20:06:01 <DavidWHodgins> #startmeeting
20:06:01 <Inigo_Montoya`> Meeting started Thu Mar 10 20:06:01 2016 UTC.  The chair is DavidWHodgins. Information about MeetBot at http://wiki.debian.org/MeetBot.
20:06:01 <Inigo_Montoya`> Useful Commands: #action #agreed #help #info #idea #link #topic.
20:06:12 <DavidWHodgins> #chair wilcal MrsB
20:06:12 <Inigo_Montoya`> Current chairs: DavidWHodgins MrsB wilcal
20:06:19 <DavidWHodgins> #topic * Who's new? If you are new then come and say Hi!
20:06:31 <DavidWHodgins> Everyone please introduce yourselves
20:06:32 <lewyssmith> wikigazer: Not that I remember. I was one of the 'pregnant programmers', off-site, maintaining a few Unix applications.
20:06:57 <wilcal> do your thing again Super
20:06:59 <hviaene> Sorry to be late
20:07:00 <wikigazer> lewyssmith: ah, ok
20:07:11 <lewyssmith> Evening Len.
20:07:34 <tarazed> Hi Lewis, everybody
20:07:36 <DavidWHodgins> I'm Dave Hodgins, from London, Ontario, Canada. Started my first programming job in 1979, on IBM mainframes. Been using linux for about 10 years, and am a deputy leader of this team.
20:07:46 <rindolf> I am Shlomi from Tel Aviv, Israel.
20:07:48 <tjandrews> Newcomers are being shy, David.
20:08:03 <wilcal> "wilcal" for (Wil)liam in (Cal)ifornia, live near San Diego ( Surf City USA )
20:08:04 <wilcal> First official College computer class in Sept 1964, Computer Engineer 1968
20:08:21 <rindolf> TheSuperGeek: aren't you new?
20:08:22 <TheSuperGeek> Hello, i'm TheSuperGeek, from france, I like mageia and i use linux for 4 years now
20:08:30 <TheSuperGeek> rindolf: i'm new :)
20:08:36 <rindolf> TheSuperGeek: yes.
20:08:37 <wilcal> Where in France
20:08:40 <MrsB> Morning QA
20:08:41 <wikigazer> bienvenue TheSuperGeek
20:08:50 <DavidWHodgins> TheSuperGeek: Welcome Martin
20:08:53 <TheSuperGeek> wikigazer: In east :)
20:09:01 <tjandrews> I'm a farmer in Central New York State, USA. Been using Mandrake/Mandriva/Mageia since 2002.
20:09:17 <tarazed> I', Len from Scotland  - programming for 50 years in scientific environment,  Linux for 20 years.
20:09:41 <Brian_> I live in Central Illinois, USA, Linux since 2006.  Used to code some
20:09:50 <rindolf> tarazed: wow! 50 years is a lot.
20:09:53 <hviaene> Herman Viaene from Belgium
20:10:08 <TheSuperGeek> I learn node.js as begginer. Just for fun :)
20:10:16 <tarazed> yeah, things have changed a lot also.
20:10:16 <tjandrews> Did some minicomputer programming in the early 70's, while in the military.
20:10:26 <wilcal> FWIW I did a lot of work with ICL in the early 80's
20:10:33 <lewyssmith> I am an expat retired in France. Long mixed experience, Linux user for ? 15y. Mandrake was my favourite.
20:10:45 <lewyssmith> wilcal: Really? Where?
20:11:02 <wilcal> Letchworth and the manufacturing facilities
20:11:17 <wilcal> mostly corprate
20:11:29 <tarazed> We had an ICL8130?
20:11:42 <lewyssmith> wilcal: Interesting. We must chat one day.
20:11:48 <wilcal> maybe had one of my backup systems i sold to ICL
20:12:10 <wilcal> data cartridge
20:12:13 <wikigazer> wilcap did you use Perq h/w?
20:12:15 <tarazed> 192 kB ram
20:12:27 <MrsB> I'm Claire, deepest darkest Black Country, UK. late 30's ;) Been with the QA team since it began and current team leader. Started my linux journey with slackware and early fedora core's in 2003/4 and some buntu's and others before settling on mandriva and subsequently mageia.
20:12:39 <wilcal> ICL hardware interface not ours we just sold them the drive
20:12:52 <wikigazer> MrsB: hi-5 for starting with Slackware!
