Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Kilian Hanich via devel
Am 09.02.24 um 18:28 schrieb Neal Gompa: On Fri, Feb 9, 2024 at 12:16 PM Roy Bekken wrote: On fredag 9. februar 2024 17:41:33 CET Neal Gompa wrote: On Fri, Feb 9, 2024 at 11:06 AM Roy Bekken wrote: On fredag 9. februar 2024 04:04:04 CET Steve Cossette wrote: I am not gonna reply to a

Re: exiv2 and protobuf hard to do soname bump without turbulence

2024-02-09 Thread Sérgio Basto
On Fri, 2024-02-09 at 16:53 +, Gary Buhrmaster wrote: > On Fri, Feb 9, 2024 at 4:23 PM Sérgio Basto > wrote: > > > > Hi, > > > > I'd like to bring to your attention that Fedora would benefit with > > update of exiv2 [1] and  protobuf [2] but these packages have lots > > of > > dependencies a

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Kevin Kofler via devel
Neal Gompa wrote: > Because Plasma Wayland... is just KDE Plasma. But in the real world, users use applications that are not KDE or even Qt applications (or ones that use old versions of Qt that will never natively support Wayland, or old versions of other toolkits in the same situation, such a

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Kevin Kofler via devel
Neal Gompa wrote: > On Fri, Feb 9, 2024 at 11:06 AM Roy Bekken wrote: >> If Fedora is so great then why do I find stuff like this? >> https://github.com/Zer0CoolX/Fedora-KDE-Minimal-Install-Guide >> >> 15 Forks and 167 Stars btw > > That is not a particularly good indication of popularity. Also,

Re: Does splint work for anyone?

2024-02-09 Thread Ian Laurie
On 2/10/24 05:06, Stephen Smoogen wrote: I was trying out the splint program on some code and found that it doesn't seem to work on any recent release due to changes in various header files I tried using splint many years ago in connection with embedded programming, and even though the GCC base

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Neal Gompa
On Fri, Feb 9, 2024 at 2:25 PM Roy Bekken wrote: > > On fredag 9. februar 2024 18:28:15 CET Neal Gompa wrote: > > The difference is that we can actually do something about those issues > > with Plasma Wayland when people report them. *Tons* of these kinds of > > issues were fixed over the past 3 y

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Roy Bekken
On fredag 9. februar 2024 18:28:15 CET Neal Gompa wrote: > The difference is that we can actually do something about those issues > with Plasma Wayland when people report them. *Tons* of these kinds of > issues were fixed over the past 3 years, and Plasma 6 brings a huge > upgrade around this stuff

Does splint work for anyone?

2024-02-09 Thread Stephen Smoogen
I was trying out the splint program on some code and found that it doesn't seem to work on any recent release due to changes in various header files ``` [ssmoogen@toolbox phytool (fix_asprintf)]$ splint +posixlib phytool.c Splint 3.1.2 --- 22 Jul 2023 /usr/include/asm-generic/int-ll64.h:20:24: Par

Re: [Fedocal] Reminder meeting : ELN SIG

2024-02-09 Thread Stephen Gallagher
On Thu, Feb 8, 2024 at 9:18 AM Stephen Gallagher wrote: > > On Thu, Feb 8, 2024 at 7:00 AM wrote: > > > > Dear all, > > > > You are kindly invited to the meeting: > >ELN SIG on 2024-02-09 from 12:00:00 to 13:00:00 US/Eastern > >At fedora-meet...@irc.libera.chat > > > > The meeting will be

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Neal Gompa
On Fri, Feb 9, 2024 at 12:16 PM Roy Bekken wrote: > > On fredag 9. februar 2024 17:41:33 CET Neal Gompa wrote: > > On Fri, Feb 9, 2024 at 11:06 AM Roy Bekken wrote: > > > > > > > > > > > On fredag 9. februar 2024 04:04:04 CET Steve Cossette wrote: > > > > > > > I am not gonna reply to all of that

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Roy Bekken
On fredag 9. februar 2024 17:41:33 CET Neal Gompa wrote: > On Fri, Feb 9, 2024 at 11:06 AM Roy Bekken wrote: > > > > > > > On fredag 9. februar 2024 04:04:04 CET Steve Cossette wrote: > > > > > I am not gonna reply to all of that because all we are doing at this > > > point > > > is repeating th

Re: exiv2 and protobuf hard to do soname bump without turbulence

2024-02-09 Thread Gary Buhrmaster
On Fri, Feb 9, 2024 at 4:23 PM Sérgio Basto wrote: > > Hi, > > I'd like to bring to your attention that Fedora would benefit with > update of exiv2 [1] and protobuf [2] but these packages have lots of > dependencies and the update of the dependent packages is not trivial . > tips, ideas and opini

