Fedora EPEL 6 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 6 Security updates need testing:
Age URL
252 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6
235 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6
229 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6
160 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
160 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
119 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6
90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-eb24bfea0d octave-3.4.3-2.el6 gdl-0.9.5-4.el6 GraphicsMagick-1.3.23-4.el6
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-46c6b5e4d4 botan-1.8.15-1.el6
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-58b3766907 libebml-1.2.2-1.el6
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-00c45982f6 drupal6-6.38-1.el6
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6e0c318d91 libssh-0.5.5-5.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6a812bd682 drupal7-7.43-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
drupal7-7.43-1.el6
lynis-2.1.1-2.el6
perl-File-Edit-Portable-1.20-1.el6
perl-Net-SSLGlue-1.055-2.el6
perl-XML-Entities-1.0002-2.el6
powerman-2.3.24-1.el6
python-productmd-1.0-12.el6
Details about builds:
================================================================================
drupal7-7.43-1.el6 (FEDORA-EPEL-2016-6a812bd682)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
https://www.drupal.org/SA-CORE-2016-001 ---- Various bug fixes. For details,
refer to release notes at: https://www.drupal.org/drupal-7.42-release-notes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312394 - drupal7: drupal: several issues fixed in 7.43 and 6.38 (SA-CORE-2016-001) [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1312394
[ 2 ] Bug #1312391 - drupal7: drupal: several issues fixed in 7.43 and 6.38 (SA-CORE-2016-001) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1312391
[ 3 ] Bug #1304551 - drupal7-7.42 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1304551
--------------------------------------------------------------------------------
================================================================================
lynis-2.1.1-2.el6 (FEDORA-EPEL-2016-2a3ef301cd)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
perl-File-Edit-Portable-1.20-1.el6 (FEDORA-EPEL-2016-1a485ebb71)
Read and write files while keeping the original line-endings intact
--------------------------------------------------------------------------------
Update Information:
1.20 2016-02-26 - no functional changes - code cleanup, slight refactoring -
changed from croak() to confess() for better diagnostics 1.19 2016-02-20 -
is_read check in write() is now performed before $copy assignment to $file, so
that the proper original file's recsep is used (fixes #19)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310275 - perl-File-Edit-Portable-1.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1310275
--------------------------------------------------------------------------------
================================================================================
perl-Net-SSLGlue-1.055-2.el6 (FEDORA-EPEL-2016-c3ab2f456d)
Add/extend SSL support for common perl modules
--------------------------------------------------------------------------------
Update Information:
1.055 2015/10/25 - fix memory leak in Net::SSLGlue::Socket, RT#107816. Thanks
to kasyap.mr[AT]gmail[DOT]com for reporting 1.054 2015/04/28 - if a version
of libnet is detected which already supports TLS (i.e. libnet 3.0+) warn and use
this instead. 1.053 2014/05/28 - if current LWP is detected is use this
mostly unpatched - fix Net::SSLGlue::FTP to use the same hostname when verifying
the certificate of the data connection 1.052 2014/01/16 - FTPS: reuse same
SSL session for control and data channnel to work with default configuration of
proftpd. 1.051 2014/01/10 - fixes to Net::FTP SSL support - examples/ftps-
tests.pl has lots of tests for FTP against live server 1.05 2014/01/09 -
added support for SSL+IPv6 in Net::FTP - new package Net::SSLGlue::Socket for a
socket which combines plain,ssl,ipv6 - fixed some tests - some checks for bad
certificates do not work anymore because these certs were fixed
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312492 - perl-Net-SSLGlue: bump version in epel
https://bugzilla.redhat.com/show_bug.cgi?id=1312492
--------------------------------------------------------------------------------
================================================================================
perl-XML-Entities-1.0002-2.el6 (FEDORA-EPEL-2016-148bca411e)
Decode strings with XML entities
--------------------------------------------------------------------------------
Update Information:
1.0002 2015-08-17 14:46 - Replaced curly brackets with parentheses in variable
expansion in Makefile.PL. Fixes RT106483; Credits: Daniel Macks
<dmacks(a)netspace.org> - make clean no longer wipes out entities data 1.0001
2012-08-03 13:32 - Added docs about encoding entities.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1312488 - perl-XML-Entities: bump version in epel
https://bugzilla.redhat.com/show_bug.cgi?id=1312488
--------------------------------------------------------------------------------
================================================================================
powerman-2.3.24-1.el6 (FEDORA-EPEL-2016-0aad59f468)
Remote power control for clusters
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
================================================================================
python-productmd-1.0-12.el6 (FEDORA-EPEL-2016-699a67d677)
Library providing parsers for metadata related to OS installation
--------------------------------------------------------------------------------
Update Information:
add a patch to make rawhide as a version consistently an option
--------------------------------------------------------------------------------
8 years, 1 month
EPEL Proposal #1: Rechartering
by Stephen John Smoogen
============
Background
============
So my time at FOSDEM was pretty much the following. Walk into the hall
where the Fedora/CentOS tables were. Get met by someone who worked on
or in EPEL. Try to have a conversation and find that it was too packed
and loud there. Walk over to the coffee area and buy the person a
coffee and listen. Finish conversation and walk back over to the
table.. [take a break every now and then to use the restroom from
drinking a 16 oz tea every 30 minutes.] This was a lot of
conversations and they did all blur together after a while. [Using a
technique I learned from Centos' Karanbir Singh at FOSDEM, I will
bring a small notebook to the next conference and write down a problem
per page per person. Then I can go back the next year and see if the
problems are still there.]
==========
Promises
==========
While they all did blur, there were many similar questions from people
that came up:
* What are the promises that EPEL makes to its users?
* Do those promises make sense? [Do we need to keep a package the same
for 5+ years?]
* Do we actually keep those promises?
* Who thinks we should be keeping these promises that various people
didn't feel were needed?
* What promises can we make that make sense and that after ~8 years we
feel we can reasonably keep?
* Who do we need to make these promises to?
As I said in the previous post, a lot of people felt that we had made
promises of fixing and updating things in EPEL over the last 3 years
but nothing really seemed to have changed. There are a lot of reasons
for that (as in people say things and after a 20 hour flight have no
idea what they said to looking at the promise and going "ok that is
fine but who is going to do the work?" to "are we even allowed to
change this?"
The last point is to me an undercurrent of a lot of conversations in
and around EPEL in the last 3 years. There is the feeling that we were
chartered nearly 10 years ago to do certain things, and we should keep
doing them because people depend on that. And it is true that some
people do depend on it, but it seems increasingly that they either
don't show up to help or are a smaller set of people than we realize.
These questions and the problems above was a long discussion between
Brian Stinson and me on Sunday evening. One of the circles that kept
coming up was "Does EPEL need to be rechartered?" EPEL is a very old
Fedora SIG, and it has gone through several incarnations in the last 8
years from when it had yearly elections for board members to when it
ran without any leadership to its recent experimentation with a new
steering committee. However during that time there have been many
rules which it has tried to keep:
1. Do not do disruptive upgrades. Try to backport security fixes or do
upgrades which do not change API/ABI issues.
2. Be prepared to support the same package for the life of an
Enterprise Linux release.
3. Never replace or conflict with packages in the base Enterprise
Linux.
4. They should never require manual updates or changes between updates.
5. Follow Fedora rules for bundling, licensing, and similar things.
There are some promises some people feel like we have made also:
1. Packages will never disappear. [They don't disappear from Fedora 12
even if it is archived.. ]
2. Packages will work from EL-X.0 to EL-X.N. [EPEL will rebuild
packages regularly to deal with any ABI items]
3. Packages are built against all of an Enterprise Linux 'base' (EG
whatever is in CentOS/Scientific Linux base).
In many cases those promises aren't kept now or when they are
attempted to be kept are impossible to do.
* Most software which uses a database back end requires schema updates
ranging from dump/reload to long running change processes.
* A lot of software rebases itself internally to the point that trying
to backport a security fix usually requires a lot of coding skill in
the package.
* The Enterprise Linux lifetime has increased from 5 years to 10 years
since EPEL started. While people were interested in supporting a
package for 3-4 years.. doing so for 10 years is too much for a
volunteer position.
* The Enterprise Linux is not the same as it was in EL-3/4/5 where
software versions were rarely 'rebased' to a newer release. Instead
software would be recoded to work in the older software as much as
possible. Currently in EL-7, the desktop and other parts of the OS
were greatly updated between 7.1 and 7.2 with the idea that this
will be the norm for all releases in order to keep the product
relevant to the majority of users.
From the above, 3 of the 5 promises are either too much to keep or
haven't been kept in a long time.
=============
What to Do?
=============
Because we haven't been able to keep many promises, but feel like we
should there seem to be a couple of options ahead:
1. Ignore and do nothing. I don't like the status-quo but I think it
needs to be listed as something that can happen.
2. Try to keep the original charter and be a lot more picky about what
is in EPEL so that we can meet those promises.
3. Figure out what we can do, and go to the appropriate Fedora body to
recharter ourselves to meet those more reasonable goals.
Now number 3 may seem to be busy work, but I have found for the
conservative minded enterprise maintainer, it is very hard to give up
doing something even if you are failing until you are told you can
stop trying. It also makes it clearer to future people working on EPEL
in 2024 what they are trying to solve and how to change when the world
of 2024 needs different solutions.
=============================
What would be in my charter
=============================
1. EPEL is run by the EPEL Steering Committee. They act as
sub-equivalents to the Fedora Extras Steering Committee, Fedora
Packaging Committee and Fedora Release Engineering.
2. Packages in EPEL will never replace or conflict with packages in
the base Enterprise Linux.
3. Packages in EPEL will follow Fedora rules for bundling, licensing,
and similar things. Exceptions to this will exist and will be
documented in appropriate place.
4. EPEL release engineering can set up systems to rebase packages in
regular intervals. [There are multiple ways of doing this that I
will try to outline in other proposals this week.]
5. The only promise of a lifetime of a package is between dot releases
of the Enterprise Linux. Maintainers should make an honest effort
to support a package for the "life" of a sub-release (6.8->6.9) but
no longer.
6. Packages in a dot release will not disappear during that
time. There is no promise after that time. [If EPSco approves of a
method that packages are regularly archived, then users can use
that as a simpler method to get old packages.]
7. EPEL only supports the current dot release. If a package in
EL-6.now works on 6.0.z that is great. If it doesn't, it is up to
the user (and not the maintainer or EPEL) to deal with it. [Again
if an archive method is setup, then those older versions would just
be in something like /pub/archives/epel/epel-6.8/ or some similar
setup]
Those are my starting points for a rechartered EPEL. Please join in
the discussion on the EPEL-devel mailing list.
--
Stephen J Smoogen.
8 years, 1 month
Virtual packages providing python2-*
by Jason L Tibbitts III
One annoying difference between packaging for Fedora and EPEL7 (and
probably older) is the fact that Python packages in Fedora are required
to provide "python2-foo" whereas many EL7 packages don't. This leads to
ifdefs and unpleasantness, and kind of complicates our ability to hide
some details behind macros.
As I see it, the easiest way to hide this (besides RH maintainers
updating those packages with the extra Provides:) is to add a bunch of
empty packages named "python2-foo" which have nothing but a dependency
on "python-foo".
I can get a review process exception from FPC and script up the import
of these things pretty trivially. The question is: would anyone object
to this? Obviously we'll have to have some way of detecting any
conflicts which might arise, which can be done pretty easily with some
scripting.
Even just getting python2-setuptools in would eliminate a lot of cruft.
There are, I believe, 166 packages which might need this, though we
don't have to add them all at once if that makes things more palatable.
And if there's a need to discuss this at a meeting, could someone add it
to the agenda (and remind me of the meeting time)?
- J<
8 years, 1 month
Old scl-utils packages?
by Dave Johansen
It looks like EPEL 5/6 have old versions of scl-utils. Those are probably
added back at a point when the base OS didn't have them, but they are now
older versions than what's available in the base OS.
Should EPEL versions be removed?
Dave
8 years, 1 month
Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 7 Security updates need testing:
Age URL
355 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
117 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-bc557a5441 nghttp2-1.7.1-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-287d763bcd GraphicsMagick-1.3.23-4.el7 gdl-0.9.5-3.el7 octave-3.8.2-19.el7
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-5748740371 qt-creator-3.5.1-2.el7 botan-1.10.12-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8c727601c5 libebml-1.3.3-3.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e79091a3b8 ReviewBoard-2.5.3-1.el7 python-djblets-0.9.1-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6dc46a554e libssh-0.6.5-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ColPack-1.0.10-1.el7
ansible-2.0.1.0-2.el7
boinc-client-7.6.22-1.el7
cmake-fedora-2.6.0-1.el7
gssntlmssp-0.6.0-1.el7
hdf-4.2.10-7.el7
inxi-2.2.34-1.el7
koschei-1.4-1.el7
libssh-0.6.5-2.el7
mozilla-https-everywhere-5.1.4-1.el7
nodejs-grunt-contrib-internal-0.4.9-4.el7
perl-Tangerine-0.22-1.el7
php-composer-semver-1.3.0-1.el7
rubygem-rack-1.6.4-2.el7
rubygem-tzinfo-1.2.2-3.el7
task-2.5.1-1.el7
testssl-2.6-3.el7
yad-0.34.1-1.el7
Details about builds:
================================================================================
ColPack-1.0.10-1.el7 (FEDORA-EPEL-2016-28077e0226)
Algorithms for specialized vertex coloring problems
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
ansible-2.0.1.0-2.el7 (FEDORA-EPEL-2016-6003e1f3f1)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Version 2.0.1.0 for testing. ---- Ansible v2 upstream rewrite with many
bugfixes and new features. See upstream changelog for details:
https://github.com/ansible/ansible/blob/devel/CHANGELOG.md ---- Ansible v2
with many bugfixes and new features. See upstream changelog for details:
https://github.com/ansible/ansible/blob/devel/CHANGELOG.md
--------------------------------------------------------------------------------
================================================================================
boinc-client-7.6.22-1.el7 (FEDORA-EPEL-2016-268bdbd1df)
The BOINC client core
--------------------------------------------------------------------------------
Update Information:
This is the latest release of the boinc-client.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1047044 - boinc is always "suspended - computer is in use" - idle time undetected
https://bugzilla.redhat.com/show_bug.cgi?id=1047044
[ 2 ] Bug #1307358 - boinc-client: FTBFS in rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1307358
[ 3 ] Bug #1305388 - Please upgrade to 7.6.x which supports open-source OpenCL drivers and GCC 6
https://bugzilla.redhat.com/show_bug.cgi?id=1305388
[ 4 ] Bug #1303070 - boinc-client runs unconfined
https://bugzilla.redhat.com/show_bug.cgi?id=1303070
[ 5 ] Bug #1238099 - [abrt] boinc-manager: x86_64_fallback_frame_state(): boincmgr killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1238099
[ 6 ] Bug #1090051 - Rotation of boinc log file fails to restart boinc-client process to pick up new log file
https://bugzilla.redhat.com/show_bug.cgi?id=1090051
[ 7 ] Bug #1071623 - boinc-client-7.4.25 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1071623
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-2.6.0-1.el7 (FEDORA-EPEL-2016-392c18c2e7)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
- Enhancement: * ManageTranslation: MANAGE_POT_FILE: new options DOMAIN_NAME,
MO_LOCALE_DIR - Bug fix: * cmake-fedora-zanata: remove debug message *
ManageTranslate: failed to generate pot targets when
MANAGE_TRANSLATION_GETTEXT_POT_FILES is not empty.' -R testing cmake-
fedora-2.6.0-1.fc24 + /usr/bin/bodhi -n -t enhancement -u dchen -N '-
Enhancement: * ManageTranslation: MANAGE_POT_FILE: new options DOMAIN_NAME,
MO_LOCALE_DIR - Bug fix: * cmake-fedora-zanata: remove debug message *
ManageTranslate: failed to generate pot targets when
MANAGE_TRANSLATION_GETTEXT_POT_FILES is not empty.
--------------------------------------------------------------------------------
================================================================================
gssntlmssp-0.6.0-1.el7 (FEDORA-EPEL-2016-9a69d9610d)
GSSAPI NTLMSSP Mechanism
--------------------------------------------------------------------------------
Update Information:
Updated gssntlmssp package with many bugfixes and features
--------------------------------------------------------------------------------
================================================================================
hdf-4.2.10-7.el7 (FEDORA-EPEL-2016-064495a256)
A general purpose library and file format for storing scientific data
--------------------------------------------------------------------------------
Update Information:
Fix other arch builds.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1269851 - hdf SRPM does not build correctly on s390x, aarch64
https://bugzilla.redhat.com/show_bug.cgi?id=1269851
--------------------------------------------------------------------------------
================================================================================
inxi-2.2.34-1.el7 (FEDORA-EPEL-2016-b6e9ff4b07)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.34.
--------------------------------------------------------------------------------
================================================================================
koschei-1.4-1.el7 (FEDORA-EPEL-2016-b0925a8ff2)
Continuous integration for Fedora packages
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream version 1.4
--------------------------------------------------------------------------------
================================================================================
libssh-0.6.5-2.el7 (FEDORA-EPEL-2016-6dc46a554e)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2016-0739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1311259 - CVE-2016-0739 libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1311259
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.1.4-1.el7 (FEDORA-EPEL-2016-1c7737046a)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
Firefox 5.1.4 / Chrome 2016.2.23 * Fixes for Firefox Dev Edition * Chrome:
Fix regressions in custom rule functions * Firefox: Fix custom ruleset
regression Firefox 5.1.3 / Chrome 2016.2.18 * Performance & memory usage
improvements for Chrome * Introduce temporary disable option on Chrome *
Bugfix: make custom rules disableable * Improvements to tests * Switch to
using JSON to store rulesets Firefox 5.1.2 / Chrome 2015.12.16 * Ruleset
fixes
--------------------------------------------------------------------------------
================================================================================
nodejs-grunt-contrib-internal-0.4.9-4.el7 (FEDORA-EPEL-2016-02fd611bd3)
Internal tasks for managing the grunt-contrib project
--------------------------------------------------------------------------------
Update Information:
Add CONTRIBUTING.md to libdir (RHBZ#1288025)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288025 - grunt-contrib-internal needs CONTRIBUTING.md in libdir
https://bugzilla.redhat.com/show_bug.cgi?id=1288025
--------------------------------------------------------------------------------
================================================================================
perl-Tangerine-0.22-1.el7 (FEDORA-EPEL-2016-68866f05af)
Analyse perl files and report module-related information
--------------------------------------------------------------------------------
Update Information:
A new version of Tangerine is available. See
http://cpansearch.perl.org/src/CONTYK/Tangerine-0.22/Changes for the summary of
changes in this release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301242 - perl-Tangerine-0.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301242
--------------------------------------------------------------------------------
================================================================================
php-composer-semver-1.3.0-1.el7 (FEDORA-EPEL-2016-8e9562424b)
Semver library that offers utilities, version constraint parsing and validation
--------------------------------------------------------------------------------
Update Information:
**Version 1.3.0** * Fixed: stability parsing - composer/composer#1234. *
Changed: collapse contiguous constraints when possible.
