==========================================================================
Ubuntu Security Notice USN-5520-2
July 18, 2022
libhttp-daemon-perl vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
HTTP-Daemon could allow HTTP Request Smuggling attacks.
Software Description:
- libhttp-daemon-perl: simple http server class
Details:
USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that HTTP-Daemon incorrectly handled certain crafted
requests. A remote attacker could possibly use this issue to perform an
HTTP Request Smuggling attack.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libhttp-daemon-perl 6.01-1ubuntu0.16.04~esm1
Ubuntu 14.04 ESM:
libhttp-daemon-perl 6.01-1ubuntu0.14.04~esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5520-2
https://ubuntu.com/security/notices/USN-5520-1
CVE-2022-31081
Monday, July 18, 2022
[USN-5522-1] WebKitGTK vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5522-1
July 18, 2022
webkit2gtk vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in WebKitGTK.
Software Description:
- webkit2gtk: Web content engine library for GTK+
Details:
Several security issues were discovered in WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a
remote attacker could exploit a variety of issues related to web browser
security, including cross-site scripting attacks, denial of service attacks,
and arbitrary code execution.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
libjavascriptcoregtk-4.0-18 2.36.4-0ubuntu0.22.04.1
libjavascriptcoregtk-4.1-0 2.36.4-0ubuntu0.22.04.1
libwebkit2gtk-4.0-37 2.36.4-0ubuntu0.22.04.1
libwebkit2gtk-4.1-0 2.36.4-0ubuntu0.22.04.1
Ubuntu 20.04 LTS:
libjavascriptcoregtk-4.0-18 2.36.4-0ubuntu0.20.04.1
libwebkit2gtk-4.0-37 2.36.4-0ubuntu0.20.04.1
This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use WebKitGTK, such as Epiphany, to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5522-1
CVE-2022-22677, CVE-2022-26710
Package Information:
https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.4-0ubuntu0.22.04.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.4-0ubuntu0.20.04.1
Ubuntu Security Notice USN-5522-1
July 18, 2022
webkit2gtk vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in WebKitGTK.
Software Description:
- webkit2gtk: Web content engine library for GTK+
Details:
Several security issues were discovered in WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a
remote attacker could exploit a variety of issues related to web browser
security, including cross-site scripting attacks, denial of service attacks,
and arbitrary code execution.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
libjavascriptcoregtk-4.0-18 2.36.4-0ubuntu0.22.04.1
libjavascriptcoregtk-4.1-0 2.36.4-0ubuntu0.22.04.1
libwebkit2gtk-4.0-37 2.36.4-0ubuntu0.22.04.1
libwebkit2gtk-4.1-0 2.36.4-0ubuntu0.22.04.1
Ubuntu 20.04 LTS:
libjavascriptcoregtk-4.0-18 2.36.4-0ubuntu0.20.04.1
libwebkit2gtk-4.0-37 2.36.4-0ubuntu0.20.04.1
This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use WebKitGTK, such as Epiphany, to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5522-1
CVE-2022-22677, CVE-2022-26710
Package Information:
https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.4-0ubuntu0.22.04.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.4-0ubuntu0.20.04.1
F37 proposal: Haskell GHC 8.10.7 & Stackage LTS 18.28 (Self-Contained Change proposal)
Note that this proposal supersedes the Haskell GHC 9.0 & Stackage LTS
19 proposal, which was deferred to F38.
https://fedoraproject.org/wiki/Changes/Haskell_GHC_8.10.7
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
The GHC Haskell compiler will be updated from minor version 8.10.5 to 8.10.7,
and Haskell packages will be updated to Stackage LTS 18.28 minor versions.
== Owner ==
* Name: [[User:Petersen|Jens Petersen]]
* Email: petersen@redhat.com
* Name: [[Haskell_SIG|Haskell SIG]]
* Email: haskell@lists.fedoraproject.org
== Detailed Description ==
For Fedora 37, the GHC Haskell compiler will be updated from version
8.10.5 to 8.10.7 release (rebasing from the ghc8.10 package).
Along with this, Haskell packages in [https://www.stackage.org
Stackage] (the stable Haskell source package distribution) will be
updated to the final LTS 18.28 minor release.
Haskell packages not in Stackage will be updated to the latest
appropriate version in the upstream [https://hackage.haskell.org
Hackage] package repository.
== Benefit to Fedora ==
Fedora users will have a newer more stable Haskell compiler, tools,
and current Haskell packages from final Stackage LTS 18.
GHC 8.10.7 contains a few important bug fixes (see the release notes
linked in the Documentation section for more details).
== Scope ==
* Proposal owners:
** rebase ghc to 8.10.7
** update ghc-rpm-macros to the final version for F37
** update packages to latest [https://www.stackage.org/lts-18 Stackage
LTS 18] versions using cabal-rpm
** build all the packages in a Koji sidetag repo in dependency order
using fbrnch
** push the sidetag through Bodhi to Rawhide before the mass rebuild
[[https://bodhi.fedoraproject.org/updates/FEDORA-2022-3ae019aee4
done]]
* Other developers: no actions should be needed
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
There should not be any significant upgrade impact.
Users' Haskell projects will get built with ghc-8.10,7 when they next build.
== How To Test ==
* install ghc and cabal-install
* install pandoc, ShellCheck, ghcid, git-annex, hadolint, stack, xmonad
* install ghc-*-devel or ghc-*-prof or ghc-*-doc
* cabal-rpm builddep <favouritepackage>; cabal install <favouritepackage>
* test upgrades of F36 Haskell packages to F37
== User Experience ==
Users will have the newer stable minor version of ghc and Haskell
libraries and tools available to them.
This makes it easier to build the recent versions of Haskell projects.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?)
** Change owner can revert back to the versions in F36.
* Contingency deadline: Beta Freeze
== Documentation ==
* https://www.haskell.org/ghc/blog/20210814-ghc-8.10.6-released.html
* https://downloads.haskell.org/ghc/8.10.6/docs/html/users_guide/8.10.6-notes.html
* https://www.haskell.org/ghc/blog/20210827-ghc-8.10.7-released.html
* https://downloads.haskell.org/ghc/8.10.7/docs/html/users_guide/8.10.7-notes.html
== Release Notes ==
The Haskell GHC compiler has been updated from 8.10.5 to 8.10.7 with
some important bugfixes.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
19 proposal, which was deferred to F38.
https://fedoraproject.org/wiki/Changes/Haskell_GHC_8.10.7
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
The GHC Haskell compiler will be updated from minor version 8.10.5 to 8.10.7,
and Haskell packages will be updated to Stackage LTS 18.28 minor versions.
== Owner ==
* Name: [[User:Petersen|Jens Petersen]]
* Email: petersen@redhat.com
* Name: [[Haskell_SIG|Haskell SIG]]
* Email: haskell@lists.fedoraproject.org
== Detailed Description ==
For Fedora 37, the GHC Haskell compiler will be updated from version
8.10.5 to 8.10.7 release (rebasing from the ghc8.10 package).
Along with this, Haskell packages in [https://www.stackage.org
Stackage] (the stable Haskell source package distribution) will be
updated to the final LTS 18.28 minor release.
Haskell packages not in Stackage will be updated to the latest
appropriate version in the upstream [https://hackage.haskell.org
Hackage] package repository.
