From Fedora Project Wiki

< Releases‎ | 23

(→‎DNF System Upgrades: link to User:Wwoods and declare code completion)
 
(19 intermediate revisions by 5 users not shown)
Line 3: Line 3:




<!--- IMPORTANT NOTICE: DO NOT EDIT this page manually as it's generated automatically and all changes will be overwritten! If you want to change anything, change the original Feature page and it will be picked up in the next refresh. If not, ping jreznik.  
<!--- IMPORTANT NOTICE: DO NOT EDIT this page manually as it's generated automatically and all changes will be overwritten! If you want to change anything, change the original Feature page and it will be picked up in the next refresh. If not, ping jkurik.  


Thank you, Jaroslav
Thank you, Jan
--->
--->


Line 16: Line 16:


===[[Changes/Harden All Packages | Harden All Packages]]===
===[[Changes/Harden All Packages | Harden All Packages]]===
Hardening is  the process of securing a system/application by reducing its unnecessary functions, or restricting access.
Fedora now hardens as many packages as possible with position-independent code (ASLR) and FULL RELRO to reduce the impact of certain potential security vulnerabilities. You can compare the security by running the following as root:
In Fedora 22 and before, it was up to the package maintainer to add %global _hardened_build 1 to their spec file to ensure their program was hardened. Beginning with Fedora 23 this will now become the defaults for all packages. You can compare the security by running the following as root:
 
* <code>dnf install checksec</code>
* <code>checksec --proc-all</code>
 
To see the mitigations in the libraries that a process is using, find the process id from the previous command (for example 123):
 
* <code>checksec --proc-libs 123</code>
 
More information can be found at the change page: ''[[Changes/Harden All Packages | Harden All Packages]]''
====Owners====
====Owners====
* Owner: Till Maas | Moez Roy | Florian Weimer
* Owner: Till Maas | Moez Roy | Florian Weimer
Line 24: Line 32:
* Last updated: 2015-02-12
* Last updated: 2015-02-12
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1215939 #1215939]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1215939 #1215939]
* Status: Change accepted
* Status: 100% code completed
* Original tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1199775 #1199775]
* Original tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1199775 #1199775]


Line 35: Line 43:
* Last updated: April 29, 2015
* Last updated: April 29, 2015
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1221559 #1221559]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1221559 #1221559]
* Status: Change accepted
* Status: 100% code completed


===[[Changes/RemoveSSL3andRc4 | Disable SSL3 and RC4 by default]]===
===[[Changes/RemoveSSL3andRc4 | Disable SSL3 and RC4 by default]]===
Line 41: Line 49:
====Owners====
====Owners====
* Owner: Nikos Mavrogiannopoulos
* Owner: Nikos Mavrogiannopoulos
* Release notes owner:
* Release notes owner: Sandra McCann
 
====Tracking====
====Tracking====
* Last updated: 2015-04-28
* Last updated: 2015-04-28
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1220679 #1220679]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1220679 #1220679]
* Status: Change accepted
* Status: Testable


===[[Changes/perl5.22 | Perl 5.22]]===
===[[Changes/perl5.22 | Perl 5.22]]===
Line 55: Line 64:
* Last updated: 2015-04-28
* Last updated: 2015-04-28
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1220680 #1220680]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1220680 #1220680]
* Status: Change accepted
* Status: 100% code completed
 
===[[Changes/Python_3_as_Default | Python 3 as the Default Implementation ]]===
Up until now, Fedora has used Python 2 as the default Python implementation. This change proposes switching to Python 3. The details of the term "switching" are explained thoroughly in the Scope section.
====Owners====
* Owner: Slavek Kabrda, Matej Stuchlik, Miro Hroncok, Thomas Spura, Robert Kuska
* Release notes owner:
====Tracking====
* Last updated: 2015-08-03
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1076441 #1076441]
* Status: Testable


<!--
===[[Changes/Default Local DNS Resolver | Default Local DNS Resolver]]===
===[[Changes/Default Local DNS Resolver | Default Local DNS Resolver]]===
To install a local DNS resolver trusted for the DNSSEC validation running on 127.0.0.1:53. This must be the only name server entry in /etc/resolv.conf.
To install a local DNS resolver trusted for the DNSSEC validation running on 127.0.0.1:53. This must be the only name server entry in /etc/resolv.conf.
Line 66: Line 86:
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1182488 #1182488]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1182488 #1182488]
* Status: Change accepted
* Status: Change accepted
-->


