epel-devel May 2020

epel-devel@lists.fedoraproject.org

27 participants
107 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 16 May '20

16 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 641 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 383 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 381 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 90 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 30 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-76347da426 seamonkey-2.53.2-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ec788c8a86 viewvc-1.1.28-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c9c5ded31b pure-ftpd-1.0.47-4.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c sleuthkit-4.9.0-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf chromium-81.0.4044.138-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59 perl-Mojolicious-7.94-3.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ae83e43288 log4net-2.0.8-10.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-567eda5296 exim-4.93-3.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing coturn-4.5.1.2-1.el7 gjots2-3.1.6-2.el7 json-c12-0.12.1-4.el7 librsync-2.3.0-1.el7 python-regex-2020.5.14-1.el7 rkhunter-1.4.6-2.el7 Details about builds: ================================================================================ coturn-4.5.1.2-1.el7 (FEDORA-EPEL-2020-ebecd0eb91) TURN/STUN & ICE Server -------------------------------------------------------------------------------- Update Information: Coturn 4.5.1.2 ============== - merge regression fix: * Do not display empty CLI passwd alert if CLI is not enabled - merge PR #359: * Remove `turn_free_simple()` * Remove `turn_malloc()` * Remove `turn_realloc()` * Remove `turn_free()` * Remove `turn_calloc()` * Remove `turn_strdup()` * Remove `SSL_NEW()` and `SSL_FREE()` * Remove pointer debugging machinery * Remove `ns_bzero()`, `ns_bcopy()`, and `ns_bcmp()` * Remove `[su]{08,16,32,64}bits` type defines - merge PR #327 * Strip white-spaces from config file lines end - merge PR #386 * fix the webadmin ip permission add/delete sql injection - merge PR #390 * fix mongo driver crash when invalid connection string is used - merge PR #392 enhanced fread return length check - merge PR #367 disconnect database gracefully - merge PR #382 * Using `SSL_get_version` method for BoringSSL compatibility * Now we put in `turn_session_info->tls_method` the real TLS version. Earlier we put UNKNOWN in this field if it was a TLS protocol that was not defined supportel TLS protocol during compile time. - merge PR #276 Add systemd service example - merge PR #284 Add bandwidth usage reporting packet/bandwidth usage by peers - merge PR #381 Modifying configure to enable compile with private libraries - merge PR #455 Typo corrected - merge PR #417 Append only to log files rather to override them - merge PR #442 Updated incorrect string length check for 'ssh' - merge PR #449 Fix Dockerfile for latest Debian - http server NULL dereference * Reported (by quarkslab.com, cisco/talos) * CVE-2020-6061 / TALOS-2020-0984 - http server out of bound read * Reported (by quarkslab.com, cisco/talos) * CVE-2020-6061 / TALOS-2020-0984 - merge PR #472 STUN input validation - merge PR #398 FIPS - merge PR #478 prod - merge PR #463 fix typos and grammar - update travis config ubuntu/mac images - merge PR #466 added null check for second char - merge PR #470 compiler warning fixes - merge PR #475 Update `README.docker` - merge PR #471 Fix a memory leak when an SHATYPE isn't supported - merge PR #488 Fix typos about `INSTALL` filenames - fix compiler warning comparison between signed and unsigned integer expressions - fix compiler warning string truncation - change Diffie Hellman default key length from 1066 to 2066 - merge PR #522 drop of supplementary group IDs - merge PR #514 Unify spelling of Coturn - merge PR#506 Rename "prod" config option to "no-software- attribute" - merge PR #519 fix config extension in `README.docker` - merge PR #516 change sql data dir in `docker-compose-all.yml` - merge PR #513 remove trailing spaces from `README`s - merge PR #525 add flags to disable periodic use of dynamic tables -------------------------------------------------------------------------------- ChangeLog: * Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> - 4.5.1.2-1 - Update to 4.5.1.2 -------------------------------------------------------------------------------- ================================================================================ gjots2-3.1.6-2.el7 (FEDORA-EPEL-2020-239a92e692) A hierarchical note jotter - organize your ideas, notes, facts in a tree -------------------------------------------------------------------------------- Update Information: unretire package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1823599 - Review Request: gjots2 - A heirarchical note jotter. Organise your ideas, notes, facts in a tree https://bugzilla.redhat.com/show_bug.cgi?id=1823599 -------------------------------------------------------------------------------- ================================================================================ json-c12-0.12.1-4.el7 (FEDORA-EPEL-2020-134c471656) JSON implementation in C (0.12 compatibility package) -------------------------------------------------------------------------------- Update