epel-devel June 2012

epel-devel@lists.fedoraproject.org

15 participants
40 discussions

Start a nNew thread

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 12 Jun '12

12 Jun '12

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 12 Jun '12

12 Jun '12

1 0

Overlapping packages: Getting closer to a policy
by Toshio Kuratomi 11 Jun '12

11 Jun '12

At today's EPEL meeting we got a bit closer to a new policy. Had a few proposals and started tweaking both the wording and the criteria that have been presented. The basic framework that our proposals seemed to have was: EPEL6 will not conflict with os, optional and specific other RHEL channels. Currently those are lb and ha. Other channels may be added [based on this criteria]. Overlaps are allowed to resolve packages missing on specific arches according to <link> The sticking point is what to put in for the criteria. Suggestions given at the meeting were a combination of the following: * case by case basis * Does not conflict with os, optional, or other channels already enabled * Available to people who have a basic subscription In coming up with these criteria, we were attempting to satisfy these identified needs and desirable qualities: * Must be usable in the buildsystem * Would like to make it easy on contributors to build and run the packages they are creating. * Set expectations appropriately for users of EPEL for what they can rely on as being protected and what is not * Limit the conflicts that can occur with Red Hat channels in some manner * Limit confusion for users of EPEL as much as possible given the other constraints. FAQs: * Why not just stick with os or os and optional? It seemed like the things in lb and ha were generally useful to a large number of people, are currently enabled in the buildsystem, and are available to everyone who has a RHEL basic subscription currently. Removing them would mean trying to get them packaged for EPEL and also that we'd conflict with more packages that RHEL users could be using currently. * Why not prohibit overlaps with all channels? Primary reason is that channels conflict with each other so we can't enable all of them in the buildsystem successfully. This also seems to run counter to our other desired criteria. * What now? We need to work on the criteria and decide what ones we're actually going to go with. -Toshio

6 19

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 09 Jun '12

09 Jun '12

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 09 Jun '12

09 Jun '12

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 08 Jun '12

08 Jun '12

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 08 Jun '12

08 Jun '12

1 0

Summary/Minutes from today's EPEL meeting (2012-06--08)
by Kevin Fenzi 08 Jun '12

