devel June 2022

devel@lists.stg.fedoraproject.org

201 participants
282 discussions

Non-responsive maintainer for madko/glances
by Koroglu, Ali Erdinc 02 Jun '22

02 Jun '22

Hello I've sent a PR [1] for Glances and tried to reach madko but I didnt get any response. Meanwhile upstream released various new versions, and bugs were reported [2] + no package update since F33. So I started the non-responsive maintainer* process [3]. Does anyone know him, or if he is still active ? I would be happy to help or take over maintaining this package. 1 : https://src.fedoraproject.org/rpms/glances/pull-request/4 2 : https://bugzilla.redhat.com/show_bug.cgi?id=1870254 3 : https://bugzilla.redhat.com/show_bug.cgi?id=2088744 Best Regards, Ali Erdinc Koroglu --------------------------------------------------------------------- Intel Finland Oy Registered Address: PL 281, 00181 Helsinki Business Identity Code: 0357606 - 4 Domiciled in Helsinki This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

Fedora-Cloud-36-20220602.0 compose check report
by Fedora compose checker 02 Jun '22

02 Jun '22

No missing expected images. Soft failed openQA tests: 1/8 (x86_64), 1/8 (aarch64) (Tests completed, but using a workaround for a known bug) Old soft failures (same test soft failed in Fedora-Cloud-36-20220601.0): ID: 1287537 Test: x86_64 Cloud_Base-qcow2-qcow2 cloud_autocloud URL: https://openqa.fedoraproject.org/tests/1287537 ID: 1287545 Test: aarch64 Cloud_Base-qcow2-qcow2 cloud_autocloud@uefi URL: https://openqa.fedoraproject.org/tests/1287545 Passed openQA tests: 7/8 (x86_64), 7/8 (aarch64) -- Mail generated by check-compose: https://pagure.io/fedora-qa/check-compose

1 0

lrcalc soname bump
by Jerry James 02 Jun '22

02 Jun '22

In a week, I will update the lrcalc package to version 2.1, which bumps the soname. This is part of a sagemath 9.6 update. Since sagemath is the only consumer of the lrcalc library, the soname bump should not cause any issues. -- Jerry James http://www.jamezone.org/

1 0

Fedora-Rawhide-20220601.n.0 compose check report
by Fedora compose checker 01 Jun '22

