Tim Lauridsen wrote:
> How do i handle a situation where someone, without my knowledge
> uploads new sources to one of my projects. It could be a security
> problem ?
While I trust that Francesco had only good intentions, the general
question remains: Is it possible to modify a package without
On Wed, 30 Dec 2015 19:38:35 +0100
Björn Persson wrote:
> Tim Lauridsen wrote:
> > How do i handle a situation where someone, without my knowledge
> > uploads new sources to one of my projects. It could be a security
> > problem ?
>
> While I trust that Francesco
Neal Gompa gmail.com> writes:
> Is there a simple way to test if the issue is a problem on Fedora? I
> don't even know of any sites with TLS 1.2 using MD5 signatures,
> especially when Chrome "broke" signatures that weren't SHA-256 or
> better for SSLv3 and stronger a year ago...
I guess one
On Wed, Dec 30, 2015 at 07:38:35PM +0100, Björn Persson wrote:
> Tim Lauridsen wrote:
> > How do i handle a situation where someone, without my knowledge
> > uploads new sources to one of my projects. It could be a security
> > problem ?
>
> While I trust that Francesco had only good intentions,
Kevin Fenzi wrote:
> On Wed, 30 Dec 2015 19:38:35 +0100
> Björn Persson wrote:
> > Without commit access to Git the attacker couldn't edit the sources
> > file, so – assuming that everything that uses the lookaside cache
> > bothers to verify the checksum – the
On Wed, 2015-12-30 at 20:09 +0100, Pierre-Yves Chibon wrote:
> On Wed, Dec 30, 2015 at 07:38:35PM +0100, Björn Persson wrote:
> > But still, why are we still using MD5?
>
> For the record bochecha has been leading the move away from md5 to
> sha, making the changes in such a way that it will give
Compose started at Wed Dec 30 05:15:02 UTC 2015
Broken deps for i386
--
[IQmol]
IQmol-2.3.0-9.fc24.i686 requires libboost_serialization.so.1.58.0
IQmol-2.3.0-9.fc24.i686 requires libboost_iostreams.so.1.58.0
> How do i handle a situation where someone, without my knowledge uploads
> new sources to one of my projects. It could be a security problem ?
Sorry Tim and sorry everyone for this false alarm.
I was playing with fedpkg and I realized I could upload new sources; I thought
I could provide a
On Tue, 29 Dec 2015 21:15:12 -0700, Orion Poplawski wrote:
> On 12/28/2015 02:35 AM, Tim Lauridsen wrote:
> > How do i handle a situation where someone, without my knowledge uploads
> > new sources to one of my projects. It could be a security problem ?
> >
> > Tim
>
> Email the person and ask
Missing expected images:
Cloud_atomic disk raw x86_64
No images in this compose but not Rawhide 20151229
Images in Rawhide 20151229 but not this:
Mate live i386
Failed openQA tests: 3 of 61
ID: 2023Test: i386 kde_live default_install
URL: https://openqa.fedoraproject.org/tests/2023
On 12/30/2015 10:00 AM, Orion Poplawski wrote:
> On 12/30/2015 12:16 AM, Denis Fateyev wrote:
>> Actually, I've opened a bug against 'msgpack':
>> https://bugzilla.redhat.com/show_bug.cgi?id=1290393
>>
>> What we actually need is to clarify and officially approve python3 epel
>> proposal and
On 12/30/2015 12:16 AM, Denis Fateyev wrote:
> Actually, I've opened a bug against 'msgpack':
> https://bugzilla.redhat.com/show_bug.cgi?id=1290393
>
> What we actually need is to clarify and officially approve python3 epel
> proposal and guidelines, to start packaging things for epel7.
>
> I'm
https://bugzilla.redhat.com/show_bug.cgi?id=1292061
--- Comment #9 from Fedora Update System ---
perl-POE-Loop-Event-1.305-1.fc22 has been pushed to the Fedora 22 stable
repository. If problems still persist, please make note of it in this bug
report.
--
You are
The following Fedora EPEL 7 Security updates need testing:
Age URL
296 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087
dokuwiki-0-0.24.20140929c.el7
88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-925e9374c9
python-pymongo-3.0.3-1.el7
59
https://bugzilla.redhat.com/show_bug.cgi?id=1294915
Bug ID: 1294915
Summary: perl-Dumbbench-0.10 is available
Product: Fedora
Version: rawhide
Component: perl-Dumbbench
Keywords: FutureFeature, Triaged
Assignee:
https://bugzilla.redhat.com/show_bug.cgi?id=1294915
--- Comment #1 from Upstream Release Monitoring
---
Failed to kick off scratch build.
cmd: spectool -g /var/tmp/thn-sw_QE4/perl-Dumbbench.spec
return code: 22
stdout:
Getting
I've submitted a review for a separate python-macros package here:
https://bugzilla.redhat.com/show_bug.cgi?id=1294904
This is what the FPC approved here
https://fedorahosted.org/fpc/ticket/567#comment:12 to be added to the Fedora
buildroots to provide the %python3_pkgversion macro needed for
On 12/30/2015 02:48 PM, Neal Gompa wrote:
> On Wed, Dec 30, 2015 at 3:46 PM, Orion Poplawski wrote:
>> I've submitted a review for a separate python-macros package here:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1294904
>>
>> This is what the FPC approved here
>>
https://bugzilla.redhat.com/show_bug.cgi?id=1291677
--- Comment #3 from Fedora Update System ---
perl-Regexp-Grammars-1.044-1.fc23 has been pushed to the Fedora 23 stable
repository. If problems still persist, please make note of it in this bug
report.
--
You are
https://bugzilla.redhat.com/show_bug.cgi?id=1291677
Fedora Update System changed:
What|Removed |Added
Status|ON_QA
https://bugzilla.redhat.com/show_bug.cgi?id=1293114
--- Comment #3 from Fedora Update System ---
perl-Net-SSH2-0.58-1.fc23 has been pushed to the Fedora 23 stable repository.
If problems still persist, please make note of it in this bug report.
--
You are receiving
https://bugzilla.redhat.com/show_bug.cgi?id=1292874
--- Comment #3 from Fedora Update System ---
perl-Test-PostgreSQL-1.06-3.fc22 has been pushed to the Fedora 22 stable
repository. If problems still persist, please make note of it in this bug
report.
--
You are
22 matches
Mail list logo