08 Jun '12

================================== #fedora-meeting: EPEL (2012-06-08) ================================== Meeting started by nirik at 16:00:52 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2012-06-08/epel.2012-06-08-… . Meeting summary --------------- * init process/agenda (nirik, 16:00:52) * Broken Deps reports (nirik, 16:04:00) * nirik to public broken dep script so people can review/hack on it (maxamillion, 16:05:21) * nirik to public broken dep script so people can review/hack on it (maxamillion, 16:05:49) * RHEL overlap policy (nirik, 16:06:27) * LINK: http://koji.fedoraproject.org/koji/taginfo?tagID=140 (nirik, 16:14:32) * LINK: http://fpaste.org/xAPF/ (nirik, 16:19:47) * LINK: http://ftp.redhat.com/redhat/linux/enterprise/6Server/en/* (maxamillion, 16:28:20) * LINK: http://fedoraproject.org/wiki/EPEL:Packaging#Limited_Arch_Packages (nirik, 16:42:22) * proposals on list, further discussion. (nirik, 17:01:04) * Open Floor (nirik, 17:01:10) Meeting ended at 17:02:01 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * nirik (91) * abadger1999 (30) * maxamillion (27) * smooge (20) * zodbot (5) * dgilmore (5) * os_ (4) * cobra-the-joker (4) * strace (3) * Jeff_S (1) * tremble (0) -- 16:00:52 <nirik> #startmeeting EPEL (2012-06-08) 16:00:52 <zodbot> Meeting started Fri Jun 8 16:00:52 2012 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:00:52 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:00:52 <nirik> #meetingname epel 16:00:52 <zodbot> The meeting name has been set to 'epel' 16:00:52 <nirik> #topic init process/agenda 16:00:52 <nirik> #chair smooge tremble dgilmore 16:00:52 <nirik> EPEL meeting ping abadger1999 rsc stahnma tremble dgilmore smooge nb maxamillion tremble Jeff_S HackMan 16:00:52 <zodbot> Current chairs: dgilmore nirik smooge tremble 16:00:53 * nirik looks at zodbot. 16:01:06 <smooge> here here here 16:01:24 * maxamillion is here 16:02:19 <dgilmore> hi 16:02:36 <cobra-the-joker> HERE ! 16:02:46 * nirik waits a few more for folks to arrive. 16:03:51 <nirik> ok, lets go ahead and dive in then... 16:04:00 <nirik> #topic Broken Deps reports 16:04:19 <nirik> I meant to publish the basic script I had so people could work on it. 16:04:28 <nirik> but I failed. I will do so after the meeting. ;) 16:05:14 <nirik> Basically I have a script that works for epel6, it needs reworking so it could work for epel6+testing and epel5/epel5+testing... 16:05:21 <maxamillion> #info nirik to public broken dep script so people can review/hack on it 16:05:29 <maxamillion> oh wait, that's a chair thing isn't it? 16:05:37 <nirik> if someone can get it all set, I can add it to puppet, etc. 16:05:39 <nirik> maxamillion: yeah. 16:05:41 <nirik> #chair maxamillion 16:05:41 <zodbot> Current chairs: dgilmore maxamillion nirik smooge tremble 16:05:47 <maxamillion> oh goodness 16:05:49 <maxamillion> #info nirik to public broken dep script so people can review/hack on it 16:06:11 <nirik> ok, any questions there? if not, moving on... 16:06:24 * abadger1999 here 16:06:27 <nirik> #topic RHEL overlap policy 16:06:30 * Jeff_S here for one minute then need to run. 16:06:46 <nirik> so, we talked last time about a new policy, and there's been tons of discussion on list. 16:06:58 <nirik> Does anyone have any wording to propose? or further discussion to make on it? 16:07:28 <cobra-the-joker> everyone is sleepy o_0 16:07:38 <smooge> I believe the wording we had last time to cover just stuff under 6 basic is all that is needed 16:07:40 <nirik> yeah, I don't blame them. ;) 16:07:51 <maxamillion> smooge: +1 16:08:41 <nirik> what was that wording? because I want an actual thing we can look at. ;) 16:09:29 * nirik looks 16:10:08 <nirik> "EPEL6 will not ship any packages that have src.rpms under enterprise/6*/en/os/ with an exception for packages not shipped on one arch. Channels under enterprise/6/en/ may request EPEL remove any overlaping packages, and may be queried by EPEL about such overlaps from time to time." 16:10:14 <smooge> <nirik> proposal: EPEL6 will not ship any packages that have src.rpms under enterprise/6*/en/os/ with an exception for packages not shipped on one arch. Channels under enterprise/6/en/ may request EPEL remove any overlaping packages, and may be queried by EPEL about such overlaps from time to time. 16:11:06 <os_> cobra-the-joker, noy me 16:11:09 <os_> cobra-the-joker, not me 16:11:24 <cobra-the-joker> ؟! 16:11:34 <os_> <cobra-the-joker> everyone is sleepy o_0 16:11:38 <smooge> os_, please stay on topic here 16:11:40 <nirik> so, where does that leave the lb and ha channels? we currently use them in our build repo... 16:11:41 <cobra-the-joker> aha 16:11:44 <os_> sorry 16:12:09 <smooge> I think we need to see what gets pulled because of that 16:12:23 <nirik> and it leaves our users kind of unsure which channel is in what state... overlap ok, not ok, changed from ok to not ok... etc 16:13:20 <smooge> nirik, my main questions would be: Does CentOS/SciLin ship those rpms and does a basic subscription get those channels? 16:13:30 <nirik> I'd guess we would need a table on the wiki with that info... 16:13:47 <nirik> I think the answer is no, and yes. 16:13:56 <nirik> but I would have to look to be sure. 16:14:07 <abadger1999> smooge: and, can we use them in our buildsystem. 16:14:25 <nirik> abadger1999: we do currently. 16:14:32 <nirik> http://koji.fedoraproject.org/koji/taginfo?tagID=140 16:14:41 <nirik> server, optional, lb and ha 16:14:47 <abadger1999> yeah. true for those channels. I wasn't sure if smooge's quesetions were more broad. 16:15:29 <nirik> I think it's completely impractical/impossible for us to just enable all channels. Some channels conflict with each other. 16:15:41 <dgilmore> nirik: right 16:15:55 <dgilmore> and some ship different versions of the same thing 16:15:59 <nirik> or at least both provide different versions of the same package. 16:16:06 <smooge> Well if a basic subscription gives those channels then we should go with that. If it doesn't then we shouldn't. 16:16:07 <dgilmore> that could in theory have different sonames etc 16:16:15 * nirik nods. 16:16:20 <maxamillion> smooge: +1 16:16:28 <abadger1999> <nod> Which for me means we should either always allow overlap with those channels or pick one and allow overlap with the other because of the conflict. 16:16:42 <nirik> I have no idea off hand what a basic subscription provides channel wise. 16:16:51 <maxamillion> lemme look 16:16:58 <abadger1999> smooge: I like that position. 16:17:24 <strace> smooge: +1 16:17:29 <nirik> so that would be 'no overlap with channels in a basic subscription' ? 16:18:26 <maxamillion> crap, RHN changed ... I can't find anything 16:18:31 <strace> Actually, how are we defining "basic subscription"? Just RHEL Server or are we defining it as RHEL Desktop? 16:18:33 <smooge> yeah.. the question is how can we get a basic supscription 16:19:00 <nirik> strace: server I assume, thats what we build against. 16:19:06 <strace> ok 16:19:23 <maxamillion> I would think either server or workstation 16:19:33 <maxamillion> probably server though 16:19:47 <nirik> http://fpaste.org/xAPF/ 16:20:33 * nirik thinks this is getting too complex again. 16:21:02 <maxamillion> I say we do Server and Optional 16:21:15 <maxamillion> because I think we require Optional anyways don't we? 16:21:21 <nirik> pulling ha and lb would probibly nuke a number of things. I know it will kill heartbeat. 16:22:00 <smooge> Well in that case, could we go with the "we will rebuild with source from channel but at a NVR less than in channel?" 16:22:30 <maxamillion> I feel like that would be a pain to maintain 16:22:34 <nirik> we can, but thats a gigantic pain. 16:22:43 <nirik> I suspect many of the packages we have doing that now are doing it wrong. 16:22:56 <smooge> yeah probably 16:23:24 <smooge> sigh. I propose we end EPEL and let someone else handle this. 16:23:57 <smooge> not too seriously. 16:24:41 <nirik> well, I think any plan we come up with may make some people unhappy, but such is life I fear. 16:25:14 <maxamillion> +1 16:25:37 <maxamillion> can't always satisfy everyone and no matter what, someone's going to complain 16:25:57 <nirik> I guess I am leaning toward: No overlap with os/optional. No overlap with lb or ha (current list, will add channels as requested). Arch exceptions allowed for any overlaps. 