[ANNOUNCEMENT] putty 0.69-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* putty-0.69-1

PuTTY is a free implementation of Telnet and SSH for Windows and Unix 
platforms, along with an xterm terminal emulator.

This is an update to the latest upstream release.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

putty 0.69-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* putty-0.69-1

PuTTY is a free implementation of Telnet and SSH for Windows and Unix 
platforms, along with an xterm terminal emulator.

This is an update to the latest upstream release.

--
Yaakov

Please update fontspec

[Леон Майер]

Dear texlive maintainers, might I ask you to update fontspec to v2.6 or newer. 
Reason: a nasty bug, see 
https://tex.stackexchange.com/questions/367559/emph-in-theorem-with-unicode-math-and-amsthm
Thanks in advance!
Leon

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: How to debug XWin starting only sometimes? (Typo removed)

[Леон Майер]

> The bad news is that neither .xsession-errors nor a log in /var/log/xwin/ are 
> produced in /var/log/xwin on an *unsuccessful* attempt.
The bad news is that neither .xsession-errors in the home directory nor a log 
in /var/log/xwin/ are produced on an *unsuccessful* attempt.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: How to debug XWin starting only sometimes?

[Леон Майер]

>  > In /var/log/xwin/XWin.0.log.old we see
>  >
>  > [ 775,375] winMultiWindowXMsgProc - Fatal error 1 on xcb connection
>
> I'm guessing that perhaps this was from an unsuccessful previous run?
> In which case I would be interested to see the whole log.
I checked. The bad news is that neither .xsession-errors nor a log in 
/var/log/xwin/ are produced in /var/log/xwin on an *unsuccessful* attempt.

The *successful* attempt afterwards results in .xsession-errors containing

[
** Message: couldn't connect to dbus session bus: Verbindung ist geschlossen
** Message: couldn't connect to dbus session bus: Verbindung ist geschlossen
** Message: couldn't connect to dbus session bus: Verbindung ist geschlossen
Socket /tmp/fam-admin/fam- has wrong permissions
Failed to connect to socket /tmp/fam-admin/fam-
executing 'uxterm', pid 1512
]

and /var/log/xwin/XWin.0.log containing

[
[  9196.250] (II) AIGLX: enabled GLX_MESA_copy_sub_buffer
[  9196.250] (II) 503 pixel formats reported by wglGetPixelFormatAttribivARB
[  9196.250] pixelFormat 36: has 1 overlay, 0 underlays which aren't currently 
handledgetAttrValue failed to find attr 0x2039, using default value 0
[  9196.250] getAttrValue failed to find attr 0x203b, using default value 0
[  9196.250] pixelFormat 37: has 1 overlay, 0 underlays which aren't currently 
handledgetAttrValue failed to find attr 0x2039, using default value 0
[  9196.250] getAttrValue failed to find attr 0x203b, using default value 0
...
...(lots of similar lines differing only in one number)...
...
[  9196.250] pixelFormat 71: has 1 overlay, 0 underlays which aren't currently 
handledgetAttrValue failed to find attr 0x2039, using default value 0
[  9196.250] getAttrValue failed to find attr 0x203b, using default value 0
[  9196.250] (II) 468 fbConfigs
[  9196.250] (II) ignored pixel formats: 0 not OpenGL, 0 unknown pixel type, 35 
unaccelerated
[  9196.250] (II) GLX: Initialized Win32 native WGL GL provider for screen 0
[  9196.578] winPointerWarpCursor - Discarding first warp: 960 540
[  9196.578] (--) 2 mouse buttons found
[  9196.578] (--) Setting autorepeat to delay=500, rate=31
[  9196.578] (--) Windows keyboard layout: "0407" (0407) "German", type 
7
[  9196.578] (--) Found matching XKB configuration "German (Germany)"
[  9196.578] (--) Model = "pc105" Layout = "de" Variant = "none" Options = 
"none"
[  9196.578] Rules = "base" Model = "pc105" Layout = "de" Variant = "none" 
Options = "none"
[  9196.671] winInitMultiWindowWM - DISPLAY=:0.0
[  9196.671] winMultiWindowXMsgProc - DISPLAY=:0.0
[  9196.703] winInitMultiWindowWM - xcb_connect () returned and successfully 
opened the display.
[  9196.703] winProcEstablishConnection - winInitClipboard returned.
[  9196.703] winClipboardThreadProc - DISPLAY=:0.0
[  9196,703] winMultiWindowXMsgProc - xcb_connect() returned and successfully 
opened the display.
[  9196,703] OS maintains clipboard viewer chain: yes
[  9196,718] Using Composite redirection
[  9196,718] winClipboardProc - XOpenDisplay () returned and successfully 
opened the display.
[  9255,375] SetupSysMenu: GetSystemMenu() failed for HWND 0xb080c
]

Any ideas of how to debug next?

Thanks in advance.
Leon

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: Missing announcements for screen?

[Erik Soderquist]

On Wed, May 3, 2017 at 11:45 AM, Nellis, Kenneth (Conduent) wrote:
> FWIW, I also care about announcements. It's how I monitor whether or not I
> should update. I hope they continue.