===[[Changes/F23Boost159 | Fedora 23 Boost 1.59 Uplift]]===
===[[Changes/F23Boost159 | Fedora 23 Boost 1.59 Uplift]]===
Line 75: Line 96:
* Last updated: 2015-06-07
* Last updated: 2015-06-07
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1229030 #1229030]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1229030 #1229030]
* Status: Change accepted
* Status: Finished


<!-- The Spin has moved to F24
<!-- The Spin has moved to F24
Line 97: Line 118:
* Last updated: 2015-06-10
* Last updated: 2015-06-10
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238407 #1238407]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238407 #1238407]
* Status: Change accepted
* Status: 100% code completed


===[[Changes/Two Week Atomic | Two Week Atomic]]===
===[[Changes/Two Week Atomic | Two Week Atomic]]===
Line 107: Line 128:
* Last updated: 2015-07-01
* Last updated: 2015-07-01
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238411 #1238411]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238411 #1238411]
* Status: Change accepted
* Status: Testable


===[[Changes/Unicode 8.0 | Unicode 8.0 support]]===
===[[Changes/Unicode 8.0 | Unicode 8.0 support]]===
Line 117: Line 138:
* Last updated: 22 Jun 2015
* Last updated: 22 Jun 2015
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238412 #1238412]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1238412 #1238412]
* Status: Change accepted
* Status: 100% code completed


===[[Changes/IBus1.5.11 | IBus 1.5.11]]===
===[[Changes/IBus1.5.11 | IBus 1.5.11]]===
Line 127: Line 148:
* Last updated: 2015-06-12
* Last updated: 2015-06-12
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1242925 #1242925]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1242925 #1242925]
* Status: Change accepted
* Status: 100% code completed


<!--
===[[Changes/NodeJS012 | Node.js 0.12]]===
===[[Changes/NodeJS012 | Node.js 0.12]]===
Fedora 23 will be updated to Node.js 0.12, the latest release of the platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications.
Fedora 23 will be updated to Node.js 0.12, the latest release of the platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications.
Line 138: Line 160:
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1242926 #1242926]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1242926 #1242926]
* Status: Change accepted
* Status: Change accepted
-->


<!--
===[[Changes/jQuery | jQuery]]===
===[[Changes/jQuery | jQuery]]===
jQuery is a fast, small, and feature-rich JavaScript library. It makes things like HTML document traversal and manipulation, event handling, animation, and Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility, jQuery has changed the way that millions of people write JavaScript.
jQuery is a fast, small, and feature-rich JavaScript library. It makes things like HTML document traversal and manipulation, event handling, animation, and Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility, jQuery has changed the way that millions of people write JavaScript.
Line 148: Line 172:
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1078903 #1078903]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1078903 #1078903]
* Status: Change accepted
* Status: Change accepted
-->


<!-- This change has been removed from the scope of F23
===[[Changes/Layered Docker Image Build Service | Layered Docker Image Build Service]]===
===[[Changes/Layered Docker Image Build Service | Layered Docker Image Build Service]]===
Fedora currently ships a Docker base image, but Docker supports a layering concept.
Fedora currently ships a Docker base image, but Docker supports a layering concept.
Line 159: Line 185:
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1243736 #1243736]
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1243736 #1243736]
* Status: Change accepted
* Status: Change accepted
-->
===[[Changes/DNF System Upgrades | DNF System Upgrades]]===
fedup is being redesigned and integrated into DNF.
====Owners====
* Owner: [[User:Wwoods|Will Woods]]
* Release notes owner:
====Tracking====
* Last updated: 28 October 2015
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1250939 #1250939]
* Status: 100% code complete
===[[Changes/Standardized passphrase policy | Standardized Passphrase Policy]]===
Currently a number of places ask users to set passphrases/passwords. Some of them enforce some kind of rules for passphrases/passwords, others different rules. This change would create a common base policy for as many of these applications as possible, allowing for local users or products to override this base in cases they need to do so.
====Owners====
* Owner: t8m | Tomas Mraz |
* Release notes owner:
====Tracking====
* Last updated: 2015-08-06
* Tracking bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1250936 #1250936]
* Status: 100% code completed


