[gentoo-dev] Packages up for grabs dev-vcs/monotone

2017-10-07 Thread Jonas Stein
Dear all,

The following packages are up for grabs:

dev-vcs/monotone

-- 
Best,
Jonas











signature.asc
Description: OpenPGP digital signature


Re: [gentoo-dev] RFC: News item: Perl 5.26 update

2017-10-07 Thread Kent Fredric
On Sat, 7 Oct 2017 12:15:14 -0400
"Aaron W. Swenson"  wrote:

> This reads kind of awkwardly. Maybe something along this lines of:
> 
> This release brings several incompatible changes as a result of
> deprecations coming to term [#] and mitigating a potential security
> issue [#].
> 
> I wouldn’t really consider the security risk eliminated, but
> mitigated as the vector of attack remains if program or module adds the
> current working directory to @INC on its own. The interpreter just isn’t
> adding it to @INC.

Its probably more accurate to consider this a form of security theatre
than a real security mitigation.

Just phrasing that succinctly is not easy.

Maybe instead of calling it "a security issue", its "a change in
defaults due to potential security concerns"



pgpvjsgOu1u2j.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] RFC: News item: Perl 5.26 update

2017-10-07 Thread Aaron W. Swenson
On 2017-10-07 17:03, Andreas K. Huettel wrote:
> …
> This release brings several incompatible changes, also as a
> consequence of fixing a security problem [1].

This reads kind of awkwardly. Maybe something along this lines of:

This release brings several incompatible changes as a result of
deprecations coming to term [#] and mitigating a potential security
issue [#].

I wouldn’t really consider the security risk eliminated, but
mitigated as the vector of attack remains if program or module adds the
current working directory to @INC on its own. The interpreter just isn’t
adding it to @INC.

> Typical errors are 
>"Can't locate inc/... in @INC (you may need to install the inc::... 
> module)"
>"error: ... has no member named ‘op_sibling’"
>"Unescaped left brace in regex is illegal in ..."

I would make this look more like a proper list.

Typical errors are:
  * Can't locate inc/... in @INC (you may need to install the
inc::... module)
  * error: ... has no member named ‘op_sibling’
  * Unescaped left brace in regex is illegal in ...


signature.asc
Description: Digital signature


Re: [gentoo-dev] RFC: News item: Perl 5.26 update

2017-10-07 Thread Andreas K. Huettel
Am Samstag, 7. Oktober 2017, 17:21:13 CEST schrieb Kent Fredric:

> > 
> > General purpose advice on updating Perl can be found on page [4]
> 

Sounds good, added.


-- 
Andreas K. Hüttel
dilfri...@gentoo.org
Gentoo Linux developer (council, perl, libreoffice)

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-dev] RFC: News item: Perl 5.26 update

2017-10-07 Thread Kent Fredric
On Sat, 07 Oct 2017 17:03:44 +0200
"Andreas K. Huettel"  wrote:

> See plaintext below and identical attached file.
> 
> 
> ===
> Title: Perl 5.26 update: possible breakage
> Author: Andreas K. Hüttel 
> Posted: xxx
> Revision: 1
> News-Item-Format: 2.0
> Display-If-Installed: >=dev-lang/perl-5.26.0
> 
> You have just upgraded to Perl 5.26. This release brings several 
> incompatible changes, also as a consequence of fixing a security 
> problem [1]. While we have made sure that all resulting build 
> failures within Gentoo are fixed, this may not be the case for
> runtime issues, and certainly can affect third-party code (e.g.,
> "hand-installed" server applications).
> 
> Typical errors are 
>"Can't locate inc/... in @INC (you may need to install the inc::... 
> module)"
>"error: ... has no member named ‘op_sibling’"
>"Unescaped left brace in regex is illegal in ..."
> 
> Please see the pages [2,3] for details and report bugs if you run
> into problems during or after the Perl update.
> 
> [1] https://rt.perl.org/Ticket/Display.html?id=127834
> https://bugs.gentoo.org/show_bug.cgi?id=589680
> [2] https://wiki.gentoo.org/wiki/Project:Perl/Dot-In-INC-Removal
> [3] https://wiki.gentoo.org/wiki/Project:Perl/5.26_Known_Issues
> ===
> 
> 


Somewhere in here its probably useful to link to
https://wiki.gentoo.org/wiki/Perl under the guise of "general update
advice", as it seems many people *still* don't know about this page and
will predictably come to #gentoo asking for help having not seen it.

So 

> Please see the pages [2,3] for details and report bugs if you run
> into problems during or after the Perl update.
>
> General purpose advice on updating Perl can be found on page [4]

?


pgpWwevzX9sRY.pgp
Description: OpenPGP digital signature


[gentoo-dev] RFC: News item: Perl 5.26 update

2017-10-07 Thread Andreas K. Huettel
See plaintext below and identical attached file.