== Benefit to Fedora ==
Fedora users will have a newer more stable Haskell compiler, tools,
and current Haskell packages from final Stackage LTS 18.
GHC 8.10.7 contains a few important bug fixes (see the release notes
linked in the Documentation section for more details).
== Scope ==
* Proposal owners:
** rebase ghc to 8.10.7
** update ghc-rpm-macros to the final version for F37
** update packages to latest [https://www.stackage.org/lts-18 Stackage
LTS 18] versions using cabal-rpm
** build all the packages in a Koji sidetag repo in dependency order
using fbrnch
** push the sidetag through Bodhi to Rawhide before the mass rebuild
[[https://bodhi.fedoraproject.org/updates/FEDORA-2022-3ae019aee4
done]]
* Other developers: no actions should be needed
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
There should not be any significant upgrade impact.
Users' Haskell projects will get built with ghc-8.10,7 when they next build.
== How To Test ==
* install ghc and cabal-install
* install pandoc, ShellCheck, ghcid, git-annex, hadolint, stack, xmonad
* install ghc-*-devel or ghc-*-prof or ghc-*-doc
* cabal-rpm builddep <favouritepackage>; cabal install <favouritepackage>
* test upgrades of F36 Haskell packages to F37
== User Experience ==
Users will have the newer stable minor version of ghc and Haskell
libraries and tools available to them.
This makes it easier to build the recent versions of Haskell projects.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?)
** Change owner can revert back to the versions in F36.
* Contingency deadline: Beta Freeze
== Documentation ==
* https://www.haskell.org/ghc/blog/20210814-ghc-8.10.6-released.html
* https://downloads.haskell.org/ghc/8.10.6/docs/html/users_guide/8.10.6-notes.html
* https://www.haskell.org/ghc/blog/20210827-ghc-8.10.7-released.html
* https://downloads.haskell.org/ghc/8.10.7/docs/html/users_guide/8.10.7-notes.html
== Release Notes ==
The Haskell GHC compiler has been updated from 8.10.5 to 8.10.7 with
some important bugfixes.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Orphaned packages looking for new maintainers
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will fail to install and/or build when the affected package gets retired.
Request package ownership via the *Take* button in he left column on
https://src.fedoraproject.org/rpms/<pkgname>
Full report available at:
https://churchyard.fedorapeople.org/orphans-2022-07-18.txt
grep it for your FAS username and follow the dependency chain.
For human readable dependency chains,
see https://packager-dashboard.fedoraproject.org/
For all orphaned packages,
see https://packager-dashboard.fedoraproject.org/orphan
Package (co)maintainers Status Change
================================================================================
RBTools orphan 0 weeks ago
evolution-rss mcrha, orphan 1 weeks ago
ez-pine-gpg orphan 2 weeks ago
gfbgraph orphan 4 weeks ago
gnome-online-miners orphan, pranvk 4 weeks ago
golang-github-rubyist-tracerx orphan 2 weeks ago
gpart dcantrell, orphan 2 weeks ago
libnss-pgsql orphan 1 weeks ago
module-macros orphan 2 weeks ago
pam_url herlo, orphan 4 weeks ago
preproc orphan 2 weeks ago
preproc-rpmspec orphan 2 weeks ago
python-proteus orphan 4 weeks ago
rpkg-macros orphan 2 weeks ago
rpkg-util orphan 2 weeks ago
rpm-git-tag-sort orphan 2 weeks ago
sourcetrail orphan 0 weeks ago
toped orphan, tnorth 0 weeks ago
tryton orphan 4 weeks ago
trytond orphan 4 weeks ago
trytond-account orphan 4 weeks ago
trytond-account-be orphan 4 weeks ago
trytond-account-de-skr03 orphan 4 weeks ago
trytond-account-invoice orphan 4 weeks ago
trytond-account-invoice-history orphan 4 weeks ago
trytond-account-invoice-line- orphan 4 weeks ago
standalone
trytond-account-product orphan 4 weeks ago
trytond-account-statement orphan 4 weeks ago
trytond-account-stock-anglo-saxon orphan 4 weeks ago
trytond-account-stock-continental orphan 4 weeks ago
trytond-analytic-account orphan 4 weeks ago
trytond-analytic-invoice orphan 4 weeks ago
trytond-analytic-purchase orphan 4 weeks ago
trytond-analytic-sale orphan 4 weeks ago
trytond-company orphan 4 weeks ago
trytond-company-work-time orphan 4 weeks ago
trytond-country orphan 4 weeks ago
trytond-currency orphan 4 weeks ago
trytond-dashboard orphan 4 weeks ago
trytond-google-maps orphan 4 weeks ago
trytond-ldap-authentication orphan 4 weeks ago
trytond-party orphan 4 weeks ago
trytond-party-siret orphan 4 weeks ago
trytond-product orphan 4 weeks ago
trytond-product-cost-fifo orphan 4 weeks ago
trytond-product-cost-history orphan 4 weeks ago
trytond-product-price-list orphan 4 weeks ago
trytond-project orphan 4 weeks ago
trytond-project-plan orphan 4 weeks ago
trytond-project-revenue orphan 4 weeks ago
trytond-purchase orphan 4 weeks ago
trytond-purchase-invoice-line- orphan 4 weeks ago
standalone
trytond-sale orphan 4 weeks ago
trytond-sale-opportunity orphan 4 weeks ago
trytond-sale-price-list orphan 4 weeks ago
trytond-stock orphan 4 weeks ago
trytond-stock-forecast orphan 4 weeks ago
trytond-stock-inventory-location orphan 4 weeks ago
trytond-stock-location-sequence orphan 4 weeks ago
trytond-stock-product-location orphan 4 weeks ago
trytond-stock-supply orphan 4 weeks ago
trytond-stock-supply-day orphan 4 weeks ago
trytond-timesheet orphan 4 weeks ago
zuul openstack-sig, orphan, zuul 3 weeks ago
The following packages require above mentioned packages:
Depending on: gfbgraph (3), status change: 2022-06-16 (4 weeks ago)
gnome-maps (maintained by: elad, gnome-sig, kalev, kathenas, zeenix)
gnome-maps-43~alpha-1.fc37.x86_64 requires gfbgraph(x86-64) = 0.2.4-2.fc36
gnome-online-miners (maintained by: orphan, pranvk)
gnome-online-miners-3.34.0-10.fc36.src requires gfbgraph-devel = 0.2.4-2.fc36
gnome-online-miners-3.34.0-10.fc36.x86_64 requires libgfbgraph-0.2.so.0()(64bit)
gnome-photos (maintained by: gnome-sig, pranvk)
gnome-photos-42.0-3.fc37.src requires pkgconfig(libgfbgraph-0.2) = 0.2.4
gnome-photos-42.0-3.fc37.x86_64 requires gfbgraph(x86-64) = 0.2.4-2.fc36,
gnome-online-miners = 3.34.0-10.fc36, libgfbgraph-0.2.so.0()(64bit)
Depending on: gnome-online-miners (1), status change: 2022-06-16 (4 weeks ago)
gnome-photos (maintained by: gnome-sig, pranvk)
gnome-photos-42.0-3.fc37.x86_64 requires gnome-online-miners = 3.34.0-10.fc36
Depending on: golang-github-rubyist-tracerx (2), status change: 2022-07-02 (2
weeks ago)
git-lfs (maintained by: carlwgeorge, go-sig, qulogic)
git-lfs-3.1.2-1.fc37.src requires golang(github.com/rubyist/tracerx) =
0-14.20190524git7879593.fc36