== Fedora 23 Accepted Self Contained Changes Proposals ==
== Fedora 23 Accepted Self Contained Changes Proposals ==
Line 168: Line 215:
A Fedora Spin using the Cinnamon desktop environment.
A Fedora Spin using the Cinnamon desktop environment.
* Owner: Dan Book
* Owner: Dan Book
* Release note owner: mccann2
* Last updated: 2015-05-06
* Last updated: 2015-05-06
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1225865 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1225865 yes]


===[[Changes/SystemFirmwareUpdates | System Firmware Updates]]===
===[[Changes/SystemFirmwareUpdates | System Firmware Updates]]===
Line 177: Line 225:
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1230554 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1230554 no]


<!-- Moved to F24
===[[Changes/Cockpit Domain Controller GUI | Cockpit GUI for Domain Controller Role]]===
===[[Changes/Cockpit Domain Controller GUI | Cockpit GUI for Domain Controller Role]]===
Provide a graphical mechanism for deploying a FreeIPA Domain Controller on Fedora Server through the Cockpit administrative console.
Provide a graphical mechanism for deploying a FreeIPA Domain Controller on Fedora Server through the Cockpit administrative console.
Line 182: Line 231:
* Last updated: 2015-06-18
* Last updated: 2015-06-18
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1233098 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1233098 no]
-->


===[[Changes/Containerized Server Roles | Containerized Server Roles]]===
===[[Changes/Containerized Server Roles | Containerized Server Roles]]===
Line 187: Line 237:
* Owner: Stephen Gallagher
* Owner: Stephen Gallagher
* Last updated: 2015-06-18
* Last updated: 2015-06-18
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1233099 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1233099 yes]


===[[Changes/frappe-framework | Frappe Framework]]===
===[[Changes/frappe-framework | Frappe Framework]]===
Line 211: Line 261:
-->
-->


<!--
===[[Changes/Local Test Cloud | Local Test Cloud]]===
===[[Changes/Local Test Cloud | Local Test Cloud]]===
testcloud is a small tool to download and boot cloud images locally.
testcloud is a small tool to download and boot cloud images locally.
Line 216: Line 267:
* Last updated: (2014-01-20)
* Last updated: (2014-01-20)
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1191542 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1191542 no]
-->


<!--
===[[Changes/RpmMPIReqProv | RPM MPI Requires Provides]]===
===[[Changes/RpmMPIReqProv | RPM MPI Requires Provides]]===
Add dependency generators to encode the MPI compiler name in the provides string of a binary to distinguish otherwise identical provides between packages $foo, $foo-openmpi and $foo-mpich.
Add dependency generators to encode the MPI compiler name in the provides string of a binary to distinguish otherwise identical provides between packages $foo, $foo-openmpi and $foo-mpich.
* Owner: Sandro Mani
* Owner: Sandro Mani
* Last updated: 2015-06-17
* Last updated: 2015-06-17
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238428 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238428 yes]
-->
 


===[[Changes/Sugar-106 | Sugar 0.106]]===
===[[Changes/Sugar-106 | Sugar 0.106]]===
Update Sugar to the new upstream 0.106 stable feature release.
Update Sugar to the new upstream 0.106 stable feature release.
* Owner: Peter Robinson
* Owner: Peter Robinson
* Release note owner: [[User: mccann2| Sandra McCann]]
* Last updated: 2015-06-17
* Last updated: 2015-06-17
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238431 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238431 yes]


===[[Changes/ibus-libzhuyin | ibus-libzhuyin]]===
===[[Changes/ibus-libzhuyin | ibus-libzhuyin]]===
Line 235: Line 287:
* Owner: Peng Wu
* Owner: Peng Wu
* Last updated: 2015-06-12
* Last updated: 2015-06-12
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238437 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238437 yes]


