maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   Announcement - PR1.3.1 official security update (https://talk.maemo.org/showthread.php?t=79400)

don_falcone 2011-11-11 16:11

Re: Announcement - PR1.3.1 official security update
 
I have an (not Realtek, my bad!) Royaltek RBT-2100. It's from 2006, but it's one of the best SiRF III BT receivers that were available then. Providing ~17h usage with a fresh battery.

mr.Rizov 2011-11-11 19:49

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by don_falcone (Post 1121917)
I have an (not Realtek, my bad!) Royaltek RBT-2100. It's from 2006, but it's one of the best SiRF III BT receivers that were available then. Providing ~17h usage with a fresh battery.

If it works good..give me link or send me installation file on my mail or whatever :D

liao22 2011-11-11 23:55

Re: Announcement - PR1.3.1 official security update
 
cssu is stable?

Thehunted 2011-11-12 00:29

Re: Announcement - PR1.3.1 official security update
 
Its kinda fun

egoshin 2011-11-13 03:08

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mr.Rizov (Post 1121711)
So tell me then how to get my GPS working and from where I should update to the new sofware verion?

To get GPS working try open Settings/Certificates and close after installation PR1.3.1

colin.stephane 2011-11-13 16:29

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by MohammadAG (Post 1114205)
Recently, Nokia has been in touch with some CSSU devs and the council about a possible software update.

As the version number implies, this is just a simple fix for the DigiNotar issue.

As of version 16.8, the CSSU includes these security fixes, you should not try to update your device (the update will not show up in Application Manager).

The latest Nokia update will also include a fixed security control panel applet, this will be pulled into the CSSU right after it's released publicly so the CSSU can be right back on track.

The update should be out in a couple of days for everyone, again, please do not try to update if you're using the CSSU (using apt-get or similar methods).

Non-CSSU users, you can update. If you ever want to install the CSSU, the installer will work fine on PR1.3.1.

Hi all,

Can someone say me what packages exactly are concerned by the 'PR1.3.1' security update ?

Here is a list of packages I am proposed to upgrade after an 'apt-get upgrade' :

- libmaemosec-certman-applet0
- libmaemosec-certman0
- libmaemosec0
- libqtm-12
- libqtm-12-bearer
- libqtm-12-connectivity
- libqtm-12-contacts
- libqtm-12-declarative
- libqtm-12-feedback
- libqtm-12-gallery
- libqtm-12-location
- libqtm-12-messaging
- libqtm-12-multimedia
- libqtm-12-organizer
- libqtm-12-publishsubscribe
- libqtm-12-sensors
- libqtm-12-serviceframework
- libqtm-12-systeminfo
- libqtm-12-versit
- maemosec-certman-applet
- maemosec-certman-common-ca
- maemosec-certman-tools

A++

delmar 2011-11-13 16:48

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by petur (Post 1117078)
This most probably has nothing to do with the security fix. Use the Google server for AGPS

Had the same problem after security update: no GPS signsl with each ptogtamm like sygic, gps jinny and nokia maps. Now with the google server all works fine. Thank you a lot.

rebhana 2011-11-13 17:10

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by colin.stephane (Post 1122944)
Hi all,

Can someone say me what packages exactly are concerned by the 'PR1.3.1' security update ?

Here is a list of packages I am proposed to upgrade after an 'apt-get upgrade' :

- libmaemosec-certman-applet0
- libmaemosec-certman0
- libmaemosec0
- libqtm-12
- libqtm-12-bearer
- libqtm-12-connectivity
- libqtm-12-contacts
- libqtm-12-declarative
- libqtm-12-feedback
- libqtm-12-gallery
- libqtm-12-location
- libqtm-12-messaging
- libqtm-12-multimedia
- libqtm-12-organizer
- libqtm-12-publishsubscribe
- libqtm-12-sensors
- libqtm-12-serviceframework
- libqtm-12-systeminfo
- libqtm-12-versit
- maemosec-certman-applet
- maemosec-certman-common-ca
- maemosec-certman-tools

A++

If I remember correctly, only the maemosec and libmaemosec packages were upgraded in my case.

Keferen 2011-11-14 11:17

Re: Announcement - PR1.3.1 official security update
 
since this OTA update i have noticed only one thing different

heavy battery drain when online via gprs/umts/wifi+net

i usually am online 24-7 using 3g data connection. previously battery would last about 2 days, 3 at a push if i was not hammering it. after update its about 24-36 hours tops.

what i also notice is that when data is on and a connection is made, the cpu skyrockets to 100% when using the browser, didnt do this before and not when offline. when idling with a connection the cpu is a lot higher than it was before the update. i cannot figure this out for the life of me and i have disabled various apps but it still seems to do it.

but then there are variations like at night, cpu is non existant usage a given and the battery lasts an epic long time using only 1 bar of battery. but when idling with it in front of me the cpu is about 5-10% and battery bars are dropping off every 2 hours.it makes no sense.

inconsistant battery use and cpu use.

when i get my n9 all sorted i may flash the n900 and rebuild from scratch and see what happens...

kureyon 2011-11-14 13:06

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mr.Rizov (Post 1122031)
If it works good..give me link or send me installation file on my mail or whatever :D

don_falcone is talking about a hardware gps receiver.

egoshin 2011-11-14 19:55

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by colin.stephane (Post 1122944)
Hi all,

Can someone say me what packages exactly are concerned by the 'PR1.3.1' security update ?