01 Jun '22

Missing expected images: Minimal raw-xz armhfp Compose FAILS proposed Rawhide gating check! 2 of 43 required tests failed openQA tests matching unsatisfied gating requirements shown with **GATING** below Failed openQA tests: 10/231 (x86_64), 13/161 (aarch64) New failures (same test not failed in Fedora-Rawhide-20220531.n.0): ID: 1286655 Test: x86_64 Workstation-live-iso apps_startstop URL: https://openqa.fedoraproject.org/tests/1286655 ID: 1286661 Test: x86_64 Workstation-live-iso desktop_browser **GATING** URL: https://openqa.fedoraproject.org/tests/1286661 ID: 1286670 Test: x86_64 Workstation-live-iso desktop_login URL: https://openqa.fedoraproject.org/tests/1286670 ID: 1286681 Test: x86_64 KDE-live-iso desktop_browser **GATING** URL: https://openqa.fedoraproject.org/tests/1286681 ID: 1286734 Test: aarch64 Server-dvd-iso install_repository_hd_variation@uefi URL: https://openqa.fedoraproject.org/tests/1286734 ID: 1286765 Test: aarch64 Server-dvd-iso realmd_join_sssd@uefi URL: https://openqa.fedoraproject.org/tests/1286765 ID: 1286772 Test: aarch64 Server-dvd-iso server_realmd_join_kickstart@uefi URL: https://openqa.fedoraproject.org/tests/1286772 ID: 1286786 Test: aarch64 Workstation-raw_xz-raw.xz desktop_update_graphical@uefi URL: https://openqa.fedoraproject.org/tests/1286786 ID: 1286787 Test: aarch64 Workstation-raw_xz-raw.xz desktop_terminal@uefi URL: https://openqa.fedoraproject.org/tests/1286787 ID: 1286796 Test: aarch64 Workstation-raw_xz-raw.xz gnome_text_editor@uefi URL: https://openqa.fedoraproject.org/tests/1286796 ID: 1286822 Test: x86_64 Workstation-upgrade desktop_login URL: https://openqa.fedoraproject.org/tests/1286822 ID: 1286963 Test: aarch64 universal install_european_language@uefi URL: https://openqa.fedoraproject.org/tests/1286963 Old failures (same test failed in Fedora-Rawhide-20220531.n.0): ID: 1286680 Test: x86_64 KDE-live-iso desktop_login URL: https://openqa.fedoraproject.org/tests/1286680 ID: 1286685 Test: x86_64 KDE-live-iso apps_startstop URL: https://openqa.fedoraproject.org/tests/1286685 ID: 1286705 Test: x86_64 Silverblue-dvd_ostree-iso gnome_text_editor URL: https://openqa.fedoraproject.org/tests/1286705 ID: 1286767 Test: aarch64 Server-dvd-iso server_cockpit_default@uefi URL: https://openqa.fedoraproject.org/tests/1286767 ID: 1286823 Test: x86_64 Workstation-upgrade desktop_fprint URL: https://openqa.fedoraproject.org/tests/1286823 ID: 1286838 Test: aarch64 Workstation-upgrade gnome_text_editor@uefi URL: https://openqa.fedoraproject.org/tests/1286838 ID: 1286841 Test: aarch64 Workstation-upgrade desktop_browser@uefi URL: https://openqa.fedoraproject.org/tests/1286841 ID: 1286842 Test: aarch64 Workstation-upgrade desktop_printing@uefi URL: https://openqa.fedoraproject.org/tests/1286842 ID: 1286855 Test: x86_64 universal install_arabic_language URL: https://openqa.fedoraproject.org/tests/1286855 ID: 1286931 Test: aarch64 universal install_arabic_language@uefi URL: https://openqa.fedoraproject.org/tests/1286931 ID: 1286971 Test: aarch64 universal install_asian_language@uefi URL: https://openqa.fedoraproject.org/tests/1286971 Soft failed openQA tests: 3/161 (aarch64), 5/231 (x86_64) (Tests completed, but using a workaround for a known bug) New soft failures (same test not soft failed in Fedora-Rawhide-20220531.n.0): ID: 1286801 Test: aarch64 Workstation-raw_xz-raw.xz eog@uefi URL: https://openqa.fedoraproject.org/tests/1286801 Old soft failures (same test soft failed in Fedora-Rawhide-20220531.n.0): ID: 1286652 Test: x86_64 Workstation-live-iso eog URL: https://openqa.fedoraproject.org/tests/1286652 ID: 1286698 Test: x86_64 Silverblue-dvd_ostree-iso evince URL: https://openqa.fedoraproject.org/tests/1286698 ID: 1286699 Test: x86_64 Silverblue-dvd_ostree-iso eog URL: https://openqa.fedoraproject.org/tests/1286699 ID: 1286704 Test: x86_64 Silverblue-dvd_ostree-iso desktop_browser URL: https://openqa.fedoraproject.org/tests/1286704 ID: 1286713 Test: x86_64 Cloud_Base-qcow2-qcow2 cloud_autocloud@uefi URL: https://openqa.fedoraproject.org/tests/1286713 ID: 1286807 Test: aarch64 Cloud_Base-qcow2-qcow2 cloud_autocloud@uefi URL: https://openqa.fedoraproject.org/tests/1286807 ID: 1286848 Test: aarch64 Workstation-upgrade eog@uefi URL: https://openqa.fedoraproject.org/tests/1286848 Passed openQA tests: 216/231 (x86_64), 142/161 (aarch64) New passes (same test not passed in Fedora-Rawhide-20220531.n.0): ID: 1286591 Test: x86_64 Server-dvd-iso anaconda_help URL: https://openqa.fedoraproject.org/tests/1286591 ID: 1286728 Test: aarch64 Server-boot-iso install_default@uefi URL: https://openqa.fedoraproject.org/tests/1286728 ID: 1286785 Test: aarch64 Workstation-raw_xz-raw.xz install_arm_image_deployment_upload@uefi URL: https://openqa.fedoraproject.org/tests/1286785 ID: 1286788 Test: aarch64 Workstation-raw_xz-raw.xz evince@uefi URL: https://openqa.fedoraproject.org/tests/1286788 ID: 1286789 Test: aarch64 Workstation-raw_xz-raw.xz desktop_printing_builtin@uefi URL: https://openqa.fedoraproject.org/tests/1286789 ID: 1286790 Test: aarch64 Workstation-raw_xz-raw.xz base_package_install_remove@uefi URL: https://openqa.fedoraproject.org/tests/1286790 ID: 1286791 Test: aarch64 Workstation-raw_xz-raw.xz unwanted_packages@uefi URL: https://openqa.fedoraproject.org/tests/1286791 ID: 1286792 Test: aarch64 Workstation-raw_xz-raw.xz base_reboot_unmount@uefi URL: https://openqa.fedoraproject.org/tests/1286792 ID: 1286793 Test: aarch64 Workstation-raw_xz-raw.xz base_service_manipulation@uefi URL: https://openqa.fedoraproject.org/tests/1286793 ID: 1286794 Test: aarch64 Workstation-raw_xz-raw.xz base_system_logging@uefi URL: https://openqa.fedoraproject.org/tests/1286794 ID: 1286795 Test: aarch64 Workstation-raw_xz-raw.xz release_identification@uefi URL: https://openqa.fedoraproject.org/tests/1286795 ID: 1286797 Test: aarch64 Workstation-raw_xz-raw.xz base_update_cli@uefi URL: https://openqa.fedoraproject.org/tests/1286797 ID: 1286798 Test: aarch64 Workstation-raw_xz-raw.xz base_services_start@uefi URL: https://openqa.fedoraproject.org/tests/1286798 ID: 1286799 Test: aarch64 Workstation-raw_xz-raw.xz desktop_browser@uefi URL: https://openqa.fedoraproject.org/tests/1286799 ID: 1286800 Test: aarch64 Workstation-raw_xz-raw.xz desktop_printing@uefi URL: https://openqa.fedoraproject.org/tests/1286800 ID: 1286802 Test: aarch64 Workstation-raw_xz-raw.xz base_selinux@uefi URL: https://openqa.fedoraproject.org/tests/1286802 ID: 1286803 Test: aarch64 Workstation-raw_xz-raw.xz desktop_background@uefi URL: https://openqa.fedoraproject.org/tests/1286803 ID: 1286844 Test: aarch64 Workstation-upgrade desktop_printing_builtin@uefi URL: https://openqa.fedoraproject.org/tests/1286844 ID: 1286846 Test: aarch64 Workstation-upgrade evince@uefi URL: https://openqa.fedoraproject.org/tests/1286846 ID: 1286847 Test: aarch64 Workstation-upgrade desktop_terminal@uefi URL: https://openqa.fedoraproject.org/tests/1286847 ID: 1286883 Test: x86_64 universal support_server URL: https://openqa.fedoraproject.org/tests/1286883 ID: 1286911 Test: x86_64 universal install_iscsi URL: https://openqa.fedoraproject.org/tests/1286911 ID: 1286967 Test: aarch64 universal install_kickstart_hdd@uefi URL: https://openqa.fedoraproject.org/tests/1286967 Skipped non-gating openQA tests: 3 of 392 Installed system changes in test x86_64 Server-boot-iso install_default: System load changed from 0.38 to 0.55 Previous test data: https://openqa.fedoraproject.org/tests/1285777#downloads Current test data: https://openqa.fedoraproject.org/tests/1286586#downloads Installed system changes in test x86_64 Server-boot-iso install_default@uefi: System load changed from 0.34 to 0.20 Previous test data: https://openqa.fedoraproject.org/tests/1285778#downloads Current test data: https://openqa.fedoraproject.org/tests/1286587#downloads Installed system changes in test x86_64 Workstation-live-iso install_default@uefi: Used swap changed from 23 MiB to 28 MiB System load changed from 0.75 to 0.97 Previous test data: https://openqa.fedoraproject.org/tests/1285838#downloads Current test data: https://openqa.fedoraproject.org/tests/1286647#downloads Installed system changes in test x86_64 Workstation-live-iso install_default_upload: Used swap changed from 23 MiB to 9 MiB System load changed from 1.24 to 1.00 Previous test data: https://openqa.fedoraproject.org/tests/1285840#downloads Current test data: https://openqa.fedoraproject.org/tests/1286649#downloads Installed system changes in test x86_64 KDE-live-iso install_default@uefi: Used swap changed from 23 MiB to 54 MiB System load changed from 1.10 to 1.22 Average CPU usage changed from 23.54761905 to 10.55238095 Previous test data: https://openqa.fedoraproject.org/tests/1285865#downloads Current test data: https://openqa.fedoraproject.org/tests/1286674#downloads Installed system changes in test x86_64 KDE-live-iso install_default_upload: Used swap changed from 15 MiB to 23 MiB System load changed from 1.74 to 2.28 Average CPU usage changed from 38.76666667 to 80.8 Previous test data: https://openqa.fedoraproject.org/tests/1285866#downloads Current test data: https://openqa.fedoraproject.org/tests/1286675#downloads Installed system changes in test x86_64 Silverblue-dvd_ostree-iso install_default@uefi: System load changed from 0.74 to 0.61 Previous test data: https://openqa.fedoraproject.org/tests/1285886#downloads Current test data: https://openqa.fedoraproject.org/tests/1286695#downloads Installed system changes in test x86_64 Silverblue-dvd_ostree-iso install_default_upload: Used swap changed from 8 MiB to 9 MiB System load changed from 1.21 to 0.77 Previous test data: https://openqa.fedoraproject.org/tests/1285887#downloads Current test data: https://openqa.fedoraproject.org/tests/1286696#downloads Installed system changes in test aarch64 Server-boot-iso install_default@uefi: 1 services(s) removed since previous compose: getty(a)tty6.service System load changed from 0.63 to 1.49 Previous test data: https://openqa.fedoraproject.org/tests/1285919#downloads Current test data: https://openqa.fedoraproject.org/tests/1286728#downloads Installed system changes in test aarch64 Server-dvd-iso install_default_upload@uefi: System load changed from 1.05 to 0.84 Previous test data: https://openqa.fedoraproject.org/tests/1285932#downloads Current test data: https://openqa.fedoraproject.org/tests/1286741#downloads Installed system changes in test x86_64 universal install_package_set_kde: Mount /run/user/0 disappeared since previous compose Used swap changed from 8 MiB to 10 MiB System load changed from 1.77 to 1.61 Previous test data: https://openqa.fedoraproject.org/tests/1286067#downloads Current test data: https://openqa.fedoraproject.org/tests/1286876#downloads Installed system changes in test x86_64 universal install_package_set_minimal: Used mem changed from 226 MiB to 198 MiB System load changed from 0.41 to 0.15 Previous test data: https://openqa.fedoraproject.org/tests/1286068#downloads Current test data: https://openqa.fedoraproject.org/tests/1286877#downloads Installed system changes in test aarch64 universal install_package_set_minimal@uefi: System load changed from 0.85 to 0.68 Previous test data: https://openqa.fedoraproject.org/tests/1286134#downloads Current test data: https://openqa.fedoraproject.org/tests/1286943#downloads -- Mail generated by check-compose: https://pagure.io/fedora-qa/check-compose

