19:05:12 <lewyssmith> #startmeeting
19:05:12 <Inigo_Montoya`> Meeting started Thu Oct 27 19:05:12 2016 UTC.  The chair is lewyssmith. Information about MeetBot at http://wiki.debian.org/MeetBot.
19:05:12 <Inigo_Montoya`> Useful Commands: #action #agreed #help #info #idea #link #topic.
19:05:16 <rindolf> Bequimao: hi.
19:05:19 <tarazed> Evening Beq
19:05:29 <lewyssmith> #topic Who's new? - If you are then come and say hello
19:05:32 <Son_Goku> lewyssmith: ngompa in mga identity :)
19:06:25 <lewyssmith> Anyone here who has not been before? If so, please speak up!
19:07:03 <lewyssmith> Guess not, so on we go...
19:07:06 <wilcal> better late then never
19:07:06 <lewyssmith> #topic Mageia 5.1 - Still waiting for new isos
19:07:14 <lewyssmith> #chair wilcal
19:07:14 <Inigo_Montoya`> Current chairs: lewyssmith wilcal
19:07:15 <tarazed> Morning Bill
19:07:24 <lewyssmith> Helo Bill.
19:07:28 <lewyssmith> Hello TJ.
19:07:34 <wilcal> morn'n wrikle here in network connection
19:07:48 <tjandrews> Hello. Did I miss anything exciting?
19:07:56 <tarazed> Not yet
19:08:02 <lewyssmith> No. We are on M5.1 if there is anything to say.
19:08:22 <wilcal> We are really waiting for new isos for 5.1
19:08:33 <tarazed> The server responded to a list request today
19:08:41 <lewyssmith> Do the linus & tmb kernels have to be tested before 5.1 is re-built? I doubt it.
19:09:21 <tjandrews> I was just going to ask if anybody knew what the remaining hold-up might be.
19:09:26 <lewyssmith> Because if not, I know of no reason not to go for new ISOs now.
19:09:43 <lewyssmith> I will poke Anne about it.
19:10:01 <wilcal> anne would know where we are with all that
19:10:13 <Akien> The server used to make ISOs (rabbit) was down until yesterday, when maat finally reached the data centers guys who could reboot it..
19:10:29 <wilcal> last I knew they were waiting on a kernel and the server thingy
19:10:37 <Akien> So the making of ISOs was quite delayed yet another time
19:10:42 <lewyssmith> We had to get the kernel & older VB tested, but that is long done now.
19:10:52 <Akien> Yesterday ennael mentioned she'd make the ISOs asap
19:10:59 <lewyssmith> Good!
19:11:07 <lewyssmith> And thanks for enlightening us.
19:11:11 <wilcal> this weekend hopefully
19:11:30 <Akien> So yeah I hope there'll be ISOs to test tomorrow, for a fruitful QA weekend :)
19:11:56 <wilcal> i have time this weekend
19:12:39 <lewyssmith> Nuff said on this topic?
19:12:57 <wilcal> M6 :-))
19:13:01 <lewyssmith> #topic Mageia 6 - How's it looking?
19:13:14 <lewyssmith> Over to you for this, Bill.
19:13:36 <wilcal> I have a very good working M6 x86_64 plasma here
19:13:49 <neoclust> ah nice to read this :)
19:13:50 <lewyssmith> With Gnome added?
19:13:58 <wilcal> that same hw platform successfully executed task-gnome
19:14:12 <wilcal> It also is running as a Vbox host
19:14:23 <wilcal> and can support an M6 Vbox client
19:14:31 <wilcal> lots of things work well
19:14:46 <wilcal> I'm finding things but overall it works well
19:14:49 * tjandrews hides head, as he has not even looked at M6 this week.
19:15:06 <wilcal> I kinda like Plasma :-))
19:15:12 <wilcal> Gnome is super smooth
19:15:18 <lewyssmith> Nor me TJ, until we get back to it properly with ISOS.
19:15:33 <wilcal> I use the lastest boot.iso for installs
19:15:39 <wilcal> did one this morning
19:15:56 <wilcal> I don't think the autologin works
19:16:33 <lewyssmith> Even if it does not, does it still stop the system re-booting?
19:16:39 <wilcal> My test HW platform I use all the time but not in a critical operation
19:17:00 <wilcal> Note there are now two versions of OpenShot
19:17:20 <wilcal> The new 2.0 version is in there but has lots and lots of warts
19:17:37 <wilcal> but looks very very promising
19:18:19 <lewyssmith> Will we offer both?
19:19:14 <wilcal> Yes because there are soooo many warts in OpenShot 2.0 we've still got to offer 1.4.3
19:19:30 <wilcal> which has warts of it's own
19:20:06 <wilcal> OpenShot is probably the best NLE for Linux aside from spending $1000 for a commercial product
19:20:42 <lewyssmith> OK, Mageia 6 is looking good for its eventual re-incarnation. Anything more to add?