20:12:54 <wilcal> made in San Diego USA
20:13:19 <TheSuperGeek> Ok
20:13:26 <MrsB> somebody said "if you want to learn linux, try slackware". I don't think they liked me much, but it gave me a good undrstanding of the concepts
20:13:30 <rindolf> wikigazer: I also started with Slackware back in 1996ish.
20:13:36 <DavidWHodgins> I started with asplinux, then gentoo, slackware, mandrake/riva, then Mageia
20:13:38 <rindolf> maybe it was 1995.
20:13:42 <wikigazer> rindolf: hi-5 man!
20:13:47 <rindolf> wikigazer: hi 5.
20:13:57 <TheSuperGeek> I started with ubuntu :)
20:14:08 <lewyssmith> New!
20:14:10 <wilcal> that's a good start
20:14:11 <Brian_> mandriva for me, then ubuntu
20:14:27 <TheSuperGeek> lewyssmith: ?
20:14:31 <Brian_> then all over the place
20:14:32 <wilcal> my first computers were what we call antiques today :-0
20:14:40 <Brian_> ditto
20:14:46 <lewyssmith> TheSuperGeek: relatively recent.
20:14:48 <wilcal> card punch stuff
20:14:53 <wikigazer> ah! I learned on a PDP-11 at college
20:14:57 <tarazed> And paper tape
20:15:01 <TheSuperGeek> lewyssmith: ok
20:15:05 <Brian_> ti-990 for me
20:15:08 <DavidWHodgins> My first one (1975) was a honeywell 100/5 "midi-computer" with all of 16KB of ram. :-)
20:15:14 <wikigazer> punched paper tapes in pockets :-)
20:15:16 <wilcal> ya i did a lot of projects on PDP stuff
20:15:20 <tjandrews> I used the Atari ST for a while, then Windows 98SE. My first virus was enough for me, and I started looking elsewhere.
20:15:27 <DavidWHodgins> punch cards on that one
20:15:28 <hviaene> yes paper tape, you could glue together
20:15:42 <wilcal> Remember DEC Tape?
20:15:45 <tarazed> Did a lot of that.
20:15:51 <tjandrews> The computer I used in the 70s was the HP 2116.
20:16:05 <hviaene> ITT3200
20:16:14 <TheSuperGeek> A lot of history in here !
20:16:16 <wilcal> old timers day here :-))
20:16:20 <DavidWHodgins> lol. I think we should move on, or we'll be here forever. :-)
20:16:21 <wikigazer> yes but now  DUCT tape is more useful :-)
20:16:25 <TheSuperGeek> :-)
20:16:30 <lewyssmith> Perhaps we should get back on track. I am happy to mentor TheSuperGeek if he agrees.
20:16:37 <MrsB> We need to find you a mentor TheSuperGeek
20:16:40 <rindolf> I started from a PC XT with 640 KB of RAM and two 360 KB diskette drives.
20:16:44 <MrsB> Lewis willing?
20:16:53 <lewyssmith> Already said.
20:16:56 <DavidWHodgins> TheSuperGeek: Ok with lewyssmith mentoring you?
20:16:57 <wikigazer> rindolf grey import of IBM PC ?
20:17:05 <rindolf> wikigazer: pardon?
20:17:07 <MrsB> cool, thankyou
20:17:14 <wikigazer> rindolf: nevermind
20:17:22 <TheSuperGeek> DavidWHodgins: yes i'll be happy :)
20:17:33 <DavidWHodgins> #topic * Mageia 6 - It's life Jim, but not as we know it..
20:17:43 <MrsB> Ahh
20:17:48 <MrsB> It's alive!
20:17:52 <lewyssmith> Well done Dave.
20:17:53 <wilcal> Yes!!!! There's life in M6
20:17:53 <MrsB> but not quite living
20:17:53 <DavidWHodgins> Hopefully new iso images soon. Maybe they'll even boot. :-)
20:17:56 <hviaene> Sortt off
20:18:13 <wilcal> Filing my first cautious bugs
20:18:13 <tarazed> The 64bit seemed fine to me.
20:18:16 <MrsB> tmb how are you getting on, need more time?
20:18:20 <wilcal> real obvious stuff
20:18:28 <tjandrews> I actually got a 64-bit Plasma 5 install working in Virtualbox!!!
20:18:33 <tmb> MrsB, with what ?
20:18:41 <MrsB> the kernels, isos etc
20:18:48 <MrsB> dev1
20:18:57 <rindolf> well, I've been running into some pretty serious bugs with the Classic x86-64 DVD.
20:19:05 <tmb> heh, I've pushed 2 sets of kernels since tuesday :)
20:19:15 <MrsB> lol guess not then :D
20:19:22 <wilcal> sometimes it's hard to tell if it's feature of Plasma or a bug
20:19:35 <tmb> but the ones curently pushed should be good to go for dev1
20:19:49 <MrsB> So new ISOs soonish then?
20:20:02 * ennael will rebuild isos tonight (if we do not have anymore trolls :p)
20:20:19 <DavidWHodgins> tmb: I should have opened a bug report on it. Can you make sure the latest samba is included?
20:20:20 <tmb> yeah, I will try to build live medias tomorrow
20:20:35 <MrsB> I'm headed for pills and bed after the meeting
20:20:45 <lewyssmith> Migraine?
20:20:47 <ennael> :)
20:20:58 <ennael> MrsB wrote a lot today :)
20:20:59 <tjandrews> Question: Should there be two volume controls in Plasma 5? 'Cause that's what I'm seeing.
20:21:00 <MrsB> just a long day
20:21:09 <tmb> DavidWHodgins, we build against a fully synced cauldron (to get the latest kernels + stuff)
20:21:10 <TheSuperGeek> tjandrews: kmix ?
20:21:23 <DavidWHodgins> tmb: Good. Thanks
20:21:23 <wilcal> feature or bug tjan?
20:21:53 <tjandrews> Two controls in the panel, each one addressing different components.
20:21:58 <DavidWHodgins> tjandrews: That should be reported, but is definitely not a blocker for a 6dev1 release.
20:22:05 <MrsB> report it as a bug tj please, it sounds like we have a mix of old and new still
20:22:24 <wilcal> There's a lot of funny stuff go'n on in the Plasma desktop
20:22:37 <tjandrews> Sound is low, too, unless I use VLC to raise it above 100%.
20:22:38 <DavidWHodgins> For 6dev1 all we are concerned with is that it can be installed, boot, and start the de.
20:22:44 <MrsB> It's the first time we've integrated it so it'll take some work to get right
20:22:49 <hviaene> Ahem, funny like getting blocked??
20:22:54 <MrsB> yep, that's the size of it Dave
20:22:59 <lewyssmith> tjandrews: I have had that since M5 at least.
20:23:28 <MrsB> Blockers is what we call bugs which will prevent us releasing the ISO
20:24:05 <MrsB> we have what we call a tracker bug for mga6 which keeps track of all the blockers
20:24:13 * MrsB cant remember it
20:24:32 <MrsB> https://bugs.mageia.org/show_bug.cgi?id=15527
20:24:33 <[mbot> Bug 15527: normal, release_blocker, bugsquad, NEW , [Tracker] Mageia 6 release critical
20:24:48 <tmb> ennael, did you sync repo for 4.4.5-1 kernel ?
20:25:31 <MrsB> #info we should now have a keyword accesible to us on bugzilla for 6dev1 - Please add that as a keyword for bugs you create rather than putting it in the Whiteboard field
20:26:10 <tjandrews> On the volume control thing, I'll wait on a bug report until after I try the new isos, just in case it goes away on its own.
20:26:28 <ennael> tmb: in progress
20:26:36 <ennael> and done
20:26:45 <MrsB> ok. It's always better to have too much reported than too little though, so don't be shy
20:27:21 <MrsB> everybody understand about the keyword?
20:27:23 <DavidWHodgins> #info new iso images with 4.4.5-1 kernel expected soon
20:27:43 <TheSuperGeek> MrsB: yes
20:27:49 <DavidWHodgins> I've added the keyword to bug 15527
20:27:50 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=15527 normal, release_blocker, bugsquad, NEW , [Tracker] Mageia 6 release critical
20:27:54 <wilcal> yup i switched to that a couple days ago
20:28:21 <DavidWHodgins> #undo
20:28:21 <Inigo_Montoya`> Removing item from minutes: <MeetBot.items.Info object at 0xb69f3c0c>
20:28:25 <MrsB> everybody also see the email about sha512?
20:28:35 <wikigazer> yep it's a good idea
20:28:36 <DavidWHodgins> #info new Mageia 6 iso images with 4.4.5-1 kernel expected soon
20:29:01 <MrsB> this is Dave's idea, so I'll let him explain what is going to change
20:29:08 <lewyssmith> I am not entheusiastic. Why is it deemed neceaary?
20:29:18 <DavidWHodgins> Also the iso images themselves will have gpg (detached) signatures
20:29:36 <wikigazer> lewyssmith: did you hear what happened over at Linux Mint?
