F40 Change Proposal: Systemd Security Hardening (System-Wide)
by Aoife Moloney
https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
Improve security by enabling some of the high level systemd security
hardening settings that isolate and sandbox default system services.
== Owner ==
* Name: [[User:Sundaram| Rahul Sundaram]]
* Email: metherid(a)gmail.com
== Detailed Description ==
systemd provides a number of settings that can harden security for
services. We are selecting a few high level ones to enable by default
on a service by service basis as suitable for that particular service.
* `PrivateTmp=yes`
* `ProtectSystem=yes/full/strict`
* `ProtectHome=yes/read-only`
* `ProtectClock=yes`
* `ProtectHostname=yes`
* `ProtectControlGroups=yes`
* `ProtectHostname=yes`
* `ProtectKernelLogs=yes`
* `ProtectKernelModules=yes`
* `ProtectKernelTunables=yes`
* `ProtectProc=invisible`
* `PrivateDevices=yes`
* `PrivateNetwork=yes`
* `NoNewPrivileges=yes`
* `User=`
If we want to go further, we could also consider:
* `CapabilityBoundingSet=`
* `DevicePolicy=closed`
* `KeyringMode=private`
* `LockPersonality=yes`
* `MemoryDenyWriteExecute=yes`
* `PrivateUsers=yes`
* `RemoveIPC=yes`
* `RestrictAddressFamilies=`
* `RestrictNamespaces=yes`
* `RestrictRealtime=yes`
* `RestrictSUIDSGID=yes`
* `SystemCallFilter=`
* `SystemCallArchitectures=native`
We will aim to cover all the default system services as well as some
of the high profile services such as Nginx or PostgreSQL. All of these
settings need to be configured on a per service basis instead of using
a global override to facilitate fine tuning the settings based on
service requirements and limit the impact for users on upgrades.
Certain services have a very targeted scope. For instance, a service
that only needs to read or write from only one directory could
leverage more fine grained settings to restrict access even further.
We will enable as many of these as feasible for the services but not
every knob is going to be applicable to every service. For example,
`PrivateNetwork=yes` can only be used for services that does not need
network connectivity by default. We have to choose between
`DynamicUser=yes` or `User` if either is feasible for the service to
use. As a base starting point, from Fedora 39 workstation, we have the
following system services installed by default which should considered
within the scope of the change (excluding systemd associated ones
which already have a number of these security settings enabled). We
may also consider doing this for some of the high profile services
including say Nginx and PostgreSQL permitting time considerations and
other contributors if any joining this effort. We will prioritize
critical or long running services.
* `abrtd.service`
* `abrt-journal-core.service`
* `abrt-oops.service`
* `abrt-pstoreoops.service`
* `abrt-vmcore.service`
* `abrt-xorg.service`
* `accounts-daemon.service`
* `alsa-restore.service`
* `alsa-state.service`
* `anaconda-direct.service`
* `anaconda-fips.service`
* `anaconda-nm-config.service`
* `anaconda-nm-disable-autocons.service`
* `anaconda-noshell.service`
* `anaconda-pre.service`
* `anaconda.service`
* `anaconda-sshd.service`
* `arp-ethers.service`
* `auditd.service`
* `auth-rpcgss-module.service`
* `avahi-daemon.service`
* `blivet.service`
* `blk-availability.service`
* `bluetooth.service`
* `bolt.service`
* `brltty.service`
* `canberra-system-bootup.service`
* `canberra-system-shutdown-reboot.service`
* `canberra-system-shutdown.service`
* `chronyd-restricted.service`
* `chronyd.service`
* `chrony-wait.service`
* `colord.service`
* `console-getty.service`
* `cups-browsed.service`
* `cups.service`
* `dbus-broker.service`
* `dbus-daemon.service`
* `dbus-org.freedesktop.hostname1.service`
* `dbus-org.freedesktop.import1.service`
* `dbus-org.freedesktop.locale1.service`
* `dbus-org.freedesktop.login1.service`
* `dbus-org.freedesktop.machine1.service`
* `dbus-org.freedesktop.portable1.service`
* `dbus-org.freedesktop.timedate1.service`
* <strike>`debug-shell.service`</strike> (opens a user shell that must
be able to do arbitrary stuff)
* `dm-event.service`
* `dnf-makecache.service`
* `dnf-system-upgrade-cleanup.service`
* `dnf-system-upgrade.service`
* `dnsmasq.service`
* `dracut-cmdline.service`
* `dracut-initqueue.service`
* `dracut-mount.service`
* `dracut-pre-mount.service`
* `dracut-pre-pivot.service`
* `dracut-pre-trigger.service`
* `dracut-pre-udev.service`
* `dracut-shutdown-onfailure.service`
* `dracut-shutdown.service`
* <strike>`emergency.service`</strike> (opens a user shell that must
be able to do arbitrary stuff)
* `fedora-third-party-refresh.service`
* `firewalld.service`
* `flatpak-add-fedora-repos.service`
* `flatpak-system-helper.service`
* `fprintd.service`
* `fsidd.service`
* `fstrim.service`
* `fwupd-offline-update.service`
* `fwupd-refresh.service`
* `fwupd.service`
* `gdm.service`
* `geoclue.service`
* `grub-boot-indeterminate.service`
* `gssproxy.service`
* `htcacheclean.service`
* `httpd.service`
* `hypervfcopyd.service`
* `hypervkvpd.service`
* `hypervvssd.service`
* `iio-sensor-proxy.service`
* `import-state.service`
* `initrd-cleanup.service`
* `initrd-parse-etc.service`
* `initrd-switch-root.service`
* `initrd-udevadm-cleanup-db.service`
* `instperf.service`
* `ipp-usb.service`
* `iscsid.service`
* `iscsi-init.service`
* `iscsi-onboot.service`
* `iscsi.service`
* `iscsi-shutdown.service`
* `iscsi-starter.service`
* `iscsiuio.service`
* `kdump.service`
* `kmod-static-nodes.service`
* `ldconfig.service`
* `libvirtd.service`
* `libvirt-guests.service`
* `livesys-late.service`
* `livesys.service`
* `loadmodules.service`
* `logrotate.service`
* `low-memory-monitor.service`
* `lvm2-lvmdbusd.service`
* `lvm2-lvmpolld.service`
* `lvm2-monitor.service`
* `man-db-cache-update.service`
* `man-db-restart-cache-update.service`
* `mcelog.service`
* `mdcheck_continue.service`
* `mdcheck_start.service`
* `mdmonitor-oneshot.service`
* `mdmonitor.service`
* `ModemManager.service`
* `ndctl-monitor.service`
* `netavark-dhcp-proxy.service`
* `NetworkManager-dispatcher.service`
* `NetworkManager.service`
* `NetworkManager-wait-online.service`
* `nfs-blkmap.service`
* `nfsdcld.service`
* `nfs-idmapd.service`
* `nfs-mountd.service`
* `nfs-server.service`
* `nfs-utils.service`
* `nftables.service`
* `nis-domainname.service`
* `nm-priv-helper.service`
* `numad.service`
* `nvmefc-boot-connections.service`
* `nvmf-autoconnect.service`
* `ostree-boot-complete.service`
* `ostree-finalize-staged-hold.service`
* `ostree-finalize-staged.service`
* `ostree-prepare-root.service`
* `ostree-remount.service`
* `packagekit-offline-update.service`
* `packagekit.service`
* `pam_namespace.service`
* `pcscd.service`
* `plocate-updatedb.service`
* `plymouth-halt.service`
* `plymouth-kexec.service`
* `plymouth-poweroff.service`
* `plymouth-quit.service`
* `plymouth-quit-wait.service`
* `plymouth-read-write.service`
* `plymouth-reboot.service`
* `plymouth-start.service`
* `plymouth-switch-root-initramfs.service`
* `plymouth-switch-root.service`
* `podman-auto-update.service`
* `podman-clean-transient.service`
* `podman-restart.service`
* `podman.service`
* `polkit.service`
* `power-profiles-daemon.service`
* `psacct.service`
* `qemu-guest-agent.service`
* `qemu-pr-helper.service`
* `quotaon.service`
* `raid-check.service`
* <strike>`rc-local.service`</strike> (this can do arbitrary stuff)
* `realmd.service`
* `rescue.service`
* `rpcbind.service`
* `rpc-gssd.service`
* `rpc-statd-notify.service`
* `rpc-statd.service`
* `rpmdb-migrate.service`
* `rpmdb-rebuild.service`
* `rtkit-daemon.service`
* `saslauthd.service`
* `selinux-autorelabel-mark.service`
* `selinux-autorelabel.service`
* `selinux-check-proper-disable.service`
* `speech-dispatcherd.service`
* `spice-vdagentd.service`
* `spice-webdavd.service`
* `sshd.service`
* `ssh-host-keys-migration.service`
* `sssd-autofs.service`
* `sssd-kcm.service`
* `sssd-nss.service`
* `sssd-pac.service`
* `sssd-pam.service`
* `sssd.service`
* `sssd-ssh.service`
* `sssd-sudo.service`
* `switcheroo-control.service`
* `system-update-cleanup.service`
* `tcsd.service`
* `thermald.service`
* `udisks2.service`
* `unbound-anchor.service`
* `upower.service`
* `uresourced.service`
* `usbmuxd.service`
* `vboxclient.service`
* `vboxservice.service`
* `vgauthd.service`
* `virtinterfaced.service`
* `virtlockd.service`
* `virtlogd.service`
* `virtnetworkd.service`
* `virtnodedevd.service`
* `virtnwfilterd.service`
* `virtproxyd.service`
* `virtqemud.service`
* `virtsecretd.service`
* `virtstoraged.service`
* `vmtoolsd.service`
* `wpa_supplicant.service`
* `zfs-fuse-scrub.service`
* `zfs-fuse.service`
* `zvbid.service`
We will also coordinate with upstream following
https://docs.fedoraproject.org/en-US/packaging-guidelines/PatchUpstreamSt...
