Re: libxul

[Antonio Olivares]

On Sat, Aug 18, 2012 at 6:25 PM, ajtiM  wrote:
> Hi!
>
> There are vulnerabilities in libxul-1.9.2 very long time and looks like
> nothing is better. Are there a new libxul version somewhere to download,
> please?
>
>
>
> portaudit -Fda
> auditfile.tbz 100% of   79 kB  316 kBps
> New database installed.
> Database created: Sat Aug 18 18:15:04 CDT 2012
> Affected package: libxul-1.9.2.28_1
> Type of problem: mozilla -- multiple vulnerabilities.
> Reference: http://portaudit.FreeBSD.org/dbf338d0-dce5-11e1-
> b655-14dae9ebcf89.html
>
> Affected package: libxul-1.9.2.28_1
> Type of problem: mozilla -- multiple vulnerabilities.
> Reference: http://portaudit.FreeBSD.org/bfecf7c1-
> af47-11e1-9580-4061862b8c22.html
>
> Affected package: libxul-1.9.2.28_1
> Type of problem: mozilla -- multiple vulnerabilities.
> Reference:
> http://portaudit.FreeBSD.org/380e8c56-8e32-11e1-9580-4061862b8c22.html
>
> 3 problem(s) in your installed packages found.
>
> You are advised to update or deinstall the affected package(s) immediately.
> Mitja
> 
> http://jpgmag.com/people/lumiwa
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

I was wanting to ask this question for a long time, but you have
beaten me to it :)  I was going to ask specifically if firefox does
depend on libxul that it is necessary?  Otherwise, why do we have to
see this every time we update our ports?  I have seen that there's a
configuration option for libxul so that it can install, but using
portmaster the option is not the same or not present?

Anyone want to take a shot at explaining this never ending libxul-* saga?

Regards,


Antonio
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

libxul

[ajtiM]

Hi!

There are vulnerabilities in libxul-1.9.2 very long time and looks like 
nothing is better. Are there a new libxul version somewhere to download, 
please?



portaudit -Fda
auditfile.tbz 100% of   79 kB  316 kBps
New database installed.
Database created: Sat Aug 18 18:15:04 CDT 2012
Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: http://portaudit.FreeBSD.org/dbf338d0-dce5-11e1-
b655-14dae9ebcf89.html

Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: http://portaudit.FreeBSD.org/bfecf7c1-
af47-11e1-9580-4061862b8c22.html

Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: 
http://portaudit.FreeBSD.org/380e8c56-8e32-11e1-9580-4061862b8c22.html

3 problem(s) in your installed packages found.

You are advised to update or deinstall the affected package(s) immediately.
Mitja

http://jpgmag.com/people/lumiwa
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: fsck recoveries, configuration

[Bruce Cran]

On 18/08/2012 07:09, Polytropon wrote:

A can only guess: It probably means that the button is fixed
(mounted) in the machine, e. g. at the front panel.


From 

http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface :

"ACPI-compliant systems interact with hardware through either a 
"Function Fixed Hardware (FFH) Interface", or a platform-independent 
hardware programming model which relies on platform-specific ACPI 
Machine Language (AML) provided by the original equipment manufacturer 
(OEM).


Function Fixed Hardware interfaces are platform-specific features, 
provided by platform manufacturers for the purposes of performance and 
failure recovery. Standard Intel-based PCs have a fixed function 
interface defined by Intel,[10] which provides a set of core 
functionality that reduces an ACPI-compliant system's need for full 
driver stacks for providing basic functionality during boot time or in 
the case of major system failure."


--
Bruce Cran
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: doc

[Polytropon]

On Sat, 18 Aug 2012 06:16:31 -0400, Jerry wrote:
> On Sat, 18 Aug 2012 03:43:58 +0200
> Polytropon articulated:
> 
> > On Fri, 17 Aug 2012 13:17:42 +0400, иван кузнецов wrote:
> > > how to open RU_FREEBSD_DOC_20111014.TBZ under windows?  
> > 
> > The file is a tar archive compressed with BZip2. It's no real
> > surprise that "Windows" cannot natively handle it, as with many
> > established standard formats. :-)
> > 
> > > several program cant,i was attempt.7zip cant.  
> > 
> > It's not a 7zip archive; still the 7zip page on http://7-zip.org/
> > mentions that the BZip2 format is supported.
> > 
> > However, there's BZip2 available for "Windows", maybe this
> > can help you: http://gnuwin32.sourceforge.net/packages/bzip2.htm
> > 
> > There are also claims that "WinRAR" is able to extract BZip2
> > files.
> 
> WinZIP®  is perfectly capable of
> handling the following file types:
> 
> Zip (.zip)
> Zipx (.zipx)
> RAR (.rar)
> 7Z (.7z)
> BZ2 (.bz, .bz2, .tbz, .tbz2)
> LHA/LZH (.lha, .lzh)
> Cabinet (.cab)
> Disc Image (.img, .iso)
> TAR (.tar)
> GZIP (.gz, .taz, .tgz)
> Compress (.tz, .z)
> UUencode (.uu, .uue)
> XXencode (.xxe)
> MIME (.b64, .mim)
> BinHex (.bhx, .hqx)
> Most other compressed files
> 
> I was personally responsible for having the "7Z" format added several
> years ago.