Same here

-- Erik

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: [SECURITY] gnutls

[Yaakov Selkowitz]

On 2017-03-24 14:00, Yaakov Selkowitz wrote:

On 2017-03-10 16:01, Yaakov Selkowitz wrote:

On 2017-02-22 12:46, Yaakov Selkowitz wrote:

On 2016-09-26 14:13, Yaakov Selkowitz wrote:

On 2016-09-26 02:00, Yaakov Selkowitz wrote:

Dr. Volker,

Two security issues have been reported in GnuTLS:

https://www.gnutls.org/security.html#GNUTLS-SA-2016-2
https://www.gnutls.org/security.html#GNUTLS-SA-2016-3

At this point, I think the best way to proceed would be to:

1) release 3.3.24 with the patch for the latter, then;
2) update to 3.4.15, which involves an ABI break.


nettle is also overdue for an update (it's also blocking an update to
filezilla); getting that in after 3.3.24 and prior to 3.4 would be
best.


Ping?  More vulnerabilities have been announced, so we need to revise
the above to 3.3.26 and 3.5.9.


Ping 2?


Ping 3?


I have uploaded the latest versions of nettle and gnutls to fix these 
issues.


--
Yaakov

Re: [SECURITY] libidn - locale specific error in test suite

[Yaakov Selkowitz]

On 2017-03-24 14:00, Yaakov Selkowitz wrote:

On 2017-03-10 16:01, Yaakov Selkowitz wrote:

On 2017-02-22 12:58, Yaakov Selkowitz wrote:

On 2017-01-19 14:42, Yaakov Selkowitz wrote:

On 2017-01-03 04:53, Dr. Volker Zell wrote:

Just tried packaging libidn-1.33 and found a locale specific error in
the test suite (Which was working fine with my latest build). When
running under strace I get:


Dr. Volker,

Since the bug discovered by this test is unrelated to libidn itself,
there should be no need to hold back the libidn release therefor.


Ping?


Ping 2?


Ping 3?


I have uploaded the latest version of libidn to fix these issues.

--
Yaakov

file 5.30-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* file-5.30-1
* file-devel-5.30-1
* python2-magic-5.30-1
* python3-magic-5.30-1

With file you can obtain information on the file type of a specified file. 
File type recognition is controlled by the file /usr/share/file/magic which 
contains the classification criteria.

This is an update to the latest upstream release.  The Python 3 bindings 
have been built for 3.6.

--
Yaakov

[ANNOUNCEMENT] file 5.30-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* file-5.30-1
* file-devel-5.30-1
* python2-magic-5.30-1
* python3-magic-5.30-1

With file you can obtain information on the file type of a specified file. 
File type recognition is controlled by the file /usr/share/file/magic which 
contains the classification criteria.

This is an update to the latest upstream release.  The Python 3 bindings 
have been built for 3.6.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Various packages rebuilt for dependencies

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* aria2-1.31.0-1
* empathy-3.12.13-1
* freetds-1.00.37-1
* glib2.0-networking-2.50.0-2
* gobby0.5-0.5.0-2
* gsasl-1.8.0-4
* gstreamer1.0-plugins-bad-free-1.10.4-2
* gtk-vnc-0.7.0-2
* gwenhywfar-4.15.3-2
* htmldoc-1.8.28-3
* krdc-16.08.3-2
* krfb-16.08.3-2
* libgadu-1.12.2-1
* libinfinity0.6-0.6.8-1
* loudmouth-1.5.3-1
* net6-1.3.14-2
* remmina-1.2.0-0.3.rcgit.18
* telepathy-gabble-0.18.4-1
* tigervnc-1.7.1-3
* vino-3.22.0-2
* vte2.91-0.46.1-2
* x11vnc-0.9.14-2
* xfce4-mailwatch-plugin-1.2.0-4
* xmlsec1-1.2.24-1
* yaz-5.21.0-1
* mingw64-i686-freetds-1.00.37-1
* mingw64-i686-glib2.0-networking-2.50.0-2
* mingw64-i686-gstreamer1.0-plugins-bad-free-1.10.4-2
* mingw64-i686-gtk-vnc-0.7.0-2
* mingw64-x86_64-freetds-1.00.37-1
* mingw64-x86_64-glib2.0-networking-2.50.0-2
* mingw64-x86_64-gstreamer1.0-plugins-bad-free-1.10.4-2
* mingw64-x86_64-gtk-vnc-0.7.0-2

These packages were rebuilt or updated for nettle-3.3, gnutls-3.5, 
and/or libvncserver-0.9.11.


