• cve-2023-4911

    From Markus Robert Kessler@2:250/1 to All on Tue Oct 10 09:33:55 2023
    https://access.redhat.com/security/cve/cve-2023-4911

    Latest core/updates: glibc-2.36-50.mga9.src.rpm
    Even cauldron still has the vulnerable version

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Markus Robert Kessler@2:250/1 to All on Tue Oct 10 14:20:48 2023
    On Tue, 10 Oct 2023 08:33:55 -0000 (UTC) Markus Robert Kessler wrote:

    https://access.redhat.com/security/cve/cve-2023-4911

    Latest core/updates: glibc-2.36-50.mga9.src.rpm Even cauldron still has
    the vulnerable version

    Now available in updates_testing

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Tue Oct 10 15:36:48 2023
    On Tue, 10 Oct 2023 04:33:55 -0400, Markus Robert Kessler <no_reply@dipl-ing-kessler.de> wrote:

    https://access.redhat.com/security/cve/cve-2023-4911

    Latest core/updates: glibc-2.36-50.mga9.src.rpm
    Even cauldron still has the vulnerable version

    The version number doesn't matter. https://svnweb.mageia.org/advisories/32357.adv?view=markup shows it's fixed.

    Mageia doesn't update to new versions in stable releases, as a new version
    may drop features or change how things are used. When there's a fix, whether it's for a security bug or a bug that doesn't obviously impact security, it's done by applying a patch to the existing version and increasing the sub release number. Exceptions are made when the patch can not be back ported, but that's rare, and it's tested to ensure it either doesn't affect current usage or that everyone is warned as clearly as possible.

    I'm no longer an active member of Mageia, but still use it.

    Regards, Dave Hodgins

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Tue Oct 10 15:42:44 2023
    On Tue, 10 Oct 2023 10:36:48 -0400, David W. Hodgins <dwhodgins@nomail.afraid.org> wrote:

    On Tue, 10 Oct 2023 04:33:55 -0400, Markus Robert Kessler <no_reply@dipl-ing-kessler.de> wrote:

    https://access.redhat.com/security/cve/cve-2023-4911

    Latest core/updates: glibc-2.36-50.mga9.src.rpm
    Even cauldron still has the vulnerable version

    The version number doesn't matter. https://svnweb.mageia.org/advisories/32357.adv?view=markup shows it's fixed.

    Mageia doesn't update to new versions in stable releases, as a new version may drop features or change how things are used. When there's a fix, whether it's for a security bug or a bug that doesn't obviously impact security, it's done by applying a patch to the existing version and increasing the sub release
    number. Exceptions are made when the patch can not be back ported, but that's rare, and it's tested to ensure it either doesn't affect current usage or that
    everyone is warned as clearly as possible.

    I'm no longer an active member of Mageia, but still use it.

    Oops. Sorry. Didn't notice that it hasn't been released yet. I still have
    the testing repos enabled as update repos on this install.

    Regards, Dave Hodgins

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From marc@2:250/1 to All on Tue Oct 10 17:42:25 2023
    On 10/10/23 16:36, David W. Hodgins wrote:


    I'm no longer an active member of Mageia, but still use it.

    Regards, Dave Hodgins

    Hello David,

    If I may ask: why are you no longer an active member of Mageia?
    I'm allways impressed by your deep knowledge of the distro, and the understandable answers you give to difficult questions.
    In fact, people like you inspired me to wish to contribute to the distro
    by helping with translations. Hope to be active in this role soon.

    Regards from Amsterdam,

    Marc.


    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: KPN B.V. (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Tue Oct 10 22:05:57 2023
    On Tue, 10 Oct 2023 12:42:25 -0400, marc <marc@noneofyour.business> wrote:

    On 10/10/23 16:36, David W. Hodgins wrote:


    I'm no longer an active member of Mageia, but still use it.

    Regards, Dave Hodgins

    Hello David,

    If I may ask: why are you no longer an active member of Mageia?
    I'm allways impressed by your deep knowledge of the distro, and the understandable answers you give to difficult questions.
    In fact, people like you inspired me to wish to contribute to the distro
    by helping with translations. Hope to be active in this role soon.

    Regards from Amsterdam,

    Primarily due to health as I just don't have the energy to continue doing the tasks the way they should be done, and dealing with the frustrations that go along with that.

    There were some events that triggered it to be now instead of later. Those events
    have since been resolved, but I've made the choice not to return as an active member. I'll still be using Mageia, and will answer questions when I can, but will
    leave it to others to take over the roles I had.

