Re: [opensuse-factory] Buffer Overflows

2008-01-18 Thread Wolfgang Rosenauer

Felix Möller wrote:

Hi,

I noticed that I am encountering a few "buffer overflows" but I don't see any 
relevant  reports in bugzilla, so it might be something specific to my 
system.  Could someone confirm before I enter a bunch of bugs?


The two executables that come to mind, are /usr/bin/dvd+rw-format 
and  /usr/sbin/bacula-fd but I have seen a few others as well...  This is on 
x86_64 with "latest" packages from Factory.


# dvd+rw-format
*** buffer overflow detected ***: dvd+rw-format terminated
=== Backtrace: =

I can confirm this on i586.


Please report all these bugs. They are not specific for your system. 
It's an enhanced feature in the latest glibc to report possible buffer 
overflows due to "bad coding". More packages could be affected and those 
should be found asap.


Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] security update policy

2008-01-15 Thread Wolfgang Rosenauer

Michael Wolf wrote:

MozillaThunderbird is on version 2.0.0.9 on 10.3-updates while it's
still on 2.0.0.6 in Factory.
Since in 10.3 it was a security update I wonder why it can be that it's
still old in Factory.
I would expect a policy that Factory should get necessary updates at
around the same time.


Yes, ideally it would be.


That's why I was asking for a policy so that I know it is taken care of 
and it's just an oversight.

It was just an example that I know of but probably there are others.


What Factory are you looking at? I have 2.0.0.10 here

No, you are looking at Firefox ;-)
And even that is old, so what.


It's equivalent to 2.0.0.11, though.


Yes, agreed. I know that it is. But it still looks outdated from the 
outside.

In my original post I didn't complain about Firefox, did I?
The example of Thunderbird was taken because it has known security 
issues which are fixed already with a newer version. There are no public 
 security patches available for Firefox 2.0.0.11 or 2.0.0.10.

So that's the major difference.

The goal of that posting was not to blame Thunderbird (or Firefox) but 
to make sure that someone is actually usually taking care of security 
related stuff in Factory.



Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] security update policy

2008-01-10 Thread Wolfgang Rosenauer

Stephan Kulow wrote:

Am Donnerstag 10 Januar 2008 schrieb Wolfgang Rosenauer:

Hi,

I'm wondering if there is any internal policy at Novell about security
updates for Factory?
I just found an example what shouldn't happen:

MozillaThunderbird is on version 2.0.0.9 on 10.3-updates while it's
still on 2.0.0.6 in Factory.
Since in 10.3 it was a security update I wonder why it can be that it's
still old in Factory.
I would expect a policy that Factory should get necessary updates at
around the same time.



What Factory are you looking at? I have 2.0.0.10 here


No, you are looking at Firefox ;-)
And even that is old, so what.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[opensuse-factory] security update policy

2008-01-10 Thread Wolfgang Rosenauer

Hi,

I'm wondering if there is any internal policy at Novell about security 
updates for Factory?

I just found an example what shouldn't happen:

MozillaThunderbird is on version 2.0.0.9 on 10.3-updates while it's 
still on 2.0.0.6 in Factory.
Since in 10.3 it was a security update I wonder why it can be that it's 
still old in Factory.
I would expect a policy that Factory should get necessary updates at 
around the same time.


Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] status report distribution week 2

2008-01-09 Thread Wolfgang Rosenauer

Stephan Kulow wrote:

Am Mittwoch 09 Januar 2008 schrieb Wolfgang Rosenauer:

Stephan Kulow wrote:

- Factory dependencies were broken over christmas, but should be fine
again

At least not in the buildservice. It still shows expansion errors
because of libtasn1.so3 :-(


The sync is still done manually, so Adrian just need to read your mail :)


Just tested to update factory:

"Es sind keine installierbaren Anbieter von libtasn1 >= 1.2 verfügbar 
für libtasn1-3-1.2-3.i586[Factory]"


rpm -qR libtasn1-3
libtasn1 >= 1.2

The package libtasn1 doesn't exist though.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] status report distribution week 2

2008-01-09 Thread Wolfgang Rosenauer

Stephan Kulow wrote:

- Factory dependencies were broken over christmas, but should be fine again


At least not in the buildservice. It still shows expansion errors 
because of libtasn1.so3 :-(



Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Flash Update ?

2008-01-03 Thread Wolfgang Rosenauer
Dirk Mueller wrote:
> On Saturday 22 December 2007, Günther J. Niederwimmer wrote:
> 
>> with the last Mozilla, Flash Update is also not working ?
> 
> are you really talking about factory? What is not working? do you use x86_64 
> or i586? did you file a bugreport?
> 
>> Mozilla don't find the plugin anymore.
> 
> you mean firefox when you say mozilla, right?

Firefox 2.0.0.11 and 3.0b2 is working for me with latest Flash _and_
latest nspluginwrapper (if a 64bit Firefox installation).