--
Yaakov

[ANNOUNCEMENT] Various packages rebuilt for dependencies

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* aria2-1.31.0-1
* empathy-3.12.13-1
* freetds-1.00.37-1
* glib2.0-networking-2.50.0-2
* gobby0.5-0.5.0-2
* gsasl-1.8.0-4
* gstreamer1.0-plugins-bad-free-1.10.4-2
* gtk-vnc-0.7.0-2
* gwenhywfar-4.15.3-2
* htmldoc-1.8.28-3
* krdc-16.08.3-2
* krfb-16.08.3-2
* libgadu-1.12.2-1
* libinfinity0.6-0.6.8-1
* loudmouth-1.5.3-1
* net6-1.3.14-2
* remmina-1.2.0-0.3.rcgit.18
* telepathy-gabble-0.18.4-1
* tigervnc-1.7.1-3
* vino-3.22.0-2
* vte2.91-0.46.1-2
* x11vnc-0.9.14-2
* xfce4-mailwatch-plugin-1.2.0-4
* xmlsec1-1.2.24-1
* yaz-5.21.0-1
* mingw64-i686-freetds-1.00.37-1
* mingw64-i686-glib2.0-networking-2.50.0-2
* mingw64-i686-gstreamer1.0-plugins-bad-free-1.10.4-2
* mingw64-i686-gtk-vnc-0.7.0-2
* mingw64-x86_64-freetds-1.00.37-1
* mingw64-x86_64-glib2.0-networking-2.50.0-2
* mingw64-x86_64-gstreamer1.0-plugins-bad-free-1.10.4-2
* mingw64-x86_64-gtk-vnc-0.7.0-2

These packages were rebuilt or updated for nettle-3.3, gnutls-3.5, 
and/or libvncserver-0.9.11.


--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

[ANNOUNCEMENT] libvncserver 0.9.11-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libvncserver1-0.9.11-1
* libvncserver-devel-0.9.11-1

LibVNCServer/LibVNCClient are cross-platform C libraries that allow you to 
easily implement VNC server or client functionality in your program.

This is an update to the latest upstream release, which contains an ABI break.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

libvncserver 0.9.11-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libvncserver1-0.9.11-1
* libvncserver-devel-0.9.11-1

LibVNCServer/LibVNCClient are cross-platform C libraries that allow you to 
easily implement VNC server or client functionality in your program.

This is an update to the latest upstream release, which contains an ABI break.

--
Yaakov

[ANNOUNCEMENT] libvirt 3.2.0-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libvirt0-3.2.0-1
* libvirt-common-3.2.0-1
* libvirt-devel-3.2.0-1
* libvirt-doc-3.2.0-1
* libvirt-client-3.2.0-1
* python2-libvirt-3.2.0-1
* python3-libvirt-3.2.0-1

Libvirt is collection of software that provides a convenient way to manage 
virtual machines and other virtualization functionality, such as storage 
and network interface management. These software pieces include an API 
library and a command line utility (virsh).

This is an update to the latest upstream stable release, built with gnutls-3.5.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

libvirt 3.2.0-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libvirt0-3.2.0-1
* libvirt-common-3.2.0-1
* libvirt-devel-3.2.0-1
* libvirt-doc-3.2.0-1
* libvirt-client-3.2.0-1
* python2-libvirt-3.2.0-1
* python3-libvirt-3.2.0-1

Libvirt is collection of software that provides a convenient way to manage 
virtual machines and other virtualization functionality, such as storage 
and network interface management. These software pieces include an API 
library and a command line utility (virsh).

This is an update to the latest upstream stable release, built with gnutls-3.5.

--
Yaakov

[ANNOUNCEMENT] libidn 1.33-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libidn-1.33-1
* libidn11-1.33-1
* libidn-devel-1.33-1
* libidn-doc-1.33-1
* mingw64-i686-libidn-1.33-1
* mingw64-x86_64-libidn-1.33-1

An implementation of the Stringprep, Punycode and IDNA specifications 
defined by the IETF Internationalized Domain Names (IDN) working group.

This is an update to the latest upstream release, which includes several 
security fixes.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

libidn 1.33-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libidn-1.33-1
* libidn11-1.33-1
* libidn-devel-1.33-1
* libidn-doc-1.33-1
* mingw64-i686-libidn-1.33-1
* mingw64-x86_64-libidn-1.33-1

An implementation of the Stringprep, Punycode and IDNA specifications 
defined by the IETF Internationalized Domain Names (IDN) working group.

This is an update to the latest upstream release, which includes several 
security fixes.

--
Yaakov

[ANNOUNCEMENT] filezilla 3.25.2-1, libfilezilla 0.9.1-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* filezilla-3.25.2-1
* libfilezilla0-0.9.1-1
* libfilezilla-devel-0.9.1-1

FileZilla Client is a fast and reliable cross-platform FTP, FTPS and SFTP 
client with lots of useful features and an intuitive interface.

This is an update to the latest upstream release.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

filezilla 3.25.2-1, libfilezilla 0.9.1-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* filezilla-3.25.2-1
* libfilezilla0-0.9.1-1
* libfilezilla-devel-0.9.1-1

FileZilla Client is a fast and reliable cross-platform FTP, FTPS and SFTP 
client with lots of useful features and an intuitive interface.

This is an update to the latest upstream release.

