Re: Fedora Rawhide 20151227 compose check report

2015-12-28 Thread Adam Williamson
On Sun, 2015-12-27 at 19:29 +0200, Pavlo Rudyi wrote: > On Sun, 2015-12-27 at 14:37 +, Fedora compose checker wrote: > > Failed openQA tests: 4 of 61 > > > > ID: 1837Test: i386 kde_live default_install > > URL: https://openqa.fedoraproject.org/tests/1837 > > ID: 1833Test: x86_64 kde_li

Re: Firefox build?

2015-12-28 Thread Eric Griffith
On Dec 28, 2015 18:02, "Bojan Smojver" wrote: > > Reindl Harald thelounge.net> writes: > > > what do you try to tell us with that question? > > I'm trying to establish whether Fedora needs a 43.0.2 (or better) build of > FF in order to close this security hole. > Is there any reason Fedora would

Re: Firefox build?

2015-12-28 Thread Bojan Smojver
Reindl Harald thelounge.net> writes: > what do you try to tell us with that question? I'm trying to establish whether Fedora needs a 43.0.2 (or better) build of FF in order to close this security hole. -- Bojan -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/a

Re: Firefox build?

2015-12-28 Thread Michael Schwendt
On Mon, 28 Dec 2015 23:44:51 +0100, Reindl Harald wrote: > Am 28.12.2015 um 22:57 schrieb Bojan Smojver: > > Release notes for FF 43.0.2 say that a security issue was fixed (MD5 > > signatures accepted within TLS 1.2 ServerKeyExchange in server > > signature). Does this not affect Fedora builds?

Re: Firefox build?

2015-12-28 Thread Reindl Harald
Am 28.12.2015 um 22:57 schrieb Bojan Smojver: Release notes for FF 43.0.2 say that a security issue was fixed (MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature). Does this not affect Fedora builds? what do you try to tell us with that question? [harry@srv-rhsoft:~

Firefox build?

2015-12-28 Thread Bojan Smojver
Release notes for FF 43.0.2 say that a security issue was fixed (MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature). Does this not affect Fedora builds? PS. The link to that security issue is broken (https://www.mozilla.org/ en-US/security/advisories/mfsa2015-150/), so n

ftplib license change

2015-12-28 Thread Michael Cronenworth
Hello, The ftplib (and mingw-ftplib) package changed license types. LGPLv2+ => Artistic 2.0 CC'ing Spot as he missed changing the License field in the package update. Thanks, Michael -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedo

WebKitGTK+ security status

2015-12-28 Thread Michael Catanzaro
Hi, This mail is in regards to WSA-2015-0002: http://webkitgtk.org/security /WSA-2015-0002.html In short, we have by my count: * Zero CVEs affecting the webkitgtk4 package in F23 * 40 CVEs affecting the webkitgtk4 package in F22 * 129 CVEs affecting the webkitgtk and webkitgtk3 packages in F22/F

[POC-change] Fedora packages point of contact updates

2015-12-28 Thread nobody
Change in package status over the last 168 hours 3 packages were orphaned radiusclient-ng [epel7] was orphaned by nmav RADIUS protocol client library https://admin.fedoraproject.org/pkgdb/package/radiusclient-ng ta

Fedora Rawhide 20151228 compose check report

2015-12-28 Thread Fedora compose checker
Missing expected images: Cloud_atomic disk raw x86_64 Images in this compose but not Rawhide 20151227: Scientific_kde live i386 Mate live i386 Images in Rawhide 20151227 but not this: Games live i386 Lxde live x86_64 Failed openQA tests: 4 of 61 ID: 1900Test: i386 kde_live default_in

Re: Specs using %define

2015-12-28 Thread Paul Howarth
On Thu, 24 Dec 2015 15:01:02 -0600 Jason L Tibbitts III wrote: > To satisfy my curiosity, I grepped the convenient tarball of specfiles > (http://pkgs.fedoraproject.org/repo/rpm-specs-latest.tar.xz) for lines > matching "(? there were more than 1900 hits. > > Here's a complete (long) list. I do

