epel-devel January 2016

epel-devel@lists.fedoraproject.org

46 participants
114 discussions

wine 32
by ToddAndMargo 16 Jan '18

16 Jan '18

Hi Kevin and EPEL, Is there any sign of EPEL 7 support for Wine 32 yet? The lack of Wine 32 is keeping me on SL 6.6 and it is starting to drive me nuts! EPEL: think of the guilt you would feel if I get stuck in an insane asylums over the lack of wine 32 support! Seriously, the guilt would haunt you to the end of your days. Okay, maybe not, but still ... Many thanks, -T Hey, I had to try. If guilt doesn't work, I am really good at insincere compliments too. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Computers are like air conditioners. They malfunction when you open windows ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

6 12

32 bit revisited
by Peter 20 Oct '16

20 Oct '16

What's the status of EPEL7 on i686? I haven't heard anything in a few months but last I heard EPEL was going to be trialed on antoehr alt-arch before i686, was this done yet and what's the current hold-up? Peter

5 12

Upgrading Mono in Epel7
by Timotheus Pokorra 07 Sep '16

07 Sep '16

Hello, we are discussing in this bug https://bugzilla.redhat.com/show_bug.cgi?id=1220138 the work that would be required to upgrade Mono in Epel. I am aware that this is a major upgrade, and according to [1] it should be avoided. But Mono is that old in Epel7 already, so the discussion currently goes into the direction that an upgrade is better than nobody using Mono in Epel at all. I would like to upgrade to the latest stable Mono version, which is 4.2 at the moment. That is in rawhide already, F23 has Mono 4.0. What do people think on this list? Do I need to create a Fesco ticket to request permission to upgrade Mono in Epel7, and to do a bootstrap similar to Mono 4 in Fedora [2]? Thanks for any hints and suggestions, Timotheus [1] https://fedoraproject.org/wiki/EPEL/GuidelinesAndPolicies#A_major_version_u… [2] https://fedorahosted.org/fpc/ticket/528

3 5

Exception request: major version bump for Nginx
by Jamie Nguyen 28 Apr '16

28 Apr '16

Hi, A few days ago, three CVEs for Nginx and were fixed in 1.8.1. Upstream only maintain 1.8.x and above, so they didn't release any fixes for older versions of Nginx. I was able to backport the relevant commits to Nginx 1.6.x on EL7. Unfortunately, Nginx 1.0.x on EL6 is too old; I gave it a good shot but backporting the patches reliably without creating new CVEs is beyond my expertise. Nginx 0.8.x on EL5 is prehistoric. This leaves the package in a bit of a pickle. Leaving things as they are would leave web servers vulnerable. On the other hand, updating Nginx to 1.8.x on EL5/6/7 will inevitably break something for someone (eg, via yum-cron). I had a small discussion on fedora-devel ML about the situation [0], and the consensus was to request for an exception. My plan: 1. Update to 1.8.x on all branches (or to as recent a version as they can go without FTBFS) 2. Leave them in epel-testing for a prolonged period, probably until the next point release of RHEL. 3. Include some migration notes with the RPMs, and also post these notes to epel-devel/epel-announce. Sound reasonable? [0]: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org… Kind regards, Jamie

5 10

EPEL5 version of epel-rpm-macros in testing
by Jason L Tibbitts III 01 Feb '16

01 Feb '16

After some fun hacking and many, many complete rebuilds, I've built and submitted for testing a version of epel-rpm-macros for EPEL5 which removes the need for several pieces of RPM junk which have annoyed me for many years now. These macros do the following, entirely by "magic" without requiring the use of any boilerplate or line noise: *) Provide a BuildRoot: tag if one is not specified. (The recommend value from the EPEL guidelines is used.) *) Provide Group: tags for the main package and any subpackages which don't have one. The value used is "Unspecified". *) Automatically provide a %clean section. *) Automatically delete the %buildroot at the beginning of %install. *) Allow the use of %license in the %files section (maps to %doc as usual). I found a better method for setting up %license which doesn't appear to have the issues with %define vs. %global that the one I used in the EPEL6 macros has. I will probably revisit that at a later date, but what's there is working. The upside to this is that as far as I can tell these macros introduce no build issues at all to the current EPEL5 package set. I've found but one caveat: If the spec has a %clean section, it must come before %files and after %description but not _immediately_ after %description. Otherwise, due to magic I used to add %clean, the %contents of the existing %clean section will be appended to the %description. It's pretty weird, but unless the package completely fails to follow the usual Fedora packaging conventions, things should be OK. rpmdiff is still running, but there are indeed a couple of packages which do this. I'll be fixing them up as I find them. Please do test this out when it hits the testing repo (or pull it from koji now). Try cleaning some of the cruft out of a few of your EL5 packages and please let me know how it goes. The sooner this can get to stable and into the buildroot, the sooner I can move on to doing more macro cleanup and %ifdef elimination. (I think EL6 python macros will come next.) https://bodhi.fedoraproject.org/updates/epel-rpm-macros-5-1 http://koji.fedoraproject.org/koji/buildinfo?buildID=713474 - J<