--
Yaakov

[ANNOUNCEMENT] libarchive 3.2.2-2

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libarchive13-3.2.2-2
* libarchive-devel-3.2.2-2
* bsdtar-3.2.2-2
* bsdcpio-3.2.2-2
* bsdcat-3.2.2-2
* mingw64-i686-libarchive-3.2.2-2
* mingw64-x86_64-libarchive-3.2.2-2

Libarchive is a programming library that can create and read several 
different streaming archive formats, including most popular tar variants, 
several cpio formats, and both BSD and GNU ar variants. It can also write 
shar archives and read ISO9660 CDROM images and ZIP archives. The bsdtar 
program is an implementation of tar(1) that is built on top of libarchive. 
It started as a test harness, but has grown into a feature-competitive 
replacement for GNU tar.

This release includes fixes for CVE-2016-10209 and CVE-2017-5601, and was 
built with nettle-3.3.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

[ANNOUNCEMENT] unbound 1.6.2-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* unbound-1.6.2-1
* libunbound2-1.6.2-1
* libunbound-common-1.6.2-1
* libunbound-devel-1.6.2-1
* python2-unbound-1.6.2-1
* python3-unbound-1.6.2-1
* mingw64-i686-unbound-1.6.2-1
* mingw64-x86_64-unbound-1.6.2-1

Unbound is a validating, recursive, and caching DNS resolver. Unbound is 
designed as a set of modular components, so that also DNSSEC validation and 
stub-resolvers (that do not run as a server, but are linked into an 
application) are easily possible.

This is an initial release for Cygwin.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

libarchive 3.2.2-2

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libarchive13-3.2.2-2
* libarchive-devel-3.2.2-2
* bsdtar-3.2.2-2
* bsdcpio-3.2.2-2
* bsdcat-3.2.2-2
* mingw64-i686-libarchive-3.2.2-2
* mingw64-x86_64-libarchive-3.2.2-2

Libarchive is a programming library that can create and read several 
different streaming archive formats, including most popular tar variants, 
several cpio formats, and both BSD and GNU ar variants. It can also write 
shar archives and read ISO9660 CDROM images and ZIP archives. The bsdtar 
program is an implementation of tar(1) that is built on top of libarchive. 
It started as a test harness, but has grown into a feature-competitive 
replacement for GNU tar.

This release includes fixes for CVE-2016-10209 and CVE-2017-5601, and was 
built with nettle-3.3.

--
Yaakov

unbound 1.6.2-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* unbound-1.6.2-1
* libunbound2-1.6.2-1
* libunbound-common-1.6.2-1
* libunbound-devel-1.6.2-1
* python2-unbound-1.6.2-1
* python3-unbound-1.6.2-1
* mingw64-i686-unbound-1.6.2-1
* mingw64-x86_64-unbound-1.6.2-1

Unbound is a validating, recursive, and caching DNS resolver. Unbound is 
designed as a set of modular components, so that also DNSSEC validation and 
stub-resolvers (that do not run as a server, but are linked into an 
application) are easily possible.

This is an initial release for Cygwin.

--
Yaakov

[ANNOUNCEMENT] libtasn1 4.10-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libtasn1_6-4.10-1
* libtasn1-devel-4.10-1
* libtasn1-doc-4.10-1
* mingw64-i686-libtasn1-4.10-1
* mingw64-x86_64-libtasn1-4.10-1

A library for Abstract Syntax Notation One (ASN.1) and Distinguish Encoding 
Rules (DER) manipulation.

This is an update to the latest upstream release.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

libtasn1 4.10-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* libtasn1_6-4.10-1
* libtasn1-devel-4.10-1
* libtasn1-doc-4.10-1
* mingw64-i686-libtasn1-4.10-1
* mingw64-x86_64-libtasn1-4.10-1

A library for Abstract Syntax Notation One (ASN.1) and Distinguish Encoding 
Rules (DER) manipulation.

This is an update to the latest upstream release.

--
Yaakov

[ANNOUNCEMENT] gnutls 3.5.11-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* gnutls-3.5.11-1
* libgnutls28-3.3.27-1
* libgnutls30-3.5.11-1
* libgnutls-dane0-3.5.11-1
* libgnutlsxx28-3.5.11-1
* libgnutls-devel-3.5.11-1
* libgnutls-doc-3.5.11-1
* guile-gnutls-3.5.11-1
* mingw64-i686-gnutls-3.5.11-1
* mingw64-x86_64-gnutls-3.5.11-1

GnuTLS is a secure communications library implementing the SSL, TLS and 
DTLS protocols and technologies around them. It provides a simple C 
language application programming interface (API) to access the secure 
communications protocols as well as APIs to parse and write X.509, PKCS#12, 
OpenPGP and other required structures.

This is an update to the latest upstream release, which includes fixes for 
CVE-2016-7444, CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, and CVE-2017-5337:

https://gnutls.org/security.html

This release also includes several packaging changes:

* ABI/API break in the main library, now packaged as libgnutls30;

* the C++ bindings, which did not break ABI/API, are in a separate package;

* DANE library added as a separate package;

* the Guile bindings are built for Guile 2.0;

* depends on the new nettle-3.3.

