Hi!
+1
The sequence must be: measure -> think -> act.
Not:
act (in panic) ->
think (oh, that ist not the correct way, or even worse: oh, this is the
way the attacker wants us to go.)
measure (we have a weakness)
Best regards
Christoph
Am 04.04.24 um 20:11 schrieb Leon Fauster via devel:
One
The following Fedora EPEL 8 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-acb47e6aea
libopenmpt-0.7.6-1.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d0d107787c
assimp-5.0.1-7.el8
3
The following Fedora EPEL 7 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-07e8f5f1f0
libopenmpt-0.7.6-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d9102d9191
clojure-1.8.0-3.el7
1
On Thu, 2024-04-04 at 18:35 -0400, Neal Gompa wrote:
> On Thu, Apr 4, 2024 at 6:17 PM Zbigniew Jędrzejewski-Szmek
> wrote:
> >
> > On Wed, Apr 03, 2024 at 11:21:36AM -0500, Michael Catanzaro wrote:
> > > So here are three brainstorming proposals:
> > >
> > > (a) Fedora KDE Plasma Desktop
On Thu, Apr 4, 2024 at 6:17 PM Zbigniew Jędrzejewski-Szmek
wrote:
>
> On Wed, Apr 03, 2024 at 11:21:36AM -0500, Michael Catanzaro wrote:
> > So here are three brainstorming proposals:
> >
> > (a) Fedora KDE Plasma Desktop becomes a Fedora edition. We'd need to be
> > careful about how we do it. I
On Wed, Apr 03, 2024 at 11:21:36AM -0500, Michael Catanzaro wrote:
> So here are three brainstorming proposals:
>
> (a) Fedora KDE Plasma Desktop becomes a Fedora edition. We'd need to be
> careful about how we do it. I would still promote Fedora Workstation as the
> main/recommended "leading"
On 4/4/24 15:36, Przemek Klosowski via devel wrote:
On 4/3/24 17:49, Kevin Kofler via devel wrote:
And is there a statistical evaluation of that data somewhere? Downloading
350 MiB (!) of raw CSV data does not sound to me like a convenient way to
work with it.
It's messy, but interesting.
On Thu, 4 Apr 2024 at 16:37, Przemek Klosowski via devel <
devel@lists.fedoraproject.org> wrote:
> On 4/3/24 17:49, Kevin Kofler via devel wrote:
>
>
>
Thanks for doing this. I would have loved to find a way to just have
gnuplot do this nightly
> And is there a statistical evaluation of that
On 2024-04-04 06:10, Zbigniew Jędrzejewski-Szmek wrote:
+1. I put the tool on my TODO list of things to look into.
When you get that time, I've also opened the following PR that includes
a proof-of-concept test
https://src.fedoraproject.org/rpms/openssh/pull-request/73
It's sloppy at the
Hello Rustaceans and Pythonistas,
The "cpython" and "python3-sys" crates provide Rust bindings for
CPython, but the project is no longer actively maintained [0], and it
does not support CPython 3.12+ due to ABI / API changes. Programs that
use the "cpython" bindings for building against CPython
I’m orphaning vim-editorconfig.
While it’s probably still useful in EPEL8 and EPEL9, it is (according to
https://github.com/editorconfig/editorconfig-vim/issues/234) no longer
needed by users of recent versions of vim and neovim since those editors
now include its functionality. It’s
On Thu, Apr 4, 2024 at 9:42 PM pfed--- via devel
wrote:
>
> On Thu, Apr 04, 2024 at 09:51:31AM +0200, Fabio Valentini wrote:
> > > > The short answer is: No, "fedpkg local" is not expected to work for
> > > > Rust packages, and probably won't ever work as expected for Rust
> > > > packages.
> > >
On 4/3/24 17:49, Kevin Kofler via devel wrote:
And is there a statistical evaluation of that data somewhere? Downloading
350 MiB (!) of raw CSV data does not sound to me like a convenient way to
work with it.
It's messy, but interesting. Here's the architecture data for the last 3
or so
Dear all,
Just a heads up that python-markdown has just been updated in
rawhide/f41 to 3.6.
See here for the list of changes:
https://python-markdown.github.io/changelog/#36-2024-03-14
This will not be pushed to released Fedora branches.