golang-github-git-lfs-3-devel-3.1.2-1.fc37.noarch requires
golang(github.com/rubyist/tracerx) = 0-14.20190524git7879593.fc36
sparkleshare (maintained by: tpokorra)
sparkleshare-3.28-7.fc36.x86_64 requires git-lfs = 3.1.2-1.fc37
Depending on: preproc (4), status change: 2022-07-02 (2 weeks ago)
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires preproc = 0.5-4.fc36, rpkg-macros
= 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires preproc = 0.5-4.fc36, rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires preproc = 0.5-4.fc36, rpkg-macros = 2.0-3.fc36
rpkg-macros (maintained by: orphan)
rpkg-macros-2.0-3.fc36.src requires preproc = 0.5-4.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpkg-macros (3), status change: 2022-07-02 (2 weeks ago)
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires rpkg-macros = 2.0-3.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpkg-util (1), status change: 2022-07-02 (2 weeks ago)
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpm-git-tag-sort (4), status change: 2022-07-02 (2 weeks ago)
rpkg-macros (maintained by: orphan)
rpkg-macros-2.0-3.fc36.noarch requires rpm-git-tag-sort = 1.0-6.fc36
rpkg-macros-2.0-3.fc36.src requires rpm-git-tag-sort = 1.0-6.fc36
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires rpkg-macros = 2.0-3.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: trytond (44), status change: 2022-06-16 (4 weeks ago)
python-proteus (maintained by: orphan)
python-proteus-4.0.2-17.fc35.noarch requires tryton(kernel) = 4.0
trytond-* (maintained by: orphan)
all the trytond-* packages depend on trytond
they also depend on each other, omitted for brevity
see https://churchyard.fedorapeople.org/orphans-2022-07-18.txt
See dependency chains of your packages at
https://packager-dashboard.fedoraproject.org/
See all orphaned packages at https://packager-dashboard.fedoraproject.org/orphan
Affected (co)maintainers (either directly or via packages' dependencies):
carlwgeorge: golang-github-rubyist-tracerx
copr-sig: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
dcantrell: gpart
dturecek: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
elad: gfbgraph
frostyx: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
gnome-sig: gnome-online-miners, gfbgraph
go-sig: golang-github-rubyist-tracerx
herlo: pam_url
kalev: gfbgraph
kathenas: gfbgraph
mcrha: evolution-rss
openstack-sig: zuul
praiskup: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
pranvk: gnome-online-miners, gfbgraph
qulogic: golang-github-rubyist-tracerx
tnorth: toped
tpokorra: golang-github-rubyist-tracerx
zeenix: gfbgraph
zuul: zuul
--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its pagure instance:
https://pagure.io/releng/
The sources of this script can be found at:
https://pagure.io/releng/blob/main/f/scripts/find_unblocked_orphans.py
Report finished at 2022-07-18 08:11:53 UTC
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will fail to install and/or build when the affected package gets retired.
Request package ownership via the *Take* button in he left column on
https://src.fedoraproject.org/rpms/<pkgname>
Full report available at:
https://churchyard.fedorapeople.org/orphans-2022-07-18.txt
grep it for your FAS username and follow the dependency chain.
For human readable dependency chains,
see https://packager-dashboard.fedoraproject.org/
For all orphaned packages,
see https://packager-dashboard.fedoraproject.org/orphan
Package (co)maintainers Status Change
================================================================================
RBTools orphan 0 weeks ago
evolution-rss mcrha, orphan 1 weeks ago
ez-pine-gpg orphan 2 weeks ago
gfbgraph orphan 4 weeks ago
gnome-online-miners orphan, pranvk 4 weeks ago
golang-github-rubyist-tracerx orphan 2 weeks ago
gpart dcantrell, orphan 2 weeks ago
libnss-pgsql orphan 1 weeks ago
module-macros orphan 2 weeks ago
pam_url herlo, orphan 4 weeks ago
preproc orphan 2 weeks ago
preproc-rpmspec orphan 2 weeks ago
python-proteus orphan 4 weeks ago
rpkg-macros orphan 2 weeks ago
rpkg-util orphan 2 weeks ago
rpm-git-tag-sort orphan 2 weeks ago
sourcetrail orphan 0 weeks ago
toped orphan, tnorth 0 weeks ago
tryton orphan 4 weeks ago
trytond orphan 4 weeks ago
trytond-account orphan 4 weeks ago
trytond-account-be orphan 4 weeks ago
trytond-account-de-skr03 orphan 4 weeks ago
trytond-account-invoice orphan 4 weeks ago
trytond-account-invoice-history orphan 4 weeks ago
trytond-account-invoice-line- orphan 4 weeks ago
standalone
trytond-account-product orphan 4 weeks ago
trytond-account-statement orphan 4 weeks ago
trytond-account-stock-anglo-saxon orphan 4 weeks ago
trytond-account-stock-continental orphan 4 weeks ago
trytond-analytic-account orphan 4 weeks ago
trytond-analytic-invoice orphan 4 weeks ago
trytond-analytic-purchase orphan 4 weeks ago
trytond-analytic-sale orphan 4 weeks ago
trytond-company orphan 4 weeks ago
trytond-company-work-time orphan 4 weeks ago
trytond-country orphan 4 weeks ago
trytond-currency orphan 4 weeks ago
trytond-dashboard orphan 4 weeks ago
trytond-google-maps orphan 4 weeks ago
trytond-ldap-authentication orphan 4 weeks ago
trytond-party orphan 4 weeks ago
trytond-party-siret orphan 4 weeks ago
trytond-product orphan 4 weeks ago
trytond-product-cost-fifo orphan 4 weeks ago
trytond-product-cost-history orphan 4 weeks ago
trytond-product-price-list orphan 4 weeks ago
trytond-project orphan 4 weeks ago
trytond-project-plan orphan 4 weeks ago
trytond-project-revenue orphan 4 weeks ago
trytond-purchase orphan 4 weeks ago
trytond-purchase-invoice-line- orphan 4 weeks ago
standalone
trytond-sale orphan 4 weeks ago
trytond-sale-opportunity orphan 4 weeks ago
trytond-sale-price-list orphan 4 weeks ago
trytond-stock orphan 4 weeks ago
trytond-stock-forecast orphan 4 weeks ago
trytond-stock-inventory-location orphan 4 weeks ago
trytond-stock-location-sequence orphan 4 weeks ago
trytond-stock-product-location orphan 4 weeks ago
trytond-stock-supply orphan 4 weeks ago
trytond-stock-supply-day orphan 4 weeks ago
trytond-timesheet orphan 4 weeks ago
zuul openstack-sig, orphan, zuul 3 weeks ago
The following packages require above mentioned packages:
Depending on: gfbgraph (3), status change: 2022-06-16 (4 weeks ago)
gnome-maps (maintained by: elad, gnome-sig, kalev, kathenas, zeenix)
gnome-maps-43~alpha-1.fc37.x86_64 requires gfbgraph(x86-64) = 0.2.4-2.fc36
gnome-online-miners (maintained by: orphan, pranvk)
gnome-online-miners-3.34.0-10.fc36.src requires gfbgraph-devel = 0.2.4-2.fc36
