Re: Automate your Fedora package maintenance using Packit

2023-11-14 Thread Laura Barcziova
Hi Sergio, we have a full example in our docs: https://packit.dev/docs/fedora-releases-guide#full-example or you can check the configuration of packages that have Packit set up, e.g. https://src.fedoraproject.org/rpms/qownnotes/blob/rawhide/f/.packit.yaml or

[EPEL-devel] Fedora EPEL 7 updates-testing report

2023-11-14 Thread updates
The following Fedora EPEL 7 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-eca2daf875 chromium-119.0.6045.123-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing lemonldap-ng-2.17.2-1.el7

[Bug 2249482] No perl-HTML-Scrubber for EPEL9

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249482 Fedora Update System changed: What|Removed |Added Status|MODIFIED|ON_QA --- Comment #8 from

[EPEL-devel] Fedora EPEL 8 updates-testing report

2023-11-14 Thread updates
The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-6b5f919719 tor-0.4.8.9-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f535d91d21 chromium-119.0.6045.123-1.el8 1

Fedora rawhide compose report: 20231114.n.1 changes

2023-11-14 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20231113.n.0 NEW: Fedora-Rawhide-20231114.n.1 = SUMMARY = Added images:4 Dropped images: 3 Added packages: 13 Dropped packages:0 Upgraded packages: 163 Downgraded packages: 0 Size of added packages: 3.88 MiB Size of dropped packages:0

[Bug 2247795] perl-Time-Out-0.20 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2247795 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.20-1.fc40 |perl-Time-Out-0.20-1.fc40

[Bug 2248029] perl-Time-Out-0.21 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2248029 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.21-1.fc40 |perl-Time-Out-0.21-1.fc40

[Bug 2248029] perl-Time-Out-0.21 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2248029 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.21-1.fc40 |perl-Time-Out-0.21-1.fc40

[Bug 2247795] perl-Time-Out-0.20 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2247795 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.20-1.fc40 |perl-Time-Out-0.20-1.fc40

[Bug 2247795] perl-Time-Out-0.20 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2247795 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.20-1.fc40 |perl-Time-Out-0.20-1.fc40

[Bug 2248029] perl-Time-Out-0.21 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2248029 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.21-1.fc40 |perl-Time-Out-0.21-1.fc40

[Bug 2248029] perl-Time-Out-0.21 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2248029 Fedora Update System changed: What|Removed |Added Status|ON_QA |CLOSED Fixed In

[Bug 2247795] perl-Time-Out-0.20 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2247795 Fedora Update System changed: What|Removed |Added Fixed In Version|perl-Time-Out-0.20-1.fc40 |perl-Time-Out-0.20-1.fc40

Re: Automate your Fedora package maintenance using Packit

2023-11-14 Thread Sérgio Basto
Hi,  have we an example working ?  I'd like had packit for https://src.fedoraproject.org/rpms/libphonenumber  Upstream Release Monitoring report here: https://bugzilla.redhat.com/show_bug.cgi?id=2237976 I'd like have the pull request , koji_build   and bohi update  Thank you, On Fri,

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Florian Weimer
* Michael Catanzaro: > On Tue, Nov 14 2023 at 08:16:39 AM -0500, Christopher > wrote: >> I think for the sake of security, it'd be better if this were on by >> default, and you just had to specify the --nogpgcheck >> For convenience, the error message should probably say "Error: GPG >> check

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Leon Fauster via devel
Am 14.11.23 um 22:04 schrieb Christopher: On Tue, Nov 14, 2023 at 9:30 AM Michael Catanzaro wrote: On Tue, Nov 14 2023 at 08:16:39 AM -0500, Christopher wrote: I think for the sake of security, it'd be better if this were on by default, and you just had to specify the --nogpgcheck For

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Christopher
On Tue, Nov 14, 2023 at 9:30 AM Michael Catanzaro wrote: > > On Tue, Nov 14 2023 at 08:16:39 AM -0500, Christopher > wrote: > > I think for the sake of security, it'd be better if this were on by > > default, and you just had to specify the --nogpgcheck > > For convenience, the error message

[EPEL-devel] EPEL Steering Committee meeting moving to matrix

2023-11-14 Thread Troy Dawson
At last weeks EPEL Steering Committee meeting it was decided to move from Libera IRC #fedora-meeting to Fedora Matrix #meeting.[1] This week (November 15, 2023) will be our first meeting on the new Matrix channel. This is the link: https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org

[EPEL-devel] Re: [Fedocal] Reminder meeting : EPEL Steering Committee

2023-11-14 Thread Troy Dawson
Sorry, I didn't get this updated before the email went out. We will now be meeting on the Fedora Meeting room on Fedora Matrix https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org On Tue, Nov 14, 2023 at 8:00 AM wrote: > Dear all, > > You are kindly invited to the meeting: >

[Bug 2249482] No perl-HTML-Scrubber for EPEL9

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249482 Fedora Update System changed: What|Removed |Added Status|NEW |MODIFIED --- Comment #7 from

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Christopher
On Tue, Nov 14, 2023 at 9:24 AM Petr Pisar wrote: > > V Tue, Nov 14, 2023 at 08:16:39AM -0500, Christopher napsal(a): > > On Tue, Nov 14, 2023 at 8:03 AM Jaroslav Mracek wrote: > > > > > > I believe that one of the strong complains was related to not signed > > > packages. The use case is that

[Bug 2249633] perl-Time-Out-0.23 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249633 Petr Pisar changed: What|Removed |Added Status|MODIFIED|CLOSED Resolution|---

