/srv/irclogs.ubuntu.com/2007/11/16/#ubuntu-devel.txt

* Hobbsee waves01:06
LaserJockhi Hobbsee01:14
HobbseeLaserJock!01:15
=== seb128_ is now known as seb128
=== tritium_ is now known as tritium
LordKowis there an easier way to check on accepted new/update packages (not in repos yet) than using the mailing lists?01:49
Hobbseehardy-changes?01:50
Hobbseealthough that's a mailing list, it's probably the easiest way01:50
ajmitchthere was an rss feed of it01:51
LordKowah okay01:51
LordKowbuilding new totem with the ubuntu patches. i think the launchpad integration will work properly but i will find out shortly :P01:52
LordKowsad that my laptop has almost 2x more processing power than my desktop and my desktop is 2x old-school opterons01:56
LordKowhm build depends for totem seem to be out of date01:59
LordKowmake: dh_iconcache: Command not found02:00
StevenKLordKow: That isn't a Build-Depends issue. Change that command to dh_icons02:00
LordKowah okay, well totem is still out of date then ;)02:01
LordKowyea i forgot about the switchover02:01
* Hobbsee didnt know dh_iconcache got taken out already.02:01
LordKowwhat was used before dh_iconcache? debian changelog says "use dh_iconcache" for one of the updates02:01
Hobbseenothing, iirc.02:02
Hobbseethen ubuntu implemented dh_iconcache, and then debian eventually implemented dh_icons, so we're switching to that, as it's better anyway02:03
LordKownew version of debhelper was merged today, probably removed dh_iconcache02:04
Hobbseehum.  then our rebuild tests will bail out.02:05
LordKowthat will help filter out dh_iconcache from packages a lot quicker, maintainers wont be able to build the package unless they fix it :)02:05
Hobbseefor everything that still has dh_iconcache02:05
Hobbseeubuntu has no maintainers, per se.02:05
LordKowupdate the packages...?02:05
emgentheya people02:06
LordKowHobbsee, let me rephrase "the ubuntu maintainers". debian should take care of most of it02:06
LordKowhowever i doubt all of the packages will be updated before upstream merge freeze02:06
Hobbseethe ones that make it onto mom will be.02:06
Hobbseeas in, merge-o-matic02:06
Hobbseehowever, the ones after...they'd be a good newcomer candidate.02:07
LordKowah i always wondered what does the merging, i figured it was automatic02:07
Hobbseethere are tools which help, but it's all manual.02:07
Hobbseesee merges.ubuntu.com/universe.html02:08
LordKowi suppose there would be insane amounts of breakage if we let upstream merging be done automatically02:08
LordKowprobably with dependencies more than anything else02:08
Hobbseeyeah.  i dont trust the merge-o-matic stuff that much :)02:09
Hobbseeoccasionally it comes out with absolute crack.02:09
Hobbseelike, starting tarball sizes of 5mb from ubuntu, 5mb from debian.  resulting diff:  15mb.02:09
LordKowlol02:09
Hobbseefeel free to get involved, if you like02:10
LordKowwell im quite busy with school stuff but hopefully I'll be able to squeeze out a few package updates than can get sponsored02:11
LordKow*that02:11
Hobbseedear compiz, please stop falling over, kthxbye.02:14
Hobbseeno, this apparently *isnt* compiz.02:14
Hobbseeyes it is.02:15
=== mpt_ is now known as mpt
Hobbseeany buildd admins around?02:33
Hobbseelamont: maybe?02:33
lamontHobbsee: I'm hiding.02:33
lamontsince I need to figure out why your ppa build didn't like you02:33
Hobbseelamont: can you boost the priorities of firefox-3.0 please?  https://edge.launchpad.net/ubuntu/hardy/+builds?build_text=firefox-3.0&build_state=all02:34
Hobbseelamont: "soyuz is on crack" is an acceptable answer.02:34
Hobbseelamont: i'll give you longer before asking about the other, if you bump the prio of that firefox.  how's that?  :)02:35
lamontcan't bump hppa or ia64.02:35
lamontothers set to 1000002:35
Hobbseeexcellent, thanks.02:35
lamontia64 bumped too.02:36
lamonthppa kinda needs a working java to build xulrunner, so um.. sucks to be us02:37
lamontinteresting.  greasemonkey script failed me02:37
Hobbseeyeah02:38
Hobbseehah02:38
lamontthere02:40
* lamont applied a *=100 filter02:40
Hobbsee:)02:41
LordKowi hate it when i make a stupid mistake and spend 2 hours waiting for a package to compile and have it fail in the end simply because i forgot to update the .dsc after i made changes :-/02:53
bddebianI know that feeling02:54
Hobbseeccache ftw!02:56
LordKowdont have the disk space :(02:57
LordKow"Totem Movie Player 2.21.2" yay03:30
=== rob1 is now known as rob
Hobbseemdz: er...https://bugs.edge.launchpad.net/ubuntu/+source/landscape-client/+bug/163030 might be something you're interested in.04:54
ubotuLaunchpad bug 163030 in landscape-client "Against Ubuntu Promise" [Undecided,New]04:54
Hobbseelooks like you were teh uploader.04:54
* tonyyarusso subscribes05:00
tonyyarussoLaunchpad and Landscape being proprietary are pretty high up on the list of things that irk me with Ubuntu atm.05:01
=== keir__ is now known as keir
=== asac_ is now known as asac
warp10Hi all!06:37
=== keir__ is now known as keir
dholbachgood morning06:45
Hobbseeguten morgen, dholbach06:45
dholbachhey Hobbsee06:47
=== asac_ is now known as asac
=== keir_ is now known as keir
=== gpocente1 is now known as gpocentek
=== \sh_away is now known as \sh
\shslangasek, bug #161193 commented...I could be wrong, please check :)07:28
ubotuLaunchpad bug 161193 in xclass "[MoM Merge] xclass 0.9.2-3ubuntu1" [Wishlist,Confirmed] https://launchpad.net/bugs/16119307:28
slangasek\sh: why would there be problems upgrading from dapper?08:12
slangasek\sh: my analysis showed there were zero overlapping files between the two packages08:13
pittiGood morning08:40
geserHi pitti08:40
warp10pitti: Hi boss!08:42
pittihey geser, hey warp1008:42
pittiwarp10: /me != boss :)08:43
warp10pitti: :D08:43
seb128is there any known toolchain issue on amd64?08:53
mhbhi pitti08:53
seb128hum, in fact not amd64 specific08:54
seb128there is quite some packages I synced from Debian which ftbfs on "undefined reference to `ceil'"08:54
seb128but they built correctly in Debian08:54
seb128"undefined reference to `floorf'" also in the log08:55
pittihey mhb, how are you?09:00
mhbpitti: I'm having an exam in 4 hours, so a bit nervous, but fine otherwise ... and how are you? I have noticed you've completed the r-m-rewrite spec, the DB idea sounds quite nice09:01
pittimhb: oh, good luck with your exam then! I'm quite good, grinding through the large heap of work that UDS created :)09:03
mhbpitti: by the way, my account on r-m-hackers is about to expire. I guess it'd be nice of you to renew it for some time, provided you still want my help :o)09:06
pittimhb: oh, sure09:06
