amd64 security - was Re: X.org and NVidia

2005-07-21 Thread Pavel Jurus
On Thu, 2005-07-21 at 09:51 +0200, Goswin von Brederlow wrote:
 GOMBAS Gabor [EMAIL PROTECTED] writes:
 
  On Wed, Jul 20, 2005 at 09:24:42AM -0400, Matthias Julius wrote:
 
  I think staying with testing is the best thing to do for
  non-developers anyways.
 
  Has the problem of security updates been solved for testing? If not,
  using testing is worse than using sid (breakage of a dependency may keep
  an important security update out of testing for a looong time). Esp. for
  non-developers who do not tend to know too much about security issues...
 
  Gabor
 
 If you have security concerns neither testing nor sid is acceptable.
 
 MfG
 Goswin
 
 

I'm sorry to say that if you have security concerns, the whole amd64
port is not acceptable so far :( It is more than one month after the
release of amd64 stable, and security support is still lacking. Moreover
http://www.debian.org/ports/amd64/ is falsely saying the opposite.

Pavel



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: amd64 security - was Re: X.org and NVidia

2005-07-21 Thread Goswin von Brederlow
Pavel Jurus [EMAIL PROTECTED] writes:

 I'm sorry to say that if you have security concerns, the whole amd64
 port is not acceptable so far :( It is more than one month after the
 release of amd64 stable, and security support is still lacking. Moreover
 http://www.debian.org/ports/amd64/ is falsely saying the opposite.

 Pavel

Yeah, right along with you.

But there is nothing the amd64 port can do there as we don't have
access to the security infrastructure. Buggin the person responsible
every day is not going to help. All we can do is wait.

As a team we try to put all security uploads into
sarge-proposed-updates meanwhile.

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Sven Krahn
On 7/20/05, Alexander Jede [EMAIL PROTECTED] wrote:
Hi,i have installed x.org and would like to use the nvidia-driver for mynvidia GPU.Trying to install nvidia-glx, I get a dependence problem. nvidia-glxneeds : nvidia-glx: Depends: xlibmesa-glu but it is not installed or

libglu but it is not installable or
libglu1But xlibmesa-glu is in conflict with libglu1-xorg.Trying to force the installation of nvidia-glx it works fine. Onlyapt-get shows me the dependencies problems.Is it a problem of the liblu1, that it does not contain the
libglu1-xorg?
I found recently that glx is not yet included in
Debian Sid's X.org, there is a bug report somewhere in the Debian X.org
transition team area (sorry, I don't remember the exact location). For
me it looks like that for now you can't use glx with the current x.org
release in sid. 

-- Best regards / Mit den besten GrüssenSven Krahn


Re: X.org and NVidia

2005-07-20 Thread Andrei Mikhailovsky
On Wed, 2005-07-20 at 09:44 +0200, Alexander Jede wrote:
 Hi,
 i have installed x.org and would like to use the nvidia-driver for my
 nvidia GPU.
 Trying to install nvidia-glx, I get a dependence problem. nvidia-glx
 needs : nvidia-glx: Depends: xlibmesa-glu but it is not installed or
libglu but it is not installable or
libglu1
 But xlibmesa-glu is in conflict with libglu1-xorg.
 Trying to force the installation of nvidia-glx it works fine. Only
 apt-get shows me the dependencies problems.
 Is it a problem of the liblu1, that it does not contain the
 libglu1-xorg? 
 
 Thanks Alexander
 
 


I have the same issues, dependencies are totally broken coz of
xlibmesa-glu and libglu1. I have actually installed libglu1-xorg,
however, other programs' don't seems to notice that. very strange. Does
anyone know when these issues will be resolved?

Thanks

Andrei


signature.asc
Description: This is a digitally signed message part


Re: X.org and NVidia

2005-07-20 Thread Jean-Luc Coulon (f5ibh)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Le 20.07.2005 11:30:21, Andrei Mikhailovsky a écrit :

On Wed, 2005-07-20 at 09:44 +0200, Alexander Jede wrote:
 Hi,
 i have installed x.org and would like to use the nvidia-driver for
my
 nvidia GPU.
 Trying to install nvidia-glx, I get a dependence problem. nvidia-glx
 needs : nvidia-glx: Depends: xlibmesa-glu but it is not installed or
libglu but it is not installable or
libglu1
 But xlibmesa-glu is in conflict with libglu1-xorg.
 Trying to force the installation of nvidia-glx it works fine. Only
 apt-get shows me the dependencies problems.
 Is it a problem of the liblu1, that it does not contain the
 libglu1-xorg?