<!--
===[[Changes/npm2 | npm 2]]===
===[[Changes/npm2 | npm 2]]===
Fedora 23 features npm 2, the latest version of the package manager for node.js and other JavaScript platforms.
Fedora 23 features npm 2, the latest version of the package manager for node.js and other JavaScript platforms.
Line 242: Line 295:
* Last updated: 2015-07-01
* Last updated: 2015-07-01
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238432 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1238432 no]
-->


<!-- The Spin has moved to F24
<!-- The Spin has moved to F24
Line 256: Line 310:
* Owner: T.C. Hollingsworth
* Owner: T.C. Hollingsworth
* Last updated: 2015-07-14
* Last updated: 2015-07-14
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1242919 no]
* Completed: [https://bugzilla.redhat.com/show_bug.cgi?id=1242919 yes]
-->
-->
[[Category:F23]]

Latest revision as of 15:42, 28 October 2015


Fedora 23 Accepted System Wide Changes Proposals

These changes have been accepted by the Fedora Engineering Steering Committee for the Fedora 23 Release as System Wide Changes.

Category:ChangeAcceptedF23 and Category:SystemWideChange

Harden All Packages

Fedora now hardens as many packages as possible with position-independent code (ASLR) and FULL RELRO to reduce the impact of certain potential security vulnerabilities. You can compare the security by running the following as root:

  • dnf install checksec
  • checksec --proc-all

To see the mitigations in the libraries that a process is using, find the process id from the previous command (for example 123):

  • checksec --proc-libs 123

More information can be found at the change page: Harden All Packages

Owners

  • Owner: Till Maas | Moez Roy | Florian Weimer
  • Release notes owner:

Tracking

  • Last updated: 2015-02-12
  • Tracking bug: #1215939
  • Status: 100% code completed
  • Original tracking bug: #1199775

Mono 4

Update the Mono stack in Fedora from 2.10 to 4.*

Owners

  • Owner: Claudio Rodrigo Pereyra Diaz
  • Release notes owner:

Tracking

  • Last updated: April 29, 2015
  • Tracking bug: #1221559
  • Status: 100% code completed

Disable SSL3 and RC4 by default

This change will disable by default the SSL 3.0 protocol and the RC4 cipher in components which use the system wide crypto policy. That is, gnutls and openssl libraries, and all the applications based on them.

Owners

  • Owner: Nikos Mavrogiannopoulos
  • Release notes owner: Sandra McCann

Tracking

  • Last updated: 2015-04-28
  • Tracking bug: #1220679
  • Status: Testable

Perl 5.22

A new perl 5.22 version brings a lot of changes done over a year of development. Perl 5.22 should be released 5/20/2015. See 5.21.11 perldelta for more details about preparing release.

Owners

  • Owner: Petr Písař
  • Release notes owner:

Tracking

  • Last updated: 2015-04-28
  • Tracking bug: #1220680
  • Status: 100% code completed

Python 3 as the Default Implementation

Up until now, Fedora has used Python 2 as the default Python implementation. This change proposes switching to Python 3. The details of the term "switching" are explained thoroughly in the Scope section.

Owners

  • Owner: Slavek Kabrda, Matej Stuchlik, Miro Hroncok, Thomas Spura, Robert Kuska
  • Release notes owner:

Tracking

  • Last updated: 2015-08-03
  • Tracking bug: #1076441
  • Status: Testable


Fedora 23 Boost 1.59 Uplift

This change brings Boost 1.58.0 or later to Fedora 23. We generally aim to ship 1.59.0, as that seems likely to make it (hence the Change name), but 1.58.0 is out and available now.

Owners

  • Owner: Jon Wakely
  • Release notes owner:

Tracking

  • Last updated: 2015-06-07
  • Tracking bug: #1229030
  • Status: Finished


SELinux policy store migration

The newest SELinux userspace project release 2015-02-02 includes a change of the location of the SELinux policy store, which defaults to /var/lib/selinux/.

Owners

  • Owner: Miroslav Grepl
  • Release notes owner:

Tracking

  • Last updated: 2015-06-10
  • Tracking bug: #1238407
  • Status: 100% code completed

Two Week Atomic

Fedora Atomic Host is an implementation of the Project Atomic pattern for a specialized operating system for the deployment of containerized applications. For the past two Fedora releases, we've included an Atomic Host cloud image as a non-blocking deliverable. However, upstream Atomic is moving very fast — by the end of the alpha, beta, final stabilization cycle Fedora uses, the released artifact is basically obsolete. Additionally, the Project Atomic team at Red Hat would like to do their ongoing development work in the Fedora upstream, and the six-month release cycle does not lend itself to that.

