perl-DBD-MySQL-2.9007-1.src.rpm rebuild
by Gavin Henry
Dear guys,
I know I should be doing this, but I am rebuilding
perl-DBD-MySQL-2.9007-1.src.rpm on RHEL3, and I get a failure:
RPM build errors:
File must begin with "/": %{perl_vendorarch}/Bundle/
File must begin with "/": %{perl_vendorarch}/DBD/
File must begin with "/": %{perl_vendorarch}/Mysql*
File must begin with "/": %{perl_vendorarch}/auto/DBD
I am sure it is something easy, but can't figure it out.
Thanks.
It's for mysql 4.1 which I have rebuilt on RHEL3 from FC4 srpms.
I know, I know.
Thanks.
--
Kind Regards,
Gavin Henry.
Open Source. Open Solutions(tm).
http://www.suretecsystems.com/
18 years, 10 months
Bad Mirror (mirrors.kernel.org)
by Tyler Larson
I'm getting bad FC4 ISO files from mirrors.kernel.org (via HTTP).
Furthermore, I'm consistently getting the *same* bad ISOs, no matter how
I download it and which client-side computer I download using. Here's
the MD5s of what I get:
00f145389547055096c78ca2fb90d1a2 FC4-i386-disc1.iso
7d5007fbefa0a837471db1c2670be6ac FC4-i386-disc2.iso
7ece895928968de9ff6bf94119b353f4 FC4-i386-disc3.iso
1e4ce0f786abf85f16eee27ceb7260d4 FC4-i386-disc4.iso
Does anyone know the cause of this inconsistency? Is it limited to just
this one mirror, or is this a more widespread problem?
18 years, 10 months
Re: gnome-vfs not in Rawhide?
by Rahul Sundaram
Hi
> That's fine, but how does the user know this? "yum
> install gtk1" is a very
> UNIXy sort of command for an end user desktop, isn't
> it?
>
> thanks -mike
that might very well be resolved through pup for fc4.
The question is what kind of error messages do you get
from the loki installers if gtk1 is not installed on
the system already.
Regards
Rahul Sundaram
__________________________________
Yahoo! Messenger
Show us what our next emoticon should look like. Join the fun.
http://www.advision.webevents.yahoo.com/emoticontest
18 years, 10 months
Updated RULE installer for FC3
by M. Fioretti
Greetings,
due to several problems with the server LAMP setup, the RULE website
is *NOT* accessible these days. However, thanks to F. Zahaurek, there
is a new version of the slinky installer for FC3.
The main characteristics are explained here:
http://www.fzk.at/SLINKY/
but please download all the corresponding files from this folder, to
not overload Franz's server:
http://www.rule-project.org/download/fedora_core_3/slinky/slinky-v0.5.01
Any feedback is welcome.
Ciao,
Marco F.
--
Marco Fioretti mfioretti, at the server mclink.it
Fedora Core 3 for low memory http://www.rule-project.org/
If development calls for an ever-growing number of technical experts,
even more necessary still is the deep thought and reflection of wise
men in search of a new humanism, one which will enable our
contemporaries to enjoy the higher values of love and friendship...
Paul VI, POPULORUM PROGRESSIO
18 years, 10 months
Re: OT: nVidia driver -- everything but open source is slavery?
by Bryan Smith
Rui Miguel Seabra wrote:
> Under a certain light yes, why should one _have_ to work for a living?
> I'd rather have time to program Free Software :)
But it is still work -- it is an effort that produces something.
Whether you pay for it or work to create it, it's the same balance.
Freedom isn't free, you pay for it differently than in another way.
> I'm entitled to freedom. Signing my soul away isn't freedom, is
> accepting subjugation to power.
Here we go again, the absolutisms ... "signing my soul away"
I am waiting *1* person to tell me how I'm signing my soul away by
using _open_standard_ drivers with an example other than their past
experience with _proprietary_standard_ drivers which is wholly
inapplicable. The problem is that by not differentiating, you are
making it a 2-choice, 1-dimension issue which it is not.
> I don't mind paying, I'm not talking about software obtained for gratis.
