date:20031104

RE: Setup and downloading software...

2003-11-04 Thread Benjamen R. Meyer

Thanks all for the helpful tips.

I've also been coming across another issue. I haven't really researched it
as to if it's already in the queue - so please forgive me if it has already
been addressed, and just ignore this - I didn't remember seeing it
documented when I was researching the other issue.

As I am downloading, the setup program simply stops downloading at the end
of large files. For example, with the gcc-java-3.3.1-3.tar.bz2 file, it got
all the way to end and stopped with 1kb left, and then just stopped. I've
also had it go all the way and do the same thing on other files.  If I hit
the 'cancel' button, and restart the download, then it picks up where it
left off, gets any extra stuff and continues on.

I am doing a download only, and for simplicity (so I don't have to keep
refilling out all the info), am telling it to download everything.  If my
memory serves me correctly, I was also getting this when I was specifying a
subset.

I don't know if this is a specific case that comes out due to a slow
connection, or what. Most packages seem to go fine, it's just the larger
ones that are an issue. I don't think I've seen it happen for things on
order of only a couple meg and smaller; thus the idea of the slow connection
causing it with the really long download time, but that doesn't really make
sense as to why it would. Any how, just a couple thoughts.

Thanks!

BRM

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Gareth Pearce
 Sent: Monday, November 03, 2003 1:46 AM
 To: 'Benjamen R. Meyer'; [EMAIL PROTECTED]
 Subject: RE: Setup and downloading software...


  I understand this may not be a very high priority as many people are
  probably using Broadband now, but I know I would appreciate it, and I
  imagine many others would too.  I know this wouldn't really be
 much of an
  issue except that I've noticed in my downloads that I average
 between 1.7
  and 2.6 kb/s on my 56k modem, which is about 1/3 of the rate I could
  theoretically get. (Most of my downloads for other sites are
 around 4 to 6
  kb/sec.) I figure this is because the sites are so busy, and I
 figure that
  striping the downloads could help to speed some people up to help
  alliviate
  the sites of those users.

 Just think for a second and realise that if this was the case, then the
 broadband people would be noticing it a lot more.  Striping is much more
 likely to help broadband users then it is modem users.  That said, some
 mirrors do get overloaded - but 2k/sec would be unusual I suspect.  Btw -
 all of the downloads from setup are precompressed - so ensure
 your comparing
 apples with apples when comparing download speeds.  Modems use inbuilt
 compression - so non-compressed files will download faster.
 3k-sec is (once
 you consider overheads) not to far off 30kbit - most 56k modems actually
 rarely see connections over 42k (to my knowledge anyway)  - so
 your actually
 more like half rather then 1/3rd. - 'back home' on my 56k modem - 2.6k/sec
 on a compressed file would be considered fast.  But then 'back home' has
 poor phone lines. - I'm lucky enough to have adsl where I'm living at the
 moment - and the mirrors I use for setup - are easily fast enough
 to handle
 a modem user.

 Gareth

RE: Please upload new version of curl (7.10.8-1)

2003-11-04 Thread Roth, Kevin P.

Can I just promise to do so for the next update? This package *usually* has a new 
release every couple of months, so it won't be too much longer...

- Kevin



-Original Message-
From: Daniel Reed [mailto:[EMAIL PROTECTED]
Sent: Monday, November 03, 2003 9:35 PM
To: [EMAIL PROTECTED]
Subject: Re: Please upload new version of curl (7.10.8-1)

This package has man and doc in /usr still, rather than /usr/share. If at
all possible, can you re-package it with usr/man moved to usr/share/man and
usr/doc moved to usr/share/doc?

Please update links, mod_php4, mod_ssl, wget (was: [mark@openssl.org: [OpenSSL Advisory] Denial of Service in ASN.1 parsing])

2003-11-04 Thread Corinna Vinschen

May I again ask the package maintainers of packages, which still
use openssl-0.9.6, to update their packages to use openssl-0.9.7?
These packages are

- links Sami Tikka
- mod_php4  Stipe Tolj
- mod_ssStipe Tolj
- wget  Hack Kampbjorn

Corinna

- Forwarded message from Mark J Cox [EMAIL PROTECTED] -

 Date: Tue, 4 Nov 2003 12:11:43 + (GMT)
 From: Mark J Cox [EMAIL PROTECTED]
 Subject: [OpenSSL Advisory] Denial of Service in ASN.1 parsing
 To: [EMAIL PROTECTED], [EMAIL PROTECTED],
   [EMAIL PROTECTED], [EMAIL PROTECTED],
   [EMAIL PROTECTED], [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 
 -BEGIN PGP SIGNED MESSAGE-
 
 OpenSSL Security Advisory [4 November 2003]
 
 Denial of Service in ASN.1 parsing
 ==
 
 Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to
 address various ASN.1 issues.  The issues were found using a test
 suite from NISCC (www.niscc.gov.uk) and fixed by Dr Stephen Henson
 ([EMAIL PROTECTED]) of the OpenSSL core team.
 
 Subsequent to that release, Novell Inc. carried out further testing
 using the NISCC suite.  They discovered that there was a denial of
 service vulnerability in OpenSSL version 0.9.6k when running on a
 Windows platform.
 
 A bug in OpenSSL 0.9.6 would cause certain ASN.1 sequences to trigger
 a large recursion.  On platforms such as Windows this large recursion
 cannot be handled correctly and so the bug causes OpenSSL to crash.  A
 remote attacker could exploit this flaw if they can send arbitrary
 ASN.1 sequences which would cause OpenSSL to crash.  This could be
 performed for example by sending a client certificate to a SSL/TLS
 enabled server which is configured to accept them.
 
 We do not believe this issue could be exploited further than a Denial
 of Service attack.  
 
 Patches for this issue have been created by Dr Stephen Henson
 ([EMAIL PROTECTED]) of the OpenSSL core team.
 
 Who is affected?
 - 
 
 OpenSSL 0.9.6k is affected by the bug, but the denial of service does
 not affect all platforms.  This issue does not affect OpenSSL 0.9.7.
 Currently only OpenSSL running on Windows platforms is known to crash.
 
 Recommendations
 - ---
 
 Upgrade to OpenSSL 0.9.6l or 0.9.7c.  Recompile any OpenSSL
 applications statically linked to OpenSSL libraries.
 
 OpenSSL 0.9.6l is available for download via HTTP and FTP from the
 following master locations (you can find the various FTP mirrors under
 http://www.openssl.org/source/mirror.html):
 
 o http://www.openssl.org/source/
 o ftp://ftp.openssl.org/source/
 
 The distribution file name is:
 
 o openssl-0.9.6l.tar.gz [normal]
   MD5 checksum: 843a65ddc56634f0e30a4f9474bb5b27
 o openssl-engine-0.9.6l.tar.gz [engine]
   MD5 checksum: dd372198cdf31667f2cb29cd76fbda1c
 
 The checksums were calculated using the following command:
 
 openssl md5  openssl-0.9.6l.tar.gz
 openssl md5  openssl-engine-0.9.6l.tar.gz
 
 References
 - --
 
 The Common Vulnerabilities and Exposures project (cve.mitre.org) has
 assigned the name CAN-2003-0851 to this issue.
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0851
 
 URL for this Security Advisory:
 http://www.openssl.org/news/secadv_20031104.txt
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.1 (GNU/Linux)
 
 iQCVAwUBP6eVw+6tTP1JpWPZAQF2pgP8CXV6at09Nloo7Pyv40m/J3Tbuh224WLE
 mQ2IARAqnj+gds8MRzQnKQcWaqdnMXOu6ayAULdDZXmQVQYBMQ61lrJiVjaxonyD
 T8LtSb6Zg2A5ijut7Nsuw7TItOGTfqHPSOMRUwmdcsz2/IpzDPQXcIJt2WU8uHO3
 zDd6ZTOpPxY=
 =jZd3
 -END PGP SIGNATURE-
 
 __
 OpenSSL Project http://www.openssl.org
 Development Mailing List   [EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

- End forwarded message -

-- 
Corinna Vinschen
Cygwin Developer
Red Hat, Inc.

Re: Please update links, mod_php4, mod_ssl, wget (was: [mark@openssl.org: [OpenSSL Advisory] Denial of Service in ASN.1 parsing])

2003-11-04 Thread Corinna Vinschen

On Tue, Nov 04, 2003 at 08:49:45AM -0500, Christopher Faylor wrote:
 On Tue, Nov 04, 2003 at 02:40:20PM +0100, Corinna Vinschen wrote:
 May I again ask the package maintainers of packages, which still
 use openssl-0.9.6, to update their packages to use openssl-0.9.7?
 These packages are
 
 - links  Sami Tikka
 - mod_php4   Stipe Tolj
 - mod_ss Stipe Tolj
 - wget   Hack Kampbjorn
 
 If we don't get a response within a week, then, IMO, maintainership of
 these packages is up for grabs.
 
 Any objections to this?

Not from me.

Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Developermailto:[EMAIL PROTECTED]
Red Hat, Inc.

Re: New package: gv-3.5.8-1

2003-11-04 Thread Christopher Faylor

On Tue, Nov 04, 2003 at 05:24:33PM +0100, Dr. Volker Zell wrote:
The gv-3.5.8-1 package has been added to the Cygwin distribution.

There is no reason to post this announcement to cygwin-apps.  The
announcement lists are adequate.

cgf

Pending Packages List, 2003-11-04

2003-11-04 Thread Daniel Reed

This is the list of pending packages as of Tuesday, November 4, 2003.