I thought that the OP would have used "WinZIP" as the typical
first candidate, given the fact that .tbz means "tar bzip2"
archiving and compression. So that program should havve been
fine.



> By the way Poly, FreeBSD does not handle all types of compressed files
> natively any more than Windows does. There are also add-ons available
> to handle some really obscure formats.

It can handle everything that tar, cpio, pax, compress
and (of course bzip2 (belongs to the OS!) and all other
native tools utilizing libarchive addresses. I'm quite
confident that this is a better "out of the box support"
than what "Windows" has to offer because handling archives
usually involves manually downloading and installing 3rd
party programs, like "WinZIP" or "WinRAR". Of course I
do not claim "all types", e. g. for RAR archives you
also need to have the system install the proper program,
but who uses RAR anyway (except the packagers of warez)... :-)




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: about system api

[Polytropon]

On Sat, 18 Aug 2012 12:44:07 +0800, Aric wrote:
> Hi,all
> 
> could anybody knows how to get the FreeBSD system APIs 

For documentation about the kernel interfaces and the library
calls, refer to the respective manpages. For the full source
code of the entire system, check the content of the /usr/src
directory. Whatever you want to understand as "system APIs"
will be in there.


-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: doc

[Bruce Cran]

On 17/08/2012 10:17, иван кузнецов wrote:
how to open RU_FREEBSD_DOC_20111014.TBZ under windows? several program 
cant,i was attempt.7zip cant. why i not able read documentation BEFORE 
install? where it after install? second,you installer is not well, not 
very undersandingable for newbis.i mean user must hit tab in some 
dialogs,but he press enter - attempt please.it is not MISTAKE but look 
mysteriously,and user worry.you shoud do only one small step in order 
to do freebsd more frendly - publish full international docs on 
install dvd -- user only put dvd and see docs in browser.its simpler 
than rewriting os in order to div it more frendly.is it true flash 
work badly or after complex work? i cant write on my writemaster dvd 
drive with freebsd9 - brasero dont see drive.what you can say about 
it? with best regards,ivan,Russia,Moscow.


You should be able to open it using 7-zip, but you'll need 2 steps - the 
first time you run extract you'll get a tar file. Then run extract on 
*that* file to get the documentation.


--
Bruce Cran

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: about system api

[C. P. Ghost]

On Sat, Aug 18, 2012 at 6:44 AM, Aric  wrote:
> Hi,all
>
> could anybody knows how to get the FreeBSD system APIs

What do you mean with "system API"?

Maybe the interfaces to the kernel, as defined in
/usr/include/sys?

> 2012-08-18
>
> Aric

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: doc

[Jerry]

On Sat, 18 Aug 2012 03:43:58 +0200
Polytropon articulated:

> On Fri, 17 Aug 2012 13:17:42 +0400, иван кузнецов wrote:
> > how to open RU_FREEBSD_DOC_20111014.TBZ under windows?  
> 
> The file is a tar archive compressed with BZip2. It's no real
> surprise that "Windows" cannot natively handle it, as with many
> established standard formats. :-)
> 
> > several program cant,i was attempt.7zip cant.  
> 
> It's not a 7zip archive; still the 7zip page on http://7-zip.org/
> mentions that the BZip2 format is supported.
> 
> However, there's BZip2 available for "Windows", maybe this
> can help you: http://gnuwin32.sourceforge.net/packages/bzip2.htm
> 
> There are also claims that "WinRAR" is able to extract BZip2
> files.

WinZIP®  is perfectly capable of
handling the following file types:

Zip (.zip)
Zipx (.zipx)
RAR (.rar)
7Z (.7z)
BZ2 (.bz, .bz2, .tbz, .tbz2)
LHA/LZH (.lha, .lzh)
Cabinet (.cab)
Disc Image (.img, .iso)
TAR (.tar)
GZIP (.gz, .taz, .tgz)
Compress (.tz, .z)
UUencode (.uu, .uue)
XXencode (.xxe)
MIME (.b64, .mim)
BinHex (.bhx, .hqx)
Most other compressed files

I was personally responsible for having the "7Z" format added several
years ago.

By the way Poly, FreeBSD does not handle all types of compressed files
natively any more than Windows does. There are also add-ons available
to handle some really obscure formats.

