[RFC] Replace glibc's libcrypt with libxcrypt for Fedora 29/30
by Björn 'besser82' Esser
Hello everyone,
since there has been some discussion in the last time about removing
libcrypt from glibc in some time [1,2,3,4] and splitting it out into a
separate project which can evolve quicker, I'd like to hear your
oppinion about replacing glibc's libcrypt with libxcrypt [5] for Fedora
29 (or 30).
libxcrypt will be fully binary compatible with software linked against
glibc's libcrypt and does not require any rebuilds. However, the
converse is not true: programs linked against libxcrypt will not work
with glibc's libcrypt. It comes with a set of extended interfaces
pioneered by Openwall Linux, crypt_rn, crypt_ra, crypt_gensalt,
crypt_gensalt_rn, and crypt_gensalt_ra. Also, programs that use
certain legacy APIs supplied by glibc's libcrypt (encrypt, encrypt_r,
setkey, setkey_r, and fcrypt) cannot be compiled against libxcrypt.
The crypt and gensalt functions are supporting all (except for Crypt16,
which was used on Ultrix and Tru64, only) widely used password hashing
algorithms [6], which before were specific to just some operating
system's implementations of libcrypt [7].
There are preperations to add password hashing with PBKDF2 using HMAC-
SHA3-512 to libxcrypt as well.
Anyways, before this can happen, there is still some work to be done
with libxcrypt, like adding a FIPS mode or FIPS compliance in a
different way.
Cheers,
Björn
[1] https://sourceware.org/ml/libc-alpha/2017-06/msg00055.html
[2] https://sourceware.org/ml/libc-alpha/2017-06/msg00079.html
[3] https://sourceware.org/ml/libc-alpha/2017-08/msg01257.html
[4] https://sourceware.org/ml/libc-alpha/2017-08/msg01408.html
[5] https://github.com/besser82/libxcrypt
[6] https://en.wikipedia.org/wiki/Crypt_(C)#Key_derivation_functions_s
upported_by_crypt
[7] https://en.wikipedia.org/wiki/Crypt_(C)#Support_in_operating_syste
ms
6 years
F28: maybe a bug on report dnf and env outputs
by Cătălin George Feștilă
the command : $ dnf grouplist -v show mw I have this:
Installed Groups:
custom-environment,
minimal-environment,
xfce-desktop-environment,
basic-desktop-environment
The env command show me most KDE variables and run the KDE environment
XDG_CURRENT_DESKTOP=KDE
The Fedora 28 start with plasma KDE
I don't install kde , why is on my distro ?
Is this a bug ?
6 years
Fedora rawhide compose report: 20180330.n.0 changes
by Fedora Rawhide Report
OLD: Fedora-Rawhide-20180329.n.1
NEW: Fedora-Rawhide-20180330.n.0
===== SUMMARY =====
Added images: 4
Dropped images: 1
Added packages: 0
Dropped packages: 2
Upgraded packages: 28
Downgraded packages: 0
Size of added packages: 0 B
Size of dropped packages: 17.83 KiB
Size of upgraded packages: 2.02 GiB
Size of downgraded packages: 0 B
Size change of upgraded packages: -66.15 MiB
Size change of downgraded packages: 0 B
===== ADDED IMAGES =====
Image: AtomicHost raw-xz ppc64le
Path: AtomicHost/ppc64le/images/Fedora-AtomicHost-Rawhide-20180330.n.0.ppc64le.raw.xz
Image: Python_Classroom live x86_64
Path: Labs/x86_64/iso/Fedora-Python-Classroom-Live-x86_64-Rawhide-20180330.n.0.iso
Image: AtomicHost qcow2 ppc64le
Path: AtomicHost/ppc64le/images/Fedora-AtomicHost-Rawhide-20180330.n.0.ppc64le.qcow2
Image: Container_Minimal_Base docker aarch64