Best regards
--
Thomas Moschny
--
On Thu, Apr 04, 2024 at 09:51:31AM +0200, Fabio Valentini wrote:
> > > The short answer is: No, "fedpkg local" is not expected to work for
> > > Rust packages, and probably won't ever work as expected for Rust
> > > packages.
> > >
> > > I am not really interested in adding the "--allow-dirty"
Hi,
sorry for the late response, have been a bit busy recently...
Yes, we should remove botan (1) from Fedora - that has also been a request
by upstream. The point is, I want to keep monotone, and it needs a bit of
work to switch it over to botan2. There exists a branch that should have
the
On Thu, Apr 04, 2024 at 08:11:42PM +0200, Leon Fauster via devel wrote:
>
> One approach that would be at least bring some light into "weak"
> (non technical layer) components (albeit not sure how feasible it is),
> could be:
>
> - Checking the resources of a packaged project.
>Resources in
On Thu, Apr 04, 2024 at 07:00:13AM +0200, Jan Kolarik wrote:
> Hi guys,
>
> the dnf-automatic command will be obsoleted.
> >
>
> Oh, sorry about that. This portion of the text was inadvertently altered
> during the review process. I've already corrected the text on the wiki.
>
> The
https://botan.randombit.net/handbook/support.html#branch-support-status
can be referenced in the retirement commit:
Branch
First Release
End of Active Development
End of Life
Botan 1.8
2008-12-08
2010-08-31
2016-02-13
Botan 1.10
2011-06-20
2012-07-10
2018-12-31
(Though 1.11.x also
Den ons 3 apr. 2024 kl 23:27 skrev Kevin Kofler via devel <
devel@lists.fedoraproject.org>:
> Andreas Tunek wrote:
> > From Red Hat's POV it is not Fedora Gnome Workstation (
> >
> https://blogs.gnome.org/uraeus/2020/05/07/gnome-is-not-the-default-for-fedora-workstation/
> > ).
>
> TL;DR: "We do
On Thu, Apr 4, 2024 at 8:00 PM Arnie T via devel
wrote:
>
> Hello Kevin,
>
> > I'm hopeful some things will come out of this as it's a chance for us to
> > look at our processes and improve them.
>
> I'm glad that's happening. It seems to me that improving those processes
> would be Distro
Am 04.04.24 um 19:23 schrieb Kevin Fenzi:
On Thu, Apr 04, 2024 at 01:26:14PM +, Arnie T via devel wrote:
Hi,
I just installed Fedora on 2 of my PCs a couple of weeks ago. One version of
Fedora 39 release and one of Fedora 40 to see where things are going.
I learned about this XZ-hack
Hello Kevin,
> I'm hopeful some things will come out of this as it's a chance for us to
> look at our processes and improve them.
I'm glad that's happening. It seems to me that improving those processes would
be Distro decisions. Which I keep understanding don't really exist. At least
not
Hi Guinevere,
> TL;DR: as with most security issues, end users should update their systems.
>
> I think you may be caught in some news exaggeration. Don't get me wrong, this
> hack was a huge thing, but it was discovered early enough that most (i'd
> guess almost all) fedora users wont' have to
On Thu, Apr 04, 2024 at 05:04:20PM +, Arnie T via devel wrote:
> Hi Stephen,
>
> Thanks for the explanation.
>
> I just caught up with the article at the New York Times,
>
> Did One Guy Just Stop a Huge Cyberattack?
>
On 4/4/24 14:04, Arnie T via devel wrote:
Hi Stephen,
Thanks for the explanation.
I just caught up with the article at the New York Times,
Did One Guy Just Stop a Huge Cyberattack?
https://www.nytimes.com/2024/04/03/technology/prevent-cyberattack-linux.html
And the comic that looks like it
On Thu, Apr 04, 2024 at 01:26:14PM +, Arnie T via devel wrote:
> Hi,
>
> I just installed Fedora on 2 of my PCs a couple of weeks ago. One version of
> Fedora 39 release and one of Fedora 40 to see where things are going.
>
> I learned about this XZ-hack from Ars Technica & The Economist.
Hi Stephen,
Thanks for the explanation.
I just caught up with the article at the New York Times,
Did One Guy Just Stop a Huge Cyberattack?
https://www.nytimes.com/2024/04/03/technology/prevent-cyberattack-linux.html
And the comic that looks like it fits the problem I'm most noticing here!