-- 
Jerry ♔

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: HELP! core dumps: install, mtree, et cetera all of the sudden after portmaster security/cyrus-sasl2

[O. Hartmann]

Am 08/16/12 21:44, schrieb Garrett Cooper:
> On Thu, Aug 16, 2012 at 8:33 AM, Hartmann, O.
>  wrote:
>>
>> I ran into a very delicate and nasty situation.
> 
> ...
> 
>> On both FBSD 10 boxes, the installation of the port security/cyrus-sasl2
>> got corrupted by "install" and/or "mtree" dumping core and signalling
>> SIGNAL 11. Booting into multiuser mode is impossible, login core dumps
>> SIGNAL 11, many other daemons, too. The only way is to boot into single
>> user mode.
> 
> I'm not drawing a correlation between this and unrelated coredumping 
> processes.

Me neither, I report this for completeness, since I'm not a OS
developer, such a behaviour could hint/indicate people who are involved
in the OS development, what is going on. Sorry when I'm trying to be too
precise (precise as precise I can be without the exact terminology!).


> 
>> An installation failed due to pkg(ng) was missing libarchive.so via
>> portmaster or via core dumping install(1). By installing on one box, my
>> home box, port security/cyrus-sasl2 manually, luckily install(1) and
>> mtree(1) didn't coredump and it worked - and this precedure rescued me.
>> But on my lab's development box, it doesn't work!
> 
> Don't make delete-old-lib unless you have it moved off to compat
> directories, or have rebuilt everything using the new libarchive.

I didn't! As I wrote before, this mess happened on ALL(!) freeBSD
10.0-CURRENT boxes in the very same way when I updated/reinstalled
security/cyrus-sasl2. Moreover: I can reproduce this on all boxes. All
my boxes use OpenLDAP as a backend with SASL2 enabled (not used so far).

> 
>> On this specific box, where this nasty problem also occured the same way
>> by simply recompiling everything for port www/apache22, including the
>> reinstallation of port security/cyrus-sasl2. Nearly every binary is
>> suddenly coredumping (as on the home box). login, vi, install, devfs,
>> syslogd, mtree, id, find ... a whole lot of binaries seem to be
>> compromised by something I do not see (libsasl2.so perhaps?).
> 
> truss the binaries to figure out exactly what's going wrong.

I will try, but when this errative coredumps of binaries occur, nothing
works properly that is using any kinf of dynamical loaded library! Only
the binaries (static?) from /resucue/* do their work.

> 
> A lot of this lost effort could be avoided (like others have posted on
> the list more than once), by having a centralized package distribution
> server, and by having VMs or jails and keeping snapshots with
> pre-upgrade state on the package building machine to avoid "dead in
> the water scenarios" like you're in right now.

Yes, I'm working on this. it seems, that it becomes more relevant since
I realized that FreeBSD suffers sometimes from misleaded ports or ports
which suddenly are marked BROKEN and do not get compiled ...

> 
>> I tried to help myself via copying /rescue/vi to /usr/bin/vi to have at
>> least a working vi. But in /rescue, I can not find install or mtree. I'm
>> not familiar with the sophisticated ways of /rescue. Where are
>> install(1) and mtree(1)?
> 
> I ran into this issue too a little while ago. I basically gave up on
> recovering a VM and nuked and repaved it using a LiveCD with a chroot,
> some cp -p'ing, etc. But yes.. it would be nice if I could have
> recovered the system at least with a static toolchain: cc, binutils
> [equivalent], mtree, install, etc.

This is how I recovered the nasty broken box. The other one was easy to
recover by reinstalling security/cyrus-sasl2.

I'm quite sure that there is something very foul with something in LDAP
or SASL2, since I can reproduce that proplem.

I saw that rtdl-elf has got some quirks these days, I will try to go
behind the date/version of the source tree when it was committed and
check whether this is the problem.

> 
> ...
> 
>> Disabling this pkgng tag leads to reinstallation of missing packages,
>> which are store in the pkgng sqlite format and not as ASCII anymore, but
>> then I get
>> /var/runld-elf.so.hints: No such file or directory
>> Error: shared library "iconv.3" does not exist.
> 
> service ldconfig start ?

Yes ... sorry ... in the heat of the fight I forgot ... but it doesn't
make the problem go away.

> 
>> But most of the libs have never been touch! So what is the loader
>> complaining about?
> 
> ...
> 
>> I tried to find rescue images and a rescue DVD of a snap shot server,
>> but there is no way to crawl through the informations on the web pages
>> towards a snapshot. All folders end up in 2011 and highly outdated
>> (www.freebsd.org, I didn't look at mirrors since I thought the main
>> server carries the most recent stuff). This isn't funny. No lead, no
>> hint, even in the download section.
>>
>> If someone has some hints how to recompile the sources with an emergency
>> booted disk, I highly appreciate some desater advice. Maybe the release
>> of FreeBSD-10-CURRENT sources I compiled do have accidentally a nasty
>> bug, so it would be nice to