16:26:19 <nirik> then when we add a channel on request for no overlaps, we add it to the buildsys and check it then for overlaping. 16:26:27 <abadger1999> How many packages are in ha and lb? How many important ones are? 16:26:29 <nirik> but I don't know if channel owners are going to know to request that. 16:26:47 * nirik looks 16:26:58 <abadger1999> It's possible that we can get those into EPEL. 16:27:36 <nirik> which? all the lb/ha contents? 16:28:01 <maxamillion> we could always say "we don't overlap with anything in http://ftp.redhat.com/redhat/linux/enterprise/6Server/en/ and if you need something there, just pay for it" ... I feel like that would simplify things (but likely upset some folks) 16:28:18 <maxamillion> erm 16:28:20 <maxamillion> http://ftp.redhat.com/redhat/linux/enterprise/6Server/en/* 16:28:26 <maxamillion> asterisk is important ;) 16:29:15 <nirik> maxamillion: that would result in a large drop in epel packages. 16:29:30 <smooge> like over half 16:29:51 <maxamillion> it would make things more simple though ... didn't say it was the greatest suggestion in the world 16:30:16 <abadger1999> maxamillion: Just started browsing and already spotted conflicts there. 16:30:18 <nirik> maxamillion: well, it would make things more simple for end consumers, it would be a nightmare on the rel-eng side. 16:30:18 <maxamillion> I'm just throwing ideas out there and I'm open to others ... certainly not married to any of them 16:30:29 <maxamillion> nirik: oh? 16:30:31 <nirik> yeah, there's not a great answer here. 16:30:35 <abadger1999> CloudForms has a different mod_wsgi package from os 16:30:47 <nirik> and a different puppet from epel 16:30:48 <maxamillion> abadger1999: heh, of course it does 16:31:48 <abadger1999> nirik: yeah, all the lb/ha content 16:33:00 <maxamillion> so is LB/HA considered wide spread enough that we don't want to conflict with it because it would impact a large enough user base that it could be problematic where as other additional subscription channels are a bit more niche or aren't likely candidate deployments for adding in EPEL? (just trying to clarify for myself) 16:33:13 <nirik> since the channels are so different, I don't think we are going to get one size fits all here. 16:33:50 <nirik> maxamillion: yeah, I would agree with that. Base sub allows you to use lb and ha... and they have many popular packages for rhel. 16:34:34 <abadger1999> <nod> 16:34:59 * abadger1999 looks at the list of what's available with base sub again 16:35:14 <nirik> there's some more than I pasted... there's beta ones. 16:35:26 <nirik> but I don't think those should count. 16:36:16 <nirik> lb has 3 packages in it. 16:36:34 <nirik> ha has 158 16:37:00 <abadger1999> Additional channels are: Resilient Storage, Supplementary V2VWin RHN Tools for RHEL, RH Ent Virt Agent, FasTrack (which is a different "type" of channel?) 16:37:20 <nirik> yeah, fastrack is different. 16:39:36 <nirik> so, anyone want to push a proposal? or shall we try and ponder on it more? 16:40:21 <smooge> Well I think status quo works best. 16:40:32 <maxamillion> "status quo" ? 16:40:45 <smooge> ServerOS, LB, HA 16:40:46 <nirik> I guess I will put forth: 16:40:49 <maxamillion> smooge: +1 16:41:15 <abadger1999> nirik: What was "Arch exceptions allowed for any overlaps" above? 16:41:50 * abadger1999 has some wording but would like to incorporate that idea as well. 16:41:58 <nirik> EPEL6 will not conflict with os and optional. Addtionally, it will not conflict with: lb, ha (this list subject to additions). Arch overlaps allowed when there's overlaping. 16:42:05 <nirik> abadger1999: let me get a link, just a sec. 16:42:22 <nirik> http://fedoraproject.org/wiki/EPEL:Packaging#Limited_Arch_Packages 16:42:37 <abadger1999> <nod> k 16:43:13 * nirik notes that inode0 didn't like per channel exceptions as it seemed potentitally confusing to end users, but I'm not sure how to avoid it. 16:43:52 <abadger1999> How about changing your "this list subject to additions) to: (this list subject to additions available to a base subscription where the channels do not conflict with each other, os, or optional) 16:44:44 <nirik> hum, that reads more confusing to me. what does that get us? 16:44:56 * abadger1999 works on the language some 16:45:04 <abadger1999> it gets us a better set of expectations. 16:45:54 <nirik> I see that ha and rs have overlapping packages... 16:45:57 <smooge> does "Overlaps are allowed in arches that do not ship packages in those channels." work better for the second sentence? 16:46:07 <nirik> at least from a quick glance, cluster-glue is shipped in both 16:46:10 <abadger1999> rather than Oh, someone asked that we add this random channel so we should add it and cause disruption to users, it limits the set of channels that could potentially be added. 16:46:21 <nirik> ah, I see... 16:46:38 <nirik> so if we got some other channel telling us not to overlap, we could say sorry/ 16:47:56 <abadger1999> yeah. 16:48:16 * nirik doesn't want to cause problems for other channels... you would think they would have a good reason for asking us not to overlap. 16:50:22 <abadger1999> EPEL6 will not conflict with os, optional and certain channels available to a Base Subscription. Currently, those channels are lb and ha but other base subscription channels may be added if they do not conflict with os and optional. Overlaps are allowed to resolve packages missing on a specific arch according to [link]. 16:51:06 <abadger1999> that doesn't quite capture things like conflict between ha and rs... hmmm... 16:51:12 <nirik> yeah. 16:51:18 <nirik> I think we need to be more generic. 16:52:00 <smooge> EPEL6 will not conflict with os, optional and certain channels available to a Base Subscription. People who have a problem with this are to see Dennis Gilmore in Blind Dark Alley. 16:52:40 <nirik> EPEL6 will not conflict with os, optional and specific other RHEL channels. Currently those are lb and ha. Other channels may be added on a case by case basis. Overlaps are allowed to resolve packages missing on specific arches according to <link> 16:52:47 <nirik> smooge: +1 16:53:33 <abadger1999> So... od we all agree on the idea of limiting additional channels to (1) no conflicts with the channels already in the buildroot. (2) available to a base subscription? 16:53:36 <abadger1999> *do 16:53:46 <smooge> I do 16:53:48 <nirik> dgilmore: you've been trying to talk with channel owners? How possible is it to find out who owns a channel and communicate with them about this? 16:54:16 <dgilmore> nirik: so far ive not gotten very far 16:54:16 <nirik> abadger1999: I'm not sure about the base subscription thing... 16:54:50 <nirik> I guess the idea is that people with more niche subscriptions would know better how to deal with conflicts/overlaps? 16:55:44 <nirik> but I can think of cases where channel foo ships package bar thats also in epel, and a different version and it's causing them support problems with people overlaping and they ask us to remove bar... 16:56:19 * nirik notes we are coming up on an hour now. 16:56:31 <abadger1999> I was thinking more of the "can contributors still build and run the packages" aspect. 16:56:58 <abadger1999> a base subscription seems like a reasonable line to draw there. 16:57:19 <nirik> yeah, true. 16:57:42 <abadger1999> that said, I feel no conflicts is a blocker for me. 16:57:52 <nirik> yeah. 16:58:02 <abadger1999> base subscription would be very nice, but I could live without it. 16:58:09 <nirik> for example the cluster-glue in ha and rs is the exact same version... does that mean they keep in sync? no idea. 16:58:38 <abadger1999> yeah. 16:59:52 <nirik> so, where shall we go here? proposals on list? more thoughts? different meeting time? ;) 17:00:10 <smooge> I think this time as good as it gets at the moment 17:00:22 <smooge> proposals on list with vote next week 17:00:57 <nirik> ok. 17:01:04 <nirik> #info proposals on list, further discussion. 17:01:10 <nirik> #topic Open Floor 17:01:15 <nirik> anything for open floor real quick? 17:01:50 <nirik> ok, will close out in a minute then. 17:01:53 <nirik> thanks for coming everyone. 17:02:01 <nirik> #endmeeting