pittimhb: how's that?09:07
mhbpitti: https://edge.launchpad.net/~restricted-manager-hackers I guess through the Members link from here09:10
\shslangasek, ok...so I think we change the merge to a sync...and we are clean09:12
Treenakshmm.... bug 16304209:13
ubotuLaunchpad bug 163042 in samba "nmbd crashes after routine Dapper upgrade" [Undecided,New] https://launchpad.net/bugs/16304209:13
seb128doko_: around?09:14
mhbpitti: by the way, the wiki page is not really clear on how the UI abstraction will be handled ... are we going to provide a fixed number of abstract dialogs (like ConfirmDialog, FirmwareSelectDialog) for the handlers? If so, how many and which?09:14
loolseb128: Do you have an example package?09:16
pittimhb: yes, all the workflow, dialog types, etc should be in the abstract UI; implementations should not do any decisions nor workflow09:16
seb128lool: nautilus-cd-burner09:16
seb128lool: include math.h makes no difference, that's weird09:17
loolseb128: It sounds from your description that -lm is missing, but historically ld in Debian/Ubuntu would add it automatically09:17
loolPerhaps it's stricter now09:17
seb128well, it used to work and work on Debian09:18
seb128whatever was added -lm should keep doing so ;-)09:18
seb128doko_: ^09:18
seb128did anything change in the toolchain that could make that -lm is not used on build now?09:18
loolseb128: We have a CVS snapshot of 2.18.1 while Debian has 2.1809:19
seb128lool: cvs of what?09:19
loolbinutils09:19
seb128ah09:19
loolBut yeah, doesn't sound like a change we should do in Ubuntu first09:20
seb128I'll wait for a reply from doko09:20
TreenaksAre there Security/samba people? People are seeing dead nmbd's after the latest Samba security upgrade (bug 163042)09:21
ubotuLaunchpad bug 163042 in samba "nmbd crashes after routine Dapper upgrade" [Undecided,Confirmed] https://launchpad.net/bugs/16304209:21
\shdear developers, we have a problem with security regarding dapper and a very vital package named ethereal (or newer name wireshark)09:21
\shin dapper we have ethereal 0.99.0 which is the last release under the name ethereal and all future releases are named wireshark09:22
loolseb128: I got some build logs with this error as well now :)09:23
\shnow we have some security flaws in 0.99.0 which are fixed in 0.99.2...the problem with that, there is no real way to fix those security issues in 0.99.0 without diffing 0.99.0 to 0.99.2 and carry a very big patch with us... (rational: they are changing not only the project name, no they are changing as well some prefixes of variables from ETH_ (for ethereal) to WS_ (for wireshark))09:24
seb128lool: from Debian or Ubuntu?09:24
loolseb128: Ubuntu09:24
seb128ok09:24
\shso, what do you think is the best way to fix this package...it's vital and for sysadmins and network people important.09:25
pitti\sh: I don't really think we can give a good answer to this; it's universe for a reason, and if you rely on anything in an universe as old as dapper's, you have a major problem (likewise with clamav, php apps, etc.)09:27
pitti\sh: if it is feasible to put the latest wireshark into dapper and name it 'ethereal' to avoid NEW packages, we can talk about this, though09:28
pittibut if it breaks any behaviour, config files, etc., then the only remaining option that I see is a backport09:28
\shpitti, well, for any other release it's easy to backport the fixes...but for dapper, it's special because of the change of the project09:28
pitti\sh: so merely changing the package name doesn't work?09:29
pittiit also changes config file names/paths, etc/09:29
pitti?09:29
\shpitti, I'll have to check other files to answer this question, but reading the source for the important parts, I wonder if they didn't even change names of config files or something else09:30
pitti\sh: quite likely if they are that thorough09:30
pitti\sh: however, patching that might be significantly easier than trying to backport all the security fixes09:31
\shpitti, I tryed to bump only the files which are affected, but they really do indeep changes, as I said, changing struct names from ETH_ to WS_ etc. which gives me a real headache09:32
FujitsuEwww.09:32
\shas an example btw: http://anonsvn.wireshark.org/viewvc/viewvc.py/releases/wireshark-0.99.2/epan/dissectors/packet-gsm_a.h?view=diff&r1=18755&r2=17982&diff_format=h09:33
torkel\sh: you can't just do s/WS_/ETH_/g to trim the diff?09:36
\shtorkel, that's something I'm trying to do now09:36
=== Nafallo_ is now known as Nafallo
loolslangasek: Is there a technical page which the changes in JeOS WRT to e.g. a server install?  I guess less packages installed and a different kernel flavor, but I'm not even sure09:42
\sh oh I'M really doomed...let's do the easy things first...feisty and edgy09:59
loolHmm http://packages.ubuntu.com/cgi-bin/search_contents.pl?searchmode=filelist&word=python-gobject-doc&version=hardy&arch=all lists djpig as contact address; I guess he might not want to be contacted for packages.ubuntu.com; do I file a ticket for IS?  Or a launchpad bug against some team?10:01
dholbachlool: he takes care of that page10:01
dholbach(iirc)10:02
looldholbach: Oh ok; fine then, thanks10:02
dholbachnp10:02
dholbachalthough I think we should have that functionality in LP :)10:02
mdzHobbsee: thanks for bringing my attention to it; I've clarified in the bug10:03
Hobbseemdz: you're welcome.  now i just have to find the bug #, to see what you said :)10:03
mdzHobbsee: bug 16303010:03
ubotuLaunchpad bug 163030 in landscape-client "Against Ubuntu Promise" [Undecided,Invalid] https://launchpad.net/bugs/16303010:03
Hobbseethanks10:03
Hobbseemdz: ahh, so you sneakily avoid the issue of the *client*.10:04
Hobbseeer, the host.10:04
FujitsuHobbsee: Of course.10:05
FujitsuServer, you mean?10:05
Hobbseeyes.  *that's* the word i was looking for.10:05
FujitsuHeh.10:05
Hobbseei swear, the idea of exams on saturdays screws up my brain.10:05
* Fujitsu had his last exam a few hours ago, so hah!10:06
mdzHobbsee: Landscape is a web service which can be used in conjunction with a client.  The client is part of Ubuntu and free software.  The service is something which is offered for a fee.10:09
Hobbseemdz: okay, i didn't realise my brain was *that* broken.  i knew that, i really did :)10:10
mdzHobbsee: is there anything unclear about it?  I don't think the press release got into this level of detail10:10
Hobbseemdz: no, it's clear.  it's just my brain on crack, due to these damned exams.10:10
highvoltagesince there's some talk on landscape, where can I ask for the testers support? the landscape interface pointed me to landscape-devel@lists.canonical.com, but posting there is only for members.10:10
