From 3b43203e887a0bc4f575639cf3c11eda48db2487 Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 19:37:16 +0000 Subject: [PATCH 1/7] F30 System-Wide Change: Reset locale if not available For https://pagure.io/fedora-docs/release-notes/issue/290. --- diff --git a/modules/release-notes/pages/sysadmin/Distribution.adoc b/modules/release-notes/pages/sysadmin/Distribution.adoc index efbfd5d..9991b17 100644 --- a/modules/release-notes/pages/sysadmin/Distribution.adoc +++ b/modules/release-notes/pages/sysadmin/Distribution.adoc @@ -3,3 +3,11 @@ include::{partialsdir}/entities.adoc[] [[select-distribution]] = Distribution-wide Changes + +== Inherited locale settings will be reset on login if necessary + +When logging in over ssh or another mechanism, locale settings are +forwarded. If the destination does not support that is configured in +the source environment, various tools would generate warnings about +invalid locale settings. Now, locale is automatically reset to C.UTF-8 +if such situation is detected. From ae105b5bbc4ba5b46609f820d1c11483ea693976 Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 19:47:10 +0000 Subject: [PATCH 2/7] Python-progressbar2 as default For https://pagure.io/fedora-docs/release-notes/issue/272. --- diff --git a/modules/release-notes/pages/developers/Development_Python.adoc b/modules/release-notes/pages/developers/Development_Python.adoc index 9a2ac8c..2dc95b4 100644 --- a/modules/release-notes/pages/developers/Development_Python.adoc +++ b/modules/release-notes/pages/developers/Development_Python.adoc @@ -3,3 +3,8 @@ include::{partialsdir}/entities.adoc[] [[sect-python]] = Python + +== Python progressbar replaced with progressbar2 + +The progressbar package has been updated to use the progressbar2 fork, +which is newer and better maitained. From 2fde34b77b3295d9c27014c53aea02b7b2197765 Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 19:50:54 +0000 Subject: [PATCH 3/7] F30 System-Wide Change: Remove Obsolete Scriptlets For https://pagure.io/fedora-docs/release-notes/issue/271. --- diff --git a/modules/release-notes/pages/sysadmin/Distribution.adoc b/modules/release-notes/pages/sysadmin/Distribution.adoc index 9991b17..877d733 100644 --- a/modules/release-notes/pages/sysadmin/Distribution.adoc +++ b/modules/release-notes/pages/sysadmin/Distribution.adoc @@ -11,3 +11,9 @@ forwarded. If the destination does not support that is configured in the source environment, various tools would generate warnings about invalid locale settings. Now, locale is automatically reset to C.UTF-8 if such situation is detected. + +== Many obsolete RPM scriptlets have been removed + +Plenty of installation scriplets in packages are not necessary +anymore. Their removal should make installation and upgrades of +packages a bit faster. From 7f52124ad777356146d66c5182feb07125f2f76b Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 19:55:51 +0000 Subject: [PATCH 4/7] Enabling Python Generators by default For https://pagure.io/fedora-docs/release-notes/issue/268. --- diff --git a/modules/release-notes/pages/developers/Development_Python.adoc b/modules/release-notes/pages/developers/Development_Python.adoc index 2dc95b4..56e4898 100644 --- a/modules/release-notes/pages/developers/Development_Python.adoc +++ b/modules/release-notes/pages/developers/Development_Python.adoc @@ -4,6 +4,14 @@ include::{partialsdir}/entities.adoc[] [[sect-python]] = Python +== Automatically generated dependencies for Python packages + +The generator which generates Provides and Requires for Python RPM +packages based on the setup.py file has been enabled by default. This +makes the packaging of Python packages easier and more automatic by +reusing information provided by the upstream project, and should result +in fewer unecessary or missing dependencies in rpms. + == Python progressbar replaced with progressbar2 The progressbar package has been updated to use the progressbar2 fork, From c8a8c5010253c71963a5f4363edb150802c69495 Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 20:02:41 +0000 Subject: [PATCH 5/7] F30 System-Wide Change: Mass Python 2 Package Removal For https://pagure.io/fedora-docs/release-notes/issue/214. --- diff --git a/modules/release-notes/pages/developers/Development_Python.adoc b/modules/release-notes/pages/developers/Development_Python.adoc index 56e4898..9a9862a 100644 --- a/modules/release-notes/pages/developers/Development_Python.adoc +++ b/modules/release-notes/pages/developers/Development_Python.adoc @@ -4,6 +4,29 @@ include::{partialsdir}/entities.adoc[] [[sect-python]] = Python +== Python 2 is deprecated in Fedora 30 + +Many Python 2 modules were removed from the distribution: packages +that only provide Python 2 importable modules, if they are not used by +any other package (leaf packages). + +While this change should not affect regular users, it will affect +developers that use system-packaged Python modules. + +If you are developing software that needs to run with Python 2, we +recommend using a virtual environment and installing dependencies from +the Python Package index (PyPI). See details at: +https://developer.fedoraproject.org/tech/languages/python/python-installation.html + +We also recommend using a virtual environment (venv) for Python 3, if +your software targets the wider Python ecosystem rather than Fedora +specifically. Using venv will decouple your development environment +from the system. + +If you are developing for a Fedora package, please port to Python 3 as +soon as possible. Almost complete Python 2 removal is planned for the next +release. + == Automatically generated dependencies for Python packages The generator which generates Provides and Requires for Python RPM From 03bff296b2c94fa57355218df71a74c32b551886 Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 20:06:40 +0000 Subject: [PATCH 6/7] Remove Excessive Linking For https://pagure.io/fedora-docs/release-notes/issue/213. --- diff --git a/modules/release-notes/pages/sysadmin/Distribution.adoc b/modules/release-notes/pages/sysadmin/Distribution.adoc index 877d733..4a6485e 100644 --- a/modules/release-notes/pages/sysadmin/Distribution.adoc +++ b/modules/release-notes/pages/sysadmin/Distribution.adoc @@ -17,3 +17,10 @@ if such situation is detected. Plenty of installation scriplets in packages are not necessary anymore. Their removal should make installation and upgrades of packages a bit faster. + +== Binaries provided by the distribution have optimized linking + +The link flags used for Fedora packages have been updated to skip +libraries which are not used by the executable. This removes the +dependencies on those librararies from various packages, making +their installation slightly more efficient. From 5430ccace8c8a054eeac644d45067cafa84eff6c Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Apr 25 2019 20:09:56 +0000 Subject: [PATCH 7/7] F30 Change: Build non-RELRO ELF binaries with .plt.got isolation For https://pagure.io/fedora-docs/release-notes/issue/189. --- diff --git a/modules/release-notes/pages/sysadmin/Distribution.adoc b/modules/release-notes/pages/sysadmin/Distribution.adoc index 4a6485e..6493236 100644 --- a/modules/release-notes/pages/sysadmin/Distribution.adoc +++ b/modules/release-notes/pages/sysadmin/Distribution.adoc @@ -24,3 +24,10 @@ The link flags used for Fedora packages have been updated to skip libraries which are not used by the executable. This removes the dependencies on those librararies from various packages, making their installation slightly more efficient. + +== Binaries provided by the distribution have additional hardening + +The link flags used for Fedora packages have been updated to make the +array of function pointers which is used to implement dynamic linking +(the GOT) read-only at runtime. This makes it harder for exploit +writers to overwrite these function pointers and redirect execution.