 Thanks Alexander




I have the same issues, dependencies are totally broken coz of
xlibmesa-glu and libglu1. I have actually installed libglu1-xorg,
however, other programs' don't seems to notice that. very strange.
Does
anyone know when these issues will be resolved?


Maybe these other programs [tm] need to be relinked against the new
libs and their dependancies rewritten.

You can get one of the source of one of them (apt-get source other  
program) and check and edit debian/control too mach the new libraries.

Sometimes, doing so, you get a cascade effect with the libs...



Thanks

Andrei



Good Luck

Jean-Luc
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC3hx8Xit3lz9m7V4RAthEAJ9HDfsnbEy4PKv2+JXBXbKyqgdrMQCgzngq
TT8RJu3509cHPHw10KHi6SM=
=srZ4
-END PGP SIGNATURE-





Re: X.org and NVidia

2005-07-20 Thread Alexander Jede
Is there a trick, that I can use apt-get as usual and not get this
message:
Reading package lists... Done
Building dependency tree... Done
You might want to run `apt-get -f install' to correct these.
The following packages have unmet dependencies:
  nvidia-glx: Depends: xlibmesa-glu but it is not installed or
   libglu but it is not installable or
   libglu1
E: Unmet dependencies. Try using -f.

Thanks for help.
Alexander


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Goswin von Brederlow
Alexander Jede [EMAIL PROTECTED] writes:

 Is there a trick, that I can use apt-get as usual and not get this
 message:
 Reading package lists... Done
 Building dependency tree... Done
 You might want to run `apt-get -f install' to correct these.
 The following packages have unmet dependencies:
   nvidia-glx: Depends: xlibmesa-glu but it is not installed or
libglu but it is not installable or
libglu1
 E: Unmet dependencies. Try using -f.

 Thanks for help.
 Alexander

That is just plain and simple the C++ transition.

Package: libglu1-xorg
Provides: libglu1c2
 ^^

Although that transition was unneccesary and I think will be reversed
(Provides: libglu1, libglu1c2) in the next upload as libglu1-xorg only
provides a C abi to its c++ internas.

MfG
Goswin

PS: Unstable is called unstable for a reason.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Andrei Mikhailovsky
On Wed, 2005-07-20 at 12:01 +0200, Alexander Jede wrote:
 Is there a trick, that I can use apt-get as usual and not get this
 message:
 Reading package lists... Done
 Building dependency tree... Done
 You might want to run `apt-get -f install' to correct these.
 The following packages have unmet dependencies:
   nvidia-glx: Depends: xlibmesa-glu but it is not installed or
libglu but it is not installable or
libglu1
 E: Unmet dependencies. Try using -f.
 
 Thanks for help.
 Alexander
 
 

apt-get -f install wants to uninstall half of my X programs, such as
gnome, kde and a bunch of other useful things, which is not an option

The following packages will be REMOVED:
  alsamixergui bittorrent-gui fgfs-base flightgear freeglut3 gnome
gnome-desktop-environment gxine k3b kcontrol kdelibs4-dev kdepim-dev
  konqueror libarts1-dev libfltk1.1c102 libgle3 libglut3 libkcal2-dev
libkdepim1-dev libkgantt0-dev libkleopatra0-dev
  libkpimexchange1-dev libksieve0-dev libktnef1-dev libmimelib1-dev
libopenexr-dev libopengl-perl libqt3-mt-dev libwxgtk2.4 libwxgtk2.4-1
  libwxgtk2.4-contrib libwxgtk2.4-dev libwxgtk2.4-python libxine1
planetpenguin-racer plib1.8.3 plib1.8.4 totem totem-xine tuxracer
  vegastrike vegastrike-data vegastrike-music x-window-system
x-window-system-core xine-ui xlibmesa-glu-dev xpp xscreensaver-gl
0 upgraded, 0 newly installed, 49 to remove and 40 not upgraded.


Is there any other way? Or waiting for debian developers to fix these
issues is the only way?

Many thanks,

--
Andrei


signature.asc
Description: This is a digitally signed message part


Re: X.org and NVidia

2005-07-20 Thread Sven Krahn
On 7/20/05, Andrei Mikhailovsky [EMAIL PROTECTED] wrote:
Is there any other way? Or waiting for debian developers to fix theseissues is the only way?
This is what in my opinion Goswin meant by
'Welcome to sid!' in two or three other threads. If you are running sid
you must expect such dependency issues to happen (though I agree this
is quite a complex situation right now). If you are not actively
working on and supporting the transition the only thing - with regards
to sid - is to wait. Because the current issues affect basically
everybody using sid (+x.org +kde) I suppose people are heavily working
on it and a resolution will come soon.