    I posted privately to the board and council. The text was made public (which I'm
    fine with) in https://ml.mageia.org/l/arc/qa-discuss/2023-09/msg00174.html

    Regards, Dave Hodgins

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From William Unruh@2:250/1 to All on Thu Oct 12 04:11:03 2023

    I posted privately to the board and council. The text was made public (which I'm
    fine with) in https://ml.mageia.org/l/arc/qa-discuss/2023-09/msg00174.html

    Not sounding good. I have been using and liking Mandrake/Mageia for many
    many years now, but I must admit that solving problems has bee slow (the wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.


    Regards, Dave Hodgins

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From marc@2:250/1 to All on Thu Oct 12 09:59:14 2023
    On 10/10/23 23:05, David W. Hodgins wrote:
    On Tue, 10 Oct 2023 12:42:25 -0400, marc <marc@noneofyour.business> wrote:

    On 10/10/23 16:36, David W. Hodgins wrote:


    I'm no longer an active member of Mageia, but still use it.

    Regards, Dave Hodgins

    Hello David,

    If I may ask: why are you no longer an active member of Mageia?
    I'm allways impressed by your deep knowledge of the distro, and the
    understandable answers you give to difficult questions.
    In fact, people like you inspired me to wish to contribute to the distro
    by helping with translations. Hope to be active in this role soon.

    Regards from Amsterdam,

    Primarily due to health as I just don't have the energy to continue
    doing the
    tasks the way they should be done, and dealing with the frustrations
    that go
    along with that.

    There were some events that triggered it to be now instead of later.
    Those events
    have since been resolved, but I've made the choice not to return as an active
    member. I'll still be using Mageia, and will answer questions when I
    can, but will
    leave it to others to take over the roles I had.

    I posted privately to the board and council. The text was made public
    (which I'm
    fine with) in https://ml.mageia.org/l/arc/qa-discuss/2023-09/msg00174.html

    Regards, Dave Hodgins

    Hi Dave,

    Even with health problems one can enjoy collaborating voluntarily in
    projects like Mageia.

    If the fun is gone however, then there must be a severe problem in the organization, I'm afraid. Therefore I can fully understand your decision. Thanks for everything you did and hopefully still will do for Mageia.

    Regards from Amsterdam,

    Marc.



    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: KPN B.V. (2:250/1@fidonet)
  • From Jim@2:250/1 to All on Thu Oct 12 15:31:12 2023
    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia for many
    many years now, but I must admit that solving problems has bee slow (the wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and install
    it changed from the old Fedora maybe 18 months ago. I may delay
    and see how things go for a time, with an eye to shifting to Red Hat
    when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    Cheers!

    jim b.

    --
    UNIX is not user-unfriendly, it merely
    expects users to be computer friendly.

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Thu Oct 12 17:37:26 2023
    On Thu, 12 Oct 2023 10:31:12 -0400, Jim <jim.beard@verizon.net> wrote:

    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia for many
    many years now, but I must admit that solving problems has bee slow (the
    wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and install
    it changed from the old Fedora maybe 18 months ago. I may delay
    and see how things go for a time, with an eye to shifting to Red Hat
    when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    As per my previous response, the issues have been resolved. Besides those specific issues, my stepping down and tmb leaving forced a number of other people to review the situation. Several new people have stepped forward to contribute their time and skills, so overall I think it will be good for Mageia.

    I'll still be using Mageia, and respond to questions when I can.

    Regards, Dave Hodgins

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Daniel65@2:250/1 to All on Fri Oct 13 11:01:38 2023
    David W. Hodgins wrote on 13/10/23 3:37 am:
    On Thu, 12 Oct 2023 10:31:12 -0400, Jim <jim.beard@verizon.net>
    wrote:

    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia
    for many many years now, but I must admit that solving problems
    has bee slow (the wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and
    install it changed from the old Fedora maybe 18 months ago. I may
    delay and see how things go for a time, with an eye to shifting to
    Red Hat when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    As per my previous response, the issues have been resolved. Besides
    those specific issues, my stepping down and tmb leaving forced a
    number of other people to review the situation. Several new people
    have stepped forward to contribute their time and skills, so overall
    I think it will be good for Mageia.

    I'll still be using Mageia,

    That's very good to read, David!

    and respond to questions when I can.

    Regards, Dave Hodgins
    --
    Daniel

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From TJ@2:250/1 to All on Mon Oct 16 14:38:25 2023
    On 2023-10-12 10:31, Jim wrote:
    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia for many
    many years now, but I must admit that solving problems has bee slow (the
    wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and install
    it changed from the old Fedora maybe 18 months ago. I may delay
    and see how things go for a time, with an eye to shifting to Red Hat
    when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    Cheers!

    jim b.

