F37 Change: Drop i686 builds of jdk8,11,17 and latest (18) rpms from
f37 onwards (System-Wide Change)
by Ben Cotton
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
== Summary ==
java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk and
java-latest-openjdk packages will no longer build i686 subpackages
== Owner ==
* Name: [[User:jvanek| Jiri Vanek]]
* Email: <jvanek(a)redhat.com>
* Product: java and java stack
* Responsible WG: java-sig (java and java-maint)(which no longer exists)
=== Expected schedule ===
* during march, drop i686 builds from all jdks in fedora rawhide
== Detailed Description ==
Fedora currently ships:
* java-1.8.0-openjdk (LTS)
* java-11-openjdk (LTS)
* java-17-openjdk (LTS)
* java-latest-openjdk (STS, jdk18).
All those builds on all architectures except jdk8, where arm32 with
jit is built by different package.
Unluckily, the i686 bit builds of jdk are rotten in upstream. The
recent breakage of i686 JIT just before branching nearly killed jdk17
as system jdk feature.
The rotting have main visibility with newer GCCs. If GCC bump, and it
does, it always triggers new issues in i686 JIT, and there is less and
less people to somehow workaround them. Unluckily, there is probably
no longer anyone willing to really fix them
== Benefit to Fedora ==
The i686 builds are rotten in usptream, and to patch them localy had
become pain. We may be introducing very bugy i686 jdk. Better then to
do so, we would rather not ship that at all.
This will untie hands of both JDK and GCC developers, who will no
longer need to dive into nasty legacy code.
== Scope ==
==== Change owners ====
* we will simiply stop building i686 pkg in rawhide
==== Other developers ====
* may notice the multilib i686 java missing.
* it is up to them to drop i686 builds or to povide workaround (if possible)
==== Other ====
* Release engineering: https://pagure.io/releng/issue/10686
* Trademark approval: N/A (not needed for this Change)
== Upgrade/compatibility impact ==
* The upgrade on multilib systems will lead to autoremoval of i686 javastack
* which should be minimum - 99% of javastack is noarch
== How To Test ==
install i686 java will result to not packages found
== User Experience ==
User experience on multilib systems will be bad. Bad reasonable.
== Dependencies ==
There are is unknown number of multilib java consumers. I expect some
of them may rise voice, but that will have to handled one by one.
== Contingency Plan ==
* Contingency mechanism: return i686 packages
* Contingency date: (not provided)
== Documentation ==
Will be neded...
== Release Notes ==
None yet...
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
1 year, 11 months
Golang F35 Mini Mass Rebuild
by Maxwell G
Hi Fedorians and Gophers,
Later this week, I will be a doing a mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs:
`golang` (affects all go binaries):
- CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode
- CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar
- CVE-2022-29526 golang: syscall: faccessat checks wrong group
(There are some Go CVEs that are a little bit older that will also be
mitigated by the rebuild for packages that haven't been updated recently)
CVEs in other golang libraries that affect a subset of Go packages:
- CVE-2022-21698 golang-github-prometheus-client: prometheus/client_golang:
Denial of service using InstrumentHandlerCounter
- CVE-2022-1996 go-restful: Authorization Bypass Through User-Controlled Key
Only packages that provide binaries need to be rebuilt, which will make this
rebuild less disruptive. Also, note that if your package uses vendored
dependencies that are affected by the latter two CVEs and haven't been patched,
you will need to handle this manually by querying upstream to update their
vendored dependencies (if the bundling is done upstream) and/or fix it
yourself. Thankfully, the packages don't need rebuilt in a specific order
(besides golang being first) due to the nature of go, so this will be less
complicated than, for example, the Python rebuilds.
No action will be required from you, unless your package is affected by the
aforementioned bundled dep issue, you'd like your package to receive special
treatment, or if the go-sig doesn't have permissions on your package (see
below).
I have made a list of affected packages here[1]. I didn't want to paste it into
this email, as it's pretty long. The list is split into 2 categories:
## go-sig packages
### mergable from Rawhide
For these packages, `rawhide` was determined to be mergable back to `f35`, as
they were up to date excluding the rebuild commit from when we rebuilt
`rawhide` a week or two ago.