mdzFujitsu: any questions about landscape?10:10
Hobbseemdz: you ask that, and he'll say "Will you open source it, and if so, when?"10:11
Hobbsee:)10:11
* Fujitsu doubts it.10:11
Fujitsumdz: The client is entirely useless without the service, presumably?10:11
mdzFujitsu: it's designed to be used with our implementation, though the protocol is open and could presumably be used with other software if someone implemented it10:12
Fujitsumdz: Aha, thankyou for clarifying that.10:13
mdzbut the service isn't offered for free, any more than telephone support is10:13
FujitsuRight, and that is reasonable.10:13
FujitsuHobbsee: I'm not against *any* Canonical projects being non-free, just essential deficient stuff like LP.10:14
HobbseeFujitsu: heh.  heh.  heh.10:14
seb128Fujitsu: maybe not the right chan to troll? ;-)10:15
* Hobbsee does not comment, as mdz is around.10:15
Hobbseeseb128: it was related to previous discussion10:15
seb128Hobbsee: well calling LP deficient is still somewhat trollish10:16
Hobbseeseb128: tell me that when you *don't* have chinstrap access.10:16
seb128Hobbsee: I don't have chinstrap access10:16
Hobbseeoh?  i thought you did, to log into drescher to do archive admin stuff?10:16
Hobbseeor have they changed the machines?10:16
Fujitsuseb128: How is it trollish?10:17
seb128Hobbsee: you didn't ask me if I have access, you asked me to tell you I don't have access which I did ;-)10:17
FujitsuHaha.10:17
* Hobbsee gives seb128 a penalty card. LYING!10:17
seb128Fujitsu: you might not like launchpad it doesn't make it deficient10:18
Hobbseeseb128: you missed the "when" in there.10:18
seb128Hobbsee: indeed ;-)10:18
Hobbseeseb128: :)10:18
Hobbseeseb128: it's deficient when it's bugs stop me from doing ubuntu stuff.10:18
seb128like what?10:18
FujitsuRight, there are a annoying bugs, so it is deficient.10:18
Hobbseearchive admin, for one.10:18
Hobbseevarious other things as well10:18
FujitsuErm, -a10:19
Mithrandirsoftware is buggy, news at 11.10:19
* Mithrandir hides.10:19
seb128Fujitsu: you can call everything deficient using that criterium10:19
FujitsuMithrandir: Software is taking a long time to get unbuggy, even with 35 devs.10:19
HobbseeFujitsu: no, annoying bugs != deficient.  missing critical features == deficient.10:19
seb128Hobbsee: that's called bugged and Ubuntu is as deficient as launchpad10:19
Hobbseeseb128: i can fix one, and not the other :)10:19
Hobbseebut oh well.10:20
seb128what make you start this troll again?10:20
* Hobbsee throws a thunderbolt at Mithrandir :)10:20
seb128I think launchpad not being opensource yet has already been discussed10:20
seb128is there a point to start again on the ubuntu chan?10:20
seb128that's rather OT for Ubuntu10:20
Fujitsuseb128: It was relevant to the previous discussion.10:21
Hobbseeseb128: if you must know, it was discussions on landscape, and mdz asking if we wanted clarification on that.  that, is of course partially non-free, which led to the comment about it being acceptable for canonical to have propriatory stuff.  would you like a pastebin?10:22
seb128Fujitsu: I was not there for the discussion apparently, still calling LP deficient is trollish10:22
Hobbseeand this isnt?  :)10:22
seb128Hobbsee: no thanks, I would just like to not have yet another discussion about LP having some bugs and being closed source there, that has been discussed enough and I don't think the discussion will bring us anything10:22
mdzFujitsu: Launchpad will be open source, though the matter of when is complex10:22
Hobbseemdz: and how much10:23
Hobbseebut, you're right, i have better things to do.10:23
Fujitsumdz: I know, and I've read the reasons that have been cited, and I find them somewhat reasonable.10:23
mdzHobbsee: I don't think there is any question about how much10:24
mdzthere's no third-party IP in it as far as I'm aware10:24
Fujitsumdz: Isn't there? I was sure that previous versions of the policy mentioned that Soyuz would remain non-free, as it will always be a service sold to other distros.10:25
mdzFujitsu: I'm happy to discuss this, but please take it to #launchpad10:27
mdzseb128 is right10:27
Fujitsumdz: True, this has drifted well offtopic now.10:28
doko_seb128: -lm isn't added automatically for C, just for C++10:49
seb128doko_: the same package built in gutsy and debian, something is the toolchain changed10:49
seb128doko_: did -lm used to be added for C?10:50
doko_seb128: maybe another library was linked against -lm before?10:50
seb128yeah, might be, I'm just trying to figure which one ;-)10:50
seb128mvo: you should send this toshset change to Debian or do a QA upload there and ask for syncing ;-)11:42
mvoseb128: I send the patch upstream already11:48
seb128mvo: ah ok, I looked to the BTS only11:49
mvoseb128: hm, at least it should be sent, I got no reply from debian bts yet11:50
=== dholbach_ is now known as dholbach
dholbachMOTU Q&A session in #ubuntu-classroom now12:01
pittitepsipakki: hm, I thought mesa 7.0.2-2ubuntu1 wouldn't need gcc-3.4 any more? it still uses it on i386/amd64/lpia?12:30
tepsipakkiright, I didn't drop those yet, need to get a confirmation from the kernel guys..12:32
tepsipakkipitti: or do you think we could drop them right away?12:34
pittitepsipakki: no, if you need soem confirmation, please get it12:35
pittitepsipakki: I just thought that was already settled after our conversation from yesterday12:35
* pitti hugs tepsipakki, thanks12:36
* tepsipakki hugs pitti back12:38
Hobbseecjwatson_: ping @ ubuntu-devel ML question13:11
directhex|bspcjwatson_, did you read my review of current ps3 linux distributions?13:18
DktrKranzpitti, could you please have a look at bug 103489? It has already uploaded and needs to be accepted.13:23
ubotuLaunchpad bug 103489 in ggz-gtk-games "[SRU] [can-not-install] file overwrite error" [Medium,Confirmed] https://launchpad.net/bugs/10348913:23
=== ryu2 is now known as ryu
pittiDktrKranz: I'll get to that today (SRU run is still on my plan)13:26
DktrKranzpitti: thanks13:26
cjwatson_directhex|bsp: no?13:35
cjwatson_Hobbsee: pong13:35
=== cjwatson_ is now known as cjwatson
Hobbseecjwatson: ubuntu-devel@l.u.c is moderated by if you're a part of ubuntu-dev or not.  how does it get this list of who's in ubuntu-dev?  namely, do new MOTU's get added manually to the whitelist, or does it do some launchpad foo?13:36
directhex|bspcjwatson, http://gaming.hexus.net/content/item.php?item=10273 - nobody did very well13:37
cjwatsonHobbsee: that's a good question and not one where I know the answer. elmo ought to know13:37