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-1.6.4-2.el7 (FEDORA-EPEL-2016-e789b28cf6)
Common API for connecting web frameworks, web servers and layers of software
--------------------------------------------------------------------------------
Update Information:
Ported to EPEL7
--------------------------------------------------------------------------------
================================================================================
rubygem-tzinfo-1.2.2-3.el7 (FEDORA-EPEL-2016-9b41cd4e37)
Daylight-savings aware timezone library
--------------------------------------------------------------------------------
Update Information:
Updated for EPEL7
--------------------------------------------------------------------------------
================================================================================
task-2.5.1-1.el7 (FEDORA-EPEL-2016-8e78f9ef5b)
Taskwarrior - a command-line TODO list manager
--------------------------------------------------------------------------------
Update Information:
Latest upstream release. ---- Latest beta from upstream. https://git.tasktool
s.org/projects/TM/repos/task/browse/ChangeLog?at=refs%2Fheads%2F2.5.1
--------------------------------------------------------------------------------
================================================================================
testssl-2.6-3.el7 (FEDORA-EPEL-2016-687fa9a95f)
Testing TLS/SSL encryption
--------------------------------------------------------------------------------
Update Information:
Initial release of testssl
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1309707 - Review Request: testssl - Testing TLS/SSL encryption
https://bugzilla.redhat.com/show_bug.cgi?id=1309707
--------------------------------------------------------------------------------
================================================================================
yad-0.34.1-1.el7 (FEDORA-EPEL-2016-2aaf9e1f51)
Display graphical dialogs from shell scripts or command line
--------------------------------------------------------------------------------
Update Information:
update to yad-0.34.1 ---- update to 0.34.0 ---- Update to yad-0.33.1 ----
update to 0.33.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1310485 - yad-0.34.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1310485
[ 2 ] Bug #1297601 - yad-0.33.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1297601
[ 3 ] Bug #1296780 - yad-0.33.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1296780
--------------------------------------------------------------------------------
8 years, 1 month
Fedora EPEL 6 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 6 Security updates need testing:
Age URL
251 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828 chicken-4.9.0.1-4.el6
233 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6
227 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6
158 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8148 optipng-0.7.5-5.el6
158 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
117 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6
89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-eb24bfea0d octave-3.4.3-2.el6 gdl-0.9.5-4.el6 GraphicsMagick-1.3.23-4.el6
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-46c6b5e4d4 botan-1.8.15-1.el6
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-58b3766907 libebml-1.2.2-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-00c45982f6 drupal6-6.38-1.el6
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-6e0c318d91 libssh-0.5.5-5.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
ColPack-1.0.10-1.el6
ansible-2.0.1.0-2.el6
cmake-fedora-2.6.0-1.el6
drupal6-6.38-1.el6
inxi-2.2.34-1.el6
libssh-0.5.5-5.el6
mozilla-https-everywhere-5.1.4-1.el6
nodejs-grunt-contrib-internal-0.4.9-4.el6
perl-Tangerine-0.22-1.el6
Details about builds:
================================================================================
ColPack-1.0.10-1.el6 (FEDORA-EPEL-2016-d720994b47)
Algorithms for specialized vertex coloring problems
--------------------------------------------------------------------------------
Update Information:
* new upstream release
--------------------------------------------------------------------------------
================================================================================
ansible-2.0.1.0-2.el6 (FEDORA-EPEL-2016-d99bf20e44)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Version 2.0.1.0 with many bugfixes ---- Use python-jinja2-26 package on EPEL6
as the newer jinja2 package has some extra tests that are nice to have. ----
Ansible v2 upstream rewrite with many bugfixes and new features. See upstream
changelog for details:
https://github.com/ansible/ansible/blob/devel/CHANGELOG.md ---- Ansible v2
with many bugfixes and new features. See upstream changelog for details:
https://github.com/ansible/ansible/blob/devel/CHANGELOG.md
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1236115 - The ansible package requires python-jinja2
https://bugzilla.redhat.com/show_bug.cgi?id=1236115
--------------------------------------------------------------------------------
================================================================================
cmake-fedora-2.6.0-1.el6 (FEDORA-EPEL-2016-66431b5ef3)
CMake helper modules for fedora developers
--------------------------------------------------------------------------------
Update Information:
- Enhancement: * ManageTranslation: MANAGE_POT_FILE: new options DOMAIN_NAME,
MO_LOCALE_DIR - Bug fix: * cmake-fedora-zanata: remove debug message *
ManageTranslate: failed to generate pot targets when
MANAGE_TRANSLATION_GETTEXT_POT_FILES is not empty.' -R testing cmake-
fedora-2.6.0-1.fc24 + /usr/bin/bodhi -n -t enhancement -u dchen -N '-
Enhancement: * ManageTranslation: MANAGE_POT_FILE: new options DOMAIN_NAME,
MO_LOCALE_DIR - Bug fix: * cmake-fedora-zanata: remove debug message *
ManageTranslate: failed to generate pot targets when
MANAGE_TRANSLATION_GETTEXT_POT_FILES is not empty.
--------------------------------------------------------------------------------
================================================================================
drupal6-6.38-1.el6 (FEDORA-EPEL-2016-00c45982f6)
An open-source content-management platform
--------------------------------------------------------------------------------
Update Information:
https://www.drupal.org/SA-CORE-2016-001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1311775 - drupal6-6.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1311775
--------------------------------------------------------------------------------
================================================================================
inxi-2.2.34-1.el6 (FEDORA-EPEL-2016-c075e174d4)
A full featured system information script
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.34.