gnome-online-miners-3.34.0-10.fc36.x86_64 requires libgfbgraph-0.2.so.0()(64bit)
gnome-photos (maintained by: gnome-sig, pranvk)
gnome-photos-42.0-3.fc37.src requires pkgconfig(libgfbgraph-0.2) = 0.2.4
gnome-photos-42.0-3.fc37.x86_64 requires gfbgraph(x86-64) = 0.2.4-2.fc36,
gnome-online-miners = 3.34.0-10.fc36, libgfbgraph-0.2.so.0()(64bit)
Depending on: gnome-online-miners (1), status change: 2022-06-16 (4 weeks ago)
gnome-photos (maintained by: gnome-sig, pranvk)
gnome-photos-42.0-3.fc37.x86_64 requires gnome-online-miners = 3.34.0-10.fc36
Depending on: golang-github-rubyist-tracerx (2), status change: 2022-07-02 (2
weeks ago)
git-lfs (maintained by: carlwgeorge, go-sig, qulogic)
git-lfs-3.1.2-1.fc37.src requires golang(github.com/rubyist/tracerx) =
0-14.20190524git7879593.fc36
golang-github-git-lfs-3-devel-3.1.2-1.fc37.noarch requires
golang(github.com/rubyist/tracerx) = 0-14.20190524git7879593.fc36
sparkleshare (maintained by: tpokorra)
sparkleshare-3.28-7.fc36.x86_64 requires git-lfs = 3.1.2-1.fc37
Depending on: preproc (4), status change: 2022-07-02 (2 weeks ago)
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires preproc = 0.5-4.fc36, rpkg-macros
= 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires preproc = 0.5-4.fc36, rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires preproc = 0.5-4.fc36, rpkg-macros = 2.0-3.fc36
rpkg-macros (maintained by: orphan)
rpkg-macros-2.0-3.fc36.src requires preproc = 0.5-4.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpkg-macros (3), status change: 2022-07-02 (2 weeks ago)
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires rpkg-macros = 2.0-3.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpkg-util (1), status change: 2022-07-02 (2 weeks ago)
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: rpm-git-tag-sort (4), status change: 2022-07-02 (2 weeks ago)
rpkg-macros (maintained by: orphan)
rpkg-macros-2.0-3.fc36.noarch requires rpm-git-tag-sort = 1.0-6.fc36
rpkg-macros-2.0-3.fc36.src requires rpm-git-tag-sort = 1.0-6.fc36
preproc-rpmspec (maintained by: orphan)
preproc-rpmspec-1.3-3.fc36.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util (maintained by: orphan)
rpkg-3.2-2.fc37.noarch requires rpkg-macros = 2.0-3.fc36
rpkg-util-3.2-2.fc37.src requires rpkg-macros = 2.0-3.fc36
copr-rpmbuild (maintained by: copr-sig, dturecek, frostyx, praiskup)
copr-builder-0.58-1.fc37.x86_64 requires rpkg = 3.2-2.fc37
Depending on: trytond (44), status change: 2022-06-16 (4 weeks ago)
python-proteus (maintained by: orphan)
python-proteus-4.0.2-17.fc35.noarch requires tryton(kernel) = 4.0
trytond-* (maintained by: orphan)
all the trytond-* packages depend on trytond
they also depend on each other, omitted for brevity
see https://churchyard.fedorapeople.org/orphans-2022-07-18.txt
See dependency chains of your packages at
https://packager-dashboard.fedoraproject.org/
See all orphaned packages at https://packager-dashboard.fedoraproject.org/orphan
Affected (co)maintainers (either directly or via packages' dependencies):
carlwgeorge: golang-github-rubyist-tracerx
copr-sig: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
dcantrell: gpart
dturecek: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
elad: gfbgraph
frostyx: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
gnome-sig: gnome-online-miners, gfbgraph
go-sig: golang-github-rubyist-tracerx
herlo: pam_url
kalev: gfbgraph
kathenas: gfbgraph
mcrha: evolution-rss
openstack-sig: zuul
praiskup: rpkg-util, rpm-git-tag-sort, rpkg-macros, preproc
pranvk: gnome-online-miners, gfbgraph
qulogic: golang-github-rubyist-tracerx
tnorth: toped
tpokorra: golang-github-rubyist-tracerx
zeenix: gfbgraph
zuul: zuul
--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its pagure instance:
https://pagure.io/releng/
The sources of this script can be found at:
https://pagure.io/releng/blob/main/f/scripts/find_unblocked_orphans.py
Report finished at 2022-07-18 08:11:53 UTC
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Friday, July 15, 2022
F37 proposal: z13 as the Baseline for IBM Z Hardware (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/z13BaselineForIBMZ
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
Move the minimal architecture level for IBM Z hardware (the s390x
architecture) to z13 to benefit from the new features and better
performance in the newer CPU.
== Owner ==
* Name: [[User:sharkcz| Dan Horák]]
* Email: <sharkcz@fedoraproject.org>
== Detailed Description ==
Moving the minimal architecture level for IBM Z hardware (the s390x
architecture) to z13 allows us to benefit from the new features and
better performance in the newer CPU. The current minimum at zEC12 is
targeting hardware that has been already obsoleted by the vendor. All
Fedora infrastructure is already using the latest z15 hardware
(builders and co and also our public resources for developers). But we
still want to be able to use existing z13 and z14 hardware. Also the
TCG (full-system/non-KVM) emulation in QEMU already allows running
distros built with z13 as the baseline architecture. This change means
updating the defaults in gcc and the build flags and in the kernel.
== Benefit to Fedora ==
The primary benefit is being able to exploit vector instructions by
default, which should increase performance. Plus take advantage of
other architectural improvements.
== Scope ==
* Proposal owners:
** update the minimal hardware level in the kernel config to z13
([https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1907
MR#1907])
** set default compiler flags to <tt>-march=z13 -mtune=z14</tt> in
<tt>redhat-rpm-config</tt>
([https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/207
PR#207]) and <tt>gcc</tt>
([https://src.fedoraproject.org/rpms/gcc/pull-request/25 PR#25])
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
Users with hardware older than z13 should stick with F-36 or older release.
== How To Test ==
You shouldn't be able to start Fedora Linux 37 on system older than z13.
== User Experience ==
The primary difference will be in the availability of the vector
instructions and as a result better performance.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
== Release Notes ==
Starting with Fedora Linux 37 the minimal hardware level for the s390x
architecture has been updated to z13.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
Move the minimal architecture level for IBM Z hardware (the s390x
architecture) to z13 to benefit from the new features and better
performance in the newer CPU.
