12:00:39 #startmeeting Mer bug triage 2/4/2012 12:00:39 Meeting started Mon Apr 2 12:00:39 2012 UTC. The chair is Stskeeps. Information about MeetBot at http://wiki.merproject.org/wiki/Meetings. 12:00:39 Useful Commands: #action #agreed #help #info #idea #link #topic. 12:01:02 afternoon all 12:01:20 as usual, if you'd like to take on a bug or a task, please indicate during the meeting or assign to yourself afterwards 12:01:25 #info We'll start with the bugs: https://bugs.merproject.org/buglist.cgi?bug_severity=critical&bug_severity=major&bug_severity=normal&bug_severity=trivial&bug_severity=enhancement&bug_status=NEEDINFO&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=TRIAGEDUPSTREAM&bug_status=REOPENED&email1=need-triage&emailassigned_to1=1&emailtype1=substring&query_format=advanced&order=bug_id 12:01:45 #topic https://bugs.merproject.org/show_bug.cgi?id=241 - CVE-2012-1569 Recommendation: Upgrade to libtasn1 2.12. 12:02:13 should have been set to not-taken 12:02:38 ok, so already reviewed 12:03:02 yep, fixed that now 12:04:22 #info libtasn -> gnutls -> cups -> qt 12:04:36 #topic https://bugs.merproject.org/show_bug.cgi?id=248 - CVE-2012-0036 curl URL sanitization vulnerability 12:04:43 high : upgrade due to security fixes 12:05:23 curl is used by: rpm, gnupg2, pacrunner 12:05:47 #info high, security fixes. is used by rpm, gnupg2, pacrunner 12:05:58 #topic https://bugs.merproject.org/show_bug.cgi?id=249 - x86 vs arm Inconsistency in Session Registration 12:06:31 i'd say 'normal', it seems like we may have bumped into us removing a little too much of ConsoleKit 12:06:41 and it assuming things that are PC-like 12:07:48 title? 12:08:15 think title is correct 12:08:24 => x86 vs arm Inconsistency in Session Registration - polkit/ConsoleKit issues 12:08:25 ? 12:08:38 it's under polkit component already 12:08:46 it is an actual inconsistency in session registration 12:08:59 ok 12:09:04 platform/architecture should be arm though 12:09:29 #info normal 12:09:43 ConsoleKit is obsolete 12:09:54 it is, but something isn't hooked up right still 12:10:13 #topic https://bugs.merproject.org/show_bug.cgi?id=250 - attr spec file has obsolete URL entry 12:10:29 housekeeping/technical debt, low? what does your "OBS deployment comment mean?" 12:11:13 er, "OBS deployment" 12:11:31 I have no idea how that got there - I guess I added it to a bug I'd just been editing and bz had auto-incremented the bug list 12:12:28 letters' bugs are useful to help us get a sane way to follow releases, security updates, etc 12:12:44 good junior contributor bugs 12:12:49 / small tasks 12:13:12 #info low, technical debt/housekeeping in order to have accurate upstream information 12:13:20 #topic https://bugs.merproject.org/show_bug.cgi?id=251 - automake spec file has invalid URL entry 12:13:43 same? 12:14:12 I guess 12:14:16 #info low, technical debt/housekeeping in order to have accurate upstream information 12:14:23 #topic https://bugs.merproject.org/show_bug.cgi?id=252 - cvs spec file has obsolete URL entry 12:14:25 I'm wondering what the url is for ... b 12:14:44 URL indicates location of upstream homepage, Source0: http:// indicates where to get the source 12:15:09 citation? 12:15:12 *g* 12:15:22 stskeeps 12:15:23 :P 12:15:26 #info low, technical debt/housekeeping in order to have accurate upstream information 12:15:35 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:15:49 #topic https://bugs.merproject.org/show_bug.cgi?id=253 - gdbm yaml file has invalid URL entry 12:16:18 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:16:45 #topic https://bugs.merproject.org/show_bug.cgi?id=254 - iproute spec file has invalid URL entry 12:17:21 fallout from kernel.org exploit perhaps 12:17:24 or just historic package info 12:17:27 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:17:54 just stop me if i'm going too fast through these :) 12:18:04 that is ok 12:18:06 fine 12:18:22 #topic https://bugs.merproject.org/show_bug.cgi?id=255 - lcms yaml file has invalid URL entry 12:18:44 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:18:54 #topic https://bugs.merproject.org/show_bug.cgi?id=256 - libgcrypt spec file has no URL entry 12:18:58 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:19:16 #topic https://bugs.merproject.org/show_bug.cgi?id=257 - libnl yaml file has obsolete URL entry 12:19:41 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:20:05 #topic https://bugs.merproject.org/show_bug.cgi?id=258 - CVE-2011-3048 serious vulnerability; fixed in version 1.5.10 12:20:08 high ? 