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] pulseaudio and 11.0

2007-11-26 Thread Wolfgang Rosenauer
Rodrigo Moya wrote:
> On Fri, 2007-11-23 at 17:27 +0100, Will Stephenson wrote:
>> On Friday 23 November 2007, Rodrigo Moya said:
>>> So, first, I would like people to test the packages we've built, and
>>> second, what needs to be done to put this into the distro for 11.0? Are
>>> KDE people aware and happy of the change? 
>> I'm aware of it affecting gnome, but at the moment I see it as GNOME 
>> replacing 
>> esd.  Does it have a wider impact on the distro that I'm not aware of?  
>>
>> I'm not aware of anyone writing a PA backend for Phonon yet.
>>
> PulseAudio replaces esd, true, but it offers many new features, not
> present in arts AFAIK, that, I think, could benefit KDE also. If there
> are no plans in upstream KDE, I guess we'd keep it as a GNOME thing
> only, although we are going to patch some non-GNOME apps, like jack, so
> I guess it would be good to be using the same sound server everywhere.

I'm still not quite sure what sound layer an application should support
in future.
I feel that applications which are no _real_ KDE or Gnome applications
shouldn't use ESD/ARTS/Pulseaudio anyway. Is that true? For example I
have no desktop environment running usually and don't plan to run
pulseaudio/arts/whatever just for one or two applications using it.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Re: openSUSE Factory update (gcc 4.3)

2007-11-20 Thread Wolfgang Rosenauer
Felix Möller wrote:
> Hi,
> 
>> Also, Mozilla applications compiled with this gcc 4.3 from the factory
>> repo are crashing on any mouse action here - independent if
>> self-compiled or from the build service. Builds compiled a few days
>> ago with gcc 4.2 work fine though.
> I do not know whether this is caused by the gcc update, but Firefox is
> crashing for me too. I reported it at:
> https://bugzilla.novell.com/show_bug.cgi?id=342603

Yes, that looks like the same thing. So something is probably
miscompiled with gcc 4.3.
I need a factory installation obviously.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] [status report] openSUSE distribution, week 44

2007-10-31 Thread Wolfgang Rosenauer
Stephan Kulow wrote:
> Hi!
> 
> Not sure there is a lot to status report, but I try:
> 
> - the number of incoming bugs is growing, for some 
>   components almost dramatically. So much time is
>   spent in screening at the moment. For a glimpse,
>   check http://tinyurl.com/2cxbto
>   (you're very welcome to help screening duplicates)

Since that is a public mailinglist it would have been nice to note that
the above URL is not public available but Novell-only.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Firefox preview

2007-10-08 Thread Wolfgang Rosenauer
Florin Samareanu wrote:
> On Mon, 2007-10-08 at 17:32 +0300, Arto Viitanen wrote:
>>  We installed it anyhow and it seemed to work, but firefox
>> print preview crashed the
>> firefox. We assumed it was because of problems with update.
>>
> 
> i experience the same problem here. it was a clean 10.3 installation
> with no warnings.
> can you open a bug report on that?

Already there and it's GTK bug it seems.
https://bugzilla.novell.com/show_bug.cgi?id=331725


Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] classpath-webplugin

2007-09-17 Thread Wolfgang Rosenauer
Andreas Vetter wrote:
> On Mon, 17 Sep 2007, Martin Schlander wrote:
> 
>>> Can I suggest
>>>
>>> - Making the sun plugin conflict with the classpath webplugin.
>>> - Preferably don't install the classpath version at all, if you're
>>> worried about completely free java go for java 7 it would be more
>>> reliable than classpath.
>> I had this problem too. This was on x86_64 however, but I installed 32-bit 
>> firefox and sun java-plugin and had problems getting it to work until I 
>> figured out that I must manually remove classpath-webplugin. I thought 
>> classpath-webplugin was only installed by default on 64-bit installations, 
>> but apparently it's also done on 32-bit - it doesn't do much good anywhere - 
>> but on 32-bit it's extra problematic.
>>
>> I support Benji's proposed resolutions.
> 
> IMO it is a mistake to release a 64 bit firefox without a really (!) 
> working java. Releasing a 32 bit firefox was much better in the older 
> distros.
> 

Anyone opened a bug to let the plugins conflict? IMHO that's mandatory.
It makes absolutely no sense to have more than one plugin installed for
one type since at least all Mozilla stuff behaves non-deterministic in
choosing one :-(
And I agree that not having a working Java plugin is almost as bad as
not having a working Flash player (which should basically work maybe
only with manual interaction with nspluginwrapper though).