Hobbseecjwatson: surely not!  you're supposed to know everything :)13:38
MithrandirHobbsee: it's synced automagically, I believe.13:38
pochuadd me to ~motu and I'll test :-)13:39
HobbseeMithrandir: in which case, why does norsetto keep getting moderated?13:39
cjwatsondirecthex|bsp: OK, I've repaired (and continue to be in the process of repairing) some of your issues for Ubuntu, but haven't spent the time to produce custom versions of Xubuntu 7.1013:39
MithrandirHobbsee: is he sending from an address associated with his LP account?13:40
directhex|bspcjwatson, all the problems stated were on ubuntu also, it was just a bit slower due to gnome's extra memory requirements. network, resolution, etc13:40
HobbseeMithrandir: come on launchpad.  dont time out.   load the page.  good launchpad.13:40
HobbseeMithrandir: it's his third confirmed email, yes.13:41
MithrandirHobbsee: hm, then I defer to cjwatson's advice to talk to our sysadmins who might be able to shed some light on the issue.13:41
cjwatsondirecthex|bsp: FWIW: current custom Ubuntu 7.10 CDs (not in the obvious place, but there's a link from the obvious place) document the video mode stuff in the CD boot loader message, the networking thing is a hal bug that I think I've mostly fixed and just need to QA properly, I'm not sure why Gnash isn't automatically offered but maybe that's a Xubuntu thing?13:41
HobbseeMithrandir: fair enough13:41
Hobbseeelmo: ping, and i promise i wont start ranting again :)13:42
directhex|bspcjwatson, i may look at the question again when 8.04 is stable (by then, maybe the fedora lot will have pulled their thumbs out of their arses and stuck otheros.bld on the install media, so i can consider it for comparison)13:42
cjwatsondirecthex|bsp: I do agree that we haven't spent enough time on it, and I posted a call for development help recently13:42
directhex|bspcjwatson, yes, i read it, hence making you aware of my article13:43
directhex|bspcjwatson, if it makes you feel any better, nobody else was any better overall13:43
* cjwatson nods13:43
directhex|bspfrankly, some of the issues i found on all three distros were baffling.13:44
seb128so guys, we (desktop team, but there is nothing desktop specific there) want to start using some sort of tags in the patches13:56
seb128to have informations like the corresponding ubuntu bug number, the upstream one, a description of the patch, etc13:56
seb128does anybody has an opinion on the format that should take and the naming?13:57
\shkeescook, bug #132915 -> feisty and edgy debdiffs attached, dapper is not going to be fixed...13:57
ubotuLaunchpad bug 132915 in wireshark "WireShark versions prior to 0.99.6 vulnerability" [High,In progress] https://launchpad.net/bugs/13291513:57
seb128I was thinking to something like13:57
seb128ubuntulog: http://launchpad.net/bugs/nnnnnn13:58
* seb128 slaps the completion13:58
seb128 Ubuntu: http://launchpad.net/bugs/nnnnnn13:58
seb128 GNOME: http://bugzilla.gnome.org/nnnnnn13:58
seb128Description: what the change is doing13:59
seb128do we want those standardized so they can be automatically listed by some tools maybe, etc?14:00
Fujitsuseb128: As in dpatch patches?14:00
seb128Fujitsu: nothing dpatch specific, as in any patch system you want to use, simple-patchsys, quilt, dpatch14:01
FujitsuBut that sort, right.14:01
seb128everything we store in debian/patches14:01
seb128and which theorically should be send upstream and documented14:01
seb128we should also have a tag to indicate that a change is distribution specific (customization for example)14:02
=== doko_ is now known as doko
=== cprov is now known as cprov-lunch
pittiseb128: I'd do s/GNOME/Upstream/14:49
pittiseb128: and perhaps add Debian:14:49
seb128pitti: I was pondering if we should get a tag by bug tracker or just an upstream one14:50
seb128pitti: like to list all the bugzilla.gnome.org bugs14:50
seb128pitti: but that would be easy enough to do using upstream and filtering on bugzilla.gnome.org then14:51
pittiseb128: I wouldn't define more tags than necessary14:51
seb128ok14:51
pittiseb128: yeah, that's what I was thinking, you can filter on teh bug tracker host name14:51
seb128so Ubuntu, Debian, Upstream14:51
seb128and Ubuntu-specific14:51
pittiseb128: FYI, the Debian kernel guys do something similar14:51
seb128and Description14:51
pittiseb128: technically, Debian is just an upstream too, but since it is so exceptionally important for us that might justify a separate tag14:52
pittiseb128: otherwise I like it14:52
=== DrPepperKid is now known as MacSlow
seb128pitti: right, but it's a special upstream, and that means we can use the same tagging on Debian14:53
pittiright14:53
seb128I'll mail ubuntu-devel about the suggestions, thank you for the comments14:54
=== elkbuntu_ is now known as elkbuntu
=== ogra1 is now known as ogra
Robot101has some big backlog of security updates just been unplugged?15:39
Robot101there have been like 100 in the past 2-3 days15:39
pittidholbach: why did you do a gutsy-wallpapers upload to hardy? I thought that was obsolete?15:40
dholbachpitti: so it's installable in parallel with ubuntu-wallpapers15:40
pittiah, I see15:40
cjwatsonRobot101: last week and the week before, the security team were at conferences in Massachusetts15:41
cjwatsonRobot101: so I expect that it's "get back home, work on CVEs"15:42
\shmore openldap security fun....:(15:42
Skiessiwhen nvidia-glx-new gets updated to work with the newest xserver-xorg-core?15:51
=== \sh is now known as \sh_away
dholbachpitti: ubuntu-gdm-themes uploaded16:04
dholbachpitti: ubuntu-artwork should depends on ubuntu-gdm-themes and ubuntu-wallpapers now too16:05
pittidholbach: accepted16:09
dholbachpitti: thanks A LOT16:09
* dholbach hugs super-pitti16:09
pittino problem :)16:10
* pitti hugs dholback16:10
dholbach:-)16:10
* pitti kicks out a whole lot of old crap from -proposed; yay, back to sanity!16:13
pochudoko: I've done your mono merge, hope you don't mind.16:13
pittimvo: what will happen with bug 47044? there's still an outstanding question16:14
ubotuLaunchpad bug 47044 in apt "apt cant work with disable proxy" [Medium,Fix committed] https://launchpad.net/bugs/4704416:14
pittiand it needs verification16:15
pittiand it's sitting there for 290 days already16:15
mvopitti: sorry, I look at it and answer your question16:17
* pitti hugs mvo, thanks16:17
pittibdmurray, mvo, ogasawara: main SRUs in -proposed which are more than half a year old and did not get any testing feedback from reporters are a good candidate for removal from -proposed IMHO; do you agree?16:22
