epel-devel May 2014

epel-devel@lists.fedoraproject.org

15 participants
74 discussions

Start a nNew thread

How can I commit a new package to EPEL5?
by Kirby Zhou 29 Jan '15

29 Jan '15

How can I commit a new package to EPEL5? I adapted python3-3.1.2 from F-13 to RHEL5, anyone need it?

5 10

EPEL Status of openstack-nova in
by Anssi Johansson 02 Sep '14

02 Sep '14

A number of openstack-nova security bugs were recently closed as WONTFIX: https://bugzilla.redhat.com/show_bug.cgi?id=956808 /var/log/nova/ is world readable https://bugzilla.redhat.com/show_bug.cgi?id=961736 CVE-2013-2030 insecure directory creation for signing https://bugzilla.redhat.com/show_bug.cgi?id=963728 CVE-2013-2096 fails to verify image virtual size denial of service https://bugzilla.redhat.com/show_bug.cgi?id=994810 CVE-2013-2256 private flavors resource limit circumvention https://bugzilla.redhat.com/show_bug.cgi?id=994817 CVE-2013-4185 network source security groups denial of service https://bugzilla.redhat.com/show_bug.cgi?id=995173 CVE-2013-4179 XML entities DoS https://bugzilla.redhat.com/show_bug.cgi?id=999277 CVE-2013-4261 console-log DoS https://bugzilla.redhat.com/show_bug.cgi?id=1040789 CVE-2013-7048 insecure directory permissions in snapshots https://bugzilla.redhat.com/show_bug.cgi?id=1057311 CVE-2013-7130 Live migration can leak root disk into ephemeral storage The reason for WONTFIX was stated as "Openstack is not maintained in EPEL, newer versions of openstack for EPEL are kept in RDO". If there are no plans to continue maintaining openstack-nova in EPEL, the package should be removed from EPEL.

3 4

EPEL intend to retire Django on EL5, EL6
by Matthias Runge 22 Aug '14

22 Aug '14

Hi, Django is currently in version 1.3 in EPEL6 and version 1.1 in EPEL5. Both don't receive any security fixes any more, and I'd like to retire and remove both. For EL6, we have Django14, which packages Django-1.4. For EL5, the situation looks not so good. Django upstream deprecated Python 2.4 a while ago. Matthias -- Matthias Runge <mrunge(a)matthias-runge.de>

2 1

EPEL RFC: Strategy for python3 versions
by Toshio Kuratomi 06 Jun '14

06 Jun '14

Hi guys, Orion has submitted a python34 package for EPEL and I'm going to review them soon if no one beats me to it. In parallel with getting that approved I'd like to ask about the general strategy we'd like to take with maintaining python3 in EPEL. Python3 is an evolving language. New 3.N releases bring new features, bugfixes, and both backwards compatibility breaking and backwards compatibility enhancing changes (For instance, 3.3 brought the ability to mark regular text strings with the "u" prefix to match with python2.x. 3.5 will bring back formatting methods for byte strings.) Currently, there are a good many python libraries that work with both python2 and python3 but few libraries and few applications that are python3-only. Upstream, python3 releases generally see 18 months of bugfix updates and 5 years of security fixes[1]_. As Orion has pointed out, it would be hard for us to maintain a python3 release past upstream's EOL date as there's a lot of code in a python3 package (Not to mention the stack of packages that we'll build on top of it.) In addition, I am a little worried about the amount of time we may end up having to devote to keeping multiple python3.N packages (and stacks of packages for them) alive if we only retire old python3 releases when upstream ceases to provide support for them (back of the envelope calculations are that if we don't skip any python3.N releases, we'd be attempting to maintain 4-5 python3 releases before the first of those EOL's upstream). I'd like to propose that we attempt to maintain 2 python3 releases at any one time. We'll create python3.4 now. When python3.5 comes out in 18 months (less since python3.4 has been out for several months), we'll package that in addition. When python3.6 comes out (3 years), we'll package that and retire python3.4. Pluses: * This gives users some time to verify that their homegrown applications continue to work with the newer python3 package that we produce before the old one goes EOL. * This means that we're only working on 3 versions of python3 at a time (the two we expect users to use and the next version that we're tracking as upstream works on finishing it). * This gives us a chance to update frameworks, libraries, and other stacks of software built on top of python3 at the same time as we create the new interpreter package. So you could get python3.4 with Django-1.6.x and you could get python3.5 with Django-1.8.x Negatives: * Users will have to reverify and port apps written against python3 to the new interpreter version sometime in the 3 year lifespan of the python3 package they originally wrote it against. * Package maintainers who are creating packages that run on python3 will need to submit new packages for python3.4, python3.5, etc. * Users may have to port to both new versions of python3 and to new versions of some libraries they depend on (because we took the opportunity to update those libraries for the new python3 interpreter stack). Precedents: * With mediawiki, we now ship versioned packages and retire the old versions when upstream stops shipping updates. The stacks of packages built on top of mediawiki have to be produced for each mediawiki version. Alternatives: * Never retire the python3 packages. This leaves us trying to support the release once upstream stops support. Since new python3 releases are in demand, we'd probably end up trying to maintain all of the python3 releases that came out between when RHEL-N was released and when RHEL-N+1 releases (because maintainer focus usually shifts to building packages for RHEL-N+1 then). * Retire the python3 packages when upstream stops support. This defers the pain for users (They can use a python3.N version for about 5 years instead of about 3 years). However, it means that we're maintaining 4-5 versions of python3 at a time instead of 2-3 What do people think? Is this something we can do within the policies of EPEL? Does it make sense to go forward with this? Is it better to go with one of the alternatives? .. [1]_: Previous versions of python3 have a lifespan defined in their PEP. For instance, this one for python3.3: http://legacy.python.org/dev/peps/pep-0398/#lifespan The lifespan for the previous versions are the same: * bugfix updates for python3.N approximately every 4-6 months for approximately 18 months. * After the release of python3.N+1, a final bugfix of python3.N is released. * After that, security updates (source only) will be released until 5 years after the initial release of 3.N. 3.4 doesn't have this lifespan section but that's probably an oversight (I can ask Larry Hastings to clarify that if need be). -Toshio