So replacing Firefox with the 32bit version, removing
classpath-webplugin and installing Sun's 32bit Java with plugin will be
an FAQ :-(

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Re: commit mozilla-nss

2007-09-14 Thread Wolfgang Rosenauer
jacob berkman wrote:
> On 9/14/07, Wolfgang Rosenauer <[EMAIL PROTECTED]> wrote:
>> So where is the bug number in that changelog entry? We are after beta3
>> so I'd expect a bugnumber here.
> 
> There is no bug number because nobody has used the functionality that
> this supports.  The second someone would try to use it there would be
> one!  There are plenty of relevant fate #s, such as 301351 and then a
> really vague one or two.  I could certainly open a new bug.
> 
>> What's the reason to merge the tools subpackage to the base package?
> 
> The packages that perform system-wide certificate authentication
> (pam_pkcs11, krb5-preauth-plugin-pkinit or something) use a
> system-wide nss database for configuration of pkcs11 packages.  The
> postinst scripts for pkcs11 packages should probably add themselves to
> this system db, but someone needs to create this database in the first
> place.  It may as well be the nss package itself.

That might be all true and actually a thing like that was planned when I
still was there. I don't argue against the fact that the -tools package
is needed anyway in these cases.

> So, that means that the tools package is always needed; 

No, it isn't. mozilla-nss (the libs) are used by the mozilla
applications (and a few others) which don't need the tools. So it's not
_always_ needed to have a working NSS environment. It's _always_ needed
if "(pam_pkcs11, krb5-preauth-plugin-pkinit or something)" is used.
That's the difference.

> I asked on one
> of the opensuse lists (-gnome?) last week about this, but I guess
> you're not on that?

No, I'm not. I don't have anything to do with Gnome but I have much to
do with mozilla and NSS isn't Gnome related at all.

> Anyway I don't really care either way what the
> package layout is; we just need to make sure that both the libs and
> tools are both installed by anyone who needs nss.

OK, that's a valid point but the solution IMHO is not to add the tools
to the library package but having correct dependencies or patterns
reflecting the requirement.

Thanks for your feedback,

 Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[opensuse-factory] Re: commit mozilla-nss

2007-09-14 Thread Wolfgang Rosenauer
Hi,

I just got this one and would have a few questions on that.

h_root wrote:

> here is the log from the commit of package mozilla-nss
> checked in at Fri Sep 14 00:46:19 CEST 2007.
> 
> 
> --- GNOME/mozilla-nss/mozilla-nss.changes 2007-07-27 17:59:00.0 
> +0200
> +++ /mounts/work_src_done/STABLE/mozilla-nss/mozilla-nss.changes  
> 2007-09-13 22:28:02.782983000 +0200
> @@ -1,0 +2,7 @@
> +Thu Sep 13 22:26:57 CEST 2007 - [EMAIL PROTECTED]
> +
> +- merge -tools package into main package
> +- create system-wide nssdb for system configuration of smart cards,
> +  as used by pam_pkcs11, krb5 pkinit, and others
> +
> +---

So where is the bug number in that changelog entry? We are after beta3
so I'd expect a bugnumber here.

What's the reason to merge the tools subpackage to the base package?
That looks like a move in the wrong direction given the shared library
convention having libraries in an extra package.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] About dropped packages -- xmms

2007-09-05 Thread Wolfgang Rosenauer
Andras Barna wrote:

> So yesterday I searched for one of the my favorite application: xmms
> using webpin, in Factory only one result was: xfce4-panel-plugin-xmms,
> iirc it requires xmms, but where is xmms?? OK in coolo's answer
> there's the "often" word, but I don't understand why was it dropped. I
> searched the bugzilla, no bugs shown regarding to xmms. Yes I know
> what ppl are saying about xmms, but I like it and imho other people
> likes it too.
> What are saying ppl bad about xmms? some examples:
> 1. unmaintained. false: [2] [3]
> 2. it's buggy, as i said no xmms bugs in bugzilla
> 3. uses gtk 1. so? gtk1 is in Factory
> etc

I understand the gtk1 part but I wonder what the replacement application
would be? I haven't found a proper replacement yet given that I don't
use KDE or Gnome and like lightweight applications for that purpose.
I have to admit that I use amarok once in a while but that's overkill
for my usage.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] More packages to remove from Gnome CD.

2007-08-06 Thread Wolfgang Rosenauer
Pavel Nemec wrote:
>>> pinentry
>>> pinentry-gtk
>> I expect this is required for gpg -agent support in evolution
> And maybe in Thunderbird enigmail too. (not sure about it)

If the gpg-agent is used to open the keys it is.
But it's not only needed for those in that case since just decrypting or
signing a file on commandline using gpg-agent will open pinentry.


Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Getting pan on the Gnome CD

2007-08-05 Thread Wolfgang Rosenauer
Daniel Rahn wrote:
> Wolfgang Rosenauer wrote:
>> GNOME:Community seems like a good candidate.
> 
> Not really. While you can easily think that Pan is a GNOME program, it
> actually isn't.

It might not be a real Gnome application but there are other examples in
that project which aren't fully fledged Gnome applications but more GTK
ones (which are accepted on the Gnome desktop) which is also the case
for pan I guess.