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 07 Jun '12

07 Jun '12

The following Fedora EPEL 5 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6072/lighttpd-1.4.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6026/nut-2.2.2-3.e… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5958/socat-1.7.2.1… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5973/python-crypto… The following builds have been pushed to Fedora EPEL 5 updates-testing cobbler-2.2.3-1.el5 duply-1.5.6-1.el5 latex2rtf-2.2.0-2.el5 lighttpd-1.4.31-1.el5 since-1.1-5.el5 Details about builds: ================================================================================ cobbler-2.2.3-1.el5 (FEDORA-EPEL-2012-6076) Boot server configurator -------------------------------------------------------------------------------- Update Information: New upstream release - 2.2.3-1 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 5 2012 James Cammarata <jimi(a)sngx.net> 2.2.3-1 - [BUGFIX] add dns to kernel commandline when using static interface (frido(a)enu.zolder.org) - [BUGFIX] issue #196 - repo environment variables bleed into other repos during sync process This patch has reposync cleanup/restore any environment variables that were changed during the process (jimi(a)sngx.net) - BUGFIX quick dirty fix to work around an issue where cobbler would not log in ldap usernames which contain uppercase characters. at line 60 instead of "if user in data", "if user.lower() in data" is used. It would appear the parser puts the usernames in data[] in lowercase, and the comparison fails because "user" does hold capitalizations. (matthiasvandegaer(a)hotmail.com) - [BUGFIX] simplify SELinux check reporting * Remove calls to semanage, policy prevents apps from running that directly (and speeds up check immensely) * Point users at a wiki page which will contain details on ensuring cobbler works with SELinux properly (jimi(a)sngx.net) - [BUGFIX] issue #117 - incorrect permissions on files in /var/lib/cobbler (j-nomura(a)ce.jp.nec.com) - [BUGFIX] issue #183 - update objects mgmt classes field when a mgmt class is renamed (jimi(a)sngx.net) - [BUGFIX] adding some untracked directories and the new augeas lense to the setup.py and cobbler.spec files (jimi(a)sngx.net) - [FEATURE] Added ability to disable grubby --copy-default behavior for distros that may have problems with it (jimi(a)sngx.net) - [SECURITY] Major changes to power commands: * Fence options are now based on /usr/sbin/fence_* - so basically anything the fence agents package provides. * Templates will now be sourced from /etc/cobbler/power/fence_<powertype>.template. These templates are optional, and are only required if you want to do extra options for a given command. - All options for the fence agent command are sent over STDIN. * Support for ipmitool is gone, use fence_ipmilan instead (which uses ipmitool under the hood anyway). This may apply to other power types if they were provided by a fence_ command. * Modified labels for the power options to be more descriptive. (jimi(a)sngx.net) - [BUGFIX] issue #136 - don't allow invalid characters in names when copying objects (jimi(a)sngx.net) - [BUGFIX] issue #168 - change input_string_or_list to use shlex for split This function was using a regular string split, which did not allow quoted or escaped strings to be preserved. (jimi(a)sngx.net) - [BUGFIX] Correct method to process the template file. This Fixes the previous issue and process the template. (charlesrg(a)gmail.com) - [BUGFIX] issue #170 - koan now checks length of drivers list before indexing (daniel(a)defreez.com) - [BUGFIX] Issue #153 - distro delete doesn't remove link from /var/www/cobbler/links Link was being created incorrectly during the import (jimi(a)sngx.net) - [FEATURE] snippets: save/restore boot-device on ppc64 on fedora17 (nacc(a)us.ibm.com) - [BUGFIX] Fixed typo in pre_anamon (brandor5(a)gmail.com) - [BUGFIX] Added use of $http_port to server URL in pre_anamon and post_anamon (brandor5(a)gmail.com) - [BUGFIX] Fixed dnsmasq issue regarding missing dhcp-host entries (cobbler(a)basjes.nl) - [BUGFIX] in buildiso for RedHat based systems. The interface->ip resolution was broken when ksdevice=bootif (default) (jorgen.maas(a)gmail.com) - [BUGFIX] rename failed for distros that did not live under ks_mirror (jimi(a)sngx.net) - [BUGFIX] Partial revert of commit 3c81dd3081 - incorrectly removed the 'extends' template directive, breaking rendering in django (jimi(a)sngx.net) - [BUGFIX] Reverting commit 1d6c53a97, which was breaking spacewalk Changed the web interface stuff to use the existing extended_version() remote call (jimi(a)sngx.net) - [BUGFIX] Minor fix for serializer_pretty_json change, setting indent to 0 was still causing more formatted JSON to be output (jimi(a)sngx.net) - [SECURITY] Adding PrivateTmp=yes to the cobblerd.service file for systemd (jimi(a)sngx.net) - [FEATURE] add a config option to enable pretty JSON output (disabled by default) (aronparsons(a)gmail.com) - [BUGFIX] issue #107 - creating xendomains link for autoboot fails Changing an exception to a printed warning, there's no need to completely bomb out on the process for this (jimi(a)sngx.net) - [BUGFIX] issue #28 - Cobbler drops errors on the floor during a replicate Added additional logging to add_ functions to report an error if the add_item call returns False (jimi(a)sngx.net) - [BUGFIX] add requirement for python-simplejson to koan's package (jimi(a)sngx.net) - [BUGFIX] action_sync: fix sync_dhcp remote calls (nacc(a)us.ibm.com) - [BUGFIX] Add support for KVM paravirt (justin(a)thespies.org) - [BUGFIX] Makefile updates for debian/ubuntu systems (jimi(a)sngx.net) - [BUGFIX] fix infinite netboot cycle with ppc64 systems (nacc(a)us.ibm.com) - [BUGFIX] Don't allow Templar classes to be created without a valid config There are a LOT of places in the templar.py code that use self.settings without checking to make sure a valid config was passed in. This could cause random stack dumps when templating, so it's better to force a config to be passed in. Thankfully, there were only two pieces of code that actually did this, one of which was the tftpd management module which was fixed elsewhere. (jimi(a)sngx.net) - [BUGFIX] instance of Templar() was being created without a config passed in This caused a stack dump when the manage_in_tftpd module tried to access the config settings (jimi(a)sngx.net) - [BUGFIX] Fix for issue #17 - Make cobbler import be more squeaky when it doesn't import anything (jimi(a)sngx.net) - [FEATURE] autoyast_sample: save and restore boot device order (nacc(a)us.ibm.com) - [BUGFIX] Fix for issue #105 - buildiso fails Added a new option for buildiso: --mkisofs-opts, which allows specifying extra options to mkisofs TODO: add input box to web interface for this option (jimi(a)sngx.net) - [BUGFIX] incorrect lower-casing of kickstart paths - regression from issue - [FEATURE] Automatically detect and support bind chroot (orion(a)cora.nwra.com) - [FEATURE] Add yumopts to kickstart repos (orion(a)cora.nwra.com) - [BUGFIX] Fix issue with cobbler system reboot (nacc(a)us.ibm.com) - [BUGFIX] fix stack trace in write_pxe_file if distro==None (smoser(a)brickies.net) - [BUGFIX] Changed findkeys function to be consisten with keep_ssh_host_keys snippet (flaks(a)bnl.gov) - [BUGFIX] Fix for issue #15 - cobbler image command does not recognize --image-type=memdisk (jimi(a)sngx.net) - [BUGFIX] Issue #13 - reposync with --tries > 1 always repeats, even on success The success flag was being set when the reposync ran, but didn't break out of the retry loop - easy fix (jimi(a)sngx.net) - [BUGFIX] Fix for issue #42 - kickstart not found error when path has leading space (jimi(a)sngx.net) - [BUGFIX] Fix for issue #26 - Web Interface: Profile Edit * Added jquery UI stuff * Added javascript to generic_edit template to make all selects in the class "edit" resizeable (jimi(a)sngx.net) - [BUGFIX] Fix for issue #53 - cobbler system add without --profile exits 0, but does nothing (jimi(a)sngx.net) - [BUGFIX] Issue #73 - Broken symlinks on distro rename from web_gui (jimi(a)sngx.net) - regular OS version maintenance (jorgen.maas(a)gmail.com) - [BUGFIX] let koan not overwrite existing initrd+kernel (ug(a)suse.de) - [FEATURE] koan: * Port imagecreate to virt-install (crobinso(a)redhat.com) * Port qcreate to virt-install (crobinso(a)redhat.com) * Port xen creation to virt-install (crobinso(a)redhat.com) - [FEATURE] new snippet allows for