[Bug 2249633] perl-Time-Out-0.23 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249633 Petr Pisar changed: What|Removed |Added Status|ASSIGNED|MODIFIED Fixed In Version|

[EPEL-devel] [Fedocal] Reminder meeting : EPEL Steering Committee

2023-11-14 Thread tdawson
Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2023-11-15 from 16:00:00 to 17:00:00 US/Eastern At fedora-meet...@irc.libera.chat The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha

[Bug 2249633] perl-Time-Out-0.23 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249633 Petr Pisar changed: What|Removed |Added Status|NEW |ASSIGNED

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Steve Grubb
Hello all, On Tuesday, November 14, 2023 8:16:39 AM EST Christopher wrote: > On Tue, Nov 14, 2023 at 8:03 AM Jaroslav Mracek > wrote: > > > > I believe that one of the strong complains was related to not signed > > packages. The use case is that when I build RPMs locally and then I > > install

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Michael Catanzaro
On Tue, Nov 14 2023 at 08:16:39 AM -0500, Christopher wrote: I think for the sake of security, it'd be better if this were on by default, and you just had to specify the --nogpgcheck For convenience, the error message should probably say "Error: GPG check FAILED (try again with '--nogpgcheck'

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Petr Pisar
V Tue, Nov 14, 2023 at 08:16:39AM -0500, Christopher napsal(a): > On Tue, Nov 14, 2023 at 8:03 AM Jaroslav Mracek wrote: > > > > I believe that one of the strong complains was related to not signed > > packages. The use case is that when I build RPMs locally and then I install > > them (see

[Bug 2249633] New: perl-Time-Out-0.23 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249633 Bug ID: 2249633 Summary: perl-Time-Out-0.23 is available Product: Fedora Version: rawhide Status: NEW Component: perl-Time-Out Keywords: FutureFeature, Triaged

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Christopher
On Tue, Nov 14, 2023 at 8:03 AM Jaroslav Mracek wrote: > > I believe that one of the strong complains was related to not signed > packages. The use case is that when I build RPMs locally and then I install > them (see bellow). > > dnf install *.rpm --setopt=localpkg_gpgcheck=true > ... >

Re: F40 Change Proposal: Linker Error on Security Issues (System-Wide)

2023-11-14 Thread Nick Clifton
The warnings mentioned in the blog were added to the 2.39 release of the GNU Binutils, so they should potentially be present in the build logs of any package built for f38 or later. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Jaroslav Mracek
I would like to highlight a cool feature of DNF5 - drop-in directory for configuration overrides, where distribution may modify configuration of DNF5. Why I am mentioning it, because it allows to make a decision by distribution and the behavior might be modify outside of DNF5 package. Therefore

Re: F40 Change Proposal: Linker Error on Security Issues (System-Wide)

2023-11-14 Thread Nick Clifton
You can test for problems by searching the build logs for warnings from the linker: "has a LOAD segment with RWX permissions" "has a TLS segment with execute permission" "missing .note.GNU-stack section implies executable stack" There are also two related warning messages, although

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Jaroslav Mracek
I believe that one of the strong complains was related to not signed packages. The use case is that when I build RPMs locally and then I install them (see bellow). dnf install *.rpm --setopt=localpkg_gpgcheck=true ... Package dnf-4.17.1-1.git.9598.552e61e.fc38.noarch.rpm is not signed Package

[Bug 2249534] perl-Math-BigInt-2.001000 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249534 Fedora Update System changed: What|Removed |Added Resolution|--- |ERRATA Fixed In Version|

[Bug 2249534] perl-Math-BigInt-2.001000 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249534 Fedora Update System changed: What|Removed |Added Status|NEW |MODIFIED --- Comment #1 from

[Bug 2249602] perl-Business-ISBN-Data-20231114.001 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249602 Fedora Update System changed: What|Removed |Added Fixed In Version||perl-Business-ISBN-Data-202

[Bug 2249602] perl-Business-ISBN-Data-20231114.001 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249602 Fedora Update System changed: What|Removed |Added Status|NEW |MODIFIED --- Comment #1 from

[Bug 2249456] perl-CGI-Fast-2.17 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249456 Fedora Update System changed: What|Removed |Added Fixed In Version||perl-CGI-Fast-2.17-1.fc40

[Bug 2249456] perl-CGI-Fast-2.17 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249456 Fedora Update System changed: What|Removed |Added Status|NEW |MODIFIED --- Comment #1 from

[Bug 2249324] perl-Imager-1.020 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249324 Fedora Update System changed: What|Removed |Added Fixed In Version||perl-Imager-1.020-1.fc40

[Bug 2249324] perl-Imager-1.020 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249324 Fedora Update System changed: What|Removed |Added Status|ASSIGNED|MODIFIED --- Comment #1 from

Re: F40 Change Proposal: Linker Error on Security Issues (System-Wide)

2023-11-14 Thread Richard W.M. Jones
On Mon, Nov 13, 2023 at 07:26:04PM -0800, John Reiser wrote: > >Also, under what circumstances would thread local storage segments be > >executable? > > When the assembly-language source contains a statement such as > .section my_section_name,"atx" > where the "atx" are the attributes of the

[Bug 2249602] New: perl-Business-ISBN-Data-20231114.001 is available

2023-11-14 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2249602 Bug ID: 2249602 Summary: perl-Business-ISBN-Data-20231114.001 is available Product: Fedora Version: rawhide Status: NEW Component: perl-Business-ISBN-Data Keywords: