December 2005 - crux-devel

[clc-devel] [security] tools/scripts/
by clc-devel＠berlios.de 09 Dec '05

09 Dec '05

This is a notification of a security related commit in tools/scripts/: fix a minor bug, and test it again Commit information: Author: jw Date: 2005-12-09 18:54:14 +0100 (Fri, 09 Dec 2005) URL http://crux.nu/cgi-bin/trac.cgi/changeset/314

2 1

[clc-devel] [security] /
by clc-devel＠berlios.de 09 Dec '05

09 Dec '05

This is a notification of a security related commit in /: kdjf Commit information: Author: jw Date: 2005-12-09 18:46:47 +0100 (Fri, 09 Dec 2005) URL http://crux.nu/cgi-bin/trac.cgi/changeset/18

2 1

[clc-devel] Making the switch to svn
by Johannes Winkelmann 09 Dec '05

09 Dec '05

Hi there, [ As you might have noticed I haven't been around (IRC, ML) last week; this is due to the annual military service I have to attend. It'll continue for another two weeks. However this shouldn't affect any of our plans, Matt, Jay and Per all have the very same permissions on crux.nu as I have; just contact them in case of questions :-) ] To avoid too much duplicate work and further user confusion, I'd suggest to switch the ports system to use the SVN repo from crux.nu soon, and enable the "new contrib" as 'contrib'. Here's a list of things remaining: * Switch to svn: - Write a short wiki page to tell the users what this is all about - Make sure we have all dependencies - pick up ports from danm - contact vkd and Rilo Riemer; ask them to join the svn repo - prepare an update 'ports' port containing core.svup and opt.svup; those can be adapted from http://crux.nu/files/{core,opt}.svn - Make it depend on svup, merge svup from http://xoomer.virgilio.it/srota/ports/sip/svup/ into opt - update 'ports' port in CVSUp; add svup to CVSUp to make it really simple for users to update: - run ports -u - install svup - mv /etc/ports/crux.cvsup /etc/ports/crux_cvsup.old - edit prt-get.conf, replace base with core - ports -u - svn post commit mail for "[security] ..." commits - bug notifications (send to clc-devel for now) * contrib: - provide a proper rsync driver for ports(8); I think Jay prepared one already - reenable the "duplicate view" and statistics in the ports-db on crux.nu Also, we'll need some announcements to the list right before we update 'ports' in CVSUp, and after all is done; especially the "new contrib" could need some more attention :-). After that, we can start with further changes to the website, like checking for missing dependencies on a regular base, implementing a new ports DB (Till ;-)) and adding additional security measures to open "new contrib" to complete strangers (to be discussed). Please append any tasks I forgot to the lists above. Other than that, most of the things remaining are really small things, therefore I'd suggest we plan to make the switch next weekend (december 3rd/4th); however, I as previously mentioned I won't be able to spend too much time on those, so if you can please pick one or more tasks from the list and go for it; please send a quick note to the list to avoid duplicate work. Thank you for your help, Best regards, Johannes -- Johannes Winkelmann mailto:jw@tks6.net Bern, Switzerland http://jw.tks6.net

6 14

[clc-devel] kdegraphics 3.4.3 - kpdf/xpdf security hole
by Daniel Mueller 07 Dec '05

07 Dec '05

Hi Nick, kdegraphics needs this patch as well: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch (attached: kdegraphics-3.4.3.patch) bye, danm -- Daniel Mueller Berlin, Germany OpenPGP: 1024D/E4F4383A

1 2

[clc-devel] Mailing list usage guideline
by Johannes Winkelmann 02 Dec '05

02 Dec '05

Hi, There seems to be an increasing number of users who are new to mailing lists and make the typical errors like top posting [1], including a full copy of the original message without relating to the content [2], or including e-mail addresses in the attribution line(s) [1] which then appear unobfuscated in web archives. In order to make the mailing list more pleasant, I've started a 'usage guideline' section on http://crux.nu/cgi-bin/trac.cgi/wiki/MailingLists Feel free to question and of those "rules", but let's write it down to make sure it's visible. I also think we should consider writing a similar document for IRC. Kind regards, Johannes References: 1 http://marc.theaimsgroup.com/?l=crux&m=113350973921921&w=2 2 http://marc.theaimsgroup.com/?l=crux&m=113327551604693&w=2

3 8

[clc-devel] [CLC Ticket Notification] contrib/rxvt-unicode update (5.7 -> 5.8)
by crux＠morpheus.net 01 Dec '05

01 Dec '05

Assigned to [clc-devel(a)lists.berlios.de] The following CLC ticket (101) has been created or modified: Description: download location for v5.7 is no longer correct Remarks: Fixed, thanks Contact: quuuux at googlemail dot com CLC User: tilman Status: fixed URL: http://clc.morpheus.net:6999/clc/tktview?tn=101

1 0

[clc-devel] [CLC Ticket Notification] contrib/rxvt-unicode update (5.7 -> 5.8)
by crux＠morpheus.net 01 Dec '05

01 Dec '05

Assigned to [clc-devel(a)lists.berlios.de] The following CLC ticket (101) has been created or modified: Description: download location for v5.7 is no longer correct Remarks: Contact: quuuux at googlemail dot com CLC User: anonymous Status: new URL: http://clc.morpheus.net:6999/clc/tktview?tn=101

1 0