5 8

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 31 May '14

31 May '14

The following Fedora EPEL 5 Security updates need testing: Age URL 769 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 224 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1… 104 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1515/check-mk-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1544/python26-mod_… The following builds have been pushed to Fedora EPEL 5 updates-testing mod_wsgi-3.5-1.el5 python26-mod_wsgi-3.5-1.el5 xpdf-3.04-1.el5 Details about builds: ================================================================================ mod_wsgi-3.5-1.el5 (FEDORA-EPEL-2014-1544) A WSGI interface for Python web applications in Apache -------------------------------------------------------------------------------- Update Information: http://modwsgi.readthedocs.org/en/develop/release-notes/version-3.5.html -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Luke Macken <lmacken(a)redhat.com> - 3.5-1 - Update to 3.5 to fix CVE-2014-0240 (#1101863) - Remove all of the patches, which have been applied upstream - Update source URL for new the GitHub upstream * Wed May 28 2014 Joe Orton <jorton(a)redhat.com> - 3.4-14 - rebuild for Python 3.4 * Mon Apr 28 2014 Matthias Runge <mrunge(a)redhat.com> - 3.4.13 - do not use conflicts between mod_wsgi packages (rhbz#1087943) * Thu Jan 23 2014 Joe Orton <jorton(a)redhat.com> - 3.4-12 - fix _httpd_mmn expansion in absence of httpd-devel * Fri Jan 10 2014 Matthias Runge <mrunge(a)redhat.com> - 3.4-11 - added python3 subpackage (thanks to Jakub Dorňák), rhbz#1035876 * Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jul 8 2013 Joe Orton <jorton(a)redhat.com> - 3.4-9 - modernize spec file (thanks to rcollet) * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.4-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Tue Dec 11 2012 Jan Kaluza <jkaluza(a)redhat.com> - 3.4-7 - compile with -fno-strict-aliasing to workaround Python bug http://www.python.org/dev/peps/pep-3123/ * Thu Nov 22 2012 Joe Orton <jorton(a)redhat.com> - 3.4-6 - use _httpd_moddir macro * Thu Nov 22 2012 Joe Orton <jorton(a)redhat.com> - 3.4-5 - spec file cleanups * Wed Oct 17 2012 Joe Orton <jorton(a)redhat.com> - 3.4-4 - enable PR_SET_DUMPABLE in daemon process to enable core dumps * Wed Oct 17 2012 Joe Orton <jorton(a)redhat.com> - 3.4-3 - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276) - add logging for unexpected daemon process loss * Wed Oct 17 2012 Matthias Runge <mrunge(a)redhat.com> - 3.4-2 - also use RPM_LD_FLAGS for build bz. #867137 * Mon Oct 15 2012 Matthias Runge <mrunge(a)redhat.com> - 3.4-1 - update to upstream release 3.4 * Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Jun 13 2012 Joe Orton <jorton(a)redhat.com> - 3.3-6 - add possible fix for daemon mode crash (#831701) * Mon Mar 26 2012 Joe Orton <jorton(a)redhat.com> - 3.3-5 - move wsgi.conf to conf.modules.d * Mon Mar 26 2012 Joe Orton <jorton(a)redhat.com> - 3.3-4 - rebuild for httpd 2.4 * Tue Mar 13 2012 Joe Orton <jorton(a)redhat.com> - 3.3-3 - prepare for httpd 2.4.x * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1101863 - CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios https://bugzilla.redhat.com/show_bug.cgi?id=1101863 [ 2 ] Bug #1101873 - CVE-2014-0242 mod_wsgi: information leak https://bugzilla.redhat.com/show_bug.cgi?id=1101873 -------------------------------------------------------------------------------- ================================================================================ python26-mod_wsgi-3.5-1.el5 (FEDORA-EPEL-2014-1544) A WSGI interface for Python web applications in Apache -------------------------------------------------------------------------------- Update Information: http://modwsgi.readthedocs.org/en/develop/release-notes/version-3.5.html -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Luke Macken <lmacken(a)redhat.com> - 3.5-1 - Update to 3.5 to fix CVE-2014-0240 (#1101863) and CVE-2014-0242 (#1101873) - Update source URL for new the GitHub upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1101863 - CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios https://bugzilla.redhat.com/show_bug.cgi?id=1101863 [ 2 ] Bug #1101873 - CVE-2014-0242 mod_wsgi: information leak https://bugzilla.redhat.com/show_bug.cgi?id=1101873 -------------------------------------------------------------------------------- ================================================================================ xpdf-3.04-1.el5 (FEDORA-EPEL-2014-1546) A PDF file viewer for the X Window System -------------------------------------------------------------------------------- Update Information: Update xpdf to 3.04. Use motif (instead of lesstif) on Fedora. -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 1:3.04-1 - update to 3.04 - update all patches, langpacks - use motif instead of lesstif where possible - fix pdftopng to install (not in poppler right now) --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 31 May '14