Path: Container/aarch64/images/Fedora-Container-Minimal-Base-Rawhide-20180330.n.0.aarch64.tar.xz
===== DROPPED IMAGES =====
Image: Container_Base docker s390x
Path: Container/s390x/images/Fedora-Container-Base-Rawhide-20180329.n.1.s390x.tar.xz
===== ADDED PACKAGES =====
===== DROPPED PACKAGES =====
Package: php-channel-drush-1.3-9.fc28
Summary: Adds pear.drush.org channel to PEAR
RPMs: php-channel-drush
Size: 8.60 KiB
Package: php-channel-symfony2-1.3-9.fc28
Summary: Adds pear.symfony.com channel to PEAR
RPMs: php-channel-symfony2
Size: 9.23 KiB
===== UPGRADED PACKAGES =====
Package: ansifilter-2.10-1.fc29
Old package: ansifilter-2.8-2.fc28
Summary: ANSI terminal escape code converter
RPMs: ansifilter ansifilter-gui
Size: 1.58 MiB
Size change: 26.77 KiB
Changelog:
* Fri Mar 30 2018 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.10-1
- Updated to new 2.10 upstream version, fixes rhbz #1552957
Package: dogtag-pki-10.6.0-0.3.fc29
Old package: dogtag-pki-10.6.0-0.2.fc29
Summary: Dogtag Public Key Infrastructure (PKI) Suite
RPMs: dogtag-pki
Size: 8.73 KiB
Size change: 120 B
Changelog:
* Thu Mar 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.0-0.3
- Rebased to PKI 10.6.0 beta2
Package: dogtag-pki-theme-10.6.0-0.3.fc29
Old package: dogtag-pki-theme-10.6.0-0.2.fc29
Summary: Certificate System - Dogtag PKI Theme Components
RPMs: dogtag-pki-console-theme dogtag-pki-server-theme
Size: 370.72 KiB
Size change: 180 B
Changelog:
* Thu Mar 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.0-0.3
- Rebased to PKI 10.6.0 beta2
Package: erlang-cache_tab-1.0.13-1.fc29
Old package: erlang-cache_tab-1.0.12-4.fc29
Summary: Erlang cache table application
RPMs: erlang-cache_tab
Size: 392.08 KiB
Size change: -22.88 KiB
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.13-1
- Update to 1.0.13 (#1560116).
- https://github.com/processone/cache_tab/blob/1.0.13/CHANGELOG.md
- Add a debug package.
Package: erlang-eimp-1.0.3-1.fc29
Old package: erlang-eimp-1.0.2-1.fc29
Summary: Erlang Image Manipulation Process
RPMs: erlang-eimp
Size: 403.24 KiB
Size change: 28.98 KiB
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.3-1
- Update to 1.0.3 (#1561272).
Package: erlang-epam-1.0.3-5.fc29
Old package: erlang-epam-1.0.3-5.fc28
Summary: Library for ejabberd for PAM authentication support
RPMs: erlang-epam
Size: 355.97 KiB
Size change: 1.70 KiB
Package: erlang-esip-1.0.22-1.fc29
Old package: erlang-esip-1.0.21-4.fc29
Summary: ProcessOne SIP server component in Erlang
RPMs: erlang-esip
Size: 1.10 MiB
Size change: 1012 B
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.22-1
- Update to 1.0.22 (#1560798).
- https://github.com/processone/esip/blob/1.0.22/CHANGELOG.md
Package: erlang-ezlib-1.0.4-1.fc29
Old package: erlang-ezlib-1.0.3-2.fc28
Summary: Native zlib driver for Erlang
RPMs: erlang-ezlib
Size: 153.52 KiB
Size change: 4.39 KiB
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.4-1
- Update to 1.0.4 (#1559855).
- https://github.com/processone/ezlib/blob/1.0.4/CHANGELOG.md
Package: erlang-fast_yaml-1.0.13-1.fc29
Old package: erlang-fast_yaml-1.0.12-4.fc29
Summary: An Erlang wrapper for libyaml "C" library
RPMs: erlang-fast_yaml
Size: 186.75 KiB
Size change: 5.27 KiB
Changelog:
* Tue Mar 27 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.13-1
- Update to 1.0.13 (#1559643).
