Re: Can someone upgrade tor in Q3?
On 8 nov 2011, at 21.30, Matthew Dillon wrote: >I've adding the synchronization pass for all 2011 branches. It will >be a few hours before it gets them synced up. net/tor is now synced and at version 0.2.2.34 in pkgsrcv2/pkgsrc-2011Q3. Max
Re: Can someone upgrade tor in Q3?
Sorry folks, the cvs2git scripts were running only the base conversion for the 2011 pkgsrc branches and not running the synchronization pass to fixup missing bits. I've adding the synchronization pass for all 2011 branches. It will be a few hours before it gets them synced up. -Matt
Re: Can someone upgrade tor in Q3?
On Tuesday 08 November 2011 11:06:20 Max Herrgard wrote: > On 8 nov 2011, at 16.46, Pierre Abbat wrote: > > Still using pkgsrcv2, I switched to master, which dumped core somewhere > > else. The tor version in master is 0.2.1.29, which has some > > vulnerability. So I switched back to 2011Q3. > > H. I'm using pkgsrcv2 and the master branch. tor is version 0.2.2.34 > for me. I cloned the jsonn repository and compiled 0.2.2.34 and have been waiting for a lull in traffic so that I can update it without cutting someone's anonymous download or whatever, but it's been busy. Who does security updates in the quarterly branches? Pierre -- sei do'anai mi'a djuno puze'e noroi nalselganse srera
Re: Can someone upgrade tor in Q3?
On 8 nov 2011, at 16.46, Pierre Abbat wrote: > Still using pkgsrcv2, I switched to master, which dumped core somewhere else. > The tor version in master is 0.2.1.29, which has some vulnerability. So I > switched back to 2011Q3. H. I'm using pkgsrcv2 and the master branch. tor is version 0.2.2.34 for me. Max
Re: Can someone upgrade tor in Q3?
On Sunday 06 November 2011 16:25:28 Matthias Rampke wrote: > about every 6 hours, unless it's broken … consider trying > https://github.com/jsonn/pkgsrc – it's a git mirror maintained by the > NetBSD/pkgsrc people. (It's fairly new. Should we consider deprecating > pkgsrcv2.git?) I brought up the website and looked at the branches. There is no pkgsrc_2011Q3. Still using pkgsrcv2, I switched to master, which dumped core somewhere else. The tor version in master is 0.2.1.29, which has some vulnerability. So I switched back to 2011Q3. Pierre -- When a barnacle settles down, its brain disintegrates. Já não percebe nada, já não percebe nada.
Re: Can someone upgrade tor in Q3?
On Sun, 6 Nov 2011 22:25:28 +0100 Matthias Rampke wrote: > > consider trying https://github.com/jsonn/pkgsrc – it's a git mirror > maintained by the NetBSD/pkgsrc people. (It's fairly new. Should we > consider deprecating pkgsrcv2.git?) > AFAIK this in converted from Fossil SCM (cvs -> fossil -> git). Fossil repository is synchronized every ~20 minutes and then conversion to git takes some additional time. I'm not sure if this is accurate. Anyway Joerg Sonnenberger has been playing with repository conversions for some time and you should contact him probably. Some details can be found on his private site [1] and in papers from EuroBSDCon 2011 [2]. Personally I would send question about state of Git pkgsrc repository to tech-repository@ NetBSD mailing list. [1] http://www.sonnenberger.org/ [2] http://2011.eurobsdcon.org/papers/sonnenberger/fossilizing.pdf -- Paul Onyschuk
Re: Can someone upgrade tor in Q3?
On Sunday 06 November 2011 16:25:28 Matthias Rampke wrote: > On Sonntag, 6. November 2011 at 22:17, Pierre Abbat wrote: > > I'm using From git://git.dragonflybsd.org/pkgsrcv2 > > (http://git.dragonflybsd.org/pkgsrcv2); how often is it synced? > > about every 6 hours, unless it's broken … consider trying > https://github.com/jsonn/pkgsrc – it's a git mirror maintained by the > NetBSD/pkgsrc people. (It's fairly new. Should we consider deprecating > pkgsrcv2.git?) I just pulled from pkgsrcv2 and got updates of caml-light, libxml2, and squid31, but not tor, so it looks like the mirror is indeed broken. Pierre -- li ze te'a ci vu'u ci bi'e te'a mu du li ci su'i ze te'a mu bi'e vu'u ci
Re: Can someone upgrade tor in Q3?
On Sonntag, 6. November 2011 at 22:17, Pierre Abbat wrote: > > I'm using From git://git.dragonflybsd.org/pkgsrcv2 > (http://git.dragonflybsd.org/pkgsrcv2); how often is it synced? about every 6 hours, unless it's broken … consider trying https://github.com/jsonn/pkgsrc – it's a git mirror maintained by the NetBSD/pkgsrc people. (It's fairly new. Should we consider deprecating pkgsrcv2.git?) --matthiasr
Re: Can someone upgrade tor in Q3?