and encourage package maintainers to upstream these changes. Systemd
will ignore any of these settings it does not understand on older
versions. Hence this should be safe for upstream to merge on any
services.
== Feedback ==
== Benefit to Fedora ==
Fedora services will get a significant security boost by default by
avoiding or mitigating any unknown security vulnerabilities in default
system services.
== Scope ==
* Proposal owners: Individual per service pull requests to enable
various security features as applicable.
* Other developers: Review PRs as needed
* Release engineering: https://pagure.io/releng/issue/11785
* Policies and guidelines:
Packaging guidelines will have to be modified to add recommendations
to use more of the systemd security features by default. In
particular, we should add a security settings section in
https://fedoraproject.org/wiki/Packaging:Systemd. Current the
guidance only recommends a couple of settings for long running
services. Sample text:
Systemd services included in Fedora are recommended to use as many of
the following security settings as applicable while maintaining the
default functionality of the service.
* `PrivateTmp=yes`
* `ProtectSystem=yes/full/strict`
* `ProtectHome=yes`
* `PrivateDevices=yes`
* `ProtectKernelTunables=yes`
* `ProtectKernelModules=yes`
* `ProtectKernelLogs=yes`
* `ProtectControlGroups=yes`
* `NoNewPrivileges=yes`
* `PrivateNetwork=yes`
The full list of sandboxing features are available in
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html....
Note that if you are submitting changes to upstream as recommended,
systemd will warn and ignore any of these features it doesn't support.
So it should be safe for upstream to enable as many of these features
as applicable and not worry about distribution support for ones using
older versions of systemd.
* Trademark approval: N/A
== Upgrade/compatibility impact ==
Packages will automatically get additional security features enabled
by default transparently. In limited circumstances, they may need to
override the defaults. Refer to user experience section for details.
== How To Test ==
You can use tools like `systemd-analyze security` and `systemctl cat`
to verify that specific security features are enabled by default.
Default services with the default features should have no adverse
impact and users shouldn't have to do anything beyond using the
software as intended and report any regressions. High profile
services not installed by default that gain these security features
would benefit from more targeting testing to spot any unintended
consequences especially for niche or advanced functionality. If
advanced non-default functionality requires overrides default
settings, we can document those in the release notes to provide
guidance.
== User Experience ==
This should be largely transparent change for users. The goal is to
have the services work as expected with the default functionality but
to potentially require tweaking the settings if the configuration is
changed by users after installation. For instance, if we add
`ProtectHome=yes` to Apache httpd.service and the user wishes to serve
files out of their home directory, they will need to override the
systemd setting to `ProtectHome=read-only` to allow for the service to
read from the user home directory in addition to changing the service
specific configuration files to enable this feature.
== Dependencies ==
None. We are merely enabling some of systemd security features by
default for default system services and potentially some high profile
services.
== Contingency Plan ==
* Contingency mechanism: These settings can be enabled/disabled at a
per service level. No wholesale reverts is necessary. If we don't
finish the work for all the services, we can follow up in future
releases.
* Contingency deadline: N/A
* Blocks release? No
== Documentation ==
* https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html...
* https://docs.arbitrary.ch/security/systemd.html
* https://www.redhat.com/sysadmin/systemd-secure-services
* https://www.redhat.com/sysadmin/mastering-systemd
== Release Notes ==
systemd security hardening features are enabled for default system
services and following high profile services.
* PostgreSQL
* Apache Httpd
* Nginx
* MariaDB
....
If you wish to turn off any particular settings, you can follow the
standard systemd method of overriding the config. For example,
`$ cat /etc/systemd/system/httpd.service.d/override.conf
[Service]
ProtectHome=no`
`
$ sudo systemctl daemon-reload
$ sudo systemctl restart httpd.service`
`$ systemctl status httpd.service
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled;
vendor preset: disabled)
Drop-In: /etc/systemd/system/httpd.service.d
└─override.conf
Active: active (running) since Mon 2023-11-15 18:29:25 EST; 3min 30s ago`
--
Aoife Moloney
Fedora Operations Architect
Fedora Project
Matrix: @amoloney:fedora.im
IRC: amoloney
--
_______________________________________________
devel-announce mailing list -- devel-announce(a)lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedora...
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
7 months, 1 week
Inactive packages removed from packager group
by Kevin Fenzi
Hi all,
Today, 2023-11-18, we have removed inactive packagers
from the packager group.
This is in accordance with the FESCo policy on inactive packagers:
https://docs.fedoraproject.org/en-US/fesco/Policy_for_inactive_packagers/
If the removed user is 'main admin' for a package, this package
will be orphaned. If there are co-maintainers for the package,
one of them should take the role of 'main admin',
by clicking "✋ Take" on
`https://src.fedoraproject.org/rpms/<package>`".
Otherwise any packager may take the package while it's orphaned.
After 6 weeks, the package will be retired.
After another 8 weeks, a new review is needed to unretire it.
see https://docs.fedoraproject.org/en-US/fesco/Policy_for_orphan_and_retired_...
for more details.