5 7

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 31 Jan '16

31 Jan '16

The following Fedora EPEL 7 Security updates need testing: Age URL 329 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 91 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-043f77342d cgit-0.12-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-418a480529 gsi-openssh-6.6.1p1-3.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fb26e5cd3c privoxy-3.0.23-3.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fca17abc84 p7zip-15.09-9.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-69b4d0e57c prosody-0.9.10-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing apt-cacher-ng-0.8.9-1.el7 autowrap-0.7.1-4.20151201gitbd06ff.el7 epel-rpm-macros-7-6 future-0.15.2-7.el7 openscap-daemon-0.1.2-1.el7 preprocess-1.2.2-6.20150919gitd5ab9a.el7 pyhoca-gui-0.5.0.5-1.el7 python-dns-1.12.0GIT465785f-3.el7 python-rpm-macros-3-6.el7.1 python3-six-1.10.0-1.el7 python34-3.4.3-4.el7 telegram-cli-1.3.3-0.4.20160108git160231.el7 Details about builds: ================================================================================ apt-cacher-ng-0.8.9-1.el7 (FEDORA-EPEL-2016-1aa9f36f7d) Caching proxy for package files from Debian -------------------------------------------------------------------------------- Update Information: update to 0.8.9 ---- update to 0.8.8 -------------------------------------------------------------------------------- ================================================================================ autowrap-0.7.1-4.20151201gitbd06ff.el7 (FEDORA-EPEL-2016-4b4d9d35d8) Generates Python Extension modules from [Cython] PXD files -------------------------------------------------------------------------------- Update Information: - Renamed Python2 package -------------------------------------------------------------------------------- ================================================================================ epel-rpm-macros-7-6 (FEDORA-EPEL-2016-ceb16f54c2) Extra Packages for Enterprise Linux RPM macros -------------------------------------------------------------------------------- Update Information: Set %__python3 to /usr/bin/python3.4 ---- Various python rpm macros. -------------------------------------------------------------------------------- ================================================================================ future-0.15.2-7.el7 (FEDORA-EPEL-2016-f5f4b866b6) Easy, clean, reliable Python 2/3 compatibility -------------------------------------------------------------------------------- Update Information: - Renamed Python2 package -------------------------------------------------------------------------------- ================================================================================ openscap-daemon-0.1.2-1.el7 (FEDORA-EPEL-2016-04532fb250) Manages continuous SCAP scans of your infrastructure -------------------------------------------------------------------------------- Update Information: updated to 0.1.2 -------------------------------------------------------------------------------- ================================================================================ preprocess-1.2.2-6.20150919gitd5ab9a.el7 (FEDORA-EPEL-2016-dec04457ef) A portable multi-language file Python2 preprocessor -------------------------------------------------------------------------------- Update Information: - Renamed Python2 package -------------------------------------------------------------------------------- ================================================================================ pyhoca-gui-0.5.0.5-1.el7 (FEDORA-EPEL-2016-4e3bd29ccb) Graphical X2Go client written in (wx)Python -------------------------------------------------------------------------------- Update Information: Crash fix when rendering icons in the published applications menu. -------------------------------------------------------------------------------- ================================================================================ python-dns-1.12.0GIT465785f-3.el7 (FEDORA-EPEL-2016-ca360b4f67) DNS toolkit for Python -------------------------------------------------------------------------------- Update Information: Using python3_pkgversion to support python34 package in el7 -------------------------------------------------------------------------------- ================================================================================ python-rpm-macros-3-6.el7.1 (FEDORA-EPEL-2016-ceb16f54c2) The unversioned Python RPM macros -------------------------------------------------------------------------------- Update Information: Set %__python3 to /usr/bin/python3.4 ---- Various python rpm macros. -------------------------------------------------------------------------------- ================================================================================ python3-six-1.10.0-1.el7 (FEDORA-EPEL-2016-9984dd80af) Python 2 and 3 compatibility utilities -------------------------------------------------------------------------------- Update Information: python-six provides simple utilities for wrapping over differences between Python 2 and Python 3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294865 - Review Request: python3-six - Python 2 and 3 compatibility utilities https://bugzilla.redhat.com/show_bug.cgi?id=1294865 -------------------------------------------------------------------------------- ================================================================================ python34-3.4.3-4.el7 (FEDORA-EPEL-2016-ceb16f54c2) Version 3 of the Python programming language aka Python 3000 -------------------------------------------------------------------------------- Update Information: Set %__python3 to /usr/bin/python3.4 ---- Various python rpm macros. -------------------------------------------------------------------------------- ================================================================================ telegram-cli-1.3.3-0.4.20160108git160231.el7 (FEDORA-EPEL-2016-59d203cc95) Linux Command-line interface for Telegram -------------------------------------------------------------------------------- Update Information: - Renamed Python2 package - Update to commit #160231 - Fixed Python3 package version on EPEL --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 31 Jan '16