Owners

  • Owner: Matthew Miller, Colin Walters, Joe Brockmeier, Kushal Das, Adam Miller, Dennis Gilmore
  • Release notes owner:

Tracking

  • Last updated: 2015-07-01
  • Tracking bug: #1238411
  • Status: Testable

Unicode 8.0 support

Unicode 8.0 got release on 17th June 2015. It includes 41 new emoji characters (including five modifiers for diversity), 5,771 new ideographs for Chinese, Japanese, and Korean, the new Georgian lari currency symbol, and 86 lowercase Cherokee syllables. It also adds letters to existing scripts to support Arwi (the Tamil language written in the Arabic script), the Ik language in Uganda, Kulango in the Côte d’Ivoire, and other languages of Africa. In total, this version adds 7,716 new characters and six new scripts.

Owners

  • Owner: Mike Fabian Pravin Satpute Siddhesh Poyarekar
  • Release notes owner:

Tracking

  • Last updated: 22 Jun 2015
  • Tracking bug: #1238412
  • Status: 100% code completed

IBus 1.5.11

IBus 1.5.11 will have the features of XKB prefix language icons on the panel in KDE 5 and support $HOME/.XCompose file in all desktops.

Owners

  • Owner: Takao Fujiwara
  • Release notes owner:

Tracking

  • Last updated: 2015-06-12
  • Tracking bug: #1242925
  • Status: 100% code completed



DNF System Upgrades

fedup is being redesigned and integrated into DNF.

Owners

Tracking

  • Last updated: 28 October 2015
  • Tracking bug: #1250939
  • Status: 100% code complete

Standardized Passphrase Policy

Currently a number of places ask users to set passphrases/passwords. Some of them enforce some kind of rules for passphrases/passwords, others different rules. This change would create a common base policy for as many of these applications as possible, allowing for local users or products to override this base in cases they need to do so.

Owners

  • Owner: t8m | Tomas Mraz |
  • Release notes owner:

Tracking

  • Last updated: 2015-08-06
  • Tracking bug: #1250936
  • Status: 100% code completed

Fedora 23 Accepted Self Contained Changes Proposals

These changes have been accepted by the Fedora Engineering Steering Committee for the Fedora 23 Release as Self Contained Changes.

Category:ChangeAcceptedF23 and Category:SelfContainedChange

Cinnamon Spin

A Fedora Spin using the Cinnamon desktop environment.

  • Owner: Dan Book
  • Release note owner: mccann2
  • Last updated: 2015-05-06
  • Completed: yes

System Firmware Updates

This change is to add the ability to perform firmware updates on UEFI machines.

  • Owner: Richard Hughes
  • Last updated: 2015-06-03
  • Completed: no


Containerized Server Roles

Enhance rolekit to be able to deploy Server Roles using the Nulecule Container Specification.

  • Owner: Stephen Gallagher
  • Last updated: 2015-06-18
  • Completed: yes

Frappe Framework

A full-stack web framework based on Python and Javascript to help you build powerful business apps and nifty extensions.

  • Owner: Eduardo Mayorga , William Moreno
  • Last updated: 2015-06-18
  • Completed: no



RPM MPI Requires Provides

Add dependency generators to encode the MPI compiler name in the provides string of a binary to distinguish otherwise identical provides between packages $foo, $foo-openmpi and $foo-mpich.

  • Owner: Sandro Mani
  • Last updated: 2015-06-17
  • Completed: yes


Sugar 0.106

Update Sugar to the new upstream 0.106 stable feature release.

  • Owner: Peter Robinson
  • Release note owner: Sandra McCann
  • Last updated: 2015-06-17
  • Completed: yes

ibus-libzhuyin

Make ibus-libzhuyin as the default Fedora 23 Traditional Chinese (Taiwan) input method.

  • Owner: Peng Wu
  • Last updated: 2015-06-12
  • Completed: yes