epel-announce May 2021

epel-announce@lists.fedoraproject.org

2 participants
2 discussions

IRC Announcement
by Nick Bebout 27 May '21

27 May '21

Since its beginnings, the Fedora Project has used the freenode IRC network for our project communications. Due to a variety of recent changes to that network, the Fedora Project is moving our IRC communications to Libera.Chat. If you are a current IRC user, please go and register your nick(s) on Libera.Chat ( https://libera.chat/guides/registration#registering ) and rejoin the #fedora related channels you wish to. You can take this opportunity to choose a new secure password and make sure you are connecting via SSL. There is good documentation about choosing an IRC client at https://libera.chat/guides/clients If you are a Matrix user, we ask for your patience as we get bridges setup on the new network. If you were joined to rooms via the generic freenode bridge, you will need to leave them and rejoin the fedora rooms in matrix (which will be plumbed with the Libera channels) As of 2021-05-28 our official IRC presence is on irc.libera.chat. Many Fedora channels have moved over and are ready on Libera.Chat. However, less-used channels have not be automatically setup. If you need a specific #fedora-* IRC channel setup, please file a ticket at http://pagure.io/irc requesting the channel. New channels should have the same name as they did on freenode. For example: #fedora, #fedora-admin, #fedora-devel, and #fedora-join. If you would like a fedora IRC ‘cloak’ you can request it at: https://fedoraproject.org/wiki/LiberaCloaks (an IRC cloak obfuscates your client host address and shows ‘fedora’ instead). Please note that cloaks are not foolproof, there are ways for people to still get your IP, but they do make it more difficult for people to obtain your IP. Also, look for upcoming exciting announcements around Fedora’s Matrix presence. nb

1 0

[Heads-up] nginx 1.20.1 to replace 1.16.1 in EPEL 7, changes to log file permissions
by Felix Kaechele 27 May '21

27 May '21

Note: This affects EPEL 7 only. Nginx is not delivered through EPEL for EL8. Greetings, This is a friendly heads-up that nginx will see a major version upgrade in EPEL 7 soon. Due to existing CVEs (most recently, CVE-2021-23017) affecting the unmaintained 1.16 version stream I am replacing nginx 1.16.1 currently in EPEL 7 with version 1.20.1. To fix another CVE (CVE-2016-1247) the permissions on the log folder /var/log/nginx have changed to root:root and mode 700. While my testing showed that this will not break nginx logging, it may affect applications other than nginx that access nginx log files. So please plan accordingly if this use case applies to you. No breaking config changes should have occurred between these versions, but I am obviously unable to test every use case out there. So please use the next 14 days the update will sit in epel-testing to do some testing in your environment. Furthermore this update is built against OpenSSL 1.1, so TLSv1.3 is now available in nginx on EL7. I have provided a relatively comprehensive change log in the Bodhi update: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c64b965c33 I appreciate your testing efforts and any feedback you can provide. Thanks and regards, Felix

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-announce May 2021