Luc Menut wrote: Le 26/02/2012 10:12, r...@mageia.org a écrit : Revision 215093 Author dmorgan Date 2012-02-26 10:12:36 +0100 (Sun, 26 Feb 2012) [...] @@ -75,7 +74,7 @@ Requires(post):nss Requires(post):rpm-helper Requires: %{mklibname sqlite3_ 0}=

Re: [Mageia-dev] Build system broken

2012-02-26 Thread David Walser
David Walser wrote: For some reason, the build system is trying to install libnss3 into every chroot. I don't know why. It is also trying to install the current version in Cauldron, rather than a known good version. The issue was introduced when nspr was updated to version 4.9, because

Re: [Mageia-dev] [packages-commits] [215093] SILENT: Fix install

2012-02-26 Thread David Walser
D.Morgan wrote: On Sun, Feb 26, 2012 at 1:50 PM, David Walser luigiwal...@yahoo.com wrote: Luc Menut wrote: Le 26/02/2012 10:12, r...@mageia.org a écrit : Revision 215093 Author dmorgan Date 2012-02-26 10:12:36 +0100 (Sun, 26 Feb 2012) [...] @@ -75,7 +74,7 @@ Requires

[Mageia-dev] package update request: gif2png

2012-03-10 Thread David Walser
Reason for update: Security update, CVE-2009-5018, filename buffer overflow. Update is in SVN. Package builds, installs, and works fine locally.

[Mageia-dev] lm_sensors update for newer kernels

2012-03-20 Thread David Walser
lm_sensors 3.3.2 just came out last week with this in the ChangeLog [1]: Change sysfs detection to survive upcoming kernel changes I'm not sure if that means kernel 3.3 or newer, but just a heads up (mainly to tmb) that we might need this. [1] -

[Mageia-dev] Freeze push: foomatic-filters

2012-03-20 Thread David Walser
Minor foomatic-filters update (4.0.14) contains just one change, should be safe to go in: * foomaticrip.c: If the input data is PDF but the driver requires PostScript, use the pdftops CUPS filter when CUPS is the spooler. This way we always use the same method to

[Mageia-dev] Freeze push: libdvdcss

2012-03-20 Thread David Walser
libdvdcss update (1.2.12) contains just one change, which is a regression fix: * fix regression on RPC-I drives handling. If unsure, assume the drive is of RPC-I type This can happen when patched drives do not answer to ioctl_ReportRPC correctly Confirmed it builds and installs

[Mageia-dev] printer-applet update for KDE 4.8.1

2012-03-20 Thread David Walser
I'm not sure who is in charge of updating KDE stuff, but could someone check that printer-applet 4.8.1 builds and then get it submitted (I can't at the moment). It's in SVN. Thanks.

Re: [Mageia-dev] [changelog] cauldron core/release java-1.6.0-openjdk-1.6.0.0-24.b24.12.mga2

2012-03-21 Thread David Walser
dmorgan wrote: Name: java-1.6.0-openjdk Relocations: (not relocatable) Version : 1.6.0.0 Vendor: Mageia.Org Release : 24.b24.12.mga2Build Date: Tue Mar 20 22:51:34 2012 Please don't forget that Mandriva updated this in a

Re: [Mageia-dev] lighttpd and others now require apache

2012-03-21 Thread David Walser
Guillaume Rousse wrote: Le 17/03/2012 03:22, Anssi Hannula a écrit : Hence I suggest a single user id to be used. (I'm fine with any other solution which works as well) My main concern is the fuzziness of the current situation where we have - one virtual package 'webserver' corresponding to

Re: [Mageia-dev] lm_sensors update for newer kernels (tmb)

2012-03-21 Thread David Walser
David Walser wrote: lm_sensors 3.3.2 just came out last week with this in the ChangeLog [1]: Change sysfs detection to survive upcoming kernel changes I'm not sure if that means kernel 3.3 or newer, but just a heads up (mainly to tmb) that we might need this. [1] - http://www.lm

Re: [Mageia-dev] Freeze push: foomatic-filters

2012-03-22 Thread David Walser
Florian Hubold doktor5000@... writes: Am 20.03.2012 10:36, schrieb David Walser: Minor foomatic-filters update (4.0.14) contains just one change, should be safe to go in: * foomaticrip.c: If the input data is PDF but the driver requires PostScript, use the pdftops CUPS filter when