Re: exiv2 and protobuf hard to do soname bump without turbulence

2024-02-09 Thread Michael J Gruber
Am Fr., 9. Feb. 2024 um 17:23 Uhr schrieb Sérgio Basto : > > Hi, > > I'd like to bring to your attention that Fedora would benefit with > update of exiv2 [1] and protobuf [2] but these packages have lots of > dependencies and the update of the dependent packages is not trivial . > tips, ideas and

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Neal Gompa
On Fri, Feb 9, 2024 at 11:06 AM Roy Bekken wrote: > > On fredag 9. februar 2024 04:04:04 CET Steve Cossette wrote: > > I am not gonna reply to all of that because all we are doing at this point > > is repeating the same thing. But we are NOT stopping you from using x11. > > You can either build it

exiv2 and protobuf hard to do soname bump without turbulence

2024-02-09 Thread Sérgio Basto
Hi, I'd like to bring to your attention that Fedora would benefit with update of exiv2 [1] and protobuf [2] but these packages have lots of dependencies and the update of the dependent packages is not trivial . tips, ideas and opinions ? to do these soname updates thank you [1] https://src.fe

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Roy Bekken
On fredag 9. februar 2024 04:04:04 CET Steve Cossette wrote: > I am not gonna reply to all of that because all we are doing at this point > is repeating the same thing. But we are NOT stopping you from using x11. > You can either build it yourself and put it on a copr (it’s not like neal > is using

Re: dnf-4.19.0 without filelists in Rawhide soon

2024-02-09 Thread Miroslav Suchý
Dne 09. 02. 24 v 16:29 Florian Weimer napsal(a): What's the impact on mock and older chroots? Just use bootstrap chroot? Yes, in rawhide if you build package for older chroot, you will have to use bootstrap chroot. It is enabled by default. You will have problems if you disabled it manually.

[heads up] update to sg3_utils-1.48 with soname bump in rawhide

2024-02-09 Thread Dan Horák
Hi, I am in process of updating sg3_utils to the latest 1.48 version that brings a soname bump. The dependent packages will be rebuilt in a sidetag. All the deps build fine in my testing. sudo dnf --repoid=rawhide repoquery --whatrequires sg3_utils-libs ddpt-0:0.97-8.fc40 ledmon-0:0.97-4.fc40 li

Re: dnf-4.19.0 without filelists in Rawhide soon

2024-02-09 Thread Jan Kolarik
Hi Florian, What's the impact on mock and older chroots? Just use bootstrap chroot? I don't expect any issues with existing environments. If the filelists metadata is already present on the system, DNF simply won't load them by default now. Or are you referring to something else? Regards, Jan

Re: dnf-4.19.0 without filelists in Rawhide soon

2024-02-09 Thread Florian Weimer
* Jan Kolarik: > From a Fedora user perspective, there won't be any changes in the way > you operate the DNF package manager. The only difference is that > typically there will be less metadata downloaded. Since all packages > in Fedora should have already eliminated file dependencies requiring >

Re: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium)

2024-02-09 Thread Jens-Ulrik Petersen
I should also have added there's an increasing amount of technical debt with the pandoc packaging - I guess I need to beg people to help with package reviews: also reminded of our packaging (review) streamlining discussion from Flock last year. Jens On Fri, 9 Feb 2024, 23:23 Jens-Ulrik Petersen,

Re: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium)

2024-02-09 Thread Jens-Ulrik Petersen
Hello I am here - thanks for contacting me. I was hoping to cover this as part of my F40 Change, but unfortunately I haven't gotten to it, so the Change is now at risk of being deferred to F41. Nevertheless I will see what I can do about this for F40: maybe a backport can also be done for F39. N

Re: OpenSSL 3.2.1 available in rawhide

2024-02-09 Thread Jaroslav Prokop
On 2/9/24 14:47, Tom Hughes via devel wrote: On 09/02/2024 13:34, Jarek Prokop wrote: Since the error from the scratch build says "invalid CA certificate" I thought to use some openssl "verification" command, this one seems like I'm on the right path. I have tried more permutations of the co

Re: OpenSSL 3.2.1 available in rawhide

2024-02-09 Thread Tom Hughes via devel
On 09/02/2024 13:34, Jarek Prokop wrote: Since the error from the scratch build says "invalid CA certificate" I thought to use some openssl "verification" command, this one seems like I'm on the right path. I have tried more permutations of the command with certificates available in the `spec

Re: OpenSSL 3.2.1 available in rawhide

2024-02-09 Thread Jarek Prokop
On 2/9/24 10:26, Dmitry Belyavskiy wrote: Dear Yaakov, On Fri, Feb 9, 2024 at 4:51 AM Yaakov Selkowitz wrote: On Thu, 2024-02-08 at 20:37 +0100, Sahana Prasad wrote: > Hello everyone, > OpenSSL 3.2.1 is now available in rawhide [1]. > There are no API/ABI changes in compar