Information: - Fix CVE-2020-12762. - Drop the unneeded `%pretrans` scriptlet. -------------------------------------------------------------------------------- ChangeLog: * Sat May 16 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-4 - Drop the unneeded %pretrans scriptlet * Fri May 15 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-3 - Fix CVE-2020-12762 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1835253 - CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file https://bugzilla.redhat.com/show_bug.cgi?id=1835253 -------------------------------------------------------------------------------- ================================================================================ librsync-2.3.0-1.el7 (FEDORA-EPEL-2020-5bd056a025) Rsync remote-delta algorithm library -------------------------------------------------------------------------------- Update Information: librsync 2.3.0 ============== * Bump minor version from 2.2.1 to 2.3.0 to reflect additional `rs_sig_args()` and `strong_len=-1` support. * Add public `rs_sig_args()` function for getting the recommend signature args from the file size. Added support to rdiff for `--sum-size=-1` to indicate "use minimum size safe against random block collisions". Added warning output for sum-sizes that are too small to be safe. Fixed possible rdiff bug affecting popt parsing on non-little-endian platforms. * Fixed yet more compiler warnings for various platforms/compilers. * Improved cmake popt handling to find popt dependencies using PkgConfig. * Tidied internal code and improved tests for `netint.[ch]`, `tube.c`, and `hashtable.h`. * Improved C99 compatibility. Add `-std=c99 -pedantic` to `CMAKE_C_FLAGS` for gcc and clang. Fix all C99 warnings by making all code C99 compliant. Tidy all CMake checks, #cmakedefines, and #includes. Fix 64bit support for mdfour checksums. * Usage clarified in rdiff (1) man page. librsync 2.2.1 ============== * Fix #176 hangs calculating deltas for files larger than 4GB. librsync 2.2.0 ============== * Bump minor version from 2.1.0 to 2.2.0 to reflect additional RabinKarp rollsum support. * Fix MSVC builds by adding missing `LIBRSYNC_EXPORT` to variables in `librsync.h`, add `-DLIBRSYNC_STATIC_DEFINE` to the sumset_test target, and correctly install `.dll` files in the bin directory. * Add RabinKarp rollsum support and make it the default. RabinKarp is a much better rolling hash, which reduces the risk of hash collision corruption and speeds up delta calculations. The rdiff cmd gets a new `-R (rollsum|rabinkarp)` argument with the default being `rabinkarp`, Use `-R rollsum` to generate backwards-compatible signatures. * Use single-byte literal commands for small inserts in deltas. This makes each small insert use 1 less byte in deltas. * Fix multiple warnings (cross-)compiling for windows. * Change `rs_file_size()` to report -1 instead of 0 for unknown file sizes (not a regular file). * Add cmake `BUILD_SHARED_LIBS` option for static library support. `BUILD_SHARED_LIBS` defaults to `ON`, and can be set to `OFF` using `ccmake .` to build librsync as a static library. * Fix compile errors and add `.gitignore` entries for MSVS 2019. Fixes `hashtable.h` to be C99 compliant. librsync 2.1.0 ============== * Bump minor version from 2.0.3 to 2.1.0 to reflect additions to `librsync.h`. * Fix exporting of private symbols from librsync library. Add export of useful large file functions `rs_file_open()`, `rs_file_close()`, and `rs_file_size()` to `librsync.h`. Add export of `rs_signature_log_stats()` to log signature hashtable hit/miss stats. Improve rdiff error output. * Updated release process to include stable tarballs. * Remove redundant and broken `--paranoia` argument from rdiff. * Fix memory leak of `rs_signature_t->block_sigs` when freeing signatures. * Document delta file format. * Fix up doxygen comments. -------------------------------------------------------------------------------- ChangeLog: * Sat May 16 2020 Robert Scheck <robert(a)fedoraproject.org> 2.3.0-1 - Upgrade to 2.3.0 * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-regex-2020.5.14-1.el7 (FEDORA-EPEL-2020-4cb6f7796b) Alternative regular expression module, to replace re -------------------------------------------------------------------------------- Update Information: Update to 2020.5.14. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.5.14-1 - Update to 2020.5.14. -------------------------------------------------------------------------------- ================================================================================ rkhunter-1.4.6-2.el7 (FEDORA-EPEL-2020-eee1e0c90b) A host-based tool to scan for rootkits, backdoors and local exploits -------------------------------------------------------------------------------- Update Information: Exclude podman /dev/shm files from checks. -------------------------------------------------------------------------------- ChangeLog: * Sat May 16 2020 Kevin Fenzi <kevin(a)scrye.com> - 1.4.6-2 - Add allow for podman's /dev/shm files (fixes bug #1828698 ) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1828698 - Suspicious file types found in /dev: /dev/shm/libpod_lock https://bugzilla.redhat.com/show_bug.cgi?id=1828698 --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 16 May '20