- libmaemosec-certman-applet0
- libmaemosec-certman0
- libmaemosec0
- maemosec-certman-applet
- maemosec-certman-common-ca
- maemosec-certman-tools

egoshin 2011-11-14 20:06

Re: Announcement - PR1.3.1 official security update
 
Well, Internal GPS (not AGPS) seems taking HUGE amount of time for initial sync (10min is not enough in my area). If you do it or do it via AGPS then it works fine on PR1.3.1 or PR1.3 ... until next day - I still have an old PR1.3 image on my N900 and I am able to test it.

I have no idea then it stopped working and it may be just increased RF noise or whatever.

Now - after installing PR1.3.1 I lost EXTERNAL GPS capability. It blinks forever but doesn't get it from my Holux240. And old image (PR1.3 or earlier) does WORK fine and fast in this case. Unfortunately, it takes time to confirm this because after initial hook with satellites it works fine ... again, until next day.

I rolled back libmaemosec* packages but it doesn't help - external GPS capability is lost for initial hookup - something other corrupts it. And I will setup the pretty same environment for my tests (WiFi/Cell) but all it takes time to test.

mr_ian84 2011-11-14 20:39

Re: Announcement - PR1.3.1 official security update
 
i am on the cssu ... should i update with apt-get update?

HELLASISGREECE 2011-11-14 21:17

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mr_ian84 (Post 1123583)
i am on the cssu ... should i update with apt-get update?

read the first post

duh

Bazza 2011-11-14 21:32

Re: Announcement - PR1.3.1 official security update
 
Since i updated to PR1.3.1 (no cssu installed) my gps takes ages to locate my position about 40-60 secs when previously it took 10-15 secs to do so and i have had at least 3-4 hildon desktop crashes within the last 2 weeks (never had 1 crash since i got the phone 2 years ago) when it eventually loads back up i have desktop icons missing and i have to edit my home screen to sort it.

And they say that this was only an internet security update...hmmmmmmmm :(:(

mr_ian84 2011-11-14 22:39

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by HELLASISGREECE (Post 1123601)
read the first post

duh

the first post also says that an update will be out in a matter of days

SeT 2011-11-15 09:06

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mr_ian84 (Post 1123583)
i am on the cssu ... should i update with apt-get update?

also interested in this the question

visN900 2011-11-15 09:11

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mr_ian84 (Post 1123628)
the first post also says that an update will be out in a matter of days

dont update..CSSU will release cssu update in as week or so..

MohammadAG 2011-11-19 18:00

Re: Announcement - PR1.3.1 official security update
 
CSSU update is out
Changelog:
  • Added Qt DigiNotar blacklists.
  • Fixed modest crashes.
  • Fixed camera-ui corrupting videos after switching to background while recording.
  • Fixed camera-ui overwriting user data.
  • Fixed portrait wallpapers in hildon-home.
  • CSSU rebased on top of official PR1.3.1 release.

Version is 21.2011.38-1Tmaemo1

This is the first release that will hopefully be followed by a stable release, the T in the version string stands for testing.

The settings applet (About CSSU) in control panel now shows what flavor you have installed.

Keep in mind that changing between either flavors requires a reflash, but more about that later when the stable version's out.

hxka 2011-11-19 19:35

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by MohammadAG (Post 1125994)
Keep in mind that changing between either flavors requires a reflash

What? Why?

joerg_rw 2011-11-19 20:00

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by hxka (Post 1126032)
What? Why?

Because of either of S / T is updating system components and there's no way to _uninstall_ the one to sanely update to the other then.
Generally you do *not* want to switch back and forth between Stable and Testing, and anyway it's not supported by CSSU (as it isn't by arbitrary other linux distros)

/j

hxka 2011-11-19 20:32

Re: Announcement - PR1.3.1 official security update
 
Why? Isn't it just couple of debs? Maybe I just do not know something?
But you right, there is no reason for switching between S and T.

joerg_rw 2011-11-19 20:40

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by hxka (Post 1126061)
Why? Isn't it just couple of debs? Maybe I just do not know something?
But you right, there is no reason for switching between S and T.