19:20:43 <wilcal> Ohhh interesting wrinkle in M6/Vbox
19:20:49 <wilcal> Hold a sec
19:21:31 <wilcal> https://bugs.mageia.org/show_bug.cgi?id=19648
19:21:33 <[mbot> Bug 19648: normal, Normal, kde, NEW , M6 Plasma launch menu leaks through to a M5 Gnome (or windows7) Vbox client
19:21:52 <wilcal> You get two launch menus for the price of one :-))
19:22:26 <lewyssmith> Wierd.
19:23:02 <wilcal> note that M6/Cauldron Plasma the "Windows Key" on your Plasma system will launch the Plasma Launcher menu
19:23:19 <wilcal> kinda neat
19:23:24 <lewyssmith> As it should - for all desktops.
19:23:36 <wilcal> M5 does not do it
19:23:54 <lewyssmith> But  some other systems do.
19:24:09 <wilcal> Does Suse do it?
19:24:22 <wilcal> Or Ubuntu?
19:24:41 <lewyssmith> Suse I cannot remember, but I think so. LMDE does.
19:25:26 <wilcal> Except M6 Host  running Vbox M6 Client launches both the host and client menu at the same time :-))
19:25:26 <tjandrews> I believe you can make M5 do it, as you can program most "special" keys, but it is probably more trouble than it's worth.
19:25:45 <wilcal> a special feature
19:26:00 <wilcal> anyway kinda neat
19:26:10 <lewyssmith> Anyhow, this is nit-picking. We have more urgent things in hand:
19:26:14 <lewyssmith> #topic Testing updates - Any difficulties, problems, issues?
19:26:15 <wilcal> true
19:26:34 <wilcal> Note the latest kernel update is HYPER CRITICAL
19:27:15 <tjandrews> Wait - there's ANOTHER one?
19:27:32 <wilcal> Dirty Cow vulnerability
19:27:52 <wilcal> Another critical kernel update
19:27:54 <lewyssmith> linus & tmb. I shall post a request for everyone to try these.
19:28:05 <lewyssmith> The regular kernels are already out.
19:28:19 <wilcal> we had another package of Flash hyper updates
19:28:31 <tarazed> Are they holding up the isos?
19:28:50 <wilcal> not the flash stuff maybe the kernel thing
19:29:05 <tarazed> kernels I meant.
19:29:11 <lewyssmith> The 2 special kernels are (I hope) not on them.
19:29:54 <tjandrews> I've never used either of those two kernels. What are they for?
19:30:21 <wilcal> there's a mageia page explaining the differences
19:30:35 <lewyssmith> Never mid! Await my post. Just install the update - but you have to choose the specials from the 'advanced' Mageia sub-menu.
19:31:05 <lewyssmith> They are not automatically put as the default 'Mageia' boot entry.
19:31:43 <lewyssmith> I have used the linus one; need to add the tmb. And everyone else too.
19:32:10 <lewyssmith> That would make the updates list nicer - to get them off it.
19:32:17 <wilcal> I look at them in Vbox
19:33:21 <lewyssmith> Len has been doing overtime again, & we have got rid of some old graphics bugs at last.
19:33:52 <tarazed> Dave retracted the validated tag on openjpeg2 though
19:34:00 <wilcal> ya i saw that
19:34:01 <lewyssmith> The URPMI bug needs greying; I will do that.
19:34:06 <tarazed> He wanted to open a discussion
19:34:13 <wilcal> that thing never gives up
19:35:07 <lewyssmith> openjpeg2: he wants the advisory in place first. Contentious. WI will discuss with David: there is a technical question about the which CVEs to cite.
19:35:19 <lewyssmith> WI = will.
19:35:28 <lewyssmith> Sorry, = i !
19:35:31 <tarazed> Thought that was it.
19:36:55 <lewyssmith> https://bugs.mageia.org/show_bug.cgi?id=17536#c72
19:36:56 <[mbot> Bug 17536: normal, Normal, qa-bugs, ASSIGNED , openjpeg2 new security issues CVE-2016-192[34], CVE-2016-318[1-3], CVE-2016-479[67], CVE-2016-5157, and CVE-2016-7163, openjpeg2-2.1.0-3.2.mga5.src.rpm
19:38:06 <lewyssmith> Some of the other bugs are difficult: 	php-adodb, derby, yammagi.
19:38:10 <tarazed> lewis: Happy with tomcat.  I was not.
19:38:40 <lewyssmith> Why not? You did loads more than me. I should have suggested 32-bit test - sorry.
19:38:41 <wilcal> tomcat is an alternative to Apache right?