Once upon a time, Simon Farnsworth said:
> Fedora made the same switch back in Fedora 31, and thus doesn't need to do
> anything about package compression right now.
About this... I was looking at RPMs and found there are a couple of
packages that override _binary_payload in the SPEC to use xz:
On Thu, Apr 4, 2024 at 12:51 AM Sandro wrote:
> On 03-04-2024 18:35, Jens-Ulrik Petersen wrote:
> > I took botan [...]
>
I guess that was a bad idea - so I have re-orphaned it after some detailed
discussions with @penguinpee in #devel.
He also helped to decouple monotone from ikiwiki in
On Thursday, 4 April 2024 17:20:25 BST Arnie T via devel wrote:
> Hello Stephen,
>
> > How a decision to drop xz for some other compression library for software
> > would be a fairly slow process. First a person who is willing to do the
> > work would come up with a proposal on why it should be
On Thu, 4 Apr 2024 at 12:21, Arnie T via devel <
devel@lists.fedoraproject.org> wrote:
> Hello Stephen,
>
> How a decision to drop xz for some other compression library for software
> would be a fairly slow process. First a person who is willing to do the
> work would come up with a proposal on
Hello Stephen,
> How a decision to drop xz for some other compression library for software
> would be a fairly slow process. First a person who is willing to do the work
> would come up with a proposal on why it should be done and how it could be
> done. They would be expected to also test to
Hello,
I have been deleting most of these emails, but I feel like this is a bit
myopic.
On Tuesday, April 2, 2024 6:25:56 PM EDT Kevin Kofler via devel wrote:
> Gary Buhrmaster wrote:
>
> > And, more importantly, the industry has agreed
> > to use the term supply chain. Is the term
> >
On Thu, 4 Apr 2024, 16:35 Kevin Kofler via devel, <
devel@lists.fedoraproject.org> wrote:
> Neal Gompa wrote:
> > By default, GNOME only presents the close window button. The other
> > buttons are missing, and there isn't really an intuitive way to
> > discover the other window management
On Thu, 4 Apr 2024 at 11:22, Arnie T via devel <
devel@lists.fedoraproject.org> wrote:
>
> Hi,
>
> > There's no such thing as a "distro decision" on this one, as was
> > explained in the thread already.
>
> I'm sure the 'explanation' is all clear to you and the other Developers.
>
> I'm also sure
OLD: Fedora-40-20240403.n.0
NEW: Fedora-40-20240404.n.0
= SUMMARY =
Added images:0
Dropped images: 0
Added packages: 0
Dropped packages:0
Upgraded packages: 0
Downgraded packages: 0
Size of added packages: 0 B
Size of dropped packages:0 B
Size of upgraded
Neal Gompa wrote:
> By default, GNOME only presents the close window button. The other
> buttons are missing, and there isn't really an intuitive way to
> discover the other window management actions.
In the version I tried, and judging from end user reports, for several
years, it did not even
Leon Fauster via devel wrote:
> 10 minutes is not enough to do a remodeling of the "familiar"
> experience, so that you reaches the so called realm of intuition.
> The latter is something that we learn over time and the desktop
> environment does not offer this on its own. It provides only a
>
Hi,
> There's no such thing as a "distro decision" on this one, as was
> explained in the thread already.
I'm sure the 'explanation' is all clear to you and the other Developers.
I'm also sure that it's not all that clear to non-Developers.
If the explanation was clear and obvious to me, here
https://bugzilla.redhat.com/show_bug.cgi?id=2271881
Jitka Plesnikova changed:
What|Removed |Added
Status|NEW |CLOSED
Fixed In Version|
https://bugzilla.redhat.com/show_bug.cgi?id=2262599
Jitka Plesnikova changed:
What|Removed |Added
Resolution|--- |RAWHIDE
CC|
https://bugzilla.redhat.com/show_bug.cgi?id=2273397
Bug ID: 2273397
Summary: Upgrade perl-Net-Whois-Raw to 2.99038
Product: Fedora
Version: rawhide
URL: https://metacpan.org/release/Net-Whois-Raw
Status: NEW
https://bugzilla.redhat.com/show_bug.cgi?id=2273395
Bug ID: 2273395
Summary: Upgrade perl-HTTP-Body to 1.23
Product: Fedora
Version: rawhide
URL: https://metacpan.org/release/HTTP-Body
Status: NEW
Component:
On Thu, Apr 04, 2024 at 02:40:08PM +, Arnie T via devel wrote:
> Hello Rich,
>
> > There's also the issue that liblzma is widely used and offers specific
> > features which zstd does not[1].
