epel-devel July 2015

epel-devel@lists.fedoraproject.org

16 participants
65 discussions

About python-pip & virtualenv updates in EPEL

by P J P

Hello, CVE-2013-5123 -> https://bugzilla.redhat.com/show_bug.cgi?id=1066692 -> https://bugzilla.redhat.com/show_bug.cgi?id=1160137#c2 This security issue affects both 'python-pip' & 'python-virtualenv' packages in epel repository. If we update these packages in EPEL-6 to the latest upstream version 13.0.3or the one in F22 12.0.7, that'll fix both these issues. @mhayden(cc'd here) has tested both these packages on the CentOS 6, and it does seem to work quite well with the existing packages. If there is no objection to upgrading the 'python-pip' & 'python-virtualenv' packages in EPEL-6 repositories, to their latest(or F22) versions, I'd like to do that in the coming days. Do you foresee any issues or regressions because of this upgrade? Please let us know if it could cause any trouble. Thank you. --- Regards -P J P http://feedmug.com

8 years, 9 months

1
1
0 / 0

problem with epel mirrors?

by Gary Gatling

I noticed today I cannot yum install any packages from epel 7. I see lots of errors like: http://fedora.westmancom.com/epel/7/x86_64/repodata/6201e922dac4ba1b5b44b...: [Errno 14] HTTP Error 404 - Not Found http://mirror.clarkson.edu/epel/7/x86_64/repodata/6201e922dac4ba1b5b44be2...: [Errno 14] HTTP Error 404 - Not Found Is there a problem with epel 7 and all the mirrors? Or could this be a local problem. This started after I ran yum clean all Thanks,

8 years, 9 months

4
8
0 / 0

Fedora EPEL 5 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 5 Security updates need testing: Age URL 1165 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.... 619 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-11893/libguestfs... 384 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-1626/puppet-2.7.... 233 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3849/sblim-sfcb-... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6775/rubygem-ext... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6836/php-htmLawe... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6773/drupal6-6.3... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6811/drupal7-7.3... The following builds have been pushed to Fedora EPEL 5 updates-testing prosody-0.9.8-3.el5 Details about builds: ================================================================================ prosody-0.9.8-3.el5 (FEDORA-EPEL-2015-7004) Flexible communications server for Jabber/XMPP -------------------------------------------------------------------------------- Update Information: Fixed the wrong logrotate configuration to not use a wildcard Snippet to fix wrongly rotated log files (ignore any output): `/sbin/service prosody reload; for log in /var/log/prosody/*; do if [ ! -s "$log" -o $(du -sb "$log" | awk '{ print $1 }') -lt 100 ]; then rm -f "$log"; fi; done; for log in /var/log/prosody/*-*; do mv -f "$log" "$(echo $log | sed 's/-[0-9]*//2g')"; gzip "$(echo $log | sed 's/-[0-9]*//2g')"; done` -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.8-3 - Fixed the wrong logrotate configuration to not use a wildcard * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --------------------------------------------------------------------------------