Re: Proven Packager Help requested: HEADS UP: libwebp, ucommon soname bumps

2015-12-28 Thread Sandro Mani
On 28.12.2015 12:25, Igor Gnatenko wrote: I am ready. Thank you. The changes to libwebp have been pushed, it is ready to be built. Sandro -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: frafra uploaded yumex-dnf-4.1.6.tar.gz for yumex-dnf

2015-12-28 Thread Tim Lauridsen
On Mon, 28 Dec 2015 at 11:41 Pierre-Yves Chibon wrote: > On Mon, Dec 28, 2015 at 09:38:25AM +, Tim Lauridsen wrote: > >Looks like a false alarm, just a scatch build > >https://bugzilla.redhat.com/show_bug.cgi?id=1294377 > > Why uploading sources to dist-git for a scratch build? > > >

Re: Proven Packager Help requested: HEADS UP: libwebp, ucommon soname bumps

2015-12-28 Thread Igor Gnatenko
I am ready. On Mon, Dec 28, 2015 at 12:24 PM Sandro Mani wrote: > > > On 27.12.2015 06:59, Peter Robinson wrote: > > On Thu, Dec 24, 2015 at 2:37 PM, Sandro Mani > wrote: > >> Hello > >> > >> I'll be building libwep-0.5.0 and ucommon-7.0.0 this weekend. > >> > >> Affected packages for libwebp:

Proven Packager Help requested: HEADS UP: libwebp, ucommon soname bumps

2015-12-28 Thread Sandro Mani
On 27.12.2015 06:59, Peter Robinson wrote: On Thu, Dec 24, 2015 at 2:37 PM, Sandro Mani wrote: Hello I'll be building libwep-0.5.0 and ucommon-7.0.0 this weekend. Affected packages for libwebp: efl freeimage gdal gegl03 GraphicsMagick gstreamer1-plugins-bad-free ImageMagick kde-runtime-lib

Re: frafra uploaded yumex-dnf-4.1.6.tar.gz for yumex-dnf

2015-12-28 Thread Pierre-Yves Chibon
On Mon, Dec 28, 2015 at 09:38:25AM +, Tim Lauridsen wrote: >Looks like a false alarm, just a scatch build  >https://bugzilla.redhat.com/show_bug.cgi?id=1294377 Why uploading sources to dist-git for a scratch build? Pierre -- devel mailing list devel@lists.fedoraproject.org http://li

rawhide report: 20151228 changes

2015-12-28 Thread Fedora Rawhide Report
Compose started at Mon Dec 28 05:15:02 UTC 2015 Broken deps for i386 -- [IQmol] IQmol-2.3.0-9.fc24.i686 requires libboost_serialization.so.1.58.0 IQmol-2.3.0-9.fc24.i686 requires libboost_iostreams.so.1.58.0 IQmol-2.3.0

Re: frafra uploaded yumex-dnf-4.1.6.tar.gz for yumex-dnf

2015-12-28 Thread Tim Lauridsen
Looks like a false alarm, just a scatch build https://bugzilla.redhat.com/show_bug.cgi?id=1294377 Tim On Mon, 28 Dec 2015 at 10:38 Tim Lauridsen wrote: > How do i handle a situation where someone, without my knowledge uploads > new sources to one of my projects. It could be a security problem ?

Fwd: frafra uploaded yumex-dnf-4.1.6.tar.gz for yumex-dnf

2015-12-28 Thread Tim Lauridsen
How do i handle a situation where someone, without my knowledge uploads new sources to one of my projects. It could be a security problem ? Tim -- Forwarded message - From: Date: Sun, 27 Dec 2015 at 23:00 Subject: frafra uploaded yumex-dnf-4.1.6.tar.gz for yumex-dnf 0ae84309cbb