More details available in https://pagure.io/fedora-infrastructure/issue/11621
Packages that have been orphaned are:
rpms/gtksourceview5
rpms/python-typing-inspect
rpms/xorg-x11-drv-qxl
rpms/coin-or-lemon
rpms/fish
rpms/nvme-cli
rpms/u2f-hidraw-policy
rpms/virtme
rpms/elementary-onboarding
rpms/vala-language-server
rpms/perl-MooseX-Role-Matcher
rpms/perl-Net-Google-AuthSub
rpms/drupal7-advanced_help
rpms/drupal7-auto_nodetitle
rpms/drupal7-calendar
rpms/drupal7-ckeditor
rpms/drupal7-date_ical
rpms/drupal7-email
rpms/drupal7-features
rpms/drupal7-feeds
rpms/drupal7-flexifilter
rpms/drupal7-footnotes
rpms/drupal7-google_analytics
rpms/drupal7-honeypot
rpms/drupal7-job_scheduler
rpms/drupal7-mediawiki_api
rpms/drupal7-module_filter
rpms/drupal7-panels
rpms/drupal7-pathauto
rpms/drupal7-rules
rpms/drupal7-site_map
rpms/drupal7-strongarm
rpms/drupal7-theme-adaptivetheme
rpms/drupal7-token
rpms/drupal7-views_bulk_operations
rpms/drupal7-views_slideshow
rpms/drupal7-webform
rpms/drupal7-workbench
rpms/drupal7-workbench_moderation
rpms/drupal7-xmlsitemap
rpms/python-ironicclient
rpms/qtractor
rpms/rtirq
rpms/dropbear
rpms/byzanz
rpms/cairo
rpms/golang-github-elithrar-simple-scrypt
rpms/golang-github-kurin-blazer
rpms/golang-github-minio
rpms/golang-github-pkg-xattr
rpms/golang-github-restic-chunker
rpms/restic
rpms/aspell-ar
rpms/aspell-he
rpms/bidiv
rpms/hspell
rpms/hunspell-ar
rpms/python-pthreading
rpms/taarich
rpms/tex-fonts-hebrew
rpms/golang-rsc-pdf
rpms/wavbreaker
rpms/python-timeunit
rpms/python-vagrantpy
rpms/streamtuner
rpms/bird
rpms/ovirt-guest-agent
rpms/vsqlite++
rpms/dovecot-fts-xapian
rpms/VirtualGL
rpms/python-autograd
rpms/python-read-roi
rpms/byobu
rpms/kflickr
rpms/nfacct
rpms/perl-Audio-Beep
rpms/perl-CDDB
rpms/perl-Getopt-Simple
rpms/perl-NetPacket-LLC
rpms/perl-NetPacket-SpanningTree
rpms/perl-Pod-Coverage-Moose
rpms/perl-Proc-Simple
rpms/perl-XML-Parser-Lite-Tree-XPath
rpms/rust-atomic
rpms/rust-binascii
rpms/rust-cfb
rpms/rust-email-encoding
rpms/rust-infer
rpms/rust-inlinable_string
rpms/rust-multer
rpms/rust-rmpv
rpms/rust-serde_qs
rpms/rust-totp-lite
rpms/rust-ubyte
container/glusterfs
rpms/python-oslo-vmware
rpms/perl-Hash-Diff
rpms/perl-Test-Script-Run
rpms/esc
rpms/bash-completion-extras
rpms/apiextractor
rpms/appmenu-qt
rpms/arora
rpms/beefy-miracle-kde-theme
rpms/bluedevil
rpms/cagibi
rpms/colord-kde
rpms/constantine-kde-theme
rpms/dogtail
rpms/generatorrunner
rpms/goddard-kde-theme
rpms/herqq
rpms/jovie
rpms/kaccessible
rpms/kde-plasma-ihatethecashew
rpms/kio-ftps
rpms/kmag
rpms/kmousetool
rpms/kmouth
rpms/ktp-accounts-kcm
rpms/ktp-approver
rpms/ktp-auth-handler
rpms/ktp-common-internals
rpms/ktp-contact-list
rpms/ktp-filetransfer-handler
rpms/ktp-kded-integration-module
rpms/ktp-send-file
rpms/ktp-text-ui
rpms/kvkbd
rpms/laughlin-kde-theme
rpms/leonidas-kde-theme
rpms/libkcddb
rpms/libkcompactdisc
rpms/lovelock-kde-theme
rpms/pairs
rpms/plasma-widget-menubar
rpms/polkit-kde
rpms/prison
rpms/pyside-tools
rpms/python-pyside
rpms/qt-at-spi
rpms/qtsoap
rpms/shiboken
rpms/solar-kde-theme
rpms/telepathy-qt
rpms/verne-kde-theme
rpms/gogoc
rpms/lua-argparse
rpms/ibutils
rpms/keychecker
rpms/mediawiki-SpecialInterwiki
rpms/multitail
rpms/supybot-koji
rpms/trace-gui
modules/X11-base
modules/cloud-init
modules/dhcp
modules/networking-base
modules/shared-userspace
modules/storage-devices
rpms/dictd
rpms/ed
rpms/libcap
rpms/vim
rpms/cutter
rpms/groonga
rpms/groonga-normalizer-mysql
rpms/sentencepiece
rpms/salt
rpms/boinc-client
rpms/glue-validator
rpms/lcg-infosites
rpms/nagios-plugins-bdii
rpms/icaro
rpms/legofy
rpms/pg_view
rpms/zeek
rpms/gnome-video-arcade
rpms/pygtksourceview
rpms/python-etcd
rpms/libldm
rpms/golang-github-mattetti-filebuffer
rpms/golang-github-vividcortex-mysqlerr
rpms/golang-xorm
rpms/fbf-mukti-fonts
rpms/uniol-fonts
rpms/pg_auto_failover
rpms/fontopia
rpms/gball
rpms/gnudos
rpms/gosnake
rpms/layla-fonts
rpms/shaman
rpms/tcalc
rpms/beefy-miracle-backgrounds
rpms/constantine-backgrounds
rpms/desktop-backgrounds
rpms/echo-artist
rpms/f21-backgrounds
rpms/f22-backgrounds
rpms/gears-backgrounds
rpms/goddard-backgrounds
rpms/gtk-murrine-engine
rpms/heisenbug-backgrounds
rpms/laughlin-backgrounds
rpms/leonidas-backgrounds
rpms/libass
rpms/libmatroska
rpms/lovelock-backgrounds
rpms/neon-backgrounds
rpms/notification-daemon-engine-nodoka
rpms/ruby-icon-artist
rpms/schroedinger-cat-backgrounds
rpms/solar-backgrounds
rpms/spherical-cow-backgrounds
rpms/verne-backgrounds
rpms/retrace-client
rpms/dosbox-staging
rpms/xtrkcad
rpms/fwknop
rpms/phplogcon
rpms/cpptoml
rpms/simple-mail
rpms/golang-github-bruth-assert
rpms/golang-github-fatih-set
rpms/golang-github-tg-gosortmap
rpms/golang-github-xlab-handysort
rpms/golang-vbom-util
rpms/bugyou
rpms/bugyou_plugins
rpms/python-fedimg
rpms/python-fmn-rules
rpms/python-fmn-web
rpms/python-libpagure
rpms/python-tahrir
rpms/python-tahrir-api
rpms/rust-erased-serde
rpms/rust-netmap_sys
rpms/rust-pcap
rpms/rust-pnet_base
rpms/rust-pnet_sys
rpms/copr-messaging
rpms/mdk
rpms/ndisc6
rpms/heat-cfntools
rpms/fedwatch
rpms/rubygem-whiskey_disk
rpms/kstart
rpms/perl-Authen-Krb5
rpms/perl-Catalyst-Model-LDAP
rpms/perl-Catalyst-Plugin-StackTrace
rpms/perl-Catalyst-View-JSON
rpms/perl-HTML-Prototype
rpms/perl-Task-Weaken
rpms/remctl
rpms/createrepo_c
rpms/librepo
rpms/ibus-bogo
rpms/ibus-unikey
rpms/puzzle-master
rpms/emacs-evil
rpms/emacs-goto-chg
rpms/emacs-undo-tree
rpms/ghc-crypto-cipher-types
rpms/jsoncpp
rpms/perl-Net-Lite-FTP
rpms/rachota
container/container-engine
container/docker
container/etcd
container/flannel
rpms/ghc-X11-xft
--
_______________________________________________
devel-announce mailing list -- devel-announce(a)lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedora...
