[00:03] true [00:05] unfortunately my new build donkey seems to be sick ... cc crashes during xul build :( [00:05] my guess is bad mem [00:16] i dont get why sbuild doesnt work oob [00:16] i think i had a good setup ... but then cc crashed :( [00:17] any particular place? not enough memory? [00:17] should be enough [00:17] 2G [00:18] for xul yes [00:18] yah. its not really production ;) [00:18] providing something else is not using it [00:18] want to try what i want [00:19] i think i had problems with APIC [00:19] had crashes in mkinitrd stuff [00:19] its now off [00:19] smells bad [00:20] yeah [00:20] lets see if pbuilder makes its way through [00:20] if not i give up and dump this shit ;) [00:21] (hardware) [00:21] ok lets see ... soon we'll know [00:23] oh, a new gcc 4.2 just arrived [00:26] gasp, no mouse [00:26] they upgraded udev [00:27] i guess i should not delay the reboot any longer [00:27] :( [00:38] grr, my eth interface jumped from eth0 to eth1 [00:43] hehe [00:43] NM would work then ;) [00:49] http://paste.ubuntu.com/103337/ :( [00:49] i think i have to do a memcheck or something [00:50] trying hardy pbuilder too [00:51] if it always dies at the same place, it may not be your memory [00:53] not the same place, but always in js/ so far ;) [00:53] so pretty quick [00:53] also thats intrepid [00:53] cant be that broken :) [00:55] asac, build with CC="gcc -v -save-temps" and pray ;) [00:55] prey [00:55] well [00:58] same place but on hardy [00:58] strange but certainly not cc fault then [00:58] * asac wonderes whether he enabled power-speed mode in bios by accident [00:59] too bad that there is no GPU in there now :( [01:01] bug 315916 [01:01] Launchpad bug 315916 in xft "Tabs and links lose antialiasing in Firefox" [Undecided,New] https://launchpad.net/bugs/315916 [01:10] ok off for now [01:26] http://ubuntuforums.org/showthread.php?t=1035355 [02:03] fta: is http://www.sofaraway.org/ubuntu/tmp/mozcentral-commits.png yours? that's mozilla-central commits per day? [02:03] dolske, yes, yes [02:03] interesting. [02:04] * dolske guesses the big spikes line up with the betas. :) [02:05] 2007-08-21 142 [02:05] 2007-11-06 140 === asac_ is now known as asac [05:43] Hi. Fixing a bug in an extension package, I found that line in install file: [05:43] debian/mozilla-noscript.js usr/share/iceweasel/greprefs/ [05:43] Should it be debian/mozilla-noscript.js usr/share/firefox/greprefs/ for us? [05:44] or with Firefox 3, it should go in another place? [08:27] Hello, is there a way to provide an alternate firefox homepage URL ? There used to be a firefox-homepage alternate in Hardy I think [10:34] fabrice_sp: is that a file the user wants to configure? [10:37] hmm latest ati driver somehow brought back "corruption" of tiled backgrounds when running XAA [10:37] this is the content of this file: pref("extensions.{73a6fe31-595d-460b-a920-fcc0f8843232}.update.enabled", false); [10:37] AnAnt: are you in hardy? [10:38] so it's a user configuration (no update of the plugin) [10:38] fabrice_sp: you can ignore that [10:38] (safely) [10:38] alternatively you can add that info to the install.rdf [10:38] fabrice_sp: its a global config probably previously used to prevent updates of the extension [10:38] ok. So I'll delete the installation and the link, then [10:39] thanks [10:40] fabrice_sp: is that extension also installed for iceape/seamonkey? [10:41] seamonkey, yes [10:41] asac, it's mozilla-noscript [10:42] fabrice_sp: you might want to keep it for that then ... but not for ffox [10:43] asac: no, intrepid [10:45] asac, this script in not used for iceape/seamonkey. Only for iceweasel (in this install file). [10:46] fyi, I'm working on bug #260955 [10:46] Launchpad bug 260955 in mozilla-noscript "noscript does not work for seamonkey" [Undecided,In progress] https://launchpad.net/bugs/260955 [10:48] and it's because at some point, a merger forgot to change iceape reference to seamonkey in links, postrm and postinst files [10:48] sorry reconnect [10:48] 11:48 < fabrice_sp> and it's because at some point, a merger forgot to change iceape reference to seamonkey in links, postrm and postinst files [10:49] 11:48 < asac> fabrice_sp: ok. i would suggest to drop it. its for ffox 2 anyway (judging from