epel-devel November 2021

epel-devel@lists.fedoraproject.org

25 participants
89 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 03 Nov '21

03 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 47 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c1992565eb rpki-client-7.4-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f69cb3c1f1 rust-1.56.1-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8f1a739899 cacti-1.2.19-1.el7 cacti-spine-1.2.19-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing globus-gridftp-server-13.22-3.el7 gnome-shell-extension-system-monitor-applet-38-15.20211103git11d43a8.el7 mlpack-3.4.2-12.el7 pspg-5.5.0-1.el7 Details about builds: ================================================================================ globus-gridftp-server-13.22-3.el7 (FEDORA-EPEL-2021-ee581e9f1f) Grid Community Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: Don't use broken fakeroot on ppc64le during testing -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 13.22-3 - Drop broken optional test dependency fakeroot on ppc64le in EPEL * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 13.22-2 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-system-monitor-applet-38-15.20211103git11d43a8.el7 (FEDORA-EPEL-2021-9d7ef2c08b) A Gnome shell system monitor extension -------------------------------------------------------------------------------- Update Information: Updated to last upstream commits -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> - 1:38-15.20211103git11d43a8 - Updated to last upstream commits - Updated and cleaned-up PO template files - Updated some translations - Added support for gnome 41 -------------------------------------------------------------------------------- ================================================================================ mlpack-3.4.2-12.el7 (FEDORA-EPEL-2021-a799a7143e) Scalable, fast C++ machine learning library -------------------------------------------------------------------------------- Update Information: Fix CVE-2021-42715 and CVE-2021-42716 in stb_image -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.4.2-12 - Fix CVE-2021-42715 and CVE-2021-42716 in stb_image -------------------------------------------------------------------------------- ================================================================================ pspg-5.5.0-1.el7 (FEDORA-EPEL-2021-18e1883920) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information: new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Pavel Raiskup <praiskup(a)redhat.com> - 5.5.0-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 03 Nov '21

03 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-51a1d774bf rpki-client-7.4-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-242bfc4463 cacti-1.2.19-1.el8 cacti-spine-1.2.19-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing globus-gridftp-server-13.22-3.el8 gnome-shell-extension-system-monitor-applet-38-15.20211103git11d43a8.el8 grass-7.8.6-1.el8 irrlicht-1.8.5-1.el8 mlpack-3.4.2-12.el8 pspg-5.5.0-1.el8 Details about builds: ================================================================================ globus-gridftp-server-13.22-3.el8 (FEDORA-EPEL-2021-a6c42938f8) Grid Community Toolkit - Globus GridFTP Server -------------------------------------------------------------------------------- Update Information: Don't use broken fakeroot on ppc64le during testing -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 13.22-3 - Drop broken optional test dependency fakeroot on ppc64le in EPEL * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 13.22-2 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- ================================================================================ gnome-shell-extension-system-monitor-applet-38-15.20211103git11d43a8.el8 (FEDORA-EPEL-2021-e934922ec1) A Gnome shell system monitor extension -------------------------------------------------------------------------------- Update Information: Updated to last upstream commits -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> - 1:38-15.20211103git11d43a8 - Updated to last upstream commits - Updated and cleaned-up PO template files - Updated some translations - Added support for gnome 41 -------------------------------------------------------------------------------- ================================================================================ grass-7.8.6-1.el8 (FEDORA-EPEL-2021-48eb5ae4e3) GRASS GIS - Geographic Resources Analysis Support System -------------------------------------------------------------------------------- Update Information: New upstream version GRASS GIS 7.8.6 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Markus Neteler <neteler(a)mundialis.de> - 7.8.6-1 - New upstream version GRASS GIS 7.8.6 * Thu Oct 21 2021 Sandro Mani <manisandro(a)gmail.com> - 7.8.5-11 - Rebuild (geos) * Tue Aug 10 2021 Orion Poplawski <orion(a)nwra.com> - 7.8.5-10 - Rebuild for netcdf 4.8.0 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.8.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon Jun 21 2021 Markus Neteler <neteler(a)mundialis.de> - 7.8.5-8 - fix ctypes for Python 3.10 (RHBZ #1973621) * Fri May 7 2021 Sandro Mani <manisandro(a)gmail.com> - 7.8.5-7 - Rebuild (gdal) * Wed Mar 24 2021 Sandro Mani <manisandro(a)gmail.com> - 7.8.5-6 - Bump * Sun Mar 7 2021 Sandro Mani <manisandro(a)gmail.com> - 7.8.5-5 - Rebuild (proj) * Sat Feb 13 2021 Sandro Mani <manisandro(a)gmail.com> - 7.8.5-4 - Rebuild (geos) * Mon Feb 8 2021 Pavel Raiskup <praiskup(a)redhat.com> - 7.8.5-3 - rebuild for libpq ABI fix rhbz#1908268 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.8.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2012725 - grass-7.8.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2012725 -------------------------------------------------------------------------------- ================================================================================ irrlicht-1.8.5-1.el8 (FEDORA-EPEL-2021-d24c4d01e0) A high performance realtime 3D engine -------------------------------------------------------------------------------- Update Information: Update to 1.8.5 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Tom Callaway <spot(a)fedoraproject.org> - 1.8.5-1 - update to 1.8.5 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.4-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2019094 - irrlicht-1.8.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2019094 -------------------------------------------------------------------------------- ================================================================================ mlpack-3.4.2-12.el8 (FEDORA-EPEL-2021-4c8f1e8fcf) Scalable, fast C++ machine learning library -------------------------------------------------------------------------------- Update Information: Fix CVE-2021-42715 and CVE-2021-42716 in stb_image -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.4.2-12 - Fix CVE-2021-42715 and CVE-2021-42716 in stb_image -------------------------------------------------------------------------------- ================================================================================ pspg-5.5.0-1.el8 (FEDORA-EPEL-2021-b02fe72431) A unix pager optimized for psql -------------------------------------------------------------------------------- Update Information: new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 3 2021 Pavel Raiskup <praiskup(a)redhat.com> - 5.5.0-1 - new upstream release, per release notes: https://github.com/okbob/pspg/releases/tag/5.5.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 02 Nov '21

