Public SourceMage Discussion List

["Dufflebunk" <dufflebunk AT go-nix.ca>]

I wrote a script for ryan I think that parsed the file on distrowatch and
returned what packages were out of date. Seemed kinda like cheating to me
though. I don't think he used it.

--------- Original Message --------
> First off, great publicity there on osnews. Great to get the word out.
>
> moving on, i was reading the responses there and clicked on one of the
> distrowatch links that was posted and i went down the package list and i
> noticed that quite a few of our packages are slightly out of date by a
> version or two.  I'll iterate some and see what breaks, but actually this
> looks like a good site to look at when wanting to know if certain packages
> are at their latest versions.
>
> Jeremy
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>
>
>
>
>
>From julian AT openit.de  Wed Mar 19 17:13:29 2003
Return-Path: <julian AT openit.de>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from mail.openit.de (mail.openit.de [217.69.65.2])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP
        id 5B40B20115; Wed, 19 Mar 2003 17:13:29 -0500 (EST)
Received: from warpcore.openit.de (warpcore.openit.de [217.69.64.254])
        by mail.openit.de (8.12.8/8.12.8) with ESMTP id h2JMF98U003084
        (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
        Wed, 19 Mar 2003 23:15:09 +0100
Received: from warpcore.openit.de (localhost [127.0.0.1])
        by warpcore.openit.de (8.12.8/8.12.8) with ESMTP id h2JMF8ES014274;
        Wed, 19 Mar 2003 23:15:08 +0100
Received: (from julian@localhost)
        by warpcore.openit.de (8.12.8/8.12.5/Submit) id h2JMF83a014273;
        Wed, 19 Mar 2003 23:15:08 +0100
X-Authentication-Warning: warpcore.i.openit.de: julian set sender to
        julian AT openit.de using -f
To: Source Mage Grimoire <sm-grimoire AT lists.ibiblio.org>
X-Face: $~?g2!-On|QWPz8qkxU3V^DL7_Tli#/R8{t\$SYTT,/`5";d|]YB@q/9_|NP;
        
|:tK&kx:n7f=%y:G)b0$[Y{<BvZD)&a5[,o*n?@sHtrm^5IPW`d>}F_@"gb6WsI_LV8"%F7-|Kd="x6g18{t|/Gan9"&C!t_$6(HTf-1.}t/]RUW4k-;O6j5+FEyG29jrf,f?hKqa*l]*DVr;nhJN)+~H5&Xm&M\m_&rX/+WL
Organization: OpenIT GmbH
From: julian AT openit.de (Julian v. Bock)
Date: Wed, 19 Mar 2003 23:15:08 +0100
Message-ID: <lpsmtj3swj.fsf AT wollschaf.i.openit.de>
User-Agent: Gnus/5.090016 (Oort Gnus v0.16) Emacs/21.3.50
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: Source Mage <sm-discuss AT lists.ibiblio.org>
Subject: [SM-Discuss] glibc update
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Mar 2003 22:13:29 -0000

Hi

glibc has been updated to 2.3.2. I (and Eric Sandall) had no problems
so far.

Julian
>From seth AT tautology.org  Wed Mar 19 18:56:50 2003
Return-Path: <seth AT tautology.org>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from tautology.org
        (evrtwa1-ar13-4-33-070-190.evrtwa1.dsl-verizon.net [4.33.70.190])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP
        id 715B520022; Wed, 19 Mar 2003 18:56:49 -0500 (EST)
Received: from tautology.org (tautology.org [127.0.0.1])
        by tautology.org (8.12.8/8.12.8) with ESMTP id h2JNwTtW045027;
        Wed, 19 Mar 2003 15:58:29 -0800 (PST)
        (envelope-from seth AT tautology.org)
Received: from localhost (seth@localhost)
        by tautology.org (8.12.8/8.12.8/Submit) with ESMTP id h2JNwT5r045024;
        Wed, 19 Mar 2003 15:58:29 -0800 (PST)
Date: Wed, 19 Mar 2003 15:58:26 -0800 (PST)
From: Seth Woolley <seth AT tautology.org>
To: sm-users AT lists.ibiblio.org, "" <sm-discuss AT lists.ibiblio.org>,
        "" <sm-grimoire AT lists.ibiblio.org>
Message-ID: <20030319153649.O14195-100000 AT tautology.org>
Mail-Followup-To: sm-grimoire AT lists.ibiblio.org
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: [SM-Discuss] 
        zlib security update recompiles X, etc, some needed, some not.
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: sm-grimoire AT lists.ibiblio.org
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Mar 2003 23:56:50 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Please note that I added a patch to the zlib spell for a security update.
If you are updating, note that it will try to recompile the xfree86 spell
because of an on_cast zlib clause in xfree86.

I'm not even sure this is necessary, because I couldn't find any
references to zlib in the compile log except that it installed headers
for zlib into its install directory.  This would mean that it must
symbolically link to it, if it links to it at all (ldd on X didn't reveal
that X was linked to X).

This notice is not related to the "recompile affected spells now" dialog
which is separate to the trigger system in sorcery.  Please say "yes" to
that, as it supposedly finds statically-linked binaries.  It appears to do
its job better than the triggers, so I'd urge the spell maintainers of
spells that have on_cast zlib triggers and are symbolically-linked to zlib
to consider removing them (openssh, gd (might have been my fault), for
example) if they can determine that they aren't used statically to save
people's time.

To get around this, just say no to the triggers of spells that you feel
like checking later.  But do not just say no to all the triggers.  The
zlib script may be imperfect and I have no way of knowing if all the
triggers are not needed and the zlib search script is perfect.  The
maintainer of the spell may know better than the script, or it may be
located where the script does not look.  To be on the safe side, let it
recompile all the spells anyways ;).

If you have any questions, talk about this in sm-grimoire (where I added
Reply-to and Mail-Followup-to headers ;).  I and the people more expert
than I can answer on that list :).

Seth
Security Team Leader

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (FreeBSD)

iD8DBQE+eQQl7fQ833vqzH0RApsMAKCtGAkiiaZzLsWiPAH3AIh+QipDJwCfZTXb
5AmaM9win4Vkj4fN5bdkAsE=
=aYmc
-----END PGP SIGNATURE-----