===
Title: Perl 5.26 update: possible breakage
Author: Andreas K. Hüttel 
Posted: xxx
Revision: 1
News-Item-Format: 2.0
Display-If-Installed: >=dev-lang/perl-5.26.0

You have just upgraded to Perl 5.26. This release brings several 
incompatible changes, also as a consequence of fixing a security 
problem [1]. While we have made sure that all resulting build 
failures within Gentoo are fixed, this may not be the case for
runtime issues, and certainly can affect third-party code (e.g.,
"hand-installed" server applications).

Typical errors are 
   "Can't locate inc/... in @INC (you may need to install the inc::... 
module)"
   "error: ... has no member named ‘op_sibling’"
   "Unescaped left brace in regex is illegal in ..."

Please see the pages [2,3] for details and report bugs if you run
into problems during or after the Perl update.

[1] https://rt.perl.org/Ticket/Display.html?id=127834
https://bugs.gentoo.org/show_bug.cgi?id=589680
[2] https://wiki.gentoo.org/wiki/Project:Perl/Dot-In-INC-Removal
[3] https://wiki.gentoo.org/wiki/Project:Perl/5.26_Known_Issues
===


-- 
Andreas K. Hüttel
dilfri...@gentoo.org
Gentoo Linux developer (council, perl, libreoffice)Title: Perl 5.26 update: possible breakage
Author: Andreas K. Hüttel 
Posted: xxx
Revision: 1
News-Item-Format: 2.0
Display-If-Installed: >=dev-lang/perl-5.26.0

You have just upgraded to Perl 5.26. This release brings several 
incompatible changes, also as a consequence of fixing a security 
problem [1]. While we have made sure that all resulting build 
failures within Gentoo are fixed, this may not be the case for
runtime issues, and certainly can affect third-party code (e.g.,
"hand-installed" server applications).

Typical errors are 
   "Can't locate inc/... in @INC (you may need to install the inc::... module)"
   "error: ... has no member named ‘op_sibling’"
   "Unescaped left brace in regex is illegal in ..."

Please see the pages [2,3] for details and report bugs if you run
into problems during or after the Perl update.

[1] https://rt.perl.org/Ticket/Display.html?id=127834
https://bugs.gentoo.org/show_bug.cgi?id=589680
[2] https://wiki.gentoo.org/wiki/Project:Perl/Dot-In-INC-Removal
[3] https://wiki.gentoo.org/wiki/Project:Perl/5.26_Known_Issues


signature.asc
Description: This is a digitally signed message part.


[gentoo-dev] Packages up for grabs: app-text/aiksaurus

2017-10-07 Thread Jonas Stein
Dear all,

The following packages are up for grabs:

app-text/aiksaurus

-- 
Best,
Jonas











signature.asc
Description: OpenPGP digital signature


Re: [gentoo-dev] 17.0 profiles and x86

2017-10-07 Thread Nils Holland
On Sat, Oct 07, 2017 at 01:56:39PM +0200, Andreas K. Huettel wrote:
> Am Samstag, 7. Oktober 2017, 12:57:46 CEST schrieb Nils Holland:
> > Hi folks,
> > 
> > just a short question: Looking through the portage tree git logs, I
> > can see that yesterday, the new 17.0 profiles have been generated for
> > quite a few arches besides amd64 (where they have already existed for
> > a while). However, it seems that for some arches, most notably x86,
> > the new profiles have not been generated. Is there any specific reason
> > for this, or is it just something that is going to happen later? Just
> > wondering...
> 
> Yes. I had to have dinner, and stopped in the alphabet at N (=nios2). :)

Right, that's totally understandable! And I thought something was
wrong with the arches where it had not yet happened ... next time in
similar situations I should probably just wait a bit longer and see. ;-)

Greetings and thanks!
Nils



Re: [gentoo-dev] 17.0 profiles and x86

2017-10-07 Thread Andreas K. Huettel
Am Samstag, 7. Oktober 2017, 12:57:46 CEST schrieb Nils Holland:
> Hi folks,
> 
> just a short question: Looking through the portage tree git logs, I
> can see that yesterday, the new 17.0 profiles have been generated for
> quite a few arches besides amd64 (where they have already existed for
> a while). However, it seems that for some arches, most notably x86,
> the new profiles have not been generated. Is there any specific reason
> for this, or is it just something that is going to happen later? Just
> wondering...

Yes. I had to have dinner, and stopped in the alphabet at N (=nios2). :)

-- 
Andreas K. Hüttel
dilfri...@gentoo.org
Gentoo Linux developer (council, perl, libreoffice)

signature.asc
Description: This is a digitally signed message part.


[gentoo-dev] 17.0 profiles and x86

2017-10-07 Thread Nils Holland
Hi folks,

just a short question: Looking through the portage tree git logs, I
can see that yesterday, the new 17.0 profiles have been generated for
quite a few arches besides amd64 (where they have already existed for
a while). However, it seems that for some arches, most notably x86,
the new profiles have not been generated. Is there any specific reason
for this, or is it just something that is going to happen later? Just
wondering...

Greetings and thanks!
Nils