31 Jan '16

The following Fedora EPEL 5 Security updates need testing: Age URL 833 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893 libguestfs-1.20.12-1.el5 598 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5 447 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849 sblim-sfcb-1.3.8-2.el5 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516 mcollective-2.8.4-1.el5 62 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6 thttpd-2.25b-24.el5 43 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-d1309b0eb2 libsndfile-1.0.17-8.el5 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-5a2146a2dd prosody-0.9.10-1.el5 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2a457c3d5b phpMyAdmin4-4.0.10.14-1.el5 The following builds have been pushed to Fedora EPEL 5 updates-testing libburn-1.4.2-2.el5 phpMyAdmin4-4.0.10.14-1.el5 Details about builds: ================================================================================ libburn-1.4.2-2.el5 (FEDORA-EPEL-2016-ebbe8b6924) Library for reading, mastering and writing optical discs -------------------------------------------------------------------------------- Update Information: libburn 1.4.2.pl01 ================== * Bug fix: cdrskin "failed to attach fifo" when burning from stdin. Regression of 1.4.2, rev 5522. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1294947 - k3b does not work with cdrskin https://bugzilla.redhat.com/show_bug.cgi?id=1294947 -------------------------------------------------------------------------------- ================================================================================ phpMyAdmin4-4.0.10.14-1.el5 (FEDORA-EPEL-2016-2a457c3d5b) Handle the administration of MySQL over the World Wide Web -------------------------------------------------------------------------------- Update Information: phpMyAdmin 4.0.10.14 (2016-01-29) ================================= - Error with PMA 4.0.10.13 with PHP 5.2 phpMyAdmin 4.0.10.13 (2016-01-28) ================================= - [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1 - [Security] Unsafe generation of CSRF token, see PMASA-2016-2 - [Security] Multiple XSS vulnerabilities, see PMASA-2016-3 - [Security] Insecure password generation in JavaScript, see PMASA-2016-4 - [Security] Unsafe comparison of CSRF token, see PMASA-2016-5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302681 - CVE-2016-2041 phpMyAdmin: Unsafe comparison of XSRF/CSRF token (PMASA-2016-5) https://bugzilla.redhat.com/show_bug.cgi?id=1302681 [ 2 ] Bug #1302680 - CVE-2016-1927 phpMyAdmin: Insecure password generation in JavaScript (PMASA-2016-4) https://bugzilla.redhat.com/show_bug.cgi?id=1302680 [ 3 ] Bug #1302679 - CVE-2016-2040 phpMyAdmin: Multiple XSS vulnerabilities (PMASA-2016-3) https://bugzilla.redhat.com/show_bug.cgi?id=1302679 [ 4 ] Bug #1302677 - CVE-2016-2039 phpMyAdmin: Unsafe generation of XSRF/CSRF token (PMASA-2016-2) https://bugzilla.redhat.com/show_bug.cgi?id=1302677 [ 5 ] Bug #1302676 - CVE-2016-2038 phpMyAdmin: Multiple full path disclosure vulnerabilities (PMASA-2016-1) https://bugzilla.redhat.com/show_bug.cgi?id=1302676 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 29 Jan '16

29 Jan '16

The following Fedora EPEL 7 Security updates need testing: Age URL 326 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7 88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-043f77342d cgit-0.12-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-418a480529 gsi-openssh-6.6.1p1-3.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fb26e5cd3c privoxy-3.0.23-3.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-fca17abc84 p7zip-15.09-9.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f17c082f00 nginx-1.6.3-8.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-69b4d0e57c prosody-0.9.10-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing R-3.2.3-4.el7 abduco-0.5-1.el7 abi-dumper-0.99.14-1.el7 cherrytree-0.36.4-2.el7 cmake-fedora-2.5.1-1.el7 cmark-0.23.0-3.el7 cmark-0.23.0-4.el7 drbdlinks-1.27-3.el7 globus-gssapi-gsi-11.26-1.el7 hitch-1.1.1-1.el7 letsencrypt-0.3.0-1.el7 libinput-1.1.5-1.el7 libsidplayfp-1.8.3-2.el7 nginx-1.6.3-8.el7 pdns-3.4.7-2.el7 perl-Email-Valid-1.198-1.el7 pki-usgov-dod-cacerts-0.0.6-4.el7 prosody-0.9.10-1.el7 python-acme-0.3.0-1.el7 python-elfdata-0.6-1.el7 python-polib-1.0.7-2.el7 python-productmd-1.0-9.el7 python-raven-5.10.2-1.el7 python-requests-toolbelt-0.6.0-1.el7 rpmorphan-1.15-1.el7 rubygem-activerecord-deprecated_finders-1.0.3-6.el7 rubygem-minitest5-5.8.4-1.el7 tito-0.6.4-1.el7 wildmidi-0.3.8-3.el7 yadifa-2.1.5-1.el7 Details about builds: ================================================================================ R-3.2.3-4.el7 (FEDORA-EPEL-2016-17ae3a01b5) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information: Add pre-built copies of the R HTML manuals to the packages which cannot build them due to an ancient texi2any (RHEL 5 & 6). RHEL 7 was updated to ensure clean upgrade path. ---- Add Requires: redhat-rpm-config on targets that are hardened, because R inherits the compiler flags that it was built with and passes them to all modules built for it later. -------------------------------------------------------------------------------- ================================================================================ abduco-0.5-1.el7 (FEDORA-EPEL-2016-bab758e61a) Session management in a clean and simple way -------------------------------------------------------------------------------- Update Information: Abduco 0.5 stable release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1298907 - abduco-0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1298907 -------------------------------------------------------------------------------- ================================================================================ abi-dumper-0.99.14-1.el7 (FEDORA-EPEL-2016-51c0ff0edf) Tool to dump ABI of an ELF object containing DWARF debug info -------------------------------------------------------------------------------- Update Information: Detect private data types in the ABI, i.e. not defined in public header files. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301789 - abi-dumper-0.99.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1301789 -------------------------------------------------------------------------------- ================================================================================ cherrytree-0.36.4-2.el7 (FEDORA-EPEL-2016-b49173f74f) Hierarchical note taking application -------------------------------------------------------------------------------- Update Information: Update to 0.36.4 ---- update to cherrytree 0.36.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1160249 - cherrytree-0.36.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1160249 [ 2 ] Bug #1301941 - cherrytree-0.36.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1301941 -------------------------------------------------------------------------------- ================================================================================ cmake-fedora-2.5.1-1.el7 (FEDORA-EPEL-2016-571c25a5ff) CMake helper modules for fedora developers -------------------------------------------------------------------------------- Update Information: - Fixed: * Out-of-the-source build for ibus-chewing -------------------------------------------------------------------------------- ================================================================================ cmark-0.23.0-3.el7 (FEDORA-EPEL-2016-65d6af6d87) CommonMark parsing and rendering -------------------------------------------------------------------------------- Update Information: CommonMark parsing and rendering -------------------------------------------------------------------------------- References: [ 1 ] Bug #1266429 - Review Request: cmark - CommonMark parsing and rendering https://bugzilla.redhat.com/show_bug.cgi?id=1266429 -------------------------------------------------------------------------------- ================================================================================ cmark-0.23.0-4.el7 (FEDORA-EPEL-2016-b3f7cd8978) CommonMark parsing and rendering -------------------------------------------------------------------------------- Update Information: CommonMark parsing and rendering (http://commonmark.org/) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1266429 - Review Request: cmark - CommonMark parsing and rendering https://bugzilla.redhat.com/show_bug.cgi?id=1266429 -------------------------------------------------------------------------------- ================================================================================ drbdlinks-1.27-3.el7 (FEDORA-EPEL-2016-8b5788b3e9) A program for managing links into a DRBD shared partition -------------------------------------------------------------------------------- Update Information: Provide native systemd service -------------------------------------------------------------------------------- ================================================================================ globus-gssapi-gsi-11.26-1.el7 (FEDORA-EPEL-2016-f2e8fc5635) Globus Toolkit - GSSAPI library -------------------------------------------------------------------------------- Update Information: ix FORCE_TLS setting to allow TLSv1.1 and TLS1.2, not just TLSv1.0 -------------------------------------------------------------------------------- ================================================================================ hitch-1.1.1-1.el7 (FEDORA-EPEL-2016-41a21534e9) Network proxy that terminates TLS/SSL connections -------------------------------------------------------------------------------- Update Information: New upstream release. A bugfix relase. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302474 - hitch-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1302474 -------------------------------------------------------------------------------- ================================================================================ letsencrypt-0.3.0-1.el7 (FEDORA-EPEL-2016-e38556f243) A free, automated certificate authority client -------------------------------------------------------------------------------- Update Information: Updated to 0.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302701 - letsencrypt-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1302701 -------------------------------------------------------------------------------- ================================================================================ libinput-1.1.5-1.el7 (FEDORA-EPEL-2016-c64c3afa71) Input device library -------------------------------------------------------------------------------- Update Information: Upstream update to 1.1.5 -------------------------------------------------------------------------------- ================================================================================ libsidplayfp-1.8.3-2.el7 (FEDORA-EPEL-2016-386eead9f4) SID chip music module playing library -------------------------------------------------------------------------------- Update Information: Import to EPEL to satisfy QMMP dependency (rhbz#1242361#c3) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1242361 - [RFE] Please provide qmmp EPEL7 build https://bugzilla.redhat.com/show_bug.cgi?id=1242361 -------------------------------------------------------------------------------- ================================================================================ nginx-1.6.3-8.el7 (FEDORA-EPEL-2016-f17c082f00) A high performance web server and reverse proxy server -------------------------------------------------------------------------------- Update Information: - CVE-2016-0747: Insufficient limits of CNAME resolution in resolver - CVE-2016-0746: Use-after-free during CNAME response processing in resolver - CVE-2016-0742: Invalid pointer dereference in resolver -------------------------------------------------------------------------------- ================================================================================ pdns-3.4.7-2.el7 (FEDORA-EPEL-2016-c3fc50614c) A modern, advanced and high performance authoritative-only nameserver -------------------------------------------------------------------------------- Update Information: - Remove old PolarSSL dependency -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302464 - Update to mbedtls causes a dependency issue with pdns https://bugzilla.redhat.com/show_bug.cgi?id=1302464 -------------------------------------------------------------------------------- ================================================================================ perl-Email-Valid-1.198-1.el7 (FEDORA-EPEL-2016-efed433f78) Check validity of internet email address -------------------------------------------------------------------------------- Update Information: Update to 1.198 to fix "multiple MX detection errors". -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301214 - perl-Email-Valid: please update in epel7 https://bugzilla.redhat.com/show_bug.cgi?id=1301214 -------------------------------------------------------------------------------- ================================================================================ pki-usgov-dod-cacerts-0.0.6-4.el7 (FEDORA-EPEL-2016-9eb4a82253) A collection of U.S. Government CA Certs that the DOD uses -------------------------------------------------------------------------------- Update Information: A collection of U.S. Government CA Certs that the DOD uses https://bodhi.fedoraproject.org/updates/FEDORA-2016-1a87db5f8e recently added to fc23 https://bugzilla.redhat.com/show_bug.cgi?id=1274948 -------------------------------------------------------------------------------- ================================================================================ prosody-0.9.10-1.el7 (FEDORA-EPEL-2016-69b4d0e57c) Flexible communications server for Jabber/XMPP -------------------------------------------------------------------------------- Update Information: Prosody 0.9.10 ============== A summary of changes in this release: Security -------- * mod_dialback: Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks (CVE-2016-0756) Fixes and improvements ---------------------- * Startup: Open /dev/urandom read-only, to fix a failure to start on some systems (fixes #585) * Networking: Improve handling of the 'select' network backend running out of file descriptors Minor changes ------------- * Networking: Increase default internal read size to prevent connections stalling with LuaEvent (see #583) * DNS: Discard queries that failed to send due to connection errors (fixes #598) * c2s, s2s: Lower priority of shutdown handler, so that modules such as MUC can always send shutdown notifications to (remote) users (fixes #601) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302463 - CVE-2016-0756 prosody: mod_dialback allows impersonation attacks https://bugzilla.redhat.com/show_bug.cgi?id=1302463 -------------------------------------------------------------------------------- ================================================================================ python-acme-0.3.0-1.el7 (FEDORA-EPEL-2016-e38556f243) Python library for the ACME protocol -------------------------------------------------------------------------------- Update Information: Updated to 0.