Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] security fixes.

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Tony Smith <tony AT smee.org>
  • To: Seth Woolley <seth AT tautology.org>, Jason Flatt <jasonflatt AT wizard.com>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] security fixes.
  • Date: Fri, 17 Jan 2003 09:57:16 +0000

On Friday 17 January 2003 7:32 am, Seth Woolley wrote:
> The way it will work is at precisely the time the grimoire gets updated,
> I'll make a patch.
>
> Then I'm going to give the patch to sandalle who can then confirm it and
> then apply the patch... The patch will skip files that have been fixed
> already. Also, anybody who wants their section left alone can just tell
> me and I'll leave it out (less work for me).
>
> If I can do this in perforce without conflicting with the sections under
> CVS, it would be nice to know. calling Tony Smith?

You can, but you then need to put those changes back into CVS so the CVS
maintainers pick up the changes too. I think I can do that for you.

(I'm still planning to set up bidirectional mirroring between Perforce and
CVS, but time for recreational work is in short supply.)

If it'd make life easier for you I can widen your window for this work by
temporarily reducing the frequency that the devel tarball is updated - or
even put it on hold altogether. That way I could give you as much time as you
need to get it done in all sections and we'll just issue a refreshed build
when it's all done.

> I'll only be touching the PRE_BUILD files that have a left-off unpack and
> fixing broken MD5s. daily spells will have MD5[0]="IGNORE" added to
> them also.
>
> Seth
>
> On Thu, 16 Jan 2003, Jason Flatt wrote:
> > On Thursday 16 January 2003 08:19 pm, Seth Woolley wrote:
> > > If nobody objects, I'm going to make a big devel grimoire patch for
> > > fixing all the md5 issues... xfree86 really needs unpack md5 arguments
> > > in its PRE_BUILD, and so do 60 other spells, so if I do them all at
> > > once, it will be easy to fix. Anybody object?
> > > irc.positivism.org:8080/md5report kinda gives a run-down of these
> > > problems for test and devel.
> > >
> > > (the linux spell works, just haven't written my detection logic to fix
> > > it.)
> > >
> > > for i in $(find /var/lib/sorcery/codex -name PRE_BUILD)
> > > do grep -H unpack $i | grep -v MD5
> > > done
> > >
> > > Seth
> >
> > I've got a couple of fixes for the printer section pending; I just can't
> > access the perforce server right now.

Sorry, our ADSL line was dead when I got in this morning. We're OK again now.

Tony





Archive powered by MHonArc 2.6.24.

Top of Page