backwards incompatible update of oniguruma in EPEL 7

[Carl George]

Greetings,

Per the EPEL incompatible upgrades policy [0], this is an announcement of a
backwards incompatible update [1] of oniguruma in EPEL 7.  This change was
approved by the EPEL steering committee [2].  This update is required to
resolve some outstanding CVEs [3].  I've updated it to the same version that
is in RHEL 8 to simplify future maintenance.  This update changes the
library soname from libonig.so.2 to libonig.so.5.  The only software in EPEL
7 affected by this change is jq, which has been rebuilt against the new
soname [4] and will be released at the same time.  Any software not in EPEL
7 that links against this library will also have to be rebuilt.  Please test
this update and provide karma if you're able.  Thanks!

[0] https://fedoraproject.org/wiki/EPEL_incompatible_upgrades_policy
[1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-101619ac61
[2] https://meetbot.fedoraproject.org/teams/epel/epel.2020-05-22-21.04.html
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1777660
[4] https://bugzilla.redhat.com/show_bug.cgi?id=1836692

[Carl George]

This update has been submitted to stable.

On Thu, May 28, 2020 at 12:53 PM Carl George  wrote:
> Greetings,
>
> Per the EPEL incompatible upgrades policy [0], this is an announcement of a
> backwards incompatible update [1] of oniguruma in EPEL 7.  This change was
> approved by the EPEL steering committee [2].  This update is required to
> resolve some outstanding CVEs [3].  I've updated it to the same version that
> is in RHEL 8 to simplify future maintenance.  This update changes the
> library soname from libonig.so.2 to libonig.so.5.  The only software in EPEL
> 7 affected by this change is jq, which has been rebuilt against the new
> soname [4] and will be released at the same time.  Any software not in EPEL
> 7 that links against this library will also have to be rebuilt.  Please test
> this update and provide karma if you're able.  Thanks!
>
> [0] https://fedoraproject.org/wiki/EPEL_incompatible_upgrades_policy
> [1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-101619ac61
> [2] https://meetbot.fedoraproject.org/teams/epel/epel.2020-05-22-21.04.html
> [3] https://bugzilla.redhat.com/show_bug.cgi?id=1777660
> [4] https://bugzilla.redhat.com/show_bug.cgi?id=1836692
>
> --
> Carl George
> _______________________________________________
> epel-announce mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]...