20:29:49 <DavidWHodgins> lewyssmith: Due to the hacking of the mint website, we want to provide as many ways as we can to verify the iso images
20:30:01 <Luigi12_work> s/as many/secure/
20:30:20 <Ages> is the md5 hash, visible on the site, hosted on the same site which has the isos?
20:30:27 <lewyssmith> Yes. But how would sha512 change anything? What is wrong with the two checksums we have already?
20:30:34 <Luigi12_work> Ages: ISOs are on the mirrors
20:30:36 <MrsB> The hashes are downloaded with the ISO
20:30:45 <MrsB> yep on mirrors or torrents
20:30:54 <DavidWHodgins> Ages: the hash is both on the website, and in files on the mirrors
20:31:06 <TheSuperGeek> MrsB: but the hacker can modifu hash on isos ?
20:31:12 <Luigi12_work> lewyssmith: nothing is wrong with sha1 yet that we know of for sure, but it's thought to be weak enough that it could be compromised (and probably will be soonish if it hasn't been already)
20:31:12 <TheSuperGeek> *modify
20:31:16 <MrsB> yes, but not the ones on the mirrors
20:31:25 <TheSuperGeek> MrsB: ok
20:31:27 <Ages> i guess my question is, if the modify the iso and get it posted, they could also modify the site?
20:31:29 <DavidWHodgins> And not the gpg signatures
20:31:30 <wikigazer> do we have an proactive checking of the hashes to detect unexpected changes?
20:31:39 <Ages> ah, ok, on track now, sounds ok to me
20:31:58 <Luigi12_work> Ages: what happened with Mint was they made their own fake mirror, they didn't compromise the upstream ISOs
20:31:59 <wikigazer> s/an/any/
20:32:00 <lewyssmith> If we go for the new thing, why keep the old?
20:32:17 <DavidWHodgins> There is a limit on what we can do for new users. For people who already have our gpg key installed, they can use that to verify the iso images
20:32:27 <lewyssmith> Checksums.
20:32:30 <tjandrews> Any idea how soon Mageiasync will be modified to address the situation?
20:32:34 <DavidWHodgins> lewyssmith: compatibility with older versions of the dorsync script
20:32:44 <lewyssmith> That's all?
20:32:56 <MrsB> Mageiasync will still be useable to check the md5 & sha1 sums
20:33:04 <DavidWHodgins> Primarily. It doesn't hurt anything to leave them there.
20:33:43 <tmb> lewyssmith, when all have new dorsync on stable we can consider dropping older hashes
20:33:48 <DavidWHodgins> tmb: How many (and which) people have access to the private key used to sign the iso images?
20:34:00 <lewyssmith> tmb: Thanks, & good.
20:34:00 <Luigi12_work> maybe we shouldn't answer that in public
20:34:02 <wikigazer> if an adversary compromised the hashes on the web server, how would anyone find out ?
20:34:03 <MrsB> I'll update that this weekend
20:34:18 <Luigi12_work> DavidWHodgins: probably best to discuss that outside of the meeting (and probably the channel)
20:34:23 <DavidWHodgins> Ok
20:34:54 <MrsB> the hashes are downloaded with the ISO from the mirrors wikigazer. They are signed with the mageia release key
20:35:00 <Luigi12_work> wikigazer: if someone checked the hashes of the ISOs, they wouldn't match
20:35:30 <wikigazer> Luigi12_work: and if the adversary replaced bot the ISO and the hash?
20:35:33 <DavidWHodgins> wikigazer: There isn't much we can do for new users, if the web site gets hacked. For existing users, as long as they have the Mageia signing key already installed, the hacked version of the iso can be detected.
20:35:43 <Luigi12_work> wikigazer: very unlikely
20:36:11 <lewyssmith> How ill/does the gpg bit work?
20:36:14 <Luigi12_work> wikigazer: they could make a fake mirror or possibly compromise a mirror, less likely they'd compromise Mageia's rsync server
20:36:14 <wikigazer> well, many very unlikely things are happening all over the net
20:36:15 <lewyssmith> will
20:36:22 <Luigi12_work> even then, the torrent would be unaffected
20:36:45 <MrsB> The point is that it's better with extra security measures than without
20:36:50 <DavidWHodgins> lewyssmith: I'll write a note explaining it to the mailing list explaining it, and look at adding more to the wiki about it too.
20:37:03 <lewyssmith> Good idea.