> Hell, I wouldn't mind paying another 100€ for Free Software drivers for
> the GeForce2MX that I don't have anymore instead of having payed another
> 150€ for an Ati Radeon 7500 that has Free Software drivers.
But once you have them, there there go be no restriction on your
distribution. Basic economies. Free Software drivers wouldn't cost the
same "per unit" cost, but "per open license." I.e., instead of $100
distributed amongst 10,000 people, it's a _flat_ $1M!
This basic fact of microeconomics seems to elude so many people in the
open source world. Of all people, I would assume those on Red Hat's list
would understand the difficulty in competing in an industry where you
have to compete with a competitors per-unit cost of ~$100, in volumes of
the millions when you don't sell even 1/100th of that. ;-ppp
> Everyone is entitled to freedom. Choosing convenience in spite of
> freedom is absurd, advocating this kind of choice is immoral.
What is one man's convenience is another man's necessity. Who are you
to dictate what you see as a convenience but others is a necessity as
an "immoral" choice to make? That is the kind of non-sense that leads
right down to "force community" and radical ideas.
Choice, based on _individual_ perspective. You can_not_ assert what is
better for someone else -- that is very, very, very _dangerous_!
Now I've shown that my so-called "immoral" selection is _not_ slavery
because I am deploying an open _standard_ solution that can be replaced
by an open _source_ solution if the former option is no longer
available. What you view as "convenience" others view as "necessity,"
and some would have gone to Windows Hostageware had it not been for
nVidia's Standardware (libGL/GLX) solution on Linux.
Furthermore, I'm still waiting for *1* example of how I am "enslaved"
by temporarily choosing an open _standards_ solution in lieu of a
feasible open _source_ solution. No more _proprietary_standard_
examples, I would like to see some _real_ examples.
Otherwise, I think I've made my point enough. I became active again
on this list to work on the init for FC5, not get into this mess.
--
Bryan J. Smith b.j.smith(a)ieee.org
---------------------------------------------------------------------
It is mathematically impossible for someone who makes more than you
to be anything but richer than you. Any tax rate that penalizes them
will also penalize you similarly (to those below you, and then below
them). Linear algebra, let alone differential calculus or even ele-
mentary concepts of limits, is mutually exclusive with US journalism.
So forget even attempting to explain how tax cuts work. ;->
18 years, 10 months
Summary of FC4 vulnerabilities
by Mark Cox
Quick Summary:
For 20030101-20050607 there are a potential 863 CVE named vulnerabilities that
could have affected FC4 packages. 759 (88%) of those are fixed because FC4
includes an upstream version that includes a fix, 10 (1%) are still
outstanding, and 94 (11%) are fixed with a backported patch.
Method:
Near the release time of each new distribution the Red Hat security team go
through the packages to ensure that everything is up to date with security
patches.
The method used changed slightly from previous releases, this time for
completeness:
1. we went through each CVE name for 2003, 2004, and 2005 (up to date as of
20050612) ignoring those that didn't affect Linux or were in packages not in
FC4.
2. Then for each CVE issue left we look to see which upstream version (if any)
the vulnerability is fixed in. Sometimes the CVE data gives us this
information, but many times it doesn't or it's wrong and we have to investigate
for ourselves which upstream verisons fix the issues (and we've reported our
many investigations to Mitre for updates to the CVE entries). If we write "at
least" we mean that we looked inside the source for that version and checked to
see if the fix existed, but it may well have been fixed upstream prior to that
version.
3. Where FC4 contains a upstream version greater or equal to the upstream
version containing a fix, we mark it as not vulnerable due to "version".
4. Remaining CVE names are checked to see if FC4 contains a backported patch in
the package. We trust changelog entries (since these will have already been
audited us by use when FC3/2/1 or a RHEL advisory came out).
5. For anything that looked like it wasn't fixed we talked to the package owner
to get a fix into FC4 final
So this table gives the CVE name, the reason why FC4 isn't vulnerable and
optional comments showing the package name, version it was fixed in, or method
used to verify the details.
This is based on FC4 gold. Corrections or missed issues (ones showing in CVE)
appreciated to secalert(a)redhat.com. We'll keep this up to date - probably on
the wiki or somewhere.