1 0

octave 7.1 coming soon to rawhide
by Orion Poplawski 01 Jun '22

01 Jun '22

Hello, I hope to update octave to 7.1 sometime next week. Builds will be done in a side tag. I've been building deps here: https://copr.fedorainfracloud.org/coprs/orion/octave7.1/packages/ and we're in pretty good shape. Issues have been filed for the build failures. Orion -- Orion Poplawski he/him/his - surely the least important thing about me IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

1 1

Fedora-IoT-37-20220516.0 compose check report
by Fedora compose checker 01 Jun '22

01 Jun '22

Missing expected images: Iot dvd aarch64 Iot dvd x86_64 Failed openQA tests: 2/15 (x86_64), 6/15 (aarch64) ID: 1269419 Test: x86_64 IoT-dvd_ostree-iso iot_zezere_server@uefi URL: https://openqa.fedoraproject.org/tests/1269419 ID: 1269421 Test: x86_64 IoT-dvd_ostree-iso iot_zezere_ignition@uefi URL: https://openqa.fedoraproject.org/tests/1269421 ID: 1269422 Test: aarch64 IoT-dvd_ostree-iso iot_clevis@uefi URL: https://openqa.fedoraproject.org/tests/1269422 ID: 1269425 Test: aarch64 IoT-dvd_ostree-iso iot_zezere_server@uefi URL: https://openqa.fedoraproject.org/tests/1269425 ID: 1269426 Test: aarch64 IoT-dvd_ostree-iso iot_zezere_ignition@uefi URL: https://openqa.fedoraproject.org/tests/1269426 ID: 1269435 Test: aarch64 IoT-dvd_ostree-iso release_identification@uefi URL: https://openqa.fedoraproject.org/tests/1269435 ID: 1287340 Test: aarch64 IoT-dvd_ostree-iso podman@uefi URL: https://openqa.fedoraproject.org/tests/1287340 ID: 1287341 Test: aarch64 IoT-dvd_ostree-iso podman_client@uefi URL: https://openqa.fedoraproject.org/tests/1287341 Passed openQA tests: 13/15 (x86_64), 9/15 (aarch64) -- Mail generated by check-compose: https://pagure.io/fedora-qa/check-compose

1 0

Fedora rawhide compose report: 20220601.n.0 changes
by Fedora Rawhide Report 01 Jun '22