--------------------------------------------------------------------------------
================================================================================
libssh-0.5.5-5.el6 (FEDORA-EPEL-2016-6e0c318d91)
A library implementing the SSH2 protocol (0xbadc0de version)
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2016-0739
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1311259 - CVE-2016-0739 libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1311259
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-5.1.4-1.el6 (FEDORA-EPEL-2016-69ab97117e)
HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
--------------------------------------------------------------------------------
Update Information:
Firefox 5.1.4 / Chrome 2016.2.23 * Fixes for Firefox Dev Edition * Chrome:
Fix regressions in custom rule functions * Firefox: Fix custom ruleset
regression Firefox 5.1.3 / Chrome 2016.2.18 * Performance & memory usage
improvements for Chrome * Introduce temporary disable option on Chrome *
Bugfix: make custom rules disableable * Improvements to tests * Switch to
using JSON to store rulesets Firefox 5.1.2 / Chrome 2015.12.16 * Ruleset
fixes
--------------------------------------------------------------------------------
================================================================================
nodejs-grunt-contrib-internal-0.4.9-4.el6 (FEDORA-EPEL-2016-23f80085fa)
Internal tasks for managing the grunt-contrib project
--------------------------------------------------------------------------------
Update Information:
Add CONTRIBUTING.md to libdir (RHBZ#1288025)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1288025 - grunt-contrib-internal needs CONTRIBUTING.md in libdir
https://bugzilla.redhat.com/show_bug.cgi?id=1288025
--------------------------------------------------------------------------------
================================================================================
perl-Tangerine-0.22-1.el6 (FEDORA-EPEL-2016-8e099e1ef2)
Analyse perl files and report module-related information
--------------------------------------------------------------------------------
Update Information:
A new version of Tangerine is available. See
http://cpansearch.perl.org/src/CONTYK/Tangerine-0.22/Changes for the summary of
changes in this release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1301242 - perl-Tangerine-0.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1301242
--------------------------------------------------------------------------------
8 years, 1 month
Orphaned Packages in epel6 (2016-02-20)
by Till Maas
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.
Package (co)maintainers Status Change
===========================================================================
backintime orphan, raphgro, timj 0 weeks ago
dinotrace orphan, chitlesh 19 weeks ago
directfb orphan, kwizart, thias 20 weeks ago
electronics-menu orphan, chitlesh 19 weeks ago
gnucap orphan, chitlesh 19 weeks ago
iverilog orphan, chitlesh 19 weeks ago
libstroke orphan, chitlesh 19 weeks ago
libx86 orphan, mjg59 0 weeks ago
mockito orphan, raphgro 1 weeks ago
monitor-edid orphan 0 weeks ago
mot-adms orphan, chitlesh 19 weeks ago
ocsinventory orphan, xavierb 0 weeks ago
ocsinventory-agent orphan 0 weeks ago
perl-AnyEvent-HTTP orphan, perl-sig 0 weeks ago
perl-Apache-DBI orphan, perl-sig 0 weeks ago
perl-Apache2-SOAP orphan, perl-sig 0 weeks ago
perl-FusionInventory-Agent- orphan 0 weeks ago
Task-ESX
perl-FusionInventory-Agent- orphan 0 weeks ago
Task-NetDiscovery
perl-FusionInventory-Agent- orphan 0 weeks ago
Task-OcsDeploy
perl-FusionInventory-Agent- orphan 0 weeks ago
Task-SNMPQuery
perl-Net-CUPS orphan 0 weeks ago
perl-Net-NBName orphan, perl-sig 0 weeks ago
perl-Net-SSLGlue orphan, perl-sig 0 weeks ago
perl-Proc-Daemon orphan, perl-sig 0 weeks ago
perl-XML-Entities orphan, perl-sig 0 weeks ago
powerman orphan, tuxbrewr 1 weeks ago
python-mwclient orphan, tuxbrewr 1 weeks ago
tripwire orphan, moezroy, tuxbrewr 1 weeks ago
The following packages require above mentioned packages:
Depending on: dinotrace (1), status change: 2015-10-07 (19 weeks ago)
gplcver (maintained by: jcapik, chitlesh)
gplcver-2.12a-3.el6.x86_64 requires dinotrace = 9.4c-1.el6
Depending on: directfb (4), status change: 2015-09-30 (20 weeks ago)
xine-lib (maintained by: rdieter)
xine-lib-1.1.21-11.el6.src requires directfb-devel = 1.4.11-3.el6