02 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 46 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9db00036f5 java-latest-openjdk-17.0.1.0.12-1.rolling.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c1992565eb rpki-client-7.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing cacti-1.2.19-1.el7 cacti-spine-1.2.19-1.el7 mock-2.13-1.el7 php-composer-ca-bundle-1.3.1-1.el7 rust-1.56.1-1.el7 snapd-2.53.1-2.el7 uglify-js3-3.14.3-1.el7 xrootd-5.3.2-1.el7 zabbix40-4.0.35-1.el7 zabbix50-5.0.17-1.el7 Details about builds: ================================================================================ cacti-1.2.19-1.el7 (FEDORA-EPEL-2021-8f1a739899) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.19-1 - Update to 1.2.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1950494 - Cacti 1.2.16 is not available for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1950494 [ 2 ] Bug #2001018 - CVE-2020-14424 cacti: lack of escaping on template import can lead to XSS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2001018 -------------------------------------------------------------------------------- ================================================================================ cacti-spine-1.2.19-1.el7 (FEDORA-EPEL-2021-8f1a739899) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information: - Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.19-1 - Update to 1.2.19 * Sun Sep 5 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.17-3 - Added patch for #1987395 * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon May 10 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.17-1 - Update to 1.2.17 * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Dec 14 2020 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.16-1 - Update to 1.2.16 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1950494 - Cacti 1.2.16 is not available for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1950494 [ 2 ] Bug #2001018 - CVE-2020-14424 cacti: lack of escaping on template import can lead to XSS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2001018 -------------------------------------------------------------------------------- ================================================================================ mock-2.13-1.el7 (FEDORA-EPEL-2021-af2ed0807c) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: Release notes: https://rpm-software-management.github.io/mock/Release-Notes-2.13 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 Pavel Raiskup <praiskup(a)redhat.com> 2.13-1 - local repositories to use gpgcheck=0 by default - A new option --additional-package (for --rebuild) - external-deps: install pip packages to /usr - Install external deps into build chroot, not bootstrap - Migrate from optparse to argparse - mock: don't specify SOURCE when remounting bind-mounts - mock: add option --debug-config-expanded (sergio(a)serjux.com) - Fix use of deprecated function (xfgusta(a)gmail.com) - lvm_root: fix copy/paste error in a warning message (kdudka(a)redhat.com) -------------------------------------------------------------------------------- ================================================================================ php-composer-ca-bundle-1.3.1-1.el7 (FEDORA-EPEL-2021-e313601781) Lets you find a path to the system CA -------------------------------------------------------------------------------- Update Information: **Version 1.3.1** * Fixed compatibility issue with open_basedir restrictions #69 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 30 2021 Remi Collet <remi(a)remirepo.net> - 1.3.1-1 - update to 1.3.1 -------------------------------------------------------------------------------- ================================================================================ rust-1.56.1-1.el7 (FEDORA-EPEL-2021-f69cb3c1f1) The Rust Programming Language -------------------------------------------------------------------------------- Update Information: Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on such characters in code comments and string/char literals. For more details, see the upstream [security advisory](https://blog.rust- lang.org/2021/11/01/cve-2021-42574.html) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 Josh Stone <jistone(a)redhat.com> - 1.56.1-1 - Update to 1.56.1. -------------------------------------------------------------------------------- ================================================================================ snapd-2.53.1-2.el7 (FEDORA-EPEL-2021-0d4d3c3cd8) A transactional software package manager -------------------------------------------------------------------------------- Update Information: Update to 2.53.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.53.1-2 - Disable BPF support on systems that are too old * Tue Nov 2 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.53.1-1 - Release 2.53.1 to Fedora * Thu Oct 21 2021 Ian Johnson <ian.johnson(a)canonical.com> - New upstream release 2.53.1 - spread: run lxd tests with version from latest/stable - secboot: use latest secboot with tpm legacy platform and v2 fully optional (#10946) - cmd/snap-confine: die when snap process is outside of snap specific cgroup (2.53) - interfaces/u2f-devices: add Nitrokey 3 - Update the ubuntu-image channel to candidate - Allow hostnames up to 253 characters, with dot-delimited elements (as suggested by man 7 hostname). - Disable i386 until it is possible to build snapd using lxd - o/snapstate, hookstate: print remaining hold time on snapctl --hold - tests/snapd-sigterm: be more robust against service restart - tests: add a regression test for snapd hanging on SIGTERM - daemon: use the syscall connection to get the socket credentials - interfaces/builtin/hardware-observer: add /proc/bus/input/devices too - cmd/snap-confine/snap-confine.apparmor.in: update ld rule for s390x impish - interface/modem-manager: add accept for MBIM/QMI proxy clients - secboot: revert move to new version * Tue Oct 5 2021 Michael Vogt <michael.vogt(a)ubuntu.com> - New upstream release 2.53 - overlord: fix generated snap-revision assertions in remodel unit tests - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk` - interfaces/modem-manager: add access to PCIe modems - overlord/devicestate: record recovery capable system on a successful remodel - o/snapstate: use device ctx in prerequisite install/update - osutil/disks: support filtering by mount opts in MountPointsForPartitionRoot - many: support an API flag system-restart-immediate to make snap ops proceed immediately with system restarts - osutil/disks: add RootMountPointsForPartition - overlord/devicestate, tests: enable UC20 remodel, add spread tests - cmd/snap: improve snap run help message - o/snapstate: support ignore validation flag on install/update - osutil/disks: add Disk.FindMatchingPartitionWith{Fs,Part}Label - desktop: implement gtk notification backend and provide minimal notification api - tests: use the latest cpu family for nested tests execution - osutil/disks: add Partition struct and Disks.Partitions() - o/snapstate: prevent install hang if prereq install fails - osutil/disks: add Disk.KernelDevice{Node,Path} methods - disks: add `Size(path)` helper - tests: reset some mount units failing on ubuntu impish - osutil/disks: add DiskFromDevicePath, other misc changes - interfaces/apparmor: do not fail during initialization when there is no AppArmor profile for snap-confine - daemon: implement access checkers for themes API - interfaces/seccomp: add clone3 to default template - interfaces/u2f-devices: add GoTrust Idem Key - o/snapstate: validation sets enforcing on update - o/ifacestate: don't fail remove if disconnect hook fails - tests: fix error trying to create the extra-snaps dir which already exists - devicestate: use EncryptionType - cmd/libsnap-confine-private: workaround BPF memory accounting, update apparmor profile - tests: skip system-usernames-microk8s when TRUST_TEST_KEYS is false - interfaces/dsp: add a usb rule to the ambarella flavor - interfaces/apparmor/template.go: allow inspection of dbus mediation level - tests/main/security-device-cgroups: fix when both variants run on the same host - cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so - many: rename systemd.Kind to Backend for a bit more clarity - cmd/libsnap-confine-private: fix set but unused variable in