01 Jun '22

OLD: Fedora-Rawhide-20220531.n.0 NEW: Fedora-Rawhide-20220601.n.0 ===== SUMMARY ===== Added images: 1 Dropped images: 0 Added packages: 9 Dropped packages: 3 Upgraded packages: 39 Downgraded packages: 0 Size of added packages: 18.03 MiB Size of dropped packages: 866.78 KiB Size of upgraded packages: 1021.83 MiB Size of downgraded packages: 0 B Size change of upgraded packages: 2.38 MiB Size change of downgraded packages: 0 B ===== ADDED IMAGES ===== Image: Silverblue dvd-ostree aarch64 Path: Silverblue/aarch64/iso/Fedora-Silverblue-ostree-aarch64-Rawhide-20220601.n.0.iso ===== DROPPED IMAGES ===== ===== ADDED PACKAGES ===== Package: fastnetmon-1.2.1-1.20220528git420e7b8.fc37 Summary: DDoS detection tool with sFlow, Netflow, IPFIX and port mirror support RPMs: fastnetmon Size: 3.96 MiB Package: golang-github-bep-overlayfs-0.6.0-1.fc37 Summary: A composite Afero filesystem RPMs: golang-github-bep-overlayfs-devel Size: 15.05 KiB Package: golang-github-cheggaaa-pb-3-3.0.8-2.fc37 Summary: Console progress bar for Golang RPMs: compat-golang-github-cheggaaa-pb-3-devel golang-github-cheggaaa-pb-devel Size: 63.58 KiB Package: golang-github-marten-seemann-qtls-go1-18-0.1.1-1.fc37 Summary: Go standard library TLS 1.3 implementation, modified for QUIC. For Go 1.18 RPMs: golang-github-marten-seemann-qtls-go1-18-devel Size: 138.16 KiB Package: hcloud-1.29.5-1.fc37 Summary: A command-line interface for Hetzner Cloud RPMs: golang-github-hetznercloud-cli-devel hcloud Size: 13.34 MiB Package: python-cmake-build-extension-0.5.0-1.fc37 Summary: Setuptools extension to build and package CMake projects RPMs: python3-cmake-build-extension python3-cmake-build-extension-doc Size: 57.74 KiB Package: python-limits-2.6.2-1.fc37 Summary: Utilities to implement rate limiting using various strategies RPMs: python-limits-doc python3-limits python3-limits+memcached python3-limits+mongodb python3-limits+redis python3-limits+rediscluster Size: 425.21 KiB Package: rust-firestorm-0.5.1-1.fc37 Summary: Low overhead intrusive flamegraph profiler RPMs: rust-firestorm+default-devel rust-firestorm-devel Size: 17.77 KiB Package: rust-num_threads-0.1.6-1.fc37 Summary: Determine the number of running threads for the current process RPMs: rust-num_threads+default-devel rust-num_threads-devel Size: 22.34 KiB ===== DROPPED PACKAGES ===== Package: python-magic-wormhole-0.12.0-7.fc36 Summary: Securely transfer data between computers RPMs: magic-wormhole python-magic-wormhole-doc python3-magic-wormhole Size: 572.27 KiB Package: python-magic-wormhole-mailbox-server-0.4.1-8.fc36 Summary: Securely transfer data between computers RPMs: python-magic-wormhole-mailbox-server-doc python3-magic-wormhole-mailbox-server Size: 246.84 KiB Package: python-magic-wormhole-transit-relay-0.2.1-7.fc36 Summary: Transit Relay server for Magic-Wormhole RPMs: python3-magic-wormhole-transit-relay Size: 47.67 KiB ===== UPGRADED PACKAGES ===== Package: alsa-lib-1.2.7-1.fc37 Old package: alsa-lib-1.2.6.1-4.fc36 Summary: The Advanced Linux Sound Architecture (ALSA) library RPMs: alsa-lib alsa-lib-devel alsa-topology alsa-ucm Size: 6.58 MiB Size change: 101.07 KiB Changelog: * Tue May 31 2022 Jaroslav Kysela <perex(a)perex.cz> - 1.2.7-1 - update to 1.2.7 Package: alsa-utils-1.2.7-1.fc37 Old package: alsa-utils-1.2.6-2.fc36 Summary: Advanced Linux Sound Architecture (ALSA) utilities RPMs: alsa-topology-utils alsa-ucm-utils alsa-utils alsa-utils-alsabat Size: 5.01 MiB Size change: 113.33 KiB Changelog: * Tue May 31 2022 Jaroslav Kysela <perex(a)perex.cz> - 1.2.7-1 * Updated to 1.2.7 Package: dummy-test-package-gloster-0-8900.fc37 Old package: dummy-test-package-gloster-0-8892.fc37 Summary: Dummy Test Package called Gloster RPMs: dummy-test-package-gloster Size: 501.31 KiB Size change: 127 B Changelog: * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8893 - rebuilt * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8894 - rebuilt * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8895 - rebuilt * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8896 - rebuilt * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8897 - rebuilt * Tue May 31 2022 packagerbot <admin(a)fedoraproject.org> - 0-8898 - rebuilt * Wed Jun 01 2022 packagerbot <admin(a)fedoraproject.org> - 0-8899 - rebuilt * Wed Jun 01 2022 packagerbot <admin(a)fedoraproject.org> - 0-8900 - rebuilt Package: environment-modules-5.1.1-1.fc37 Old package: environment-modules-5.1.0-1.fc37 Summary: Provides dynamic modification of a user's environment RPMs: environment-modules Size: 2.04 MiB Size change: 9.80 KiB Changelog: * Tue May 31 2022 Xavier Delaruelle <xavier.delaruelle(a)cea.fr> - 5.1.1-1 - Update to 5.1.1 (#2092100) - Move libtclenvmodules in an environment-modules directory under libdir Package: grubby-8.40-60.fc37 Old package: grubby-8.40-59.fc37 Summary: Command line tool for updating bootloader configs RPMs: grubby Size: 131.64 KiB Size change: -1.14 KiB Changelog: * Tue May 31 2022 Robbie Harwood <rharwood(a)redhat.com> - 8.40-60 - Additionally write to /etc/kernel/cmdline Package: imagej-1.53r-3.fc37 Old package: imagej-1.53r-1.fc37 Summary: Image Processing and Analysis in Java RPMs: imagej Size: 2.51 MiB Size change: 558 B Changelog: * Tue May 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.53r-2 - Fix regression in launcher script - Symlinks called ��*�� will not be created when there are no shared plugins or luts - Broken symlinks into shared directories will be removed - Symlink changes will be printed to the terminal * Tue May 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.53r-3 - Make sure the upstream VERSION is set correctly - Use the initial numeric <pkgrel> field of the Release as the BUILD Package: jc-1.20.0-1.fc37 Old package: jc-1.19.0-1.fc37 Summary: Serialize the output of CLI tools and file-types to structured JSON RPMs: jc python3-jc Size: 332.33 KiB Size change: 11.84 KiB Changelog: * Tue May 31 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.20.0-1 - Update to v1.20.0 Package: kernel-5.19.0-0.rc0.20220531git8ab2afa23bd1.8.fc37 Old package: kernel-5.19.0-0.rc0.20220526gitbabf0bb978e3.4.fc37 Summary: The Linux kernel RPMs: kernel kernel-core kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-devel-matched kernel-debug-modules kernel-debug-modules-extra kernel-devel kernel-devel-matched kernel-doc kernel-modules kernel-modules-extra kernel-modules-internal Size: 466.00 MiB Size change: 269.08 KiB Changelog: * Fri May 27 2022 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [5.19.0-0.rc0.7e284070abe5.3] - generic/fedora: cleanup and disable Lightning Moutain SoC (Peter Robinson) - redhat: Set SND_SOC_SOF_HDA_PROBES to =m (Patrick Talbert) - Fix versioning on stable Fedora (Justin M. Forbes) - Revert "crypto: rng - Override drivers/char/random in FIPS mode" (Justin M. Forbes) - Revert random: Add hook to override device reads and getrandom(2) (Justin M. Forbes) * Sat May 28 2022 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [5.19.0-0.rc0.9d004b2f4fea.4] - Fix up config mismatches (Justin M. Forbes) * Sun May 29 2022 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [5.19.0-0.rc0.664a393a2663.5] - Fix up crypto config mistmatches (Justin M. Forbes) * Mon May 30 2022 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [5.19.0-0.rc0.b00ed48bb0a7.6] - Fix up ZSMALLOC config for s390 (Justin M. Forbes) - Turn on KASAN_OUTLINE for ppc debug (Justin M. Forbes) - Turn on KASAN_OUTLINE for PPC debug to avoid mismatch (Justin M. Forbes) * Tue May 31 2022 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [5.19.0-0.rc0.8ab2afa23bd1.7] - redhat/kernel.spec.template: update selftest data via "make dist-self-test-data" (Denys