Re: [arch-general] Packages "jami-gnome" and "libjamiclient" out of date

2020-02-02 Thread Archange via arch-general
Hi, Le 3 février 2020 00:58:02 GMT+01:00, Friedrich Strohmaier a écrit : >Hi archers, > >Packages "jami-gnome" and "libjamiclient" are flagged out of date since >2019-11-16 / 2019-11-20. There are two new releases in place. > >I tried to contact the maintainer twice but nothing happened. > >I re

[arch-general] Packages "jami-gnome" and "libjamiclient" out of date

2020-02-02 Thread Friedrich Strohmaier
Hi archers, Packages "jami-gnome" and "libjamiclient" are flagged out of date since 2019-11-16 / 2019-11-20. There are two new releases in place. I tried to contact the maintainer twice but nothing happened. I retrieved the maintainers (Bruno Pagani) mail adress from this mailinglist. I suspect

Re: [arch-general] Pacman Database Signatures

2020-02-02 Thread Justin Capella via arch-general
Could a tempfile be used or the file name from the URL instead of the content disposition? At least prior to signature verification? Seems this could still be "exploited" by specifying a file name of another source in the package perhaps? Makes me wonder about the ::dest suffix of sources albeit th

Re: [arch-general] Pacman Database Signatures

2020-02-02 Thread Levente Polyak via arch-general
On 2/2/20 10:59 PM, Christopher W. via arch-general wrote: > Hi. The wiki states that database signatures for pacman are currently > a work in progress. It's been that way for a long time, so I assume > there is no "progress" happening. What is currently in the way of this > much-needed security fe

[arch-general] Pacman Database Signatures

2020-02-02 Thread Christopher W. via arch-general
Hi. The wiki states that database signatures for pacman are currently a work in progress. It's been that way for a long time, so I assume there is no "progress" happening. What is currently in the way of this much-needed security feature to be fully implemented? Right now, pacman is taking untrust