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
7 months, 1 week
Missing notifications
by Mikel Olasagasti
Hi,
I'm not receiving mails from some updates like koschei build status or
src.f.o commits.
Has something changed in this regard or is it the mail service having
issues again?
Kind regards,
Mikel
7 months, 1 week
xmlParseMemory() and xmlParseMemory gone rawhide?
by Steve Dickson
Hello,
When building an nfs-utils rpm in rawhide
I get the following errors:
xml.c: In function ‘junction_parse_xml_buf’:
xml.c:293:15: error: implicit declaration of function ‘xmlParseMemory’
[-Werror=implicit-function-declaration]
293 | tmp = xmlParseMemory(buf, (int)len);
| ^~~~~~~~~~~~~~
xml.c:293:13: error: assignment to ‘xmlDocPtr’ {aka ‘struct _xmlDoc *’}
from ‘int’ makes pointer from integer without a cast
[-Werror=int-conversion]
293 | tmp = xmlParseMemory(buf, (int)len);
| ^
xml.c: In function ‘junction_xml_write’:
xml.c:390:9: error: ‘xmlIndentTreeOutput’ undeclared (first use in this
function)
390 | xmlIndentTreeOutput = 1;
| ^~~~~~~~~~~~~~~~~~~
xml.c:390:9: note: each undeclared identifier is reported only once for
each function it appears in
cc1: some warnings being treated as errors
Now I can build the upstream nfs-utils in rawhide, f39 and f38
without a problem... It is only when I try to build a rawhide
rpm that these errors happen. Any ideas??
tia,
steved.
7 months, 1 week
Fedora rawhide compose report: 20231119.n.0 changes
by Fedora Rawhide Report
OLD: Fedora-Rawhide-20231118.n.0
NEW: Fedora-Rawhide-20231119.n.0
===== SUMMARY =====
Added images: 1
Dropped images: 3
Added packages: 5
Dropped packages: 0
Upgraded packages: 24
Downgraded packages: 0
Size of added packages: 14.14 MiB
Size of dropped packages: 0 B
Size of upgraded packages: 716.88 MiB
Size of downgraded packages: 0 B
Size change of upgraded packages: 2.00 MiB
Size change of downgraded packages: 0 B
===== ADDED IMAGES =====
Image: Silverblue dvd-ostree x86_64
Path: Silverblue/x86_64/iso/Fedora-Silverblue-ostree-x86_64-Rawhide-20231119.n.0.iso
===== DROPPED IMAGES =====
Image: Silverblue dvd-ostree ppc64le
Path: Silverblue/ppc64le/iso/Fedora-Silverblue-ostree-ppc64le-Rawhide-20231118.n.0.iso
Image: Kinoite dvd-ostree ppc64le
Path: Kinoite/ppc64le/iso/Fedora-Kinoite-ostree-ppc64le-Rawhide-20231118.n.0.iso
Image: Silverblue dvd-ostree aarch64
Path: Silverblue/aarch64/iso/Fedora-Silverblue-ostree-aarch64-Rawhide-20231118.n.0.iso
===== ADDED PACKAGES =====
Package: gotcha-1.0.5-1.fc40
Summary: A library for wrapping function calls to shared libraries
RPMs: gotcha gotcha-devel
Size: 300.96 KiB
Package: isa-l-2.30.0-1.fc40
Summary: Intel(R) Intelligent Storage Acceleration Library
RPMs: isa-l isa-l-devel isa-l-tools
Size: 581.62 KiB
Package: rocalution-5.7.1-2.fc40
Summary: Next generation library for iterative sparse solvers for ROCm platform
RPMs: rocalution rocalution-devel
Size: 11.65 MiB
Package: rust-enum-display-derive-0.1.1-1.fc40
Summary: Display trait's custom derive for simple enums
RPMs: rust-enum-display-derive+default-devel rust-enum-display-derive-devel
Size: 22.79 KiB
Package: xmake-2.8.5-1.fc40
Summary: A cross-platform build utility based on Lua
RPMs: xmake xmake-data
Size: 1.61 MiB
===== DROPPED PACKAGES =====
===== UPGRADED PACKAGES =====
Package: ardour6-6.9.0-19.fc40
Old package: ardour6-6.9.0-17.fc40
Summary: Digital Audio Workstation
RPMs: ardour6
Size: 53.21 MiB
Size change: 19.27 KiB
Changelog:
* Fri Nov 17 2023 Nils Philippsen <nils(a)tiptoe.de> - 6.9.0-18
- Fix failure to build with libxml2 version 2.12
Package: ardour7-7.5.0-7.fc40
Old package: ardour7-7.5.0-4.fc40
Summary: Digital Audio Workstation
RPMs: ardour7
Size: 61.01 MiB
Size change: -6.37 KiB
Changelog:
* Sun Oct 15 2023 Nils Philippsen <nils(a)tiptoe.de> - 7.5.0-5
- Specify license in SPDX format
* Fri Nov 17 2023 Nils Philippsen <nils(a)tiptoe.de> - 7.5.0-6
- Fix failure to build with libxml2 version 2.12
Package: calibre-7.0.0-1.fc40
Old package: calibre-6.29.0-1.fc40
Summary: E-book converter and library manager
RPMs: calibre
Size: 51.89 MiB
Size change: 452.48 KiB
Changelog:
* Sat Nov 18 2023 Kevin Fenzi <kevin(a)scrye.com> - 7.0.0-1
- Update to 7.0.0. Fixes rhbz#2250241
Package: fractal-5~rc1-1.fc40
Old package: fractal-5~beta2-1.fc40
Summary: Matrix group messaging app
RPMs: fractal
Size: 61.36 MiB
Size change: 947.52 KiB
Changelog:
* Fri Nov 17 2023 Pete Walter <pwalter(a)fedoraproject.org> - 5~rc1-1
- Update to 5.rc1
Package: gearmand-1.1.21-1.fc40
Old package: gearmand-1.1.20-4.fc39
Summary: A distributed job system
RPMs: gearmand libgearman libgearman-devel
Size: 2.53 MiB
Size change: -10.60 KiB
Changelog:
* Wed Aug 09 2023 U2FsdGVkX1 <U2FsdGVkX1(a)gmail.com> - 1.1.20-5
- Add riscv64 support
* Sat Nov 18 2023 Robin Lee <cheeselee(a)fedoraproject.org> - 1.1.21-1
- Update to 1.1.21 (RHBZ#2248643)
Package: kf5-kio-5.111.0-2.fc40
Old package: kf5-kio-5.111.0-1.fc40
Summary: KDE Frameworks 5 Tier 3 solution for filesystem abstraction
RPMs: kf5-kio kf5-kio-core kf5-kio-core-libs kf5-kio-devel kf5-kio-doc kf5-kio-file-widgets kf5-kio-gui kf5-kio-ntlm kf5-kio-widgets kf5-kio-widgets-libs
Size: 16.26 MiB
Size change: 6.44 KiB
Changelog:
* Sat Nov 18 2023 Alessandro Astone <ales.astone(a)gmail.com> - 5.111.0-2
- kf6 compatibility support
Package: kf5-ktexteditor-5.111.0-2.fc40
Old package: kf5-ktexteditor-5.111.0-1.fc40
Summary: KDE Frameworks 5 Tier 3 with advanced embeddable text editor
RPMs: kf5-ktexteditor kf5-ktexteditor-devel
Size: 13.78 MiB
Size change: -11.97 KiB
Changelog:
* Sat Nov 18 2023 Alessandro Astone <ales.astone(a)gmail.com> - 5.111.0-2
- kf6 compatibility support
Package: kf6-kirigami2-addons-1:0.11.76-3.fc40
Old package: kf6-kirigami2-addons-1:0.11.76-2.fc40
Summary: Convergent visual components ("widgets") for Kirigami-based applications
RPMs: kf6-kirigami2-addons kf6-kirigami2-addons-dateandtime kf6-kirigami2-addons-treeview
Size: 2.43 MiB
Size change: 949 B
Changelog:
* Sun Nov 19 2023 Alessandro Astone <ales.astone(a)gmail.com> - 1:0.11.76-3
- Backport translation files rename to not conflict with qt5 build
Package: kubernetes-1.28.4-1.fc40
Old package: kubernetes-1.28.3-1.fc40
Summary: Open Source Production-Grade Container Scheduling And Management Platform
RPMs: kubernetes kubernetes-client kubernetes-kubeadm kubernetes-master kubernetes-node
Size: 406.33 MiB
Size change: 13.20 KiB
Changelog:
* Sun Oct 29 2023 blinxen <h-k-81(a)hotmail.com> - 1.28.3-2
- Use shell completion macro to specify completion directory This makes
sure that the shell completion scripts are always installed in the
correct directory.
