Dear all,
You are kindly invited to the meeting:
EPSCO meeting on 2016-08-24 from 18:00:00 to 19:00:00 GMT
At fedora-meeting(a)irc.freenode.net
The meeting will be about:
Extra Packages for Enterprise Linux Steering COmmittee (EPSCO) has a weekly meeting to go over concerns and problems in the EPEL distribution.
You are kindly invited to come and meet with us
Source: https://apps.fedoraproject.org/calendar/meeting/4639/
I doubt anyone is using but as a heads up, I am planning on retiring
pam_script from epel5.
If you are using the epel5 package and would like to maintain it just
apply for ACLs and I'll hand them over.
JT
Hi,
As previously agreed on epel-devel and by the EPEL Steering Committee, I have
pushed Nginx 1.10.x packages to epel-testing on EL7, EL6, and EL5. This
resolves numerous security flaws that were too difficult to backport to
ancient, unmaintained versions of Nginx.
These updates will sit in epel-testing for a significant period of time
(probably ~8 weeks) to allow adequate notice and time for testing. I will send
another announcement a week before pushing to stable.
Please see upstream release notes for a complete list of new features, bug
fixes, and changes: http://nginx.org/en/CHANGES-1.10
One notable feature is HTTP/2 (except EL5, where OpenSSL is too old).
Nginx gained support for dynamic modules. As part of this update, dynamic
modules have been split into subpackages. For the time being these are hard
dependencies to aid the upgrade path. When you install nginx, all of these
modules are installed and enabled by default:
- nginx-mod-http-geoip
- nginx-mod-http-image-filter
- nginx-mod-http-perl
- nginx-mod-http-xslt-filter
- nginx-mod-mail
- nginx-mod-stream
Please do test thoroughly, give positive/negative karma, and open bug reports.
I will refrain from pushing anything to stable until there has been sufficient
testing from several people.
You should review your configuration files in /etc/nginx to determine if there
are any incompatibilities. Below is a summary of the main incompatible changes.
Some nginx directives have been changed or removed, so you may need to modify
your configuration.
Sections relevant to EL7/EL6/EL5:
- Changes with nginx 1.10.x
- Changes with nginx 1.8.x
Sections also relevant to EL6/EL5:
- Changes with nginx 1.4.x
- Changes with nginx 1.2.x
Sections also relevant to EL5:
- Changes with nginx 1.0.x
Changes with nginx 1.10.x
*) Change: non-idempotent requests (POST, LOCK, PATCH) are no longer
passed to the next server by default if a request has been sent to a
backend; the "non_idempotent" parameter of the "proxy_next_upstream"
directive explicitly allows retrying such requests.
*) Change: now the "output_buffers" directive uses two buffers by
default.
*) Change: now nginx limits subrequests recursion, not simultaneous
subrequests.
*) Change: now nginx checks the whole cache key when returning a
response from cache.
Thanks to Gena Makhomed and Sergey Brester.
*) Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer"
directives of the stream module are replaced with the
"proxy_buffer_size" directive.
*) Change: duplicate "http", "mail", and "stream" blocks are now
disallowed.
*) Change: now SSLv3 protocol is disabled by default.
*) Change: some long deprecated directives are not supported anymore.
*) Change: obsolete aio and rtsig event methods have been removed.
Changes with nginx 1.8.x
*) Change: the "sendfile" parameter of the "aio" directive is
deprecated; now nginx automatically uses AIO to pre-load data for
sendfile if both "aio" and "sendfile" directives are used.
*) Change: now the "If-Modified-Since", "If-Range", etc. client request
header lines are passed to a backend while caching if nginx knows in
advance that the response will not be cached (e.g., when using
proxy_cache_min_uses).
*) Change: now after proxy_cache_lock_timeout nginx sends a request to a
backend with caching disabled; the new directives
"proxy_cache_lock_age", "fastcgi_cache_lock_age",
"scgi_cache_lock_age", and "uwsgi_cache_lock_age" specify a time
after which the lock will be released and another attempt to cache a
response will be made.
*) Change: the "log_format" directive can now be used only at http
level.
*) Change: now nginx takes into account the "Vary" header line in a
backend response while caching.
*) Change: the deprecated "limit_zone" directive is not supported
anymore.
*) Change: now the "stub_status" directive does not require a parameter.
*) Change: URI escaping now uses uppercase hexadecimal digits.
Thanks to Piotr Sikora.
Changes with nginx 1.6.x
*) Change: improved hash table handling; the default values of the
"variables_hash_max_size" and "types_hash_bucket_size" were changed
to 1024 and 64 respectively.
*) Change: now nginx expects escaped URIs in "X-Accel-Redirect" headers.
*) Change: a logging level of auth_basic errors about no user/password
provided has been lowered from "error" to "info".
*) Change: now nginx assumes HTTP/1.0 by default if it is not able to
detect protocol reliably.
*) Change: the "js" extension MIME type has been changed to
"application/javascript"; default value of the "charset_types"
directive was changed accordingly.
*) Change: now the "image_filter" directive with the "size" parameter
returns responses with the "application/json" MIME type.
*) Change in internal API: now u->length defaults to -1 if working with
backends in unbuffered mode.
*) Change: now after receiving an incomplete response from a backend
server nginx tries to send an available part of the response to a
client, and then closes client connection.
Changes with nginx 1.4.x
*) Change: opening and closing a connection without sending any data in
it is no longer logged to access_log with error code 400.
*) Change: a compiler with name "cc" is now used by default.
*) Change: domain names specified in configuration file are now resolved
to IPv6 addresses as well as IPv4 ones.
*) Change: now if the "include" directive with mask is used on Unix
systems, included files are sorted in alphabetical order.
*) Change: the "add_header" directive adds headers to 201 responses.
*) Change: the ngx_http_mp4_module module no longer skips tracks in
formats other than H.264 and AAC.
*) Change: the "ipv6only" parameter is now turned on by default for
listening IPv6 sockets.
*) Change: the "single" parameter of the "keepalive" directive is now
ignored.
*) Change: SSL compression is now disabled when using all versions of
OpenSSL, including ones prior to 1.0.0.
Changes with nginx 1.2.x
*) Change: now if the "include" directive with mask is used on Unix
systems, included files are sorted in alphabetical order.
*) Change: the "add_header" directive adds headers to 201 responses.
*) Change: the "single" parameter of the "keepalive" directive is now
ignored.
*) Change: SSL compression is now disabled when using all versions of
OpenSSL, including ones prior to 1.0.0.
*) Change: keepalive connections are no longer disabled for Safari by
default.
*) Change: the simultaneous subrequest limit has been raised to 200.
*) Change: a "proxy_pass" directive without URI part now uses changed
URI after redirection with the "error_page" directive.
Thanks to Lanshun Zhou.
*) Change: now double quotes are encoded in an "echo" SSI-command
output.
Thanks to Zaur Abasmirzoev.
*) Change: the ngx_http_limit_zone_module was renamed to the
ngx_http_limit_conn_module.
*) Change: the "limit_zone" directive was superseded by the
"limit_conn_zone" directive with a new syntax.
*) Change in internal API: now module context data are cleared while
internal redirect to named location.
Requested by Yichun Zhang.
*) Change: if a server in an upstream failed, only one request will be
sent to it after fail_timeout; the server will be considered alive if
it will successfully respond to the request.
*) Change: now the 0x7F-0x1F characters are escaped as \xXX in an
access_log.
*) Change: now if total size of all ranges is greater than source
response size, then nginx disables ranges and returns just the source
response.
*) Change: now cache loader processes either as many files as specified
by "loader_files" parameter or works no longer than time specified by
the "loader_threshold" parameter during each iteration.
*) Change: now SIGWINCH signal works only in daemon mode.
Changes with nginx 1.0.x
*) Change: now double quotes are encoded in an "echo" SSI-command
output.
Thanks to Zaur Abasmirzoev.
*) Change: now the 0x7F-0x1F characters are escaped as \xXX in an
access_log.
*) Change: now SIGWINCH signal works only in daemon mode.
*) Change: now if total size of all ranges is greater than source
response size, then nginx disables ranges and returns just the source
response.
*) Change: now default SSL ciphers are "HIGH:!aNULL:!MD5".
Thanks to Rob Stradling.
*) Change: now regular expressions case sensitivity in the "map"
directive is given by prefixes "~" or "~*".
*) Change: now the "split_clients" directive uses MurmurHash2 algorithm
because of better distribution.
Thanks to Oleg Mamontov.
*) Change: now long strings starting with zero are not considered as
false values.
Thanks to Maxim Dounin.
*) Change: now nginx uses a default listen backlog value 511 on Linux.
*) Change: now nginx uses a default listen backlog value -1 on Linux.
Thanks to Andrei Nigmatulin.
*) Change: the "secure_link_expires" directive has been canceled.
*) Change: a logging level of resolver errors has been lowered from
"alert" to "error".
Kind regards,
--
Jamie Nguyen
The following Fedora EPEL 7 Security updates need testing:
Age URL
531 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
294 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414 php-PHPMailer-5.2.16-2.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2c0e0e64b2 python34-3.4.3-7.el7
11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4b8dd3488d knot-1.6.8-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f0e09b5124 borgbackup-1.0.7-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
borgbackup-1.0.7-1.el7
gnome-shell-extension-openweather-1-0.21.20160821gita44cb9e.el7
gnustep-make-2.6.8-1.el7
tor-0.2.8.6-2.el7
Details about builds:
================================================================================
borgbackup-1.0.7-1.el7 (FEDORA-EPEL-2016-f0e09b5124)
A deduplicating backup program with compression and authenticated encryption
--------------------------------------------------------------------------------
Update Information:
security fix with borg serve and restrict-to-path (BZ#1368412) and new release
1.0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1368412 - borgbackup 1.0.7 is available (contains important security fix)
https://bugzilla.redhat.com/show_bug.cgi?id=1368412
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-openweather-1-0.21.20160821gita44cb9e.el7 (FEDORA-EPEL-2016-4ffa2a2505)
Display weather information from many locations in the world
--------------------------------------------------------------------------------
Update Information:
Fix glibc error-message, when disabling the extension. Fix minor issues in
preferences-dialog. Add/update translations.
--------------------------------------------------------------------------------
================================================================================
gnustep-make-2.6.8-1.el7 (FEDORA-EPEL-2016-84dfc8c9ef)
GNUstep makefile package
--------------------------------------------------------------------------------
Update Information:
- Update to 2.6.8 - Remove executable bit from macros.gnustep
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1352686 - remove executable bit from macros.gnustep
https://bugzilla.redhat.com/show_bug.cgi?id=1352686
[ 2 ] Bug #1221993 - gnustep-make-2.6.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1221993
--------------------------------------------------------------------------------
================================================================================
tor-0.2.8.6-2.el7 (FEDORA-EPEL-2016-386ffd0d61)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to 0.2.8.6
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
531 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
293 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
56 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e0c08a1414 php-PHPMailer-5.2.16-2.el7
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2c0e0e64b2 python34-3.4.3-7.el7
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-4b8dd3488d knot-1.6.8-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cmap-resources-2015.12.05-2.el7
drush-8.1.3-3.el7
fontopia-1.7-1.el7
python-gfm-0.1.3-2.el7
Details about builds:
================================================================================
cmap-resources-2015.12.05-2.el7 (FEDORA-EPEL-2016-085ef35ab8)
CMap Resources for Adobe's public character collections
--------------------------------------------------------------------------------
Update Information:
CMap Resources for Adobe's public character collections
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1350260 - Review Request: cmap-resources - CMap Resources for Adobe's public character collections
https://bugzilla.redhat.com/show_bug.cgi?id=1350260
--------------------------------------------------------------------------------
================================================================================
drush-8.1.3-3.el7 (FEDORA-EPEL-2016-5e105689a9)
Command line shell and scripting interface for Drupal
--------------------------------------------------------------------------------
Update Information:
**MAJOR UPDATE** `6.7.0` => `8.1.3` See https://github.com/drush-
ops/drush/releases for change information
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1357097 - drush-8.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1357097
--------------------------------------------------------------------------------
================================================================================
fontopia-1.7-1.el7 (FEDORA-EPEL-2016-ce29dda6f6)
The console font editor
--------------------------------------------------------------------------------
Update Information:
Improved BDF support (needs more testing)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1361910 - fontopia abends trashing keyboard
https://bugzilla.redhat.com/show_bug.cgi?id=1361910
[ 2 ] Bug #1363855 - font version change causes fontopia abend and trashes keyboard
https://bugzilla.redhat.com/show_bug.cgi?id=1363855
--------------------------------------------------------------------------------
================================================================================
python-gfm-0.1.3-2.el7 (FEDORA-EPEL-2016-84dce5e362)
Github-Flavored Markdown for Python-Markdown
--------------------------------------------------------------------------------
Update Information:
#### New package: ##### This is an implementation of GitHub-Flavored Markdown
written as an extension to the Python Markdown library. It aims for maximal
compatibility with GitHub's rendering.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1366277 - python-gfm - Github-Flavored Markdown for Python-Markdown
https://bugzilla.redhat.com/show_bug.cgi?id=1366277
--------------------------------------------------------------------------------
On 20/08/16 09:19, opensource(a)till.name wrote:
> The following packages are orphaned and will be retired when they
> are orphaned for six weeks, unless someone adopts them. If you know for sure
> that the package should be retired, please do so now with a proper reason:
> https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
>
> Note: If you received this mail directly you (co)maintain one of the affected
> packages or a package that depends on one. Please adopt the affected package or
> retire your depending package to avoid broken dependencies, otherwise your
> package will be retired when the affected package gets retired.
>
> Package (co)maintainers Status Change
> ===========================================================================
> gogoc orphan, jorti 4 weeks ago
I'd like to take this. I made my own gogoc package for Fedora 13-16, and
its predecessor freenet6 for F9-13. [1] I'll take it for epel6 & epel7
too, and perhaps bring it to epel5 as well.
I would need a mentor who can spend some time walking me through the
current package maintenance process, though. I tried rescuing a package
from the orphanage once before, and never actually produced any
deliverables beyond a scratch build.
[1] http://download.GhiaPet.net/pub/ghiapet/linux/
--
J. Randall Owens | http://www.GhiaPet.net/
GhiaPix Photography | http://GhiaPix.photography/