20:37:12 <MrsB> that would help Dave I think yes
20:37:18 <wikigazer> but, it has to be smart security, not stuff that just makes life more complicated
20:37:30 <MrsB> that's a great buzzword
20:37:32 <DavidWHodgins> Agreed
20:37:39 <Luigi12_work> maybe I should teach an online class about Linux and security and market it to Mageia users
20:37:41 * Luigi12_work runs
20:37:47 <DavidWHodgins> :-)
20:37:55 <Luigi12_work> sorry, couldn't resist
20:38:10 <DavidWHodgins> Anything else about Mageia 6 before we move on?
20:38:23 <lewyssmith> 'nuff said, I hope.
20:38:24 <wilcal> yes
20:38:36 <MrsB> keep an eye out for the new ISOs then peeps
20:38:43 <Luigi12_work> ahh, peeps, just in time for Easter
20:38:50 <wilcal> during the grub2 boot process verbose how can i pause the scroll?
20:38:52 <MrsB> mmm chocolate
20:38:56 <MrsB> go dave
20:39:19 <wilcal> i tried ctrl-s and that does not always work
20:39:22 <Luigi12_work> wilcal: you can't pause it, but you can scroll up with Ctrl+PageUp
20:39:26 <DavidWHodgins> I don't remember. I usually use grub, and the logs
20:39:38 <Luigi12_work> best to check the journal once it's booted
20:39:51 <DavidWHodgins> journalctl -ab
20:39:55 <wilcal> mmmmmmm but the screen goes blank i wonder if that will work
20:39:58 <DavidWHodgins> journalctl -ab|less
20:40:03 <wilcal> gnome in Vbox boot
20:40:15 <Luigi12_work> wilcal: boot it to multi-user.target (the argument "3" to the kernel in GRUB)
20:40:17 <wilcal> can't get into the system
20:40:51 <wilcal> k
20:40:52 <MrsB> 3 or 1 on kernel cmdline
20:41:04 <DavidWHodgins> in virtualbox, also add the divider=10 kernel option due to bug 44
20:41:05 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=44 critical, High, erwanaliasr1, NEW , slow OS under VirtualBox, due to HZ=1000 (was mkinitrd fails in VB), syslinux, mageia-gfxboot-theme, drakx-installer-images
20:41:06 <Luigi12_work> yeah 1 or single if 3 doesn't work
20:41:14 <DavidWHodgins> Makes it quite a bit faster
20:41:20 <MrsB> Ok to move on?
20:41:35 <lewyssmith> Let's.
20:41:43 <MrsB> #topic Testing Updates
20:41:43 <DavidWHodgins> #topic * Testing Updates - Any difficulties, problems, issues?
20:41:44 <rindolf> ok.
20:41:47 <MrsB> ahh :)
20:41:50 <DavidWHodgins> Oops
20:42:10 <MrsB> http://madb.mageia.org/tools/updates
20:42:12 <[mbot> [ Mageia App Db - Current Update candidates ]
20:42:32 <MrsB> We're still doing pretty well with updates. Let's try and keep it as low as we can though please.
20:42:34 <DavidWHodgins> I've got xymon running, but it's changed quite a bit since we last tested it. Have to dig further on how to configure it properly
20:42:36 <wilcal> i'll ok php but not validate it yet that ok David?
20:42:55 <Luigi12_work> wilcal: sure.  As long as I can get internet working long enough at home I'll test it this weekend.
20:42:58 <MrsB> #info Please sysadmins will you push our Backports for us. kthx xx
20:43:01 <DavidWHodgins> Go ahead and validate it. I just haven't gotten around to it. It's working fine.
20:43:13 <lewyssmith> Testing bug 16803 screwed my system; bug 17918 apparently resolves that - too late!
20:43:16 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=16803 normal, Normal, qa-bugs, NEW , os-prober needs full path for blkid, os-prober
20:43:17 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=17918 normal, Normal, qa-bugs, NEW , kcm-grub2 has wrong requires and cannot be installed in UEFI as it removes the bootloader., kcm-grub2-0.5.8-12
20:43:18 <Luigi12_work> ahh ok thanks Dave
20:44:02 <MrsB> If php is OK with a couple of webappas that's enough wilcal, unless there is a PoC we can use
20:44:07 <MrsB> webapps
20:44:08 <Luigi12_work> thanks lewyssmith, I just put the proper blocks/depends in place on those two bugs
20:44:13 <tjandrews> That nvidia-current update has been sitting there a long time. Any way of testing it without buying a new card?
20:44:32 <MrsB> It's waiting on the packager atm tj
20:44:34 <DavidWHodgins> I use ati/fglrx on my systems
20:44:49 <tjandrews> My card uses the nvidia340 module.