Vlasenko) - redhat/kernel.spec.template: remove stray *.hardlink-temporary files, if any (Denys Vlasenko) Package: libdc1394-2.2.6-7.fc37 Old package: libdc1394-2.2.6-6.fc36 Summary: 1394-based digital camera control library RPMs: libdc1394 libdc1394-devel libdc1394-docs libdc1394-tools Size: 5.72 MiB Size change: -79.31 KiB Changelog: * Tue May 31 2022 Simone Caronni <negativo17(a)gmail.com> - 2.2.6-7 - SPEC file cleanup. - Use proper macros everywhere. - Fix permissions for binaries. - Fix rpmlint issues. - Trim changelog. Package: nss-3.79.0-1.fc37 Old package: nss-3.77.0-1.fc37 Summary: Network Security Services RPMs: nspr nspr-devel nss nss-devel nss-pkcs11-devel nss-softokn nss-softokn-devel nss-softokn-freebl nss-softokn-freebl-devel nss-sysinit nss-tools nss-util nss-util-devel Size: 13.41 MiB Size change: -20.84 KiB Changelog: * Tue May 31 2022 Bob Relyea <rrelyea(a)redhat.com> - 3.79.0-1 - Update to NSS 3.79 - Update to NSPR 4.34 Package: openvpn-2.5.7-1.fc37 Old package: openvpn-2.5.6-1.fc37 Summary: A full-featured TLS VPN solution RPMs: openvpn openvpn-devel Size: 2.75 MiB Size change: -9.64 KiB Changelog: * Tue May 31 2022 David Sommerseth <davids(a)openvpn.net> - 2.5.7-1 - Update to upstream OpenVPN 2.5.7 Package: postgresql-14.3-1.fc37 Old package: postgresql-14.2-2.fc37 Summary: PostgreSQL client programs RPMs: postgresql postgresql-contrib postgresql-docs postgresql-llvmjit postgresql-plperl postgresql-plpython3 postgresql-pltcl postgresql-private-devel postgresql-private-libs postgresql-server postgresql-server-devel postgresql-static postgresql-test postgresql-test-rpm-macros postgresql-upgrade postgresql-upgrade-devel Size: 175.10 MiB Size change: 504.37 KiB Changelog: * Mon Apr 04 2022 Filip Janus <fjanus(a)redhat.com> - 14.2-3 - Add build requirement util-linux * Tue May 31 2022 Honza Horak <hhorak(a)redhat.com> - 14.3-1 - Update to 14.3 Also fixes: CVE-2022-1552 Package: pyscard-2.0.3-1.fc37 Old package: pyscard-1.9.7-14.fc36 Summary: A framework for building smart card aware applications in Python RPMs: python3-pyscard Size: 788.83 KiB Size change: 67.23 KiB Changelog: * Tue May 31 2022 Orion Poplawski <orion(a)nwra.com> - 2.0.3-1 - Update to 2.0.3 - New URL Package: python-CommonMark-0.9.1-8.fc37 Old package: python-CommonMark-0.9.1-6.fc36 Summary: Python parser for the CommonMark Markdown spec RPMs: python-CommonMark-doc python-CommonMark-utils python3-CommonMark Added RPMs: python-CommonMark-utils Size: 173.58 KiB Size change: 9.13 KiB Changelog: * Sat May 28 2022 FeRD (Frank Dana) <ferdnyc(a)gmail.com> - 0.9.1-7 - Split out command-line tool to -utils subpackage, rename 'commonmark' (bug 1958762) * Tue May 31 2022 FeRD (Frank Dana) <ferdnyc(a)gmail.com> - 0.9.1-8 - Remove python-future requirement (only required in Python2) Package: python-alsa-1.2.7-1.fc37 Old package: python-alsa-1.2.6-2.fc36 Summary: Python binding for the ALSA library RPMs: python3-alsa Size: 275.70 KiB Size change: -769 B Changelog: * Tue May 31 2022 Jaroslav Kysela <perex(a)perex.cz> - 1.2.7-1 - Updated to 1.2.6 Package: python-dill-0.3.5.1-1.fc37 Old package: python-dill-0.3.4-3.fc36 Summary: Serialize all of Python RPMs: python3-dill Size: 160.48 KiB Size change: 22.45 KiB Changelog: * Wed Jun 01 2022 Sergio Pascual <sergiopr(a)fedoraproject.org> - 0.3.5.1-1 - New upstream source (0.3.5.1) Package: python-django-rules-3.3.0-1.fc37 Old package: python-django-rules-2.2.0-6.fc36 Summary: Awesome Django authorization, without the database RPMs: python3-django-rules Size: 43.38 KiB Size change: -1.72 KiB Changelog: * Tue May 31 2022 Adam Williamson <awilliam(a)redhat.com> - 3.3.0-1 - Update to 3.3.0 (compatible with Django 4, Python 3.10) Package: python-genshi-0.7.7-2.fc37 Old package: python-genshi-0.7.7-1.fc37 Summary: Toolkit for stream-based generation of output for the web RPMs: python3-genshi Size: 1.18 MiB Size change: 912.93 KiB Changelog: * Tue May 31 2022 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.7.7-2 - enable optional speedups Package: python-slackclient-3.17.0-1.fc37 Old package: python-slackclient-3.16.2-1.fc37 Summary: Slack Developer Kit for Python RPMs: python3-slackclient Size: 720.16 KiB Size change: 635 B Changelog: * Tue May 31 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 3.17.0-1 - 3.17.0 Package: rsibreak-0.12.14-1.fc37 Old package: rsibreak-0.12.13-7.fc36 Summary: A small utility which bothers you at certain intervals RPMs: rsibreak Size: 2.44 MiB Size change: 54.96 KiB Changelog: * Wed Jun 01 2022 Orion Poplawski <orion(a)nwra.com> - 0.12.14-1 - Update to 0.12.14 Package: rust-actix-codec-0.5.0-1.fc37 Old package: rust-actix-codec-0.3.0-4.fc36 Summary: Codec utilities for working with framed protocols RPMs: rust-actix-codec+default-devel rust-actix-codec-devel Size: 31.33 KiB Size change: 4.59 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.5.0-1 - Update to version 0.5.0; Fixes RHBZ#2036321 Package: rust-actix-http-3.0.4-1.fc37 Old package: rust-actix-http-2.2.1-3.fc36 Summary: HTTP primitives for the Actix ecosystem RPMs: rust-actix-http+__compress-devel rust-actix-http+actix-tls-devel rust-actix-http+base64-devel rust-actix-http+brotli-devel rust-actix-http+compress-brotli-devel rust-actix-http+compress-gzip-devel rust-actix-http+compress-zstd-devel rust-actix-http+default-devel rust-actix-http+flate2-devel rust-actix-http+h2-devel rust-actix-http+http2-devel rust-actix-http+local-channel-devel rust-actix-http+openssl-devel rust-actix-http+rand-devel rust-actix-http+sha-1-devel rust-actix-http+ws-devel rust-actix-http+zstd-devel rust-actix-http-devel Added RPMs: rust-actix-http+__compress-devel rust-actix-http+base64-devel rust-actix-http+brotli-devel rust-actix-http+compress-brotli-devel rust-actix-http+compress-gzip-devel rust-actix-http+compress-zstd-devel rust-actix-http+h2-devel rust-actix-http+http2-devel rust-actix-http+local-channel-devel rust-actix-http+rand-devel rust-actix-http+sha-1-devel rust-actix-http+ws-devel rust-actix-http+zstd-devel Dropped RPMs: rust-actix-http+actix-devel rust-actix-http+actors-devel rust-actix-http+brotli2-devel rust-actix-http+compress-devel rust-actix-http+secure-cookies-devel Size: 273.80 KiB Size change: 54.70 KiB Changelog: * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.2.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 3.0.4-1 - Update to version 3.0.4; Fixes RHBZ#2048854 Package: rust-actix-router-0.5.0-1.fc37 Old package: rust-actix-router-0.2.7-2.fc36 Summary: Resource path matching and router RPMs: rust-actix-router+default-devel rust-actix-router+http-devel rust-actix-router-devel Size: 54.52 KiB Size change: 12.22 KiB Changelog: * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.2.