8 years, 9 months

1
0
0 / 0

Fedora EPEL 6 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 6 Security updates need testing: Age URL 1165 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.... 230 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-4008/cross-binut... 81 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5742/asterisk-1.... 21 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1501/strongswan-... 17 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6672/php-symfony... 12 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6742/seamonkey-2... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6798/rubygem-ext... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6797/cups-x2go-3... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6822/php-htmLawe... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6828/chicken-4.9... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6757/drupal6-6.3... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6774/drupal7-7.3... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6863/trafficserv... 4 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6928/ansible-1.9... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6949/directfb-1.... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6968/cryptopp-5.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7003/python-pip-... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7007/drupal7-fee... The following builds have been pushed to Fedora EPEL 6 updates-testing drupal7-features-2.6-1.el6 drupal7-feeds-2.0-0.12.alpha9.el6 drupal7-webform-4.9-1.el6 prosody-0.9.8-3.el6 python-ovirt-register-1.0-1.el6 python-pip-7.1.0-1.el6 Details about builds: ================================================================================ drupal7-features-2.6-1.el6 (FEDORA-EPEL-2015-6997) Provides feature management for Drupal -------------------------------------------------------------------------------- Update Information: - Update to 2.6 - Release notes can be found at https://www.drupal.org/node/2511520 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Peter Borsa <peter.borsa(a)gmail.com> - 2.6-1 - Update to 2.6 - Release notes can be found at https://www.drupal.org/node/2511520 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1235478 - drupal7-features-2.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1235478 -------------------------------------------------------------------------------- ================================================================================ drupal7-feeds-2.0-0.12.alpha9.el6 (FEDORA-EPEL-2015-7007) Aggregates RSS/Atom/RDF feeds, imports CSV files and more -------------------------------------------------------------------------------- Update Information: - Update to 2.0-alpha9 - Release notes can be found at https://www.drupal.org/node/2507273 Fix slight problem with versioning Update to upstream alpha8 release for bug fixes, see http://drupal.org/node/1978108 for list of fixed bugs -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Peter Borsa <peter.borsa(a)gmail.com> - 2.0-0.12.alpha9 - Update to 2.0-alpha9 - Release notes can be found at https://www.drupal.org/node/2507273 * Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.0-0.11.alpha8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1232973 - drupal7-feeds-2.0-alpha9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1232973 [ 2 ] Bug #955516 - drupal7-feeds-2.0-alpha8 is available https://bugzilla.redhat.com/show_bug.cgi?id=955516 -------------------------------------------------------------------------------- ================================================================================ drupal7-webform-4.9-1.el6 (FEDORA-EPEL-2015-6999) Webform is the module for making surveys in Drupal -------------------------------------------------------------------------------- Update Information: - Update to 4.9 - Release notes can be found at https://www.drupal.org/node/2495339 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Peter Borsa <peter.borsa(a)gmail.com> 4.9-1 - Update to 4.9 - Release notes can be found at https://www.drupal.org/node/2495339 * Thu Apr 30 2015 Peter Borsa <peter.borsa(a)gmail.com> 4.8-1 - Update to 4.8 - Release notes can be found at https://www.drupal.org/node/2480415 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1217280 - drupal7-webform-4.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=1217280 -------------------------------------------------------------------------------- ================================================================================ prosody-0.9.8-3.el6 (FEDORA-EPEL-2015-7000) Flexible communications server for Jabber/XMPP -------------------------------------------------------------------------------- Update Information: Fixed the wrong logrotate configuration to not use a wildcard Snippet to fix wrongly rotated log files (ignore any output): `/sbin/service prosody reload; for log in /var/log/prosody/*; do if [ ! -s "$log" -o $(du -sb "$log" | awk '{ print $1 }') -lt 100 ]; then rm -f "$log"; fi; done; for log in /var/log/prosody/*-*; do mv -f "$log" "$(echo $log | sed 's/-[0-9]*//2g')"; gzip "$(echo $log | sed 's/-[0-9]*//2g')"; done` -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.8-3 - Fixed the wrong logrotate configuration to not use a wildcard * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-ovirt-register-1.0-1.el6 (FEDORA-EPEL-2015-7001) A python module and tool for registering nodes to oVirt Engine -------------------------------------------------------------------------------- Update Information: ovirt-register tool and module -------------------------------------------------------------------------------- ================================================================================ python-pip-7.1.0-1.el6 (FEDORA-EPEL-2015-7003) A tool for installing and managing Python packages -------------------------------------------------------------------------------- Update Information: Newest version of pip that fixes bunch of security issues and brings new features. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Slavek Kabrda <bkabrda(a)redhat.com> - 7.1.0-1 - Update to 7.1.0 * Tue Jun 30 2015 Ville Skyttä <ville.skytta(a)iki.fi> - 7.0.3-3 - Install bash completion - Ship LICENSE.txt as %license where available * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 7.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Thu Jun 4 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 7.0.3-1 - Update to 7.0.3 * Fri Mar 6 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 6.0.8-1 - Update to 6.0.8 * Thu Dec 18 2014 Slavek Kabrda <bkabrda(a)redhat.com> - 1.5.6-5 - Only enable tests on Fedora. * Mon Dec 1 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.6-4 - Add tests - Add patch skipping tests requiring Internet access * Tue Nov 18 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.6-3 - Added patch for local dos with predictable temp dictionary names (http://seclists.org/oss-sec/2014/q4/655) * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun May 25 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.6-1 - Update to 1.5.6 * Fri Apr 25 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.4-4 - Rebuild as wheel for Python 3.4 * Thu Apr 24 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.4-3 - Disable build_wheel * Thu Apr 24 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.4-2 - Rebuild as wheel for Python 3.4 * Mon Apr 7 2014 Matej Stuchlik <mstuchli(a)redhat.com> - 1.5.4-1 - Updated to 1.5.4 * Mon Oct 14 2013 Tim Flink <tflink(a)fedoraproject.org> - 1.4.1-1 - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release - Updated version to 1.4.1 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.3.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066692 - CVE-2013-5123 python-pip: insecure software download with mirroring support https://bugzilla.redhat.com/show_bug.cgi?id=1066692 [ 2 ] Bug #1224999 - CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125 https://bugzilla.redhat.com/show_bug.cgi?id=1224999 --------------------------------------------------------------------------------