20:44:52 <MrsB> the ones with a grey background are waiting further input from packagers
20:44:56 <lewyssmith> Luigi12_work: I need to recover my system first.
20:45:18 <wilcal> that's for old nvidia boards right?
20:45:25 <MrsB> yes
20:45:36 <MrsB> nvidia-current is current tho
20:45:37 <DavidWHodgins> I think pdgin-otr usies libotr, so they should be able to be tested together
20:45:43 <Luigi12_work> yep
20:46:04 <DavidWHodgins> It's easy to test too
20:46:05 <MrsB> #info pdgin-otr usies libotr, so they should be able to be tested together
20:46:08 <lewyssmith> Can that be put in both bugs?
20:46:12 <Luigi12_work> already was
20:46:16 <lewyssmith> !
20:46:18 <Luigi12_work> in fact, blocks/depends are already in place
20:46:22 <wilcal> if I replace my current 3-year old nvidia board with a new one that should work out of the box right?
20:46:39 <MrsB> should :)
20:47:03 <DavidWHodgins> Search on the model first, for linux reviews
20:47:16 <DavidWHodgins> Preferably Mageia reviews
20:47:25 <MrsB> I think it changed over around 8600
20:47:39 <MrsB> 8500GT 8600GT
20:48:04 <tjandrews> Mine is a 9800 GT, and Mageia selects the 340 driver.
20:48:07 <MrsB> maybe 220 too. around then
20:48:58 <lewyssmith> Bug 16803 needs marking that bug 17918 update must be installed first; I think. What do you think, David?
20:48:58 <MrsB> tmb will have a link if you ask him nicely
20:49:00 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=16803 normal, Normal, qa-bugs, NEW , os-prober needs full path for blkid, os-prober
20:49:01 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=17918 normal, Normal, qa-bugs, NEW , kcm-grub2 has wrong requires and cannot be installed in UEFI as it removes the bootloader., kcm-grub2-0.5.8-12
20:49:27 <wilcal> mines a gt440
20:49:33 <Luigi12_work> lewyssmith: if that's the case, maybe the Requires in the packages need to be adjusted
20:50:05 <MrsB> oh that was good timing barjac
20:50:15 <DavidWHodgins> bug 17918 is about fixing the requires
20:50:16 <tjandrews> Description for nvidia-current says "Geforce 420 series and later"
20:50:23 <Luigi12_work> welcome back barjac
20:50:48 <MrsB> that'll be the cutoff then tj
20:50:56 <Luigi12_work> DavidWHodgins: ok
20:51:15 <lewyssmith> Luigi12_work: It seems to be important that 17918 is installed *before* 16803. If not, bad news. Not sure about 'requires'.
20:51:23 <hviaene> good night all
20:51:28 <MrsB> Nite herman
20:51:33 <DavidWHodgins> hviaene: Have a good night
20:51:44 <wikigazer> he already is..  :-)
20:51:49 <barjac> Luigi12_work: Hi
20:52:07 <DavidWHodgins> I've never used Hatari or Sleuthkit before. Have to check them out to see how to test them
20:52:12 <Luigi12_work> barjac: your os-prober and kcm-grub2 updates were just being discussed here
20:52:23 <MrsB> I think you mentioned that one the bug didn't you lewis? Add the feedback marker and I'm sure barjac will take another look
20:52:53 <tmb> lewyssmith, then the package in 16803 need to conflict too version older than the one in 17918
20:53:28 <lewyssmith> MrsB: I need to recover my system before all else. It no longer boots after trying 16803 pre-update.
20:53:33 <DavidWHodgins> Need to ensure both updates get installed together
20:53:35 <MrsB> ouch :\
20:53:41 <Luigi12_work> yeah
20:53:54 <MrsB> You know how to do that ?
20:54:16 <Luigi12_work> sounds like what tmb said will work
20:54:29 <Luigi12_work> barjac: see tmb's comment
20:55:14 <barjac> Yes - it needs a conflict, although it's been like that for ever so nobody can have both to update
20:56:07 <MrsB> caused lewis not to be able to boot his system, can we address it with this update please
20:56:41 <lewyssmith> It wes *pre* update that screwed my system; I never got as far as trying the update.
20:57:23 <MrsB> You know how to recover it?
20:57:23 <DavidWHodgins> Ah. That's different
20:57:53 <lewyssmith> I will try chrooting from another system, re-installing rub2-efi & re-building Grub.