* Sun Oct 29 2023 Bradley G Smith <bradley.g.smith(a)gmail.com> - 1.28.3-3
- Update F37 and k8s 1.25 information
* Sat Nov 18 2023 Bradley G Smith <bradley.g.smith(a)gmail.com> - 1.28.4-1
- Update to Kubernetes v.1.28.4
Package: kuserfeedback-1.3.0-2.fc40
Old package: kuserfeedback-1.3.0-1.fc40
Summary: Framework for collecting user feedback for apps via telemetry and surveys
RPMs: kuserfeedback kuserfeedback-console kuserfeedback-devel
Size: 2.29 MiB
Size change: -215.51 KiB
Changelog:
* Sat Nov 18 2023 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.0-2
- kf6 compatibility support
Package: legofy-1.0.0-30.20231118git0cadceb.fc40
Old package: legofy-1.0.0-24.fc39
Summary: Make images look as if they are made out of 1x1 LEGO blocks
RPMs: legofy
Size: 88.73 KiB
Size change: 19.65 KiB
Changelog:
* Sat Nov 18 2023 Sandro <devel(a)penguinpee.nl> - 1.0.0-27
- Update summary (follow upstream)
- Re-align description
* Sat Nov 18 2023 Sandro <devel(a)penguinpee.nl> - 1.0.0-28
- Use forge macros
- Pull from master for additional fixes and LICENSE file
- Drop unused (and now obsolete) patch
* Sat Nov 18 2023 Sandro <devel(a)penguinpee.nl> - 1.0.0-29
- Use %pyproject macros
- Fetch new source tarball
- Drop BRs (handled by macros now)
- Drop %license (already included)
* Sat Nov 18 2023 Sandro <devel(a)penguinpee.nl> - 1.0.0-30
- Migrate to SPDX license (no change)
Package: moarvm-2023.10-1.fc40
Old package: moarvm-2023.06-1.fc39
Summary: Metamodel On A Runtime Virtual Machine
RPMs: moarvm moarvm-devel
Size: 10.12 MiB
Size change: 16.81 KiB
Package: mysql-selinux-1.0.10-1.fc40
Old package: mysql-selinux-1.0.9-1.fc40
Summary: SELinux policy modules for MySQL and MariaDB packages
RPMs: mysql-selinux
Size: 35.50 KiB
Size change: 226 B
Changelog:
* Sat Nov 18 2023 Packit <hello(a)packit.dev> - 1.0.10-1
- 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705 (Michal Schorm)
- Resolves rhbz#2250424
Package: nanopb-0.4.8-1.fc40
Old package: nanopb-0.4.7-4.fc40
Summary: A small code-size Protocol Buffers implementation in ansi C
RPMs: nanopb nanopb-devel nanopb-python3
Size: 712.43 KiB
Size change: 63.30 KiB
Changelog:
* Sat Nov 18 2023 topazus <topazus(a)outlook.com> - 0.4.8-1
- update to 0.4.8
Package: nqp-2023.10-1.fc40
Old package: nqp-2023.06-1.fc39
Summary: Perl 6 compiler implementation that runs on MoarVM
RPMs: nqp
Size: 2.74 MiB
Size change: 2.15 KiB
Package: perl-App-ccdiff-0.33-2.fc40
Old package: perl-App-ccdiff-0.33-1.fc40
Summary: Colored Character diff
RPMs: perl-App-ccdiff
Size: 42.85 KiB
Size change: 286 B
Changelog:
* Sat Nov 18 2023 Richard Fearn <richardfearn(a)gmail.com> - 0.33-2
- Add dependencies on Algorithm::Diff / Algorithm::Diff::XS
Package: python-bcrypt-4.0.1-6.fc40
Old package: python-bcrypt-4.0.1-5.fc39
Summary: Modern password hashing for your software and your servers
RPMs: python3-bcrypt
Size: 986.98 KiB
Size change: 76.59 KiB
Changelog:
* Sat Nov 18 2023 Kevin Fenzi <kevin(a)scrye.com> - 4.0.1-6
- Add patch to use current pyo version. Fixes rhbz#2249378
Package: python-jsonschema-path-0.3.2-1.fc40
Old package: python-jsonschema-path-0.3.1-2.fc40
Summary: Object-oriented JSONSchema
RPMs: python3-jsonschema-path
Size: 44.90 KiB
Size change: 69 B
Changelog:
* Sat Nov 18 2023 Mattia Verga <mattia.verga(a)proton.me> - 0.3.2-1
- Update to 0.3.2
Package: python-jsonschema-spec-0.2.4-2.fc40
Old package: python-jsonschema-spec-0.2.4-1.fc40
Summary: JSONSchema Spec with object-oriented paths
RPMs: python3-jsonschema-spec
Size: 45.49 KiB
Size change: 233 B
Changelog:
* Sat Nov 18 2023 Mattia Verga <mattia.verga(a)proton.me> - 0.2.4-2
- Temporary workaround for referencing 0.31
Package: python-referencing-0.31.0-1.fc40
Old package: python-referencing-0.30.2-1.fc40
Summary: An implementation-agnostic implementation of JSON reference resolution
RPMs: python3-referencing
Size: 81.26 KiB
Size change: 1.05 KiB
Changelog:
* Wed Nov 15 2023 Joel Capitao <jcapitao(a)redhat.com> - 0.31.0-1
- Update to 0.31.0 (close RHBZ#2249681)
Package: rakudo-2023.10-1.fc40
Old package: rakudo-2023.06-1.fc39
Summary: Raku on MoarVM, JVM, and JS
RPMs: rakudo
Size: 24.65 MiB
Size change: 577.71 KiB
Changelog:
* Sat Nov 18 2023 topazus <topazus(a)outlook.com> - 2023.10-1
- update to 2023.10
Package: rubygem-nokogiri-1.15.5-1.fc40
Old package: rubygem-nokogiri-1.15.4-1.fc40
Summary: An HTML, XML, SAX, and Reader parser
RPMs: rubygem-nokogiri rubygem-nokogiri-doc
Size: 4.15 MiB
Size change: 34.73 KiB
Changelog:
* Sat Nov 18 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.15.5-1
- 1.15.5
- Backport upstream patch for libxml2 2.12.0 error handling change
Package: sipp-3.7.2-2.fc40
Old package: sipp-3.7.1-2.fc39
Summary: SIP test tool / traffic generator
RPMs: sipp
Size: 1.16 MiB
Size change: -4.15 KiB
Changelog:
* Sat Nov 18 2023 Peter Lemenkov <lemenkov(a)gmail.com> - 3.7.2-1
- SIPp ver. 3.7.2
* Sat Nov 18 2023 Peter Lemenkov <lemenkov(a)gmail.com> - 3.7.2-2
- Upload sources
Package: softnet-stat-2.1.0-1.fc40
Old package: softnet-stat-2.0.0-4.fc39
Summary: Parse the `/proc/net/softnet_stat` file into something more readable
RPMs: softnet-stat
Size: 1008.80 KiB
Size change: 61.69 KiB
Changelog:
* Sat Nov 18 2023 Qiyu Yan <yanqiyu(a)fedoraproject.org> - 2.1.0-1
- Update to release 2.1.0
===== DOWNGRADED PACKAGES =====
7 months, 1 week
Re: Inactive packages removed from packager group
by Kevin Kofler
Kevin Fenzi wrote:
> rpms/kde-plasma-ihatethecashew
This is a Plasma 4 package and completely useless under Plasma 5 or
6. (There is not even a "cashew" to remove in current Plasma 5.) I am
surprised this package even builds at all, we are probably shipping too much
of the old kdebase-workspace 4. This package can just be retired.