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302701 - letsencrypt-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1302701 -------------------------------------------------------------------------------- ================================================================================ python-elfdata-0.6-1.el7 (FEDORA-EPEL-2016-4bf0014108) Python wrapper to get ELF data -------------------------------------------------------------------------------- Update Information: Updated elfdata module which can extract GNU_BUILD_ID from the ELF files. -------------------------------------------------------------------------------- ================================================================================ python-polib-1.0.7-2.el7 (FEDORA-EPEL-2016-8ec371628d) A library to parse and manage gettext catalogs -------------------------------------------------------------------------------- Update Information: Upstream update to 1.0.7 -------------------------------------------------------------------------------- ================================================================================ python-productmd-1.0-9.el7 (FEDORA-EPEL-2016-090ce4d02f) Library providing parsers for metadata related to OS installation -------------------------------------------------------------------------------- Update Information: add python-productmd to epel7 ---- adding python-productmd to epel -------------------------------------------------------------------------------- ================================================================================ python-raven-5.10.2-1.el7 (FEDORA-EPEL-2016-536e3ccb2c) Python client for Sentry -------------------------------------------------------------------------------- Update Information: Update to python-raven-5.10.2 ---- First EPEL release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1234950 - Package python-raven in EPEL https://bugzilla.redhat.com/show_bug.cgi?id=1234950 [ 2 ] Bug #1298402 - python-raven-5.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1298402 -------------------------------------------------------------------------------- ================================================================================ python-requests-toolbelt-0.6.0-1.el7 (FEDORA-EPEL-2016-2c85206fce) A utility belt for advanced users of python-requests -------------------------------------------------------------------------------- Update Information: update to 0.6.0 release -------------------------------------------------------------------------------- ================================================================================ rpmorphan-1.15-1.el7 (FEDORA-EPEL-2016-6410427984) List packages that have no dependencies (like deborphan) -------------------------------------------------------------------------------- Update Information: Adding rpmorphan to EPEL -------------------------------------------------------------------------------- References: [ 1 ] Bug #860433 - RFE - please maintain rpmorphan for EPEL https://bugzilla.redhat.com/show_bug.cgi?id=860433 -------------------------------------------------------------------------------- ================================================================================ rubygem-activerecord-deprecated_finders-1.0.3-6.el7 (FEDORA-EPEL-2016-e52a4ce8de) This gem contains deprecated finder APIs extracted from Active Record -------------------------------------------------------------------------------- Update Information: Bring package to EPEL7 -------------------------------------------------------------------------------- ================================================================================ rubygem-minitest5-5.8.4-1.el7 (FEDORA-EPEL-2016-e9edb7ff2c) minitest provides a complete suite of testing facilities -------------------------------------------------------------------------------- Update Information: Updated to new upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #1298622 - Review Request: rubygem-minitest5 - minitest provides a complete suite of testing facilities https://bugzilla.redhat.com/show_bug.cgi?id=1298622 -------------------------------------------------------------------------------- ================================================================================ tito-0.6.4-1.el7 (FEDORA-EPEL-2016-ed4568b9bf) A tool for managing rpm based git projects -------------------------------------------------------------------------------- Update Information: Fix tagging with --use-version on MEAD projects. Fix git annex builder cleanup returning to proper directory. Fix issue with .spec file basename in some situations. -------------------------------------------------------------------------------- ================================================================================ wildmidi-0.3.8-3.el7 (FEDORA-EPEL-2016-3f3fffda5a) Softsynth midi player -------------------------------------------------------------------------------- Update Information: Import to EPEL to satisfy QMMP dependency (rhbz#1242361#c3) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1242361 - [RFE] Please provide qmmp EPEL7 build https://bugzilla.redhat.com/show_bug.cgi?id=1242361 -------------------------------------------------------------------------------- ================================================================================ yadifa-2.1.5-1.el7 (FEDORA-EPEL-2016-42474ec730) Lightweight authoritative Name Server with DNSSEC capabilities -------------------------------------------------------------------------------- Update Information: 20160108: YADIFA 2.1.5 - Dynamic updates do not use temporary files anymore which improves their general performance. - The statistics now shows the referrals. Fixes: - fixed an issue where getting a huge incremental transfer would prevent the server from answering queries while applying the changes. - fixed an issue serving IXFR that would occur when a incremental change step was bigger than 64KB - fixed an issue for Solaris with the memory aligment fix not active everywhere - fixed an issue on the Solaris build settings - fixed an issue where sometimes yadifad would not find a configuration file given as a parameter with a relative path - fixed an issue where a wild-card would not be properly returned with an AXFR - fixed an issue where dynamically updating a zone at a speed such that the zone file would need to be written multiple times on disk before finishing the previous write could lead to a deadlock 20151026: YADIFA 2.1.4 - The zone reader error reporting has been improved. - Stacktrace support added for Solaris. Known issue: - Adding and or removing NSEC3PARAM dynamically is not properly handled. Fixes: - fixed an issue where an NSEC3 answer proving a * query would lead to a crash - fixed an issue where a private key may be not recognised as such - fixed an issue where dynamic update prerequisite check would fail a valid match - fixed an issue where zone signature maintenance would only start if all private keys were available. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1302113 - yadifa: 2.1.5 release available https://bugzilla.redhat.com/show_bug.cgi?id=1302113 --------------------------------------------------------------------------------