I found a working way for myself by falling back to testing (etch),
installing both x.org and KDE 3.4.1 from Ubuntu (on a different
partition) which also allows me to use the Nvidia driver incl. glx.
This at least allows me to continue my 'reglular desktop use' of the
system until everything has been sorted out in sid.

As soon as the transitions in sid are done (i.e. x.org and the kde
dependencies), and a dist-upgrade will clean up everything on my sid
partition, I will switch back to that environment again.
-- Best regards / Mit den besten GrüssenSven Krahn


Re: X.org and NVidia

2005-07-20 Thread Goswin von Brederlow
Sven Krahn [EMAIL PROTECTED] writes:

 On 7/20/05, Andrei Mikhailovsky [EMAIL PROTECTED] wrote:

   Is there any other way? Or waiting for debian developers to fix
  these
  issues is the only way?
  
  


 This is what in my opinion Goswin meant by 'Welcome to sid!' in two or three
 other threads. If you are running sid you must expect such dependency issues
 to happen (though I agree this is quite a complex situation right now). If you
 are not actively working on and supporting the transition the only thing -
 with regards to sid - is to wait. Because the current issues affect basically
 everybody using sid (+x.org +kde) I suppose people are heavily working on it
 and a resolution will come soon.
 I found a working way for myself by falling back to testing (etch), installing
 both x.org and KDE 3.4.1 from Ubuntu (on a different partition) which also
 allows me to use the Nvidia driver incl. glx. This at least allows me to
 continue my 'reglular desktop use' of the system until everything has been
 sorted out in sid.
 As soon as the transitions in sid are done (i.e. x.org and the kde
 dependencies), and a dist-upgrade will clean up everything on my sid
 partition, I will switch back to that environment again.
 --
 Best regards / Mit den besten Grüssen
 Sven Krahn

You can recompile the nvidia-glx yourself too if that is the only
problem you hit in sid. But if you aren't sure about that, then
staying with etch till the transition moves there in one big jump is
the best thing to do.

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Matthias Julius
Goswin von Brederlow [EMAIL PROTECTED] writes:

 You can recompile the nvidia-glx yourself too if that is the only
 problem you hit in sid. But if you aren't sure about that, then
 staying with etch till the transition moves there in one big jump is
 the best thing to do.

I think staying with testing is the best thing to do for
non-developers anyways.  In general testing is not that far behind
unstable.  Was it two weeks that packages need to be without severe
bugs in unstable to migrate to testing?  Packages that don't migrate
usually have some problems.  What you get in return is a much more
stable system especially during transitions like the current ones.
And KDE 3.3 and XFree86 are not that terrible that I could not wait a
couple more weeks.

And if you really need a package from unstable you can install it on
testing without problems in most cases.  At least without more
problems than you have with running unstable.

Matthias


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Goswin von Brederlow
Matthias Julius [EMAIL PROTECTED] writes:

 Goswin von Brederlow [EMAIL PROTECTED] writes:

 You can recompile the nvidia-glx yourself too if that is the only
 problem you hit in sid. But if you aren't sure about that, then
 staying with etch till the transition moves there in one big jump is
 the best thing to do.

 I think staying with testing is the best thing to do for
 non-developers anyways.  In general testing is not that far behind
 unstable.  Was it two weeks that packages need to be without severe
 bugs in unstable to migrate to testing?  Packages that don't migrate
 usually have some problems.  What you get in return is a much more
 stable system especially during transitions like the current ones.
 And KDE 3.3 and XFree86 are not that terrible that I could not wait a
 couple more weeks.

2-10 days.

 And if you really need a package from unstable you can install it on
 testing without problems in most cases.  At least without more
 problems than you have with running unstable.

 Matthias

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread GOMBAS Gabor
On Wed, Jul 20, 2005 at 09:24:42AM -0400, Matthias Julius wrote:

 I think staying with testing is the best thing to do for
 non-developers anyways.

Has the problem of security updates been solved for testing? If not,
using testing is worse than using sid (breakage of a dependency may keep
an important security update out of testing for a looong time). Esp. for
non-developers who do not tend to know too much about security issues...

Gabor

-- 
 -
 MTA SZTAKI Computer and Automation Research Institute
Hungarian Academy of Sciences
 -


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X.org and NVidia

2005-07-20 Thread Matthias Julius
GOMBAS Gabor [EMAIL PROTECTED] writes:

 Has the problem of security updates been solved for testing? If not,
 using testing is worse than using sid (breakage of a dependency may keep
 an important security update out of testing for a looong time). Esp. for
 non-developers who do not tend to know too much about security issues...

Well, if you are concerned about security you probably should stay
with stable.

Matthias


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]