Fedora eln compose report: 20250917.n.0 changes

2025-09-16 Thread Fedora ELN Report
OLD: Fedora-eln-20250916.n.0 NEW: Fedora-eln-20250917.n.0 = SUMMARY = Added images:0 Dropped images: 0 Added packages: 1 Dropped packages:0 Upgraded packages: 33 Downgraded packages: 0 Size of added packages: 49.00 MiB Size of dropped packages:0 B Size of

Re: Steam crashing at "logging in"

2025-09-16 Thread Ryan Bach via devel
Looks like I am not the first one with this issue: https://github.com/ValveSoftware/steam-for-linux/issues/12292 -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code o

Orphaning some packages and reduced availability

2025-09-16 Thread Fabio Valentini
Hi all, Due to $REASONS I will have reduced capacity to work on Fedora packaging for the foreseeable future, and will probably not be as permanently available on Matrix as I have been. If you need to catch my attention, please DM me on Matrix, as I will likely be checking public rooms (and emails)

Fedora CoreOS next stream rebasing to Fedora Linux 43

2025-09-16 Thread Dusty Mabe
The Fedora Linux 43 Beta was released today [1]. The Fedora CoreOS `next` stream switch to Fedora 43 is delayed, but planned for later this week. For Fedora 43, Fedora CoreOS is switching exclusively to updates shipped via the quay.io container registry [2][3], as well as payloads that are built wi

F44 Change Proposal: Haskell GHC 9.10 and Stackage 24 [SystemWide]

2025-09-16 Thread Allison King via devel-announce
Wiki: https://fedoraproject.org/wiki/Changes/Haskell_GHC_9.10_and_Stackage_24 Discussion Thread: https://discussion.fedoraproject.org/t/test-discussion/12345 **This is a proposed Change for Fedora Linux.** This document represents a proposed Change. As part of the Changes process, proposals are p

[Test Day] Fedora CoreOS 43 Test Week

2025-09-16 Thread Yasmin de Souza
Hey All! During the week of September 22nd - September 26th/2025, the Fedora 43 CoreOS Test Week will be happening. The test week is an opportunity for the community to test FCOS based on Fedora 43 content before it is released as part of the `testing` and `stable` streams. As part of the Test Wee

Fedora Linux 43 Beta Released

2025-09-16 Thread Samyak Jain via devel-announce
Fedora Linux 43 Beta Released -- The Fedora Project is pleased to announce the immediate availability of Fedora Linux 43 Beta, the next step towards our planned Fedora Linux 43 release in October. Download the prerelease from our Get Fedora site: * Get Fed

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Christopher Klooz
On 16/09/2025 11.26, Florian Weimer wrote: * Christopher Klooz: Even if the proposal would be implemented with ptrace_scope being 2, you would **not** need to reboot to change the ptrace_scope condition -> `sysctl kernel.yama.ptrace_scope=0` would temporarily disable it (immediately!) without

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Daniel P . Berrangé
On Mon, Sep 08, 2025 at 06:11:51PM +, Christopher Klooz wrote: > == Benefit to Fedora == > > Increased security / additional security layer with regards to > attacks/vulnerabilities related to `ptrace`, `kptr_restrict` and `bpf_jit`. Note that the ptrace restriction is not limited to just the

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Daniel P . Berrangé
On Tue, Sep 16, 2025 at 11:26:22AM +0200, Florian Weimer wrote: > * Christopher Klooz: > > > Even if the proposal would be implemented with ptrace_scope being 2, > > you would **not** need to reboot to change the ptrace_scope condition > > -> `sysctl kernel.yama.ptrace_scope=0` would temporarily d

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Jan Drögehoff
Chris Adams wrote: > Once upon a time, Jan Drögehoff sentrycraft...@gmail.com said: > > True, but from what I can tell only developers complained with real > > users either being unaffected or not vocal about it. > > Developers are real users too. I should clarify that if I refer to users I mean t

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Jan Drögehoff
Florian Weimer wrote: > > You can also run strace and gdb as root, where the restrictions do not > apply. It's simpler than fiddling with the sysctl, I think. > I expect that the net effect of this change will be that quite a few of > us run these tools as root. easier yes but its not uncommon

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Vitaly Zaitsev via devel
On 16/09/2025 11:26, Florian Weimer wrote: You can also run strace and gdb as root, where the restrictions do not apply. It's simpler than fiddling with the sysctl, I think. Employees usually don't have root privileges and can't use sysctl. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.or

Re: F44 Change Proposal: Mitigate vulnerabilities/attacks by enabling kernel.kptr_restrict and net.core.bpf_jit_harden by default, and by obsoleting a package that risks to accidentally disable kernel

2025-09-16 Thread Florian Weimer
* Christopher Klooz: > Even if the proposal would be implemented with ptrace_scope being 2, > you would **not** need to reboot to change the ptrace_scope condition > -> `sysctl kernel.yama.ptrace_scope=0` would temporarily disable it > (immediately!) without reboot. You can also run strace and gd

Fedora rawhide compose report: 20250916.n.0 changes

2025-09-16 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20250915.n.0 NEW: Fedora-Rawhide-20250916.n.0 = SUMMARY = Added images:3 Dropped images: 0 Added packages: 7 Dropped packages:10 Upgraded packages: 118 Downgraded packages: 0 Size of added packages: 150.19 MiB Size of dropped packages

Schedule for Tuesday's FESCo Meeting (2025-09-16)

2025-09-16 Thread Jednorozec
The following is the list of topics that will be discussed in theFESCo meeting Tuesday at 17:00 UTC in #meeting:fedoraproject.org on Matrix. To convert UTC to your local time, take a look at   http://fedoraproject.org/wiki/UTCHowto or run:   date -d '2025-09-16 17:00 UTC' Links to all issues to

Re: I plan to retire python-system-calls package

2025-09-16 Thread Marcin Juszkiewicz
W dniu 15.09.2025 o 02:05, Maxwell G pisze: Recently I decided to retire it from Fedora. It is a niche package, very low user base (if at all). If anyone wants to use it then 'pip install system-calls' will work fine. Do I need anything more than "fedpkg retire DESCRIPTION" command? I took it