Kevin Kofler
7 months, 1 week
Groff: Revert the mapping of special characters for UTF-8 devices
introduced in 1.23.0 version
by Lukas Javorsky
Hi,
I'm writing this email to the Fedora community to give you a heads-up about
what we are going to do with the new change introduced to the groff 1.23.0
version [1].
Upstream of groff stopped mapping the special characters (like hyphens,
tilde, ...) to the Basic Latin codes like it previously did.
This change was quite controversial in the Debian community as the
upstreams/maintainers of the man-pages that use these characters in a "not
correct way" wanted this mapping back in the system. It leads to a 1+ hour
read-long email thread [2] with discussions in other threads as well.
The final conclusion in Debian was to revert this change and leave the old
mapping in place as the maintainer of groff received a ton of emails [3]
and didn't want to spend all of his capacity on this issue.
After reading through all of the emails, we've decided to align with the
Debian decision and revert this change, thereby retaining the current
mapping. The main reason for this was to eliminate a bunch of bugs reported
to the groff/man-pages packages about broken manual pages. Our capacity
also has its limits, and we need to spend our resources wisely, and this
decision was based on that. The reproducer and the issue description were
reported in Bugzilla [4], so please read through it, if you are interested.
[1] https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00001.html
[2] https://lwn.net/Articles/947941/
[3] https://lwn.net/ml/debian-devel/ZS0aV4XyJH+O1o%2Fc@riva.ucam.org/
[4] https://bugzilla.redhat.com/show_bug.cgi?id=2224123
--
S pozdravom/ Best regards
Lukáš Javorský
Software Engineer, Core service - Databases
Red Hat <https://www.redhat.com>
Purkyňova 115 (TPB-C)
612 00 Brno - Královo Pole
ljavorsk(a)redhat.com
<https://www.redhat.com>
7 months, 1 week
Fedora rawhide compose report: 20231118.n.0 changes
by Fedora Rawhide Report
OLD: Fedora-Rawhide-20231117.n.1
NEW: Fedora-Rawhide-20231118.n.0
===== SUMMARY =====
Added images: 1
Dropped images: 5
Added packages: 0
Dropped packages: 7
Upgraded packages: 30
Downgraded packages: 0
Size of added packages: 0 B
Size of dropped packages: 276.01 MiB
Size of upgraded packages: 1.01 GiB
Size of downgraded packages: 0 B
Size change of upgraded packages: 7.24 MiB
Size change of downgraded packages: 0 B
===== ADDED IMAGES =====
Image: Kinoite dvd-ostree ppc64le
Path: Kinoite/ppc64le/iso/Fedora-Kinoite-ostree-ppc64le-Rawhide-20231118.n.0.iso
===== DROPPED IMAGES =====
Image: LXQt live aarch64
Path: Spins/aarch64/iso/Fedora-LXQt-Live-aarch64-Rawhide-20231117.n.1.iso
Image: Silverblue dvd-ostree x86_64
Path: Silverblue/x86_64/iso/Fedora-Silverblue-ostree-x86_64-Rawhide-20231117.n.1.iso
Image: Kinoite dvd-ostree x86_64
Path: Kinoite/x86_64/iso/Fedora-Kinoite-ostree-x86_64-Rawhide-20231117.n.1.iso
Image: Workstation live aarch64
Path: Workstation/aarch64/iso/Fedora-Workstation-Live-aarch64-Rawhide-20231117.n.1.iso
Image: Onyx dvd-ostree x86_64
Path: Onyx/x86_64/iso/Fedora-Onyx-ostree-x86_64-Rawhide-20231117.n.1.iso
===== ADDED PACKAGES =====
===== DROPPED PACKAGES =====
Package: belle-sip-5.2.45-2.fc39
Summary: Linphone SIP stack
RPMs: belle-sip belle-sip-devel
Size: 3.82 MiB
Package: clang11-11.1.0-0.12.rc2.fc39
Summary: A C language family front-end for LLVM
RPMs: clang11-devel clang11-libs clang11-resource-filesystem
Size: 122.82 MiB
Package: clang13-13.0.1-4.fc39
Summary: A C language family front-end for LLVM
RPMs: clang13-devel clang13-libs clang13-resource-filesystem
Size: 129.80 MiB
Package: golang-gioui-0-13.20201225git18d4dbf.fc39
Summary: Immediate mode GUI programs in Go
RPMs: golang-gioui golang-gioui-devel
Size: 9.35 MiB
Package: lld13-13.0.1-4.fc39
Summary: The LLVM Linker
RPMs: lld13-devel lld13-libs
Size: 8.72 MiB
Package: ortp-3:5.2.45-2.fc39
Summary: A C library implementing the RTP protocol (RFC3550)
RPMs: ortp ortp-devel
Size: 870.63 KiB
Package: scalacheck-1.17.0-3.fc39
Summary: Property-based testing for Scala
RPMs: scalacheck
Size: 671.96 KiB
===== UPGRADED PACKAGES =====
Package: PyQt-builder-1.15.3-1.fc40
Old package: PyQt-builder-1.15.2-1.fc39
Summary: The PEP 517 compliant PyQt build system
RPMs: PyQt-builder
Size: 117.88 KiB
Size change: 235 B
Changelog:
* Sat Nov 18 2023 Scott Talbert <swt(a)techie.net> - 1.15.3-1
- Update to new upstream release 1.15.3 (#2244187)
Package: appstream-1.0.0-1.fc40
Old package: appstream-1.0.0~git20231102.d88ed03-1.fc40
Summary: Utilities to generate, maintain and access the AppStream database
RPMs: appstream appstream-compose appstream-compose-devel appstream-devel appstream-qt appstream-qt-devel
Size: 15.07 MiB
Size change: 6.62 MiB
Changelog:
* Fri Nov 17 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 1.0.0-1
- Update to 1.0.0 final
Package: appstream-generator-0.9.1-1.fc40
Old package: appstream-generator-0.9.1~git20231008.4d2ebc3-1.fc40
Summary: Fast AppStream metadata generator
RPMs: appstream-generator
Size: 2.15 MiB
Size change: 2.51 KiB
Changelog:
* Fri Nov 17 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 0.9.1-1
- Update to 0.9.1 final
Package: awscli2-2.13.36-1.fc40
Old package: awscli2-2.13.30-1.fc40
Summary: Universal Command Line Environment for AWS, version 2
RPMs: awscli2
Size: 11.98 MiB
Size change: 57.17 KiB
Changelog:
* Wed Nov 15 2023 Packit <hello(a)packit.dev> - 2.13.36-1
- [packit] 2.13.36 upstream release
- Resolves rhbz#2247595
Package: bubblewrap-0.8.0-1.fc40
Old package: bubblewrap-0.7.0-2.fc39
Summary: Core execution tool for unprivileged containers
RPMs: bubblewrap
Size: 243.95 KiB
Size change: 2.86 KiB
Changelog:
* Thu Nov 16 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.8.0-1
- Update to 0.8.0 (#2173820)
Package: ddclient-3.11.1-1.fc40
Old package: ddclient-3.10.0-1.fc40