certificate-based RHN registration (jim.nachlin(a)gawker.com) - [FEATURE] Have autoyast by default behave more like RHEL, regarding networking etc. (chorn(a)fluxcoil.net) - [BUGFIX] sles patches (chorn(a)fluxcoil.net) - [BUGFIX] Simple fix for issue where memtest entries were not getting created after installing memtest86+ and doing a cobbler sync (rharriso(a)redhat.com) - [BUGFIX] REMOTE_ADDR was not being set in the arguments in calls to CobblerSvc instance causing ip address not to show up in install.log. (jweber(a)cofront.net) - [BUGFIX] add missing import of shutil (aparsons(a)redhat.com) - [BUGFIX] add a sample kickstart file for ESXi (aparsons(a)redhat.com) - [BUGFIX] the ESXi installer allows two nameservers to be defined (aparsons(a)redhat.com) - [BUGFIX] close file descriptors on backgrounded processes to avoid hanging %pre (aparsons(a)redhat.com) - [BUGFIX] rsync copies the repositories with --delete hence deleting everyhting local that isn't on the source server. The createrepo then creates (following the default settings) a cache directory ... which is deleted by the next rsync run. Putting the cache directory in the rsync exclude list avoids this deletion and speeds up running reposync dramatically. (niels(a)basjes.nl) - [BUGFIX] Properly blame SELinux for httpd_can_network_connect type errors on initial setup. (michael.dehaan(a)gmail.com) - fix install=... kernel parameter when importing a SUSE distro (ug(a)suse.de) - [BUGFIX] Force Django to use the system's TIME_ZONE by default. (jorgen.maas(a)gmail.com) - [FEATURE] Separated check for permissions from file existence check. (aaron.peschel(a)gmail.com) - [BUGFIX] If the xendomain symlink already exists, a clearer error will be produced. (aaron.peschel(a)gmail.com) - [FEATURE] Adding support for ESXi5, and fixing a few minor things (like not having a default kickstart for esxi4) Todos: * The esxi*-ks.cfg files are empty, and need proper kickstart templates * Import bug testing and general kickstart testing (jimi(a)sngx.net) - [FEATURE] Adding basic support for gPXE (jimi(a)sngx.net) - [FEATURE] Add arm as a valid architecture. (chuck.short(a)canonical.com) - [SECURITY] Changes PYTHON_EGG_CACHE to a safer path owned just by the webserver. (chuck.short(a)canonical.com) - [BUGFIX] koan: do not include ks_meta args when obtaining tree When obtaining the tree for Ubuntu machines, ensure that ks_meta args are not passed as part of the tree if they exist. (chuck.short(a)canonical.com) - [FEATURE] koan: Use grub2 for --replace-self instead of grubby The koan option '--replace-self' uses grubby, which relies on grub1, to replace a local installation by installing the new kernel/initrd into grub menu entries. Ubuntu/Debian no longer uses it grub1. This patch adds the ability to use grub2 to add the kernel/initrd downloaded to a menuentry. On reboot, it will boot from the install kernel reinstalling the system. Fixes (LP: #766229) (chuck.short(a)canonical.com) - [BUGFIX] Fix reposync missing env variable for debmirror Fixes missing HOME env variable for debmirror by hardcoding the environment variable to /var/lib/cobbler (chuck.short(a)canonical.com) - [BUGFIX] Fix creation of repo mirror when importing iso. Fixes the creation of a disabled repo mirror when importing ISO's such as the mini.iso that does not contain any mirror/packages. Additionally, really enables 'apt' as possible repository. (chuck.short(a)canonical.com) - [BUGFIX] adding default_template_type to settings.py, caused some issues with templar when the setting was not specified in the /etc/cobbler/settings (jimi(a)sngx.net) - [BUGFIX] fix for following issue: can't save networking options of a system in cobbler web interface. (#8) (jimi(a)sngx.net) - [BUGFIX] Add a new setting to force CLI commands to use the localhost for xmlrpc (chjohnst(a)gmail.com) - [BUGFIX] Don't blow up on broken links under /var/www/cobbler/links (jeffschroeder(a)computer.org) - [SECURITY] Making https the default for the cobbler web GUI. Also modifying the cobbler- web RPM build to require mod_ssl and mod_wsgi (missing wsgi was an oversight, just correcting it now) (jimi(a)sngx.net) - [FEATURE] Adding authn_pam. This also creates a new setting - authn_pam_service, which allows the user to configure which PAM service they want to use for cobblerd. The default is the 'login' service (jimi(a)sngx.net) - [SECURITY] Change in cobbler.spec to modify permissions on webui sessions directory to prevent non-privileged user acccess to the session keys (jimi(a)sngx.net) - [SECURITY] Enabling CSRF protection for the web interface (jimi(a)sngx.net) - [SECURITY] Convert all yaml loads to safe_loads for security/safety reasons. https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/858883 (jimi(a)sngx.net) - [FEATURE] Added the setting 'default_template_type' to the settings file, and created logic to use that in Templar().render(). Also added an option to the same function to pass the template type in as an argument. (jimi(a)sngx.net) - [FEATURE] Initial commit for adding support for other template languages, namely jinja2 in this case (jimi(a)sngx.net) -------------------------------------------------------------------------------- ================================================================================ duply-1.5.6-1.el5 (FEDORA-EPEL-2012-6062) Wrapper for duplicity -------------------------------------------------------------------------------- Update Information: Update to the latest stable version. From the upstream changelog: * commands purge, purge-full have no default value anymore for security reasons; instead max value can be given via cmd line or must be set in profile; else an error is shown. * minor man page modifications -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 5 2012 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.5.6-1 - Updte to 1.5.6. -------------------------------------------------------------------------------- ================================================================================ latex2rtf-2.2.0-2.el5 (FEDORA-EPEL-2012-6077) LaTeX to RTF converter that handles equations, figures, and cross-references -------------------------------------------------------------------------------- Update Information: Update to 2.2.0. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 7 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.2.0-2 - Fix configuration directory location. * Mon Jun 4 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.2.0-1 - Update to 2.2.0. * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lighttpd-1.4.31-1.el5 (FEDORA-EPEL-2012-6072) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2011-4362 by updating to the latest release. It also fixes problems that had been reported with previous releases, such as ssl-related crashes on startup. This update fixes some minor SSL related problems, as well as a connection stall bug. This update fixes some minor SSL related problems, as well as a connection stall bug. This update fixes some minor SSL related problems, as well as a connection stall bug. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 6 2012 Matthias Saou <matthias(a)saou.eu> 1.4.31-1 - Update to 1.4.31 (#828198). * Tue Apr 17 2012 Jon Ciesla <limburgher(a)gmail.com> - 1.4.30-2 - service file patch per BZ 720210. * Mon Mar 26 2012 Matthias Saou <matthias(a)saou.eu> 1.4.30-1 - Update to 1.4.30 (#768903). - Update mod_geoip patch. - Remove upstreamed ssl_no_ecdh patch. * Fri Feb 10 2012 Petr Pisar <ppisar(a)redhat.com> - 1.4.29-3 - Rebuild against PCRE 8.30 * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.29-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Sun Aug 21 2011 Matthias Saou <matthias(a)saou.eu> 1.4.29-1 - Re-update to 1.4.29, including ssl_no_ecdh to fix build (#625737). -------------------------------------------------------------------------------- References: [ 1 ] Bug #758624 - CVE-2011-4362 lighttpd: Out of bounds read due to a signedness error (DoS, crash) https://bugzilla.redhat.com/show_bug.cgi?id=758624 -------------------------------------------------------------------------------- ================================================================================ since-1.1-5.el5 (FEDORA-EPEL-2012-6069) Stateful tail replacement -------------------------------------------------------------------------------- Update Information: This is a new package for EPEL 5. --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 07 Jun '12