xine-lib-extras-1.1.21-11.el6.i686 requires libdirect-1.4.so.0, libdirectfb-1.4.so.0, libfusion-1.4.so.0
xine-lib-extras-1.1.21-11.el6.x86_64 requires libdirect-1.4.so.0()(64bit), libdirectfb-1.4.so.0()(64bit), libfusion-1.4.so.0()(64bit)
gxine (maintained by: mso)
gxine-0.5.905-2.el6.x86_64 requires libxine.so.1()(64bit)
kaffeine (maintained by: rdieter)
kaffeine-1.2.2-8.el6.x86_64 requires libxine.so.1()(64bit)
xine-ui (maintained by: mjg)
xine-ui-0.99.6-32.el6.x86_64 requires libxine.so.1()(64bit), xine-lib = 1.1.21-11.el6
xine-ui-aaxine-0.99.6-32.el6.x86_64 requires libxine.so.1()(64bit)
Depending on: electronics-menu (8), status change: 2015-10-07 (19 weeks ago)
gnusim8085 (maintained by: puiterwijk, chitlesh)
gnusim8085-1.3.7-3.el6.x86_64 requires electronics-menu = 1.0-8.el6
gsim85 (maintained by: fab, chitlesh)
gsim85-0.3-2.el6.x86_64 requires electronics-menu = 1.0-8.el6
kicad (maintained by: jcapik, chitlesh, lkundrak)
kicad-2013.06.11-1.rev4021.el6.i686 requires electronics-menu = 1.0-8.el6
kicad-2013.06.11-1.rev4021.el6.x86_64 requires electronics-menu = 1.0-8.el6
qelectrotech (maintained by: remi)
qelectrotech-0.30-1.el6.x86_64 requires electronics-menu = 1.0-8.el6
qucs (maintained by: jcapik, chitlesh)
qucs-0.0.15-6.el6.x86_64 requires electronics-menu = 1.0-8.el6
tkgate (maintained by: tnorth, chitlesh)
tkgate-2.0-10.beta10.el6.x86_64 requires electronics-menu = 1.0-8.el6
xcircuit (maintained by: mayorga, chitlesh, sophiekovalevsky)
xcircuit-3.6.164-1.el6.x86_64 requires electronics-menu = 1.0-8.el6
perl-Verilog-CodeGen (maintained by: jplesnik, chitlesh)
perl-Verilog-CodeGen-0.9.4-3.el6.noarch requires tkgate = 2.0-10.beta10.el6
Depending on: gnucap (1), status change: 2015-10-07 (19 weeks ago)
emacs-spice-mode (maintained by: sagarun, chitlesh)
emacs-spice-mode-1.2.25-4.el6.noarch requires gnucap = 0.35-6.el6
Depending on: iverilog (1), status change: 2015-10-07 (19 weeks ago)
teal (maintained by: jcapik, chitlesh)
teal-1_40b-4.el6.i686 requires iverilog = 0.9.20120609-1.el6
teal-1_40b-4.el6.src requires iverilog-devel = 0.9.20120609-1.el6
teal-1_40b-4.el6.x86_64 requires iverilog = 0.9.20120609-1.el6
Depending on: libstroke (1), status change: 2015-10-07 (19 weeks ago)
fvwm (maintained by: peter, jhogarth, mcermak, pertusus)
fvwm-2.6.5-9.el6.src requires libstroke-devel = 0.5.1-24.el6
fvwm-2.6.5-9.el6.x86_64 requires libstroke.so.0()(64bit)
Depending on: mot-adms (1), status change: 2015-10-07 (19 weeks ago)
ngspice (maintained by: mayorga, chitlesh, sophiekovalevsky)
ngspice-23-1.el6.src requires mot-adms = 2.2.9-1.svn1186.el6
Depending on: perl-Apache-DBI (3), status change: 2016-02-19 (0 weeks ago)
rt3 (maintained by: xavierb, mmahut, perl-sig, tremble)
rt3-3.8.13-1.el6.2.src requires perl(Apache::DBI) = 1.09
perl-RT-Authen-ExternalAuth (maintained by: ksyz, somlo)
perl-RT-Authen-ExternalAuth-0.11-1.el6.noarch requires rt3 = 3.8.13-1.el6.2
perl-RT-Authen-ExternalAuth-0.11-1.el6.src requires rt3 = 3.8.13-1.el6.2
perl-RT-Extension-CommandByMail (maintained by: ke4qqq)
perl-RT-Extension-CommandByMail-0.07-3.el6.noarch requires perl(RT::Interface::Email) = 2.0
perl-RT-Extension-CommandByMail-0.07-3.el6.src requires perl(RT) = 3.8.13
Depending on: perl-Net-CUPS (1), status change: 2016-02-19 (0 weeks ago)
fusioninventory-agent (maintained by: jehane, perl-sig)
fusioninventory-agent-2.1.14-2.el6.noarch requires perl(Net::CUPS) = 0.61
Depending on: perl-Proc-Daemon (1), status change: 2016-02-19 (0 weeks ago)
mysql-mmm (maintained by: ruben, carlgeorge)
mysql-mmm-agent-2.2.1-2.el6.noarch requires perl(Proc::Daemon) = 0.19
mysql-mmm-monitor-2.2.1-2.el6.noarch requires perl(Proc::Daemon) = 0.19
Affected (co)maintainers
carlgeorge: perl-Proc-Daemon
chitlesh: mot-adms, libstroke, iverilog, dinotrace, electronics-menu, gnucap
fab: electronics-menu
jcapik: iverilog, dinotrace, electronics-menu
jehane: perl-Net-CUPS
jhogarth: libstroke
jplesnik: electronics-menu
ke4qqq: perl-Apache-DBI
ksyz: perl-Apache-DBI
kwizart: directfb
lkundrak: electronics-menu
mayorga: mot-adms, electronics-menu
mcermak: libstroke
mjg: directfb
mjg59: libx86
mmahut: perl-Apache-DBI
moezroy: tripwire
mso: directfb
perl-sig: perl-Net-NBName, perl-Apache-DBI, perl-Proc-Daemon, perl-AnyEvent-HTTP, perl-Net-SSLGlue, perl-XML-Entities, perl-Net-CUPS, perl-Apache2-SOAP
pertusus: libstroke
peter: libstroke
puiterwijk: electronics-menu
raphgro: backintime, mockito
rdieter: directfb