- https://github.com/processone/fast_yaml/blob/1.0.13/CHANGELOG.md
Package: erlang-luerl-0.3-1.fc29
Old package: erlang-luerl-0.2-6.fc29
Summary: Lua in Erlang
RPMs: erlang-luerl
Size: 389.06 KiB
Size change: 2.93 KiB
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 0.3-1
- Update to 0.3 (#1560805).
Package: erlang-stun-1.0.21-1.fc29
Old package: erlang-stun-1.0.20-3.fc29
Summary: STUN and TURN library for Erlang / Elixir
RPMs: erlang-stun
Size: 98.98 KiB
Size change: 628 B
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.0.21-1
- Update to 1.0.21 (#1559662).
- https://github.com/processone/stun/blob/1.0.21/CHANGELOG.md
Package: erlang-xmpp-1.1.20-1.fc29
Old package: erlang-xmpp-1.1.19-4.fc29
Summary: Erlang/Elixir XMPP parsing and serialization library
RPMs: erlang-xmpp
Size: 8.72 MiB
Size change: -99.47 KiB
Changelog:
* Thu Mar 29 2018 Randy Barlow <bowlofeggs(a)fedoraproject.org> - 1.1.20-1
- Update to 1.1.20 (#1559664).
- https://github.com/processone/xmpp/blob/1.1.20/CHANGELOG.md
- Provide a debug package.
Package: gap-pkg-carat-2.2.2-1.fc29
Old package: gap-pkg-carat-2.2.1-1.fc29
Summary: GAP interface to CARAT
RPMs: gap-pkg-carat
Size: 180.08 KiB
Size change: 2.38 KiB
Changelog:
* Fri Mar 30 2018 Jerry James <loganjerry(a)gmail.com> - 2.2.2-1
- New upstream version
Package: gap-pkg-guava-3.14-1.fc29
Old package: gap-pkg-guava-3.13.1-7.fc28
Summary: Computing with error-correcting codes
RPMs: gap-pkg-guava
Size: 11.95 MiB
Size change: 67.32 KiB
Changelog:
* Thu Mar 29 2018 Jerry James <loganjerry(a)gmail.com> - 3.14-1
- New upstream version
- Drop upstreamed -bibtex patch
Package: gnome-software-3.28.0-5.fc29
Old package: gnome-software-3.28.0-4.fc29
Summary: A software center for GNOME
RPMs: gnome-software gnome-software-devel gnome-software-editor gnome-software-snap
Size: 29.28 MiB
Size change: 32.97 KiB
Changelog:
* Thu Mar 29 2018 Kalev Lember <klember(a)redhat.com> - 3.28.0-5
- Fix empty OS Updates showing up
- Make rpm-ostree update triggering work
Package: ibus-1.5.18-4.fc29
Old package: ibus-1.5.18-3.fc29
Summary: Intelligent Input Bus for Linux OS
RPMs: ibus ibus-devel ibus-devel-docs ibus-gtk2 ibus-gtk3 ibus-libs ibus-py2override ibus-pygtk2 ibus-setup ibus-wayland
Size: 44.34 MiB
Size change: 8.53 KiB
Changelog:
* Fri Mar 30 2018 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.18-4
- Fixed Bug 1554714 - improve order of unicode matches
Package: java-1.8.0-openjdk-1:1.8.0.162-4.b12.fc29
Old package: java-1.8.0-openjdk-1:1.8.0.161-9.b14.fc29
Summary: OpenJDK Runtime Environment
RPMs: java-1.8.0-openjdk java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility-debug java-1.8.0-openjdk-debug java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-debug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-debug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-debug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-debug java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-javadoc-zip-debug java-1.8.0-openjdk-openjfx java-1.8.0-openjdk-openjfx-debug java-1.8.0-openjdk-openjfx-devel java-1.8.0-openjdk-openjfx-devel-debug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-debug
Size: 1.13 GiB
Size change: 3.65 MiB
Changelog:
* Wed Mar 21 2018 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:1.8.0.162-1.b12
- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
- 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
- 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
- 8181810/PR3466/RH1498319.