the unit tests - tests: fix netplan test on i386 architecture - tests: fix lxd-mount-units test which is based on core20 in ubuntu focal system - osutil/disks: add new `CreateLinearMapperDevice` helper - cmd/snap: wait while inhibition file is present - tests: cleanup the job workspace as first step of the actions workflow - tests: use our own image for ubuntu impish - o/snapstate: update default provider if missing required content - o/assertstate, api: update validation set assertions only when updating all snaps - fde: add HasDeviceUnlock() helper - secboot: move to new version - o/ifacestate: don't lose connections if snaps are broken - spread: display information about current device cgroup in debug dump - sysconfig: set TMPDIR in tests to avoid cluttering the real /tmp - tests, interfaces/builtin: introduce 21.10 cgroupv2 variant, tweak tests for cgroupv2, update builtin interfaces - sysconfig/cloud-init: filter MAAS c-i config from ubuntu-seed on grade signed - usersession/client: refactor doMany() method - interfaces/builtin/opengl.go: add libOpenGL.so* too - o/assertstate: check installed snaps when refreshing validation set assertions - osutil: helper for injecting run time faults in snapd - tests: update test nested tool part 2 - libsnap-confine: use the pid parameter - gadget/gadget.go: LaidOutSystemVolumeFromGadget -> LaidOutVolumesFromGadget - tests: update the time tolerance to fix the snapd-state test - .github/workflows/test.yaml: revert #10809 - tests: rename interfaces-hooks-misbehaving spread test to install- hook-misbehaving - data/selinux: update the policy to allow s-c to manipulate BPF map and programs - overlord/devicestate: make settle wait longer in remodel tests - kernel/fde: mock systemd-run in unit test - o/ifacestate: do not create stray task in batchConnectTasks if there are no connections - gadget: add VolumeName to Volume and VolumeStructure - cmd/libsnap-confine-private: use root when necessary for BPF related operations - .github/workflows/test.yaml: bump action-build to 1.0.9 - o/snapstate: enforce validation sets/enforce on InstallMany - asserts, snapstate: return full validation set keys from CheckPresenceRequired and CheckPresenceInvalid - cmd/snap: only log translation warnings in debug/testing - tests/main/preseed: update for new base snap of the lxd snap - tests/nested/manual: use loop for checking for initialize-system task done - tests: add a local snap variant to testing prepare-image gating support - tests/main/security-device-cgroups-strict-enforced: demonstrate device cgroup being enforced - store: one more tweak for the test action timeout - github: do not fail when codecov upload fails - o/devicestate: fix flaky test remodel clash - o/snapstate: add ChangeID to conflict error - tests: fix regex of TestSnapActionTimeout test - tests: fix tests for 21.10 - tests: add test for store.SnapAction() request timeout - tests: print user sessions info on debug-each - packaging: backports of golang-go 1.13 are good enough - sysconfig/cloudinit: add cloudDatasourcesInUseForDir - cmd: build gdb shims as static binaries - packaging/ubuntu: pass GO111MODULE to dh_auto_test - cmd/libsnap-confine-private, tests, sandbox: remove warnings about cgroup v2, drop forced devmode - tests: increase memory quota in quota-groups-systemd-accounting - tests: be more robust against a new day stepping in - usersession/xdgopenproxy: move PortalLauncher class to own package - interfaces/builtin: fix microstack unit tests on distros using /usr/libexec - cmd/snap-confine: handle CURRENT_TAGS on systems that support it - cmd/libsnap-confine-private: device cgroup v2 support - o/servicestate: Update task summary for restart action - packaging, tests/lib/prepare-restore: build packages without network access, fix building debs with go modules - systemd: add AtLeast() method, add mocking in systemdtest - systemd: use text.template to generate mount unit - o/hookstate/ctlcmd: Implement snapctl refresh --show-lock command - o/snapstate: optimize conflicts around snaps stored on conditional-auto-refresh task - tests/lib/prepare.sh: download core20 for UC20 runs via BASE_CHANNEL - mount-control: step 1 - go: update go.mod dependencies - o/snapstate: enforce validation sets on snap install - tests: revert revert manual lxd removal - tests: pre-cache snaps in classic and core systems - tests/lib/nested.sh: split out additional helper for adding files to VM imgs - tests: update nested tool - part1 - image/image_linux.go: add newline - interfaces/block-devices: support to access the state of block devices - o/hookstate: require snap-refresh-control interface for snapctl refresh --proceed - build-aux: stage libgcc1 library into snapd snap - configcore: add read-only netplan support - tests: fix fakedevicesvc service already exists - tests: fix interfaces-libvirt test - tests: remove travis leftovers - spread: bump delta ref to 2.52 - packaging: ship the `snapd.apparmor.service` unit in debian - packaging: remove duplicated `golang-go` build-dependency - boot: record recovery capable systems in recovery bootenv - tests: skip overlord tests on riscv64 due to timeouts. - overlord/ifacestate: fix arguments in unit tests - ifacestate: undo repository connection if doConnect fails - many: remove unused parameters - tests: failure of prereqs on content interface doesn't prevent install - tests/nested/manual/refresh-revert-fundamentals: fix variable use - strutil: add Intersection() - o/ifacestate: special-case system-files and force refreshing its static attributes - interface/builtin: add qualcomm-ipc-router interface for AF_QIPCRTR socket protocol - tests: new snapd-state tool - codecov: fix files pathnames - systemd: add mock systemd helper - tests/nested/core/extra-snaps-assertions: fix the match pattern - image,c/snap,tests: support enforcing validations in prepare-image via --customize JSON validation enforce(|ignore) - o/snapstate: enforce validation sets assertions when removing snaps - many: update deps - interfaces/network-control: additional ethernet rule - tests: use host-scaled settle timeout for hookstate tests - many: move to go modules - interfaces: no need for snapRefreshControlInterface struct - interfaces: introduce snap-refresh-control interface - tests: move interfaces-libvirt test back to 16.04 - tests: bump the number of retries when waiting for /dev/nbd0p1 - tests: add more space on ubuntu xenial - spread: add 21.10 to qemu, remove 20.10 (EOL) - packaging: add libfuse3-dev build dependency - interfaces: add microstack-support interface - wrappers: fix a bunch of duplicated service definitions in tests - tests: use host-scaled timeout to avoid riscv64 test failure - many: fix run-checks gofmt check - tests: spread test for snapctl refresh --pending/--proceed from the snap - o/assertstate,daemon: refresh validation sets assertions with snap declarations - tests: migrate tests that are only executed on xenial to bionic - tests: remove opensuse-15.1 and add opensuse-15.3 from spread runs - packaging: update master changelog for 2.51.7 - sysconfig/cloudinit: fix bug around error state of cloud-init - interfaces, o/snapstate: introduce AffectsPlugOnRefresh flag - interfaces/interfaces/ion-memory-control: add: add interface for ion buf - interfaces/dsp: add /dev/ambad into dsp interface - tests: new spread log parser - tests: check files and dirs are cleaned for each test - o/hookstate/ctlcmd: unify the error message when context is missing - o/hookstate: support snapctl refresh --pending from snap - many: remove unused/dead code - cmd/libsnap-confine-private: add BPF support helpers - interfaces/hardware-observe: add some dmi properties - snapstate: abort kernel refresh if no gadget update can be found - many: shellcheck fixes - cmd/snap: add Size column to refresh --list - packaging: build without dwarf debugging data - snapstate: fix misleading `assumes` error message - tests: fix restore in snapfuse spread tests - o/assertstate: fix missing 'scheduled' header when auto refreshing assertions - o/snapstate: fail remove with invalid snap names - o/hookstate/ctlcmd: correct err message if missing root - .github/workflows/test.yaml: fix logic - o/snapstate: don't hold some snaps if not all snaps can be held by the given gating snap - c-vendor.c: new c-vendor subdir - store: make sure