== Owner ==
* Name: [[User:sharkcz| Dan Horák]]
* Email: <sharkcz@fedoraproject.org>
== Detailed Description ==
Moving the minimal architecture level for IBM Z hardware (the s390x
architecture) to z13 allows us to benefit from the new features and
better performance in the newer CPU. The current minimum at zEC12 is
targeting hardware that has been already obsoleted by the vendor. All
Fedora infrastructure is already using the latest z15 hardware
(builders and co and also our public resources for developers). But we
still want to be able to use existing z13 and z14 hardware. Also the
TCG (full-system/non-KVM) emulation in QEMU already allows running
distros built with z13 as the baseline architecture. This change means
updating the defaults in gcc and the build flags and in the kernel.
== Benefit to Fedora ==
The primary benefit is being able to exploit vector instructions by
default, which should increase performance. Plus take advantage of
other architectural improvements.
== Scope ==
* Proposal owners:
** update the minimal hardware level in the kernel config to z13
([https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1907
MR#1907])
** set default compiler flags to <tt>-march=z13 -mtune=z14</tt> in
<tt>redhat-rpm-config</tt>
([https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/207
PR#207]) and <tt>gcc</tt>
([https://src.fedoraproject.org/rpms/gcc/pull-request/25 PR#25])
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
Users with hardware older than z13 should stick with F-36 or older release.
== How To Test ==
You shouldn't be able to start Fedora Linux 37 on system older than z13.
== User Experience ==
The primary difference will be in the availability of the vector
instructions and as a result better performance.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
== Release Notes ==
Starting with Fedora Linux 37 the minimal hardware level for the s390x
architecture has been updated to z13.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
F37 proposal: ibus-libpinyin 1.13 (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/ibus-libpinyin_1.13
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
This ibus-libpinyin release includes new features for English input
and Table input.
== Owner ==
* Name: [[User:pwu| Peng Wu]]
* Email: pwu@redhat.com
== Detailed Description ==
The ibus-libpinyin package contains two new features for English input
and Table input.
* When user inputs some English words, the English word will be listed
in the candidates.
* After user imports a custom table file, they can use the table mode
to input the phrases defined by the custom table file.
== Benefit to Fedora ==
The two new features will improve English input and Table input when
using the "Intelligent Pinyin" input method.
== Scope ==
* Proposal owners:
** Release ibus-libpinyin 1.13
** Update the Fedora ibus-libpinyin package to version 1.13.0
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
== How To Test ==
When user input some English word, the English word will display in
the candidate list.
* Choose some frequent English word, try to input the word in pinyin
mode, the word may appear in the candidate list.
* Input some English word with initial capital letter, the input
method will switch to English input mode automatically.
After user imported some table file, press 'u' or 'U', it will use the
content of the table file to input the phrase.
Here are the detailed steps:
# Read the table file format description in the setup dialog
# Prepare the table file and import the table file in the setup dialog
# Press "u" to switch to table input mode
# Input some character by table code defined in the imported table file
== User Experience ==
The two features will speed up English input and table input in
"Intelligent Pinyin" input method.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change)
Revert the ibus-libpinyin package to the last stable version.
== Documentation ==
N/A (not a System Wide Change)
== Release Notes ==
The ibus-libpinyin package will make English input and Table input in
the "Intelligent Pinyin" input method easier.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
This ibus-libpinyin release includes new features for English input
and Table input.
== Owner ==
* Name: [[User:pwu| Peng Wu]]
* Email: pwu@redhat.com
== Detailed Description ==
The ibus-libpinyin package contains two new features for English input
and Table input.
* When user inputs some English words, the English word will be listed
in the candidates.
* After user imports a custom table file, they can use the table mode
to input the phrases defined by the custom table file.
== Benefit to Fedora ==
The two new features will improve English input and Table input when
using the "Intelligent Pinyin" input method.
== Scope ==
* Proposal owners:
** Release ibus-libpinyin 1.13
** Update the Fedora ibus-libpinyin package to version 1.13.0
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
== How To Test ==
When user input some English word, the English word will display in
the candidate list.
* Choose some frequent English word, try to input the word in pinyin
mode, the word may appear in the candidate list.
* Input some English word with initial capital letter, the input
method will switch to English input mode automatically.
After user imported some table file, press 'u' or 'U', it will use the
content of the table file to input the phrase.
Here are the detailed steps:
# Read the table file format description in the setup dialog
# Prepare the table file and import the table file in the setup dialog
# Press "u" to switch to table input mode
# Input some character by table code defined in the imported table file
== User Experience ==
The two features will speed up English input and table input in
"Intelligent Pinyin" input method.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change)
Revert the ibus-libpinyin package to the last stable version.
== Documentation ==
N/A (not a System Wide Change)
== Release Notes ==
The ibus-libpinyin package will make English input and Table input in
the "Intelligent Pinyin" input method easier.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
F37 proposal: SELinux Parallel Autorelabel (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
After a system's SELinux mode is switched from disabled to enabled, or
after an administrator runs `fixfiles onboot`, SELinux autorelabel
will be run in parallel by default.
== Owner ==
* Name: [[User:plautrba| Petr Lautrbach]]
* Email: plautrba@redhat.com
== Detailed Description ==
SELinux tools `restorecon` and `fixfiles` recently gained the ability
to relabel files in parallel using the `-T nthreads` option. This
option is currently not used in the automatic relabel after reboot.
When users want/need the parallel relabeling they have to specify the
option explicitly (e.g. `fixfiles -T 0 onboot`). With this change `-T
0` (0 == use all available CPU cores) will be the default for
`fixfiles onboot` and users will have to use `fixfiles -T 1 onboot` to
force it to use only one thread.
The rationale is that when autorelabel runs, there are no other
resource-intensive processes running on the system, so it's fine (and
actually better) to use all available parallelism to speed up the task
and get to a fully booted system faster.
== Benefit to Fedora ==
Faster reboot after switching back to an SELinux enabled system or
when triggering autorelabel explicitly.
== Scope ==
* Proposal owners:
** Update `/usr/libexec/selinux/selinux-autorelabel` to use `-T 0` by default.
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
== How To Test ==
# boot with SELinux disabled - add `selinux=0` to the kernel command line
# reboot
# store the time it took
# run `fixfiles -T 1 onboot`
# reboot
# the latter reboot should take longer time
== User Experience ==
Systems should be up and running faster after SELinux autorelabel.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
After a system's SELinux mode is switched from disabled to enabled, or
after an administrator runs `fixfiles onboot`, SELinux autorelabel
will be run in parallel by default.
== Owner ==
* Name: [[User:plautrba| Petr Lautrbach]]
* Email: plautrba@redhat.com
== Detailed Description ==
SELinux tools `restorecon` and `fixfiles` recently gained the ability
to relabel files in parallel using the `-T nthreads` option. This
option is currently not used in the automatic relabel after reboot.
When users want/need the parallel relabeling they have to specify the
option explicitly (e.g. `fixfiles -T 0 onboot`). With this change `-T
0` (0 == use all available CPU cores) will be the default for
`fixfiles onboot` and users will have to use `fixfiles -T 1 onboot` to
force it to use only one thread.
The rationale is that when autorelabel runs, there are no other
resource-intensive processes running on the system, so it's fine (and
actually better) to use all available parallelism to speed up the task
and get to a fully booted system faster.
== Benefit to Fedora ==
Faster reboot after switching back to an SELinux enabled system or
when triggering autorelabel explicitly.