The question "How can I switch from T to S?" boils down to "How to uninstall CSSU-T?" -> A: "you can't. Do a full reflash!"
Neither of both branches is meant to provide flawless installation on anything other than the unmodified current stock maemo-PR (1.3[.1]). Neither has any of both any special means to "uninstall" and rollback to that stock maemo PR.
So even if it *might* be possible to go from S to T by mere apt-get trickery, nothing of all that is supported neither tested. Due to lack of usecases that would require it.

/j

Mr Wolf 2011-11-19 21:48

Re: Announcement - PR1.3.1 official security update
 
Hi!
I have installed without realizing the last update. Is there a way to uninstall it?

joerg_rw 2011-11-19 23:19

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Mr Wolf (Post 1126093)
Hi!
I have installed without realizing the last update. Is there a way to uninstall it?

I don't exactly understand what you say by "without realizing the last update", anyway there is no way to uninstall CSSU.
Probably your "problem" isn't a problem actually.

/j

Mr Wolf 2011-11-19 23:36

Re: Announcement - PR1.3.1 official security update
 
Well, I'm new to N900, and I installed the last Nokia update without thinking about it. I read about CSSU and the problem the Nokia update causes, so I was wondering if there's way to uninstall it.
Sorry, I'm a bit sleepy now :o

pecos 2011-11-19 23:45

Re: Announcement - PR1.3.1 official security update
 
Hello.
I use CSSU and got the update minutes ago but i got the message of "need to update via Nokia OVI"

I get this message on app manager

joerg_rw 2011-11-19 23:45

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by Mr Wolf (Post 1126138)
Well, I'm new to N900, and I installed the last Nokia update without thinking about it. I read about CSSU and the problem the Nokia update causes, so I was wondering if there's way to uninstall it.
Sorry, I'm a bit sleepy now :o

There's no problem with installing CSSU on stock Nokia maemo with or without latest update, I.E. CSSU will install just fine on maemo-PR1.3 and PR1.3.1

No worries, just _today_ is maybe a poor choice to install CSSU as there actually _is_ a problem in CSSU regarding that update - I pretty much hope for it getting sorted next 24h, depending on how much MohammadAG is pushing it.
See http://talk.maemo.org/showpost.php?p...postcount=5281
[EDIT] just dared to update via HAM and it "just worked" (alas nobody talks on #maemo-ssu so current state of things is rather cloudy to me, but recently I can't see any issues)[/edit]

/j

joerg_rw 2011-11-19 23:50

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by pecos (Post 1126140)
Hello.
I use CSSU and got the update minutes ago but i got the message of "need to update via Nokia OVI"

I get this message on app manager

"need to update via Nokia OVI" is HAM's generic catch-all error message that doesn't exactly mean what it says. I suggest you ignore the update for today and check again tomorrow. If nothing changes then please see howto and FAQ regarding (CSSU) OTA update, there may be several problems that cause this error-msg and there is advice what to do to spot the particular problem and circumvent/fix it.

cheers
jOERG

pecos 2011-11-20 00:13

Re: Announcement - PR1.3.1 official security update
 
When using HAM to do the update, in details i get this message of what the problem is:
"Conflit between packages: libqt4-test (1:4.7.4~git20110505+cssu5)"

Any idea on how to fix this?

Many thanks

joerg_rw 2011-11-20 02:18

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by pecos (Post 1126148)
When using HAM to do the update, in details i get this message of what the problem is:
"Conflit between packages: libqt4-test (1:4.7.4~git20110505+cssu5)"

Any idea on how to fix this?

Many thanks

on my system a
Code:

apt-cache policy libqt4-test
shows it's not installed at all. Probably the version you got installed conflicts with the new Qt packages that come with the CSSU update. If there's no compatible new libqt4-test package available, then you only can uninstall libqt4-test

Though:
Code:

IroN900:~# apt-get -s install libqt4-test
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  libqt4-test
0 upgraded, 1 newly installed, 0 to remove and 37 not upgraded.
Inst libqt4-test (1:4.7.4~git20110505+cssu6 community-testing:2.0/fremantle)
Conf libqt4-test (1:4.7.4~git20110505+cssu6 community-testing:2.0/fremantle)
IroN900:~#

[EDIT]
advice from maintainers: uninstall the 2 pkgs, update CSSU, install the 2 pkgs (if you actually need them for anything)
[/EDIT]


/j

panjgoori 2011-11-20 07:21

Re: Announcement - PR1.3.1 official security update
 
is 720p video recording is added by default in this CSSU update or we have to do everything manually ?

techdude2121 2011-11-20 08:01

Re: Announcement - PR1.3.1 official security update
 
LOve the efforts of maemo.org!!

also got the 20.2 MB update on HAM,

waiting for the stable release from you guys !

thanks again!