### Not mergable
These packages were determined to not be mergable, as `rawhide` is ahead of
(or otherwise has diverged from) `f35`. Therefore, I will create a new rebuild
commit on `f35`. This will likely cause merge conflicts if you try to merge
`rawhide` back into `f35` after this change. Assuming the update would be
compatible and comply with the Updates Policy, I can move your package into
the other list and merge `rawhide` into `f35`. Please leave a comment on
https://pagure.io/GoSIG/go-sig/issue/41 if you would like me to do so.
Conversely, if you believe your package is incorrectly in `### mergeable`,
also let me know in the aforementioned ticket.
## non-go-sig packages
Neither I personally nor the go-sig has access to these packages, so I will
query a provenpackager to handle these. To the maintainers of these packages:
You really should really add go-sig to your package. Not having the
appropriate permissions delays us from mitigating CVEs in your package and
generally prevents us from effectively maintaining the Go stack. @fale has
already sent two reminders. Please see https://lists.fedoraproject.org/
archives/list/devel(a)lists.fedoraproject.org/message/
A4NEHUW52ELDHDMPQDCBSRJXHDPJK2QX/ for more information.
For the benefit of the provenpackager who will handle this, I have compiled the
same mergable and not mergable lists.
Thank you for your cooperation. I understand that this is a bit disruptive for
a stable release, but we don't have much of a choice.
[1]: https://pad.snopyta.org/BiFivroxQdqEZsW_tach8A
--
Maxwell G (@gotmax23)
Pronouns: He/Him/His
1 year, 11 months
Once again, more than 8 days delayed notifications
by Ralf Corsépius
Hi,
I thought the notification delay mess was fixed. Apparently, I was wrong.
I just received this:
<snip>
Subject: corsepiu pushed 1 commit to rpms/perl-Sub-HandlesVia (rawhide)
Date: Sat, 9 Jul 2022 10:39:46 +0000 (GMT)
From: notifications(a)fedoraproject.org
...
Notification time stamped 2022-07-01 05:57:40 UTC
...
</snip>
Ralf
1 year, 11 months
llvmpipe debugging help
by Adam Williamson
Hi, folks!
openQA tests on Rawhide are currently failing quite often, especially
on KDE, apparently because llvmpipe is crashing and taking down the
desktop environment. In the system logs, it looks like this:
2022-07-12T06:26:09.804990-04:00 fedora audit[1304]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1304 comm="llvmpipe-0" exe="
/usr/bin/kwin_wayland" sig=11 res=1
2022-07-12T06:26:09.805624-04:00 fedora kernel: show_signal_msg: 73 callbacks suppressed
2022-07-12T06:26:09.805761-04:00 fedora kernel: llvmpipe-0[1338]: segfault at 7fec83f00a30 ip 00007feca80787af sp 00007fecb4fd6850 error 4
2022-07-12T06:26:09.805831-04:00 fedora kernel: Code: 6d f4 66 44 0f 6f e5 66 44 0f 6c e0 66 0f 6d e8 41 0f 28 c3 41 0f 16 c1 66 45 0f 15 d9 41 0f 28 da 41 0f 16 d8 66 45 0f 15 d0 <66> 0f 6f 08 66 0f 6f 14 08 8d 14 09 48 63 d2 66 0f 6f 24 10 8d 34
2022-07-12T06:26:09.830632-04:00 fedora systemd[1]: Created slice system-systemd\x2dcoredump.slice - Slice /system/systemd-coredump.
2022-07-12T06:26:09.833124-04:00 fedora audit: BPF prog-id=137 op=LOAD
2022-07-12T06:26:09.833599-04:00 fedora audit: BPF prog-id=138 op=LOAD
2022-07-12T06:26:09.833751-04:00 fedora audit: BPF prog-id=139 op=LOAD
2022-07-12T06:26:09.837271-04:00 fedora systemd[1]: Started systemd-coredump(a)0-2189-0.service - Process Core Dump (PID 2189/UID 0).