[Mageia-dev] New security issues affect libzip and php (freeze push will be needed)

2012-03-22 Thread David Walser
New vulnerabilities CVE-2012-1162 (heap overflow) and CVE-2012-1163 (integer overflow) in libzip, which also affect PHP (probably the php-zip subpackage) were recently announced. libzip 0.10.1 has been released to fix these. I have updated it in SVN and confirmed it builds, but I have not

Re: [Mageia-dev] Please push

2012-03-22 Thread David Walser
Maarten Vanraes wrote: Op donderdag 22 maart 2012 05:36:47 schreef Thomas Spuhler: Please push php-apacheaccessor I upgraded it in svn to 0.1.1 in Dec. 2011, but it either didn't build or I forgot to submit it. i'm pretty sure the requirements for freeze pushes are also at least that you

Re: [Mageia-dev] Freeze push: foomatic-filters

2012-03-25 Thread David Walser
David Walser wrote: Florian Hubold doktor5000@... writes: Am 20.03.2012 10:36, schrieb David Walser: Minor foomatic-filters update (4.0.14) contains just one change, should be safe to go in: * foomaticrip.c: If the input data is PDF but the driver requires PostScript, use

Re: [Mageia-dev] MariaDB: problem: final estimated release date

2012-03-25 Thread David Walser
Colin Guthrie wrote: 'Twas brillig, and Maarten Vanraes at 23/03/12 17:39 did gyre and gimble: ( see https://mariadb.atlassian.net/secure/Dashboard.jspa , look at road map ) MariaDB RC 5.5.2229/Mar/12 MariaDB GA 5.5.2309/Apr/12 that means that the GA (final release) is 2 days

Re: [Mageia-dev] mass rebuild for Mga 2 ?

2012-03-25 Thread David Walser
Kamil Rytarowski wrote: On 25.03.2012 17:20, Pascal Terjan wrote: On Sun, Mar 25, 2012 at 15:51, Angelo Naselli anase...@linux.it mailto:anase...@linux.it wrote: In data domenica 25 marzo 2012 14:48:01, Julien ha scritto: Hello, Is there a mass rebuild planned before

Re: [Mageia-dev] Freeze push: udisks2

2012-03-25 Thread David Walser
Colin Guthrie wrote: Primary reason for requesting this is a fix for MMC/SD cards. http://cgit.freedesktop.org/udisks/commit/?id=3b277903af128fb632897d8932fe300f216ead38 Misc small fixes also included. This is really a part of the infrastructure needed by GNOME3, so I presume it's covered

Re: [Mageia-dev] New security issues affect libzip and php (freeze push will be needed)

2012-03-27 Thread David Walser
Anne Nicolas ennael1@... writes: Le 23/03/2012 01:31, David Walser a écrit : New vulnerabilities CVE-2012-1162 (heap overflow) and CVE-2012-1163 (integer overflow) in libzip, which also affect PHP (probably the php-zip subpackage) were recently announced. libzip 0.10.1 has been

[Mageia-dev] Freeze push: printer-applet

2012-03-27 Thread David Walser
This is part of KDE 4.8.1 and was missed in the update. It builds, installs, and works fine. printer-applet-4.8.1-1.mga2

[Mageia-dev] Freeze push: libmbfl

2012-03-27 Thread David Walser
It was updated for a security update in Mageia 1 but was not updated in Cauldron, so it won't currently be updated when upgrading to Mageia 2. The new version fixes usage with PHP 5.3.9 and newer. I confirmed locally that it builds, installs, and works properly.

Re: [Mageia-dev] Freeze push: printer-applet

2012-03-27 Thread David Walser
David Walser wrote: This is part of KDE 4.8.1 and was missed in the update. It builds, installs, and works fine. printer-applet-4.8.1-1.mga2 To be clear, this is part of mainline KDE (which we're supposed to be updating to 4.8.1 for Mageia 2). It is not some third-party app. It lives here

Re: [Mageia-dev] Freeze push: libmbfl

2012-03-28 Thread David Walser
--- On Wed, 3/28/12, Colin Guthrie mag...@colin.guthr.ie wrote: From: Colin Guthrie mag...@colin.guthr.ie Subject: Re: [Mageia-dev] Freeze push: libmbfl To: Mageia development mailing-list mageia-dev@mageia.org Cc: David Walser luigiwal...@yahoo.com Date: Wednesday, March 28, 2012, 8:46 AM