31 May '14

The following Fedora EPEL 6 Security updates need testing: Age URL 769 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 116 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6.4… 101 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-… 61 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFrame… 15 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14.4-… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1452/php-ZendFrame… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1471/chicken-4.8.0… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1477/drupal7-views… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1475/moodle-2.4.10… 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1522/check-mk-1.2.… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1536/xmlsec1-1.2.1… The following builds have been pushed to Fedora EPEL 6 updates-testing docker-io-0.11.1-5.el6 imagefactory-1.1.5-1.el6 imagefactory-plugins-1.1.5-2.el6 nodejs-grunt-0.4.4-3.el6 php-Raven-0.8.0-3.20140519git2351d97.el6 qpid-dispatch-0.2-3.el6 rkhunter-1.4.2-2.el6 xpdf-3.04-1.el6 Details about builds: ================================================================================ docker-io-0.11.1-5.el6 (FEDORA-EPEL-2014-1547) Automates deployment of containerized applications -------------------------------------------------------------------------------- Update Information: switch back to the native execdriver, not lxc. bz1103323 -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Vincent Batts <vbatts(a)redhat.com> - 0.11.1-5 - switch back to the native execdriver, not lxc. bz1103323 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1103323 - docker on RHEL6.5 no longer needs to default to lxc https://bugzilla.redhat.com/show_bug.cgi?id=1103323 -------------------------------------------------------------------------------- ================================================================================ imagefactory-1.1.5-1.el6 (FEDORA-EPEL-2014-1548) System image generation tool -------------------------------------------------------------------------------- Update Information: Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins packages -------------------------------------------------------------------------------- ChangeLog: * Tue May 6 2014 Ian McLeod <imcleod(a)redhat.com> - 1.1.5-1 - Rebase with upstream - Improved CLI parameter passing support -------------------------------------------------------------------------------- ================================================================================ imagefactory-plugins-1.1.5-2.el6 (FEDORA-EPEL-2014-1548) Default plugins for the Image Factory system image generation tool -------------------------------------------------------------------------------- Update Information: Rebase to upstream 1.1.5 release of imagefactory and the associated imagefactory-plugins packages -------------------------------------------------------------------------------- ChangeLog: * Tue May 6 2014 Ian McLeod <imcleod(a)redhat.com> - 1.1.5-2 - Rebase with upstream - Improved parameters parsing that couples with improved parameters CLI support in core imagefactory - Add support for "offline" ICICLE generation in TinMan - Rework IndirectionCloud to work with recent Oz releases -------------------------------------------------------------------------------- ================================================================================ nodejs-grunt-0.4.4-3.el6 (FEDORA-EPEL-2014-1549) Grunt is a JavaScript library used for automation and running tasks -------------------------------------------------------------------------------- Update Information: This update resolves "_ is not defined" errors when using templates -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2014 T.C. Hollingsworth <tchollingsworth(a)gmail.com> - 0.4.4-3 - apply patch to fix "_ is not defined" errors when using templates -------------------------------------------------------------------------------- ================================================================================ php-Raven-0.8.0-3.20140519git2351d97.el6 (FEDORA-EPEL-2014-1545) A PHP client for Sentry -------------------------------------------------------------------------------- Update Information: Updated to latest snapshot (commit 2351d97c862f02343e5465d550df68bd9632cad9; 2014-05-19) Changes: https://github.com/getsentry/raven-php/compare/dac9333...2351d97 -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 0.8.0-3.20140519git2351d97 - Updated to latest snapshot - Removed max PHPUnit dependency -------------------------------------------------------------------------------- ================================================================================ qpid-dispatch-0.2-3.el6 (FEDORA-EPEL-2014-1551) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information: Fixed build type to be RelWithDebInfo -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.2-3 - Fixed build type to be RelWithDebInfo -------------------------------------------------------------------------------- ================================================================================ rkhunter-1.4.2-2.el6 (FEDORA-EPEL-2014-1543) A host-based tool to scan for rootkits, backdoors and local exploits -------------------------------------------------------------------------------- Update Information: Add patch to fix ipcs command in non en locales. Add xonfig to fix freeipa installs. -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Kevin Fenzi <kevin(a)scrye.com> 1.4.2-2 - Add patch to fix ipcs command in non en locales - Add config to fix freeipa installs. -------------------------------------------------------------------------------- ================================================================================ xpdf-3.04-1.el6 (FEDORA-EPEL-2014-1550) A PDF file viewer for the X Window System -------------------------------------------------------------------------------- Update Information: Update xpdf to 3.04. Use motif (instead of lesstif) on Fedora. -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Tom Callaway <spot(a)fedoraproject.org> - 1:3.04-1 - update to 3.04 - update all patches, langpacks - use motif instead of lesstif where possible - fix pdftopng to install (not in poppler right now) --------------------------------------------------------------------------------