path) [10:49] yeah. i would suggest that you fix the saemonkey stuff and leave the rest alone then ;) [10:49] if you want you can cleanup stuff and remove all /usr/share/firefox/ /usr/lib/firefox/ stuff [10:50] but well [10:50] fabrice_sp: where is the extension installed to? [10:50] usr/share/mozilla-extensions [10:50] asac: no, I am using intrepid now [10:51] and links is done with usr/lib/firefox-addons so it sounds good [10:51] 11:46 < asac> AnAnt: then look at that file ;) [10:51] AnAnt: /usr/share/doc/ubufox/example-homepage.properties ... that is an example and explains how to enable the example [10:51] fabrice_sp: yeah. but where are the links installed to? [10:51] firefox-addons? [10:52] usr/lib/firefox-addons/extensions/{73a6fe31-595d-460b-a920-fcc0f8843232} [10:52] kk [10:52] so it's ok, right? [10:52] all fine then [10:52] fabrice_sp: are there still references to usr/lib/firefox/ ` [10:52] ? [10:52] e.g. links et al? [10:53] I haven't seen any, but I'll check again [10:53] no, none [10:54] jcastro: gwibber looses blogs when you send during reconnect (while being offiline) ... guess thats known? [10:54] fabrice_sp: yes its ok. just dont push anything to /usr/lib/firefox/... (e.g. like the greprefs thing) [10:54] ok [10:55] anyway, I will attach my debdiff to the bug report, so you will be able to verify it's ok [10:56] fabrice_sp: thanks. let us know when you attached so we can look more timely; also ask Jazzva for review too (in case i am not here) [10:57] ok. Thanks for your answer and your time! [10:57] welcome [10:57] *sigh* my connection feels shaky again [10:57] i *hate* my provider again [11:04] I have the same feeling... (at least one drop per hour... :-( ) [11:05] I've just subscribed mozillateam to Bug #260955, so it's up to you [11:05] Launchpad bug 260955 in mozilla-noscript "noscript does not work for seamonkey" [Undecided,Confirmed] https://launchpad.net/bugs/260955 [11:05] by the way, How to you succed in not loosing any comments? [11:05] in bug tracker? [11:07] no, in irc [11:07] when I get connection inestability, I loose 15 minutes each time [11:07] this reconnect was strange [11:08] it was really quick (e.g. i received a message in the same minute where my irssi reconnected) [11:08] usually it takes ~4min for irssi to reconnect [11:08] asac: I don't get it, how can that be an alternative that can be used by a package ? [11:08] but i notice it earlier [11:08] and /reconnect ;) [11:09] AnAnt: its not an alternative. its how you configure it as an admin [11:11] I really thought you knew some trick :-) [11:11] fabrice_sp: why does it take 15 minutes for you? [11:11] the physical reconnect takes 1 minute or less here [11:11] its just that irssi doesnt notice phyiscal connects and waits for timeouts [11:12] don't know: I'm using xchat, and I have gap of 15 minutes. [11:12] Sounds like some kind of itmeout to fix [11:12] fabrice_sp: dont you notice that you are disconnected? [11:12] cant you force xchat to reconnect? [11:13] asac: doesn't work [11:13] yes I can, but as I am doing other things, I almost never notice that I got disconnected [11:13] AnAnt: what doesnt work? [11:13] sorry for this OT :-) [11:13] yeah. then probably a timeout thing [11:13] no problem ;) [11:14] asac: oops, sorry [11:15] the example should work ;) [11:17] asac: ok, I done this, copied /etc/firefox-3.0/pref/ubufox.js to /etc/firefox-3.0/pref/my.js [11:17] asac: and I uncommented the pref("browser.startup.homepage...) line in my.js [11:17] but that didn't work [11:17] yeah [11:17] it worked when I uncommented it in ubufox.js [11:18] AnAnt: disable ubufox in tools -> addons ... restart; i guess your my.js is used then? [11:19] yup, that worked, but why ? [11:19] because ubufox overloads the homepage pref. so your pref isnt used [11:19] so what a package would have to do is somewhat ugly (the current system had admins in mind) [11:20] place a .js in /usr/share/ubufox/defaults/preferences/ [11:20] and ? [11:20] and in /usr/firefox-3.0/pref/my.js [11:21] take care that the link you place in /usr/share/ubufox/defaults/preferences/ is read first (lex ordered) [11:21] the aaa_* stuff is a hack that allows admins to configure stuff even though ubufox is installed [11:22] i dont really see why