> >
> > [1] https://github.com/facebook/zstd/issues/395#issuecomment-535875379
>
> Is that about
Kilian Hanich via devel wrote:
> About the release cycle: After the initial release of Plasma 6 when dust
> has mostly settled down (approx. 2 point releases), they want to switch
> over to a release cycle which would align (which is likely also the
> reason why F42 was choosen in this proposal).
Gordon Messmer wrote:
> If RPM's ELF dependency generator were better, the importance of
> stability would be debatable, but as it is, I really think Fedora should
> be more stable than it is, especially for whatever it defines as "the
> OS." Today, dnf/rpm will happily allow users to install an
Gordon Messmer wrote:
> "When you are using the Linux mark pursuant to a sublicense, it should
> never be used as a verb or noun. It should be used only as an adjective
> followed by the generic name/noun. In other words, “Super Dooper Linux
> OS” is okay, but “Super Dooper Linux” isn’t."
>
>
Hello Rich,
> There's also the issue that liblzma is widely used and offers specific
> features which zstd does not[1].
>
> [1] https://github.com/facebook/zstd/issues/395#issuecomment-535875379
Is that about this?
https://github.com/facebook/zstd/tree/dev/contrib/seekable_format
From a
On Thu, Apr 04, 2024 at 01:45:45PM -, Daniel Alley wrote:
> As long as there are existing xz-compressed files in the wild,
> Fedora will need to support consuming them - as long as there is
> software that expects xz compression, Fedora will need to support
> creating them. It's not going to
Hi,
> See also an upstream GNU discussion on whether more GNU packages
> should start providing zstd, or even lzip, tarballs in addition to xz:
> https://lists.gnu.org/archive/html/bug-standards/2024-04/msg00032.html
I'm sure not going to tell any developers here something they don't know! But
Is there any chance fedpkg local can be adapted to support dynamic
BuildRequires?
--
Gwyn Ciesla
she/her/hers
in your fear, seek only peace
in your fear, seek only love
-d. bowie
Sent with Proton Mail secure email.
On Thursday, April 4th,
Hi Daniel,
>> All that being said, there are plenty of bits of software that could start
>> using zstd by default and it would probably make sense to do so.
I know this isn't the best test but just looking at
locate xz | grep xz$ | grep kernel.*xz$ | wc -l
13206
ISTM there's a log of .xz
On Thu, Apr 04, 2024 at 01:45:45PM -, Daniel Alley wrote:
> It's not possible to simply substitute one for another universally, there's
> no "Fedora default", it's something that would need to be handled on a
> package-by-package basis.
>
> As long as there are existing xz-compressed files
Hi Steve,
>> Who's to say that one doesn't have the same basic issue? Same with any other
>> project in FOSS for that matter.
That's the idea I was trying to make. There are no guarantees are there? But
you can minimize the social problems.
The 'basic issue' I see is the "one or two"
It's not possible to simply substitute one for another universally, there's no
"Fedora default", it's something that would need to be handled on a
package-by-package basis.
As long as there are existing xz-compressed files in the wild, Fedora will need
to support consuming them - as long as
https://bugzilla.redhat.com/show_bug.cgi?id=2273376
Bug ID: 2273376
Summary: perl-Data-Munge-0.101 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: perl-Data-Munge
Keywords: FutureFeature, Triaged
I have definitely not read 75% of the comments and articles about the xz
issues but I understand the general reason why this happened.
Issue here is, let's say we do switch to an alternative, whatever it is.
Who's to say that one doesn't have the same basic issue? Same with any
other project in
OLD: Fedora-Rawhide-20240403.n.0
NEW: Fedora-Rawhide-20240404.n.0
= SUMMARY =
Added images:1
Dropped images: 0
Added packages: 2
Dropped packages:0
Upgraded packages: 103
Downgraded packages: 1
Size of added packages: 1.43 MiB
Size of dropped packages:0 B
Hi,
I just installed Fedora on 2 of my PCs a couple of weeks ago. One version of
Fedora 39 release and one of Fedora 40 to see where things are going.
