19:05:12 <lewyssmith> #startmeeting 19:05:12 <Inigo_Montoya`> Meeting started Thu Oct 27 19:05:12 2016 UTC. The chair is lewyssmith. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:05:12 <Inigo_Montoya`> Useful Commands: #action #agreed #help #info #idea #link #topic. 19:05:16 <rindolf> Bequimao: hi. 19:05:19 <tarazed> Evening Beq 19:05:29 <lewyssmith> #topic Who's new? - If you are then come and say hello 19:05:32 <Son_Goku> lewyssmith: ngompa in mga identity :) 19:06:25 <lewyssmith> Anyone here who has not been before? If so, please speak up! 19:07:03 <lewyssmith> Guess not, so on we go... 19:07:06 <wilcal> better late then never 19:07:06 <lewyssmith> #topic Mageia 5.1 - Still waiting for new isos 19:07:14 <lewyssmith> #chair wilcal 19:07:14 <Inigo_Montoya`> Current chairs: lewyssmith wilcal 19:07:15 <tarazed> Morning Bill 19:07:24 <lewyssmith> Helo Bill. 19:07:28 <lewyssmith> Hello TJ. 19:07:34 <wilcal> morn'n wrikle here in network connection 19:07:48 <tjandrews> Hello. Did I miss anything exciting? 19:07:56 <tarazed> Not yet 19:08:02 <lewyssmith> No. We are on M5.1 if there is anything to say. 19:08:22 <wilcal> We are really waiting for new isos for 5.1 19:08:33 <tarazed> The server responded to a list request today 19:08:41 <lewyssmith> Do the linus & tmb kernels have to be tested before 5.1 is re-built? I doubt it. 19:09:21 <tjandrews> I was just going to ask if anybody knew what the remaining hold-up might be. 19:09:26 <lewyssmith> Because if not, I know of no reason not to go for new ISOs now. 19:09:43 <lewyssmith> I will poke Anne about it. 19:10:01 <wilcal> anne would know where we are with all that 19:10:13 <Akien> The server used to make ISOs (rabbit) was down until yesterday, when maat finally reached the data centers guys who could reboot it.. 19:10:29 <wilcal> last I knew they were waiting on a kernel and the server thingy 19:10:37 <Akien> So the making of ISOs was quite delayed yet another time 19:10:42 <lewyssmith> We had to get the kernel & older VB tested, but that is long done now. 19:10:52 <Akien> Yesterday ennael mentioned she'd make the ISOs asap 19:10:59 <lewyssmith> Good! 19:11:07 <lewyssmith> And thanks for enlightening us. 19:11:11 <wilcal> this weekend hopefully 19:11:30 <Akien> So yeah I hope there'll be ISOs to test tomorrow, for a fruitful QA weekend :) 19:11:56 <wilcal> i have time this weekend 19:12:39 <lewyssmith> Nuff said on this topic? 19:12:57 <wilcal> M6 :-)) 19:13:01 <lewyssmith> #topic Mageia 6 - How's it looking? 19:13:14 <lewyssmith> Over to you for this, Bill. 19:13:36 <wilcal> I have a very good working M6 x86_64 plasma here 19:13:49 <neoclust> ah nice to read this :) 19:13:50 <lewyssmith> With Gnome added? 19:13:58 <wilcal> that same hw platform successfully executed task-gnome 19:14:12 <wilcal> It also is running as a Vbox host 19:14:23 <wilcal> and can support an M6 Vbox client 19:14:31 <wilcal> lots of things work well 19:14:46 <wilcal> I'm finding things but overall it works well 19:14:49 * tjandrews hides head, as he has not even looked at M6 this week. 19:15:06 <wilcal> I kinda like Plasma :-)) 19:15:12 <wilcal> Gnome is super smooth 19:15:18 <lewyssmith> Nor me TJ, until we get back to it properly with ISOS. 19:15:33 <wilcal> I use the lastest boot.iso for installs 19:15:39 <wilcal> did one this morning 19:15:56 <wilcal> I don't think the autologin works 19:16:33 <lewyssmith> Even if it does not, does it still stop the system re-booting? 19:16:39 <wilcal> My test HW platform I use all the time but not in a critical operation 19:17:00 <wilcal> Note there are now two versions of OpenShot 19:17:20 <wilcal> The new 2.0 version is in there but has lots and lots of warts 19:17:37 <wilcal> but looks very very promising 19:18:19 <lewyssmith> Will we offer both? 19:19:14 <wilcal> Yes because there are soooo many warts in OpenShot 2.0 we've still got to offer 1.4.3 19:19:30 <wilcal> which has warts of it's own 19:20:06 <wilcal> OpenShot is probably the best NLE for Linux aside from spending $1000 for a commercial product 19:20:42 <lewyssmith> OK, Mageia 6 is looking good for its eventual re-incarnation. Anything more to add? 19:20:43 <wilcal> Ohhh interesting wrinkle in M6/Vbox 19:20:49 <wilcal> Hold a sec 19:21:31 <wilcal> https://bugs.mageia.org/show_bug.cgi?id=19648 19:21:33 <[mbot> Bug 19648: normal, Normal, kde, NEW , M6 Plasma launch menu leaks through to a M5 Gnome (or windows7) Vbox client 19:21:52 <wilcal> You get two launch menus for the price of one :-)) 19:22:26 <lewyssmith> Wierd. 19:23:02 <wilcal> note that M6/Cauldron Plasma the "Windows Key" on your Plasma system will launch the Plasma Launcher menu 19:23:19 <wilcal> kinda neat 19:23:24 <lewyssmith> As it should - for all desktops. 19:23:36 <wilcal> M5 does not do it 19:23:54 <lewyssmith> But some other systems do. 19:24:09 <wilcal> Does Suse do it? 19:24:22 <wilcal> Or Ubuntu? 19:24:41 <lewyssmith> Suse I cannot remember, but I think so. LMDE does. 19:25:26 <wilcal> Except M6 Host running Vbox M6 Client launches both the host and client menu at the same time :-)) 19:25:26 <tjandrews> I believe you can make M5 do it, as you can program most "special" keys, but it is probably more trouble than it's worth. 19:25:45 <wilcal> a special feature 19:26:00 <wilcal> anyway kinda neat 19:26:10 <lewyssmith> Anyhow, this is nit-picking. We have more urgent things in hand: 19:26:14 <lewyssmith> #topic Testing updates - Any difficulties, problems, issues? 19:26:15 <wilcal> true 19:26:34 <wilcal> Note the latest kernel update is HYPER CRITICAL 19:27:15 <tjandrews> Wait - there's ANOTHER one? 19:27:32 <wilcal> Dirty Cow vulnerability 19:27:52 <wilcal> Another critical kernel update 19:27:54 <lewyssmith> linus & tmb. I shall post a request for everyone to try these. 19:28:05 <lewyssmith> The regular kernels are already out. 19:28:19 <wilcal> we had another package of Flash hyper updates 19:28:31 <tarazed> Are they holding up the isos? 19:28:50 <wilcal> not the flash stuff maybe the kernel thing 19:29:05 <tarazed> kernels I meant. 19:29:11 <lewyssmith> The 2 special kernels are (I hope) not on them. 19:29:54 <tjandrews> I've never used either of those two kernels. What are they for? 19:30:21 <wilcal> there's a mageia page explaining the differences 19:30:35 <lewyssmith> Never mid! Await my post. Just install the update - but you have to choose the specials from the 'advanced' Mageia sub-menu. 19:31:05 <lewyssmith> They are not automatically put as the default 'Mageia' boot entry. 19:31:43 <lewyssmith> I have used the linus one; need to add the tmb. And everyone else too. 19:32:10 <lewyssmith> That would make the updates list nicer - to get them off it. 19:32:17 <wilcal> I look at them in Vbox 19:33:21 <lewyssmith> Len has been doing overtime again, & we have got rid of some old graphics bugs at last. 19:33:52 <tarazed> Dave retracted the validated tag on openjpeg2 though 19:34:00 <wilcal> ya i saw that 19:34:01 <lewyssmith> The URPMI bug needs greying; I will do that. 19:34:06 <tarazed> He wanted to open a discussion 19:34:13 <wilcal> that thing never gives up 19:35:07 <lewyssmith> openjpeg2: he wants the advisory in place first. Contentious. WI will discuss with David: there is a technical question about the which CVEs to cite. 19:35:19 <lewyssmith> WI = will. 19:35:28 <lewyssmith> Sorry, = i ! 19:35:31 <tarazed> Thought that was it. 19:36:55 <lewyssmith> https://bugs.mageia.org/show_bug.cgi?id=17536#c72 19:36:56 <[mbot> Bug 17536: normal, Normal, qa-bugs, ASSIGNED , openjpeg2 new security issues CVE-2016-192[34], CVE-2016-318[1-3], CVE-2016-479[67], CVE-2016-5157, and CVE-2016-7163, openjpeg2-2.1.0-3.2.mga5.src.rpm 19:38:06 <lewyssmith> Some of the other bugs are difficult: php-adodb, derby, yammagi. 19:38:10 <tarazed> lewis: Happy with tomcat. I was not. 19:38:40 <lewyssmith> Why not? You did loads more than me. I should have suggested 32-bit test - sorry. 19:38:41 <wilcal> tomcat is an alternative to Apache right? 19:39:00 <lewyssmith> Not really. It is actually easy to test. 19:39:22 <tarazed> It is more of a development tool I think. 19:39:29 <lewyssmith> tarazed: Len, are you talking about the staying logged in issue? We can unOK it. 19:39:42 <tarazed> The difficulty is in the web interface - does not play ball. 19:39:56 <lewyssmith> In what way? 19:40:09 <tarazed> Yes. It meant not being able to get back to admin status. 19:40:59 <lewyssmith> Back button? 19:41:25 <tarazed> Nope. Even a reboot fails to change it, I think. 19:41:55 <tarazed> Raised my BP sky high. 19:42:05 <lewyssmith> And if necessary, go back to the *pre* update and see if the same thing happens. If so, there is no reversion. If ot, it *is* anew bug. 19:43:30 <lewyssmith> tarazed: Len: I have just gone welcome page - manager button (after re-boot), and *get* the login dialogue. 19:44:03 <tarazed> So it is me then. Always have trouble with web interfaces. 19:44:07 <Luigi12> php-adodb isn't difficult, just test cacti or moodle 19:44:30 <Luigi12> I don't know why we're making things so difficult with tomcat, there's a simple test procedure that we linked for you 19:45:18 <Luigi12> as for openjpeg2, I just need to write an advisory and leave off the two CVEs in question. Just have been too busy. 19:45:55 <lewyssmith> Luigi12: Hello David. Thanks for the encouragement etc. Shall I invent that advisory for you t to check? 19:46:23 <Luigi12> if you want 19:46:25 <wilcal> youtube-dl is ready to go. Needs advisory 19:46:29 <Luigi12> it would help 19:46:55 <Luigi12> sounds like my life will suck as of next week 19:47:10 <Luigi12> changing roles at work, will have very little internet access 19:47:29 <lewyssmith> wilcal: I can do that easily, Bill. After this session. 19:47:35 <wilcal> thks 19:48:21 <lewyssmith> Luigi12: Why do we ot know whether the update covers the 2 dicey CVEs - at the *code* level? 19:49:32 <lewyssmith> ot = not 19:49:41 <Luigi12> lewyssmith: because upstream didn't say in their release announcement that they had fixed them 19:49:52 <Luigi12> note we didn't specifically patch for them, we just updated to a newer version 19:50:01 <lewyssmith> OK, so we omit them. No probs. 19:50:28 <Luigi12> the issues were known to upstream, so they had the opportunity to fix them, and there's some reason to believe they may have 19:50:55 <Luigi12> but since they didn't say so, testing teh PoC was the only way to confirm, and as we found out, that is harder in this particular case than it should be :o( 19:51:03 <lewyssmith> We can (you do) add CVEs retrospectively, I think. 19:51:34 <Luigi12> yeah, I don't usually add them to the SVN advisories because it's too much work (but sometimes we do) 19:51:41 <tarazed> Ill stay on this - when time permits 19:52:43 <lewyssmith> If php-adobe is really just cacti & moddle, I can do that too. Always too many updates to try. 19:53:02 <wilcal> tinker with :-)) 19:53:28 <Luigi12> yep security stuff has gotten out of hand this year 19:54:02 <lewyssmith> wilcal: Bill, can you clear the VB update? Or is ther a problem still? 19:54:17 <wilcal> I can if everyone is happy with it. I am 19:54:30 <wilcal> I only test in x86_64 19:54:47 <wilcal> others have tested 32-bit with some wrinkles 19:55:10 <lewyssmith> We need both architectures for VB. 19:55:19 <wilcal> how bout you luigi you ok with VB update? 19:55:49 <ennael> hi there (very late) 19:56:00 <wilcal> Vbox seems to run very nicely in M6 19:56:01 <tarazed> Evening Anne 19:56:03 <lewyssmith> Bonsoir, Anne. 19:56:05 <tjandrews> Worked Ok for me with Intel hardware in 32-bit, but not AMD. 19:56:14 <wilcal> 32-bit AMD 19:56:15 <lewyssmith> Ah. 19:56:27 <lewyssmith> That matters. 19:56:40 <Luigi12> I haven't tested VB, will do today or tomorrow 19:56:59 <lewyssmith> wilcal: Bill, you can at least 64-OK it. 19:57:06 <tjandrews> Won't even boot an iso. Won't boot an existing guest, either. 19:57:07 <Luigi12> lemme test it first 19:57:14 <wilcal> k 19:57:25 <lewyssmith> Thanks. 19:57:31 <tjandrews> Could be just my hardware. 