But anyway there are other options for a top-level project for pan which
could for example be "messaging" or similar to hold all kind of MUAs,
newsreaders, IM/IRC clients. Maybe linked from their main projects in
the buildservice.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Getting pan on the Gnome CD

2007-08-05 Thread Wolfgang Rosenauer
Daniel Rahn wrote:
> Stephan Kulow wrote:
>> I think reading usenet is far from mainstream - and people that do have 
>> usually no problem doing FTP-Installations ;)
> 
> Being the maintainer I have to second this. PAN is going through a very
> long development cycle right now and I'd rather have people download the
> most current release than get an old version on the CD and bother with
> the bugs that are already fixed in upstream.
> 
> The most current version is btw. maintained in my home project within BS:
> 
> http://software.opensuse.org/download/home:/sdrahn/
> 
> If anybody has a nice idea for a top level project to put this in, speak
> up now ;)

GNOME:Community seems like a good candidate.

Wolfgang


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] java plugin for firefox on x86_64, alpha6

2007-07-22 Thread Wolfgang Rosenauer
Silviu Marin-Caea schrieb:
> Is this supposed to work right now?  Or is it still work in progress with the 
> plugin wrapper...
> 
> At least a very positive thing is that java in Konqueror does work.

Please note that I'm not absolutely sure what the decision was actually
but IIRC 10.3 is again supposed to ship a 32bit Firefox because of the
"Java issue".
nspluginwrapper is not (and probably won't be) able to work with Java
and there is no Java 64bit plugin available still.
So I think you still have to make sure that you use a 32bit JRE together
with 32bit Firefox to be able to use Java applets.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Firefox 2.0.0.4 is crashing

2007-07-10 Thread Wolfgang Rosenauer
Hi,

Silviu Marin-Caea wrote:
> The previous version didn't crash at all.
> 
> I'm gonna install debuginfo and start running firefox from the command line, 
> to catch the problem.  I don't know why it doesn't start that Talkback thing 
> after it crashes.

Because talkback is a proprietary extensions which is only licensed to
the Mozilla Corporation and therefore no Linux distributed Firefox has
this extension.

> Does this happen to anyone else?

Not to me.

Meanwhile you could also try to reproduce with another (new)
user/profile and see if it happens there as well.

You know:
http://en.opensuse.org/Bugs:mozilla ?

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Re: Public development of AppArmored FireFox

2007-05-28 Thread Wolfgang Rosenauer
Hi,

Alexey Eremenko wrote:
> On 5/11/07, Alexey Eremenko <[EMAIL PROTECTED]> wrote:
>> I have made an overview regarding my plans about AppArmored FireFox.
>> link:
>> http://download.yousendit.com/98BAB4F42629D737
> 
> That overview is now also uploaded to the bug report.
> 
> But I still can't get FireFox-normal to have different PID than
> FireFox-apparmored.
> Is there *any* way to do that ? (except VM)
> 
> Please ! I need help ! don't let this project die.

I still don't fully understand what you mean with "PID"?
What's the actual problem?

In addition I still don't agree with your plan completely. It makes no
sense to me to have a completely different Firefox package.
I see that it would be nice if there was another logo included in the
about window but the price for that is too high I feel.

Please list your reasons why you think that only a separate package can
solve your project.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Re: Public development of AppArmored FireFox

2007-05-07 Thread Wolfgang Rosenauer
Alexey,

Alexey Eremenko wrote:

> 1. implement custom branding. How to do that ?

Depends on what you want to modify exactly.

> 2, it should run as a separate process, totally independent from normal
> Firefox.

That's not sooo easy. Basically you have to switch the profile dir in
that case. There is a configure switch for that but I'm not sure if
it'll be resetted again for example by --enable-official-branding.

> I have built FireFox with the following parameters:
> 
> [EMAIL PROTECTED]:~/Linstall/mozilla> cat .mozconfig
> . $topsrcdir/browser/config/mozconfig
> mk_add_options [EMAIL PROTECTED]@/ff-opt-static
> ac_add_options --enable-optimize
> ac_add_options --disable-debug
> ac_add_options --enable-static
> ac_add_options --disable-shared
> ac_add_options --disable-tests
> ac_add_options --enable-official-branding
> mk_add_options MOZ_CO_PROJECT=browser
> 
> But the result is a disappointing Bon Echo, that is also shares
> process with the already installed SUSE's FireFox.
>
> Any ideas on how to achieve the needed functionality ?
> 
> Basically my vision is that the new FireFox should not differ in code
> from the original, but should differ in configuration. However I stay
> open-minded.

You could start using the RPM spec from the original one and modify it.
I'm not sure why you get a Bon Echo branded version above. Too much info
is missing to know why.

Please note that I don't really like the idea to have different packages
of Firefox just for an apparmored version. For most of the stuff you
want to achieve it's even not really necessary.
What you need for AppArmor is a different binary (name) to distinguish
both and that the "secured" Firefox is using another profile can also be
achieved by choosing an alternative profile during startup. What you
can't do is to modify the names and branding within the UI in that case,
which isn't nice but given the costs of the approach to have another
full installation it's maybe a tradeoff.