pittibdmurray, mvo, ogasawara: (I already cleaned up all the universe stuff)16:22
pitticommon sense applied, of course16:23
ogasawarapitti: sounds reasonable to me16:23
pittimvo: FYI, you have some verification bug mail for update-manager{,-core} now16:30
mvopitti: in my inbox?16:30
mvopitti: let me check16:30
pitti(not that urgent, but a gentle reminder)16:30
mvopitti: I can't do the verification for #47044 myself, but I will update the report to follow the new verification steps guidelines16:39
pittimvo: thanks16:40
pittimvo: also, if you test the actual -proposed package yourself, that's still a valuable piece of feedback at least forme16:40
pittis/forme/for me/16:40
bddebianHeya16:42
lamontdear bip.  please quit dying. kthxbye16:54
mvopitti: #47044 updated16:58
pittimvo: aaaah, that makes sense17:00
pittimvo: I programmed Python for too long :)17:00
pittiincidentally that's the very same trap that StevenK and I fell into recently17:00
* pitti ← hasn't touched C++ for > 5 years :(17:00
pittimvo: so, verification should be easy now17:01
* pitti hugs mvo17:01
mvopitti: cheers, what are the other outstanding ones for u-m?17:03
pittihttp://people.ubuntu.com/~ubuntu-archive/pending-sru.html17:04
pittibug  #109216 and bug #10929017:04
ubotuLaunchpad bug 109216 in update-manager "upgrade not possible with 0.45.3" [Undecided,Fix committed] https://launchpad.net/bugs/10921617:04
ubotuLaunchpad bug 109290 in update-manager "update-manager core should support proposed updates" [Medium,Fix committed] https://launchpad.net/bugs/10929017:04
pittimvo: those are all of your's, I think17:04
pittimvo: in a few hours the page should be much smaller, BTW17:05
mvopitti: thanks, checking17:10
slangaseklool: you may want to ask soren about that (differences between JeOS and server); there's also a tentative seed for it now17:24
frafuHello, I am new to patching and am currently stuck. Here is my problem: On launchpad there is a project written in C called mousetweaks. Release 0.2.6 has been published and in the meantime a typo has been fixed in launchpad. I downloaded the unified diff to patch the debian source package I am trying to build. But when I try to apply the dpatch that I created from the diff, it tells me that it does not find the file.17:24
slangasek\sh_away: will you retitle the xclass bug to a sync request, or do you want me to just take it from here?17:25
frafuCould anybody please help?17:25
pochufrafu: use 'patch -pX <your_patch.dpatch', where X is a number17:25
pochufrafu: btw #ubuntu-motu is a better place for that question :)17:26
pittifrafu: https://wiki.ubuntu.com/MOTU/School/PatchingSources should help you17:26
=== \sh_away is now known as \sh
\shre17:27
frafuI thought to use dpatch, and there are 2 patches that I have to apply. Will I be able to use -pX in the debian rules file?17:29
frafupochu: why is the number of dirs dires to strip wrong? What can I do to get a patch that works from the root dir of the package without indicating a -pX ?17:32
cjwatson_surely for a typo it would be less effort just to edit the source directly rather than spending ages messing with a patch system17:33
=== cjwatson_ is now known as cjwatson
cjwatsonpatch systems are worthwhile if you have fairly substantial numbers of fairly long-lived patches against upstream17:33
cjwatsonbut for a simple typo backported from upstream, it isn't worth it17:33
pwnguinpatch systems are wierd. there's already a diff.gz17:34
pwnguinand now you want to hide more inside that?17:34
cjwatsonI understand why people end up using them for, as I said, fairly substantial numbers of fairly long-lived patcheds17:35
cjwatsongah17:35
cjwatson()(although I would17:35
=== \sh is now known as \sh_away
cjwatson(although I would prefer to replace that with better infrastructure, long-term)17:35
pwnguini wonder how git's working out for joey hess17:35
frafuIn fact,there is a second more complicated patch to apply; it gives me the same error.17:35
frafuI have prepared a page with more info, if someone can have a look:17:37
frafuhttp://paste.ubuntu-nl.org/44761/17:37
frafuIs there a way to create the patch so that no -pX is necessary?17:38
cjwatsondpatch should supply the -pX itself17:39
cjwatsonare you trying to apply the patch by hand here?17:39
cjwatson(in any case, I still think dpatch is overkill in your case and you are making a rod for your own back)17:39
cjwatsonoh, I think I see your problem, anyway17:40
frafuyes, with 'dpatch apply-all' to test the patch17:40
cjwatsondpatch probably tries -p1 first and there is a ChangeLog at the root17:40
cjwatsondon't use that dpatch patch-template business17:41
cjwatsoninstead, use dpatch-edit-patch17:41
frafuCould you please tell me shortly how to use dpatch-edit-patch? Can I feed the diff from launchpad to dpatch-edit-patch?17:43
cjwatsonso you do 'dpatch-edit-patch fix_typo_in_po_de'17:43
cjwatsonit will give you a shell17:43
cjwatsonin an unpacked copy of the source package17:43
cjwatsonyou apply the patch to that tree, and exit; it will deal with generating the .dpatch file and putting it in the right place17:44
cjwatsonbtw, this is all in the URL pitti gave you earlier. Have you read through that?17:44
cjwatsonif not, please do so, and then go to #ubuntu-motu if you have further problems17:44
frafucjwatson:  thanks. I will try what you suggested and read pitti's link17:47
IntuitiveNippleAnyone got suggestions as to what I should look for. Whilst booting UML Gutsy it mounts root but during init reports "findfs: Unable to resolve 'UUID=XXXX' " for the / and /home, mountpoint+mount report failure, and from the maintenance shell there's no /dev/ubd* or /dev/disk/by-uuid/17:52
ogralooks like it doesnt wait long enought for the devices17:53
ogra(just a guess)17:53
dajhornIntuitiveNipple: (You'll get plonked by asking support questions here).  Gutsy broke UUID handling on many of my servers.  Try it LABEL instead.17:55
IntuitiveNippleI'm trying to ensure we have a working UML... this looks to be the last part of the puzzle17:55
IntuitiveNippleNope, LABEL doesn't help. It looks as if no 'disk' nodes are being created17:59
IntuitiveNippleAhhh... would it help to have udev installed?18:06
pittitepsipakki, bryce: all the x client packages on http://people.ubuntu.com/~ubuntu-archive/component-mismatches.txt (source and binary demotion) can be kicked out of the archive entirely, right?18:07
=== Tonio__ is now known as Tonio_
brycepitti, yes that's correct.  I'm not sure why -elographics is on that list, but everything else is now maintained in other packages18:28