1 0

EPEL epel beta report: 20140531 changes
by EPEL Beta Report 31 May '14

31 May '14

Compose started at Sat May 31 08:15:02 UTC 2014 New package: nagios-plugins-openmanage-3.7.11-1.el7 Nagios plugin to monitor hardware health on Dell servers New package: php-Assetic-1.1.2-1.el7 Asset Management for PHP New package: php-Faker-1.3.0-1.el7 A PHP library that generates fake data New package: php-JMSParser-1.0.0-3.el7 Library for writing recursive-descent parsers New package: php-JsonSchema-1.3.6-1.el7 PHP implementation of JSON schema New package: php-PHPParser-1.0.0-0.1.beta1.el7 A PHP parser written in PHP New package: php-PhpCollection-0.4.0-1.el7 General purpose collection library for PHP New package: php-PhpOption-1.4.0-1.el7 Option type for PHP New package: php-Raven-0.8.0-3.20140519git2351d97.el7 A PHP client for Sentry New package: php-SymfonyCmfRouting-1.1.0-1.el7 Extends the Symfony2 routing component for dynamic routes and chaining New package: php-channel-drush-1.3-2.el7 Adds pear.drush.org channel to PEAR New package: php-drush-drush-6.2.0-1.el7 Command line shell and Unix scripting interface for Drupal New package: php-pear-text-wiki-1.2.1-3.el7 Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text New package: python-django-pipeline-1.3.24-1.el7 An asset packaging library for Django Updated Packages: activemq-cpp-3.8.2-2.el7 ------------------------ * Thu May 29 2014 Ville Skyttä <ville.skytta(a)iki.fi> - 3.8.2-2 - Patch to use system zlib instead of bundled one cinnamon-settings-daemon-2.0.8-7.el7 ------------------------------------ * Fri May 30 2014 Leigh Scott <leigh123linux(a)googlemail.com> - 2.0.8-7 - add fedora support to datetime mingw-crt-3.1.999-0.10.trunk.gitb8e816.20140530.el7 --------------------------------------------------- * Fri May 30 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 3.1.999-0.10.trunk.gitb8e8160.20140530 - Update to 20140530 snapshot (git rev b8e8160) mingw-headers-3.1.999-0.10.trunk.gitb8e816.20140530.el7 ------------------------------------------------------- * Fri May 30 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 3.1.999-0.10.trunk.gitb8e8160.20140530 - Update to 20140530 snapshot (git rev b8e8160) - Fixes initializer issue in IN6ADDR macros (RHBZ #1067426) pdns-recursor-3.6.0-0.1.rc1.el7 ------------------------------- * Fri May 30 2014 Morten Stevens <mstevens(a)imt-systems.com> - 3.6.0-0.1.rc1 - Update to 3.6.0-rc1 * Fri May 23 2014 Petr Machata <pmachata(a)redhat.com> - 3.5.3-3 - Rebuild for boost 1.55.0 * Mon Feb 10 2014 Morten Stevens <mstevens(a)imt-systems.com> - 3.5.3-2 - Add upstream patch to fix rhbz#1063305 perl-qpid-0.26-3.el7 -------------------- * Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.26-3 - Updated the requires to use virtual packages. php-phpunit-PHPUnit-MockObject-2.1.0-3.el7 ------------------------------------------ * Fri May 30 2014 Remi Collet <remi(a)fedoraproject.org> - 2.1.0-3 - upstream fix for php 5.4.29 and 5.5.13 (#1103223) qpid-dispatch-0.2-3.el7 ----------------------- * Fri May 30 2014 Darryl L. Pierce <dpierce(a)redhat.com> - 0.2-3 - Fixed build type to be RelWithDebInfo rubygem-narray-0.6.0.9-1.el7 ---------------------------- * Fri May 30 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.9-1 - new upstream release (#1103230) wcslib-4.23-1.el7 ----------------- * Mon May 19 2014 Sergio Pascual <sergiopr(a)fedoraproject.org> 4.23-1 - New upstream source (4.23) * Sun Apr 13 2014 Sergio Pascual <sergiopr(a)fedoraproject.org> 4.22-1 - New upstream source (4.22) Summary: Added Packages: 14 Removed Packages: 0 Modified Packages: 10