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.5.0-1 - Update to version 0.5.0; Fixes RHBZ#1968199 Package: rust-actix-server-2.1.1-1.fc37 Old package: rust-actix-server-1.0.4-4.fc36 Summary: General purpose TCP server built for the Actix ecosystem RPMs: rust-actix-server+default-devel rust-actix-server-devel Size: 49.68 KiB Size change: 9.70 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 2.1.1-1 - Update to version 2.1.1; Fixes RHBZ#2042492 Package: rust-actix-service-2.0.2-1.fc37 Old package: rust-actix-service-1.0.6-4.fc36 Summary: Service trait and combinators for representing asynchronous request/response operations RPMs: rust-actix-service+default-devel rust-actix-service-devel Size: 40.19 KiB Size change: 724 B Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 2.0.2-1 - Update to version 2.0.2; Fixes RHBZ#2033844 Package: rust-actix-tls-3.0.3-1.fc37 Old package: rust-actix-tls-2.0.0-5.fc36 Summary: TLS acceptor and connector services for Actix ecosystem RPMs: rust-actix-tls+accept-devel rust-actix-tls+connect-devel rust-actix-tls+default-devel rust-actix-tls+http-devel rust-actix-tls+native-tls-devel rust-actix-tls+openssl-devel rust-actix-tls+tls-openssl-devel rust-actix-tls+tokio-native-tls-devel rust-actix-tls+tokio-openssl-devel rust-actix-tls+uri-devel rust-actix-tls-devel Added RPMs: rust-actix-tls+accept-devel rust-actix-tls+connect-devel rust-actix-tls+http-devel rust-actix-tls+tls-openssl-devel rust-actix-tls+tokio-native-tls-devel rust-actix-tls+uri-devel Dropped RPMs: rust-actix-tls+nativetls-devel rust-actix-tls+open-ssl-devel rust-actix-tls+tokio-tls-devel Size: 118.45 KiB Size change: 43.74 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 3.0.3-1 - Update to version 3.0.3; Fixes RHBZ#2035682 Package: rust-actix-utils-3.0.0-1.fc37 Old package: rust-actix-utils-2.0.0-4.fc36 Summary: Various utilities used in the Actix ecosystem RPMs: rust-actix-utils+default-devel rust-actix-utils-devel Size: 26.19 KiB Size change: -10.99 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 3.0.0-1 - Update to version 3.0.0 Package: rust-actix-web-4.0.1-1.fc37 Old package: rust-actix-web-3.3.2-5.fc36 Summary: Powerful, pragmatic, and extremely fast web framework for Rust RPMs: rust-actix-web+__compress-devel rust-actix-web+actix-macros-devel rust-actix-web+actix-tls-devel rust-actix-web+actix-web-codegen-devel rust-actix-web+compress-brotli-devel rust-actix-web+compress-gzip-devel rust-actix-web+compress-zstd-devel rust-actix-web+cookie-devel rust-actix-web+cookies-devel rust-actix-web+default-devel rust-actix-web+macros-devel rust-actix-web+openssl-devel rust-actix-web+secure-cookies-devel rust-actix-web-devel Added RPMs: rust-actix-web+__compress-devel rust-actix-web+actix-macros-devel rust-actix-web+actix-tls-devel rust-actix-web+actix-web-codegen-devel rust-actix-web+compress-brotli-devel rust-actix-web+compress-gzip-devel rust-actix-web+compress-zstd-devel rust-actix-web+cookie-devel rust-actix-web+cookies-devel rust-actix-web+macros-devel Dropped RPMs: rust-actix-web+compress-devel rust-actix-web+open-ssl-devel Size: 294.21 KiB Size change: 139.37 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 4.0.1-1 - Update to version 4.0.1; Fixes RHBZ#2048855 Package: rust-actix-web-codegen-4.0.0-1.fc37 Old package: rust-actix-web-codegen-0.4.0-4.fc36 Summary: Routing and runtime macros for Actix Web RPMs: rust-actix-web-codegen+default-devel rust-actix-web-codegen-devel Size: 33.88 KiB Size change: 645 B Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 4.0.0-1 - Update to version 4.0.0; Fixes RHBZ#2058761 Package: rust-awc-3.0.0-1.fc37 Old package: rust-awc-2.0.3-4.fc36 Summary: Async HTTP and WebSocket client library RPMs: rust-awc+__compress-devel rust-awc+compress-brotli-devel rust-awc+compress-gzip-devel rust-awc+compress-zstd-devel rust-awc+cookie-devel rust-awc+cookies-devel rust-awc+dangerous-h2c-devel rust-awc+default-devel rust-awc+openssl-devel rust-awc+tls-openssl-devel rust-awc+trust-dns-devel rust-awc+trust-dns-resolver-devel rust-awc-devel Added RPMs: rust-awc+__compress-devel rust-awc+compress-brotli-devel rust-awc+compress-gzip-devel rust-awc+compress-zstd-devel rust-awc+cookie-devel rust-awc+cookies-devel rust-awc+dangerous-h2c-devel rust-awc+tls-openssl-devel rust-awc+trust-dns-devel rust-awc+trust-dns-resolver-devel Dropped RPMs: rust-awc+compress-devel rust-awc+open-ssl-devel Size: 165.22 KiB Size change: 92.15 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 3.0.0-1 - Update to version 3.0.0; Fixes RHBZ#2061921 Package: rust-serde_qs-0.9.2-3.fc37 Old package: rust-serde_qs-0.9.2-2.fc37 Summary: Querystrings for Serde RPMs: rust-serde_qs+actix-web4-devel rust-serde_qs+actix4-devel rust-serde_qs+default-devel rust-serde_qs+futures-devel rust-serde_qs+tracing-devel rust-serde_qs+warp-devel rust-serde_qs+warp-framework-devel rust-serde_qs-devel Added RPMs: rust-serde_qs+actix-web4-devel rust-serde_qs+actix4-devel Dropped RPMs: rust-serde_qs+actix-web3-devel rust-serde_qs+actix3-devel Size: 89.66 KiB Size change: 765 B Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.9.2-3 - Adaptations for the update to actix-web 4 Package: rust-time-0.3.9-1.fc37 Old package: rust-time-0.3.5-2.fc36 Summary: Date and time library RPMs: rust-time+alloc-devel rust-time+default-devel rust-time+formatting-devel rust-time+itoa-devel rust-time+large-dates-devel rust-time+local-offset-devel rust-time+macros-devel rust-time+parsing-devel rust-time+quickcheck-dep-devel rust-time+quickcheck-devel rust-time+rand-devel rust-time+serde-devel rust-time+serde-human-readable-devel rust-time+serde-well-known-devel rust-time+std-devel rust-time+time-macros-devel rust-time-devel Added RPMs: rust-time+serde-well-known-devel Size: 216.98 KiB Size change: 9.40 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.3.9-1 - Update to version 0.3.9; Fixes RHBZ#2043327 Package: rust-time-macros-0.2.4-1.fc37 Old package: rust-time-macros-0.2.3-2.fc36 Summary: Procedural macros for the time crate RPMs: rust-time-macros+default-devel rust-time-macros+large-dates-devel rust-time-macros-devel Size: 43.47 KiB Size change: 1.47 KiB Changelog: * Tue May 31 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.2.4-1 - Update to version 0.2.4; Fixes RHBZ#2066975 Package: rust-vm-memory-0.8.0-1.fc37 Old package: rust-vm-memory-0.7.0-4.fc37 Summary: Safe abstractions for accessing the VM physical memory RPMs: rust-vm-memory+arc-swap-devel rust-vm-memory+backend-atomic-devel rust-vm-memory+backend-bitmap-devel rust-vm-memory+backend-mmap-devel rust-vm-memory+default-devel rust-vm-memory-devel Size: 103.24 KiB Size change: 1.24 KiB Changelog: * Tue May 31 2022 Sergio Lopez <slp(a)redhat.com> - 0.8.0-1 - Update to 0.8.0 - Enable tests now that BZ#1902663 is fixed - Enable all rust_arches except i686 (32 bits targets are not supported) Package: thunderbird-91.10.0-1.fc37 Old package: thunderbird-91.9.1-1.fc37 Summary: Mozilla Thunderbird mail/newsgroup client RPMs: thunderbird thunderbird-librnp-rnp thunderbird-wayland Size: 290.29 MiB Size change: -52.42 KiB Changelog: * Tue May 31 2022 Eike Rathke <erack(a)redhat.com> - 91.10.0-1 - Update to 91.10.0 Package: torsocks-2.4.0-1.fc37 Old package: torsocks-2.3.0-11.fc36 Summary: Use SOCKS-friendly applications with Tor RPMs: torsocks Size: 272.48 KiB Size change: 2.59 KiB Changelog: * Tue May 31 2022 Marcel Haerry <mh+fedora(a)scrit.ch> - 2.4.0-1 - Latest upstream release - https://gitlab.torproject.org/tpo/core/torsocks/-/releases/v2.4.0 Package: xfce4-taskmanager-1.5.4-1.fc37 Old package: xfce4-taskmanager-1.5.2-1.fc37 Summary: Taskmanager for the Xfce desktop environment RPMs: xfce4-taskmanager Size: 554.08 KiB Size change: -2.29 KiB Changelog: * Tue May 31 2022 Mukundan Ragavan <nonamedotc(a)fedoraproject.org> - 1.5.4-1 - Update to 1.5.4 Package: zabbix-1:6.0.5-1.fc37 Old package: zabbix-1:6.0.4-1.fc37 Summary: Open-source monitoring solution for your IT infrastructure RPMs: zabbix zabbix-agent zabbix-dbfiles-mysql zabbix-dbfiles-pgsql zabbix-dbfiles-sqlite3 zabbix-proxy zabbix-proxy-mysql zabbix-proxy-pgsql zabbix-proxy-sqlite3 zabbix-selinux zabbix-server zabbix-server-mysql zabbix-server-pgsql zabbix-web zabbix-web-mysql zabbix-web-pgsql Size: 41.57 MiB Size change: 108.06 KiB Changelog: * Tue May 31 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 1:6.0.5-1 - 6.0.5 Package: zbar-0.23.90-1.fc37 Old package: zbar-0.23-14.fc36 Summary: Bar code reader RPMs: zbar zbar-devel zbar-gi zbar-gtk zbar-gtk-devel zbar-java zbar-python3 zbar-qt zbar-qt-devel Size: 1.86 MiB Size change: 59.11 KiB Changelog: * Tue May 31 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 0.23.90-1 - 0.23.90 ===== DOWNGRADED PACKAGES =====

1 0

Fedora-Cloud-34-20220601.0 compose check report
by Fedora compose checker 01 Jun '22

01 Jun '22

No missing expected images. Soft failed openQA tests: 1/8 (x86_64), 1/8 (aarch64) (Tests completed, but using a workaround for a known bug) Old soft failures (same test soft failed in Fedora-Cloud-34-20220531.0): ID: 1286455 Test: x86_64 Cloud_Base-qcow2-qcow2 cloud_autocloud URL: https://openqa.fedoraproject.org/tests/1286455 ID: 1286463 Test: aarch64 Cloud_Base-qcow2-qcow2 cloud_autocloud@uefi URL: https://openqa.fedoraproject.org/tests/1286463 Passed openQA tests: 7/8 (x86_64), 7/8 (aarch64) -- Mail generated by check-compose: https://pagure.io/fedora-qa/check-compose

1 0

Fedora-Cloud-36-20220601.0 compose check report
by Fedora compose checker 01 Jun '22

01 Jun '22

No missing expected images. Soft failed openQA tests: 1/8 (x86_64), 1/8 (aarch64) (Tests completed, but using a workaround for a known bug) Old soft failures (same test soft failed in Fedora-Cloud-36-20220531.0): ID: 1286380 Test: x86_64 Cloud_Base-qcow2-qcow2 cloud_autocloud URL: https://openqa.fedoraproject.org/tests/1286380 ID: 1286388 Test: aarch64 Cloud_Base-qcow2-qcow2 cloud_autocloud@uefi URL: https://openqa.fedoraproject.org/tests/1286388 Passed openQA tests: 7/8 (x86_64), 7/8 (aarch64) -- Mail generated by check-compose: https://pagure.io/fedora-qa/check-compose

1 0

F37 Proposal: Strong crypto settings: phase 3, forewarning 1/2 (System-Wide Change proposal)
by Ben Cotton 01 Jun '22