packages would want to set the homepage though [11:22] whats the use-case? [11:22] is that an extension= [11:22] ? [11:22] asac: nope, a distro based on Ubuntu [11:22] AnAnt: so you binary copy our files and just add new ones? [11:23] AnAnt: otherwise i would suggest to main ubufox downstream [11:23] its easy to track as all is in bzr. [11:23] so you just doa bzr merge ... [11:23] then add a new changelog entry on top and push that to your distro [11:23] s/main/maintain/ [11:24] hmmm [11:24] maintaining a diff for xul or firefox wouldnt be a good idea [11:24] too much work unless you have someone dedicated doing ffox/xul security updates [11:24] but ubufox should be simple and doesnt receive many stable -updates or even -security stuff [11:25] hmmm, I prefer that .js solution [11:25] soudns rogue [11:25] so I should place the my.js in /usr/share/ubufox/defaults/preferences/ ? [11:25] anyway [11:26] rogue=bad ? [11:26] AnAnt: yes, but name it 300$DISTRO_NAME-homepage.js in there [11:27] ok [11:27] its important that admins can still overrule that by editing the /etc/firefox-3.0/ preferences [11:27] AnAnt: ^^ [11:27] test that the example still works [11:27] if it does then all is fine [11:27] AnAnt: not really bad, but not really nice either ;) [11:29] you mean /etc/firefox-3.0/pref/firefox.js ? [11:30] AnAnt: like what the example says [11:30] if that example still works all is fine [11:30] ok [11:32] works ! [11:32] thanks [11:32] welcome ... [11:32] AnAnt: why is maintaining a diff of ubufox too much? [11:32] (just curious) [11:33] asac: because I am trying to make the distro in Ubuntu repos [11:34] AnAnt: what distro is that? [11:34] asac: ubuntume [11:34] what purpose? [11:34] e.g. focus? [11:35] it adds some software that muslims would need [11:36] i would suggest to take a different name. ubuntu is a trademark after all ;) [11:36] anyway. good [11:36] AnAnt: do you use GNOME? [11:36] asac: yup [11:37] AnAnt: do you change /etc/lsb-release or is there some other way to identify your distro at runtime? [11:38] no, I don't change /etc/lsb-release [11:38] except for the default artwork & installation, I don't think there's another way to identify distro at runtime [11:39] k [11:39] i think you should adjust lsb-release and file bugs if that causes issues [11:40] you should be able to use a different CODENAME at least [11:40] e.g. jaunty-me [11:41] what issues do you mean? [11:41] i would file bugs if i knew about issues [11:41] not sure. maybe some software relies on some value in there [11:41] but i hope not [11:41] rely==if its changed it breaks [11:44] asac: ok, how does ubufox does the following: when the machine is offline, it displays a local homepage [11:45] AnAnt: it has a startpage that tries to get the homepage and if it doesnt succeed in a few seconds it forces local page [11:48] in /usr/share/ubufox/chrome/ubufox.jar ? [11:50] aha, found it [11:52] AnAnt: i would suggest to use the bzr branch [11:55] and maiintain your own ubufox [11:55] use a different name [11:55] OTOH i could understand if you dont want to put work into that [11:55] if ubufox needs more hooks or features let me know ;) [11:58] grrrr [11:58] reconnect again ;) [11:58] 12:50 < AnAnt> aha, found it [11:59] 12:52 < asac> AnAnt: i would suggest to use the bzr branch [11:59] 12:53 < asac> and maiintain your own ubufox [11:59] 12:53 < asac> use a different name [11:59] 12:54 < asac> OTOH i could understand if you dont want to put work into that [11:59] 12:54 < asac> if ubufox needs more hooks or features let me know ;) [12:01] yeah, I got those , thanks [12:21] asac: this startpage.html doesn't work except from inside a jar file ? [12:46] asac: I tried to make a start page similar to ubufox's startpage.html [12:47] I got this when I load it though: Permission denied to get property XPCComponents.classes [12:48] sec [12:49] AnAnt: it needs to be chrome [12:49] so in jar would help [12:52] amazing [12:53] 64 bytes from fx-in-f104.google.com (74.125.39.104): icmp_seq=3 ttl=244 time=5460 ms [12:53] massive provider suckage === rZr is now known as RzR [13:03] @time [13:03] Current time in Etc/UTC: January 11 2009, 13:03:16 - Next meeting: Server Team in 2 days [13:04] asac: ok, how does chrome://ubufox point to /usr/share/ubufox/chrome/ubufox.jar ? [13:04] fta: http://identi.ca/notice/1775229 [13:04] AnAnt: what do you want to change? [13:05] asac: I want to make a chrome://ubuntume for example [13:05] brb [13:05] AnAnt: you need to main your own ubufox then ;) ... thats what i am telling you [13:05] i am gone now for a while too ;) (3 hours i guess) [13:09] AnAnt: ls -l /usr/share/ubuntu-artwork/home/index.html [13:09] lrwxrwxrwx 1 root root 34 2008-03-13 18:21 /usr/share/ubuntu-artwork/home/index.html -> /etc/alternatives/firefox-homepage [13:10] so seems like it uses the firefox-homepage alternative for the OFFLINE page still [13:10] give it a try [13:29] asac: I tried that alternative,but it doesn't work [13:31] asac: how is xulrunner coming along? :) [13:32] AnAnt: ls -l /usr/share/ubuntu-artwork/home/locales [13:32] lrwxrwxrwx 1 root root 42 2008-03-13 18:21 /usr/share/ubuntu-artwork/home/locales -> /etc/alternatives/firefox-homepage-locales [13:32] you need that i think [13:33] asac: would that work even if ubufox is in use ? [13:33] AnAnt: thats used for OFFLINE case [13:34] AnAnt: online case is still as discussed before [13:34] if a locale is not found it will fall back to the other alternative [13:35] AnAnt: thats the code that figures the offline page: http://paste.ubuntu.com/103520/ [13:35] yes, I saw it in startpage.html [13:36] but I don't think that the firefox-homepage is used anymore [13:36] it used to work for a while, until ubufox was here [13:37] what I see, is that homepage is set to startpage.html [13:37] and startpage.html contains the URLs for both ONLINE & OFFLINE pages [13:37] hence there is no use for firefox-homepage nor firefox-homepage-locales [13:39] AnAnt: its used as the final fallback [13:39] e.g. not ONLINE + locale doesnt exist in /etc/alternatives/firefox-homepage-locales pointed directory [13:39] if both happen the firefox-homepage is used [13:39] AnAnt: OFFLINE page points to /usr/share/ubuntu-artwork/home/locales ... if you want to put something else there you can repoint that [13:40] otherwise you need to fork ubuntu-docs package i guess [13:41] I see [13:43] asac, http://ubuntuforums.org/showthread.php?t=1030693 [13:47] fta: asked something [13:56] asac: seen http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0071 yet? [14:28] asac, http://identi.ca/fta [15:56] asac: I don't think that's a known bug (the gwibber one), can you report it? [16:06] jcastro, is there a doc for the syntax of messages? I'm new to this so i'm not sure how to refer to people, tags, add urls, etc.. [16:07] fta: yeah, people are @name and tags are #tags. [16:07] that's about it [16:08] jcastro, and url? [16:08] you just dump them in there [16:08] there is a preference for autoshortening them [16:08] you probably want that enabled [16:09] fta: I follow a bunch of OSS people if you want to start off with a list: http://identi.ca/jorge [16:12] jcastro, yep, saw that, 340+ subscriptions! aren't you flooded by messages? [16:12] I kinda keep gwibber on the end of a 2nd monitor, so I don't really pay attention to each message, I let it just flow by [16:12] once in a while I check the replies to see if someone is messaging me directly [16:13] people ebb and flow with posting though so it's not so bad === fabrice_sp_ is now known as fabrice_sp [16:48] jcastro, would be nice if Gwibber was able to register itself in the gnome session so it starts automatically on login [16:53] yeah that would be nice [16:53] ryan is always busy with stuff though, it only recently got translations and things like that [16:53] but it's coming along [17:08] fta: cool ... cany ou use #ubuntumozilla for mozillateam stuff? [17:08] hopefully we can assemble some kind of report for team more easily from that :) [17:09] jcastro: to start it in session is just a .desktop file [17:09] jcastro: you could do that ;) [17:10] jcastro: look at /etc/xdg/autostart/nm-applet.desktop [17:10] ship something similar for gwibber in package and ask upstream to do that on make install too ;) [17:11] cool, liferea should do that too [17:11] maybe xchat too [17:12] fta: yep. [17:12] fta: i think it can be disbled by default ... in that way users can just enable it by flagging it in preferences -> sessions [17:13] so it