Re: [Fedora-legal-list] Trivy for licenses

2024-03-03 Thread Miroslav Suchý
Dne 03. 03. 24 v 20:22 Philippe Ombredanne napsal(a): It is mostly based on google/licenseclassifier which had a single commit in the last 17 months, and this means this is not more maintained than askalono (and frankly both are fairly lightweight tools for license detection). Trivy adds SPDX

Fedora 40 compose report: 20240303.n.1 changes

2024-03-03 Thread Fedora Branched Report
OLD: Fedora-40-20240302.n.0 NEW: Fedora-40-20240303.n.1 = SUMMARY = Added images:2 Dropped images: 2 Added packages: 0 Dropped packages:0 Upgraded packages: 3 Downgraded packages: 0 Size of added packages: 0 B Size of dropped packages:0 B Size of upgraded

[EPEL-devel] Fedora EPEL 9 updates-testing report

2024-03-03 Thread updates
The following Fedora EPEL 9 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ad53379349 suricata-6.0.16-1.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1cefeeb8f5 cpp-jwt-1.4-7.el9 2

Fedora rawhide compose report: 20240303.n.1 changes

2024-03-03 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20240302.n.0 NEW: Fedora-Rawhide-20240303.n.1 = SUMMARY = Added images:5 Dropped images: 4 Added packages: 4 Dropped packages:1 Upgraded packages: 96 Downgraded packages: 0 Size of added packages: 743.36 MiB Size of dropped packages

[Bug 2267133] perl-Business-ISBN-Data-20240229.001 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2267133 --- Comment #5 from Fedora Update System --- FEDORA-2024-3b124b07b7 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing

[Bug 2267478] perl-Business-ISBN-Data-20240302.001 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2267478 --- Comment #4 from Fedora Update System --- FEDORA-2024-3b124b07b7 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing

[Bug 2265610] perl-Log-ger-0.042 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2265610 --- Comment #4 from Fedora Update System --- FEDORA-2024-8e17c24798 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing

[Bug 2266094] perl-Compress-Raw-Zlib-2.209 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2266094 --- Comment #4 from Fedora Update System --- FEDORA-2024-4007a7bed3 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing

Heads-up: Updating libunibreak to 6.1 in rawhide and F40

2024-03-03 Thread Sandro
I plan to update libunibreak to version 6.1 in rawhide and F40 in about a week. This update comes with an soname bump. The following packages depend on libunibreak: fedrq wrsrc -Xs libunibreak -F name coolreader fbreader krita naev I ran a smoke test in Copr [1] rebuilding those packages

Re: [Fedora-legal-list] Trivy for licenses

2024-03-03 Thread Philippe Ombredanne
Hi Maxwell: On Sun, Mar 3, 2024, Maxwell G wrote: > Has anyone every used trivy [1] to scan for licenses? It appears more > robust and better maintained than askalono-cli and can detect files with > multiple licenses and licenses embedded in file headers. I have been > running it with "trivy fs

Re: Trivy for licenses

2024-03-03 Thread Maxwell G
On Sun Mar 3, 2024 at 17:28 +0100, Miroslav Suchý wrote: > Dne 03. 03. 24 v 7:35 Maxwell G napsal(a): > > > > Has anyone every used trivy [1] to scan for licenses? It appears more > > robust and better maintained than askalono-cli > > and can detect files with multiple licenses and licenses

Re: Trivy for licenses

2024-03-03 Thread Miroslav Suchý
Dne 03. 03. 24 v 7:35 Maxwell G napsal(a): Has anyone every used trivy [1] to scan for licenses? It appears more robust and better maintained than askalono-cli and can detect files with multiple licenses and licenses embedded in file headers.  I have been running it with "trivy fs --scanners

Re: libxslxwriter (misspelled package) in zombie state

2024-03-03 Thread Richard W.M. Jones
On Sun, Mar 03, 2024 at 10:55:54AM +0100, Miro Hrončok wrote: > On 02. 03. 24 23:28, Richard W.M. Jones wrote: > >On Sat, Mar 02, 2024 at 10:16:02PM +0100, Miro Hrončok wrote: > >>On 02. 03. 24 11:31, Richard W.M. Jones wrote: > >>>On Fri, Mar 01, 2024 at 10:00:20AM -0800, Kevin Fenzi wrote: >

[Bug 2267478] perl-Business-ISBN-Data-20240302.001 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2267478 --- Comment #3 from Fedora Update System --- FEDORA-2024-3b124b07b7 (perl-Business-ISBN-Data-20240302.001-1.fc40) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b124b07b7 -- You are

[Bug 2267478] perl-Business-ISBN-Data-20240302.001 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2267478 Fedora Update System changed: What|Removed |Added Fixed In Version||perl-Business-ISBN-Data-202

[Bug 2267478] perl-Business-ISBN-Data-20240302.001 is available

2024-03-03 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2267478 Fedora Update System changed: What|Removed |Added Status|NEW |MODIFIED --- Comment #1 from

Re: libxslxwriter (misspelled package) in zombie state

2024-03-03 Thread Miro Hrončok
On 02. 03. 24 23:28, Richard W.M. Jones wrote: On Sat, Mar 02, 2024 at 10:16:02PM +0100, Miro Hrončok wrote: On 02. 03. 24 11:31, Richard W.M. Jones wrote: On Fri, Mar 01, 2024 at 10:00:20AM -0800, Kevin Fenzi wrote: On Fri, Mar 01, 2024 at 11:49:06AM +, Richard W.M. Jones wrote: We