Lector de Feeds

‎Various software: grisbi again

← Older revision Revision as of 20:04, 24 February 2025 (One intermediate revision by the same user not shown)Line 362: Line 362:     {{Bug|34028}} - '''gnome-calculator''' hang on start. '''WORKAROUND:''' Issue {{cmd|gsettings set org.gnome.calculator refresh-interval 0}} before starting it. Or use one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}} or the less good looking {{prog|xcalc}}, or more text based like {{prog|qalculate-gtk}} / {{prog|qalculate-qt}} or {{prog|speedcrunch}}. {{Bug|34028}} - '''gnome-calculator''' hang on start. '''WORKAROUND:''' Issue {{cmd|gsettings set org.gnome.calculator refresh-interval 0}} before starting it. Or use one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}} or the less good looking {{prog|xcalc}}, or more text based like {{prog|qalculate-gtk}} / {{prog|qalculate-qt}} or {{prog|speedcrunch}}.  +  +{{Bug|34029}} - '''grisbi''' We update grisbi to offer compatibility to users comming from other distributions that have the 3.0.4 version, but the 1st time wizard can't select custom folder for backups, please select it later in Edit -> Preferences     <br> <br> Katnatek

Publication date: 24 Feb 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-49393 , CVE-2024-49394 Description The To and Cc email header fields are not protected by cryptographic signing. (CVE-2024-49393) The In-reply-to email header field is not protected by cryptographic signing. (CVE-2024-49394) References

• https://bugs.mageia.org/show_bug.cgi?id=33814
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZYFPGXOX4Q4I4UNPEGXP2N372IN2YSAS/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49393
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49394

SRPMS 9/core

• neomutt-20241002-1.mga9

Publication date: 24 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description The current version can't handle files from newer versions. This update fixes the issue. Note the 1st time wizard can't select custom folder for backups, please select it later in Edit -> Preferences References

• https://bugs.mageia.org/show_bug.cgi?id=34029

SRPMS 9/core

• grisbi-3.0.4-1.mga9

Publication date: 22 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description Instructions to uninstall the telegram application are not accurate. This update fixes the issue. References

• https://bugs.mageia.org/show_bug.cgi?id=32593

SRPMS 9/core

• get-telegram-1.7.7-3.1.mga9

‎Various software: gnome-calculator Workaround up-front

← Older revision Revision as of 18:54, 22 February 2025 Line 361: Line 361:  {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]]. {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]].    −{{Bug|34028}} - '''gnome-calculator''' crash, [https://gitlab.gnome.org/GNOME/gnome-calculator/-/issues/359 fix the issue could require new version] and is not sure could be fixed in mageia 9, try one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}}, {{prog|qalculate-gtk}}, {{prog|qalculate-qt}}, also the less good looking {{prog|xcalc}}+{{Bug|34028}} - '''gnome-calculator''' hang on start. '''WORKAROUND:''' Issue {{cmd|gsettings set org.gnome.calculator refresh-interval 0}} before starting it. Or use one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}} or the less good looking {{prog|xcalc}}, or more text based like {{prog|qalculate-gtk}} / {{prog|qalculate-qt}} or {{prog|speedcrunch}}.     <br> <br> Morgano

← Older revision Revision as of 10:48, 22 February 2025 Line 179: Line 179:  | werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 7.51   | werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 7.51    Environment variable : PROTON_USE_WINED3D11=1 Environment variable : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| werkt heel goed met Heroic Game Launcher en Proton-GE-Proton 9.16     |- |- Scroll44

← Older revision Revision as of 10:47, 22 February 2025 Line 176: Line 176:  | marche très bien avec Heroic Game Launcher and Proton-GE-Proton 7.51   | marche très bien avec Heroic Game Launcher and Proton-GE-Proton 7.51    Variable d’environnement : PROTON_USE_WINED3D11=1 Variable d’environnement : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| marche très bien avec Heroic Game Launcher and Proton-GE-Proton 9.16     |- |- Scroll44

← Older revision Revision as of 10:45, 22 February 2025 Line 177: Line 177:  | works very well with Heroic Game Launcher and Proton-GE-Proton 7.51   | works very well with Heroic Game Launcher and Proton-GE-Proton 7.51    Environment variable : PROTON_USE_WINED3D11=1 Environment variable : PROTON_USE_WINED3D11=1  +  +|-  +| style="width: 5%"| [[File:App-accessories.png|25px|center]]  +| Sniper Ghost Warrior Contracts  +| works very well with Heroic Game Launcher and Proton-GE-Proton 9.16     |- |- Scroll44

‎Update notifications: Fix link

← Older revision Revision as of 00:28, 22 February 2025 Line 398: Line 398:  * '''FIXED by [https://advisories.mageia.org/MGAA-2023-0095.html update]''' of mgaonline in {{Bug|32382}}: {{bug|32354}} - In some cases not yet fully understood, the PATH variable is set with /usr/sbin having a higher priority than /usr/bin. ''(Seem to be related to GDM, affecting all desktops.)'' As a consequence, mgaapplet launches urpmi.update without asking for execution privileges and fails. Thus no updates notifications are raised. A workaround is described in bug report. * '''FIXED by [https://advisories.mageia.org/MGAA-2023-0095.html update]''' of mgaonline in {{Bug|32382}}: {{bug|32354}} - In some cases not yet fully understood, the PATH variable is set with /usr/sbin having a higher priority than /usr/bin. ''(Seem to be related to GDM, affecting all desktops.)'' As a consequence, mgaapplet launches urpmi.update without asking for execution privileges and fails. Thus no updates notifications are raised. A workaround is described in bug report.    −* For GNOME, [[#Applet_visibility|Applet visibility]] need to be enabled.+* For GNOME, [[#GNOME|Applet visibility]] need to be enabled.     <br> <br> Katnatek

‎Go: Creating vendor.tar.xz

← Older revision Revision as of 21:36, 21 February 2025 (2 intermediate revisions by the same user not shown)Line 98: Line 98:     The [https://vuln.go.dev/ Go Vulnerability Database] can be used on an ongoing basis to find security issues in Go packages from the SBOMs of those packages. The [https://vuln.go.dev/ Go Vulnerability Database] can be used on an ongoing basis to find security issues in Go packages from the SBOMs of those packages.  +  +Some Go packages already have vendored dependencies (e.g. fzf) stored in a file called ''SOURCES/vendor.tar.xz'' (likely created through some variant of ''go mod download;go mod verify;go mod vendor;tar caf vendor.tar.xz vendor)''. These may also have ''Provide: bundled(golang(...))'' lines that list the vendored packages included, but there seems to be no mechanism to keep those in sync and they don't contain version numbers so they can't be used as a replacement for a proper SBOM.     A possible workflow: A possible workflow: Line 115: Line 117:  * [https://fosdem.org/2025/schedule/event/fosdem-2025-5570-rust-rpms-and-the-fine-art-of-dependency-bundling/ Rust, RPMs, and the Fine Art of Dependency Bundling] * [https://fosdem.org/2025/schedule/event/fosdem-2025-5570-rust-rpms-and-the-fine-art-of-dependency-bundling/ Rust, RPMs, and the Fine Art of Dependency Bundling]  * [https://ml.mageia.org/l/arc/dev/2023-04/msg00579.html Thread on packages with many components/modules/subpackages] * [https://ml.mageia.org/l/arc/dev/2023-04/msg00579.html Thread on packages with many components/modules/subpackages]  +* [https://github.com/openSUSE/obs-service-go_modules OBS method of vendoring Go dependencies]  * [https://vuln.go.dev/ Go Vulnerability Database] * [https://vuln.go.dev/ Go Vulnerability Database]  * [https://guac.sh/ GUAC] SBOM management tool * [https://guac.sh/ GUAC] SBOM management tool Danf

‎Various software

← Older revision Revision as of 16:54, 21 February 2025 Line 361: Line 361:  {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]]. {{Bug|33697}} - '''Nextcloud client''' - We fail to keep it updated.  Instead, upstream AppImage can be used, see [[Nextcloud-client]].    − +{{Bug|34028}} - '''gnome-calculator''' crash, [https://gitlab.gnome.org/GNOME/gnome-calculator/-/issues/359 fix the issue could require new version] and is not sure could be fixed in mageia 9, try one of the alternatives available in our repositories: {{prog|galculator}}, {{prog|mate-calc}}, {{prog|kcalc}}, {{prog|qalculate-gtk}}, {{prog|qalculate-qt}}, also the less good looking {{prog|xcalc}}     <br> <br> Katnatek

Publication date: 20 Feb 2025
Type: bugfix
Affected Mageia releases : 9
Description The updated packages fix some oauth2 problems. References

• https://bugs.mageia.org/show_bug.cgi?id=33950
• https://www.claws-mail.org/NEWS
• https://forums.mageia.org/en/viewtopic.php?t=15558

SRPMS 9/core

• claws-mail-4.3.0-1.mga9

To do a good job, we need good tools. Some of our servers are old, no longer powerful enough and have limited disk resources to meet the needs of developers. RPM manufacturing takes a long time and this is detrimental to the efficiency of maintaining and evolving the distribution. In short, the machines are well depreciated.

This is why our infrastructure is first getting a makeover. Better adapted to new technologies, it will allow our developers to work faster and more efficiently.

So where is this new infrastructure?

 We received 5 new servers:

– 2 new nodes for building packages: HPE ProLiant DL 360 Gen10 – 2xXeon 6126 (12C/2.6GHz) –

256GB RAM – 2xSSD 3.8TB HW Raid 1 – 2x10Gb/s NICs

– 2 servers to replace sucuk and duvel: HPE ProLiant DL 380 Gen10 – 2 Xeon 6126 (12C/2.6GHz) –

256GB RAM – 2xSSD 3.8TB HW Raid 1 – 10xHDD 12TB HW Raid 5 – 2x10Gb/s NICs

– 1 server for deployment and backup: HPE ProLiant DL80 Gen9 – 2xXeon  E5-2603v4

(6C/1.7GHz) – 256GB RAM – 6xHDD 6TB (donated, with some renewed parts)

– 1 Arista 7120T switch 20xRJ-45 10Gb/s 4xSFP+ 10Gb/s for interconnecting the machines

One of the ideas is to use the latest server to deploy quickly and as automatically as possible the construction nodes and other machines. The method is ready for x86_64 nodes and is being finalized for ARM nodes. The preparation of the servers takes time because the teams anticipate the future and future developments.

Once the preparation part of our servers is finished, the integration part into the Data Center will remain.

We are therefore taking our time to do things well in order to perpetuate the future and future versions of Mageia.

In the meantime, the future version 10 of Mageia continues to bubble in its cauldron! But we are not ready yet to plan a release date for the moment.

Feel free to come and strengthen our teams.

Para hacer un buen trabajo, necesitamos buenas herramientas. Algunos de nuestros servidores son viejos, ya no son lo bastante potentes y tienen recursos de disco limitados para satisfacer las necesidades de los desarrolladores. Se tarda mucho en producir los RPM, lo que va en detrimento de la eficacia del mantenimiento y la actualización de la distribución. En resumen, las máquinas están bien amortizadas.

Es por eso que nuestra infraestructura está recibiendo un lavado de cara. Más adaptada a las nuevas tecnologías, permitirá a nuestros desarrolladores trabajar de forma más rápida y eficaz. ¿Cuál es el estado de esta nueva infraestructura? Hemos recibido 5 nuevos servidores:

· 2 nuevos nodos de construcción de paquetes: HPE ProLiant DL 360 Gen10 – 2xXeon 6126 (12C/2.6GHz) – 256GB RAM – 2xSSD 3.8TB HW Raid 1 – 2x10Gb/s NICs.

· 2 servidores para reemplazar sucuk y duvel: HPE ProLiant DL 380 Gen10 – 2 Xeon 6126 (12C/2.6GHz) – 256GB RAM – 2xSSD 3.8TB HW Raid 1 – 10xHDD 12TB HW Raid 5 – 2x10Gb/s NICs.

· 1 servidor de despliegue y copia de seguridad: HPE ProLiant DL80 Gen9 – 2xXeon E5-2603v4 (6C/1.7GHz) – 256GB RAM – 6xHDD 6TB (una donación, con algunas partes renovadas)

· 1 switch Arista 7120T 20xRJ-45 10Gb/s 4xSFP+ 10Gb/s para interconectar las máquinas.

El plan es utilizar el último servidor para desplegar los nodos de construcción y el resto de máquinas de forma rápida y lo más automática posible. El método está listo para los nodos x86_64 y se está ultimando para los nodos ARM (servidores remotos). La preparación de los servidores lleva su tiempo, ya que nuestros equipos se anticipan al futuro y a los futuros desarrollos.

Una vez finalizada la preparación de nuestros servidores, el siguiente paso será integrarlos en el Centro de Datos. Por lo tanto, nos estamos tomando nuestro tiempo para hacer las cosas bien y poder asegurar el futuro y las futuras versiones de Mageia. Por el momento, no publicamos una fecha de lanzamiento provisional para Mageia 10.

Mientras tanto, ¡la futura versión 10 de Mageia sigue burbujeando en su caldero!

No dudes en unirte a nuestros equipos.