Re: [Mageia-dev] Freeze push: libmbfl

2012-03-28 Thread David Walser
Colin Guthrie mageia@... writes: Rebuilding PHP did not help. We need to revert this ASAP or find a way to fix PHP to be compatible and find out which other packages may be broken as a result. It's quite a mess upstream too. Apparently there was a 1.0.1 version (with a security bug),

Re: [Mageia-dev] freeze push: wireshark

2012-03-28 Thread David Walser
nicolas vigier boklm@... writes: On Wed, 28 Mar 2012, Guillaume Rousse wrote: 1.6.6 is a bugfix release. Submitted. Should we update this for Mageia 1? Version 1.4.12 fixes the same vulnerabilities. They don't look too serious to me, but who am I to judge?

[Mageia-dev] Old library packages left on system after upgrade

2012-03-28 Thread David Walser
We know that urpme --auto-orphans doesn't remove all orphaned libraries, and there are reasons for that. Manually you generally should be able to get rid of them, and generally urpmi_rpm-find-leaves will show them. There are three I noticed in my upgrade tests that aren't being shown, so they

[Mageia-dev] Freeze push: libzip (security update)

2012-03-28 Thread David Walser
New vulnerabilities CVE-2012-1162 (heap overflow) and CVE-2012-1163 (integer overflow) in libzip were recently announced. libzip 0.10.1 has been released to fix these. I have updated it in SVN and confirmed it builds on current Cauldron. I mentioned this earlier and Anne submitted it to the

[Mageia-dev] KDE requires creep and other minimal installation issues

2012-03-28 Thread David Walser
I have a server VM that does not have KDE installed, but it has KDM, ark, and konsole installed. IceWM is the default window manager. I've tested upgrading it to Mageia 2, and all kinds of extra KDE stuff gets pulled in in the upgrade, including task-kde4-minimal, leaving a broken KDE as the

Re: [Mageia-dev] Freeze push: libzip (security update)

2012-03-28 Thread David Walser
David Walser luigiwalser@... writes: New vulnerabilities CVE-2012-1162 (heap overflow) and CVE-2012-1163 (integer overflow) in libzip were recently announced. libzip 0.10.1 has been released to fix these. I have updated it in SVN and confirmed it builds on current Cauldron. I mentioned

[Mageia-dev] Freeze push: foomatic-filters

2012-03-28 Thread David Walser
foomatic-filters has a minor change to fix a bug reported by an Ubuntu user that was discovered when using a slightly buggy proprietary PPD file for a Canon printer. I've confirmed that it still works, printing through it to a Xerox printer at work (which system-config-printer did a much better

Re: [Mageia-dev] KDE requires creep and other minimal installation issues

2012-03-28 Thread David Walser
John Balcaen mikala@... writes: What is wrong here ? That's the default config *requires* iconstasks package ? As said earlier currently the default config ( not the vanilla one or netbook) use the iconstasks plasmoid, how are you going to ensure that this plasmoid is installed when using the

Re: [Mageia-dev] lm_sensors update for newer kernels (tmb)

2012-03-28 Thread David Walser
David Walser wrote: David Walser wrote: lm_sensors 3.3.2 just came out last week with this in the ChangeLog [1]: Change sysfs detection to survive upcoming kernel changes I'm not sure if that means kernel 3.3 or newer, but just a heads up (mainly to tmb) that we might need this. [1

Re: [Mageia-dev] Freeze push: libmbfl

2012-03-28 Thread David Walser
Colin Guthrie wrote: Rebuilding PHP did not help. We need to revert this ASAP or find a way to fix PHP to be compatible and find out which other packages may be broken as a result. Col OK, I synced it with the version in Mageia 1 updates, so this is ready to go. I need a sysadmin to push

Re: [Mageia-dev] KDE requires creep and other minimal installation issues

2012-03-29 Thread David Walser
Luc Menut lmenut@... writes: Le 28/03/2012 18:40, David Walser a écrit : [...] I'm not 100% sure, but I think at least some of the reason all kinds of extra stuff gets pulled in is because Default-kde4-config and mageia-kde4-config-common both have added dependencies on plasma applets

Re: [Mageia-dev] Removal of sun java

2012-03-29 Thread David Walser
D.Morgan dmorganec@... writes: Hi, i removed java sun from non free repository as now we are not able to provide it anymore. Should we have openjdk obsolete it so this insecure thing gets removed from users systems who already have it installed?