20:57:56 <barjac> MrsB: urpmi grub2-efi will recover it
20:57:59 <DavidWHodgins> You'll have to recover the system, and skip the pre-update version
20:58:12 <MrsB> that's ok then :)
20:58:20 <Luigi12_work> thanks barjac
20:58:50 <DavidWHodgins> Boot from live and then chroot into the installed system, in order to be able to install grub2-efi
20:58:56 <MrsB> Are there any other problematic ones there?
20:59:49 <DavidWHodgins> Haven't looked to see what Hatari and Sleuthkit are. The rest are easy
20:59:51 <MrsB> We've doen really well guys so let's keep it going as best we can while ISO testing too
21:00:14 <lewyssmith> Bug 17846 xymon looks difficult.
21:00:15 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=17846 normal, Normal, qa-bugs, NEW , xymon new security issues CVE-2015-205[4-8], xymon-4.3.17-5.mga5.src.rpm
21:00:41 <barjac> MrsB: Please email me the iso details
21:00:42 <DavidWHodgins> I've got xymon to run, but need to learn what's changed in it's configuration since I last tested it.
21:01:18 <MrsB> David R spent soem time on it, he was a bit concerned about one of the modules, could you advise on that one tmb please
21:01:31 <MrsB> https://bugs.mageia.org/show_bug.cgi?id=17846
21:01:32 <[mbot> Bug 17846: normal, Normal, qa-bugs, NEW , xymon new security issues CVE-2015-205[4-8], xymon-4.3.17-5.mga5.src.rpm
21:01:56 <MrsB> will do barjac
21:02:24 <barjac> MrsB: Thanks
21:02:36 <lewyssmith> I am surprised no-one has tried bug 17807 - games!
21:02:36 <MrsB> Let's do the roundup then
21:02:37 <[mbot> Bug https://bugs.mageia.org/show_bug.cgi?id=17807 enhancement, Normal, qa-bugs, NEW , Backport for Godot 2.0, MIT-licensed feature-packed game engine, godot-2.0-1.mga5
21:02:56 <tmb> ah, seems I promised a week ago to take xymon for a run... TODO++
21:02:58 <MrsB> yeah, backports are low priority but still.. it's a game!
21:02:58 <wilcal> i think that has to be on real hardware right
21:03:05 <MrsB> thanks tmb
21:03:17 <DavidWHodgins> #topic * Luigi's Roundup - Security news & upcoming updates
21:03:19 <Luigi12_work> lewyssmith: yeah, dolphin-emu too
21:03:24 <MrsB> tah dude
21:03:30 <DavidWHodgins> :-)
21:03:32 <MrsB> ping Luigi12_work :P
21:03:49 <Luigi12_work> hello
21:03:57 <Luigi12_work> so cjw is building the chromium-browser-stable update right now
21:04:01 <MrsB> fancy meeting you here :)
21:04:06 <Luigi12_work> guillomovitch is building the openssh update right now
21:04:20 <Benmc> lewyssmith,[ quietly ] Can I speak to you after the meeting?
21:04:24 <MrsB> #info Chromium update on it's way. Openssh too.
21:04:26 <Luigi12_work> the openssh issue is a command-injection issue when X11 forwarding is enabled (which it is by default in Mageia)
21:04:33 <Luigi12_work> that issue also affects dropbear
21:04:44 <DavidWHodgins> So very high priority
21:04:47 <Luigi12_work> in dropbear it was just fixed upstream yesterday, so hopefully danf will backport the patch for it soon
21:04:52 <Luigi12_work> DavidWHodgins: likely, yes
21:04:57 <MrsB> always is with openssh
21:04:59 <lewyssmith> Benmc: e-mail? But I want to go to bed, so send it forthwith.
21:05:20 <Luigi12_work> for the putty issue already assigned to QA, putty is also bundled in filezilla, so when filezilla upstream updates that, we'll have to update that too
21:05:37 <Luigi12_work> that's all
21:05:41 <MrsB> #info openssh issue also affects dropbear so will be an update for that too
21:05:58 <lewyssmith> Quite modest for once. Thanks David.
21:06:12 <tmb> I'll add to the list then ... :)
21:06:13 <MrsB> #info putty issue also affects filezilla so that will be updated when updated upstream
21:06:53 <MrsB> Thanks Luigi12_work
21:07:02 <MrsB> anybody any questions for David?
21:07:15 <DavidWHodgins> tmb: kernels, or more stuff too?