19:39:00 <lewyssmith> Not really. It is actually easy to test.
19:39:22 <tarazed> It is more of a development tool I think.
19:39:29 <lewyssmith> tarazed: Len, are you talking about the staying logged in issue? We can unOK it.
19:39:42 <tarazed> The difficulty is in the web interface - does not play ball.
19:39:56 <lewyssmith> In what way?
19:40:09 <tarazed> Yes.  It meant not being able to get back to admin status.
19:40:59 <lewyssmith> Back button?
19:41:25 <tarazed> Nope.  Even a reboot fails to change it, I think.
19:41:55 <tarazed> Raised my BP sky high.
19:42:05 <lewyssmith> And if necessary, go back to the *pre* update and see if the same thing happens. If so, there is no reversion. If ot, it *is* anew bug.
19:43:30 <lewyssmith> tarazed: Len: I have just gone welcome page - manager button (after re-boot), and *get* the login dialogue.
19:44:03 <tarazed> So it is me then.  Always have trouble with web interfaces.
19:44:07 <Luigi12> php-adodb isn't difficult, just test cacti or moodle
19:44:30 <Luigi12> I don't know why we're making things so difficult with tomcat, there's a simple test procedure that we linked for you
19:45:18 <Luigi12> as for openjpeg2, I just need to write an advisory and leave off the two CVEs in question.  Just have been too busy.
19:45:55 <lewyssmith> Luigi12: Hello David. Thanks for the encouragement etc. Shall I invent that advisory for you t to check?
19:46:23 <Luigi12> if you want
19:46:25 <wilcal> youtube-dl is ready to go. Needs advisory
19:46:29 <Luigi12> it would help
19:46:55 <Luigi12> sounds like my life will suck as of next week
19:47:10 <Luigi12> changing roles at work, will have very little internet access
19:47:29 <lewyssmith> wilcal: I can do that easily, Bill. After this session.
19:47:35 <wilcal> thks
19:48:21 <lewyssmith> Luigi12: Why do we ot know whether the update covers the 2 dicey CVEs - at the *code* level?
19:49:32 <lewyssmith> ot = not
19:49:41 <Luigi12> lewyssmith: because upstream didn't say in their release announcement that they had fixed them
19:49:52 <Luigi12> note we didn't specifically patch for them, we just updated to a newer version
19:50:01 <lewyssmith> OK, so we omit them. No probs.
19:50:28 <Luigi12> the issues were known to upstream, so they had the opportunity to fix them, and there's some reason to believe they may have
19:50:55 <Luigi12> but since they didn't say so, testing teh PoC was the only way to confirm, and as we found out, that is harder in this particular case than it should be :o(
19:51:03 <lewyssmith> We can (you do) add CVEs retrospectively, I think.
19:51:34 <Luigi12> yeah, I don't usually add them to the SVN advisories because it's too much work (but sometimes we do)
19:51:41 <tarazed> Ill stay on this - when time permits
19:52:43 <lewyssmith> If php-adobe is really just cacti & moddle, I can do that too. Always too many updates to try.
19:53:02 <wilcal> tinker with :-))
19:53:28 <Luigi12> yep security stuff has gotten out of hand this year
19:54:02 <lewyssmith> wilcal: Bill, can you clear the VB update? Or is ther a problem still?
19:54:17 <wilcal> I can if everyone is happy with it. I am
19:54:30 <wilcal> I only test in x86_64
19:54:47 <wilcal> others have tested 32-bit with some wrinkles
19:55:10 <lewyssmith> We need both architectures for VB.
19:55:19 <wilcal> how bout you luigi you ok with VB update?
19:55:49 <ennael> hi there (very late)
19:56:00 <wilcal> Vbox seems to run very nicely in M6
19:56:01 <tarazed> Evening Anne
19:56:03 <lewyssmith> Bonsoir, Anne.
19:56:05 <tjandrews> Worked Ok for me with Intel hardware in 32-bit, but not AMD.
19:56:14 <wilcal> 32-bit AMD
19:56:15 <lewyssmith> Ah.
19:56:27 <lewyssmith> That matters.
19:56:40 <Luigi12> I haven't tested VB, will do today or tomorrow
19:56:59 <lewyssmith> wilcal: Bill, you can at least 64-OK it.
19:57:06 <tjandrews> Won't even boot an iso. Won't boot an existing guest, either.
19:57:07 <Luigi12> lemme test it first
19:57:14 <wilcal> k
19:57:25 <lewyssmith> Thanks.
19:57:31 <tjandrews> Could be just my hardware.
19:57:37 <Luigi12> been working ~50 hours a week past 4 weeks, but just 27 this week and I'm taking a couple days off
19:57:59 <tarazed> Anybody to take the load off you?