07 Jun '12

The following Fedora EPEL 6 Security updates need testing: https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6068/lighttpd-1.4.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6012/asterisk-1.8.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6025/nut-2.6.3-4.e… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5955/socat-1.7.2.1… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5974/drupal7-7.14-… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6041/php-symfony-s… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6039/rt3-3.8.13-1.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5965/python-virtua… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6070/strongswan-4.… https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6071/openstack-nov… The following builds have been pushed to Fedora EPEL 6 updates-testing cobbler-2.2.3-1.el6 duply-1.5.6-1.el6 erlang-egeoip-0-0.3.20111025git45c32ad.el6 erlang-lager-1.0.0-2.el6 erlang-poolboy-0.7.0-2.el6 ladspa-swh-plugins-0.4.15-18.el6 latex2rtf-2.2.0-2.el6 lighttpd-1.4.31-1.el6 moksha-0.8.1-2.el6 openstack-nova-2012.1-9.el6 python-cdb-0.34-3.el6 python-django-dajax-0.8.4-5.el6 python-django-dajaxice-0.2-1.el6 strongswan-4.6.4-1.el6 Details about builds: ================================================================================ cobbler-2.2.3-1.el6 (FEDORA-EPEL-2012-6078) Boot server configurator -------------------------------------------------------------------------------- Update Information: New upstream release - 2.2.3-1 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 5 2012 James Cammarata <jimi(a)sngx.net> 2.2.3-1 - [BUGFIX] add dns to kernel commandline when using static interface (frido(a)enu.zolder.org) - [BUGFIX] issue #196 - repo environment variables bleed into other repos during sync process This patch has reposync cleanup/restore any environment variables that were changed during the process (jimi(a)sngx.net) - BUGFIX quick dirty fix to work around an issue where cobbler would not log in ldap usernames which contain uppercase characters. at line 60 instead of "if user in data", "if user.lower() in data" is used. It would appear the parser puts the usernames in data[] in lowercase, and the comparison fails because "user" does hold capitalizations. (matthiasvandegaer(a)hotmail.com) - [BUGFIX] simplify SELinux check reporting * Remove calls to semanage, policy prevents apps from running that directly (and speeds up check immensely) * Point users at a wiki page which will contain details on ensuring cobbler works with SELinux properly (jimi(a)sngx.net) - [BUGFIX] issue #117 - incorrect permissions on files in /var/lib/cobbler (j-nomura(a)ce.jp.nec.com) - [BUGFIX] issue #183 - update objects mgmt classes field when a mgmt class is renamed (jimi(a)sngx.net) - [BUGFIX] adding some untracked directories and the new augeas lense to the setup.py and cobbler.spec files (jimi(a)sngx.net) - [FEATURE] Added ability to disable grubby --copy-default behavior for distros that may have problems with it (jimi(a)sngx.net) - [SECURITY] Major changes to power commands: * Fence options are now based on /usr/sbin/fence_* - so basically anything the fence agents package provides. * Templates will now be sourced from /etc/cobbler/power/fence_<powertype>.template. These templates are optional, and are only required if you want to do extra options for a given command. - All options for the fence agent command are sent over STDIN. * Support for ipmitool is gone, use fence_ipmilan instead (which uses ipmitool under the hood anyway). This may apply to other power types if they were provided by a fence_ command. * Modified labels for the power options to be more descriptive. (jimi(a)sngx.net) - [BUGFIX] issue #136 - don't allow invalid characters in names when copying objects (jimi(a)sngx.net) - [BUGFIX] issue #168 - change input_string_or_list to use shlex for split This function was using a regular string split, which did not allow quoted or escaped strings to be preserved. (jimi(a)sngx.net) - [BUGFIX] Correct method to process the template file. This Fixes the previous issue and process the template. (charlesrg(a)gmail.com) - [BUGFIX] issue #170 - koan now checks length of drivers list before indexing (daniel(a)defreez.com) - [BUGFIX] Issue #153 - distro delete doesn't remove link from /var/www/cobbler/links Link was being created incorrectly during the import (jimi(a)sngx.net) - [FEATURE] snippets: save/restore boot-device on ppc64 on fedora17 (nacc(a)us.ibm.com) - [BUGFIX] Fixed typo in pre_anamon (brandor5(a)gmail.com) - [BUGFIX] Added use of $http_port to server URL in pre_anamon and post_anamon (brandor5(a)gmail.com) - [BUGFIX] Fixed dnsmasq issue regarding missing dhcp-host entries (cobbler(a)basjes.nl) - [BUGFIX] in buildiso for RedHat based systems. The interface->ip resolution was broken when ksdevice=bootif (default) (jorgen.maas(a)gmail.com) - [BUGFIX] rename failed for distros that did not live under ks_mirror (jimi(a)sngx.net) - [BUGFIX] Partial revert of commit 3c81dd3081 - incorrectly removed the 'extends' template directive, breaking rendering in django (jimi(a)sngx.net) - [BUGFIX] Reverting commit 1d6c53a97, which was breaking spacewalk Changed the web interface stuff to use the existing extended_version() remote call (jimi(a)sngx.net) - [BUGFIX] Minor fix for serializer_pretty_json change, setting indent to 0 was still causing more formatted JSON to be output (jimi(a)sngx.net) - [SECURITY] Adding PrivateTmp=yes to the cobblerd.service file for systemd (jimi(a)sngx.net) - [FEATURE] add a config option to enable pretty JSON output (disabled by default) (aronparsons(a)gmail.com) - [BUGFIX] issue #107 - creating xendomains link for autoboot fails Changing an exception to a printed warning, there's no need to completely bomb out on the process for this (jimi(a)sngx.net) - [BUGFIX] issue #28 - Cobbler drops errors on the floor during a replicate Added additional logging to add_ functions to report an error if the add_item call returns False (jimi(a)sngx.net) - [BUGFIX] add requirement for python-simplejson to koan's package (jimi(a)sngx.net) - [BUGFIX] action_sync: fix sync_dhcp remote calls (nacc(a)us.ibm.com) - [BUGFIX] Add support for KVM paravirt (justin(a)thespies.org) - [BUGFIX] Makefile updates for debian/ubuntu systems (jimi(a)sngx.net) - [BUGFIX] fix infinite netboot cycle with ppc64 systems (nacc(a)us.ibm.com) - [BUGFIX] Don't allow Templar classes to be created without a valid config There are a LOT of places in the templar.py code that use self.settings without checking to make sure a valid config was passed in. This could cause random stack dumps when templating, so it's better to force a config to be passed in. Thankfully, there were only two pieces of code that actually did this, one of which was the tftpd management module which was fixed elsewhere. (jimi(a)sngx.net) - [BUGFIX] instance of Templar() was being created without a config passed in This caused a stack dump when the manage_in_tftpd module tried to access the config settings (jimi(a)sngx.net) - [BUGFIX] Fix for issue #17 - Make cobbler import be more squeaky when it doesn't import anything (jimi(a)sngx.net) - [FEATURE] autoyast_sample: save and restore boot device order (nacc(a)us.ibm.com) - [BUGFIX] Fix for issue #105 - buildiso fails Added a new option for buildiso: --mkisofs-opts, which allows specifying extra options to mkisofs TODO: add input box to web interface for this option (jimi(a)sngx.net) - [BUGFIX] incorrect lower-casing of kickstart paths - regression from issue - [FEATURE] Automatically detect and support bind chroot (orion(a)cora.nwra.com) - [FEATURE] Add yumopts to kickstart repos (orion(a)cora.nwra.com) - [BUGFIX] Fix issue with cobbler system reboot (nacc(a)us.ibm.com) - [BUGFIX] fix stack trace in write_pxe_file if distro==None (smoser(a)brickies.net) - [BUGFIX] Changed findkeys function to be consisten with keep_ssh_host_keys snippet (flaks(a)bnl.gov) - [BUGFIX] Fix for issue #15 - cobbler image command does not recognize --image-type=memdisk (jimi(a)sngx.net) - [BUGFIX] Issue #13 - reposync with --tries > 1 always repeats, even on success The