On Sunday 06 November 2011 10:26:40 Max Herrgard wrote: > On Sun, Nov 6, 2011 at 4:38 AM, Pierre Abbat wrote: > > On Friday 04 November 2011 14:40:51 Max Herrgard wrote: > >> 0.2.2.34 is in pkgsrc-2011Q3 since 46 hours. > > > > I just pulled it and I still have 0.2.2.32. > > Then your mirror is not synced yet. I'm using From git://git.dragonflybsd.org/pkgsrcv2; how often is it synced? Pierre -- .i toljundi do .ibabo mi'afra tu'a do .ibabo damba do .ibabo do jinga .icu'u la ma'atman.
Re: Can someone upgrade tor in Q3?
On Sun, Nov 6, 2011 at 4:38 AM, Pierre Abbat wrote: > On Friday 04 November 2011 14:40:51 Max Herrgard wrote: >> 0.2.2.34 is in pkgsrc-2011Q3 since 46 hours. > > I just pulled it and I still have 0.2.2.32. Then your mirror is not synced yet. zoidberg> setenv CVSROOT anon...@anoncvs.fr.netbsd.org:/pub/NetBSD-CVS zoidberg> cvs co -r pkgsrc-2011Q3 -Pd tmp pkgsrc/net/tor/Makefile U tmp/Makefile zoidberg> grep DISTNAME tmp/Makefile DISTNAME= tor-0.2.2.34 Max
Re: Can someone upgrade tor in Q3?
On Friday 04 November 2011 14:40:51 Max Herrgard wrote: > On 4 nov 2011, at 19.19, Pierre Abbat wrote: > > Nov 4 18:15:43 darner Tor[66814]: Please upgrade! This version of Tor > > (0.2.2.32) is not recommended, according to the directory authorities. > > Recommended versions are: 0.2.1.31,0.2.2.34,0.2.3.7-alpha > > 0.2.2.34 is in pkgsrc-2011Q3 since 46 hours. I just pulled it and I still have 0.2.2.32. # git pull remote: Counting objects: 11269, done. remote: Compressing objects: 100% (2256/2256), done. remote: Total 5834 (delta 4267), reused 4637 (delta 3533) Receiving objects: 100% (5834/5834), 1.59 MiB | 307 KiB/s, done. Resolving deltas: 100% (4267/4267), completed with 1411 local objects. >From git://git.dragonflybsd.org/pkgsrcv2 db7d27c..9ecd17e master -> origin/master 5539f5c..362298a pkgsrc-2011Q3 -> origin/pkgsrc-2011Q3 Updating 5539f5c..362298a Fast-forward devel/rt3/Makefile |3 +- devel/rt3/distinfo | 22 ++- devel/rt3/patches/patch-aa |6 +- devel/rt3/patches/patch-ab | 76 ++--- devel/rt3/patches/patch-lib_RT.pm | 24 +++ .../patches/patch-lib_RT_Action_CreateTickets.pm | 24 +++ .../patch-lib_RT_CustomFieldValues_External.pm | 19 ++ devel/rt3/patches/patch-lib_RT_Interface_Email.pm | 15 ++ .../patch-lib_RT_Interface_Email_Auth_GnuPG.pm | 19 ++ devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm | 49 + .../patches/patch-lib_RT_Transaction__Overlay.pm | 15 ++ devel/rt3/patches/patch-sbin_rt-attributes-viewer | 15 ++ .../rt3/patches/patch-sbin_rt-attributes-viewer.in | 15 ++ ...patch-share_html_Admin_CustomFields_Modify.html | 15 ++ .../patches/patch-share_html_Helpers_CalPopup.html | 22 +++ .../rt3/patches/patch-share_html_Search_Bulk.html | 31 +++ ...atch-share_html_Search_Elements_SelectChartType | 15 ++ .../patch-share_html_Ticket_Elements_PreviewScrips | 42 + devel/rt3/patches/patch-t_approval_admincc.t | 15 ++ devel/rt3/patches/patch-t_approval_basic.t | 15 ++ doc/CHANGES-pkgsrc-2011Q3 | 24 +++- graphics/freetype2/Makefile|4 +- graphics/freetype2/distinfo|8 +- lang/perl5/Makefile.common |3 +- lang/perl5/distinfo|3 +- lang/perl5/patches/patch-cpan_Digest_Digest.pm | 49 + mail/majordomo/Makefile|6 +- mail/majordomo/distinfo| 10 +- mail/majordomo/patches/patch-ad| 16 ++- mail/majordomo/patches/patch-ai| 12 +- mail/majordomo/patches/patch-aj| 38 +++-- mail/majordomo/patches/patch-an| 18 ++ net/wireshark/Makefile |4 +- net/wireshark/PLIST| 19 ++- net/wireshark/distinfo |8 +- print/xpdf/MESSAGE | 22 +++ print/xpdf/Makefile| 14 +- print/xpdf/distinfo| 38 +--- print/xpdf/patches/patch-aa| 24 ++- print/xpdf/patches/patch-ab| 20 -- print/xpdf/patches/patch-ai| 