2022-07-12T06:26:09.837920-04:00 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@0-2189-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
2022-07-12T06:26:09.982088-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: Failed to generate job text for job with following properties:
2022-07-12T06:26:09.992539-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: processedFiles = 0, totalFiles = 0
2022-07-12T06:26:09.992687-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: current file name = ""
2022-07-12T06:26:09.992735-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: destination url = QUrl("")
2022-07-12T06:26:09.992791-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: label1 = "", value1 = ""
2022-07-12T06:26:09.992851-04:00 fedora plasmashell[1382]: org.kde.plasma.notifications: label2 = "", value2 = ""
2022-07-12T06:26:11.184992-04:00 fedora [2195]: json_parse on {"type":"rpm","name":"libedit","version":"3.1-41.20210910cvs.fc36","architecture":"x86_64","osCpe":"cpe:/o:fedoraproject:fedora:36"}<C5> failed: Invalid argument
2022-07-12T06:26:11.190411-04:00 fedora systemd-coredump[2190]: Process 1304 (kwin_wayland) of user 1000 dumped core.#012#012Module linux-vdso.so.1 with build-id 805638058c919fd779cc1e1fa412f8832069dbf3#012Module breezedecoration.so with build-id e715bf13e75d84216d6607d4cdeafc4f1a68e95e#012Metadata for module breezedecoration.so owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "plasma-breeze",#012#011"version" : "5.25.2-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module libxshmfence.so.1 with build-id 930360dde486956810e2a4ab67efae781f463ced#012Metadata for module libxshmfence.so.1 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "libxshmfence",#012#011"version" : "1.3-10.fc36",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:36"#012}#012#012Module libxcb-present.so.0 with build-id e55a074882c4c9357934efcf295654ea5badcce1#012Metadata for module libxcb-present.so.0 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "libxcb",#012#011"version" : "1.13.1-9.fc36",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:36"#012}#012#012Module libxcb-dri2.so.0 with build-id b557629bc47fea6de9edb4534378f26906bc5d80#012Metadata for module libxcb-dri2.so.0 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "libxcb",#012#011"version" : "1.13.1-9.fc36",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:36"#012}#012#012Module libX11-xcb.so.1 with build-id b395bdbc52537c00bd88a7a631dcac49b7c40934#012Metadata for module libX11-xcb.so.1 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "libX11",#012#011"version" : "1.8.1-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module libEGL_mesa.so.0 with build-id 733f6ea3cfd4357a9668e6b3c5a3968af4533690#012Metadata for module libEGL_mesa.so.0 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "mesa",#012#011"version" : "22.1.3-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module libKWinNightColorPlugin.so with build-id dc82a504bc7fdd79bf4e7d69b6fa8137cbaf644a#012Metadata for module libKWinNightColorPlugin.so owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "kwin",#012#011"version" : "5.25.2-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module krunnerintegration.so with build-id 9b62ad046672cd903572c0a72c38f36580de7588#012Metadata for module krunnerintegration.so owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "kwin",#012#011"version" : "5.25.2-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module colordintegration.so with build-id 6266591e822c25984dc2d50249713f145a8568e3#012Metadata for module colordintegration.so owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "kwin",#012#011"version" : "5.25.2-1.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module libtinfo.so.6 with build-id 3316591b8bdf1e4d2cd97a12c2ec8099f01a96ba#012Metadata for module libtinfo.so.6 owned by FDO found: {#012#011"type" : "rpm",#012#011"name" : "ncurses",#012#011"version" : "6.3-2.20220501.fc37",#012#011"architecture" : "x86_64",#012#011"osCpe" : "cpe:/o:fedoraproject:fedora:37"#012}#012#012Module libedit.so.0 with build-id 786ebbe150c63e27beb2957d717bece33431af6f#012Stack trace of thread 1338:#012#0 0x00007feca80787af n/a (n/a + 0x0)#012ELF object binary architecture: AMD x86-64
2022-07-12T06:26:11.267438-04:00 fedora systemd[1]: systemd-coredump(a)0-2189-0.service: Deactivated successfully.
we get a core dump from the window manager process (kwin_wayland in
this case), but backtracing it the usual way does not produce anything
useful. So I've been a bit stuck on how to proceed with debugging from
here.