19:58:08 <Luigi12> not really
19:58:40 <Luigi12> don't believe I'll be working crazy hours going forward, but we'll see
19:58:55 <wilcal> i can tell stories
19:59:15 <Luigi12> about punch cards
19:59:18 <wilcal> not relevant to here
19:59:22 <lewyssmith> We have had a good go about updates, so:
19:59:25 <lewyssmith> #topic Luigi's roundup - Security news & expected updates
19:59:33 <Luigi12> yet another Flash update is needed
19:59:36 * Luigi12 rolls eyes
19:59:39 <wilcal> Working engineers on projects for project completion
20:00:04 <Luigi12> david_david just built another tomcat update, so you can test that, we just need an advisory for that bad boy
20:00:05 <wilcal> you know your gonna work a lot of hours when they bring in cots
20:00:50 <Luigi12> I filed a bug for cairo today, a patch has been proposed upstream (apparently the issue ultimately affects librsvg)
20:01:10 <Luigi12> LOL, yeah no cots
20:01:25 <lewyssmith> cots?
20:01:27 <Luigi12> http://madb.mageia.org/tools/security
20:01:30 <[mbot> [ Mageia App Db - Security issues ]
20:01:42 <Luigi12> a cot is like a makeshift portable bed
20:01:54 <Luigi12> anyway, roundup's done
20:02:02 <lewyssmith> Ah - for babies!
20:02:03 <wilcal> cot = a form of light weight sleeping bed
20:02:09 <tjandrews> They often fold up for storage.
20:02:15 <lewyssmith> Thanks for showing up, David.
20:02:32 <tarazed> And thanks for the short list
20:02:35 <Luigi12> yep :D
20:02:38 <wilcal> nice
20:02:55 <lewyssmith> #topic Anything else?
20:03:13 <wilcal> awaiting 5.1 isos :-))
20:03:26 <ennael> is there anybody around knowing well EFI?
20:03:36 <lewyssmith> Well = ?
20:03:55 <ennael> I've just built 64 bits iso
20:04:08 <ennael> pb is it's blocked on EFI shell
20:04:21 <lewyssmith> We had that super Chris recently, who *is* expert. where has she gone?
20:04:30 <ennael> :)
20:04:58 <lewyssmith> Try her with a direct e-mail. She know what she is talking about.
20:05:30 <ennael> ok thanks
20:05:44 <ennael> I still have 32 bits iso
20:05:51 <ennael> want me to upload that one ?
20:06:19 <wilcal> would be nice
20:06:20 <lewyssmith> SVP. I do not know what the EFI shell has to do with our ISOs.
20:07:04 <ennael> usually when using EFI, EFI boot and from there launch grub and then kernel
20:07:16 <ennael> at the moment it stops at EFI step
20:07:47 <wilcal> does it work ok on a non-efi system
20:07:50 <lewyssmith> Is the mediium recognised for booting?
20:08:11 <ennael> wilcal: yep
20:08:20 <ennael> it's just EFI part
20:08:30 <ennael> I'm mailing tmb also to get his lights
20:08:42 <lewyssmith> -4 On an EFI box
20:09:51 <lewyssmith> ennael: Did you take not of Chris's detailed comments about the ISO contents re EFI ? On the mailList, I think.
20:10:00 <lewyssmith> not = note
20:10:44 <ennael> yep
20:11:27 <lewyssmith> Anyway, plenty of people will want the 32-bit 5.1 ISO, so please release that.
20:12:05 <lewyssmith> EFI booting apart, few problems are different 32 v 64 bit.
20:13:46 <lewyssmith> New topic: the clocks change, I will post something when I have the conequences sorted. Important for next weeks's session.
20:14:57 <lewyssmith> We in Europe (smug) keep the same local time; others take a week or two for that to arrive.
20:15:23 <wilcal> spring forward fall back :-))
20:16:07 <lewyssmith> It is now at 1900BST; will it be 2000bst?
20:16:19 <tjandrews> We change in November.
20:16:48 <tjandrews> November 6.
20:17:10 <lewyssmith> 1 week later. And Canada?
20:17:11 <wilcal> Always use UTC
20:17:23 <lewyssmith> Same thing.
20:17:46 <lewyssmith> Sorry - no.
20:17:58 <lewyssmith> I meant GMT!
20:18:21 <lewyssmith> Anything else?
20:18:56 <lewyssmith> If not, countdown.
20:19:01 <lewyssmith> -5
20:19:08 <tarazed> Thanks Lewis.
20:19:16 <lewyssmith> Thanks to you who came. A good discussion.
20:19:17 <wilcal> bye all
20:19:20 <lewyssmith> -4
20:19:26 <lewyssmith> -3
20:19:28 <lewyssmith> -2
20:19:31 <lewyssmith> -1
20:19:39 <lewyssmith> #endmeeting