[arch-general] New CVE - https://access.redhat.com/security/cve/CVE-2014-7169

2014-09-25 Thread David C. Rankin
It's like a game of Whack-a-Mole lately... Further reading: https://bugzilla.redhat.com/show_bug.cgi?id=1146319 -- David C. Rankin, J.D.,P.E.

Re: [arch-general] mkinitcpio debugging with systemd

2014-09-25 Thread Martti Kühne
On Wed, Sep 24, 2014 at 1:47 PM, Tobias Hunger tobias.hun...@gmail.com wrote: My C-foo is a bit rusty, so who knows what I actually put into my patched version of systemd-fstab-generator that I have on that initrd;-) I was planning to complain already. Try not to insult people trying to

Re: [arch-general] mkinitcpio debugging with systemd

2014-09-25 Thread Martti Kühne
hi tobias, I wasn't taking you rude. But implying you were using custom packages while we're trying to debug an issue is generally seen as a serious undermining of any help... Such things are to be mentioned beforehand, since the basic assumption is a repo install. cheers! mar77i

Re: [arch-general] New CVE - https://access.redhat.com/security/cve/CVE-2014-7169

2014-09-25 Thread Karol Blazewicz
On Thu, Sep 25, 2014 at 9:26 AM, David C. Rankin drankina...@suddenlinkmail.com wrote: It's like a game of Whack-a-Mole lately... Further reading: https://bugzilla.redhat.com/show_bug.cgi?id=1146319 -- David C. Rankin, J.D.,P.E. Why not send it to arch-security ML?

[arch-general] Gstreamer upgrade broke rhythmbox streams?

2014-09-25 Thread Stephen Martin
I listen to quite a few radio stations through rhythmbox, and all of them now fail to play with an error of Could not determine type of stream. I noticed that gstreamer updated yesterday to 1.4.3. Might that be the issue? Are others experiencing similar problems? signature.asc Description:

[arch-general] archlinux.org down

2014-09-25 Thread Karol Blazewicz
At least for the last 15 minutes (since around 7 PM CEST) some of Arch Linux sites have been down: http://www.archlinux.org/ https://www.archlinux.org/packages/ https://bugs.archlinux.org/ https://www.archlinux.org/download/ The forum and wiki seem unaffected.

Re: [arch-general] archlinux.org down

2014-09-25 Thread Florian Pritz
On 25.09.2014 19:15, Karol Blazewicz wrote: At least for the last 15 minutes (since around 7 PM CEST) some of Arch Linux sites have been down: Unexpected issues during maintenance. We're working on it. That said thanks for reporting issues ;) signature.asc Description: OpenPGP digital

Re: [arch-general] Gstreamer upgrade broke rhythmbox streams?

2014-09-25 Thread phanisvar das
On 09/25/2014 09:22 PM, Stephen Martin wrote: I listen to quite a few radio stations through rhythmbox, and all of them now fail to play with an error of Could not determine type of stream. I noticed that gstreamer updated yesterday to 1.4.3. Might that be the issue? Are others experiencing

[arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread lolilolicon
With the disclosure of the new bash bug (CVE-2014-6271, CVE-2014-7169), it seems timely to bring this up. Dan added dash to core/base around seven years ago [1], intending the eventually link /bin/sh to dash instead of bash. [1]

Re: [arch-general] Gstreamer upgrade broke rhythmbox streams?

2014-09-25 Thread Stephen Martin
On 09/25/2014 09:22 PM, Stephen Martin wrote: I listen to quite a few radio stations through rhythmbox, and all of them now fail to play with an error of Could not determine type of stream. I noticed that gstreamer updated yesterday to 1.4.3. Might that be the issue? Are others

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread Leonid Isaev
On Fri, Sep 26, 2014 at 05:37:57AM +0800, lolilolicon wrote: With the disclosure of the new bash bug (CVE-2014-6271, CVE-2014-7169), it seems timely to bring this up. Dan added dash to core/base around seven years ago [1], intending the eventually link /bin/sh to dash instead of bash. [1]

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread Stephen Martin
On Fri, Sep 26, 2014 at 05:37:57AM +0800, lolilolicon wrote: With the disclosure of the new bash bug (CVE-2014-6271, CVE-2014-7169), it seems timely to bring this up. Dan added dash to core/base around seven years ago [1], intending the eventually link /bin/sh to dash instead of bash.

Re: [arch-general] Gstreamer upgrade broke rhythmbox streams?

2014-09-25 Thread phanisvar das
On 09/26/2014 03:31 AM, Stephen Martin wrote: I don't use ffmpeg-complete (I just use the one from [extra]. I downgraded to gst-plugins-*-1.4.2* and all streams work again. The issue lies in gst-plugins-*-1.4.3* . strange; my streams still work with gst-plugins 1.4.3* something different in

Re: [arch-general] Gstreamer upgrade broke rhythmbox streams?

2014-09-25 Thread Stephen Martin
On 09/26/2014 03:31 AM, Stephen Martin wrote: I don't use ffmpeg-complete (I just use the one from [extra]. I downgraded to gst-plugins-*-1.4.2* and all streams work again. The issue lies in gst-plugins-*-1.4.3* . strange; my streams still work with gst-plugins 1.4.3* something

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread lolilolicon
On Fri, Sep 26, 2014 at 6:06 AM, Leonid Isaev lis...@umail.iu.edu wrote: Is there anything preventing us from making the switch from bash to dash as /bin/sh now? We can then have dash provide sh instead. Yes -- due to the same reasons. Care to elaborate? Is there a wiki page tracking

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread lolilolicon
On Fri, Sep 26, 2014 at 6:06 AM, Leonid Isaev lis...@umail.iu.edu wrote: Has anyone proven a theorem saying that no such bugs exist in dash (zsh, ksh, etc.)? Oh, such bugs really only exist in bash. I believe no other shell processes an env var with a magic token into a function definition.

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread lolilolicon
On Fri, Sep 26, 2014 at 6:54 AM, Ralf Mardorf ralf.mard...@rocketmail.com wrote: On Fri, 2014-09-26 at 06:24 +0800, lolilolicon wrote: Anything that has the #!/bin/sh line should be written in pure sh. If you want bash, ask for bash. I absolutely agree with your statement and that is why I

[arch-general] multiarch support like debian, pro and cons?

2014-09-25 Thread Ranomier
I wrote my idea first on the irc, but i think here is a better place. The idea is to give up multiarch repo and make pacman and archlinux capable for real multiarch support That means u could install a 32bit package from the normal repos core, extra, community usw and not from multilib repo

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-25 Thread Ralf Mardorf
On Fri, 2014-09-26 at 07:04 +0800, lolilolicon wrote: /bin/sh has to exist. The question is what should really be? My answer is whatever is closest to what pure sh is supposed to be, thus dash (definitely not bash). +1 *buntu a long time ago switched to dash, Arch should do this too.