dajhornWhere can I go to watch vmware-server foodfight that is happening?  Ticket activity is happening without commentary.18:30
=== norsetto is now known as norsetto_limbo
desertcGreetings, could I get your opinion on this question:18:34
desertchttp://ubuntuforums.org/showthread.php?t=61476918:34
cjwatsondesertc: you might want to say what it's about so that not everyone has to visit the URL to find out18:35
desertcI hate to fill the channel with a cut and paste.18:35
cjwatsonsummarise18:35
cjwatsonyou certainly shouldn't cut and paste it18:35
desertcThat is what I did on the link...18:36
jdongdesertc: you are asking a support question in that thread18:36
cjwatsonthere are 235 people in this channel with hundreds of different interests18:36
ogradesertc, you miss the difference between the gutsy-security and gusy-updates repos18:36
jdongdesertc: as ogra just said, disable gutsy-updates and only enable gutsy-security in the Software Sources Manager18:37
jdongor /etc/apt/sources.list18:37
cjwatsonwhen posting a link, you need to say briefly what it's about in order that the people who are interested can look, rather than everyone18:37
ogradesertc, what you want is to disable gutsy-updates ... that way you*ll only get critical fixes18:37
jdongcjwatson: his thread asks if there is a way to only get Security updates rather than Recommended Updates too18:37
desertcjdong: Yes, exactly!  So, in doing so, will there be any issue with the security updates expecting a "recommended" update being in place?18:37
ograyeah, without having to read the forum it would have been easier and saved some ram in my 60+ tabs firefox win18:38
jdong(and yes, desertc, it'd be nice if you can give one-line summaries without forcing people to click a link)18:38
jdongdesertc: no. they are designed to be independent of each other18:38
desertcjdong: I will keep this in mind for future communications.18:38
cjwatsonjdong: sure, I wanted him to tell me ;-)18:38
cjwatsonor, well, tell us18:38
desertcjdong: Thank you very much.  I really appreciate the advice.18:38
cjwatsondesertc: jdong's *nearly* right18:38
cjwatsondesertc: -security doesn't require -updates, but -updates may require -security18:38
cjwatsondesertc: indeed, packages in -security are normally pushed into -updates as well18:39
desertcGood luck with your endeavors to bring Free Software to human beings, all.18:39
cjwatsonso to all intents and purposes -security is a subset of -updates18:39
jdongas always cjwatson knows best :)18:39
jdong"If so, then I may simply leave the Update Manager service off and wait until the next version within 6 months. The Linux OS is hardened enough that I would feel confident doing so."18:40
jdongurgh he left18:40
jdongwas just gonna tell him that's not a good assumption to make18:40
cjwatsontell him in the forums18:41
jdongyep just did18:42
jdongcjwatson: quick question of curiousity, there's often backports that I reject because they b-d on a newer version of a library that isn't strictly necessary (i.e. used to force a build against the newer version in the development distro)... I'm wondering if we can work out some kind of procedure for handling these18:44
jdongi.e. either loosening the dep in Universe, or a trivial source-change backport18:44
jdongwhich ever is easier on you guys :)18:45
cjwatsonjdong: loosening the build-dep can cause some problems down the line, particularly if an architecture is behind; I'd rather have somebody who cares about backports in core-dev so that they can do source-change uploads when necessary18:49
* cjwatson -> dinner18:49
jdongcjwatson: ok, good point, there's a few members that are in core-dev so that route sounds good for now; thanks for your time18:51
SEJeffWould I be correct in assuming someone from Canonical is aware of the fact that security.ubuntu.com is returning 403 when trying to download samba updates?18:52
pipegeekweeeeeird18:52
elmoSEJeff: yes, the update causes a regression, the 403 is deliberate.  a fixed package is being worked on18:52
SEJeffelmo, ok good. Just making sure18:53
dajhornelmo: For how much time was the dud package available?18:53
pipegeekI mentioned what I thought to be a bug in compiz-fusion in here a while ago---when the system was under load while compiz was running, x would crash within a few minutes (I've been testing with some trivial mencoder task)18:53
elmodajhorn: I don't know offhand, sorry18:54
pipegeekTurns out that's not accurate; it only happens when there's a cpu-intensive task *running in yakuake*.18:54
dajhornelmo: Np.  (My dev boxes got it.) *shrug*18:54
pipegeekJust wanted to say that "aloud".  Off to launchpad18:54
pipegeekSweet!  And the bug already exists!18:55
pipegeek:D18:55
pipegeekand has since feisty :-\18:55
jdongif people don't mind me asking.... how did this samba regression happen?18:55
pipegeekerrgh, sorry for giving you strace of my brain18:55
pipegeekta ta18:55
jdongit seems to be a crash-on-start or crash-on-trivial-usecase18:55
jdongwas the update not verified on these two releases?18:56
Lutinis there a good reason not to sync fltk ? (just asking because a debian package that fixes the ubuntu changes was released a month ago, but didn't get synced)19:00
KmosLutin: http://packages.qa.debian.org/f/fltk.html -> this one? it's removed19:01
LutinKmos: fltk1.1 actually19:02
Kmosah :)19:02
cjwatsondajhorn: about 11 hours19:07
dajhorncjwatson: Ty.19:07
cjwatsonSEJeff: for the record you can always assume that 403 from security.u.c means "busted package, we're working on it"19:08
SEJeffcjwatson, ok. Just wanted to make sure someone was aware of it19:09
cjwatsonit is part of the procedure for dealing with such breakage and there is no other situation in which that happens19:09
cjwatson(short of wildly implausible bugs)19:09
SEJeffcjwatson, Isn't that what qa is for?19:09
cjwatsonSEJeff: of course, but there is always a need for a fallback19:09
cjwatsonSEJeff: by their nature, security updates cannot be QAed as widely as normal updates, and sometimes things go wrong; even then, sometimes things slip through the net19:10
SEJeffcjwatson, I figured Canonical had an automated testing suite. Not to dog on you or anything... but things like the xorg update debacle in Feisty are unacceptable for a distro this big.19:11
SEJeffKeep up the good work19:11
slangasekSEJeff: Samba upstream and Red Hat have the same bug in their security update19:11
jdongI made a comment on the bug report (bug #163042) about this...19:11
ubotuLaunchpad bug 163042 in samba "nmbd crashes after routine Dapper upgrade" [Critical,In progress] https://launchpad.net/bugs/16304219:11