An update to the latest 3.3 maintenance release of libgnutls28 -- without 
the C++ bindings -- has also been made available for packages which have 
yet to be rebuilt.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

gnutls 3.5.11-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* gnutls-3.5.11-1
* libgnutls28-3.3.27-1
* libgnutls30-3.5.11-1
* libgnutls-dane0-3.5.11-1
* libgnutlsxx28-3.5.11-1
* libgnutls-devel-3.5.11-1
* libgnutls-doc-3.5.11-1
* guile-gnutls-3.5.11-1
* mingw64-i686-gnutls-3.5.11-1
* mingw64-x86_64-gnutls-3.5.11-1

GnuTLS is a secure communications library implementing the SSL, TLS and 
DTLS protocols and technologies around them. It provides a simple C 
language application programming interface (API) to access the secure 
communications protocols as well as APIs to parse and write X.509, PKCS#12, 
OpenPGP and other required structures.

This is an update to the latest upstream release, which includes fixes for 
CVE-2016-7444, CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, and CVE-2017-5337:

https://gnutls.org/security.html

This release also includes several packaging changes:

* ABI/API break in the main library, now packaged as libgnutls30;

* the C++ bindings, which did not break ABI/API, are in a separate package;

* DANE library added as a separate package;

* the Guile bindings are built for Guile 2.0;

* depends on the new nettle-3.3.

An update to the latest 3.3 maintenance release of libgnutls28 -- without 
the C++ bindings -- has also been made available for packages which have 
yet to be rebuilt.

--
Yaakov

[ANNOUNCEMENT] nettle 3.3-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* nettle-3.3-1
* libnettle6-3.3-1
* libhogweed4-3.3-1
* libnettle-devel-3.3-1
* mingw64-i686-nettle-3.3-1
* mingw64-x86_64-nettle-3.3-1

Nettle is a cryptographic library that is designed to fit easily in more or 
less any context: In crypto toolkits for object-oriented languages, in 
applications like LSH or GNUPG, or even in kernel space.

This is an update to the latest upstream release, which contains an ABI 
version bump for both libraries.

--
Yaakov

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

nettle 3.3-1

[Yaakov Selkowitz]

The following packages have been uploaded to the Cygwin distribution:

* nettle-3.3-1
* libnettle6-3.3-1
* libhogweed4-3.3-1
* libnettle-devel-3.3-1
* mingw64-i686-nettle-3.3-1
* mingw64-x86_64-nettle-3.3-1

Nettle is a cryptographic library that is designed to fit easily in more or 
less any context: In crypto toolkits for object-oriented languages, in 
applications like LSH or GNUPG, or even in kernel space.

This is an update to the latest upstream release, which contains an ABI 
version bump for both libraries.

--
Yaakov

Re: Neko package

[Andy Li]

> Looks ok to me.  I added neko to your package list.

Thanks! I will upload the package soon!

>> # cygport cannot auto detect these, since the ndll files are not
>> # named with .dll.
>
>
> If these really are just .dll by another name, you might want to explore
> patching cygport to teach it that (it already has to deal with some other
> non-standard extensions for DLLS)
>

Good idea! I will look into it.

Best regards,
Andy

Re: [ANNOUNCEMENT] Updated: sqlite3-3.16.2-1 for Cygwin/Cygwin64

[Andrey Repin]

Greetings, Nellis, Kenneth (Conduent)!

> From: Jan Nijtmans [mailto:jan.nijtm...@gmail.com]
>> ...
>> B.T.W: You can leave "sqlite3" at 3.16.2 and still upgrade all other
>> related packages (such as libsqlite3_0) to 3.18. Then you will
>> have all new features, and still run the old shell (which is just a thin
>> wrapper around libsqlite3_0 and - actually - didn't change at all in
>> version 3.18)

> I just installed sqlite3 3.16.2 ...

> $ cygcheck -c sqlite3
> Cygwin Package Information
> Package  VersionStatus
> sqlite3  3.16.2-1   OK
> $

> But then:

> $ sqlite3 --version
> 3.18.0 2017-03-28 18:48:43
> 424a0d380332858ee55bdebc4af3789f74e70a2b3ba1cf29d84b9b4bcf3e2e37
> $

> Just wondering if this is expected or something is amiss with version 
> numbering.

As I understand it, it's predictable. "sqlite3" is a terminal client to
sqlite3 library. SQLite API is intentionally very stable, and the version
you're seeing is in fact library version.


-- 
With best regards,
Andrey Repin
Wednesday, May 3, 2017 20:02:33

Sorry for my terrible english...


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: [PATCH setup 11/11] Use wininet for fetching URLs in direct (non-proxy) case (DO NOT APPLY)

[Jon Turney]

On 02/05/2017 20:29, Åke Rehnman wrote:

One thought though, why not let wininet take care of file:// URL's as
well? Or actually don't try to parse the url string at all and just pass
it down to NETIO_IE5 unfiltered? The advantage is setup would be able to


I'd be happy to look at a separate patch to do this.

See proposed incremental patch. Have a look, give me your thoughts.



handle what ever protocols wininet has. Also letting wininet taking care
of file:// url's would let the user install from a local network


I'm pretty sure I've done that in the past, so I think it already
works.  The form of file: URL required might not be strictly correct,
though, (I think file:server/pathname/ ?)