expectedZeroFields in tests gets updated - overlord: add manager test for "assumes" checking - store: deal correctly with "assumes" from the store raw yaml - sysconfig/cloudinit.go: add functions for filtering cloud-init config - cgroup-support: allow to hide cgroupv2 warning via ENV - gadget: Export mkfs functions for use in ubuntu-image - tests: set to 10 minutes the kill timeout for tests failing on slow boards - .github/workflows/test.yaml: test github.events key - i18n/xgettext-go: preserve already escaped quotes - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp v2.2.0-428-g5c22d4b - github: do not try to upload coverage when working with cached run - tests/main/services-install-hook-can-run-svcs: shellcheck issue fix - interfaces/u2f-devices: add Nitrokey FIDO2 - testutil: add DeepUnsortedMatches Checker - cmd, packaging: import BPF headers from kernel, detect whether host headers are usable - tests: fix services-refresh-mode test - tests: clean snaps.sh helper - tests: fix timing issue on security-dev-input-event-denied test - tests: update systems for sru validation - .github/workflows: add codedov again - secboot: remove duplicate import - tests: stop the service when is active in test interfaces- firewall-control test - packaging: remove TEST_GITHUB_AUTOPKGTEST support - packaging: merge 2.51.6 changelog back to master - secboot: use half the mem for KDF in AddRecoveryKey - secboot: switch main key KDF memory cost to 32KB - tests: remove the test user just when it was installed on create- user-2 test - spread: temporarily fix the ownership of /home/ubuntu/.ssh on 21.10 - daemon, o/snapstate: handle IgnoreValidation flag on install (2/3) - usersession/agent: refactor common JSON validation into own function - o/hookstate: allow snapctl refresh --proceed from snaps - cmd/libsnap-confine-private: fix issues identified by coverity - cmd/snap: print logs in local timezone - packaging: changelog for 2.51.5 to master - build-aux: build with go-1.13 in the snapcraft build too - config: rename "virtual" config to "external" config - devicestate: add `snap debug timings --ensure=install-system` - interfaces/builtin/raw_usb: fix platform typo, fix access to usb devices accessible through platform - o/snapstate: remove commented out code - cmd/snap-device-helper: reimplement snap-device-helper - cmd/libsnap-confine-private: fix coverity issues in tests, tweak uses of g_assert() - o/devicestate/handlers_install.go: add workaround to create dirs for install - o/assertstate: implement ValidationSetAssertionForEnforce helper - clang-format: stop breaking my includes - o/snapstate: allow auto-refresh limited to snaps affected by a specific gating snap - tests: fix core-early-config test to use tests.nested tool - sysconfig/cloudinit.go: measure (but don't use) gadget cloud-init datasource - c/snap,o/hookstate/ctlcmd: add JSON/string strict processing flags to snap/snapctl - corecfg: add "system.hostname" setting to the system settings - wrappers: measure time to enable services in StartServices() - configcore: fix early config timezone handling - tests/nested/manual: enable serial assertions on testkeys nested VM's - configcore: fix a bunch of incorrect error returns - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd snap - packaging: merge 2.51.4 changelog back to master - {device,snap}state: skip kernel extraction in seeding - vendor: move to snapshot-4c814e1 branch and set fixed KDF options - tests: use bigger storage on ubuntu 21.10 - snap: support links map in snap.yaml (and later from the store API) - o/snapstate: add AffectedByRefreshCandidates helper - configcore: register virtual config for timezone reading - cmd/libsnap-confine-private: move device cgroup files, add helper to deny a device - tests: fix cached-results condition in github actions workflow - interfaces/tee: add support for Qualcomm qseecom device node - packaging: fix build failure on bionic and simplify rules - o/snapstate: affectedByRefresh tweaks - tests: update nested wait for snapd command - interfaces/builtin: allow access to per-user GTK CSS overrides - tests/main/snapd-snap: install 4.x snapcraft to build the snapd snap - snap/squashfs: handle squashfs-tools 4.5+ - asserts/snapasserts: CheckPresenceInvalid and CheckPresenceRequired methods - cmd/snap-confine: refactor device cgroup handling to enable easier v2 integration - tests: skip udp protocol on latest ubuntus - cmd/libsnap-confine-private: g_spawn_check_exit_status is deprecated since glib 2.69 - interfaces: s/specifc/specific/ - github: enable gofmt for Go 1.13 jobs - overlord/devicestate: UC20 specific set-model, managers tests - o/devicestate, sysconfig: refactor cloud-init config permission handling - config: add "virtual" config via config.RegisterVirtualConfig - packaging: switch ubuntu to use golang-1.13 - snap: change `snap login --help` to not mention "buy" - tests: removing Ubuntu 20.10, adding 21.04 nested in spread - tests/many: remove lxd systemd unit to prevent unexpected leftovers - tests/main/services-install-hook-can-run-svcs: make variants more obvious - tests: force snapd-session-agent.socket to be re-generated * Tue Oct 5 2021 Michael Vogt <michael.vogt(a)ubuntu.com> - New upstream release 2.52.1 - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk` for the disk (if not present already) - many: support an API flag system-restart-immediate to make snap ops proceed immediately with system restarts - cmd/libsnap-confine-private: g_spawn_check_exit_status is deprecated since glib 2.69 - interfaces/seccomp: add clone3 to default template - interfaces/apparmor/template.go: allow inspection of dbus mediation level - interfaces/dsp: add a usb rule to the ambarella flavor - cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so - o/ifacestate: don't lose connections if snaps are broken - interfaces/builtin/opengl.go: add libOpenGL.so* too - interfaces/hardware-observe: add some dmi properties - build-aux: stage libgcc1 library into snapd snap - interfaces/block-devices: support to access the state of block devices - packaging: ship the `snapd.apparmor.service` unit in debian -------------------------------------------------------------------------------- ================================================================================ uglify-js3-3.14.3-1.el7 (FEDORA-EPEL-2021-ef65cb5e69) JavaScript parser, mangler/compressor and beautifier toolkit -------------------------------------------------------------------------------- Update Information: uglify-js 3.14.3 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 3.14.3-1 - Update to 3.14.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2019232 - uglify-js-3.14.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2019232 -------------------------------------------------------------------------------- ================================================================================ xrootd-5.3.2-1.el7 (FEDORA-EPEL-2021-8b7981689f) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: xrootd 5.3.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.3.2-1 - Update to version 5.3.2 - Drop OpenSSL 3 patch accepted upstream - Fix compilation failure on 32 bit architectures - Do not hardcode error numbers - Fix build failure on platforms where char is unsigned * Sun Sep 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.3.1-3 - Update code for OpenSSL 3 * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1:5.3.1-2 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- ================================================================================ zabbix40-4.0.35-1.el7 (FEDORA-EPEL-2021-c8ff135330) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Update to 4.0.35 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 Orion Poplawski <orion(a)cora.nwra.com> - 4.0.35-1 - Update to 4.0.35 -------------------------------------------------------------------------------- ================================================================================ zabbix50-5.0.17-1.el7 (FEDORA-EPEL-2021-87cfbdbaaa) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Build Zabbix 5.0 for EPEL7 NOTE: This does NOT provide the web interface as PHP is too old in EL7 -------------------------------------------------------------------------------- ChangeLog: --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 02 Nov '21