It looks like this started happening around a month ago in F36 (it's
also happening in Rawhide). I think it ties in with mesa-22.1.1 going
stable:
https://bodhi.fedoraproject.org/updates/FEDORA-2022-db6aea82e4
This person may be hitting the same issue:
https://www.reddit.com/r/Fedora/comments/vswyq4/fedora_36_llvmpipe_segfault/
How can we debug this and hopefully get it fixed? Can anyone give me
any pointers? Thanks!
--
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net
1 year, 11 months
Summary/Minutes from today's FESCo Meeting (2022-07-12)
by Fabio Valentini
===================================
#fedora-meeting: FESCo (2022-07-12)
===================================
Meeting started by decathorpe at 17:00:53 UTC. The full logs are
available at
https://meetbot.fedoraproject.org/fedora-meeting/2022-07-12/fesco.2022-07...
.
Meeting summary
---------------
* Init Process (decathorpe, 17:01:23)
* LINK:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
Schedule (decathorpe, 17:07:10)
* Change: Deprecate openssl1.1 package (decathorpe, 17:09:30)
* AGREED: Give change owners one more week to update their proposal
(+7, 0, -0) (decathorpe, 17:24:54)
* #2828 Change: Unfiltered Flathub (decathorpe, 17:26:51)
* LINK:
https://blogs.gnome.org/wjjt/2022/06/14/how-many-flathub-apps-reuse-other...
(nirik, 17:50:40)
* AGREED: REJECTED: Proposal is rejected as-is, but Change owners will
- of course - be able to submit and updated Change proposal. (+0, 4,
-4) (decathorpe, 18:19:47)
* Primary objection was due to the overriding of Fedora-packaged
software by third-party flatpaks (sgallagh, 18:20:27)
* #2759 Proposal: periodic check on packagers reachability (decathorpe,
18:21:32)
* Next Week's Chair (decathorpe, 18:24:20)
* LINK: https://pagure.io/fedora-hatch-2022-rochester
(Eighth_Doctor, 18:25:47)
* ACTION: nirik will chair the meeting on 2022-07-19 (decathorpe,
18:29:12)
* ACTION: sgallagh will chair the meeting on 2022-07-26 (decathorpe,
18:29:21)
* Open Floor (decathorpe, 18:29:29)
Meeting ended at 18:32:29 UTC.
Action Items
------------
* nirik will chair the meeting on 2022-07-19
* sgallagh will chair the meeting on 2022-07-26
Action Items, by person
-----------------------
* nirik
* nirik will chair the meeting on 2022-07-19
* sgallagh
* sgallagh will chair the meeting on 2022-07-26
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* decathorpe (81)
* sgallagh (69)
* Eighth_Doctor (60)
* zodbot (31)
* zbyszek[m] (27)
* gotmax[m] (27)
* MichaelCatanzaro (25)
* nirik (19)
* dcantrell (15)
* OwenTaylor[m] (13)
* music[m] (11)
* dustymabe (8)
* salimma (6)
* davide (4)
* bcotton (4)
* mhroncok (3)
* mclasen (3)
* zbyszek (0)
* music (0)
* mhayden (0)
* Conan_Kudo (0)
* Pharaoh_Atem (0)
* Son_Goku (0)
* King_InuYasha (0)
* Sir_Gallantmon (0)
Generated by `MeetBot`_ 0.4
.. _`MeetBot`: https://fedoraproject.org/wiki/Zodbot#Meeting_Functions
1 year, 11 months
Orphaned owncloud-client
by Miro Hrončok
Hey,
I've just orphaned owncloud-client, as I was clearly not maintaining it well.
I've originally took this because of our university OwnCloud, but it seems I
lost access to that anyway :/
--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
1 year, 11 months