1 0

[epel-devel] Take package ownership rubygem-rest-client el6
by Delahaye Axel 29 Jan '16

29 Jan '16

Hi all, The package rubygem-rest-client has been retired from el6 branch on 24th August 2015 because it was orphaned for more than 6 weeks. This package is still in Fedora so I think a re-review request is not required. I plan to rebuild the 1.6.1-2.el6 version from SCM. I'm waiting for your advice before request for git access and ask for unblock the package branch. https://fedoraproject.org/wiki/Orphaned_package_that_need_new_maintainers#C… Thanks, Axel Delahaye (axelvvd) ________________________________ Ce message et les pi?ces jointes sont confidentiels et r?serv?s ? l'usage exclusif de ses destinataires. Il peut ?galement ?tre prot?g? par le secret professionnel. Si vous recevez ce message par erreur, merci d'en avertir imm?diatement l'exp?diteur et de le d?truire. L'int?grit? du message ne pouvant ?tre assur?e sur Internet, la responsabilit? de Worldline ne pourra ?tre recherch?e quant au contenu de ce message. Bien que les meilleurs efforts soient faits pour maintenir cette transmission exempte de tout virus, l'exp?diteur ne donne aucune garantie ? cet ?gard et sa responsabilit? ne saurait ?tre recherch?e pour tout dommage r?sultant d'un virus transmis. This e-mail and the documents attached are confidential and intended solely for the addressee; it may also be privileged. If you receive this e-mail in error, please notify the sender immediately and destroy it. As its integrity cannot be secured on the Internet, the Worldline liability cannot be triggered for the message content. Although the sender endeavours to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted.

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 29 Jan '16

29 Jan '16

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel January 2016