Seem to work with \\server\share_name\path or //server/share_name/path
now anyway


Thanks for the patch. So there are a few separate things here:

* Pass unknown protocols to wininet

This seems a fine idea, but isn't what this patch does.

* Allow wininet to handle file:// URLs

I'm a little bit concerned that there may be current uses which rely on 
the incorrect parsing we do of file:// URLs to work.


Otoh, this should fix the file:// URL format we currently mishandle, so 
is probably worth doing.


* What to do with non-URL (i.e. pathname) addresses?

Perhaps WinInet can handle these, but assuming it does, is there a good 
reason to change from using NetIO_File()?


There are also some associated UI issues, in that we give no clue that a 
pathname is acceptable as a download site, and pathnames and file:// 
URLs are presented terribly in the download site list.

Re: [PATCH setup 11/11] Use wininet for fetching URLs in direct (non-proxy) case (DO NOT APPLY)

[Jon Turney]

On 03/05/2017 08:22, Brian Inglis wrote:

On 2017-05-02 05:05, Jon Turney wrote:

On 02/05/2017 08:28, Åke Rehnman wrote:

On 2017-05-01 22:45, Jon Turney wrote:

I'm pretty sure I've done that in the past, so I think it already
works. The form of file: URL required might not be strictly correct,
though, (I think file:server/pathname/ ?)
I can't see how to get a file:// URL for a local directory to parse
correctly, though.


URLs are like http://host/path - file://host/path; if no host is given,
localhost is assumed in http:///path and file:///path

file:/// is the local root but some browsers accept just / e.g. lynx
on Cygwin and Linux - useful to test this stuff, as GUI browsers look
up URL history for completions.
Most Windows browsers require the drive at the start of the path so
should accept file:///d|/ (HTML originally allowed ":" only after the
proto, and before the password and port in
proto://[[[user][:pswd]@]host[:port]]/path
so d| was required but that was relaxed in IE, and later other browsers
followed), so likely file:///C:/, just C:, maybe C:/, rarely or never /.


Yes.  Unfortunately, none of this works correctly in setup at the moment.

Incorrect URLs of the form 'file:server/pathname/' work in setup, 
but my attempts to construct something setup would use as a file URL for 
a local directory were unsuccessful.

RE: [ANNOUNCEMENT] Updated: sqlite3-3.16.2-1 for Cygwin/Cygwin64

[Nellis, Kenneth (Conduent)]

From: Jan Nijtmans [mailto:jan.nijtm...@gmail.com]
> ...
> B.T.W: You can leave "sqlite3" at 3.16.2 and still upgrade all other
> related packages (such as libsqlite3_0) to 3.18. Then you will
> have all new features, and still run the old shell (which is just a thin
> wrapper around libsqlite3_0 and - actually - didn't change at all in
> version 3.18)

I just installed sqlite3 3.16.2 ...

$ cygcheck -c sqlite3
Cygwin Package Information
Package  VersionStatus
sqlite3  3.16.2-1   OK
$

But then:

$ sqlite3 --version
3.18.0 2017-03-28 18:48:43 
424a0d380332858ee55bdebc4af3789f74e70a2b3ba1cf29d84b9b4bcf3e2e37
$

Just wondering if this is expected or something is amiss with version numbering.

--Ken Nellis

RE: Missing announcements for screen?

[Nellis, Kenneth (Conduent)]

From: Andrew Schulman
> ...
> I confess to forgetting or just skipping announcements sometimes. It's hard 
> for
> me to tell that anyone cares about them, although I see that you do. I will 
> try
> to do better, though I guess if you don't see one from me you can assume 
> nothing
> important changed.

FWIW, I also care about announcements. It's how I monitor whether or not I
should update. I hope they continue.

--Ken Nellis

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

[ANNOUNCEMENT] screen 4.5.1-2

[Andrew Schulman]

screen 4.5.1-2 is now available in Cygwin.

- For x86, this update applies a small patch that should have no effect, but
makes the source code the same as in x86_64. See
https://cygwin.com/ml/cygwin-apps/2017-05/msg00018.html for discussion.

- For x86_64, there's no change. The version number was bumped to keep it the
same as for x86.

screen is a full-screen window manager that multiplexes a physical terminal
between several processes, typically interactive shells. Each virtual terminal
provides the functions of the DEC VT100 terminal and, in addition, several
control functions from the ANSI X3.64 (ISO 6429) and ISO 2022 standards (e.g.,
insert/delete line and support for multiple character sets). There is a
scrollback history buffer for each virtual terminal and a copy-and-paste
mechanism that allows the user to move text regions between windows. When screen
is called, it creates a single window with a shell in it (or the specified
command) and then gets out of your way so that you can use the program as you
normally would. Then, at any time, you can create new (full-screen) windows with
other programs in them (including more shells), kill the current window, view a
list of the active windows, turn output logging on and off, copy text between
windows, view the scrollback history, switch between windows, etc. All windows
run their programs completely independent of each other. Programs continue to
run when their window is currently not visible and even when the whole screen
session is detached from the user's terminal.