I learned about this XZ-hack from Ars Technica & The Economist.
I got to the Fedora Magazine article and wasn't really clear on that.
So I
On Tue, Apr 02, 2024 at 04:32:24PM +0100, Richard W.M. Jones wrote:
> On Tue, Apr 02, 2024 at 12:45:18AM -0700, Gordon Messmer wrote:
> > On 2024-04-01 23:59, Gordon Messmer wrote:
> > >Now gdb can print the GOT with the paths providing the memory
> > >section containing a function. For example,
With that being said though, I would rather this discussion not to devolve
into a "Which DE is better".
I've said that in the past, but each Desktop Environment has their merits,
and discussing "Which is better" is as fruitless as "Mac vs PC" or "Android
vs iOS" fights.
On Thu, Apr 4, 2024 at
Problem with extensions is, while they are *technically* supported by
gnome, they can break with any update (It has happened to me in the past).
Heck, it kinda reminds me of hacks people use to get around the junk people
put in Windows 10/11...
On Thu, Apr 4, 2024 at 8:09 AM Leslie Satenstein via
There is, if you add 1 extension, a category menu. That is the menu that is
similar to other desktop interfaces such as Budgie, XFCE, and other.
Leslie Satenstein
On Thursday, April 4, 2024 at 08:03:13 a.m. EDT, Stephen Smoogen
wrote:
On Thu, 4 Apr 2024 at 04:38, Vít
On Thu, 4 Apr 2024 at 04:38, Vít Ondruch wrote:
>
>
> Maybe you should give it second try.
>
>
What I am going to say is not meant to be a bash in any way.
I am on my 10th try for GNOME3/40. For everything they move to somewhere my
brain says is intuitive, there always seems to be something
Dear all,
You are kindly invited to the meeting:
ELN SIG on 2024-04-05 from 12:00:00 to 13:00:00 US/Eastern
At fedora-meet...@irc.libera.chat
The meeting will be about:
Source: https://calendar.fedoraproject.org//meeting/10568/
--
___
devel
Wow, that was fast! Thanks Jonathan!
Regards,
Evan
From: Jonathan Wright
Sent: Wednesday, April 3, 2024 10:55:40 PM
To: EPEL Development List
Cc: Ward, Evan M CIV USN NRL (8112) Washington DC (USA)
Subject: Re: [EPEL-devel] activemq-cpp in epel8
Managed to
https://bugzilla.redhat.com/show_bug.cgi?id=2272408
Jitka Plesnikova changed:
What|Removed |Added
Status|NEW |ASSIGNED
Link ID|
On Tue, Apr 02, 2024 at 08:59:32PM +0200, Kevin Kofler via devel wrote:
> Matthew Miller wrote:
> > I sometimes see unit test failures. The developer ran the tests, but not
> > on S390.
>
> Why would I want a test failure on such an exotic architecture to fail my
> build?
The architecture is
On Thu, Apr 4, 2024 at 4:38 AM Vít Ondruch wrote:
>
>
> Dne 04. 04. 24 v 0:44 Kevin Kofler via devel napsal(a):
> > Leon Fauster via devel wrote:
> >> I already had RHL installed on a Sun IPX with Gnome, so I'm biased.
> > Interesting that you were not put off by the changes that have happened to
Dne 04. 04. 24 v 0:44 Kevin Kofler via devel napsal(a):
Leon Fauster via devel wrote:
I already had RHL installed on a Sun IPX with Gnome, so I'm biased.
Interesting that you were not put off by the changes that have happened to
GNOME since the old RHL days. I tried GNOME 1 at one point long
Hi Mikel.
It might look like simple bump but you are upgrading from 4.1.1 to 6.0.0
and there are some breaking changes between those releases.
The error message looks like the plugin is loaded twice for some reason
and the second try to register the same CLI option fails. %pytest macro
sets
On Thu, Apr 4, 2024, 00:54 Philip Matura via devel <
devel@lists.fedoraproject.org> wrote:
> On Thu, Apr 04, 2024 at 12:03:56AM +0200, Fabio Valentini wrote:
> > On Wed, Apr 3, 2024 at 11:47 PM pfed--- via devel
> > wrote:
> > >
> > > Maybe we could add the `--allow-dirty` to the
73 matches
Mail list logo