PS: I've contacted Mozilla to get a rough statement about using a
modified logo as icon and waiting for an answer.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] java plugin

2007-04-16 Thread Wolfgang Rosenauer
Gregg Nicholas wrote:

> The workaround was working for me on Alpha2 x86_64.  Can't seem to make
> it work on Alpha3.  Perhaps we need new instructions now that firefox is
> 64-bit?

There is almost no chance to get Java working in Firefox 64bit yet.
There simply is no real working 64bit plugin for Java and
nspluginwrapper doesn't support Java.
https://bugzilla.novell.com/show_bug.cgi?id=264228

In theory (while my own tests were not really successful) it could
somehow work with the GNU Classpath and its classpath-webplugin which is
available for x86-64.
The library would have to be symlinked (ln -s) into
/usr/lib64/browser-plugins and it will appear in about:plugins.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] no more cdrtools on 10.3?

2007-02-07 Thread Wolfgang Rosenauer
Chema Ollés wrote:
> Hi all:
> I try run k3b and see that cdrecord is not on my system...
> It seems there are legar problems...
> What program will openSuse include instead?

wodim is already shipped with 10.2 as cdrtools replacement.

Wolfgang

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[opensuse-factory] Re: stack-protector: Re: Minutes distribution meeting 2007-01-25

2007-01-31 Thread Wolfgang Rosenauer
Heiko Helmle wrote:
> Andreas Jaeger schrieb:
> 
>> * Enable -fstack-protector for the new distros for every package
>>   by default
> 
> Gentoo is supporting -fstack-protector for quite some time now and you
> might want to have a look at their ebuild database for some packages
> that have little propblems with that compiler flag.
> 
> If you're interested, i'll aggregate some bugzilla entries from bugs.g.o
> for this...
> 
> A quick grep over portage brought these packages all have some special
> handling for -fstack-protector (or simply disable it):
> 
> mozilla-firefox
> mozilla-thunderbird
> xulrunner

At least these have stack-protector enabled since 10.1 I think and I
never got an issue because of that.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AW: [opensuse-factory] Making the basesystem smaller

2007-01-18 Thread Wolfgang Rosenauer
Klaus Kaempf wrote:
> * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [Jan 18. 2007 09:52]:
>> A good idea,
>>
>> I think it would be enough to have a login and a !!small!! yast for 
>> installing more packages.
> 
> If we are talking about a _really_ small base system, it should include RPM 
> at most
> but not YaST.
> YaST is a convenience application for systems management and should be 
> optional.
> 
> 
>> In my opinion it is not neccessary to have a working network for a really 
>> small system.
> 
> I agree. Thinking of virtualized systems, sharing filesystems is sufficient.

Really. For what to have a virtualized system if you can't really
connect to it? IMHO a system w/o network is not of use nowadays. And how
do you share filesystems with virtual systems in the real world?

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Bugzilla contact ?

2007-01-06 Thread Wolfgang Rosenauer
Günther J. Niederwimmer wrote:

> I have big problems to contact and login the bugzilla site, firefox hangs by 
> secure-www.novell.com.
> 
> Is this only a Problem on my site ?

AFAIK no. I guess you see that every time with FF 2.x for the first
connect to bugzilla.novell.com? Then it's caused by an iChain bug which
is triggered because of changed default SSL/TLS settings in Firefox 2.
Further connects in the same FF session doesn't show this behaviour
because FF marks the SSL host as "broken" and falls back to SSLv3
immediately.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] GM release

2006-12-01 Thread Wolfgang Rosenauer
Peter Czanik wrote:
> Hello,
> 
> jdd wrote:
>> could it be possible to have the GM _torrents_ annouced two days
>> before the GM, may be with some trusted seeders allowed to ftp the
>> isos before the others to open the pipe?
> I guess, it's pretty much the current practice. Bringing mirrors up to
> the task starts usually 1-2 days earlier.
> 
>> of course I'm candidate as seeder. I can dl with bt or ftp and seed bt
>> (I sent 28Gb of RC1cd's)
> I seeded 3270Gb of RC1 DVDs, and still seeding :-)

And my provider would cancel my connection if I'd do that :-(

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] After upgrade to RC2, Thunderbird fails to start. (x86_64)

2006-11-29 Thread Wolfgang Rosenauer
Monkey 9 wrote:
> [EMAIL PROTECTED]:~> thunderbird
> /usr/bin/thunderbird: line 137:  5248 Segmentatie fout$AOSS 
> $MOZ_PROGRAM $@
> [EMAIL PROTECTED]:~>

I wonder how you upgraded to RC2. But anyway that's no useful output.
Do you know how to get a stacktrace?

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Cyrus idled "missing"?

2006-11-29 Thread Wolfgang Rosenauer
Anders Norrbring wrote:
> I get this in huge numbers in my log "imap[3069]: error sending to
> idled: 3"
> 
> In /etc/cyrus.conf, I have:   idled cmd="idled"
> But nowhere on the disk can I find the idled command.. Ideas anyone?

How about /usr/lib/cyrus/bin/idled ?
Should be there. The package I've just downloaded from factory has it.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] DVD ISO torrent problems

2006-11-13 Thread Wolfgang Rosenauer
Andras Mantia wrote:
> Hi,
>  I started to download the DVD ISO (x86_64 version) on Friday and it went
> all well until it reached 2.95 GB, but now on Monday (I don't have
> permanent access to this machine) it still didn't finish and KTorrent
> says that the tracker status is "Invalid response". Can someone in charge
> check what can be the problem?

The torrent was changed late friday or saturday and therefore your old
session doesn't work anymore.
I've lost my 3GB download because of that.
I've made no backup of my old download and failed to recover it so I
don't know if you can reuse your already downloaded parts.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] speed impression on firefox 2

2006-11-03 Thread Wolfgang Rosenauer
Dominique Leuenberger wrote:

> That was the one I did not think of (I think up to now it was always
> 'disable' by default.
> Strangely, I am NOT able to change it using the GUI (by going to edit
> preferences connection, I just get an error. 

That error is fixed for beta2 and with the packages available on the
buildservice.

> I changed it in about:config (network.proxy.type = 0. There must also
> be the problem: It was set to 5 (accepted as default), which does not
> even represent a valid value. proxy.type should take a value from 0 to 4
> (the error in GUI also shows something about a value of 5). 

The value of 5 was introduced by Novell to provide a way to use Gnome's
or sysconfig's proxy settings (depends if you run Gnome or not).

> Anyhow, I changed it to 0 and FF is lightning fast now. (hmm. that
> would better fit on thunderbird :-) )

So you seem to have wrong system-wide proxy settings.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Mozilla Firefox 2.0

2006-10-16 Thread Wolfgang Rosenauer
Andreas Hanke wrote:
> JP Rosevear schrieb:
>> We are packaging 2.0 for 10.2.
> 
> Which leads to the question: What will happen to xulrunner?
> 
> There are currently two versions of it in the factory tree (but the
> later one of them is unused).
> 
> You are not going to ship both versions in the end, are you?
> Unfortunately the xulrunner wiki is a little bit inexact about the
> release date of xulrunner-1.8.1.

The plan was to drop mozilla-xulrunner180 and depend everything on
mozilla-xulrunner181. xulrunner 1.8.1 has (more or less) to be finished
when Firefox 2.0 ships since this will be Gecko 1.8.1 final.
I don't know the internal progress anymore to move everything to 1.8.1.
It should be possible for most applications without bigger problems
since it's "only" 1.8.1 and not 1.9.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Mozilla Firefox 2.0

2006-10-16 Thread Wolfgang Rosenauer
Dominique Leuenberger wrote:
> On the openSUSE Wiki, it's written that with openSUSE 10.2, Mozilla
> Firefox 2.0 should be delivered (Mozilla is due to be released in October).
> But up to now, even in the current factory tree, there are no traces of
> Firefox 2.0. Only 1.5.0.7 is available.
>  
> Is this to be changed or will we deliver and 'old' Firefox with openSUSE
> 10.2?
>  
> For thunderbird, which is due later, the packages of 1.99 are already in
> for a while.

"We" (the SUSE guys) might have to go back to Thunderbird 1.5.0.x anyway
since 2.0 won't be released in time for 10.2. The update was done as the
roadmap still stated that Thunderbird would be released in time.

And I *think* there will be a Firefox 2.0 version in time for 10.2.

Wolfgang
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Thunderbird with reply-to-list (was: Introducing the new mailinglist server)

2006-08-14 Thread Wolfgang Rosenauer
Hi,

On 2006-08-13 at 13:34:18 +0200, Pascal Bleser wrote (shortened):

> > I got that. Thunderbird has no list-reply. Thats the fault of
> > Thunderbird. There even are bugreport about it in the mozilla bugzilla.
> 
> Right. Unfortunately Thunderbird doesn't have that feature and most
> probably won't have it before 3.0 (scheduled around Q2 2007).

Please note that the way headers are handled in Thunderbird and
SeaMonkey is pretty problematic and adding such a feature requires
thinking about the basic design in that area.
I'm trying to find a reasonable approach with Thunderbird developers.
 
> But... I've built MozillaThunderbird RPMs for 10.1 and 10.0 (both i686
> and x86_64) that include a 3rd party patch to add a "reply to list" action.
> 
> More information here:
> http://open.nit.ca/wiki/index.php?page=ReplyToListThunderbirdExtension&7
 
I've uploaded new Thunderbird packages to my 10.1 experimental repository:
ftp://ftp.suse.com/pub/projects/mozilla/experimental/10.1

Thanks to Pascal for providing the preformatted patch ;-)

You can use the extension with those packages but you have another
option with them:

If you toggle the preference
mailnews.clobber_list_reply
to "true", Thunderbird should answer to the mailinglist only if you hit
"Reply All". That's also no perfect solution but maybe some people find
it useful. And if not just let it set to "false".

> For those who are interested and/or would like to help, please install
> that package and test it. I made some basic tests with it on 10.1/x86_64
> and 10.0/i686 and it works for me.

If you find any problem with the new builds, please tell me. 
 


   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   



Re: [opensuse-factory] List "Reply-To"

2006-08-11 Thread Wolfgang Rosenauer
On 2006-08-11 at 16:17:22 +0200, Dominique Leuenberger wrote (shortened):

> 
> >>> Stefan Bogner <[EMAIL PROTECTED]> 11-08-2006 16:57 >>>
> >Am Freitag, 11. August 2006 15:54 schrieb Kevin Ivory:
> > thunderbird doesn't
> >
> >http://mailredirect.mozdev.org/
> >
> >Stefan
>  
> Thanks for this advise!
> In this case, openSUSE should have this extension compiled in the packages. So
> all openSUSE users can profit from it.

In most packages this is the case,
but it's still only for bouncing.


Wolfgang Rosenauer

-- 
SUSE - A Novell business-o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 489
90409 Nuernberg, Germany   _\_v   



Re: [opensuse-factory] YOU works only every second run

2006-06-29 Thread Wolfgang Rosenauer
On 2006-06-30 at 07:28:11 +0200, Marcus Meissner wrote (shortened):

> On Fri, Jun 30, 2006 at 12:30:57AM +0200, Andreas Vetter wrote:
> > Hi,
> > 
> > whenever there is a update, the first run of you does not show the update. 
> > I have to run you again a second time to see the updates.
> > 
> > The updates are on NFS, rsynced from gwdg.de.
> > 
> > Any ideas? Known behaviour? Bug?
> 
> I think it is known, but create a bugreport anyway...

Please check this one first:

https://bugzilla.novell.com/show_bug.cgi?id=186115



   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Updated Software Management Test Repository

2006-06-02 Thread Wolfgang Rosenauer
On 2006-06-02 at 11:16:47 +0200, Andreas Jaeger wrote (shortened):

> Lenz Grimmer <[EMAIL PROTECTED]> writes:
> 
> > [...]
> >> * You can now remove the software catalog you added in the first step.
> >>   Use "yast2 inst_source" and delete the catalog.
> >
> > Here a popup window appeared, stating: "Error: Cannot stop
> > '/etc/init.d/novell-zmd' service". I clicked OK, and the inst_source
> > module finished. Not sure if this is critical. Are there any logs that
> > would help here? Bugzilla?
> 
> Bugzilla - with /var/log/zmd-messages.log appended.

I'd guess that happens if zmd is not able to clean up until the timeout
in the init script fires.
At least that happens sometimes if I use the init-script to stop zmd.


Wolfgang Rosenauer

-- 
SUSE - A Novell business-o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 489
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] java plugins for 32- or 64-bit seamonkey?

2006-05-05 Thread Wolfgang Rosenauer
Hi,

On 2006-05-05 at 12:56:12 +0200, Pascal Bleser wrote (shortened):

> > If you think that's useful (I agree at the moment) to ship SeaMonkey in
> > 32bit version on x86-64 please file a bugreport as enhancement.
> > (But the three examples from above should really be solved from their
> > vendors!)
> 
> What about packages that require gtkmozembed ? (liferea [1] being one
> example)

gtkmozembed is in mozilla-xulrunner nowadays. The devel package is
gecko-sdk which is only available online because of size constraints.
 
> [1] feedreader: http://liferea.sourceforge.net/
> http://linux01.gwdg.de/~pbleser/rpm-navigation.php?cat=Network/liferea/
> 
> Since mozilla has been withdrawn from 10.1 and "replaced" by
> seamonkey, there is no gtkmozembed available any more.
> From what I've seen, Seamonkey doesn't provide a 1:1 compatible form
> of gtkmozembed - at least I haven't been able to build liferea with it.
> 
> The MozillaFirefox packages don't ship a -devel, so I cannot use those
> to build gecko support in liferea (although liferea supports doing so).
> 
> What about shipping a MozillaFirefox-devel and a MozillaFirefox with
> gtkmozembed ?

I want to keep Firefox a leaf package without such dependencies.
 
> Note that "too much work" would be a valid reason not to do it, I
> mean, I just throw that question out in the wild, but I'm very much
> aware that MozillaFirefox & friends are very tedious pieces of
> software to package.
> 
> I'm just naively assuming that the headers, .so symlinks and pkgconfig
> files are being installed anyway and just being discarded by the spec
> file at the moment, which means it would not be too much work to
> include them in a -devel subpackage.




   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] java plugins for 32- or 64-bit seamonkey?

2006-05-04 Thread Wolfgang Rosenauer
On 2006-05-05 at 08:41:15 +0200, Ulrich Windl wrote (shortened):

> > Correct. And this is expected since we don't have a x86-64
> > Java/Flash/Adobe Reader plugin.
> 
> Wouldn't it be preferrable to ship/install a 32bit executable of the browser 
> for 
> archs that support running 32 and 64 bit binaries? I mean: Who needs 64 bit 
> in a 
> browser? Or some intermediate 64-bit stub that does an exec to a 32 bit 
> program 
> (Actually I don't know whow the plugin mechanism works)

The plugin mechanism doesn't allow such a workaround at the moment
unfortunately.