1 0

EPEL Fedora 5 updates-testing report
by updates＠fedoraproject.org 30 May '14

30 May '14

The following Fedora EPEL 5 Security updates need testing: Age URL 768 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 222 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs-1… 103 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0581/augeas-1.2.0-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1515/check-mk-1.2.… The following builds have been pushed to Fedora EPEL 5 updates-testing bitlbee-3.2.1-4.el5 php-pear-text-wiki-1.2.1-3.el5 rubygem-narray-0.6.0.9-1.el5 Details about builds: ================================================================================ bitlbee-3.2.1-4.el5 (FEDORA-EPEL-2014-1531) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information: Add server_args to /etc/xinetd.d/bitlbee (#1102062) -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-4 - Add server_args to /etc/xinetd.d/bitlbee (#1102062) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1102062 - error in /etc/xinetd.d/bitlbee https://bugzilla.redhat.com/show_bug.cgi?id=1102062 -------------------------------------------------------------------------------- ================================================================================ php-pear-text-wiki-1.2.1-3.el5 (FEDORA-EPEL-2014-1532) Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text -------------------------------------------------------------------------------- Update Information: Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text markup. This is the base engine for all of the Text_Wiki sub-classes The text transformation is done in 2 steps. The chosen parser uses markup rules to tokenize the tags and content. Renderers output the tokens and text into the requested format. The tokenized form replaces the tags by a protected byte value associated to an index in an options table. This form shares up to 50 rules by all parsers and renderers. The package is intented for versatile transformers as well as converters. Text_Wiki is delivered with its own parser, which is used by Yawiki or Horde's Wicked and three basic renderers: XHTML , LaTeX and plain text. Strong sanitizing of XHTML is default. It is highly configurable and can be easily extended. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098625 - Review Request: php-pear-text-wiki - Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text https://bugzilla.redhat.com/show_bug.cgi?id=1098625 -------------------------------------------------------------------------------- ================================================================================ rubygem-narray-0.6.0.9-1.el5 (FEDORA-EPEL-2014-1533) N-dimensional Numerical Array class for Ruby -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.9-1 - new upstream release (#1103230) * Mon May 26 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-14 - preserve `%{gem_extdir_mri}/gem.build_complete` on Fedora >= 21 - no need to modify gemspec * Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-13 - fix gemspec on Fedora >= 21 - remove `%{gem_extdir_mri}/gem_make.out` again * Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-12 - one must NOT delete `%{gem_extdir_mri}/gem_make.out` * Thu May 1 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-11 - rebuilt for libruby.so.2.0() so-name bump * Sun Dec 22 2013 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-10 - package must not obsolete itself - improved indention -------------------------------------------------------------------------------- References: [ 1 ] Bug #1103230 - rubygem-narray-0.6.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1103230 --------------------------------------------------------------------------------