Re: [Mageia-dev] Removal of sun java

2012-03-29 Thread David Walser
Guillaume Rousse guillomovitch@... writes: If I want to keep a proprietary JRE on my computers, because I trust it more to run crap proprietary applications (also called corporate-compliants), than marvelous free-licensed environment they have never been tested with, that is my choice, not

Re: [Mageia-dev] Freeze push: libmbfl

2012-03-30 Thread David Walser
Thomas Spuhler wrote: David, can you please look at this again, it will not upgrade the way it is (downgrade) Thomas, it is my understanding that this is how it should work? That is, downgrades should not be handled automatically in Cauldron. In the stable release, you'd increase the epoch.

Re: [Mageia-dev] lighttpd and others now require apache

2012-04-01 Thread David Walser
Guillaume Rousse wrote: Le 22/03/2012 02:51, David Walser a écrit : Guillaume Rousse wrote: Le 17/03/2012 03:22, Anssi Hannula a écrit : Hence I suggest a single user id to be used. (I'm fine with any other solution which works as well) My main concern is the fuzziness of the current

Re: [Mageia-dev] lighttpd and others now require apache

2012-04-01 Thread David Walser
David Walser wrote: There's another problem, however, since the expat update. Since libexpat.la was removed, php won't rebuild. Pascal Terjan has fixed this problem.

Re: [Mageia-dev] Release_blocker bugs

2012-04-08 Thread David Walser
Anne nicolas wrote: Security updates = To be closed after RC 5046 bugsq...@mageia.org [Tracker] Security updates for Mageia 2 I could really use some help with Bug 5063 (libzip security update). It sounds serious, but I can't reproduce the make check error on the build

Re: [Mageia-dev] painful discussion n°1: debloating

2012-04-08 Thread David Walser
Wolfgang Bornath wrote: 2012/4/7 Sander Lepik sander.le...@eesti.ee: 07.04.2012 19:18, Thomas Spuhler kirjutas: On Saturday, April 07, 2012 08:38:39 AM Guillaume Rousse wrote: To summarize it: - has anyone any opposition to remove the totem-mozilla - KDE relationship in the installer ?

Re: [Mageia-dev] Release_blocker bugs

2012-04-08 Thread David Walser
Pascal Terjan wrote: On Sun, Apr 8, 2012 at 15:57, David Walser luigiwal...@yahoo.com wrote: Anne nicolas wrote: Security updates = To be closed after RC 5046 bugsq...@mageia.org [Tracker] Security updates for Mageia 2 I could really use some help with Bug 5063

Re: [Mageia-dev] painful discussion n°1: debloating

2012-04-08 Thread David Walser
Pierre Jarillon wrote: Le dimanche 8 avril 2012 21:02:48, Anne Nicolas a écrit : totem was proposed in Mandriva as there was no stable enough video player in KDE. Then we had Codeina managing codecs using only gstreamer. That's all. :) Totem don't work out the the box. I have a set of

[Mageia-dev] Freeze push: taglib

2012-04-08 Thread David Walser
taglib 1.7.1 is a bugfix release that fixes three CVEs: CVE-2012-1107 - https://bugzilla.redhat.com/show_bug.cgi?id=800553 CVE-2012-1108 - https://bugzilla.redhat.com/show_bug.cgi?id=800559 CVE-2012-1584 - https://bugzilla.redhat.com/show_bug.cgi?id=810009 Confirmed that it builds, installs, and

[Mageia-dev] minor systemd-related issues

2012-04-11 Thread David Walser
There are a few things I noticed from a new upgrade test I just did with a server VM. In systemctl --all I have two things failed for unknown reasons: - dev-sda2.swap, even though the swap partition looks to be mounted - fedora-loadmodules.service, even though the modules look to be loaded

[Mageia-dev] Mageia 2 security updates: help needed with Java and Tomcat

2012-04-11 Thread David Walser
The only remaining known security issues with Mageia 2 packages concern Java and Tomcat, and some expertise is needed to help close these. The vulnerable Java package is java-1.7.0-openjdk. It is vulnerable to a large set of CVEs which have also affected java 1.6.0, and I believe are the same