success flag was being set when the reposync ran, but didn't break out of the retry loop - easy fix (jimi(a)sngx.net) - [BUGFIX] Fix for issue #42 - kickstart not found error when path has leading space (jimi(a)sngx.net) - [BUGFIX] Fix for issue #26 - Web Interface: Profile Edit * Added jquery UI stuff * Added javascript to generic_edit template to make all selects in the class "edit" resizeable (jimi(a)sngx.net) - [BUGFIX] Fix for issue #53 - cobbler system add without --profile exits 0, but does nothing (jimi(a)sngx.net) - [BUGFIX] Issue #73 - Broken symlinks on distro rename from web_gui (jimi(a)sngx.net) - regular OS version maintenance (jorgen.maas(a)gmail.com) - [BUGFIX] let koan not overwrite existing initrd+kernel (ug(a)suse.de) - [FEATURE] koan: * Port imagecreate to virt-install (crobinso(a)redhat.com) * Port qcreate to virt-install (crobinso(a)redhat.com) * Port xen creation to virt-install (crobinso(a)redhat.com) - [FEATURE] new snippet allows for certificate-based RHN registration (jim.nachlin(a)gawker.com) - [FEATURE] Have autoyast by default behave more like RHEL, regarding networking etc. (chorn(a)fluxcoil.net) - [BUGFIX] sles patches (chorn(a)fluxcoil.net) - [BUGFIX] Simple fix for issue where memtest entries were not getting created after installing memtest86+ and doing a cobbler sync (rharriso(a)redhat.com) - [BUGFIX] REMOTE_ADDR was not being set in the arguments in calls to CobblerSvc instance causing ip address not to show up in install.log. (jweber(a)cofront.net) - [BUGFIX] add missing import of shutil (aparsons(a)redhat.com) - [BUGFIX] add a sample kickstart file for ESXi (aparsons(a)redhat.com) - [BUGFIX] the ESXi installer allows two nameservers to be defined (aparsons(a)redhat.com) - [BUGFIX] close file descriptors on backgrounded processes to avoid hanging %pre (aparsons(a)redhat.com) - [BUGFIX] rsync copies the repositories with --delete hence deleting everyhting local that isn't on the source server. The createrepo then creates (following the default settings) a cache directory ... which is deleted by the next rsync run. Putting the cache directory in the rsync exclude list avoids this deletion and speeds up running reposync dramatically. (niels(a)basjes.nl) - [BUGFIX] Properly blame SELinux for httpd_can_network_connect type errors on initial setup. (michael.dehaan(a)gmail.com) - fix install=... kernel parameter when importing a SUSE distro (ug(a)suse.de) - [BUGFIX] Force Django to use the system's TIME_ZONE by default. (jorgen.maas(a)gmail.com) - [FEATURE] Separated check for permissions from file existence check. (aaron.peschel(a)gmail.com) - [BUGFIX] If the xendomain symlink already exists, a clearer error will be produced. (aaron.peschel(a)gmail.com) - [FEATURE] Adding support for ESXi5, and fixing a few minor things (like not having a default kickstart for esxi4) Todos: * The esxi*-ks.cfg files are empty, and need proper kickstart templates * Import bug testing and general kickstart testing (jimi(a)sngx.net) - [FEATURE] Adding basic support for gPXE (jimi(a)sngx.net) - [FEATURE] Add arm as a valid architecture. (chuck.short(a)canonical.com) - [SECURITY] Changes PYTHON_EGG_CACHE to a safer path owned just by the webserver. (chuck.short(a)canonical.com) - [BUGFIX] koan: do not include ks_meta args when obtaining tree When obtaining the tree for Ubuntu machines, ensure that ks_meta args are not passed as part of the tree if they exist. (chuck.short(a)canonical.com) - [FEATURE] koan: Use grub2 for --replace-self instead of grubby The koan option '--replace-self' uses grubby, which relies on grub1, to replace a local installation by installing the new kernel/initrd into grub menu entries. Ubuntu/Debian no longer uses it grub1. This patch adds the ability to use grub2 to add the kernel/initrd downloaded to a menuentry. On reboot, it will boot from the install kernel reinstalling the system. Fixes (LP: #766229) (chuck.short(a)canonical.com) - [BUGFIX] Fix reposync missing env variable for debmirror Fixes missing HOME env variable for debmirror by hardcoding the environment variable to /var/lib/cobbler (chuck.short(a)canonical.com) - [BUGFIX] Fix creation of repo mirror when importing iso. Fixes the creation of a disabled repo mirror when importing ISO's such as the mini.iso that does not contain any mirror/packages. Additionally, really enables 'apt' as possible repository. (chuck.short(a)canonical.com) - [BUGFIX] adding default_template_type to settings.py, caused some issues with templar when the setting was not specified in the /etc/cobbler/settings (jimi(a)sngx.net) - [BUGFIX] fix for following issue: can't save networking options of a system in cobbler web interface. (#8) (jimi(a)sngx.net) - [BUGFIX] Add a new setting to force CLI commands to use the localhost for xmlrpc (chjohnst(a)gmail.com) - [BUGFIX] Don't blow up on broken links under /var/www/cobbler/links (jeffschroeder(a)computer.org) - [SECURITY] Making https the default for the cobbler web GUI. Also modifying the cobbler- web RPM build to require mod_ssl and mod_wsgi (missing wsgi was an oversight, just correcting it now) (jimi(a)sngx.net) - [FEATURE] Adding authn_pam. This also creates a new setting - authn_pam_service, which allows the user to configure which PAM service they want to use for cobblerd. The default is the 'login' service (jimi(a)sngx.net) - [SECURITY] Change in cobbler.spec to modify permissions on webui sessions directory to prevent non-privileged user acccess to the session keys (jimi(a)sngx.net) - [SECURITY] Enabling CSRF protection for the web interface (jimi(a)sngx.net) - [SECURITY] Convert all yaml loads to safe_loads for security/safety reasons. https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/858883 (jimi(a)sngx.net) - [FEATURE] Added the setting 'default_template_type' to the settings file, and created logic to use that in Templar().render(). Also added an option to the same function to pass the template type in as an argument. (jimi(a)sngx.net) - [FEATURE] Initial commit for adding support for other template languages, namely jinja2 in this case (jimi(a)sngx.net) -------------------------------------------------------------------------------- ================================================================================ duply-1.5.6-1.el6 (FEDORA-EPEL-2012-6067) Wrapper for duplicity -------------------------------------------------------------------------------- Update Information: Update to the latest stable version. From the upstream changelog: * commands purge, purge-full have no default value anymore for security reasons; instead max value can be given via cmd line or must be set in profile; else an error is shown. * minor man page modifications -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 5 2012 Thomas Moschny <thomas.moschny(a)gmx.de> - 1.5.6-1 - Updte to 1.5.6. -------------------------------------------------------------------------------- ================================================================================ erlang-egeoip-0-0.3.20111025git45c32ad.el6 (FEDORA-EPEL-2012-6061) Erlang IP Geolocation module -------------------------------------------------------------------------------- Update Information: * Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #821845 - Review Request: erlang-egeoip - Erlang IP Geolocation module https://bugzilla.redhat.com/show_bug.cgi?id=821845 -------------------------------------------------------------------------------- ================================================================================ erlang-lager-1.0.0-2.el6 (FEDORA-EPEL-2012-6064) A logging framework for Erlang/OTP -------------------------------------------------------------------------------- Update Information: * Initial package (ver. 1.0.0) -------------------------------------------------------------------------------- References: [ 1 ] Bug #739014 - Review Request: erlang-lager - A logging framework for Erlang/OTP https://bugzilla.redhat.com/show_bug.cgi?id=739014 -------------------------------------------------------------------------------- ================================================================================ erlang-poolboy-0.7.0-2.el6 (FEDORA-EPEL-2012-6066) A