02 Nov '21

The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f9c76d4c79 ansible-2.9.27-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-51a1d774bf rpki-client-7.4-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing cacti-1.2.19-1.el8 cacti-spine-1.2.19-1.el8 mock-2.13-1.el8 notcurses-2.4.8-2.el8 snapd-2.53.1-2.el8 uglify-js3-3.14.3-1.el8 xrootd-5.3.2-1.el8 Details about builds: ================================================================================ cacti-1.2.19-1.el8 (FEDORA-EPEL-2021-242bfc4463) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.19-1 - Update to 1.2.19 * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2001018 - CVE-2020-14424 cacti: lack of escaping on template import can lead to XSS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2001018 -------------------------------------------------------------------------------- ================================================================================ cacti-spine-1.2.19-1.el8 (FEDORA-EPEL-2021-242bfc4463) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information: - Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.19-1 - Update to 1.2.19 * Sun Sep 5 2021 Morten Stevens <mstevens(a)fedoraproject.org> - 1.2.17-3 - Added patch for #1987395 * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2001018 - CVE-2020-14424 cacti: lack of escaping on template import can lead to XSS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2001018 -------------------------------------------------------------------------------- ================================================================================ mock-2.13-1.el8 (FEDORA-EPEL-2021-98e0932614) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: Release notes: https://rpm-software-management.github.io/mock/Release-Notes-2.13 -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 Pavel Raiskup <praiskup(a)redhat.com> 2.13-1 - local repositories to use gpgcheck=0 by default - A new option --additional-package (for --rebuild) - external-deps: install pip packages to /usr - Install external deps into build chroot, not bootstrap - Migrate from optparse to argparse - mock: don't specify SOURCE when remounting bind-mounts - mock: add option --debug-config-expanded (sergio(a)serjux.com) - Fix use of deprecated function (xfgusta(a)gmail.com) - lvm_root: fix copy/paste error in a warning message (kdudka(a)redhat.com) -------------------------------------------------------------------------------- ================================================================================ notcurses-2.4.8-2.el8 (FEDORA-EPEL-2021-522bd2626d) Character graphics and TUI library -------------------------------------------------------------------------------- Update Information: https://github.com/dankamongmen/notcurses/releases/tag/v2.4.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Nick Black <dankamongmen(a)gmail.com> 2.4.8-2 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- ================================================================================ snapd-2.53.1-2.el8 (FEDORA-EPEL-2021-0b1ba44b2e) A transactional software package manager -------------------------------------------------------------------------------- Update Information: Update to 2.53.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.53.1-2 - Disable BPF support on systems that are too old * Tue Nov 2 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.53.1-1 - Release 2.53.1 to Fedora * Thu Oct 21 2021 Ian Johnson <ian.johnson(a)canonical.com> - New upstream release 2.53.1 - spread: run lxd tests with version from latest/stable - secboot: use latest secboot with tpm legacy platform and v2 fully optional (#10946) - cmd/snap-confine: die when snap process is outside of snap specific cgroup (2.53) - interfaces/u2f-devices: add Nitrokey 3 - Update the ubuntu-image channel to candidate - Allow hostnames up to 253 characters, with dot-delimited elements (as suggested by man 7 hostname). - Disable i386 until it is possible to build snapd using lxd - o/snapstate, hookstate: print remaining hold time on snapctl --hold - tests/snapd-sigterm: be more robust against service restart - tests: add a regression test for snapd hanging on SIGTERM - daemon: use the syscall connection to get the socket credentials - interfaces/builtin/hardware-observer: add /proc/bus/input/devices too - cmd/snap-confine/snap-confine.apparmor.in: update ld rule for s390x impish - interface/modem-manager: add accept for MBIM/QMI proxy clients - secboot: revert move to new version * Tue Oct 5 2021 Michael Vogt <michael.vogt(a)ubuntu.com> - New upstream release 2.53 - overlord: fix generated snap-revision assertions in remodel unit tests - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk` - interfaces/modem-manager: add access to PCIe modems - overlord/devicestate: record recovery capable system on a successful remodel - o/snapstate: use device ctx in prerequisite install/update - osutil/disks: support filtering by mount opts in MountPointsForPartitionRoot - many: support an API flag system-restart-immediate to make snap ops proceed immediately with system restarts - osutil/disks: add RootMountPointsForPartition - overlord/devicestate, tests: enable UC20 remodel, add spread tests - cmd/snap: improve snap run help message - o/snapstate: support ignore validation flag on install/update - osutil/disks: add Disk.FindMatchingPartitionWith{Fs,Part}Label - desktop: implement gtk notification backend and provide minimal notification api - tests: use the latest cpu family for nested tests execution - osutil/disks: add Partition struct and Disks.Partitions() - o/snapstate: prevent install hang if prereq install fails - osutil/disks: add Disk.KernelDevice{Node,Path} methods - disks: add `Size(path)` helper - tests: reset some mount units failing on ubuntu impish - osutil/disks: add DiskFromDevicePath, other misc changes - interfaces/apparmor: do not fail during initialization when there is no AppArmor profile for snap-confine - daemon: implement access checkers for themes API - interfaces/seccomp: add clone3 to default template - interfaces/u2f-devices: add GoTrust Idem Key - o/snapstate: validation sets enforcing on update - o/ifacestate: don't fail remove if disconnect hook fails - tests: fix error trying to create the extra-snaps dir which already exists - devicestate: use EncryptionType - cmd/libsnap-confine-private: workaround BPF memory accounting, update apparmor profile - tests: skip system-usernames-microk8s when TRUST_TEST_KEYS is false - interfaces/dsp: add a usb rule to the ambarella flavor - interfaces/apparmor/template.go: allow inspection of dbus mediation level - tests/main/security-device-cgroups: fix when both variants run on the same host - cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so - many: rename systemd.Kind to Backend for a bit more clarity - cmd/libsnap-confine-private: fix set but unused variable in the unit tests - tests: fix netplan test on i386 architecture - tests: fix lxd-mount-units test which is based on core20 in ubuntu focal system - osutil/disks: add new `CreateLinearMapperDevice` helper - cmd/snap: wait while inhibition file is present - tests: cleanup the job workspace as first step of the actions workflow - tests: use our own image for ubuntu impish - o/snapstate: update default provider if missing required content - o/assertstate, api: update validation set assertions only when updating all snaps - fde: add HasDeviceUnlock() helper - secboot: move to new version - o/ifacestate: don't lose connections if snaps are broken - spread: display information about current device