jdongam I correct in understanding that on Dapper applying this patch results in Samba not starting at all?19:12
cjwatsonSEJeff: this procedure was put in place after the X update problems in Dapper (which I suspect may be what you mean)19:12
SEJeffcjwatson, yes. Ok good19:12
SEJeffGet the distros mixed up. Have played with it since Warty19:12
cjwatsonand in general we significantly tightened procedures after that19:12
cjwatsonone item slipping through the net does not mean that the procedures suck. obviously we review each failure to see how we could have avoided it19:13
slangasekSEJeff: for the issue that's affecting feisty and gutsy, that is; for the bug that's specific to dapper/edgy, that's our fault, but there's not much sense in making a fixed package available that fixes that problem without also fixing the smbfs problem, for which we're still waiting on upstream...19:13
SEJeffbugs are inevitable. It isn't anyone's fault as it is just part of the game.19:14
slangasekbugs may be inevitable on the whole, but that's not a reason for us to not take responsibility for them :)19:15
keescookjdong: no, it didn't show up in Dapper testing.  it takes a specific configuration.19:19
jdongkeescook: ah, ok, that's good to hear19:23
minghuajdong: May I poke you again for bug 160361?19:27
ubotuLaunchpad bug 160361 in gutsy-backports "Please backport scim-hangul 0.3.1-1ubuntu1 from hardy" [Undecided,New] https://launchpad.net/bugs/16036119:27
jdongminghua: ah sure lemme take a look at that19:41
jdongminghua: taken care of, sorry for the long delay19:41
minghuajdong: Thanks!19:42
=== norsetto_limbo is now known as norsetto
=== jpatrick_ is now known as jpatrick
Mezer, what the ****20:06
MezErr http://security.ubuntu.com gutsy-security/main libsmbclient 3.0.26a-1ubuntu2.120:06
Mez  403 Forbidden20:06
slangasekMez: a security update that was pulled due to an undetected regression; see above20:07
Mezslangasek, can't see above20:07
slangasekok, then see bug #163042 :)20:07
ubotuLaunchpad bug 163042 in samba "nmbd crashes after routine Dapper upgrade" [Critical,In progress] https://launchpad.net/bugs/16304220:07
cjwatsonMez: 403 from the archive always means "broken update, we are working on it, no need to tell us"20:07
Mezcjwatson, cool, thanks... not actually come across it before... but I guess thats caus eI usually run the dev versions :d20:08
Mezthink this is the longest I've stayed on the current release120:08
Mezo_O Hobbsee is part of ubuntu-archive?20:08
Mezuber :D20:08
=== cprov-lunch is now known as cprov-away
nenolodhi.20:32
nenolodoh, already reported.20:32
nenolod:P20:32
somerville32lol20:32
somerville32A lot of noise of this20:32
somerville32s/of/from20:34
emgentheya people :)20:50
puzzudpuzzud: Hey guys, it appears some samba files were uploaded/created today that I can not access... are the file permissions correct with:  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.26a-1ubuntu2.1_i386.deb  ?21:15
draremso i have glade and anujta, is that all i need for gtkmm or is there another recommended route to go?  I want to make cross-compatible applications (using the ftp lib stuff) and a nice gui21:15
cjwatsonpuzzud: the update was broken and has been withdrawn deliberately to avoid breaking more people's stable systems; a fix is being worked on21:16
draremin glade, how do you resize those controls??21:16
=== `23meg is now known as mgunes
puzzudcjwatson: do you think it will take long?21:27
cjwatsonpuzzud: I cannot give you a time estimate, but it's being worked on pretty hard21:27
cjwatsonpuzzud: the version you have is fine though; the security problem was "just" a denial of service and not believed to be exploitable, so don't panic21:27
=== puzzud changed the topic of #ubuntu-devel to: Archive: OPEN | Development of Ubuntu (not suppocation development on Ubuntu) | #ubuntu for support and general discussion for dapper/edgy/feisty/gutsy | #ubuntu-motu for getting involved in development | http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://wiki.ubuntu.com/HelpingWithBugs | Hardy opened, go wild!
puzzudo shit21:29
puzzudsorry21:29
keescookpuzzud: new versions should be available in about 3 hours, I'd guess.21:29
=== puzzud changed the topic of #ubuntu-devel to: The topic for #ubuntu-devel is: Archive: OPEN | Development of Ubuntu (not support, even with hardy; not application development on Ubuntu) | #ubuntu for support and general discussion for dapper/edgy/feisty/gutsy | #ubuntu-motu for getting involved in development | http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://wiki.ubuntu.com/HelpingWithBugs | Hardy opened, go wild!
puzzudthx keescook, my kubuntu system is now in a sort of mixed chaotic state with dependencies on the broken samba21:30
jdstrandpuzzud: updates have been uploaded and are currently building21:30
=== cjwatson changed the topic of #ubuntu-devel to: Archive: OPEN | Development of Ubuntu (not support, even with hardy; not application development on Ubuntu) | #ubuntu for support and general discussion for dapper/edgy/feisty/gutsy | #ubuntu-motu for getting involved in development | http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://wiki.ubuntu.com/HelpingWithBugs | Hardy opened, go wild!
Chipzzheh21:31
Chipzzis this normal?21:31
ChipzzFailed to fetch http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.26a-1ubuntu2.1_i386.deb  403 Forbidden21:31
ChipzzFailed to fetch http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.26a-1ubuntu2.1_i386.deb  403 Forbidden21:31
ChipzzFailed to fetch http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.26a-1ubuntu2.1_i386.deb  403 Forbidden21:31
puzzudChipzz: yea21:31
ChipzzFailed to fetch http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.26a-1ubuntu2.1_i386.deb  403 Forbidden21:31
puzzudChipzz: fixes are being worked on a broken update21:31
keescookpuzzud: you should be able to force downgrades   apt-get install samba=3.0.22-1ubuntu4.2 etc21:31
keescook(e.g. for edgy)21:31
cjwatsonChipzz: discussed about ten or fifteen lines above your question21:32
puzzudmaybe I should change the topic again and put the samba info in there ;)21:32
=== cjwatson changed the topic of #ubuntu-devel to: Archive: OPEN | samba security update is broken and deliberately 403 | Development of Ubuntu (not support, even with hardy; not application development on Ubuntu) | #ubuntu for support and general discussion for dapper/edgy/feisty/gutsy | #ubuntu-motu for getting involved in development | http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://wiki.ubuntu.com/HelpingWithBugs | Hardy opened, go wild!