The 32bit workaround is already done for Firefox but wasn't possible
easily in the past for mozilla since many applications used libraries
from the mozilla installation.

It would have been possible with SeaMonkey though since it isn't an
integral part anymore for other applications.

If you think that's useful (I agree at the moment) to ship SeaMonkey in
32bit version on x86-64 please file a bugreport as enhancement.
(But the three examples from above should really be solved from their
vendors!)


   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] java plugins for 32- or 64-bit seamonkey?

2006-05-04 Thread Wolfgang Rosenauer
On 2006-05-04 at 16:17:22 +0200, Rupert Kolb wrote (shortened):

> (1) I didn't find seamonkey in any of the 10.1 prereleases. ... but it
> should be there!

It's only on the DVD and it wasn't there from the beginning.

> (2) Both, the 10.0-i386 and 10.0-x86_64 version, are working in the
> 10.1-RC3-x86_64
> (3) But the plugins (Java(TM) Plug-in 1.4.2_11-b06, Shockwave Flash 7.0
> r63,Adobe Reader 7.0) are only working in the 10.1-RC3-i386 version

Correct. And this is expected since we don't have a x86-64
Java/Flash/Adobe Reader plugin.


   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Firefox 1.5.0.2

2006-04-25 Thread Wolfgang Rosenauer
On 2006-04-25 at 17:27:52 +0300, Silviu Marin-Caea wrote (shortened):

> In RC2 Firefox is 1.5.0.1. This version has security bugs. Shouldn't it
> be updated to 1.5.0.2?
> 
> I know about version freeze and all that. However the box should not go
> out with known security vulnerabilities for the sake of version freeze.
> And this is not a feature release, but a bugfix release.

as already said, we have all security fixes from 1.5.0.2 in our
package (and some more as the JS/iframe crash which went public
yesterday).


   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Default firefox download location

2006-03-16 Thread Wolfgang Rosenauer
Hi,

On 2006-03-16 at 22:29:47 -0700, Chad Groneman wrote (shortened):

> It's probably been this way for a long time, but I noticed with beta8 that
> firefox defaults to automatically save to the desktop rather than the home
> folder or some other location.  It seems to me that this is a quick way to
> clutter the desktop, and for users who are unfamiliar with firefox, it might
> be difficult to find where to change that default behavior.
> 
> Maybe it is this way on purpose because of the "usability studies" (have you
> seen any of them?  Where do they get those people?!), but it seems like
> there would be something better.

The current behaviour is the default Firefox behaviour. We haven't
modified it.
 
> One option would be to revert firefox back to where it would prompt where to
> save files by default.  Or, if we don't want that extra window, may I
> present another possibility:  My opinion is that if we want downloaded files
> to be easy to find, we should have a "Downloads" folder off the Desktop
> which would be the default location.  That way less technical users could
> find their downloaded files, and it wouldn't clutter the desktop for those
> of us who are so busy it's hard to find time to clean the desktop.

Thanks for your feedback. I get your point and basically agree. But changing
it at this point is not really what I want.
If you want you to discuss this I propose the newsgroup
mozilla.dev.usability on news.mozilla.org or the mail-interface for it:
[EMAIL PROTECTED]
(https://lists.mozilla.org/listinfo/dev-usability)


CU,

   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   simply change to www.suse.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Nagios 2.0

2006-02-14 Thread Wolfgang Rosenauer
On 2006-02-14 at 03:10:14 -0400, Ciro Iriarte wrote (shortened):

> > It's not in 10.1. It was just released last week which was far too late
> > for 10.1.
> >
> Is it going to be included later?, i could install 10.1 and get the Beta
> packages from 10.2 in that case

It will be included in future versions, yes.
But you can't expect to get 10.2 packages working on 10.1. This *could*
work. But anyway I hope that with the buildservice it will be possible
to build for 10.1 with newer sources?

CU,

   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   simply change to www.suse.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-factory] Nagios 2.0

2006-02-13 Thread Wolfgang Rosenauer
On 2006-02-14 at 06:32:21 +0100, houghi wrote (shortened):

> On Tue, Feb 14, 2006 at 12:33:45AM -0400, Ciro Iriarte wrote:
> > Anybody knows if Nagios 2.0 will be available with the 10.1 release?
> 
> Just look if it is available on the Beta version. That could already be an
> indicator.

It's not in 10.1. It was just released last week which was far too late
for 10.1.

CU,

   Wolfgang

-- 
SUSE LINUX GmbH -o)   Tel: +49-(0)911-740 53 0
Maxfeldstr. 5   /\\   Fax: +49-(0)911-740 53 679
90409 Nuernberg, Germany   _\_v   simply change to www.suse.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]