remi: electronics-menu
ruben: perl-Proc-Daemon
sagarun: gnucap
somlo: perl-Apache-DBI
sophiekovalevsky: mot-adms, electronics-menu
thias: directfb
timj: backintime
tnorth: electronics-menu
tremble: perl-Apache-DBI
tuxbrewr: powerman, tripwire, python-mwclient
xavierb: perl-Apache-DBI, ocsinventory
Orphans (28): backintime dinotrace directfb electronics-menu gnucap
iverilog libstroke libx86 mockito monitor-edid mot-adms
ocsinventory ocsinventory-agent perl-AnyEvent-HTTP perl-Apache-DBI
perl-Apache2-SOAP perl-FusionInventory-Agent-Task-ESX
perl-FusionInventory-Agent-Task-NetDiscovery
perl-FusionInventory-Agent-Task-OcsDeploy
perl-FusionInventory-Agent-Task-SNMPQuery perl-Net-CUPS
perl-Net-NBName perl-Net-SSLGlue perl-Proc-Daemon
perl-XML-Entities powerman python-mwclient tripwire
Orphans (dependend on) (10): dinotrace directfb electronics-menu
gnucap iverilog libstroke mot-adms perl-Apache-DBI perl-Net-CUPS
perl-Proc-Daemon
Orphans (epel6) for at least 6 weeks (dependend on) (7): dinotrace
directfb electronics-menu gnucap iverilog libstroke mot-adms
Orphans (epel6)(not depended on) (18): backintime libx86 mockito
monitor-edid ocsinventory ocsinventory-agent perl-AnyEvent-HTTP
perl-Apache2-SOAP perl-FusionInventory-Agent-Task-ESX
perl-FusionInventory-Agent-Task-NetDiscovery
perl-FusionInventory-Agent-Task-OcsDeploy
perl-FusionInventory-Agent-Task-SNMPQuery perl-Net-NBName
perl-Net-SSLGlue perl-XML-Entities powerman python-mwclient
tripwire
Orphans (epel6) for at least 6 weeks (not dependend on) (0):
Depending packages (epel6) (22): emacs-spice-mode
fusioninventory-agent fvwm gnusim8085 gplcver gsim85 gxine
kaffeine kicad mysql-mmm ngspice perl-RT-Authen-ExternalAuth
perl-RT-Extension-CommandByMail perl-Verilog-CodeGen qelectrotech
qucs rt3 teal tkgate xcircuit xine-lib xine-ui
Packages depending on packages orphaned (epel6) for more than 6 weeks
(17): emacs-spice-mode fvwm gnusim8085 gplcver gsim85 gxine
kaffeine kicad ngspice perl-Verilog-CodeGen qelectrotech qucs teal
tkgate xcircuit xine-lib xine-ui
Not found in repo (epel6) (1): mockito
--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its trac instance:
https://fedorahosted.org/rel-eng/
The sources of this script can be found at:
https://pagure.io/releng/blob/master/f/scripts/find_unblocked_orphans.py
8 years, 1 month
EPEL Proposal #3: EPEL Structured releases
by Stephen John Smoogen
============================================
EPEL Proposal #3: EPEL Structured releases
============================================
This started off as a a rawhide post, but I realized it needs to be
its own post
A staged/forked environment. This version is a lot more complicated
and deals with extra release management. Currently, Red Hat does
regular point releases (.1, .2, .3) of their main OS. In these point
releases, various items get major updates or backports to bring new
functionality to the base operating system. In this version, EPEL ties
into this staged environment by using a similar method as Fedora does.
Using a directory tree structure like:
EPEL/archives/{5.x, 6.x, 7.x}
EPEL/archives/updates/{5.x, 6.x, 7.x}
EPEL/current/5 -> 5.11/
EPEL/current/5.11/{x86_64,ppc64,x86_32}/
EPEL/current/6 -> 6.7/
EPEL/current/7 -> 7.2/
EPEL/updates/5 -> 5.11/
EPEL/updates/6 -> 6.7/
EPEL/updates/7 -> 7.2/
EPEL/updates/testing/{blah, blah}
EPEL/rawhide/{5, 6, 7}
Then packages would be built in rawhide first. When a new release (say
7.2 to 7.3) occurs, then the builders rawhide trees are updated to the
code in the latest. The packages are built against that and hopefully
tested to see that they still work. Packagers should have been
building any large changes they needed to make in the rawhide tree
already but a last minute notification date is done. The go-live for
this tree will be either when CentOS gets its build out of that tree
or 30 days if CentOS is able to release sooner. On that date the
rawhide trees will be branched to /EPEL/current/{6,7}.n (eg 7.3) and
updates to those packages will now be sent into EPEL/updates/7.3
. After another 30 days, the 7.2 tree will be moved to
EPEL/archives/7.2 {probably really /pub/archives/epel/7.2 }
Pros: this gives a place where newer packages can be built and tested
to see what may break in the next major build. it also gives a
better release cycle that people can plan against.
Cons: this makes the previous post look simple to implement.
--
Stephen J Smoogen.
8 years, 1 month