[content chopped; just over 40kb limit. Full message at
http://people.redhat.com/mjc/20050505-fc4
]
18 years, 10 months
rawhide report: 20050610 changes
by Build System
New package javacc
A parser/scanner generator for java
Updated Packages:
ImageMagick-6.2.2.0-4
---------------------
* Thu Jun 09 2005 Tim Waugh <twaugh(a)redhat.com> 6.2.2.0-4
- Rebuilt for fixed ghostscript.
arptables_jf-0:0.0.8-5
----------------------
* Thu Jun 09 2005 Jay Fenlason <fenlason(a)redhat.com> 0.0.8-5
- add -man patch to correct the names of the default tables.
bz#123089 aptables man pages is not correct: built in chain name are wrong.
* Tue Mar 08 2005 Jay Fenlason <fenlason(a)redhat.com> 0.0.8-4
- rebuilt with gcc4
* Fri Nov 26 2004 Florian La Roche <laroche(a)redhat.com>
- add a %clean target into .spec
audit-0.9.3-1
-------------
* Thu Jun 09 2005 Steve Grubb <sgrubb(a)redhat.com> 0.9.3-1
- Change filename handling to use linked list in ausearch
- Add man pages for audit_setloginuid & audit_getloginuid
- Fix problem where you couldn't set rule on unset loginuid's
- Adjust memory management for sighup needs
- Fix problem where netlink timeout counter wasn't being reset
ddd-3.3.11-1
------------
* Thu Jun 09 2005 Than Ngo <than(a)redhat.com> 3.3.11-1
- 3.3.11
- add workaround for utf8
dump-0.4b40-3
-------------
* Thu Jun 09 2005 Jindrich Novy <jnovy(a)redhat.com> 0.4b40-3
- fix restoration of ext3 ACL's (#159617) - Stelian Pop
elfutils-0.108-5
----------------
* Thu Jun 09 2005 Roland McGrath <roland(a)redhat.com> - 0.108-5
- robustification of eu-strip and eu-readelf
gaim-1:1.3.1-0.fc5
------------------
* Thu Jun 09 2005 Warren Togami <wtogami(a)redhat.com> 1:1.3.1-0
- 1.3.1 more bug fixes
CAN-2005-1269 CAN-2005-1934
- enable Message Notification plugin by default
ghostscript-8.15-0.rc3.3
------------------------
* Thu Jun 09 2005 Tim Waugh <twaugh(a)redhat.com> 8.15-0.rc3.3
- Build requires xorg-x11-devel, not XFree86-devel.
- Include ierrors.h in the devel package.
gkrellm-2.2.7-1
---------------
* Thu Jun 09 2005 Karsten Hopp <karsten(a)redhat.de> 2.2.7-1
- update to 2.2.7
- add Requires: /sbin/chkconfig for -daemon subpackage
- allow gkrellm width up to 1600 pixel
- change spec file to valid UTF-8 (#159578)
hplip-0.9.3-2
-------------
jpilot-0.99.8-0.pre9.1
----------------------
* Thu Jun 09 2005 Ivana Varekova <varekova(a)redhat.com> 0.99.8-0.pre9.1
- rebuilt new version (0.99.8-pre9)
kernel-2.6.11-1.1381_FC5
------------------------
* Thu Jun 09 2005 Dave Jones <davej(a)redhat.com>
- 2.6.12-rc6-git3
- Temporarily disable the ipw drivers until I sort them out.
* Tue Jun 07 2005 Dave Jones <davej(a)redhat.com>
- 2.6.12-rc6-git1
- Disable hercules fb.
If you have one of these, please put it back in the trash. Thanks.