* Mon Mar 26 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.162-2.b12
- Added patch 540 rhbz1548475-LDFLAGSusage.patch to honor build flags fully
* Thu Mar 29 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.162-3.b12
- returned patch562 rhbz_1540242.patch
- added Patch563 rhbz_1536622-JDK8197429-jdk8.patch
* Thu Mar 29 2018 Jiri Vanek <jvanek(a)redhat.com> - 1:1.8.0.162-4.b12
- added experimental %define _find_debuginfo_opts -g
- in attempt to fix https://bugzilla.redhat.com/show_bug.cgi?id=1520879
- no idea what will come out
Package: libalkimia-7.0.1-3.fc29
Old package: libalkimia-7.0.1-2.fc29
Summary: Financial library
RPMs: libalkimia libalkimia-devel libalkimia-doc libalkimia-qt5 libalkimia-qt5-devel
Size: 909.09 KiB
Size change: 4.91 KiB
Changelog:
* Thu Mar 29 2018 Rex Dieter <rdieter(a)fedoraproject.org> - 7.0.1-3
- -qt4: make kde4 kmymoney buildable again
- -qt4: use gmp unconditionally (as previous alkimia v5 used gmp)
Package: libguestfs-1:1.39.2-2.fc29
Old package: libguestfs-1:1.39.2-1.fc29
Summary: Access and modify virtual machine disk images
RPMs: erlang-libguestfs libguestfs libguestfs-bash-completion libguestfs-benchmarking libguestfs-devel libguestfs-forensics libguestfs-gfs2 libguestfs-gobject libguestfs-gobject-devel libguestfs-hfsplus libguestfs-inspect-icons libguestfs-java libguestfs-java-devel libguestfs-javadoc libguestfs-jfs libguestfs-man-pages-ja libguestfs-man-pages-uk libguestfs-nilfs libguestfs-reiserfs libguestfs-rescue libguestfs-rsync libguestfs-tools libguestfs-tools-c libguestfs-ufs libguestfs-xfs libguestfs-zfs lua-guestfs ocaml-libguestfs ocaml-libguestfs-devel perl-Sys-Guestfs php-libguestfs python2-libguestfs python3-libguestfs ruby-libguestfs virt-dib virt-p2v-maker virt-v2v
Size: 100.69 MiB
Size change: 25.06 KiB
Changelog:
* Thu Mar 29 2018 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.39.2-2
- Add patch to fix detection of qemu mandatory locking.
Package: libomp-6.0.0-2.fc29
Old package: libomp-6.0.0-1.fc29
Summary: OpenMP runtime for clang
RPMs: libomp libomp-devel
Size: 1.78 MiB
Size change: 23.36 KiB
Changelog:
* Wed Mar 28 2018 Tom Stellard <tstellar(a)redhat.com> - 6.0.0-2
- Enable libomptarget plugins
Package: libsecret-0.18.6-1.fc29
Old package: libsecret-0.18.5-7.fc28
Summary: Library for storing and retrieving passwords and other secrets
RPMs: libsecret libsecret-devel
Size: 1.75 MiB
Size change: -1.79 KiB
Changelog:
* Thu Mar 29 2018 Kalev Lember <klember(a)redhat.com> - 0.18.6-1
- Update to 0.18.6
- Use valgrind_arches macro instead of hardcoding valgrind arch list
Package: php-composer-ca-bundle-1.1.1-1.fc29
Old package: php-composer-ca-bundle-1.1.0-2.fc28
Summary: Lets you find a path to the system CA
RPMs: php-composer-ca-bundle
Size: 16.41 KiB
Size change: 200 B
Changelog:
* Fri Mar 30 2018 Remi Collet <remi(a)remirepo.net> - 1.1.1-1
- update to 1.1.1 (no change)
- use range dependencies on F27+
- use phpunit6 on F27+
Package: pki-console-10.6.0-0.3.fc29
Old package: pki-console-10.6.0-0.2.fc29
Summary: Certificate System - PKI Console
RPMs: pki-console
Size: 1.15 MiB
Size change: 1.25 KiB
Changelog:
* Thu Mar 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.0-0.3
- Rebased to PKI 10.6.0 beta2
Package: pki-core-10.6.0-0.3.fc29
Old package: pki-core-10.6.0-0.2.fc29
Summary: Certificate System - PKI Core Components
RPMs: pki-base pki-base-java pki-ca pki-javadoc pki-kra pki-ocsp pki-server pki-symkey pki-tks pki-tools pki-tps python2-pki python3-pki