    A bit premature to count us out just yet.

    Yes, the loss of two such valuable contributors as Thomas Backlund and
    Dave Hodgins has made us stumble a bit, but we are getting back on our
    feet. Slowly perhaps, but we are getting there.

    Give us some time. Remember, we are all volunteers, doing this in our
    spare time.

    TJ, Interim Leader of the QA Team

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Jim@2:250/1 to All on Mon Oct 16 15:14:04 2023
    On Mon, 16 Oct 2023 09:38:25 -0400, TJ wrote:

    On 2023-10-12 10:31, Jim wrote:
    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia for many >>> many years now, but I must admit that solving problems has bee slow (the >>> wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and install
    it changed from the old Fedora maybe 18 months ago. I may delay
    and see how things go for a time, with an eye to shifting to Red Hat
    when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    Cheers!

    jim b.

    A bit premature to count us out just yet.

    Yes, the loss of two such valuable contributors as Thomas Backlund and
    Dave Hodgins has made us stumble a bit, but we are getting back on our
    feet. Slowly perhaps, but we are getting there.

    Give us some time. Remember, we are all volunteers, doing this in our
    spare time.

    TJ, Interim Leader of the QA Team

    I am not going to change distro unless I find it necessary, and
    perhaps it will not be. Mandrake, Mandriva and Mageia have served
    me well for years, and perhaps Mageia will last longer than I will.

    Would that UNIX System V Rel 2 had continued and been updated,
    but I gave up on that when I abandoned the AT&T PC 6300+ as
    my home computer. Late 1990s? Early 21st Century?

    Cheers!

    jim b.



    --
    UNIX is not user-unfriendly, it merely
    expects users to be computer friendly.

    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Bobbie Sellers@2:250/1 to All on Mon Oct 16 15:59:06 2023
    On 10/16/23 07:14, Jim wrote:
    On Mon, 16 Oct 2023 09:38:25 -0400, TJ wrote:

    On 2023-10-12 10:31, Jim wrote:
    On Thu, 12 Oct 2023 03:11:03 -0000 (UTC), William Unruh wrote:

    Not sounding good. I have been using and liking Mandrake/Mageia for many >>>> many years now, but I must admit that solving problems has bee slow (the >>>> wireless Mageia Network center is an example).

    It's too bad. and is going to be a pain for me to get used to a
    different distro.

    Concur completely about a pain to get used to a different distro.

    Red Hat does have a free version. The procedures to get and install
    it changed from the old Fedora maybe 18 months ago. I may delay
    and see how things go for a time, with an eye to shifting to Red Hat
    when no alternative or most convenient.

    https://linuxhandbook.com/get-red-hat-linux-free/

    Cheers!

    jim b.

    A bit premature to count us out just yet.

    Yes, the loss of two such valuable contributors as Thomas Backlund and
    Dave Hodgins has made us stumble a bit, but we are getting back on our
    feet. Slowly perhaps, but we are getting there.

    Give us some time. Remember, we are all volunteers, doing this in our
    spare time.

    TJ, Interim Leader of the QA Team

    I am not going to change distro unless I find it necessary, and
    perhaps it will not be. Mandrake, Mandriva and Mageia have served
    me well for years, and perhaps Mageia will last longer than I will.

    Would that UNIX System V Rel 2 had continued and been updated,
    but I gave up on that when I abandoned the AT&T PC 6300+ as
    my home computer. Late 1990s? Early 21st Century?

    Cheers!

    jim b.

    And do not forget the earlier fork from Mandrake with images from Mandriva in the beginning which is PCLinuxOS 64 but it does not use
    systemd which I know many of you all have gotten used to using. I hope
    Mageia goes on for many years but PCLinuxOS is very good. The name is
    the least attractive part.

    Did you all hear about Ubuntu being sabotaged by Locale contributor who included hate speech in the contribution? <https://discourse.ubuntu.com/t/announcement-ubuntu-desktop-23-10-release-image-is-being-updated-to-resolve-a-malicious-translation-incident/39365>

    Some people have no sense. Maybe I am one of them... Long live Mageia.

    bliss - Dell Precision E7730- PCLinuxOS 64- Linux 6.5.7- Plasma 5.27.8




    --- MBSE BBS v1.0.8.4 (Linux-x86_64)
    * Origin: dis-organization (2:250/1@fidonet)