== Scope ==
* Proposal owners:
** Update `/usr/libexec/selinux/selinux-autorelabel` to use `-T 0` by default.
* Other developers:
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
== How To Test ==
# boot with SELinux disabled - add `selinux=0` to the kernel command line
# reboot
# store the time it took
# run `fixfiles -T 1 onboot`
# reboot
# the latter reboot should take longer time
== User Experience ==
Systems should be up and running faster after SELinux autorelabel.
== Dependencies ==
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
F37 proposal: BIND 9.18 (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/BIND_9.18
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
(not provided)
== Owner ==
* Name: [[User:pemensik| Petr Menšík]]
* Email: <pemensik@redhat.com>
== Detailed Description ==
ISC BIND9 will be upgraded to new major release version 9.18.x. It
introduces new features and changes. It will also remove some packages
provided before.
== Benefit to Fedora ==
The most recent major release will be provided, with some notable features:
* Support to DNS over TLS and DNS over HTTPS servers. Both
authoritative and resolver modes.
* Reworked internal connection handling using libuv
* RNDC channel does not support unix sockets
[https://gitlab.isc.org/isc-projects/bind9/-/issues/1759]
* Zone transfers over
[https://datatracker.ietf.org/doc/html/rfc9103.html DNS over TLS] were
added, both incoming and outgoing.
* dig is now able to send queries using DNS over TLS
* dig is now able to send queries using DNS over HTTPS
== Scope ==
* Proposal owners: The update required update of bind-dyndb-ldap
package (part of Freeipa suite), but otherwise it is isolated change.
* Other developers: Any developers
* Change pull request:
[https://src.fedoraproject.org/rpms/bind/pull-request/13 bind PR#13]
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
Upgrade should be smooth from 9.16.x, without significant issues.
Incompatibility existed with bind-dyndb-ldap, but that were resolved.
=== PKCS11 removal ===
Native PKCS11 builds in separate '''bind-pkcs11''' package and
'''bind-pkcs11-utils''' will be not longer built. It used to read
directly pkcs11 plugins, but it will be supported only indirectly
using OpenSSL pkcs11 engine.
Following commands would be removed:
* pkcs11-keygen
* pkcs11-destroy
* pkcs11-list
* pkcs11-tokens
All their actions should be possible using ''pkcs11-tool'' from
''opensc'' package or ''p11tool'' from ''gnutls-utils'' package.
* dnssec-*-pkcs11 commands would be removed too, but they have simple
replacement using ''-E pkcs11'' parameter to their respective normal
dnssec-* tool.
=== Python isc module ===
The utilities ''dnssec-checkds'', ''dnssec-coverage'', and
''dnssec-keymgr'' have been removed from '''bind-dnssec-utils'''
package. Also '''python3-bind''' python module is no longer supported
by ISC upstream and therefore removed from a bind package. DNSSEC
features formerly provided by these utilities are now integrated into
named. See the [https://bind9.readthedocs.io/en/v9_18_4/reference.html#dnssec-policy-grammar
dnssec-policy configuration option] for more details.
=== Map file format ===
Support for the ''map'' zone file format (''masterfile-format map;'')
has been removed. Use ''raw'' format instead, which has similar
performance and less issues.
=== Removed options ===
Previously deprecated options were removed and are no longer accepted
in ''/etc/named.conf''. Their full list can be found on
[https://bind9.readthedocs.io/en/v9_18_4/notes.html#removed-features
removed features] release notes in Upstream.
== How To Test ==
(not supplied)
== User Experience ==
* Users will get simple tools to query also encrypted DNS servers.
* Recent improvements packaged.
* Simplified DNSSEC maintenance of both keys and signatures via
''dnssec-policy''
== Dependencies ==
bind-dyndb-ldap would be built together with bind package. It were
upgraded to version 11.10 to support BIND 9.18 release.
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
(not provided)
== Owner ==
* Name: [[User:pemensik| Petr Menšík]]
* Email: <pemensik@redhat.com>
== Detailed Description ==
ISC BIND9 will be upgraded to new major release version 9.18.x. It
introduces new features and changes. It will also remove some packages
provided before.
== Benefit to Fedora ==
The most recent major release will be provided, with some notable features:
* Support to DNS over TLS and DNS over HTTPS servers. Both
authoritative and resolver modes.
* Reworked internal connection handling using libuv
* RNDC channel does not support unix sockets
[https://gitlab.isc.org/isc-projects/bind9/-/issues/1759]
* Zone transfers over
[https://datatracker.ietf.org/doc/html/rfc9103.html DNS over TLS] were
added, both incoming and outgoing.
* dig is now able to send queries using DNS over TLS
* dig is now able to send queries using DNS over HTTPS
== Scope ==
* Proposal owners: The update required update of bind-dyndb-ldap
package (part of Freeipa suite), but otherwise it is isolated change.
* Other developers: Any developers
* Change pull request:
[https://src.fedoraproject.org/rpms/bind/pull-request/13 bind PR#13]
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
Upgrade should be smooth from 9.16.x, without significant issues.
Incompatibility existed with bind-dyndb-ldap, but that were resolved.
=== PKCS11 removal ===
Native PKCS11 builds in separate '''bind-pkcs11''' package and
'''bind-pkcs11-utils''' will be not longer built. It used to read
directly pkcs11 plugins, but it will be supported only indirectly
using OpenSSL pkcs11 engine.
Following commands would be removed:
* pkcs11-keygen
* pkcs11-destroy
* pkcs11-list
* pkcs11-tokens
All their actions should be possible using ''pkcs11-tool'' from
''opensc'' package or ''p11tool'' from ''gnutls-utils'' package.
* dnssec-*-pkcs11 commands would be removed too, but they have simple
replacement using ''-E pkcs11'' parameter to their respective normal
dnssec-* tool.
=== Python isc module ===
The utilities ''dnssec-checkds'', ''dnssec-coverage'', and
''dnssec-keymgr'' have been removed from '''bind-dnssec-utils'''
package. Also '''python3-bind''' python module is no longer supported
by ISC upstream and therefore removed from a bind package. DNSSEC
features formerly provided by these utilities are now integrated into
named. See the [https://bind9.readthedocs.io/en/v9_18_4/reference.html#dnssec-policy-grammar
dnssec-policy configuration option] for more details.
=== Map file format ===
Support for the ''map'' zone file format (''masterfile-format map;'')
has been removed. Use ''raw'' format instead, which has similar
performance and less issues.
=== Removed options ===
Previously deprecated options were removed and are no longer accepted
in ''/etc/named.conf''. Their full list can be found on
[https://bind9.readthedocs.io/en/v9_18_4/notes.html#removed-features
removed features] release notes in Upstream.
== How To Test ==
(not supplied)
== User Experience ==
* Users will get simple tools to query also encrypted DNS servers.
* Recent improvements packaged.
* Simplified DNSSEC maintenance of both keys and signatures via
''dnssec-policy''
== Dependencies ==
bind-dyndb-ldap would be built together with bind package. It were
upgraded to version 11.10 to support BIND 9.18 release.
== Contingency Plan ==
* Contingency mechanism: (What to do? Who will do it?) N/A (not a
System Wide Change)
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
F37 proposal: Public release of the Anaconda Web UI preview image (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/Anaconda_Web_UI_preview_image
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
The work on Web UI for the Anaconda installer has advanced enough so
that it is possible to create and publish self contained preview
images.