* Mon Jun 06 2005 Dave Jones <davej(a)redhat.com>
- 2.6.12-rc6
- Copy asm-i386 into x86-64's kernel-devel too. (#150266)
m2crypto-0.13-4
---------------
* Thu Jun 09 2005 Miloslav Trmac <mitr(a)redhat.com> - 0.13-4
- Fix invalid handle_error override in SSL.SSLServer (#159898, patch by Dan
Williams)
openssh-4.1p1-2
---------------
* Thu Jun 09 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-2
- use only pam_nologin for nologin testing
pam-0.79-10
-----------
* Thu Jun 09 2005 Tomas Mraz <tmraz(a)redhat.com> 0.79-10
- add the Requires dependency on audit-libs (#159885)
- pam_loginuid shouldn't report error when /proc/self/loginuid
is missing (#159974)
pam_ccreds-1-7
--------------
* Thu Jun 09 2005 John Dennis <jdennis(a)redhat.com> - 1-7
- fix bug #134674, change BuildPrereq openssl to openssl-devel
pilot-link-1:0.12.0-0.pre3.2
----------------------------
* Thu Jun 09 2005 Than Ngo <than(a)redhat.com> 0.12.0-0.pre3.2
- fix non utf-8 in changelog #159582
pychecker-0.8.14-4
------------------
* Thu Jun 09 2005 Miloslav Trmac <mitr(a)redhat.com> - 0.8.14-4
- Backport a fix for spurious warnings about "is{, not} None"
redhat-artwork-0.124-1
----------------------
* Thu Jun 09 2005 Than Ngo <than(a)redhat.com> 0.124-1
- fix ComboBox_Popup issue in qt-theme #157809
- drop redhat-artwork-0.122-throbbers.patch, it's in new upstream
selinux-policy-strict-1.23.18-4
-------------------------------
* Thu Jun 09 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.18-4
- Add /etc/profile.d/selinux.sh /etc/profile.d/selinux.csh for strict
- move ice_tmp_t definition for mls
- More cleanup
selinux-policy-targeted-1.23.18-3
---------------------------------
* Thu Jun 09 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.18-3
- Add /etc/profile.d/selinux.sh /etc/profile.d/selinux.csh for strict
- move ice_tmp_t definition for mls
strace-4.5.12-1
---------------
* Wed Jun 08 2005 Roland McGrath <roland(a)redhat.com> - 4.5.12-1
- Fix known syscall recognition for IA32 processes on x86-64 (#158934).
- Fix bad output for ptrace on x86-64 (#159787).
- Fix potential buffer overruns (#151570, #159196).
- Make some diagnostics more consistent (#159308).
- Update PowerPC system calls.
- Better printing for Linux aio system calls.
- Don't truncate statfs64 fields to 32 bits in output (#158243).
- Cosmetic code cleanups (#159688).
system-config-printer-0.6.132-1
-------------------------------
* Thu Jun 09 2005 Tim Waugh <twaugh(a)redhat.com> 0.6.132-1
- Added hp-devid to file manifest.
- 0.6.132:
- F1 for help (bug #159152).
- HPLIP support (replacing PTAL support).
system-config-securitylevel-1.5.9-1
-----------------------------------
* Thu Jun 09 2005 Chris Lumens <clumens(a)redhat.com> 1.5.9-1
- Handle ports that are not listed in /etc/services (#157620).
- Add an option to allow Samba browsing - enables several ports, so use
with care (#133478).
- Mark updated menu option and comment for translation (#156800).
- Rebuilt .pot file.
texinfo-4.8-6
-------------
* Thu Jun 09 2005 Tim Waugh <twaugh(a)redhat.com> 4.8-6
- Ship texi2pdf man page, taken from tetex-2.0.2 RPM.
18 years, 10 months
Bad (obsolete) PR/advertisement on fedora website
by Hans de Goede
Hi all,
I just saw the (great) FC4 announcement / pressrelease on lwn.net.
Amongst other things it states:
---
One of Fedora Core's main objectives is to serve the needs of
community developers, testers, and other technology enthusiasts who
wish to participate in and accelerate the technology development
process. But you know what? We aren't exclusive. We want you
involved, too, whoever you are:
http://fedora.redhat.com/participate
You might surprise yourself.
---
But that webpage is so outdated, it mentions that in the future we will
have CVS, but for now all you can really do is file bugs.
While Extras is up and running fine except for anaconda & friends
intergration.
This page (and the whole of fedora.redhat.com) really need updating. We
want more volunteers don't we?
Regards,
Hans
18 years, 10 months