should definitlyb e shipped ... whether enabled/or disabled by default depends on whether users start complaining ;) [17:14] @time [17:14] Current time in Etc/UTC: January 11 2009, 17:14:21 - Next meeting: Server Team in 1 day [17:14] (still here?) [17:14] thanks ubottu [17:15] my ping topped 4 seconds now [17:15] again [17:15] not sure if a router reset will help ... alredy did that 10 hours ago :( [17:24] * asac resets all net stuff again :( [17:26] asac, jcastro, my gwibber is broken, i keep getting http errors 401: unauthorized. any idea? [17:26] started about 1 hour ago [17:27] hm, maybe my refresh time is too fast [17:28] asac, X-GNOME-Autostart-enabled=false === cwillu_ is now known as cwillu [17:42] hmm ... net seems a bit better now [17:42] lets see how long that last [17:42] s [17:48] asac_: how is xulrunner coming? Do you need anything? :) === asac_ is now known as asac [18:05] white: whats the currently released version? [18:05] h? [18:06] seems so [18:07] asac: 1.8.0.15~pre080614h-0etch1 [18:19] fta: http://ubuntuforums.org/showpost.php?p=6533954&postcount=5 [18:20] regression ;) [18:20] xmaintainers probably blindly dropped the patch i added in hardy (or was it intrepid?) [18:20] i think hardy even [18:21] i dont understand why they think that Xaa is now fixed ;) [18:22] this must have been done without much thinking ;) [18:28] seems the offscreen patch became a victim of a patch cleanup [18:28] seems they thought it was irrelevant [18:29] wow [18:29] seems like the xaa issue was fixed in debian before we found how to fix it ... we just didnt ship the patch [18:29] now it was dropped again ... let me check whether its in debian or something [18:30] !info xorg-server [18:30] Package xorg-server does not exist in intrepid [18:30] !source xorg-server [18:30] Error: I am only a bot, please don't think I'm intelligent :) [18:30] !source xserver-xorg-dev [18:30] Error: I am only a bot, please don't think I'm intelligent :) [18:30] !info xserver-xorg-dev [18:30] xserver-xorg-dev (source: xorg-server): Xorg X server - development files. In component main, is optional. Version 2:1.5.2-2ubuntu3 (intrepid), package size 818 kB, installed size 2212 kB [18:30] !info xserver-xorg [18:30] xserver-xorg (source: xorg): the X.Org X server. In component main, is optional. Version 1:7.4~5ubuntu3 (intrepid), package size 189 kB, installed size 648 kB [18:30] launchpad doesnt know about the package :( [18:30] there is a source package xorg-server [18:31] but launchpad lies [18:31] n [18:31] and doesnt show it for whatever reason [18:31] Source: xorg-server [18:31] Section: x11 [18:31] Priority: optional [18:31] !info xorg [18:31] xorg (source: xorg): X.Org X Window System. In component main, is optional. Version 1:7.4~5ubuntu3 (intrepid), package size 1 kB, installed size 24 kB [18:31] xorg-server (2:1.5.99.3-0ubuntu4) jaunty; urgency=low [18:31] * 155_dix-don-t-set-the-child-window-for-non-virtual-Enter-Leave-events.patch [18:31] + Fixes issue where mouse cursor in Firefox blinks when hovering over URLs. [18:31] fta: its not xorg ;) [18:31] see above ;) [18:31] its definitly its own package [18:31] ha ;) [18:31] i always mistyped [18:31] https://bugs.edge.launchpad.net/ubuntu/+source/xorg-server [18:32] so it was killed in intrepid [18:32] 2:1.4.99.905-0ubuntu1 [18:32] seems rightfully as i didnt have the regression there [18:32] and now upstream somehow flipped this option back [18:33] what a mess [18:33] looked at source ... they are again using XaaNoOffscreenPixmaps instead of XaaOffscreenPixmaps (which was the new one used) [18:34] The following packages will be upgraded: libnspr4-0d libnss3-0d libnss3-1d libnss3-tools watershed <=== lol [18:35] hehe [18:35] yeah [18:35] any problems? [18:35] ;) [18:35] i wait a bit for this to digest and then push all rdepends. if you want to take the universe ones let me know ;) [18:36] why 3.12.2~rc1 ? is it still rc1 after so many months? [18:36] not sure ... thats what i have here ;) [18:36] we can go on from there [18:37] nss-3.12.tar.gz17-Jun-2008 17:36 NickServ 4.9M [18:38] there is no 3.12.2 @ http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ [18:38] i will ask kaie [18:38] tomorr [18:38] (if i remember) [18:39] http://paste.ubuntu.com/103603/ [18:39] so seems like [18:39] no RTM there [18:39] probably they undergo some certifications and want to wait until they get thumbs up from there [18:48] bug 316136 [18:48] Launchpad bug 316136 in xorg-server "Xaa Offscreen Pixmaps regression" [High,Triaged] https://launchpad.net/bugs/316136 [18:54] good stuff ... so nspr is built everywhere [18:54] now lets wait till nss catches those armel and ia64 bits and then the rest can be done without bumping build-depends lower bounds i guess [19:13] asac, no problem with ff3.2 after the upgrade [19:13] cool [19:13] though i think you already have that transition in your ppa ;) [19:13] dont you? [19:13] fta: check with ldd on firefox wehther it points to the versioned or not versioned nss/nspr [19:14] yep [19:14] yeah still. i think all is fine [19:14] i am using a bunch of stuff from the archive and had nss installed for quite a while [19:14] never had any issue [19:15] http://paste.ubuntu.com/103617/ [19:16] fta: lsof is for sure [19:16] ldd is what i wonder abvout [19:16] or make objdump -x /path/to/libxul.so | grep REQUIRE [19:16] err NEEDED [19:16] maybe you have xul 1.9.0.5 from the archive? you should see the versioned stuff there [19:16] objdump -x /usr/lib/xulrunner-1.9.0.5/libxul.so | grep libnspr NEEDED libnspr4.so.0d [19:17] but objdump -x /usr/lib/xulrunner-1.9.1b2/libxul.so | grep libnsp NEEDED libnspr4.so [19:17] fta@ix:~ $ ldd /usr/lib/xulrunner-1.9.2a1pre/libxul.so | grep nss [19:17] libnss3.so => /usr/lib/libnss3.so (0xb71ae000) [19:17] libnssutil3.so => /usr/lib/libnssutil3.so (0xb7196000) [19:17] yeah 1.9.2 only exists in your archive ;) [19:17] NEEDED probably points to unversioned SONAME too [19:18] and i use ffox 3.0 all the time ... so seems fine [19:18] but it was build with an nss with a soname [19:18] objdump -x /usr/lib/xulrunner-1.9.0.5/libxul.so | grep libnss NEEDED libnss3.so.1d NEEDED libnssutil3.so.1d required from libnssutil3.so.1d: required from libnss3.so.1d: [19:18] fta: which 1.9.2? i doubt it [19:18] you have that build in your ppa for quite some time [19:18] good sign that you didnt notice ;) [19:19] means it is a perfect transition ;) (so far) [19:19] i reverted the nss change a while ago [19:19] you just re-added it [19:19] no [19:19] it was in bzr for ages ;) [19:19] i only baked a release today [19:21] it was in bzr but i didn't update it in my ppa since you re-added it [19:25] fta: i remember that i asked you to update it [19:25] and you did it [19:25] fta: http://launchpadlibrarian.net/20032831/nspr_4.7.3-0ubuntu1~fta1_4.7.3-0ubuntu1~fta2.diff.gz [19:26] http://launchpadlibrarian.net/20033108/nss_3.12.2~rc1-0ubuntu1~fta1_3.12.2~rc1-0ubuntu1~fta2.diff.gz [19:26] those are definitl the builds with dropped soname patch [19:27] but given that that was end of november i guess it can easily be forgotten ;) [19:27] i wonder if anyone would risk to upgrade xulrunner from gutsy to latest :/ [19:28] that would be ~15 releases at once [19:28] https://edge.launchpad.net/ubuntu/+source/xulrunner [19:28] !info xulrunner [19:28] xulrunner (source: xulrunner): XUL + XPCOM application runner. In component universe, is optional. Version 1.8.1.16+nobinonly-0ubuntu1 (intrepid), package size 279 kB, installed size 1020 kB [19:28] !info xulrunner gutsy [19:28] xulrunner (source: xulrunner): XUL + XPCOM application runner. In component universe, is optional. Version 1.8.1.4-2ubuntu5 (gutsy), package size 273 kB, installed size 980 kB [19:28] * RELEASE 3.12.2~rc1-0ubuntu1~fta2 to jaunty/ppa [19:28] - merge with nss.head #89 [19:28] so you're right [19:28] yeah ;) [19:28] what matters is that now it has happened in real archive ;) [19:30] hmm why is it still in jaunty? [19:30] !info xulrunner jaunty [19:30] xulrunner (source: xulrunner): XUL + XPCOM application runner. In component universe, is optional. Version 1.8.1.16+nobinonly-0ubuntu1 (jaunty), package size 279 kB, installed size 1020 kB [19:30] !info-rdepends xulrunner jaunty ;) [19:30] xulrunner is not a valid distribution ['dapper', 'gutsy', 'gutsy-backports', 'hardy', 'hardy-backports', 'intrepid', 'intrepid-backports', 'jaunty', 'jaunty-backports', 'kde4-ppa', 'kubuntu-members-kde4', 'medibuntu', 'partner'] [19:31] hmm eclipse [19:31] libmozillainterfaces-java [19:32] !info libmozillainterfaces-java [19:32] libmozillainterfaces-java (source: xulrunner): XPCOM bindings for Java. In component universe, is extra. Version 1.8.1.16+nobinonly-0ubuntu1 (intrepid), package size 1299 kB, installed size 1692 kB [19:32] ok thats from xulrunner [19:32] !info libswt3.2-gtk-jni [19:32] libswt3.2-gtk-jni (source: eclipse): Platform dependent files for libswt3.2-gtk-java. In component universe, is optional. Version 3.2.2-5ubuntu2 (intrepid), package size 206 kB, installed size 828 kB [19:32] damn mobile-basic-flash still isnt built against xul 1.9 [19:32] !info libswt3.2-gtk-jni [19:32] libswt3.2-gtk-jni (source: eclipse): Platform dependent files for libswt3.2-gtk-java. In component universe, is optional. Version 3.2.2-5ubuntu2 (intrepid), package size 206 kB, installed size 828 kB [19:32] !info mobile-basic-flash [19:32] mobile-basic-flash (source: mobile-basic-flash): Home applet for Hildon. In component universe, is extra. Version 0.44-0ubuntu1 (intrepid), package size 769 kB, installed size 1020 kB [19:33] !info libjdic-bin [19:33] libjdic-bin (source: libjdic-java): JDesktop Integration Components. In component multiverse, is optional. Version 0.0.20060613-8ubuntu2 (intrepid), package size 52 kB, installed size 180 kB [20:07] white: xul upload started. can you please check evolution if you have a native etch install? testing secure connections would be good [20:07] will probably take 30 minutes or more to upload ;) [20:07] so be patient [20:12] asac: i'll start testing with democracyplayer :) [20:12] white: the more you test the better [20:13] white: main prob with evo is that it cannot be run in my chroot here [20:13] probably some dbus issues [20:13] native install or VM helps for evo testing [20:31] white: Successfully uploaded packages. [20:31] Not running dinstall. [20:33] asac: cheers [21:05] asac, why is our python-xpcom still using 1.8.1 and not 1.9++ ? [21:09] asac: http://security-tracker.debian.net/tracker/status/release/stable shows other CVEs supposedly unfixed but affecting current xulrunner. Did you have a look through them? [21:25] jcastro, do you know if debian has an openkomodo package somewhere? I just see a RFP [21:29] I can't find anything fta [21:29] asac, oh, python-xpcom is part of xulrunner. damn, we should add it too [21:29] jcastro, ok, thanks. [21:34] jcastro, i may give it a try, if i have enough time and stamina to fix our python xpcom [21:36] heh [21:37] so hey, I think this microblogging thing is a good way to let people know what's going on [21:38] jcastro, i don't want to announce things there before i even start working on them [21:39] jcastro, and btw, my gwibber is still broken, unusable :( [21:42] what happened? [21:42] no idea [21:43] does it spit anything out to the console? [21:43] yes, HTTPError: HTTP Error 401: Unauthorized [21:43] I posted once, no problem, got a few lines from others, then it broke [21:44] k [21:44] I'll ask him [21:44] let me know if it resolves itself, I get those sometimes from identica [21:45] it's been like that for 5h+ [21:45] :-/ [21:46] the web is ok so my login is not blocked [21:47] ok [21:47] asking [21:50] fta: is that in the error window or on the console? (that error message) [21:50] console [21:51] nothing in the main window [21:51] i mean, it's in the Error window [21:51] i also get a Sign at the bottom right of the main window [21:52] nothing in the shell/terminal [21:53] double click the item in the error window [21:54] fta: I am stepping out for a bit, bbl [21:54] jcastro, http://paste.ubuntu.com/103656/ [21:56] jcastro, from the network: http://paste.ubuntu.com/103659/ [22:02] oh oh [22:02] you need to make an account on identica [22:02] you can't use the api with openid iirc [22:04] eh? how come it worked for a couple of hours then? and btw, I have an account on identica, that's what i put in gwibber [22:05] I checked the Authorization: Basic stuff, it's the right one [23:22] white: CVE-2007-3074 fixed in 1.8.0.12 [23:22] CVE-2007-3144 - no clue ... probably a mitre thing. whats the firefox status for this? [23:23] CVE-2007-3827 - same here [23:23] CVE-2008-0420 - fixed1.8.0.15 (see bug) [23:25] CVE-2008-4063 - firefox 3/xulrunner 1.9 only part of the mfsa-2008-42 -> not affected [23:26] CVE-2008-4064 - same here [23:27] CVE-2008-5019 - browser only thing (session restore) -> not affected [23:28] CVE-2008-5504 - code is only on 1.8.1 branch or above -> not affected [23:29] asac: you are really handy, did I ever say that? :) [23:29] i need to ship a better automation.py than the one in _test/ which is not meant to be used outside of the build tree :( [23:30] CVE-2008-5510 - thats mfsa2008-67 ... its the one not backported in this patchset -> pleas kick me to backport it regularly [23:31] white: isnt 451680 in the patchset? [23:32] asac: i was just pointing you to the tracker, it includes the iussues handled in this round as well [23:32] so the 5512 one is 370461 and 453310 [23:32] so don't take it as a list of missing items :) [23:32] white: yes. i left those out that are in changelog [23:32] so i think 5512 is fixed too [23:32] in xulrunner [23:32] oh dump me ;) [23:32] its already in there [23:33] so CVE-2008-5511 is the question here ;) [23:33] lets see [23:33] asac: if CVE-2008-0420 was already fixed in a previous DSA, shouldn't I be able to find it in a changelog entry? [23:33] yes [23:33] its fixed [23:33] (5512 that is) [23:34] white: not sure. there might be glitches. its one of those bugs that have been fixed in CVS even [23:34] so its not in the patchset anymore [23:34] could be that CVE id changed ... you never know ;) [23:34] asac: CVE ids don't change :) [23:35] they do [23:35] asac: i am just wondering what I can write in the tracker :) [23:35] well ... they might have issued a new one [23:35] and found that there exists an older one [23:35] asac: they rarely get adjusted, but once a CVE is given it stays. If it is a wrong issue, it get's rejected [23:35] i think mitre is finally smart enough to not go through bugzilla anymore and assign random IDs to issues they dont understand ;) [23:35] asac: yeah that happens [23:35] but they did ;) [23:36] i agree that in case of such large packages like mozilla stuff it gets very confusing :/ [23:36] asac: that's why i'm happy to have an active developer there ;) [23:37] not sure why we left out mfsa 2008-07 [23:37] we have -06 and -08 [23:37] the code seems to apply [23:40] anyway, our CVS snapshot is 080614 ... and this was committed in march [23:40] so all in ther [23:40] white: i thinks thats all [23:40] so one CVE still open [23:40] in future you should really not add something there that doesnt have a MFSA ;) [23:40] i mean documented ;) [23:43] asac: so for CVE-2008-0420 I'll just write that it doesn't affect etch, because it was fixed in the standard etch version? [23:43] asac: or was it silently fixed in the last DSA? [23:44] white: no let me check ;) [23:45] it was definitly fixed in 1.8.0.15~pre080323b-0etch1 (because snapshot was taken 23rd march and commit happend on 12th) [23:46] but more likely it was fixed in the release where it belongs to: [23:46] 1.8.0.15~pre080131b-0etch1 [23:46] (-06 and -08 are in there) [23:46] but i cannot tell without looking at that package (and i dont have it i think) [23:49] white: ok [23:49] so as i said: [23:49] moz-1.8.1.12-backports$ ls *408* [23:49] 0039_408256-attachment-293003.patch [23:50] thats http://people.ubuntu.com/~asac/mozilla-security/1.8.1.12/moz-1.8.1.12b-backports.tar.gz [23:50] which is 1.8.0.15~pre080131b-0etch1 [23:50] (aka the release when mfsa-2008-07 was disclosed) [23:50] so this was also a perfect fix ;) [23:50] hehe [23:51] https://bugzilla.mozilla.org/show_bug.cgi?id=408076 -> fixed by https://bugzilla.mozilla.org/show_bug.cgi?id=408256 ;) (a bit confusing) [23:51] Mozilla bug 408076 in ImageLib "out of bounds read in BMP decoder can lead to information disclosure" [Critical,Resolved: fixed] [23:51] asac: so i'll leave CVE-2007-3144 and CVE-2007-3827 for now, right? [23:52] white: CVEs that dont even have a mozilla bug are bogus and should be marked invalid [23:52] CVE-2007-3144 -> invalid [23:53] CVE-2007-3827 -> invalid ;) [23:53] i can ask josh to get that done [23:59] asac: CVE-2007-3827 has https://bugzilla.mozilla.org/show_bug.cgi?id=388097 as a reference [23:59] Mozilla bug 388097 in Networking: Cookies "null-domain cookies possible (malicious cookie swapping)" [Minor,New] [23:59] just to let you know :)