12:20:32 high : upgrade due to security fixes 12:20:38 libpng used by libqtgui4 , cairo 12:20:43 (cairo used by gstreamer) 12:21:02 #info high, upgrade due to security fixes, used by libqtgui4, cairo (cairo used by gstreamer) 12:21:38 #topic https://bugs.merproject.org/show_bug.cgi?id=260 - libvisual yaml file has obsolete URL entry 12:21:58 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:22:18 #topic https://bugs.merproject.org/show_bug.cgi?id=261 - mailcap yaml has obsolete URL entry 12:22:28 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:22:36 #topic https://bugs.merproject.org/show_bug.cgi?id=262 - mobile-broadband-provider-info does not appear in mer-core component in bugzilla 12:22:42 i guess i can fix this one right now.. 12:22:50 doing it 12:23:03 title should be changed to URL: being wrong 12:23:21 and low/technical debt 12:24:18 #topic https://bugs.merproject.org/show_bug.cgi?id=263 - net-tools spec file has obsolete URL entry 12:24:31 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:24:50 #topic https://bugs.merproject.org/show_bug.cgi?id=267 - psutils spec file has no URL entry (nor Source URL) 12:25:08 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:25:16 psutils.. 12:25:18 why is that there 12:25:20 * Stskeeps looks 12:25:57 #info file bug to have psutils removed, is unused 12:26:03 mmm 12:26:21 it provides some odd things 12:26:36 OBS claims it's unused 12:26:50 (This archive contains some utilities for manipulating PostScript documents. 12:26:52 it might be runtime dep 12:26:53 Page selection and rearrangement are supported, including arrangement into 12:26:54 signatures for booklet printing, and page merging for n-up printing.) 12:26:55 oh 12:27:04 fine - wrong psutils 12:27:04 Sage: same 12:27:44 #topic https://bugs.merproject.org/show_bug.cgi?id=268 - no qemu-usermode bugzilla component in mer-core? 12:28:09 should be fixed and made into a URL bug with low 12:28:36 our right upstream is linaro qemu 12:28:38 #topic https://bugs.merproject.org/show_bug.cgi?id=269 - qtwebkit yaml file has outdated URL entry 12:29:00 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:29:34 #topic https://bugs.merproject.org/show_bug.cgi?id=270 - scratchbox2 spec file does not have URL entry 12:29:37 sec 12:30:01 ok 12:30:50 qemu-usermode - is that used by sb2/obs 12:30:58 yes, and sdk 12:30:59 for mic 12:31:11 same source package for dynamic and static 12:31:30 should this be 'qemu' component? 12:32:05 theoretically, though we may differ in qemu for emulation of full systems and qemu for user mode 12:32:11 the packaging is very different 12:32:14 so qemu-usermode seperately 12:32:15 and we should have a bug to diff bz component list and gitweb 12:33:20 :nod: 12:33:49 URL for sb2 should be gitorious.org/scratchbox2 due to upcoming changes at maemo.gitorious.org 12:34:33 see http://lists.scratchbox.org/pipermail/scratchbox-users/2012-April/001760.html 12:35:03 #topic https://bugs.merproject.org/show_bug.cgi?id=271 - CVE-2005-4890 shadow-utils 12:35:16 high 12:36:17 #topic https://bugs.merproject.org/show_bug.cgi?id=272 - tzdata spec file has obscure / obsolete URL entry 12:36:44 there was this tzdata / olson database issue some time back 12:36:47 that explains the URL change 12:36:51 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:36:59 yep 12:37:59 #topic https://bugs.merproject.org/show_bug.cgi?id=273 - udev spec file has invalid URL entry 12:38:18 fallout from kernel.org rooting probably 12:38:20 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:38:50 #topic https://bugs.merproject.org/show_bug.cgi?id=274 - wayland yaml file has obsolete URL entry 12:39:06 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:39:16 \o/ 12:39:25 #topic Moving on to tasks: https://bugs.merproject.org/buglist.cgi?emailassigned_to1=1&query_format=advanced&bug_severity=task&bug_status=NEEDINFO&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=TRIAGEDUPSTREAM&bug_status=REOPENED&email1=need-triage&emailtype1=substring&order=bug_id 12:40:04 #topic https://bugs.merproject.org/show_bug.cgi?id=246 - Instructions how to use SDK with different architectures 12:40:25 some of tasks should be bugs simlar to above? 12:40:27 #info need cross compiler for x86 too 12:40:35 yeah, we'll convert them as we go 12:41:24 does it make sense to have non -cross targets? 12:41:34 it does 12:41:37 essentially rootfs of managed build-deps 12:42:34 it would also allow "build this package with this set of deps and this toolchain" 12:42:48 well, we should have similar methods for all archs 12:43:03 *nod* 12:43:14 #info task bug for cross compiler for i486,i586 12:43:26 iirc I suggested this bug be raised to jog a discussion 12:43:36 :nod: 12:43:45 normal prio? 12:44:06 yes 12:44:13 kinda not sure about making it high 12:44:30 i think normal, we'll need it as we go along with sb2 work 12:44:59 #topic https://bugs.merproject.org/show_bug.cgi?id=259 - libtiff yaml file has obsolete URL entry 12:45:11 #info convert to bug 12:45:18 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:45:23 mmm 12:45:31 I just made all the other bugs tasks :) 12:45:34 well 12:45:35 ok then 12:45:35 :P 12:45:41 "easy task" :) 12:45:44 fair enough 12:45:59 #topic https://bugs.merproject.org/show_bug.cgi?id=265 - pam spec file has invalid / obsolete URL entry 12:46:03 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:46:12 #topic https://bugs.merproject.org/show_bug.cgi?id=266 - pkcs11-helper yaml file has invalid URL entry 12:46:41 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:47:31 #topic https://bugs.merproject.org/show_bug.cgi?id=275 - xkeyboard-config yaml file has obsolete URL and Source entries 12:47:34 #info low, technical debt/housekeeping in order to have accurate upstream information, easy task 12:47:41 all done 12:47:59 * lbt wonders about having a "easy task" category 12:48:07 #info Task list is now: https://bugs.merproject.org/buglist.cgi?bug_severity=task&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&email1=not-taken%40&emailassigned_to1=1&emailtype1=substring&query_format=advanced&order=priority%2Cbug_id&query_based_on= 12:48:14 just to be able to point people at them 12:48:34 we have an undecided? 12:49:47 should be low i guess 12:49:50 (211) 12:50:06 OK - MDS2 ? 12:50:31 :nod: 12:50:52 179? 12:50:58 Add mipsel to DBC/SBC checks 12:51:17 i need to really upstream that patch to the repos 12:51:31 guess i'll do it now 12:51:44 ? 12:52:09 I thought 179 was our BOSS processes 12:52:54 179 is mipsel dbc/sbc isn't it? 12:53:00 yes 12:53:18 and iirc you told me a while back that you'd done this 12:55:06 close with fixed in http://review.merproject.org/495 12:56:25 #info Not taken bugs: https://bugs.merproject.org/buglist.cgi?bug_severity=critical&bug_severity=major&bug_severity=normal&bug_severity=trivial&bug_severity=enhancement&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&email1=not-taken%40&emailassigned_to1=1&emailtype1=substring&query_format=advanced&order=priority%2Cbug_id&query_based_on= 12:57:23 well, I may be looking at 95 as part of the OBS packaging/deployment testing 12:58:00 245 worries me a bit 12:58:11 are you happy that's not causing build problems? 12:58:35 it hasn't so far, keep in mind we don't have armv7l-unknown-linux-gnueabi-gcc 12:58:44 available in $PATH 12:59:13 look at 238 too 12:59:45 :nod: 13:00:12 in pre-sb2 we set /etc/rpm/platform too, fwiw 13:00:37 OK, anything else or can we wrap up? 13:00:39 ah - so that needs doing on SDK ? 13:00:45 possibly 13:01:27 looking 13:02:37 ok 13:02:51 thank you all for coming 13:04:14 #endmeeting