EPEL-ANNOUNCE Re: backwards incompatible update of oniguruma in EPEL 7
This update has been submitted to stable.
On Thu, May 28, 2020 at 12:53 PM Carl George <carl(a)redhat.com> wrote:
Greetings,
Per the EPEL incompatible upgrades policy [0], this is an announcement of a
backwards incompatible update [1] of oniguruma in EPEL 7. This change was
approved by the EPEL steering committee [2]. This update is required to
resolve some outstanding CVEs [3]. I've updated it to the same version that
is in RHEL 8 to simplify future maintenance. This update changes the
library soname from libonig.so.2 to libonig.so.5. The only software in EPEL
7 affected by this change is jq, which has been rebuilt against the new
soname [4] and will be released at the same time. Any software not in EPEL
7 that links against this library will also have to be rebuilt. Please test
this update and provide karma if you're able. Thanks!
[0] https://fedoraproject.org/wiki/EPEL_incompatible_upgrades_policy
[1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-101619ac61
[2] https://meetbot.fedoraproject.org/teams/epel/epel.2020-05-22-21.04.html
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1777660
[4] https://bugzilla.redhat.com/show_bug.cgi?id=1836692
--
Carl George
_______________________________________________
epel-announce mailing list -- epel-announce(a)lists.fedoraproject.org
To unsubscribe send an email to epel-announce-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-announce@lists.fedorap...
--
Carl George