Size: 16.40 MiB
Size change: 75.05 KiB
Changelog:
* Thu Mar 29 2018 Dogtag PKI Team <pki-devel(a)redhat.com> - 10.6.0-0.3
- Iryna Shcherbina <ishcherb(a)redhat.com>: Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
- Rebased to PKI 10.6.0 beta2
Package: python3-3.6.5-1.fc29
Old package: python3-3.6.4-20.fc29
Summary: Interpreter of the Python programming language
RPMs: python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter
Size: 143.16 MiB
Size change: -164.45 KiB
Changelog:
* Thu Mar 29 2018 Charalampos Stratakis <cstratak(a)redhat.com> - 3.6.5-1
- Update to 3.6.5
Package: python37-3.7.0-0.14.b3.fc29
Old package: python37-3.7.0-0.13.b2.fc29
Summary: Version 3.7 of the Python interpreter
RPMs: python37
Size: 133.98 MiB
Size change: 643.66 KiB
Changelog:
* Thu Mar 29 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.0-0.14.b3
- Update to 3.7.0b3
Package: rust-1.25.0-1.fc29
Old package: rust-1.24.1-1.fc29
Summary: The Rust Programming Language
RPMs: rust rust-debugger-common rust-doc rust-gdb rust-lldb rust-src rust-std-static rustfmt-preview
Added RPMs: rustfmt-preview
Size: 401.94 MiB
Size change: -70.55 MiB
Changelog:
* Thu Mar 29 2018 Josh Stone <jistone(a)redhat.com> - 1.25.0-1
- Update to 1.25.0.
Package: salt-2017.7.5-1.fc29
Old package: salt-2017.7.4-1.fc29
Summary: A parallel remote execution system
RPMs: salt salt-api salt-cloud salt-master salt-minion salt-ssh salt-syndic
Size: 10.15 MiB
Size change: 95.51 KiB
Changelog:
* Tue Mar 27 2018 SaltStack Packaging Team <packaging(a)saltstack.com> - 2017.7.5-1
- Update to feature release 2017.7.5-1 for Python 2
===== DOWNGRADED PACKAGES =====
6 years
Re: Node.js 6.14.1, 8.11.1 and 9.10.1 will *not* be built for Fedora
or EPEL
by Stephen Gallagher
On Fri, Mar 30, 2018 at 8:41 AM Robert Van Voorhees <rcvanvo(a)gmail.com>
wrote:
> While on the topic of Node.js versions, do we plan on moving Fedora 28 to
> Node 10, since their release dates coincide, or will Node 10 be pushed
> until Fedora 29?
>
> For those not aware, Node 10 is the next LTS, however it's LTS support
> does not start until October even though the release is slated for April:
> https://github.com/nodejs/Release
>
>
My plan is for Fedora 28 traditional RPM repositories to ship Node.js 8
because I don't like changing defaults after Beta release. However, as
Fedora 28 is now the first release with support for Fedora Modularity, you
may have noticed that it is also providing a non-default module for Node.js
6.x and 9.x that one can switch to. So what I intend to do is package up
Node.js 10.x as quickly as possible and make that a non-default module in
F28 and the default for F29.
So, you'll be able to use it in Fedora 28 by doing `dnf module install
nodejs:10` if you want to. Also available as a module will be 6.x and 9.x
if you really want or need them, though they won't carry updates past
upstream's EOL, which is in April 2019 for 6.x and June 2018 for 9.x).
6 years
Node.js 6.14.1, 8.11.1 and 9.10.1 will *not* be built for Fedora or EPEL
by Stephen Gallagher
Just a general notice to anyone using Node.js in Fedora. We're not going to
be rebuilding for the releases in the Subject because there's no need. The
X.Y.1 releases were created because of a compilation mistake made by the
upstream binary release process and contain no additional commits. Since
Fedora and EPEL rebuild all of the sources in our own build environment,
there is no need to issue an update at this time.
6 years