Andrew E. Schulman


***


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

  *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com_at_cygwin.com

If you need more information on unsubscribing, start reading here: 

http://cygwin.com/lists.html#subscribe-unsubscribe

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

screen 4.5.1-2

[Andrew Schulman]

screen 4.5.1-2 is now available in Cygwin.

- For x86, this update applies a small patch that should have no effect, but
makes the source code the same as in x86_64. See
https://cygwin.com/ml/cygwin-apps/2017-05/msg00018.html for discussion.

- For x86_64, there's no change. The version number was bumped to keep it the
same as for x86.

screen is a full-screen window manager that multiplexes a physical terminal
between several processes, typically interactive shells. Each virtual terminal
provides the functions of the DEC VT100 terminal and, in addition, several
control functions from the ANSI X3.64 (ISO 6429) and ISO 2022 standards (e.g.,
insert/delete line and support for multiple character sets). There is a
scrollback history buffer for each virtual terminal and a copy-and-paste
mechanism that allows the user to move text regions between windows. When screen
is called, it creates a single window with a shell in it (or the specified
command) and then gets out of your way so that you can use the program as you
normally would. Then, at any time, you can create new (full-screen) windows with
other programs in them (including more shells), kill the current window, view a
list of the active windows, turn output logging on and off, copy text between
windows, view the scrollback history, switch between windows, etc. All windows
run their programs completely independent of each other. Programs continue to
run when their window is currently not visible and even when the whole screen
session is detached from the user's terminal.

Andrew E. Schulman


***


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

  *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com_at_cygwin.com

If you need more information on unsubscribing, start reading here: 

http://cygwin.com/lists.html#subscribe-unsubscribe

Please read *all* of the information on unsubscribing that is available
starting at this URL.

Re: Requesting upload privileges

[Jon Turney]

On 03/05/2017 07:13, Joni Eskelinen wrote:

Name: Joni Eskelinen
Package: cygextreg


Done.

Re: [ITP] extractpdfmark 1.0.2

[Jon Turney]

On 30/04/2017 11:31, Masamichi Hosoda wrote:

Hi, all

Extract PDFmark can extract page mode and named destinations
as PDFmark from PDF.
By using this you can get the small PDF files that have preserved them.


Thanks.

extractpdfmark.cygport:

DEPEND is for declaring build dependencies.  This should include 
libpoppler-devel


runtime dependencies which aren't autodetected should be declared in 
REQUIRES.



ldesc: "Extract PDFmark is able to extract page mode
and named destinations as PDFmark from PDF.
By using this you can get the small PDF files that have preserved them."


The last sentence is a bit unclear to me.  What is the referent of the 
final "them"?.

Re: Neko package

[Jon Turney]

On 30/04/2017 18:51, Andy Li wrote:

Let me know if there is any remaining issue.


Looks ok to me.  I added neko to your package list.


# cygport cannot auto detect these, since the ndll files are not
# named with .dll.


If these really are just .dll by another name, you might want to explore 
patching cygport to teach it that (it already has to deal with some 
other non-standard extensions for DLLS)

Re: noarching source packages

[Ken Brown]

On 5/1/2017 4:05 PM, Ken Brown wrote:

On 5/1/2017 3:57 PM, Achim Gratz wrote:

But the real problem is that besides our own stuff some upstream sources
are archful.


Examples?


Last I looked, it was texlive.


This might go back to the time when biber was distributed as a packed perl 
archive on x86 but not x86_64.


No, it was actually due to the existence of source files of the form

.-cygwin.tar.xz.

But it was fixed a year ago.  See the discussion at

https://sourceware.org/ml/cygwin-apps/2016-05/msg00049.html

and cygport commit 5c559d5ea49d69116d3073b68c8fb1e70522370a.

Ken

Re: Missing announcements for screen?

[Andrew Schulman]

Hi Shaddy.

> So I noticed my recent fresh install of Cygwin has screen 4.5.1-1
> installed. And the most recent release is 4.5.2-1.

4.5.1-2
 
> Previously, I tracked a problem with screen 
> (https://sourceware.org/ml/cygwin/2014-05/msg00331.html)
> and sadly I know how involved it is to track down issues, so I've been
> just checking each new update to see if it resolves the issue described.

I remember when you helped us to fix that, or I thought you had. I'm still using
the patch you provided.

No new patches have been added since then. Just minor upstream releases.

FWIW I use screen in Cygwin x86_64 every day, and I don't see any screen
corruption there, although I do see it in other OSes. Strange. Environment
variables? tty settings?

> In any case, I didn't recall the updates for screen hitting my Inbox.
> Looking at the mailing list, it appears to me that announcements have
> not been forthcoming for screen, and perhaps other packages, for a
> while:
> 
> https://sourceware.org/cgi-bin/search.cgi?cmd=Search!=long=extended=no=all=10=screen=1=1==/ml/cygwin-announce/%25=0020=wrd=DRP
> 
> Can someone confirm that? Is there a list of what's been fixed in each
> release that I can look at ahead of installation?