cgroup in debug dump - sysconfig: set TMPDIR in tests to avoid cluttering the real /tmp - tests, interfaces/builtin: introduce 21.10 cgroupv2 variant, tweak tests for cgroupv2, update builtin interfaces - sysconfig/cloud-init: filter MAAS c-i config from ubuntu-seed on grade signed - usersession/client: refactor doMany() method - interfaces/builtin/opengl.go: add libOpenGL.so* too - o/assertstate: check installed snaps when refreshing validation set assertions - osutil: helper for injecting run time faults in snapd - tests: update test nested tool part 2 - libsnap-confine: use the pid parameter - gadget/gadget.go: LaidOutSystemVolumeFromGadget -> LaidOutVolumesFromGadget - tests: update the time tolerance to fix the snapd-state test - .github/workflows/test.yaml: revert #10809 - tests: rename interfaces-hooks-misbehaving spread test to install- hook-misbehaving - data/selinux: update the policy to allow s-c to manipulate BPF map and programs - overlord/devicestate: make settle wait longer in remodel tests - kernel/fde: mock systemd-run in unit test - o/ifacestate: do not create stray task in batchConnectTasks if there are no connections - gadget: add VolumeName to Volume and VolumeStructure - cmd/libsnap-confine-private: use root when necessary for BPF related operations - .github/workflows/test.yaml: bump action-build to 1.0.9 - o/snapstate: enforce validation sets/enforce on InstallMany - asserts, snapstate: return full validation set keys from CheckPresenceRequired and CheckPresenceInvalid - cmd/snap: only log translation warnings in debug/testing - tests/main/preseed: update for new base snap of the lxd snap - tests/nested/manual: use loop for checking for initialize-system task done - tests: add a local snap variant to testing prepare-image gating support - tests/main/security-device-cgroups-strict-enforced: demonstrate device cgroup being enforced - store: one more tweak for the test action timeout - github: do not fail when codecov upload fails - o/devicestate: fix flaky test remodel clash - o/snapstate: add ChangeID to conflict error - tests: fix regex of TestSnapActionTimeout test - tests: fix tests for 21.10 - tests: add test for store.SnapAction() request timeout - tests: print user sessions info on debug-each - packaging: backports of golang-go 1.13 are good enough - sysconfig/cloudinit: add cloudDatasourcesInUseForDir - cmd: build gdb shims as static binaries - packaging/ubuntu: pass GO111MODULE to dh_auto_test - cmd/libsnap-confine-private, tests, sandbox: remove warnings about cgroup v2, drop forced devmode - tests: increase memory quota in quota-groups-systemd-accounting - tests: be more robust against a new day stepping in - usersession/xdgopenproxy: move PortalLauncher class to own package - interfaces/builtin: fix microstack unit tests on distros using /usr/libexec - cmd/snap-confine: handle CURRENT_TAGS on systems that support it - cmd/libsnap-confine-private: device cgroup v2 support - o/servicestate: Update task summary for restart action - packaging, tests/lib/prepare-restore: build packages without network access, fix building debs with go modules - systemd: add AtLeast() method, add mocking in systemdtest - systemd: use text.template to generate mount unit - o/hookstate/ctlcmd: Implement snapctl refresh --show-lock command - o/snapstate: optimize conflicts around snaps stored on conditional-auto-refresh task - tests/lib/prepare.sh: download core20 for UC20 runs via BASE_CHANNEL - mount-control: step 1 - go: update go.mod dependencies - o/snapstate: enforce validation sets on snap install - tests: revert revert manual lxd removal - tests: pre-cache snaps in classic and core systems - tests/lib/nested.sh: split out additional helper for adding files to VM imgs - tests: update nested tool - part1 - image/image_linux.go: add newline - interfaces/block-devices: support to access the state of block devices - o/hookstate: require snap-refresh-control interface for snapctl refresh --proceed - build-aux: stage libgcc1 library into snapd snap - configcore: add read-only netplan support - tests: fix fakedevicesvc service already exists - tests: fix interfaces-libvirt test - tests: remove travis leftovers - spread: bump delta ref to 2.52 - packaging: ship the `snapd.apparmor.service` unit in debian - packaging: remove duplicated `golang-go` build-dependency - boot: record recovery capable systems in recovery bootenv - tests: skip overlord tests on riscv64 due to timeouts. - overlord/ifacestate: fix arguments in unit tests - ifacestate: undo repository connection if doConnect fails - many: remove unused parameters - tests: failure of prereqs on content interface doesn't prevent install - tests/nested/manual/refresh-revert-fundamentals: fix variable use - strutil: add Intersection() - o/ifacestate: special-case system-files and force refreshing its static attributes - interface/builtin: add qualcomm-ipc-router interface for AF_QIPCRTR socket protocol - tests: new snapd-state tool - codecov: fix files pathnames - systemd: add mock systemd helper - tests/nested/core/extra-snaps-assertions: fix the match pattern - image,c/snap,tests: support enforcing validations in prepare-image via --customize JSON validation enforce(|ignore) - o/snapstate: enforce validation sets assertions when removing snaps - many: update deps - interfaces/network-control: additional ethernet rule - tests: use host-scaled settle timeout for hookstate tests - many: move to go modules - interfaces: no need for snapRefreshControlInterface struct - interfaces: introduce snap-refresh-control interface - tests: move interfaces-libvirt test back to 16.04 - tests: bump the number of retries when waiting for /dev/nbd0p1 - tests: add more space on ubuntu xenial - spread: add 21.10 to qemu, remove 20.10 (EOL) - packaging: add libfuse3-dev build dependency - interfaces: add microstack-support interface - wrappers: fix a bunch of duplicated service definitions in tests - tests: use host-scaled timeout to avoid riscv64 test failure - many: fix run-checks gofmt check - tests: spread test for snapctl refresh --pending/--proceed from the snap - o/assertstate,daemon: refresh validation sets assertions with snap declarations - tests: migrate tests that are only executed on xenial to bionic - tests: remove opensuse-15.1 and add opensuse-15.3 from spread runs - packaging: update master changelog for 2.51.7 - sysconfig/cloudinit: fix bug around error state of cloud-init - interfaces, o/snapstate: introduce AffectsPlugOnRefresh flag - interfaces/interfaces/ion-memory-control: add: add interface for ion buf - interfaces/dsp: add /dev/ambad into dsp interface - tests: new spread log parser - tests: check files and dirs are cleaned for each test - o/hookstate/ctlcmd: unify the error message when context is missing - o/hookstate: support snapctl refresh --pending from snap - many: remove unused/dead code - cmd/libsnap-confine-private: add BPF support helpers - interfaces/hardware-observe: add some dmi properties - snapstate: abort kernel refresh if no gadget update can be found - many: shellcheck fixes - cmd/snap: add Size column to refresh --list - packaging: build without dwarf debugging data - snapstate: fix misleading `assumes` error message - tests: fix restore in snapfuse spread tests - o/assertstate: fix missing 'scheduled' header when auto refreshing assertions - o/snapstate: fail remove with invalid snap names - o/hookstate/ctlcmd: correct err message if missing root - .github/workflows/test.yaml: fix logic - o/snapstate: don't hold some snaps if not all snaps can be held by the given gating snap - c-vendor.c: new c-vendor subdir - store: make sure expectedZeroFields in tests gets updated - overlord: add manager test for "assumes" checking - store: deal correctly with "assumes" from the store raw yaml - sysconfig/cloudinit.go: add functions for filtering cloud-init config - cgroup-support: allow to hide cgroupv2 warning via ENV - gadget: Export mkfs functions for use in ubuntu-image - tests: set to 10 minutes the kill timeout for tests failing on slow boards - .github/workflows/test.yaml: test github.events key - i18n/xgettext-go: preserve already escaped quotes - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp v2.2.0-428-g5c22d4b - github: do not try to upload coverage when working with cached run - tests/main/services-install-hook-can-run-svcs: shellcheck issue fix - interfaces/u2f-devices: add Nitrokey FIDO2 - testutil: add DeepUnsortedMatches Checker - cmd, packaging: import BPF headers from kernel, detect whether host headers are usable - tests: fix services-refresh-mode test - tests: clean snaps.sh helper - tests: fix timing issue on security-dev-input-event-denied test - tests: update systems for sru validation - .github/workflows: add codedov again - secboot: remove duplicate import - tests: stop the service when is active in test interfaces- firewall-control test - packaging: remove TEST_GITHUB_AUTOPKGTEST support - packaging: merge 2.51.6 changelog back to master - secboot: use half the mem for KDF in AddRecoveryKey - secboot: switch main key KDF memory cost to 32KB - tests: remove the test user just when it was installed on create- user-2 test - spread: temporarily fix the ownership of /home/ubuntu/.ssh on 21.10 - daemon, o/snapstate: handle IgnoreValidation flag on install (2/3) - usersession/agent: refactor common JSON validation into own function - o/hookstate: allow snapctl refresh --proceed from snaps - cmd/libsnap-confine-private: fix issues identified by coverity - cmd/snap: print logs in local timezone - packaging: changelog for 2.51.5 to master - build-aux: build with go-1.13 in the snapcraft build too - config: rename "virtual" config to "external" config - devicestate: add `snap debug timings --ensure=install-system` - interfaces/builtin/raw_usb: fix platform typo, fix access to usb devices accessible through platform - o/snapstate: remove commented out code - cmd/snap-device-helper: reimplement snap-device-helper - cmd/libsnap-confine-private: fix coverity issues in tests, tweak uses of g_assert() - o/devicestate/handlers_install.go: add workaround to create dirs for install - o/assertstate: implement ValidationSetAssertionForEnforce helper - clang-format: stop breaking my includes - o/snapstate: allow auto-refresh limited to snaps affected by a specific gating snap - tests: fix core-early-config test to use tests.nested tool - sysconfig/cloudinit.go: measure (but don't use) gadget cloud-init datasource - c/snap,o/hookstate/ctlcmd: add JSON/string strict processing flags to snap/snapctl - corecfg: add "system.hostname" setting to the system settings - wrappers: measure time to enable services in StartServices() - configcore: fix early config timezone handling - tests/nested/manual: enable serial assertions on testkeys nested VM's - configcore: fix a bunch of incorrect error returns - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd snap - packaging: merge 2.51.4 changelog back to master - {device,snap}state: skip kernel extraction in seeding - vendor: move to snapshot-4c814e1 branch and set fixed KDF options - tests: use bigger storage on ubuntu 21.10 - snap: support links map in snap.yaml (and later from the store API) - o/snapstate: add AffectedByRefreshCandidates helper - configcore: register virtual config for timezone reading - cmd/libsnap-confine-private: move device cgroup files, add helper to deny a device - tests: fix cached-results condition in github actions workflow - interfaces/tee: add support for Qualcomm qseecom device node - packaging: fix build failure on bionic and simplify rules - o/snapstate: affectedByRefresh tweaks - tests: update nested wait for snapd command - interfaces/builtin: allow access to per-user GTK CSS overrides - tests/main/snapd-snap: install 4.x snapcraft to build the snapd snap - snap/squashfs: handle squashfs-tools 4.5+ - asserts/snapasserts: CheckPresenceInvalid and CheckPresenceRequired methods - cmd/snap-confine: refactor device cgroup handling to enable easier v2 integration - tests: skip udp protocol on latest ubuntus - cmd/libsnap-confine-private: g_spawn_check_exit_status is deprecated since glib 2.69 - interfaces: s/specifc/specific/ - github: enable gofmt for Go 1.13 jobs - overlord/devicestate: UC20 specific set-model, managers tests - o/devicestate, sysconfig: refactor cloud-init config permission handling - config: add "virtual" config via config.RegisterVirtualConfig - packaging: switch ubuntu to use golang-1.13 - snap: change `snap login --help` to not mention "buy" - tests: removing Ubuntu 20.10, adding 21.04 nested in spread - tests/many: remove lxd systemd unit to prevent unexpected leftovers - tests/main/services-install-hook-can-run-svcs: make variants more obvious - tests: force snapd-session-agent.socket to be re-generated * Tue Oct 5 2021 Michael Vogt <michael.vogt(a)ubuntu.com> - New upstream release 2.52.1 - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk` for the disk (if not present already) - many: support an API flag system-restart-immediate to make snap ops proceed immediately with system restarts - cmd/libsnap-confine-private: g_spawn_check_exit_status is deprecated since glib 2.69 - interfaces/seccomp: add clone3 to default template - interfaces/apparmor/template.go: allow inspection of dbus mediation level - interfaces/dsp: add a usb rule to the ambarella flavor - cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so - o/ifacestate: don't lose connections if snaps are broken - interfaces/builtin/opengl.go: add libOpenGL.so* too - interfaces/hardware-observe: add some dmi properties - build-aux: stage libgcc1 library into snapd snap - interfaces/block-devices: support to access the state of block devices - packaging: ship the `snapd.apparmor.service` unit in debian -------------------------------------------------------------------------------- ================================================================================ uglify-js3-3.14.3-1.el8 (FEDORA-EPEL-2021-a8a8ff58d5) JavaScript parser, mangler/compressor and beautifier toolkit -------------------------------------------------------------------------------- Update Information: uglify-js 3.14.3 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 3.14.3-1 - Update to 3.14.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2019232 - uglify-js-3.14.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2019232 -------------------------------------------------------------------------------- ================================================================================ xrootd-5.3.2-1.el8 (FEDORA-EPEL-2021-d705dc5802) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: xrootd 5.3.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 2 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.3.2-1 - Update to version 5.3.2 - Drop OpenSSL 3 patch accepted upstream - Fix compilation failure on 32 bit architectures - Do not hardcode error numbers - Fix build failure on platforms where char is unsigned * Sun Sep 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.3.1-3 - Update code for OpenSSL 3 * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1:5.3.1-2 - Rebuilt with OpenSSL 3.0.0 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 02 Nov '21