1 0

EPEL Fedora 6 updates-testing report
by updates＠fedoraproject.org 30 May '14

30 May '14

The following Fedora EPEL 6 Security updates need testing: Age URL 768 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 115 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0440/fwsnort-1.6.4… 100 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-0590/oath-toolkit-… 59 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1011/php-ZendFrame… 14 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1414/gajim-0.14.4-… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1452/php-ZendFrame… 9 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1471/chicken-4.8.0… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1477/drupal7-views… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1475/moodle-2.4.10… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1522/check-mk-1.2.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1536/xmlsec1-1.2.1… The following builds have been pushed to Fedora EPEL 6 updates-testing OCE-0.15-3.el6.1 bitlbee-3.2.1-4.el6 freecad-0.13-7.el6 lua-json-1.3.2-2.el6 lua-lunit-0.5-1.el6 php-pear-text-wiki-1.2.1-3.el6 python-django-extensions-1.3.7-1.el6 python-flask-login-0.2.11-1.el6 python-okaara-1.0.34-1.el6 rubygem-narray-0.6.0.9-1.el6 smesh-5.1.2.2-10.svn55.el6 xmlsec1-1.2.19-3.el6 Details about builds: ================================================================================ OCE-0.15-3.el6.1 (FEDORA-EPEL-2014-1524) OpenCASCADE Community Edition -------------------------------------------------------------------------------- Update Information: Initial build of freecad and dependencies for EL6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition https://bugzilla.redhat.com/show_bug.cgi?id=458974 [ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler https://bugzilla.redhat.com/show_bug.cgi?id=459125 [ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework https://bugzilla.redhat.com/show_bug.cgi?id=1097368 [ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol https://bugzilla.redhat.com/show_bug.cgi?id=1102621 -------------------------------------------------------------------------------- ================================================================================ bitlbee-3.2.1-4.el6 (FEDORA-EPEL-2014-1542) IRC to other chat networks gateway -------------------------------------------------------------------------------- Update Information: Add server_args to /etc/xinetd.d/bitlbee (#1102062) -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-4 - Add server_args to /etc/xinetd.d/bitlbee (#1102062) * Wed Feb 5 2014 Matěj Cepl <mcepl(a)redhat.com> - 3.2.1-3 - Eliminate our own bitlbee.xinetd by patching the upstream one. * Wed Dec 18 2013 Robert Scheck <robert(a)fedoraproject.org> 3.2.1-2 - Some spec file cleanups and ensure that RHEL 5 builds again -------------------------------------------------------------------------------- References: [ 1 ] Bug #1102062 - error in /etc/xinetd.d/bitlbee https://bugzilla.redhat.com/show_bug.cgi?id=1102062 -------------------------------------------------------------------------------- ================================================================================ freecad-0.13-7.el6 (FEDORA-EPEL-2014-1524) A general purpose 3D CAD modeler -------------------------------------------------------------------------------- Update Information: Initial build of freecad and dependencies for EL6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition https://bugzilla.redhat.com/show_bug.cgi?id=458974 [ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler https://bugzilla.redhat.com/show_bug.cgi?id=459125 [ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework https://bugzilla.redhat.com/show_bug.cgi?id=1097368 [ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol https://bugzilla.redhat.com/show_bug.cgi?id=1102621 -------------------------------------------------------------------------------- ================================================================================ lua-json-1.3.2-2.el6 (FEDORA-EPEL-2014-1539) JSON Parser/Constructor for Lua -------------------------------------------------------------------------------- Update Information: LuaJSON is a customizable JSON decoder/encoder, using LPEG for parsing. -------------------------------------------------------------------------------- ================================================================================ lua-lunit-0.5-1.el6 (FEDORA-EPEL-2014-1537) Unit testing framework for Lua -------------------------------------------------------------------------------- Update Information: Lunit is a unit testing framework for lua, written in lua. Lunit provides 26 assert functions, and a few misc functions for usage in an easy unit testing framework. Lunit comes with a test suite to test itself. The testsuite consists of approximately 710 assertions. -------------------------------------------------------------------------------- ================================================================================ php-pear-text-wiki-1.2.1-3.el6 (FEDORA-EPEL-2014-1540) Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text -------------------------------------------------------------------------------- Update Information: Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text markup. This is the base engine for all of the Text_Wiki sub-classes The text transformation is done in 2 steps. The chosen parser uses markup rules to tokenize the tags and content. Renderers output the tokens and text into the requested format. The tokenized form replaces the tags by a protected byte value associated to an index in an options table. This form shares up to 50 rules by all parsers and renderers. The package is intented for versatile transformers as well as converters. Text_Wiki is delivered with its own parser, which is used by Yawiki or Horde's Wicked and three basic renderers: XHTML , LaTeX and plain text. Strong sanitizing of XHTML is default. It is highly configurable and can be easily extended. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1098625 - Review Request: php-pear-text-wiki - Transforms Wiki and BBCode markup into XHTML, LaTeX or plain text https://bugzilla.redhat.com/show_bug.cgi?id=1098625 -------------------------------------------------------------------------------- ================================================================================ python-django-extensions-1.3.7-1.el6 (FEDORA-EPEL-2014-1534) Extensions for Django -------------------------------------------------------------------------------- Update Information: New version New version. New version -------------------------------------------------------------------------------- ChangeLog: * Thu May 29 2014 Richard Marko <rmarko(a)fedoraproject.org> - 1.3.7-1 - New version * Thu Oct 24 2013 Richard Marko <rmarko(a)fedoraproject.org> - 1.2.5-1 - New version * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Apr 18 2013 Richard Marko <rmarko(a)fedoraproject.org> - 1.1.1-1 - New version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1001129 - python-django-extensions-1.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1001129 -------------------------------------------------------------------------------- ================================================================================ python-flask-login-0.2.11-1.el6 (FEDORA-EPEL-2014-1541) User session management for Flask -------------------------------------------------------------------------------- Update Information: Update to 0.2.11 -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Richard Marko <rmarko(a)fedoraproject.org> - 0.2.11-1 - Update to 0.2.11 -------------------------------------------------------------------------------- ================================================================================ python-okaara-1.0.34-1.el6 (FEDORA-EPEL-2014-1535) Python command line utilities -------------------------------------------------------------------------------- Update Information: Updated to 1.0.34 -------------------------------------------------------------------------------- ChangeLog: * Wed May 28 2014 Jay Dobies <jason.dobies(a)redhat.com> 1.0.34-1 - Added build requirement on python-mock (jason.dobies(a)redhat.com) * Wed May 28 2014 Jay Dobies <jason.dobies(a)redhat.com> 1.0.33-1 - fixing a bug where prompting for password in python 2.4 caused an error (mhrivnak(a)redhat.com) - Updated project URL (jason.dobies(a)redhat.com) - Initial addition of extension functionality (jason.dobies(a)redhat.com) - Added simple validators for the Option validate_func (jason.dobies(a)redhat.com) - Added general int parser (jason.dobies(a)redhat.com) -------------------------------------------------------------------------------- ================================================================================ rubygem-narray-0.6.0.9-1.el6 (FEDORA-EPEL-2014-1538) N-dimensional Numerical Array class for Ruby -------------------------------------------------------------------------------- Update Information: new upstream release -------------------------------------------------------------------------------- ChangeLog: * Fri May 30 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.9-1 - new upstream release (#1103230) * Mon May 26 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-14 - preserve `%{gem_extdir_mri}/gem.build_complete` on Fedora >= 21 - no need to modify gemspec * Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-13 - fix gemspec on Fedora >= 21 - remove `%{gem_extdir_mri}/gem_make.out` again * Sat May 17 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-12 - one must NOT delete `%{gem_extdir_mri}/gem_make.out` * Thu May 1 2014 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-11 - rebuilt for libruby.so.2.0() so-name bump * Sun Dec 22 2013 Björn Esser <bjoern.esser(a)gmail.com> - 0.6.0.8-10 - package must not obsolete itself - improved indention -------------------------------------------------------------------------------- References: [ 1 ] Bug #1103230 - rubygem-narray-0.6.0.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1103230 -------------------------------------------------------------------------------- ================================================================================ smesh-5.1.2.2-10.svn55.el6 (FEDORA-EPEL-2014-1524) OpenCascade based MESH framework -------------------------------------------------------------------------------- Update Information: Initial build of freecad and dependencies for EL6. -------------------------------------------------------------------------------- References: [ 1 ] Bug #458974 - Review Request: OCE - OpenCASCADE Community Edition https://bugzilla.redhat.com/show_bug.cgi?id=458974 [ 2 ] Bug #459125 - Review Request: freecad - A general purpose 3D CAD modeler https://bugzilla.redhat.com/show_bug.cgi?id=459125 [ 3 ] Bug #1097368 - Review Request: smesh - OpenCascade based MESH framework https://bugzilla.redhat.com/show_bug.cgi?id=1097368 [ 4 ] Bug #1102621 - FreeCAD fails to start properly due to undefined symbol https://bugzilla.redhat.com/show_bug.cgi?id=1102621 -------------------------------------------------------------------------------- ================================================================================ xmlsec1-1.2.19-3.el6 (FEDORA-EPEL-2014-1536) Library providing support for "XML Signature" and "XML Encryption" standards -------------------------------------------------------------------------------- Update Information: - Update to 1.2.19 - fixes CVE-2011-1425 on xslt file creation - Fix missing links to unversioned shared library files -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 13 2013 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.2.19-3 - Fix duplicate documentation (#1001250) - Turn on verbose build output via V=1 make - Use %?_isa in explicit package deps - Fix base package Group tag to "System Environment/Libraries" - Remove %defattr * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Mar 25 2013 Daniel Veillard <veillard(a)redhat.com> - 1.2.19-1 - Update to upstream release 1.2.19 * Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.18-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.18-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.18-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu May 12 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.18-1 - Update to upstream release 1.2.18 * Mon Apr 11 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.17-1 - Update to upstream release 1.2.17 - fixes CVE-2011-1425 on xslt file creation * Tue Mar 22 2011 Daniel Veillard <veillard(a)redhat.com> - 1.2.16-4 - Fix missing links to unversioned shared library files 541599 * Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #692793 - CVE-2011-1425 xmlsec1: arbitrary file creation when verifying signatures [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=692793 [ 2 ] Bug #752508 - xmlsec1-openssl in EPEL 6 not providing symlink from libxmlsec1-openssl.so https://bugzilla.redhat.com/show_bug.cgi?id=752508 --------------------------------------------------------------------------------