8 years, 9 months

1
0
0 / 0

Fedora EPEL 7 updates-testing report

by updates＠fedoraproject.org

The following Fedora EPEL 7 Security updates need testing: Age URL 230 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binut... 114 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1087/dokuwiki-0-... 97 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1421/quassel-0.1... 35 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6262/cabal-insta... 21 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1545/strongswan-... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6782/cups-x2go-3... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6829/php-htmLawe... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6813/chicken-4.9... 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6835/drupal7-7.3... 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6862/trafficserv... 3 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6942/openvas-gsa... 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6975/cryptopp-5.... 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-7005/python-pip-... The following builds have been pushed to Fedora EPEL 7 updates-testing prosody-0.9.8-3.el7 python-jenkins-0.4.7-1.el7 python-ovirt-register-1.0-1.el7 python-pip-7.1.0-1.el7 Details about builds: ================================================================================ prosody-0.9.8-3.el7 (FEDORA-EPEL-2015-7002) Flexible communications server for Jabber/XMPP -------------------------------------------------------------------------------- Update Information: Fixed the wrong logrotate configuration to not use a wildcard Snippet to fix wrongly rotated log files (ignore any output): `systemctl reload prosody.service; for log in /var/log/prosody/*; do if [ ! -s "$log" -o $(du -sb "$log" | awk '{ print $1 }') -lt 100 ]; then rm -f "$log"; fi; done; for log in /var/log/prosody/*-*; do mv -f "$log" "$(echo $log | sed 's/-[0-9]*//2g')"; gzip "$(echo $log | sed 's/-[0-9]*//2g')"; done` -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Robert Scheck <robert(a)fedoraproject.org> 0.9.8-3 - Fixed the wrong logrotate configuration to not use a wildcard * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-jenkins-0.4.7-1.el7 (FEDORA-EPEL-2015-6998) Python bindings for the remote Jenkins API -------------------------------------------------------------------------------- Update Information: Update to 0.4.7 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 30 2015 Scott K Logan <logans(a)cottsay.net> - 0.4.7-1 - Update to 0.4.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1226093 - python-jenkins-0.4.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1226093 -------------------------------------------------------------------------------- ================================================================================ python-ovirt-register-1.0-1.el7 (FEDORA-EPEL-2015-7006) A python module and tool for registering nodes to oVirt Engine -------------------------------------------------------------------------------- Update Information: python-ovirt-register-1.0-1 -------------------------------------------------------------------------------- ================================================================================ python-pip-7.1.0-1.el7 (FEDORA-EPEL-2015-7005) A tool for installing and managing Python packages -------------------------------------------------------------------------------- Update Information: Newest version of pip that fixes bunch of security issues and brings new features. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 1 2015 Slavek Kabrda <bkabrda(a)redhat.com> - 7.1.0-1 - Update to 7.1.0 * Tue Jun 30 2015 Ville Skyttä <ville.skytta(a)iki.fi> - 7.0.3-3 - Install bash completion - Ship LICENSE.txt as %license where available * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 7.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Thu Jun 4 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 7.0.3-1 - Update to 7.0.3 * Fri Mar 6 2015 Matej Stuchlik <mstuchli(a)redhat.com> - 6.0.8-1 - Update to 6.0.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1066692 - CVE-2013-5123 python-pip: insecure software download with mirroring support https://bugzilla.redhat.com/show_bug.cgi?id=1066692 [ 2 ] Bug #1224999 - CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125 https://bugzilla.redhat.com/show_bug.cgi?id=1224999 --------------------------------------------------------------------------------

8 years, 9 months

1
0
0 / 0

← Newer
1
2
3
4
5
6
7
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel July 2015