68 print/xpdf/patches/patch-ak| 87 +- print/xpdf/patches/patch-al| 11 +- print/xpdf/patches/patch-am| 194 ++-- print/xpdf/patches/patch-an| 36 print/xpdf/patches/patch-aq| 24 ++-- print/xpdf/patches/patch-bb| 15 -- print/xpdf/patches/patch-bc| 16 +- print/xpdf/patches/patch-bd| 31 --- www/swiftsurf/distinfo |3 +- www/swiftsurf/patches/patch-src_Makefile | 20 ++ x11/labltk/PLIST |7 +- x11/labltk/PLIST.opt |4 +- 53 files changed, 847 insertions(+), 466 deletions(-) create mode 100644 devel/rt3/patches/patch-lib_RT.pm create mode 100644 devel/rt3/patches/patch-lib_RT_Action_CreateTickets.pm create mode 100644 devel/rt3/patches/patch-lib_RT_CustomFieldValues_External.pm create mode 100644 devel/rt3/patches/patch-lib_RT_Interface_Email.pm create mode 100644 devel/rt3/patches/patch-lib_RT_Interface_Email_Auth_GnuPG.pm create mode 100644 devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm create mode 100644 devel/rt3/patches/patch-lib_RT_Transaction__Overlay.pm create mode 100644 devel/rt3/patches/patch-sbin_rt-attributes-viewer create mode 100644 devel/rt3/patches/patch-sbin_rt-attributes-viewer.in create mode 100644 devel/rt3/patches/pa
Re: Can someone upgrade tor in Q3?
On Friday 04 November 2011 18:19:31 Justin Sherrill wrote: > Building happens all the time for the quarterly release, but it takes a > while for each round to finish - plus I've had crashing problems... so > build from source if you want it asap. Will do, probably Sunday. On Friday 04 November 2011 15:46:09 David Crosswell wrote: > My understanding is that a French 'security team' compromised tor in that > version and the new version carries the applicable upgrade. > Regards, If the French security team is who I'm thinking of, the bug he found (if he actually found one) is a hole only on Windows, and he gave completely wrong figures for the fraction of Tor relays that run Windows and the number of bridges. Pierre -- li ze te'a ci vu'u ci bi'e te'a mu du li ci su'i ze te'a mu bi'e vu'u ci
Re: Can someone upgrade tor in Q3?
On Sat, 5 Nov 2011 04:19:09 AM Pierre Abbat wrote: > Nov 4 18:15:43 darner Tor[66814]: Please upgrade! This version of Tor > (0.2.2.32) is not recommended, according to the directory authorities. My understanding is that a French 'security team' compromised tor in that version and the new version carries the applicable upgrade. Regards, David Crosswell.
Re: Can someone upgrade tor in Q3?
Building happens all the time for the quarterly release, but it takes a while for each round to finish - plus I've had crashing problems... so build from source if you want it asap. On Nov 4, 2011 2:45 PM, "Max Herrgard" wrote: > On 4 nov 2011, at 19.19, Pierre Abbat wrote: > > Nov 4 18:15:43 darner Tor[66814]: Please upgrade! This version of Tor > > (0.2.2.32) is not recommended, according to the directory authorities. > > Recommended versions are: 0.2.1.31,0.2.2.34,0.2.3.7-alpha > > 0.2.2.34 is in pkgsrc-2011Q3 since 46 hours. > > # cd /usr/pkgsrc/net/tor && git pull && bmake replace > > I don't know how often the binary packages pkgin pulls get rebuilt. > > > Hope that helps. > > Cheers, > Max > >
Re: Can someone upgrade tor in Q3?
On 4 nov 2011, at 19.19, Pierre Abbat wrote: > Nov 4 18:15:43 darner Tor[66814]: Please upgrade! This version of Tor > (0.2.2.32) is not recommended, according to the directory authorities. > Recommended versions are: 0.2.1.31,0.2.2.34,0.2.3.7-alpha 0.2.2.34 is in pkgsrc-2011Q3 since 46 hours. # cd /usr/pkgsrc/net/tor && git pull && bmake replace I don't know how often the binary packages pkgin pulls get rebuilt. Hope that helps. Cheers, Max