=== cjwatson changed the topic of #ubuntu-devel to: Archive: OPEN | samba security update is broken and deliberately 403 | Development of Ubuntu (not support, even with hardy; not application development on Ubuntu) | #ubuntu for support and general discussion for dapper/edgy/feisty/gutsy | #ubuntu-motu for getting involved in development | http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://wiki.ubuntu.com/HelpingWithBugs | Hardy opened, go wild!
puzzudhehe21:33
Chipzzcjwatson: just outside of my what was visible on my screen apparently ;)21:33
cjwatsonwhen it's something that might be considered commonly visible, a little use of scrollback wouldn't go amiss21:34
* Chipzz pleeds guilty21:34
=== Martinp24 is now known as Martinp23
somerville32Wouldn't it be a good idea to put debootstrap for hardy in the ubuntu developer team PPA?22:04
somerville32That way instead of downloading it manually, developers can add it to their sources list and always have the most up to date copy22:05
jdongsomerville32: I could've sworn I backported debootstrap from hardy to gutsy already....22:08
LaserJockyeah, generally it's backported22:08
jdongdebootstrap | 1.0.7~gutsy1 | gutsy-backports | source, all22:09
somerville32I guess I did it before it was backported22:09
cjwatsonI also backported it to dapper+edgy+feisty this evening22:09
cjwatsonso people can pin it from -backports22:10
jdongawesome, thanks cjwatson :)22:12
LaserJockkeescook: are USNs sent out after a fix has been released?22:32
keescookLaserJock: yes -- there are some automated systems that expect to be able to download the mentioned files, etc.22:38
LaserJockkeescook: so is there any good way of seeing security TODO stuff for Universe at this time? without grubbing around a lot22:43
LaserJockFujitsu might know22:43
LaserJockkeescook: and is all security for Main apps handled by Canonical?22:44
FujitsuLaserJock: Hi. There's no easy way to see it, because LP is braindead. There's no way to search on a security flag, and no way to search a subscriber's bug list by component.22:48
LaserJockFujitsu: so there's really no way to have a list of CVEs for Universe?22:49
FujitsuYou can search a project/distro/distroseries for a subscriber's bugs by component, but then you need to perform 6 separate searches, and a number of the bugs will be displayed a large number of times, due to another LP bug.22:49
FujitsuLaserJock: You *can* search for bugs with CVEs linked, but that's not all of them.22:49
FujitsuAnd we haven't got anywhere near all of them filed... because LP's CVE tracking features are braindead.22:50
LaserJockhmm, that's a bit ... suboptimal :-)22:50
LaserJockwhat's done for Main?22:51
Fujitsuubuntu-security gets emailed about all security bugs, I guess.22:51
FujitsuBut non-Canonical people can't be on ubuntu-security, so we will never be emailed about universe bugs.22:51
LaserJockhmmm, again suboptimal for Universe22:52
LaserJockcan we get any data from Debian?22:52
FujitsuSlightly, yes.22:52
FujitsuThat's what I was working on last night.22:52
FujitsuI've attacked their security tracker so that it tracks feisty/gutsy/hardy too.22:53
LaserJockok22:53
FujitsuLaserJock: Wanting to help with getting universe slightly less completely insecure and dangerous?22:55
LaserJocknot sure yet22:56
LaserJockI'm actually more interested in some Main packages22:56
LaserJockbut maybe :-)22:56
sistpotyFujitsu: btw.: who can upload to security pockets for universe nowadays?22:57
Fujitsusistpoty: keescook.22:57
FujitsuAs well as jdstrand and infinity, I guess.22:57
sistpotyFujitsu: ah... does that hinder current security updates?22:57
FujitsuNot so much normally, but with UDS and AllHands there is a fairly large backlog.22:58
=== Martinp24 is now known as Martinp25
keescookLaserJock: I haven't found a good way to look a subscription AND universe package lists.  :(23:01
keescookLaserJock: Canonical is committed to fixing issues in main, but help is always appreciated.  :)  There is a lot of work to be done.23:02
LaserJockkeescook: but how does one help if they are a community dev?23:02
FujitsuLaserJock: Find a bug, attach a debdiff. Same as universe.23:03
keescookLaserJock: I'm hoping (next week if I can managed it) to publish the ubuntu CVE tracker in a more searchable form.  LP's handling of CVEs isn't quite ready for useful reports yet.23:03
FujitsuOr a lot of debdiffs, as we now have a lot of releases.23:03
LaserJockcan I see the bugs?23:03
FujitsuUnless they're embargoed.23:03
FujitsuWhich not many are.23:03
keescookLaserJock: as Fujitsu says.23:03
Fujitsukeescook: We have a CVE tracker?23:03
Kopfgeldjaegern823:03
FujitsuLP's is useless, and feature requests to make it useful have been open for 2.5 years.23:03
keescookFujitsu: here'23:04
keescookerk23:04
keescookLaserJock: here's the URL I use: http://tinyurl.com/2gjo2q23:04
keescookFujitsu: yeah, it's in a bzr tree: http://people.ubuntu.com/~pitti/bzr/ubuntu-cve/23:04
LaserJockkeescook: yikes, that's quite a list23:05
Fujitsukeescook: What do you think of trying to take some data from Debian's security-tracker?23:05
LaserJockobviously some are more important than others :-)23:05
FujitsuThey maintain a list of NFUs, etc, which would be nice to share.23:05
keescookFujitsu: we already try to share.  What I'm hoping to do is publish sort of a "merged view"23:05
Fujitsukeescook: I didn't know that existed.23:05
keescookkind of like MoM but for security updates.23:05
=== dwatson` is now known as dwatson
Fujitsukeescook: That would be really great. If you want any help, I'd be glad to, as it's probably better than hacking up the secure-testing code to do Ubuntu releases too.23:06
keescookFujitsu: right, my first step was to actually examine the secure-testing code.  I wanted to work as closely as possible to their svn, but it's not optimized for note-taking and lots of packages/releases.  The debian kernel-sec tracker's layout was better for that.23:08
keescookso I ended up modelling it after that.23:08
Fujitsukeescook: Is there another branch somewhere, or have you just not commited updates for a couple of months.23:10
Fujitsu*?23:10
keescookFujitsu: I think the working directory isn't being updated, but if you "bzr branch" from it, it should have very recent commits23:11
Fujitsukeescook: Ah, right, pushes don't update the working copy.23:12
keescookOne piece of code that didn't get finished in the re-arch is the changelog parser.  Then it can warn about or assist in closing CVEs where a changelog entry is found.23:12
Fujitsukeescook: Does it scan *-changes?23:12
keescookFujitsu: the prior code actually browsed the changelog tree on the archive, and spidered the Debian changelog URLs.  it's a bit heavy.  :P23:13
Fujitsu... ouch.23:14
FujitsuI guess it works if it runs in the DC, though.23:14
Amon_ReHey peeps23:15
* Amon_Re is looking for any good instructions on building .deb files23:15
FujitsuAmon_Re: -> #ubuntu-motu (see /topic)23:15
jpatrick!packaging > Amon_Re23:15
Amon_Rethx mates ;)23:16
Lutinkeescook: just wanted to make sure : do you have changes to dsniff planned (in hardy) ? otherwise, I'll request a sync23:16
keescookLutin: nothing from me, if the ubuntu changes are in Debian, yeah, for for a sync.23:17
Lutinkeescook: ok23:17
BurgundaviaLaserJock: you finished your PHD yet? Do we need to stage an intervention?23:41
* Fujitsu notes that this unstable/development release is actually unstable for him.23:44
cjwatsonkeescook: btw, I'll try to get to the openssh thing soon and get it fixed in hardy23:51
cjwatsonI'd rather do it by upgrading wholesale to 4.7 though23:51

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!