== Owner ==
* Name: [[User:m4rtink| Martin Kolman]]
* Email: mkolman@redhat.com
== Detailed Description ==
Even though still very simple the new Anaconda Web UI is now far
enough to support a simple installation workflow from a self-contained
image while demonstrating all the main aspects of the new UI, such as:
* flexible Wizard layout
* responsive PatternFly components
* new style built-in help
* local and remote access to the Web UI
For this we will create a self-contained boot.iso style image with a
built-in tar-payload (so that the image can work even without network
access) based on the latest Anaconda upstream code.
We aim to have the image available for download just after the F37
release (so that the tar-payload can contain final F37 release
content) and then updated automatically in regular intervals.
That way the rather active Web UI development of the Web UI will be
reflected in the up-to-date installation image, as well as any
feedback and community PRs.
== Benefit to Fedora ==
The Anaconda Web UI will provide modern responsive user interface
based on a well known
and widely used toolkit (PatternFly) and backed by proven Cockpit tooling.
The screen layout is based on latest UX design guidelines as well as
usability testing of the new interface and extensive mockup work.
There are improvements in developer experience as well due to the more
modern & more mainstream UI technology chosen and powerful Cockpit
test tooling (rich unit-test as well as pixel-test framework). The
stateless property of the Web UI allows almost live-coding style of UI
development. This should make it easier to work on the Anaconda Web UI
for not only the Anaconda team, addon developer but also for any
interested contributors.
Remote Web UI access should also provide a much better experience than
the slow and inefficient VNC based remote GUI installation support
Anaconda has today. Due to no need for local rendering remotely driven
GUI installations on a constrained hardware with minimal installation
images should become possible.
== Scope ==
* Proposal owners:
The Anaconda team will setup and maintain an automated Web UI preview
image creation pipeline, with the image being available via a web
server on the Fedora infrastructure.
It will be a '''preview image only''', not an official Fedora
deliverable and it will not influence Fedora release criteria in any
way.
* Other developers:
Other developers and Fedora users are welcome to try the image once it
is released and to provide feedback.
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
(not supplied)
== How To Test ==
Download the Anaconda Web UI preview image and boot it on VM or
hardware that contains no important data.
Install using the Web UI locally, alternatively try using the Web UI remotely.
The installed OS should be functional but its testing or any issues
with it are currently out of scope for the Anaconda Web UI preview
image.
To provide feedback use one of the Anaconda team communication channels:
* IRC: [https://web.libera.chat/#anaconda #anaconda] on libera.chat
* mailing list: anaconda-devel@lists.fedoraproject.org -
https://lists.fedoraproject.org/archives/list/anaconda-devel@lists.fedoraproject.org/
* Github Discussion: https://github.com/rhinstaller/anaconda/discussions
== User Experience ==
Should be improved compared to the current GTK interface.
== Dependencies ==
(not supplied)
== Contingency Plan ==
* Contingency mechanism: If we hit some blocking technical issues, the
image will be published later.
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
The work on Web UI for the Anaconda installer has advanced enough so
that it is possible to create and publish self contained preview
images.
== Owner ==
* Name: [[User:m4rtink| Martin Kolman]]
* Email: mkolman@redhat.com
== Detailed Description ==
Even though still very simple the new Anaconda Web UI is now far
enough to support a simple installation workflow from a self-contained
image while demonstrating all the main aspects of the new UI, such as:
* flexible Wizard layout
* responsive PatternFly components
* new style built-in help
* local and remote access to the Web UI
For this we will create a self-contained boot.iso style image with a
built-in tar-payload (so that the image can work even without network
access) based on the latest Anaconda upstream code.
We aim to have the image available for download just after the F37
release (so that the tar-payload can contain final F37 release
content) and then updated automatically in regular intervals.
That way the rather active Web UI development of the Web UI will be
reflected in the up-to-date installation image, as well as any
feedback and community PRs.
== Benefit to Fedora ==
The Anaconda Web UI will provide modern responsive user interface
based on a well known
and widely used toolkit (PatternFly) and backed by proven Cockpit tooling.
The screen layout is based on latest UX design guidelines as well as
usability testing of the new interface and extensive mockup work.
There are improvements in developer experience as well due to the more
modern & more mainstream UI technology chosen and powerful Cockpit
test tooling (rich unit-test as well as pixel-test framework). The
stateless property of the Web UI allows almost live-coding style of UI
development. This should make it easier to work on the Anaconda Web UI
for not only the Anaconda team, addon developer but also for any
interested contributors.
Remote Web UI access should also provide a much better experience than
the slow and inefficient VNC based remote GUI installation support
Anaconda has today. Due to no need for local rendering remotely driven
GUI installations on a constrained hardware with minimal installation
images should become possible.
== Scope ==
* Proposal owners:
The Anaconda team will setup and maintain an automated Web UI preview
image creation pipeline, with the image being available via a web
server on the Fedora infrastructure.
It will be a '''preview image only''', not an official Fedora
deliverable and it will not influence Fedora release criteria in any
way.
* Other developers:
Other developers and Fedora users are welcome to try the image once it
is released and to provide feedback.
* Release engineering:
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Objectives:
== Upgrade/compatibility impact ==
(not supplied)
== How To Test ==
Download the Anaconda Web UI preview image and boot it on VM or
hardware that contains no important data.
Install using the Web UI locally, alternatively try using the Web UI remotely.
The installed OS should be functional but its testing or any issues
with it are currently out of scope for the Anaconda Web UI preview
image.
To provide feedback use one of the Anaconda team communication channels:
* IRC: [https://web.libera.chat/#anaconda #anaconda] on libera.chat
* mailing list: anaconda-devel@lists.fedoraproject.org -
https://lists.fedoraproject.org/archives/list/anaconda-devel@lists.fedoraproject.org/
* Github Discussion: https://github.com/rhinstaller/anaconda/discussions
== User Experience ==
Should be improved compared to the current GTK interface.
== Dependencies ==
(not supplied)
== Contingency Plan ==
* Contingency mechanism: If we hit some blocking technical issues, the
image will be published later.
* Contingency deadline: N/A (not a System Wide Change)
* Blocks release? N/A (not a System Wide Change), Yes/No
== Documentation ==
N/A (not a System Wide Change)
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
OpenBGPD 7.5 released
We have released OpenBGPD 7.5, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.
This release includes the following changes to the previous release:
* Implement RFC 9234 - Route Leak Prevention and Detection Using Roles
in UPDATE and OPEN Messages.
* Full support for RFC 7911 - Advertisement of Multiple Paths in BGP.
* Include bgplgd(8) - a fastcgi server providing a REST API of bgpctl
Built by default but can be excluded with --disable-bgplgd.
* Add FIB and TCP MD5 support for FreeBSD.
* Disable Linux FIB support by default, add an --enable-netlink configure
option to enable it for testing and development.
* Improve bgpd FIB code, make it more portable and properly handle IPv6
scoped addresses.
OpenBGPD-portable is known to compile and run on FreeBSD, and
the Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.
We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.
OpenBGPD directory of your local OpenBSD mirror soon.