19:57:37 <Luigi12> been working ~50 hours a week past 4 weeks, but just 27 this week and I'm taking a couple days off 19:57:59 <tarazed> Anybody to take the load off you? 19:58:08 <Luigi12> not really 19:58:40 <Luigi12> don't believe I'll be working crazy hours going forward, but we'll see 19:58:55 <wilcal> i can tell stories 19:59:15 <Luigi12> about punch cards 19:59:18 <wilcal> not relevant to here 19:59:22 <lewyssmith> We have had a good go about updates, so: 19:59:25 <lewyssmith> #topic Luigi's roundup - Security news & expected updates 19:59:33 <Luigi12> yet another Flash update is needed 19:59:36 * Luigi12 rolls eyes 19:59:39 <wilcal> Working engineers on projects for project completion 20:00:04 <Luigi12> david_david just built another tomcat update, so you can test that, we just need an advisory for that bad boy 20:00:05 <wilcal> you know your gonna work a lot of hours when they bring in cots 20:00:50 <Luigi12> I filed a bug for cairo today, a patch has been proposed upstream (apparently the issue ultimately affects librsvg) 20:01:10 <Luigi12> LOL, yeah no cots 20:01:25 <lewyssmith> cots? 20:01:27 <Luigi12> http://madb.mageia.org/tools/security 20:01:30 <[mbot> [ Mageia App Db - Security issues ] 20:01:42 <Luigi12> a cot is like a makeshift portable bed 20:01:54 <Luigi12> anyway, roundup's done 20:02:02 <lewyssmith> Ah - for babies! 20:02:03 <wilcal> cot = a form of light weight sleeping bed 20:02:09 <tjandrews> They often fold up for storage. 20:02:15 <lewyssmith> Thanks for showing up, David. 20:02:32 <tarazed> And thanks for the short list 20:02:35 <Luigi12> yep :D 20:02:38 <wilcal> nice 20:02:55 <lewyssmith> #topic Anything else? 20:03:13 <wilcal> awaiting 5.1 isos :-)) 20:03:26 <ennael> is there anybody around knowing well EFI? 20:03:36 <lewyssmith> Well = ? 20:03:55 <ennael> I've just built 64 bits iso 20:04:08 <ennael> pb is it's blocked on EFI shell 20:04:21 <lewyssmith> We had that super Chris recently, who *is* expert. where has she gone? 20:04:30 <ennael> :) 20:04:58 <lewyssmith> Try her with a direct e-mail. She know what she is talking about. 20:05:30 <ennael> ok thanks 20:05:44 <ennael> I still have 32 bits iso 20:05:51 <ennael> want me to upload that one ? 20:06:19 <wilcal> would be nice 20:06:20 <lewyssmith> SVP. I do not know what the EFI shell has to do with our ISOs. 20:07:04 <ennael> usually when using EFI, EFI boot and from there launch grub and then kernel 20:07:16 <ennael> at the moment it stops at EFI step 20:07:47 <wilcal> does it work ok on a non-efi system 20:07:50 <lewyssmith> Is the mediium recognised for booting? 20:08:11 <ennael> wilcal: yep 20:08:20 <ennael> it's just EFI part 20:08:30 <ennael> I'm mailing tmb also to get his lights 20:08:42 <lewyssmith> -4 On an EFI box 20:09:51 <lewyssmith> ennael: Did you take not of Chris's detailed comments about the ISO contents re EFI ? On the mailList, I think. 20:10:00 <lewyssmith> not = note 20:10:44 <ennael> yep 20:11:27 <lewyssmith> Anyway, plenty of people will want the 32-bit 5.1 ISO, so please release that. 20:12:05 <lewyssmith> EFI booting apart, few problems are different 32 v 64 bit. 20:13:46 <lewyssmith> New topic: the clocks change, I will post something when I have the conequences sorted. Important for next weeks's session. 20:14:57 <lewyssmith> We in Europe (smug) keep the same local time; others take a week or two for that to arrive. 20:15:23 <wilcal> spring forward fall back :-)) 20:16:07 <lewyssmith> It is now at 1900BST; will it be 2000bst? 20:16:19 <tjandrews> We change in November. 20:16:48 <tjandrews> November 6. 20:17:10 <lewyssmith> 1 week later. And Canada? 20:17:11 <wilcal> Always use UTC 20:17:23 <lewyssmith> Same thing. 20:17:46 <lewyssmith> Sorry - no. 20:17:58 <lewyssmith> I meant GMT! 20:18:21 <lewyssmith> Anything else? 20:18:56 <lewyssmith> If not, countdown. 20:19:01 <lewyssmith> -5 20:19:08 <tarazed> Thanks Lewis. 20:19:16 <lewyssmith> Thanks to you who came. A good discussion. 20:19:17 <wilcal> bye all 20:19:20 <lewyssmith> -4 20:19:26 <lewyssmith> -3 20:19:28 <lewyssmith> -2 20:19:31 <lewyssmith> -1 20:19:39 <lewyssmith> #endmeeting