[Mageia-dev] Change in libx11 broke xscreensaver

2012-04-12 Thread David Walser
This is explained in Bug 4742: https://bugs.mageia.org/show_bug.cgi?id=4742 But to summarize, xscreensaver-demo in Cauldron does not work, it comes up with an empty list of screensavers. This list comes from reading the programs entry of the /etc/X11/app-defaults/XScreenSaver file, which is

Re: [Mageia-dev] minor systemd-related issues

2012-04-12 Thread David Walser
Colin Guthrie mageia@... writes: httpd is running, but it is using the LSB init script instead of systemd units. I believe Colin's intention was to have apache-mpm-prefork install a symlink to httpd-prefork.service called httpd.service, but this symlink does not exist. Are you sure?

Re: [Mageia-dev] minor systemd-related issues

2012-04-12 Thread David Walser
Colin Guthrie mageia@... writes: Thinking about it, I reckon rpm-helper especially should be something that is always installed first on a big upgrade. There could be multiple files running e.g. %_post_service etc. in their post scripts but we certainly want the latest rpm-helper for that.

Re: [Mageia-dev] mysql CVE's in mga1 = have it update to mariadb

2012-04-13 Thread David Walser
AL13N alien@... writes: 5. someone has a better idea? considering the response i got, now i'll default to letting someone else handle it, which might mean it never gets fixed. that would also mean for me that mageia1 would be a bad version to get LTS on. The objections to this have been

[Mageia-dev] Freeze push: egroupware

2012-04-13 Thread David Walser
Fixes XSS security flaw. See https://bugs.mageia.org/show_bug.cgi?id=5384

Re: [Mageia-dev] Change in libx11 broke xscreensaver

2012-04-13 Thread David Walser
David Walser luigiwalser@... writes: Can we patch our libx11 to go back to the old way, or is there a better way to fix this? I don't have a deep understanding of the meaning of this code. Turns out the broken line I pointed out was from our own patch. This has now been fixed by rtp. Thanks.

Re: [Mageia-dev] Mageia 2 security updates: help needed with Java and Tomcat

2012-04-14 Thread David Walser
Can anyone help with these? One of the tomcat6 packages is installed on almost every system as it's required by LibreOffice. David Walser wrote: The only remaining known security issues with Mageia 2 packages concern Java and Tomcat, and some expertise is needed to help close

Re: [Mageia-dev] Freeze push: openjpeg 1.5.0

2012-04-14 Thread David Walser
Funda Wang wrote: Hello, Could somebody push openjpeg 1.5.0 into cauldron? It fixed CVE-2012-1499: The JPEG 2000 codec in OpenJPEG before 1.5 does not properly allocate memory during file parsing, which allows remote attackers to execute arbitrary code via a crafted file. Thanks. Funda,

[Mageia-dev] Freeze push: rsyslog

2012-04-14 Thread David Walser
Just contains 3 bugfixes, 2 for segfaults, and the other for a memory leak. I also fixed a missing BuildRequires in the package. Confirmed it builds, installs, and works locally.

[Mageia-dev] Freeze push: mpg123

2012-04-14 Thread David Walser
The only change is fixes for the ARM architecture (so it won't hurt anything). Confirmed it builds, installs, and works locally.

[Mageia-dev] Freeze push: timezone

2012-04-14 Thread David Walser
We usually try to keep this up to date. Updated in SVN to 2012c.

[Mageia-dev] Freeze push: rsvndump

2012-04-14 Thread David Walser
This package was imported right before the freeze, but some more bugs have been fixed upstream. I'd like to have this up to date just in case we need to use it later (like copying a certain other distro's SVN before it possibly goes away). Confirmed it builds and installs locally.

[Mageia-dev] Freeze push: audacious, audacious-plugins

2012-04-14 Thread David Walser
This one looks like minor bugfixes and translation updates. Confirmed they build, install, and work locally.

[Mageia-dev] Freeze push: dhcpcd

2012-04-14 Thread David Walser
Several bugs were fixed upstream. Confirmed it builds, installs, and works locally.

[Mageia-dev] New artwork glitches

2012-04-14 Thread David Walser
I love the new artwork, but I noticed a few minor issues. Not sure what to assign it to on Bugzilla, so I'll mention them here. The image during boot/shutdown has a cauldron in the middle, but it's squeezed horizontally, it's not wide enough. Its aspect ratio is off. When you start Mageia

  1   2   3   4   5   >