02 Nov '21

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2021-11-03 from 16:00:00 to 17:00:00 US/Eastern At fedora-meeting(a)irc.libera.chat The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #meetingname EPEL #topic Intros #topic Old Business #topic EPEL-7 #topic EPEL-8 #topic EPEL-9 #topic Openfloor #endmeeting Source: https://calendar.fedoraproject.org//meeting/9854/

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 01 Nov '21

01 Nov '21

The following Fedora EPEL 7 Security updates need testing: Age URL 45 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9db00036f5 java-latest-openjdk-17.0.1.0.12-1.rolling.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c1992565eb rpki-client-7.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing clamav-0.103.3-9.el7 dh-make-2.202102-1.el7 git-extras-6.3.0-1.el7 slurm-20.11.8-2.el7 unar-1.10.7-1.el7 Details about builds: ================================================================================ clamav-0.103.3-9.el7 (FEDORA-EPEL-2021-1b82317850) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter supersede it Fix substitution of /var/run/clamd/clamd.socket on file clamav- milter.conf Get rid of scanstatedir and milterstatedir variables smartsubst deleted since we notice does not replace anything more cleanups $RPM_BUILD_ROOT + /home/sergio/rpmbuild/BUILDROOT/clamav-0.103.3-9.fc36.x86_64 all variavels with {} BR _chmod and chown only in oldfreshclam clean rpath clean -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 3 2021 S��rgio Basto <sergio(a)serjux.com> - 0.103.3-9 - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter supersede it - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf - Get rid of scanstatedir and milterstatedir variables - smartsubst deleted since we notice does not replace anything - more cleanups - $RPM_BUILD_ROOT + /builddir/build/BUILDROOT/clamav-0.103.3-9.el7.x86_64 - all variavels with {} - BR _chmod and chown only in oldfreshclam - clean rpath clean -------------------------------------------------------------------------------- ================================================================================ dh-make-2.202102-1.el7 (FEDORA-EPEL-2021-77d452c188) Tool that converts source archives into Debian package source -------------------------------------------------------------------------------- Update Information: Update dh-make to 2.202102 (#1997830) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 S��rgio Basto <sergio(a)serjux.com> - 2.202102-1 - Update dh-make to 2.202102 (#1997830) * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.202003-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1997830 - dh-make-2.202102 is available https://bugzilla.redhat.com/show_bug.cgi?id=1997830 -------------------------------------------------------------------------------- ================================================================================ git-extras-6.3.0-1.el7 (FEDORA-EPEL-2021-ca38fe1e89) Little git extras -------------------------------------------------------------------------------- Update Information: Update git-extras to 6.3.0 (#2009946) -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 1 2021 S��rgio Basto <sergio(a)serjux.com> - 6.3.0-1 - Update git-extras to 6.3.0 (#2009946) * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Mar 26 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 6.2.0-1 - Update to 6.2.0 (#1943577) * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Sep 28 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 6.1.0-1 - Update to 6.1.0 * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jun 22 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 6.0.0-1 - Update to 6.0.0 (#1849487) * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2009946 - git-extras-6.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2009946 -------------------------------------------------------------------------------- ================================================================================ slurm-20.11.8-2.el7 (FEDORA-EPEL-2021-4a6d5ea64a) Simple Linux Utility for Resource Management -------------------------------------------------------------------------------- Update Information: - Correct log rotation problems (#2016683, #2018508). -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 31 2021 Philip Kovacs <pkfed(a)fedoraproject.org> - 20.11.8-2 - Correct log rotation problems (#2016683, #2018508) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016683 - Please flag the logrotate.d/slurm file as a configfile in the rpm https://bugzilla.redhat.com/show_bug.cgi?id=2016683 [ 2 ] Bug #2018508 - /etc/logrotate.d/slurm error -> rotation of already rotated log messages https://bugzilla.redhat.com/show_bug.cgi?id=2018508 -------------------------------------------------------------------------------- ================================================================================ unar-1.10.7-1.el7 (FEDORA-EPEL-2021-bc5c979583) Multi-format extractor -------------------------------------------------------------------------------- Update Information: Update unar to 1.10.7 (#2012015) -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 31 2021 S��rgio Basto <sergio(a)serjux.com> - 1.10.7-1 - Update unar to 1.10.7 (#2012015) * Tue Sep 28 2021 Robert Scheck <robert(a)fedoraproject.org> - 1.10.1-24 - Build using gobjc on EPEL 8 (#2008326) * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Thu May 20 2021 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-22 - Rebuild for ICU 69 * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Aug 17 2020 Jeff Law <law(a)redhat.com> - 1.10.1-20 - Disable LTO * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-19 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon May 18 2020 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-17 - Rebuild for ICU 67 * Sat Apr 18 2020 S��rgio Basto <sergio(a)serjux.com> - 1.10.1-16 - Rebuild for gnustep 1.27.0 * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Nov 1 2019 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-14 - Rebuild for ICU 65 * Fri Sep 6 2019 S��rgio Basto <sergio(a)serjux.com> - 1.10.1-13 - Rebuild for new gnustep 1.26.0 * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Jan 23 2019 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-10 - Rebuild for ICU 63 * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot * Mon Apr 30 2018 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-8 - Rebuild for ICU 61.1 * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Nov 30 2017 Pete Walter <pwalter(a)fedoraproject.org> - 1.10.1-6 - Rebuild for ICU 60.1 * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sun Apr 16 2017 S��rgio Basto <sergio(a)serjux.com> - 1.10.1-3 - Rebuild (libgnustep-base) * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2012015 - unar-1.10.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2012015 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 01 Nov '21

01 Nov '21

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 31 Oct '21

31 Oct '21

The following Fedora EPEL 8 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f9c76d4c79 ansible-2.9.27-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-51a1d774bf rpki-client-7.4-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing python-regex-2021.10.23-1.el8 Details about builds: ================================================================================ python-regex-2021.10.23-1.el8 (FEDORA-EPEL-2021-ea84363e65) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information: Update python-regex to the latest release. -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 30 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2021.10.23-1 - Update to 2021.10.23. --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 31 Oct '21

31 Oct '21

The following Fedora EPEL 7 Security updates need testing: Age URL 44 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9db00036f5 java-latest-openjdk-17.0.1.0.12-1.rolling.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c1992565eb rpki-client-7.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing python-regex-2021.10.23-1.el7 Details about builds: ================================================================================ python-regex-2021.10.23-1.el7 (FEDORA-EPEL-2021-96cc57d66c) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information: Update python-regex to the latest release. -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 30 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2021.10.23-1 - Update to 2021.10.23. --------------------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel November 2021