** PACKAGE PROPOSERS ** Please verify these fields **
Package: The name and version of the package as it will appear in setup.
Proposal: Files that will be uploaded to sources.redhat.com unmodified.
HOLD-UPS: What you need to finish! What we are waiting for.

Maintainers of existing packages are eligible to vote on ITPs and new package
proposals. Once a package has been proposed, a cygwin-apps subscriber must
review it, and may point out problems or suggest changes. Each package must
receive a good to go (positive review) and must have all problems addressed
before being accepted.

Problems can be addressed either by announcing an updated version or explaining
why the problem is not an issue.

===
Pending Packages List
===

Waiting for review: ploticus sgrep distcc libsmi nfs-server otcl gv tclcl
Waiting for vote[s]: ploticus sgrep libsmi (GAP)
With unresolved problems: tcm ploticus sgrep d distcc gv

Package: tcm 2.20-1
Description: Toolkit for Conceptual Modeling (TCM)
Proposer: Daniel Boesswetter
Proposal: http://sources.redhat.com/ml/cygwin-apps/2003-01/msg00299.html
http://home.in.tum.de/~boesswet/tcm-2.20-1.tar.bz2
http://home.in.tum.de/~boesswet/tcm-2.20-1-src.tar.bz2
http://home.in.tum.de/~boesswet/setup.hint
Good to go: Charles Wilson (cygwin-apps-thread.11851) (once problems are addressed)
Problems: So, here's the question for the list. For the cygwin-specific README in
a X-related package, where should it go? (cygwin-apps-thread.11851)
Status: Attained required 3 votes. Package available. Reviewed.
HOLD-UPS: Unresolved minor problems.

Package: ploticus 2.11-1
Description: Command line driven tool to generates various plots and graphs
Proposer: Jari Aalto
Proposal: http://sources.redhat.com/ml/cygwin-apps/2003-09/msg00165.html
http://tierra.dyndns.org:81/cygwin/ploticus/ploticus-2.11-1.tar.bz2
http://tierra.dyndns.org:81/cygwin/ploticus/ploticus-2.11-1-src.tar.bz2
http://tierra.dyndns.org:81/cygwin/ploticus/setup.hint
Problems: Jari needs to (a) remove /usr/X11R6/lib/libz.a|libz.dll.a (b) recompile
the package. This will ensure that it links against /usr/lib/libz.dll.a and picks up
cygz.dll instead. (cygwin-apps-thread.11583)
More to the point, the build requirements list libzlib, libpng, and
X11. Those packages do NOT exist. What you want is: XFree86-base zlib
libpng12 libpng12-devel (cygwin-apps-thread.11583)
./cygbuild-2.11-1.sh: line 402: [: -eq: unary operator expected
(cygwin-apps-thread.11583)
Status: Package available.
HOLD-UPS: Not enough votes (need 3). Unresolved problems. No good to go review.

Package: sgrep 1.99.1-1
Description: Search indexed text regions like SGML, XML and HTML files
Proposer: Jari Aalto
Proposal: http://sources.redhat.com/ml/cygwin-apps/2003-09/msg00166.html
http://tierra.dyndns.org:81/cygwin/sgrep/sgrep-1.92.1-1.tar.bz2
http://tierra.dyndns.org:81/cygwin/sgrep/sgrep-1.92.1-1-src.tar.bz2
http://tierra.dyndns.org:81/cygwin/sgrep/setup.hint
Problems: ./cygbuild-1.92.1-1.sh: line 408: [: -eq: unary operator expected
(cygwin-apps-thread.11855)
--- sgrep-1.92.1-orig/Makefile 1970-01-01 00:00:00.0 +
(cygwin-apps-thread.11855)
Aye votes: Lapo Luchini (cygwin-apps-thread.11774) [1/3]
Status: Package available.
HOLD-UPS: Not enough votes (need 2 more). Unresolved problems. No good to go
review.

Package: d 1.2.0-1
Description: The Directory Lister
Proposer: Yaakov Selkowitz
Proposal: mailto:[EMAIL PROTECTED]
http://mywebpage.netscape.com/yselkowitz/cygwin/d/d-1.2.0-1.tar.bz2
http://mywebpage.netscape.com/yselkowitz/cygwin/d/d-1.2.0-1-src.tar.bz2
http://mywebpage.netscape.com/yselkowitz/cygwin/d/setup.hint
Good to go: Gerrit P. Haase (cygwin-apps-thread.11476) (once problems are addressed)
Problems: Have we already talked about why this package is better than 'ls'? If it
is just another directory lister with different options then I don't see a need for
it. Also, if it isn't part of any other linux or unix distribution then it doesn't
really fit into the core goal for cygwin. (cygwin-apps-thread.11858)
Status: Attained required 3 votes. Package available. Reviewed.
HOLD-UPS: Unresolved minor problems.

57 matches

Mail list logo