hunky Erlang worker pool factory -------------------------------------------------------------------------------- Update Information: * Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #739016 - Review Request: erlang-poolboy - A hunky Erlang worker pool factory https://bugzilla.redhat.com/show_bug.cgi?id=739016 -------------------------------------------------------------------------------- ================================================================================ ladspa-swh-plugins-0.4.15-18.el6 (FEDORA-EPEL-2012-6074) A set of audio plugins for LADSPA -------------------------------------------------------------------------------- Update Information: First EPEL release. -------------------------------------------------------------------------------- References: [ 1 ] Bug #829080 - EL6 support for ladspa-swh-plugins https://bugzilla.redhat.com/show_bug.cgi?id=829080 -------------------------------------------------------------------------------- ================================================================================ latex2rtf-2.2.0-2.el6 (FEDORA-EPEL-2012-6073) LaTeX to RTF converter that handles equations, figures, and cross-references -------------------------------------------------------------------------------- Update Information: Update to 2.2.0. -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 7 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.2.0-2 - Fix configuration directory location. * Mon Jun 4 2012 Jussi Lehtola <jussilehtola(a)fedoraproject.org> - 2.2.0-1 - Update to 2.2.0. * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Feb 7 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lighttpd-1.4.31-1.el6 (FEDORA-EPEL-2012-6068) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2011-4362 by updating to the latest release. It also fixes problems that had been reported with previous releases, such as ssl-related crashes on startup. This update fixes some minor SSL related problems, as well as a connection stall bug. This update fixes some minor SSL related problems, as well as a connection stall bug. This update fixes some minor SSL related problems, as well as a connection stall bug. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 6 2012 Matthias Saou <matthias(a)saou.eu> 1.4.31-1 - Update to 1.4.31 (#828198). * Tue Apr 17 2012 Jon Ciesla <limburgher(a)gmail.com> - 1.4.30-2 - service file patch per BZ 720210. * Mon Mar 26 2012 Matthias Saou <matthias(a)saou.eu> 1.4.30-1 - Update to 1.4.30 (#768903). - Update mod_geoip patch. - Remove upstreamed ssl_no_ecdh patch. * Fri Feb 10 2012 Petr Pisar <ppisar(a)redhat.com> - 1.4.29-3 - Rebuild against PCRE 8.30 * Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.29-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Sun Aug 21 2011 Matthias Saou <matthias(a)saou.eu> 1.4.29-1 - Re-update to 1.4.29, including ssl_no_ecdh to fix build (#625737). -------------------------------------------------------------------------------- References: [ 1 ] Bug #758624 - CVE-2011-4362 lighttpd: Out of bounds read due to a signedness error (DoS, crash) https://bugzilla.redhat.com/show_bug.cgi?id=758624 -------------------------------------------------------------------------------- ================================================================================ moksha-0.8.1-2.el6 (FEDORA-EPEL-2012-6065) A platform for creating real-time web applications -------------------------------------------------------------------------------- Update Information: Keep tests for fedmsg. Remove setuptools requirement of orbited Latest update with no-turbogears -------------------------------------------------------------------------------- References: [ 1 ] Bug #818293 - moksha-0.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=818293 -------------------------------------------------------------------------------- ================================================================================ openstack-nova-2012.1-9.el6 (FEDORA-EPEL-2012-6071) OpenStack Compute (nova) -------------------------------------------------------------------------------- Update Information: - Fix for protocol case handling (CVE-2012-2654) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 6 2012 Pádraig Brady <P(a)draigBrady.com> - 2012.1-9 - Sync up with Essex stable branch, including... - Fix for protocol case handling (#829441, CVE-2012-2654) -------------------------------------------------------------------------------- References: [ 1 ] Bug #829441 - CVE-2012-2654 OpenStack Nova security groups fail to be set correctly [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=829441 -------------------------------------------------------------------------------- ================================================================================ python-cdb-0.34-3.el6 (FEDORA-EPEL-2012-6063) Constant database library adapted as a python extension module -------------------------------------------------------------------------------- Update Information: Initial import -------------------------------------------------------------------------------- ================================================================================ python-django-dajax-0.8.4-5.el6 (FEDORA-EPEL-2012-6079) Library to create asynchronous presentation logic with Django and dajaxice -------------------------------------------------------------------------------- Update Information: dajax is a powerful tool to easily and super-quickly develop asynchronous presentation logic in web applications using python and almost no JS code. It supports up to four of the most popular JS frameworks: Prototype, jQuery, Dojo and mootols. -------------------------------------------------------------------------------- References: [ 1 ] Bug #820845 - Review Request: python-django-dajax - Library to create asynchronous presentation logic with Django and dajaxice https://bugzilla.redhat.com/show_bug.cgi?id=820845 -------------------------------------------------------------------------------- ================================================================================ python-django-dajaxice-0.2-1.el6 (FEDORA-EPEL-2012-6075) Agnostic and easy to use AJAX library for Django -------------------------------------------------------------------------------- Update Information: Easy to use AJAX library for Django, all the presentation logic resides outside the views and doesn't require any JS framework. dajaxice uses the unobtrusive standard-compliant (W3C) XMLHttpRequest 1.0 object. -------------------------------------------------------------------------------- References: [ 1 ] Bug #820841 - Review Request: python-django-dajaxice - Django AJAX library https://bugzilla.redhat.com/show_bug.cgi?id=820841 -------------------------------------------------------------------------------- ================================================================================ strongswan-4.6.4-1.el6 (FEDORA-EPEL-2012-6070) An OpenSource IPsec-based VPN Solution -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. Fix bug 821733 and update to new upstream version -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 1 2012 Pavel Šimerda <pavlix(a)pavlix.net> - 4.6.4-1 - New upstream version (CVE-2012-2388) * Sat May 26 2012 Pavel Šimerda <pavlix(a)pavlix.net> - 4.6.3-2 - Add --enable-nm to configure - Add NetworkManager-devel to BuildRequires - Add NetworkManager-glib-devel to BuildRequires - Add strongswan-NetworkManager package * Sat May 26 2012 Pavel Šimerda <pavlix(a)pavlix.net> - 4.6.3-1 - New version of Strongswan - Support for RFC 3110 DNSKEY (see upstream changelog) - Fix corrupt scriptlets * Fri Mar 30 2012 Pavel Šimerda <pavlix(a)pavlix.net> - 4.6.2-2 - #808612 - strongswan binary renaming side-effect -------------------------------------------------------------------------------- References: [ 1 ] Bug #828362 - CVE-2012-2388 strongswan: authentication bypass due to RSA signature verification flaw [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=828362 [ 2 ] Bug #821733 - Error in PREUN in the rpm https://bugzilla.redhat.com/show_bug.cgi?id=821733 --------------------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel June 2012