[heads up] update to jpegxl-0.9.2 with soname bump in rawhide

2024-02-09 Thread Sérgio Basto
Hi, I will start a mass rebuild [1] in a side-tag, very soon , the goal is finish and merge it before branch of Fedora 40, please let me know we have any objection that prevent to proceeding. Best regards, [1] dnf repoquery --disablerepo=* --enablerepo={rpmfusion-{non,}free-,}rawhide --whatrequ

dnf-4.19.0 without filelists in Rawhide soon

2024-02-09 Thread Jan Kolarik
Hello everyone, Just a heads up that a new DNF version (4.19.0) is on its way to Rawhide and is expected to land within the next several hours. This update brings a system-wide change related to not downloading filelists metadata by

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Sérgio Basto
On Fri, 2024-02-09 at 13:21 +0100, Marc Deop i Argemí wrote: > On Friday, 9 February 2024 11:53:01 CET Sérgio Basto wrote: > > so you agree that are giving the overhead to us (the people who > > want > > keep X11 as it is ) > > Yes!!! OF COURSE! > > If you wanna maintain something you need to han

Re: Fwd: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium)

2024-02-09 Thread Christopher Klooz
Thanks! :) On 09/02/2024 13.18, Luna Jernberg wrote: CCed his work email in case he looks there -- Forwarded message - Från: Christopher Klooz Date: fre 9 feb. 2024 kl 13:05 Subject: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulner

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Marc Deop i Argemí
On Friday, 9 February 2024 11:53:01 CET Sérgio Basto wrote: > so you agree that are giving the overhead to us (the people who want > keep X11 as it is ) Yes!!! OF COURSE! If you wanna maintain something you need to handle the overhead! Not the other way around! -- __

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Marc Deop i Argemí
On Friday, 9 February 2024 04:15:17 CET Kevin Kofler via devel wrote: > Well, then kwin-x11 will also no longer depend on kwin YE > and your argument > that it is a problem because it introduces a hard version lock will be moot. Well, there would be no argument to be "moot" because there wo

Fwd: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium)

2024-02-09 Thread Luna Jernberg
CCed his work email in case he looks there -- Forwarded message - Från: Christopher Klooz Date: fre 9 feb. 2024 kl 13:05 Subject: Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium) To: Development discuss

Unresponsive maintainer: petersen / Pandoc package not updated since June 2023: Security vulnerability, CVE-2023-35936 (medium)

2024-02-09 Thread Christopher Klooz
I cannot reach the maintainer petersen (see mail below): The package "pandoc" remains at 3.1.3 in Fedora, but pandoc is already at 3.1.11.1. Among the updates since 3.1.3, there have been two security-critical (including the medium CVE-2023-35936. Security fixes are in 3.1.4 & 3.1.6). The actu

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-09 Thread Sérgio Basto
On Thu, 2024-02-08 at 22:04 -0500, Steve Cossette wrote: > I > On Thu, Feb 8, 2024 at 9:51 PM Sérgio Basto > wrote: > > On Thu, 2024-02-08 at 20:43 +0100, Fabio Valentini wrote: > > > On Thu, Feb 8, 2024 at 12:33 PM Sérgio Basto > > > wrote: > > > > > > > > On Wed, 2024-02-07 at 16:03 +0100, Mar

Re: [heads up] mass rebuild for opencv 4.9.0 with soname bump on rawhide

2024-02-09 Thread Frantisek Zatloukal
On Fri, Feb 9, 2024 at 2:16 AM Sérgio Basto wrote: > MLT built [1] (with one workaround for GCC for x86_64). > > [1] > https://bodhi.fedoraproject.org/updates/FEDORA-2024-7b5199d4f6 > > Thanks a lot, krita rebuilt: https://bodhi.fedoraproject.org/updates/FEDORA-2024-324af7694e -- Best regards

Unresponsive packagers: yangrr

2024-02-09 Thread Pierre-Yves Chibon
Good Morning Everyone, Since January 17th, we have been emailing daily the following user to notify that the email they have set in FAS does not correspond to a valid bugzilla account. This is a requirement for Fedora packagers. Does someone know how to contact yangrr? yangrr is watching rpms/0x

Unresponsive packagers: nknazeko

2024-02-09 Thread Pierre-Yves Chibon
Good Morning Everyone, Since November 1st, we have been emailing daily the following user to notify that the email they have set in FAS does not correspond to a valid bugzilla account. This is a requirement for Fedora packagers. Does someone know how to contact nknazeko? nknazeko is maintainer o

Re: OpenSSL 3.2.1 available in rawhide

2024-02-09 Thread Dmitry Belyavskiy
Dear Yaakov, On Fri, Feb 9, 2024 at 4:51 AM Yaakov Selkowitz wrote: > On Thu, 2024-02-08 at 20:37 +0100, Sahana Prasad wrote: > > Hello everyone, > > OpenSSL 3.2.1 is now available in rawhide [1]. > > There are no API/ABI changes in comparison with the last version in > > rawhide > > (3.1.4).