I confess to forgetting or just skipping announcements sometimes. It's hard for
me to tell that anyone cares about them, although I see that you do. I will try
to do better, though I guess if you don't see one from me you can assume nothing
important changed.

4.5.1-2 was just uploaded yesterday, as Marco said. I usually wait a day or so
(when I do remember) after I upload to send the announcement. Will send shortly.

Andrew


--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: [ANNOUNCEMENT] Updated: sqlite3-3.16.2-1 for Cygwin/Cygwin64

[Jan Nijtmans]

2017-05-01 20:55 GMT+02:00 Nem W Schlecht:
> I don't see an update announcement for SQLite beyond this one, but its
> now at 3.18.0-1 and the readline library was *NOT* compiled into it,
> so there's no decent command line editing.  I backed mine out to
> 3.16.2-1, but whomever is maintaining this, it would be nice if
> readline was included and a new release of 3.18 was made.

Thanks for your report. I'll have a look. It looks like 3.19 will be
there soon as well: 
I'll double-check that libreadline will be compiled-in correctly.

Regards,
Jan Nijtmans

B.T.W: You can leave "sqlite3" at 3.16.2 and still upgrade all other
related packages (such as libsqlite3_0) to 3.18. Then you will
have all new features, and still run the old shell (which is just a thin
wrapper around libsqlite3_0 and - actually - didn't change at all in
version 3.18)

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: [PATCH setup 11/11] Use wininet for fetching URLs in direct (non-proxy) case (DO NOT APPLY)

[Brian Inglis]

On 2017-05-02 05:05, Jon Turney wrote:
> On 02/05/2017 08:28, Åke Rehnman wrote:
>> On 2017-05-01 22:45, Jon Turney wrote:
> I'm pretty sure I've done that in the past, so I think it already 
> works. The form of file: URL required might not be strictly correct, 
> though, (I think file:server/pathname/ ?)
> I can't see how to get a file:// URL for a local directory to parse 
> correctly, though.

URLs are like http://host/path - file://host/path; if no host is given, 
localhost is assumed in http:///path and file:///path

file:/// is the local root but some browsers accept just / e.g. lynx 
on Cygwin and Linux - useful to test this stuff, as GUI browsers look 
up URL history for completions. 
Most Windows browsers require the drive at the start of the path so 
should accept file:///d|/ (HTML originally allowed ":" only after the 
proto, and before the password and port in 
proto://[[[user][:pswd]@]host[:port]]/path
so d| was required but that was relaxed in IE, and later other browsers 
followed), so likely file:///C:/, just C:, maybe C:/, rarely or never /.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

Requesting upload privileges

[Joni Eskelinen]

Name: Joni Eskelinen
Package: cygextreg
 BEGIN SSH2 PUBLIC KEY 
B3NzaC1yc2EDAQABAAABAQC7Oubl8eZs+KRHTl+yVtwiR4VBJfdA22sr6z9kxw
lkW1yq1QtIcLtD8GDcWCdZ4dTLij4ErGz58I/ppwsAfg4cfFDQInFFyS9o2+cNDSJ/sHN2
orni26TtBVx5YBkapIAFpD98IAtztA7NEuZ+Vl28EfZl5Kys/epFdkRlggN7YXictTkGl/
1x8eEAi6CH2aJPZWAu9xwnyhBfwdwNaIix8CZB/q/nwBHdHGt+mkv/N40phjvnh32y1FQr
hb8Ix1wXipHp+4YVUJMCO5lNQrshbm7eD2vdsQot4fKKHYOxx1AbbG1Z+SLr8XgjMaMtyo
/EGgqxXQPneiHogxsySYRr
 END SSH2 PUBLIC KEY 





signature.asc
Description: OpenPGP digital signature

Re: [ITP] cygregext (formerly cygscript)

[Joni Eskelinen]

On 29.4.2017 14.54, Jon Turney wrote:
> On 28/04/2017 21:46, Eric Blake wrote:
>> On 04/28/2017 03:08 AM, Joni Eskelinen wrote:
>>> Hi all,
>>
>>> I've renamed cygscript as proposed. Hopefully cygregext conveys its
>>> purpose more clearly. A man page has also been added.
>>
>> My first read was 'cygwin regular-expressions t'.  Maybe a slight tweak
>> to cygextreg (for cygwin extension registration) keeps the same length
>> but with less confusion with an already well-used abbreviation?
> 
> This makes sense to me, but it's your choice.
> 
Thanks for your input. I've renamed the command to cygextreg, hopefully
for the last time for now :). TBH i wasn't really happy with the ring of
'regex' in cygregext, so this is definitely better.

> Nice work.  I'm kind of surprised we don't have something like this
> already.

>>
>> This application is not included in any other distro, so i reckon
>> a vote
>> must be first passed.
>
> +1
>>
>> At any rate, I'm also +1 for inclusion, whether or not you take my
>> naming suggestion.
> 
> Please provide a ssh key as per https://cygwin.com/package-upload.html
> 
I'll proceed with a request.