This release includes the following changes to the previous release:
* Implement RFC 9234 - Route Leak Prevention and Detection Using Roles
in UPDATE and OPEN Messages.
* Full support for RFC 7911 - Advertisement of Multiple Paths in BGP.
* Include bgplgd(8) - a fastcgi server providing a REST API of bgpctl
Built by default but can be excluded with --disable-bgplgd.
* Add FIB and TCP MD5 support for FreeBSD.
* Disable Linux FIB support by default, add an --enable-netlink configure
option to enable it for testing and development.
* Improve bgpd FIB code, make it more portable and properly handle IPv6
scoped addresses.
OpenBGPD-portable is known to compile and run on FreeBSD, and
the Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.
We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.
Thursday, July 14, 2022
[arch-announce] wxWidgets 3.2 update may need manual intervention
wxWidgets 3.2 provides a Qt frontend in addition to the GTK3 one, so packages have been renamed from wxgtk-* to wxwidgets-*.
The GTK2 frontend is no longer provided. If you have wxgtk2 installed, the upgrade will fail with
error: failed to prepare transaction (could not satisfy dependencies)
:: removing wxgtk-common breaks dependency 'wxgtk-common' required by wxgtk2
In such case, uninstall wxgtk2 first and then proceed with the upgrade.
URL: https://archlinux.org/news/wxwidgets-32-update-may-need-manual-intervention/
The GTK2 frontend is no longer provided. If you have wxgtk2 installed, the upgrade will fail with
error: failed to prepare transaction (could not satisfy dependencies)
:: removing wxgtk-common breaks dependency 'wxgtk-common' required by wxgtk2
In such case, uninstall wxgtk2 first and then proceed with the upgrade.
URL: https://archlinux.org/news/wxwidgets-32-update-may-need-manual-intervention/
[USN-5519-1] Python vulnerability
==========================================================================
Ubuntu Security Notice USN-5519-1
July 14, 2022
python2.7, python3.10, python3.4, python3.5, python3.6, python3.8,
python3.9 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Python could be made to run arbitrary code if it received a specially
crafted input.
Software Description:
- python2.7: An interactive high-level object-oriented language
- python3.10: Interactive high-level object-oriented language (version 3.10)
- python3.9: Interactive high-level object-oriented language (version 3.9)
- python3.8: An interactive high-level object-oriented language
- python3.6: An interactive high-level object-oriented language
- python3.5: An interactive high-level object-oriented language
- python3.4: An interactive high-level object-oriented language
Details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
python2.7 2.7.18-13ubuntu1.1
python2.7-minimal 2.7.18-13ubuntu1.1
python3.10 3.10.4-3ubuntu0.1
python3.10-minimal 3.10.4-3ubuntu0.1
Ubuntu 21.10:
python2.7 2.7.18-8ubuntu0.2
python2.7-minimal 2.7.18-8ubuntu0.2
python3.9 3.9.7-2ubuntu0.1
python3.9-minimal 3.9.7-2ubuntu0.1
Ubuntu 20.04 LTS:
python2.7 2.7.18-1~20.04.3
python2.7-minimal 2.7.18-1~20.04.3
python3.8 3.8.10-0ubuntu1~20.04.5
python3.8-minimal 3.8.10-0ubuntu1~20.04.5
Ubuntu 18.04 LTS:
python2.7 2.7.17-1~18.04ubuntu1.8
python2.7-minimal 2.7.17-1~18.04ubuntu1.8
python3.6 3.6.9-1~18.04ubuntu1.8
python3.6-minimal 3.6.9-1~18.04ubuntu1.8
Ubuntu 16.04 ESM:
python2.7 2.7.12-1ubuntu0~16.04.18+esm2
python2.7-minimal 2.7.12-1ubuntu0~16.04.18+esm2
python3.5 3.5.2-2ubuntu0~16.04.13+esm3
python3.5-minimal 3.5.2-2ubuntu0~16.04.13+esm3
Ubuntu 14.04 ESM:
python2.7 2.7.6-8ubuntu0.6+esm11
python2.7-minimal 2.7.6-8ubuntu0.6+esm11
python3.4 3.4.3-1ubuntu1~14.04.7+esm13
python3.4-minimal 3.4.3-1ubuntu1~14.04.7+esm13
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5519-1
CVE-2015-20107
Package Information:
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.1
https://launchpad.net/ubuntu/+source/python3.10/3.10.4-3ubuntu0.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-8ubuntu0.2
https://launchpad.net/ubuntu/+source/python3.9/3.9.7-2ubuntu0.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.3
https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.5
https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.8
https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.8
Ubuntu Security Notice USN-5519-1
July 14, 2022
python2.7, python3.10, python3.4, python3.5, python3.6, python3.8,
python3.9 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Python could be made to run arbitrary code if it received a specially
crafted input.
Software Description:
- python2.7: An interactive high-level object-oriented language
- python3.10: Interactive high-level object-oriented language (version 3.10)
- python3.9: Interactive high-level object-oriented language (version 3.9)
- python3.8: An interactive high-level object-oriented language
- python3.6: An interactive high-level object-oriented language
- python3.5: An interactive high-level object-oriented language
- python3.4: An interactive high-level object-oriented language
Details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
python2.7 2.7.18-13ubuntu1.1
python2.7-minimal 2.7.18-13ubuntu1.1
python3.10 3.10.4-3ubuntu0.1
python3.10-minimal 3.10.4-3ubuntu0.1
Ubuntu 21.10:
python2.7 2.7.18-8ubuntu0.2
python2.7-minimal 2.7.18-8ubuntu0.2
python3.9 3.9.7-2ubuntu0.1
python3.9-minimal 3.9.7-2ubuntu0.1
Ubuntu 20.04 LTS:
python2.7 2.7.18-1~20.04.3
python2.7-minimal 2.7.18-1~20.04.3
python3.8 3.8.10-0ubuntu1~20.04.5
python3.8-minimal 3.8.10-0ubuntu1~20.04.5
Ubuntu 18.04 LTS:
python2.7 2.7.17-1~18.04ubuntu1.8
python2.7-minimal 2.7.17-1~18.04ubuntu1.8
python3.6 3.6.9-1~18.04ubuntu1.8
python3.6-minimal 3.6.9-1~18.04ubuntu1.8
Ubuntu 16.04 ESM:
python2.7 2.7.12-1ubuntu0~16.04.18+esm2
python2.7-minimal 2.7.12-1ubuntu0~16.04.18+esm2
python3.5 3.5.2-2ubuntu0~16.04.13+esm3
python3.5-minimal 3.5.2-2ubuntu0~16.04.13+esm3
Ubuntu 14.04 ESM:
python2.7 2.7.6-8ubuntu0.6+esm11
python2.7-minimal 2.7.6-8ubuntu0.6+esm11
python3.4 3.4.3-1ubuntu1~14.04.7+esm13
python3.4-minimal 3.4.3-1ubuntu1~14.04.7+esm13
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5519-1
CVE-2015-20107
Package Information:
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.1
https://launchpad.net/ubuntu/+source/python3.10/3.10.4-3ubuntu0.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-8ubuntu0.2
https://launchpad.net/ubuntu/+source/python3.9/3.9.7-2ubuntu0.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.3
https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.5
https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.8
https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.8
Subscribe to:
Posts (Atom)