1 0

EPEL epel beta report: 20140530 changes
by EPEL Beta Report 30 May '14

30 May '14

Compose started at Fri May 30 08:15:02 UTC 2014 New package: CUnit-2.1.3-8.el7 Unit testing framework for C New package: gtksourceview2-2.11.2-15.el7 A library for viewing source files New package: mingw-SDL_mixer-1.2.12-3.el7 MinGW Windows port of Simple DirectMedia Layer's Sample Mixer Library New package: mingw-atk-2.12.0-1.el7 MinGW Windows Atk library New package: mingw-boost-1.54.0-1.el7 MinGW Windows port of Boost C++ Libraries New package: mingw-cairo-1.12.16-2.el7 MinGW Windows Cairo library New package: mingw-curl-7.37.0-1.el7 MinGW Windows port of curl and libcurl New package: mingw-dbus-1.6.12-1.el7 MinGW Windows port of D-Bus New package: mingw-enchant-1.6.0-8.el7 MinGW Windows Enchanting Spell Checking Library New package: mingw-expat-2.1.0-4.el7 MinGW Windows port of expat XML parser library New package: mingw-flac-1.3.0-2.el7 Encoder/decoder for the Free Lossless Audio Codec New package: mingw-fontconfig-2.11.1-1.el7 MinGW Windows Fontconfig library New package: mingw-gdb-7.7-1.el7 MinGW Windows port of the GDB debugger New package: mingw-gdk-pixbuf-2.30.8-1.el7 MinGW Windows GDK Pixbuf library New package: mingw-gettext-0.18.3.2-1.el7 GNU libraries and utilities for producing multi-lingual messages New package: mingw-glib2-2.40.0-3.el7 MinGW Windows GLib2 library New package: mingw-gstreamer1-1.3.2-1.el7 MinGW Windows Streaming-Media Framework Runtime New package: mingw-gtk2-2.24.23-1.el7 MinGW Windows Gtk2 library New package: mingw-gtk3-3.12.2-1.el7 MinGW Windows GTK+ library New package: mingw-harfbuzz-0.9.28-1.el7 MinGW Windows Harfbuzz library New package: mingw-hunspell-1.3.2-9.el7 MinGW Windows spell checker and morphological analyzer library New package: mingw-libgcrypt-1.6.1-1.el7 MinGW Windows gcrypt encryption library New package: mingw-libgpg-error-1.12-1.el7 MinGW Windows GnuPGP error library New package: mingw-libidn-1.28-2.el7 MinGW Windows Internationalized Domain Name support library New package: mingw-libogg-1.3.0-4.el7 The Ogg bitstream file format library New package: mingw-libsoup-2.46.0-1.el7 MinGW library for HTTP and XML-RPC functionality New package: mingw-libvorbis-1.3.4-1.el7 MinGW Windows libvorbis library New package: mingw-libxml2-2.9.1-3.el7 MinGW Windows libxml2 XML processing library New package: mingw-libxslt-1.1.28-2.el7 MinGW Windows Library providing the Gnome XSLT engine New package: mingw-p11-kit-0.20.2-3.el7 MinGW Library for loading and sharing PKCS#11 modules New package: mingw-pango-1.36.3-1.el7 MinGW Windows Pango library New package: mingw-pdcurses-3.4-14.el7 Curses library for MinGW New package: mingw-readline-6.2-4.el7 MinGW port of readline for editing typed command lines New package: mingw-sqlite-3.8.4.3-1.el7 MinGW Windows port of sqlite embeddable SQL database engine New package: mingw-termcap-1.3.1-15.el7 MinGW terminal feature database Updated Packages: freecad-0.13-7.el7 ------------------ * Thu May 29 2014 Richard Shaw <hobbes1069(a)gmail.com> - 0.13-7 - Update OCE patch with bad conditional which caused undefined symbols. mingw-freetype-2.5.3-1.el7 -------------------------- * Thu May 29 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 2.5.3-1 - Update to 2.5.3 mingw-icu-50.1.2-3.el7 ---------------------- * Thu May 29 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 50.1.2-3 - Fix CVE-2013-2924 (RHBZ #1015595) mingw-libjpeg-turbo-1.3.1-2.el7 ------------------------------- * Thu May 29 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 1.3.1-2 - Fix compatibility with older CMake versions (as used on RHEL7) * Thu May 29 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 1.3.1-1 - Update to 1.3.1 - Fixes CVE-2013-6629 and CVE-2013-6630 (RHBZ #1031740) mingw-libtiff-4.0.3-4.el7 ------------------------- * Thu May 29 2014 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 4.0.3-4 - Fix CVE-2013-4231, CVE-2013-4232, CVE-2013-4243, CVE-2013-4244 (RHBZ #996833) - Fix CVE-2012-4447, CVE-2012-4564, CVE-2013-1960.patch, CVE-2013-1961 * Sat Aug 03 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 4.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild python-aniso8601-0.82-3.el7 --------------------------- * Tue May 27 2014 Kalev Lember <kalevlember(a)gmail.com> - 0.82-3 - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 vsqlite++-0.3.13-3.el7 ---------------------- * Thu May 29 2014 Vinzenz Feenstra <evilissimo(a)gmail.com> - 0.3.13-3 - Changed the URL to the new project website Summary: Added Packages: 35 Removed Packages: 0 Modified Packages: 7

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel May 2014