pecos 2011-11-20 11:57

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by joerg_rw (Post 1126186)
on my system a
Code:

apt-cache policy libqt4-test
shows it's not installed at all. Probably the version you got installed conflicts with the new Qt packages that come with the CSSU update. If there's no compatible new libqt4-test package available, then you only can uninstall libqt4-test

Though:
Code:

IroN900:~# apt-get -s install libqt4-test
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  libqt4-test
0 upgraded, 1 newly installed, 0 to remove and 37 not upgraded.
Inst libqt4-test (1:4.7.4~git20110505+cssu6 community-testing:2.0/fremantle)
Conf libqt4-test (1:4.7.4~git20110505+cssu6 community-testing:2.0/fremantle)
IroN900:~#


/j

In my N900 it says:
installed: 1:4.7.4~git20110505+cssu5
candidate: 1:4.7.4~git20110505cssu6

And a lot under version table.
But the point is... i have iinstalled

mramkumar7 2011-11-20 16:53

Re: Announcement - PR1.3.1 official security update
 
Hi,

I found an Update available for "Maemo 5 Community SSU Package 21.2011.38-1Tmaemo1"

But i am unable to update to this package, When i click on Details i see the below...

In summary TAB
This maemo update requires nokia pc suite on your pc for installation, Connect device to pc via USB cable and open Nokia PC Suite. The application will guide you through the res of the maemo update.

This keeps showing even though the device is connected to pc and pc suite is running.

In Problems TAB
Unable to Update "Maemo 5 Community SSU Package"
Application packages missing : maemosec-certman-applet(>=0.1.4+0m5)
libmaemosec-certman-applet0(>=0.1.4+0m5)

================================================== ==
Currently the SSU version available in my device is

20.2010.36-2maemo16.8

Can someone let me know if the package is installable, if so then what could be the problem in my device which requires to be looked at...

Thanks in Advance

Regards,
Ramkumar M

joerg_rw 2011-11-20 17:11

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by mramkumar7 (Post 1126440)
...
In Problems TAB
Unable to Update "Maemo 5 Community SSU Package"
Application packages missing : maemosec-certman-applet(>=0.1.4+0m5)
libmaemosec-certman-applet0(>=0.1.4+0m5)

================================================== ==
Currently the SSU version available in my device is

20.2010.36-2maemo16.8

Can someone let me know if the package is installable, if so then what could be the problem in my device which requires to be looked at...

Those packages are meant to be included in CSSU repo but due to bad luck currently are not.
Anyway a "usual" setup should be able to pull these packages from Nokia standard repo, so if it doesn't for you then maybe you have disabled your Nokia repos, or for some reason have connectivity issues that forbid accessing those. Not really unusual for Nokia repos at weekends.
You could just try again tomorrow, or (better) check your catalog settings in HAM, particularly the Nokia repos there.


See http://talk.maemo.org/showthread.php...12#post1126212

/j

techdude2121 2011-11-20 20:39

Re: Announcement - PR1.3.1 official security update
 
ok, i just connected my n900 to the NOKIA SUITE 3.2.98 beta,
it shows UPDATE 21.2011.38.1 = 191MB,
but in HAM i saw another update just yesterday of only 20.2MB .
which one should i go for? please help me.

rm42 2011-11-20 22:04

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by joerg_rw (Post 1126449)
Those packages are meant to be included in CSSU repo but due to bad luck currently are not.
Anyway a "usual" setup should be able to pull these packages from Nokia standard repo, so if it doesn't for you then maybe you have disabled your Nokia repos, or for some reason have connectivity issues that forbid accessing those. Not really unusual for Nokia repos at weekends.
You could just try again tomorrow, or (better) check your catalog settings in HAM, particularly the Nokia repos there.


See http://talk.maemo.org/showthread.php...12#post1126212

/j

But this is the testing version. Shouldn't he wait for the stable version instead?

petur 2011-11-20 22:37

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by MohammadAG (Post 1125994)
Changelog:
  • Fixed modest crashes.

Within 10 minutes it told me the E-mail program had an internal error. Funny, since I've seen this maybe once or twice in the past years, and it popped up right after the update that's supposed to fix it? :D

joerg_rw 2011-11-20 23:32

Re: Announcement - PR1.3.1 official security update
 
Quote:

Originally Posted by rm42 (Post 1126556)
But this is the testing version. Shouldn't he wait for the stable version instead?

Definitely not, as we would want to learn why there are problems, as long as users are on T, if same problem would appear on S that was a real nasty thing. And why should any of the suspected causes for this issue vanish for S and not for e.g. Monday or blue moon?

And at the end of next day CSSU-T repo is supposed to get fixed and include the missing binaries, which should completely avoid this class of problems.

/j


All times are GMT. The time now is 18:20.

vBulletin® Version 3.8.8