21:07:19 <wikigazer> erm, I wondered if there are any comments about: "Linux netfilter IPT_SO_SET_REPLACE memory corruption" => https://code.google.com/p/google-security-research/issues/detail?id=758
21:07:20 <[mbot> [ Issue 758 - google-security-research - Linux netfilter IPT_SO_SET_REPLACE memory corruption - Google Security Research - Google Project Hosting ]
21:08:24 <MrsB> looks like something extra for tmb's list
21:08:46 <MrsB> We are expecting to update the kernel soon so likely be addressed then
21:08:54 <wikigazer> also, I saw a new BIND advisory: https://kb.isc.org/article/AA-01352/74/CVE-2016-1285%3A-An-error-parsing-input-received-by-the-rndc-control-channel-can-cause-an-assertion-failure-in-sexpr.c-or-alist.c.html
21:08:57 <[mbot> [ CVE-2016-1285: An error parsing input received by the rndc control channel can cause an assertion failure in sexpr.c or alist.c | Internet Systems Consortium Knowledge Base ]
21:09:02 <tmb> yeah, I saw it on oss-sec today... I want to see the fix confirmed / acked properly
21:09:02 <MrsB> moving onto 4.4 series
21:09:35 <MrsB> wikigazer: fancy a job on the security team?
21:09:49 <DavidWHodgins> Does it affect us? I don't see it in config.gz
21:09:58 <wikigazer> MrsB: always happy to help. The issue for me is time...not enough of it
21:10:01 <DavidWHodgins> /proc/config.gz
21:10:06 <MrsB> Ias with us all wikigazer
21:10:56 <MrsB> You can slways create bug reports for vulnerbilities to come across, if not already opened
21:11:02 <MrsB> s/to/you/
21:11:10 <wikigazer> MrsB: good point, will follow up
21:11:15 <MrsB> the mian duty of the sec team
21:11:17 <MrsB> main
21:11:18 <tmb> DavidWHodgins, it's not a config option, it's a kernel ioctl
21:11:42 <MrsB> Luigi12_work: will be able to steer you in the right direction wikigazer
21:11:53 <wikigazer> ok
21:12:01 <DavidWHodgins> wikigazer: CVE-2016-1285 fix is included in bug 17985 which has been validaated, and is just waiting to be pushed
21:12:02 <[mbot> Nothing found with the default search.
21:12:10 <DavidWHodgins> tmb: Ok. Thanks
21:12:18 <wikigazer> DavidWHodgins: tnx
21:12:29 <MrsB> So that only leaves...
21:12:39 <DavidWHodgins> #topic * Anything else?
21:12:43 <MrsB> :)
21:12:48 <DavidWHodgins> Nothing else here
21:12:48 <MrsB> Is there anything else?
21:12:54 <wilcal> not from me
21:12:56 <lewyssmith> Not here.
21:13:00 <TheSuperGeek> No I just read :)
21:13:18 <TheSuperGeek> i'm happy to join the #qa team
21:13:33 <DavidWHodgins> Welcome! The more people the better
21:13:39 <DavidWHodgins> t - 5
21:13:39 <wilcal> fwiw i'm pretty busy this weekend so won't get to the iso's till monday
21:13:40 <lewyssmith> TheSuperGeek: Je t'envoyerai un courriel.
21:13:40 <MrsB> Thanks everybody for being here and keep on going ! Welcome to our newest member and thanks to TJ for the virtual syrup
21:13:46 <DavidWHodgins> 4
21:13:46 <Luigi12_work> I do appreciate wikigazer's help with security notifications
21:13:51 <tmb> just a quick note...
21:13:51 <MrsB> T - 5
21:13:57 <MrsB> d'oh!
21:14:02 <DavidWHodgins> :-)
21:14:12 <wikigazer> Luigi12_work: you are welcome, I work in a security in my day job
21:14:24 <Luigi12_work> cool
21:14:28 <tmb> kernel 4.4.5 something + drivers & utils will be assigned to QA tomorrow... so people can start testing
21:14:35 <wilcal> i work at retired :-))
21:14:35 <Luigi12_work> wow
21:14:52 <MrsB> #info <tmb> kernel 4.4.5 something + drivers & utils will be assigned to QA tomorrow... so people can start testing
21:14:56 <MrsB> thansk tmb
21:15:00 <MrsB> T - 5 then
21:15:09 <MrsB> 4
21:15:11 <MrsB> 3
21:15:13 <MrsB> 2
21:15:16 <MrsB> 1
21:15:17 <lewyssmith> Goodbye all.
21:15:19 <MrsB> #endmeeting