01 Jun '22

This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings3Forewarning1 == Summary == Cryptographic policies will be tightened in Fedora 38-39, SHA-1 signatures will no longer be trusted by default. Fedora 37 specifically doesn't come with any change of defaults, and this Fedora Change is an advance warning filed for extra visibility. Test your setup with FUTURE today and file bugs so you won't get bit by Fedora 38-39. == Owner == * Name: [[User:Asosedkin| Alexander Sosedkin]] * Email: asosedki(a)redhat.com == Detailed Description == Secure defaults are an evermoving target. Fedora 28 had [[Changes/StrongCryptoSettings|StrongCryptoSettings]]. Fedora 33 had [[Changes/StrongCryptoSettings2|StrongCryptoSettings2]]. Fedora 39 should have [[Changes/StrongCryptoSettings3|StrongCryptoSettings3]]. The impact of one upcoming change, notably distrusting SHA-1 signatures, might be so profound we're smoothing the rollout in time to give developers and maintainers ample time to react: Fedora 36: * SHA-1 signatures are distrusted in FUTURE policy (opt-in) * TEST-FEDORA39 policy is provided * creating and verifying SHA-1 signatures is logged to ease reporting bugs '''Fedora 37 [[Changes/StrongCryptoSettings3Forewarning3|StrongCryptoSettings3Forewarning1]]''': * (was initially reserved to implement logging of SHA-1 signature operations) Fedora 38 [[Changes/StrongCryptoSettings3Forewarning3|StrongCryptoSettings3Forewarning2]]: * policies are updated, most notably * SHA-1 signatures are distrusted in DEFAULT policy * changes are reverted in branched f38 in time for Beta and do not reach users Fedora 39 [[Changes/StrongCryptoSettings3|StrongCryptoSettings3]]: * changes reach users The plan is subject to change if it goes sideways somewhere along the way. By Fedora 39, the policies will be, in TLS perspective: LEGACY MACs: All HMAC with SHA1 or better + all modern MACs (Poly1305 etc.) Curves: all prime >= 255 bits (including Bernstein curves) Signature algorithms: SHA-1 hash or better (no DSA) Ciphers: all available > 112-bit key, >= 128-bit block (no RC4 or 3DES) Key exchange: ECDHE, RSA, DHE (no DHE-DSS) DH params size: >=2048 RSA params size: >=2048 TLS protocols: TLS >= 1.2 DEFAULT MACs: All HMAC with SHA1 or better + all modern MACs (Poly1305 etc.) Curves: all prime >= 255 bits (including Bernstein curves) Signature algorithms: with SHA-224 hash or better (not DSA) Ciphers: >= 128-bit key, >= 128-bit block (AES, ChaCha20, including AES-CBC) Key exchange: ECDHE, RSA, DHE (no DHE-DSS) DH params size: >= 2048 RSA params size: >= 2048 TLS protocols: TLS >= 1.2 FUTURE MACs: All HMAC with SHA256 or better + all modern MACs (Poly1305 etc.) Curves: all prime >= 255 bits (including Bernstein curves) Signature algorithms: SHA-256 hash or better (not DSA) Ciphers: >= 256-bit key, >= 128-bit block, only Authenticated Encryption (AE) ciphers Key exchange: ECDHE, DHE DH params size: >= 3072 RSA params size: >= 3072 TLS protocols: TLS >= 1.2 The flagship change this time will be distrusting SHA-1 signatures on the cryptographic library level, affecting more than just TLS. OpenSSL will start blocking signature creation and verification by default, with the fallout anticipated to be wide enough for us to roll out the change across multiple cycles with multiple forewarnings. In Fedora 36, 37 and 38 released distrusting SHA-1 signatures will be opt-in. In Fedora 38 rawhide and Fedora 39 distrusting SHA-1 signatures will happen by default. == Feedback == [https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org… A discussion] has been raised on fedora-devel, [https://lwn.net/Articles/887832 a summary] is available on LWN. A change has the potential to prove disruptive and controversial, with much effort being focused on stretching it out in time. There seems to be a consensus that the change has to be done eventually, but the ideal means of implementing it are in no way clear. The decision to discover code reliant on SHA-1 signatures by blocking creation/verification has not gathered many fans, but not many alternative proposals have been raised in return. A notable one, making the library somehow log the offending operations, has been incorporated in the proposal, though the effectiveness of it is yet to be seen in practice. Another notable takeaway point is the need to call for testing, which would be done in form of writing four Fedora Changes and testing SHA-1 signature distrusting during Fedora 37 & 38 Test Days. The change owner doesn't see the plan as an ideal one and continues to be open for feedback. == Benefit to Fedora == Fedora 39 will ship with more secure defaults to better match the everchanging landscape of cryptographic practices. TLS 1.0 / 1.1 protocol version will be disabled as they're [deprecated https://datatracker.ietf.org/doc/rfc8996] minimum key sizes will be raised to keep up with the computational advances etc. Distrusting SHA-1 signatures specifically is expected to trigger a topical distribution-wide crackdown on [https://eprint.iacr.org/2020/014 weak] cryptography, raising the security of the distribution moving forward. == Scope == * Proposal owners: implement changes described in Summary and Dependencies sections * Other developers: Test your applications with FUTURE policy. Move away from trusting SHA-1 signatures; ideally in time for F38 branch-off, for F39 release at the latest. Follow [[SHA1SignaturesGuidance | SHA1SignaturesGuidance]]: 1. move away from trusting SHA-1 signatures entirely, or 2. distrust them by default and require explicit user opt-in to use a workaround * Release engineering: Not sure if mass-rebuild is required if we land the change right after f38 branch-off. Maybe a "preview" mass-rebuild can be done with a special build in the Fedora 37 timeframe to cut down on Fedora 38 FTBFS. * Policies and guidelines: update needed in time for Fedora 38 CryptoPolicies section of the packaging guidelines will have to be updated to reflect that SHA-1 signatures must not be trusted by default and provide guidance for openssl and gnutls. Components using workaround APIs must not use them without explicit user opt-in and must be added to a list of applications using a workaround API. * Trademark approval: N/A (not needed for this Change) * Alignment with Objectives: not with Fedora 37-era ones == Upgrade/compatibility impact == Nothing will change for Fedora 37 by default, the change is opt-in for now. == How To Test == === Testing actively === Install crypto-policies-scripts package and switch to a more restrictive policy with either `update-crypto-policies --set FUTURE` or `update-crypto-policies --set TEST-FEDORA39`. Proceed to use the system as usual, identify the workflows which are broken by this change. Verify that the broken functionality works again if you the policy is relaxed back with, e.g., `update-crypto-policies --set FUTURE:SHA-1`, file bug reports against the affected components if not filed already. Please start your ticket title with `StrongCryptoSettings3: `, mention this change page, the version of crypto-policies package and the policies under which your workflow does and does not work. === Testing passively === Install a special logging tool from https://copr.fedorainfracloud.org/coprs/asosedkin/sha1sig-tracer Run it and proceed to use your system. Once the tool notifies you about about soon-to-be-blocked SHA-1 signature operations, identify the component and actions leading to these operations, verify that repeating them leads to logging more entries. Ideally also verify that switching to a stricter policy breaks the workflow. File bug reports against the affected components if not filed already. Please start your ticket title with `StrongCryptoSettings3: ` and link to this change page. == User Experience == Things will break. All kinds of things depending on SHA-1 signatures, openly and secretly. * '''On Fedora 37 they'll break opt-in.''' * On Fedora 38 rawhide they'll break by default. * On Fedora 38 released they'll behave like in Fedora 37. * On Fedora 39 they'll break by default again, including the released version. == Dependencies == While it would be welcome, no reverse dependencies of openssl have to react in time for Fedora 37, where the change is opt-in preview only. For now, test, file bugs and spark discussions. A small coordinated change with openssl is required. == Contingency Plan == * Contingency mechanism: not needed for F37 * Contingency deadline: not needed for F37 * Blocks release? no == Documentation == Workaround API should be added to [[SHA1SignaturesGuidance | SHA1SignaturesGuidance]]. Packaging guidelines should be modified accordingly. == Release Notes == https://pagure.io/fedora-docs/release-notes/issue/829 -- Ben Cotton He / Him / His Fedora Program Manager Red Hat TZ=America/Indiana/Indianapolis

21 42

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

devel June 2022