Summary: Client to update dynamic DNS host entries
RPMs: ddclient
Size: 86.24 KiB
Size change: 4.00 KiB
Changelog:
* Sat Nov 18 2023 Scott Talbert <swt(a)techie.net> - 3.11.1-1
- Update to new upstream release 3.11.1 (#2244514)
Package: debugedit-5.0-11.fc40
Old package: debugedit-5.0-10.fc39
Summary: Tools for debuginfo creation
RPMs: debugedit
Size: 314.79 KiB
Size change: -556 B
Changelog:
* Fri Nov 17 2023 Mark Wirlaard <mjw(a)fedoraproject.org> - 5.0-11
- migrated to SPDX license
Package: glab-1.35.0-1.fc40
Old package: glab-1.34.0-1.fc40
Summary: A GitLab CLI tool bringing GitLab to your command line
RPMs: glab golang-gitlab-org-cli-devel
Size: 30.39 MiB
Size change: 835.05 KiB
Changelog:
* Fri Nov 17 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.35.0-1
- Update to 1.35.0 - Closes rhbz#2248170
Package: kernel-6.7.0-0.rc1.20231117git7475e51b8796.19.fc40
Old package: kernel-6.7.0-0.rc1.20231115gitc42d9eeef8e5.18.fc40
Summary: The Linux kernel
RPMs: kernel kernel-core kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-devel-matched kernel-debug-modules kernel-debug-modules-core kernel-debug-modules-extra kernel-debug-modules-internal kernel-debug-uki-virt kernel-devel kernel-devel-matched kernel-doc kernel-modules kernel-modules-core kernel-modules-extra kernel-modules-internal kernel-uki-virt
Size: 960.18 MiB
Size change: -145.70 KiB
Changelog:
* Fri Nov 17 2023 Fedora Kernel Team <kernel-team(a)fedoraproject.org> [6.7.0-0.rc1.7475e51b8796.19]
- Linux v6.7.0-0.rc1.7475e51b8796
Package: mysql-selinux-1.0.9-1.fc40
Old package: mysql-selinux-1.0.7-2.fc40
Summary: SELinux policy modules for MySQL and MariaDB packages
RPMs: mysql-selinux
Size: 35.28 KiB
Size change: 406 B
Changelog:
* Fri Nov 17 2023 Packit <hello(a)packit.dev> - 1.0.9-1
- Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
- Resolves rhbz#2250360
Package: python-awscrt-0.19.13-1.fc40
Old package: python-awscrt-0.19.6-1.fc40
Summary: Python bindings for the AWS Common Runtime
RPMs: python3-awscrt
Size: 2.96 MiB
Size change: 38.33 KiB
Changelog:
* Fri Nov 17 2023 Packit <hello(a)packit.dev> - 0.19.13-1
- [packit] 0.19.13 upstream release
- Resolves rhbz#2247105
Package: python-dns-lexicon-3.17.0-1.fc40
Old package: python-dns-lexicon-3.15.1-1.fc40
Summary: Manipulate DNS records on various DNS providers in a standardized/agnostic way
RPMs: python3-dns-lexicon python3-dns-lexicon+gransy python3-dns-lexicon+localzone python3-dns-lexicon+oci python3-dns-lexicon+route53
Dropped RPMs: python3-dns-lexicon+ddns python3-dns-lexicon+duckdns
Size: 477.59 KiB
Size change: -21.29 KiB
Changelog:
* Thu Nov 16 2023 Nick Bebout <nb(a)fedoraproject.org> - 3.17.0-1
- Update to 3.17.0
Package: python-google-cloud-asset-3.20.1-2.fc40
Old package: python-google-cloud-asset-3.20.0-1.fc40
Summary: Python Client for Google Cloud App Engine Admin
RPMs: python3-google-cloud-asset
Size: 259.12 KiB
Size change: -1.66 KiB
Changelog:
* Fri Nov 17 2023 Major Hayden <major(a)redhat.com> - 3.20.1-1
- Update to 3.20.1 rhbz#2249864
* Fri Nov 17 2023 Major Hayden <major(a)redhat.com> - 3.20.1-2
- Add sources for 3.20.1 rhbz#2249864
Package: python-google-cloud-automl-2.11.4-1.fc40
Old package: python-google-cloud-automl-2.11.3-1.fc40
Summary: Python Client for Google Cloud AutoML API
RPMs: python3-google-cloud-automl
Size: 311.89 KiB
Size change: -1.60 KiB
Changelog:
* Fri Nov 17 2023 Major Hayden <major(a)redhat.com> - 2.11.4-1
- Update to 2.11.4 rhbz#2249865
Package: python-google-cloud-container-2.34.0-1.fc40
Old package: python-google-cloud-container-2.33.0-1.fc40
Summary: Python Client for Google Cloud Kubernetes Engine API
RPMs: python3-google-cloud-container
Size: 229.66 KiB
Size change: 572 B
Changelog:
* Fri Nov 17 2023 Packit <hello(a)packit.dev> - 2.34.0-1
- [packit] 2.34.0 upstream release
- Resolves rhbz#2250204
Package: python-param-2.0.1-1.fc40
Old package: python-param-1.13.0-9.fc39
Summary: Make your Python code clearer and more reliable by declaring Parameters
RPMs: python3-param
Dropped RPMs: python-param-doc
Size: 260.13 KiB
Size change: -181.86 KiB
Changelog:
* Fri Nov 03 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.0.0-1
- Update to 2.0.0 (close RHBZ#2245873)
* Fri Nov 03 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.0.0-2
- Assume we will never build the documentation
* Fri Nov 03 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.0.0-3
- Skip a failing test on s390x
* Mon Nov 06 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.0.0-4
- Improved patch for ���doc��� installed in site-packages
* Thu Nov 09 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.0.1-1
- Update to 2.0.1
Package: python-pyqt5-sip-12.13.0-1.fc40
Old package: python-pyqt5-sip-12.12.2-1.fc39
Summary: The sip module support for PyQt5
RPMs: python3-pyqt5-sip
Size: 363.04 KiB
Size change: 713 B
Changelog:
* Sat Nov 18 2023 Scott Talbert <swt(a)techie.net> - 12.13.0-1
- Update to new upstream release 12.13.0 (#2244185)
Package: python-pytest-xdist-3.4.0-1.fc40
Old package: python-pytest-xdist-3.3.1-3.fc39
Summary: pytest plugin for distributed testing and loop-on-failing modes
RPMs: python3-pytest-xdist python3-pytest-xdist+psutil python3-pytest-xdist+setproctitle
Size: 121.95 KiB
Size change: 1.61 KiB
Changelog:
* Sat Nov 18 2023 Scott Talbert <swt(a)techie.net> - 3.4.0-1
- Update to new upstream release 3.4.0 (#2249319)
Package: qatlib-23.11.0-1.fc40
Old package: qatlib-23.08.0-1.fc40
Summary: Intel QuickAssist user space library
RPMs: qatlib qatlib-devel qatlib-service qatlib-tests
Size: 1.85 MiB
Size change: 40.00 KiB
Changelog:
* Fri Nov 17 2023 Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> - 23.11.0-1
- Update to qatlib 23.11.0
Package: rocm-rpm-macros-1.0-7.fc40
Old package: rocm-rpm-macros-1.0-6.fc40
Summary: ROCm RPM macros
RPMs: rocm-rpm-macros rocm-rpm-macros-modules
Size: 31.95 KiB
Size change: 531 B
Changelog:
* Fri Nov 17 2023 Jeremy Newton <alexjnewt at hotmail dot com> 1.0-7
- Add more directory ownership
Package: rust-chrono-tz-0.8.4-1.fc40
Old package: rust-chrono-tz-0.8.3-1.fc40
Summary: TimeZone implementations for chrono from the IANA database
RPMs: rust-chrono-tz+arbitrary-devel rust-chrono-tz+case-insensitive-devel rust-chrono-tz+default-devel rust-chrono-tz+filter-by-regex-devel rust-chrono-tz+serde-devel rust-chrono-tz+std-devel rust-chrono-tz-devel
Dropped RPMs: rust-chrono-tz+uncased-devel
Size: 564.88 KiB
Size change: -6.24 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.4-1
- Update to version 0.8.4; Fixes RHBZ#2246959
Package: rust-chrono-tz-build-0.2.1-1.fc40
Old package: rust-chrono-tz-build-0.2.0-1.fc40
Summary: Internal build script for chrono-tz
RPMs: rust-chrono-tz-build+case-insensitive-devel rust-chrono-tz-build+default-devel rust-chrono-tz-build+filter-by-regex-devel rust-chrono-tz-build+regex-devel rust-chrono-tz-build+uncased-devel rust-chrono-tz-build-devel
Size: 55.33 KiB
Size change: 1.21 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.1-1
- Update to version 0.2.1; Fixes RHBZ#2246960
Package: rust-ecdsa-0.16.9-1.fc40
Old package: rust-ecdsa-0.16.8-1.fc39
Summary: Pure Rust implementation of the Elliptic Curve Digital Signature Algorithm
RPMs: rust-ecdsa+alloc-devel rust-ecdsa+arithmetic-devel rust-ecdsa+default-devel rust-ecdsa+der-devel rust-ecdsa+dev-devel rust-ecdsa+digest-devel rust-ecdsa+hazmat-devel rust-ecdsa+pem-devel rust-ecdsa+pkcs8-devel rust-ecdsa+rfc6979-devel rust-ecdsa+serde-devel rust-ecdsa+serdect-devel rust-ecdsa+sha2-devel rust-ecdsa+signing-devel rust-ecdsa+spki-devel rust-ecdsa+std-devel rust-ecdsa+verifying-devel rust-ecdsa-devel
Size: 169.36 KiB
Size change: 3.15 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.16.9-1
- Update to version 0.16.9; Fixes RHBZ#2250112
Package: rust-notify-rust-4.10.0-1.fc40
Old package: rust-notify-rust-4.9.0-1.fc40
Summary: Show desktop notifications
RPMs: rust-notify-rust+async-devel rust-notify-rust+d-devel rust-notify-rust+dbus-devel rust-notify-rust+debug_namespace-devel rust-notify-rust+default-devel rust-notify-rust+env_logger-devel rust-notify-rust+image-devel rust-notify-rust+images-devel rust-notify-rust+lazy_static-devel rust-notify-rust+serde-devel rust-notify-rust+z-devel rust-notify-rust+zbus-devel rust-notify-rust-devel
Size: 154.23 KiB
Size change: -212 B
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 4.10.0-1
- Update to version 4.10.0; Fixes RHBZ#2250166
Package: rust-openssl-0.10.59-1.fc40
Old package: rust-openssl-0.10.57-1.fc40
Summary: OpenSSL bindings
RPMs: rust-openssl+bindgen-devel rust-openssl+default-devel rust-openssl+v101-devel rust-openssl+v102-devel rust-openssl+v110-devel rust-openssl+v111-devel rust-openssl-devel
Size: 292.76 KiB
Size change: 1.06 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.59-1
- Update to version 0.10.59; Fixes RHBZ#2247539
Package: rust-openssl-sys-0.9.95-1.fc40
Old package: rust-openssl-sys-0.9.93-1.fc40
Summary: FFI bindings to OpenSSL
RPMs: rust-openssl-sys+bindgen-devel rust-openssl-sys+default-devel rust-openssl-sys-devel
Size: 106.01 KiB
Size change: 621 B
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.9.95-1
- Update to version 0.9.95; Fixes RHBZ#2247540
Package: rust-quinn-proto-0.10.6-1.fc40
Old package: rust-quinn-proto-0.10.5-1.fc40
Summary: State machine for the QUIC transport protocol
RPMs: rust-quinn-proto+arbitrary-devel rust-quinn-proto+default-devel rust-quinn-proto+log-devel rust-quinn-proto+native-certs-devel rust-quinn-proto+ring-devel rust-quinn-proto+rustls-devel rust-quinn-proto+rustls-native-certs-devel rust-quinn-proto+tls-rustls-devel rust-quinn-proto-devel
Size: 218.45 KiB
Size change: 1.10 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.6-1
- Update to version 0.10.6; Fixes RHBZ#2248491
Package: rust-rust_decimal-1.33.1-1.fc40
Old package: rust-rust_decimal-1.32.0-1.fc40
Summary: Decimal number implementation written in pure Rust
RPMs: rust-rust_decimal+bytes-devel rust-rust_decimal+c-repr-devel rust-rust_decimal+default-devel rust-rust_decimal+legacy-ops-devel rust-rust_decimal+maths-devel rust-rust_decimal+maths-nopanic-devel rust-rust_decimal+proptest-devel rust-rust_decimal+rand-devel rust-rust_decimal+rkyv-devel rust-rust_decimal+rkyv-safe-devel rust-rust_decimal+serde-arbitrary-precision-devel rust-rust_decimal+serde-bincode-devel rust-rust_decimal+serde-devel rust-rust_decimal+serde-float-devel rust-rust_decimal+serde-str-devel rust-rust_decimal+serde-with-arbitrary-precision-devel rust-rust_decimal+serde-with-float-devel rust-rust_decimal+serde-with-str-devel rust-rust_decimal+serde_json-devel rust-rust_decimal+std-devel rust-rust_decimal-devel
Size: 314.93 KiB
Size change: -143 B
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.33.1-1
- Update to version 1.33.1; Fixes RHBZ#2249575
Package: rust-rustls-0.21.9-1.fc40
Old package: rust-rustls-0.21.8-1.fc40
Summary: Modern TLS library written in Rust
RPMs: rust-rustls+dangerous_configuration-devel rust-rustls+default-devel rust-rustls+log-devel rust-rustls+logging-devel rust-rustls+quic-devel rust-rustls+read_buf-devel rust-rustls+rustversion-devel rust-rustls+secret_extraction-devel rust-rustls+tls12-devel rust-rustls-devel
Size: 335.20 KiB
Size change: 1.18 KiB
Changelog:
* Fri Nov 17 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.21.9-1
- Update to version 0.21.9; Fixes RHBZ#2250091
Package: subunit-1.4.4-1.fc40
Old package: subunit-1.4.3-1.fc40
Summary: C bindings for subunit
RPMs: python3-subunit python3-subunit-test subunit subunit-cppunit subunit-cppunit-devel subunit-devel subunit-filters subunit-shell subunit-static
Size: 691.78 KiB
Size change: 2.01 KiB
Changelog:
* Fri Nov 17 2023 Jerry James <loganjerry(a)gmail.com> - 1.4.4-1
- Version 1.4.4
===== DOWNGRADED PACKAGES =====
7 months, 1 week