16 May '20

The following Fedora EPEL 6 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1be509a6b3 viewvc-1.1.28-1.el6 The following builds have been pushed to Fedora EPEL 6 updates-testing exim-4.92.3-2.el6 json-c12-0.12.1-3.el6 Details about builds: ================================================================================ exim-4.92.3-2.el6 (FEDORA-EPEL-2020-db3d7a1399) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is an update fixing out-of-bounds read in the SPA authenticator. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.92.3-2 - Fixed out-of-bounds read in the SPA authenticator Resolves: CVE-2020-12783 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c https://bugzilla.redhat.com/show_bug.cgi?id=1836362 -------------------------------------------------------------------------------- ================================================================================ json-c12-0.12.1-3.el6 (FEDORA-EPEL-2020-d5bbc97415) JSON implementation in C (0.12 compatibility package) -------------------------------------------------------------------------------- Update Information: - Fix CVE-2020-12762. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-3 - Fix CVE-2020-12762 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1835253 - CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file https://bugzilla.redhat.com/show_bug.cgi?id=1835253 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 16 May '20

16 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 640 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 382 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 380 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 89 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 29 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-76347da426 seamonkey-2.53.2-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ec788c8a86 viewvc-1.1.28-1.el7 8 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c9c5ded31b pure-ftpd-1.0.47-4.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c sleuthkit-4.9.0-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf chromium-81.0.4044.138-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59 perl-Mojolicious-7.94-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-235a51a239 clamav-0.102.3-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing exim-4.93-3.el7 json-c12-0.12.1-3.el7 log4net-2.0.8-10.el7 Details about builds: ================================================================================ exim-4.93-3.el7 (FEDORA-EPEL-2020-567eda5296) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is an update fixing out-of-bounds read in the SPA authenticator. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3 - Fixed out-of-bounds read in the SPA authenticator Resolves: CVE-2020-12783 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c https://bugzilla.redhat.com/show_bug.cgi?id=1836362 -------------------------------------------------------------------------------- ================================================================================ json-c12-0.12.1-3.el7 (FEDORA-EPEL-2020-134c471656) JSON implementation in C (0.12 compatibility package) -------------------------------------------------------------------------------- Update Information: - Fix CVE-2020-12762. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.12.1-3 - Fix CVE-2020-12762 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1835253 - CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file https://bugzilla.redhat.com/show_bug.cgi?id=1835253 -------------------------------------------------------------------------------- ================================================================================ log4net-2.0.8-10.el7 (FEDORA-EPEL-2020-ae83e43288) A .NET framework for logging -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2018-1285 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10 - apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.8-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Aug 21 2019 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-8 - Rebuilt with new mono package so that the Provides is fixed again - don't require nant for building -------------------------------------------------------------------------------- References: [ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users https://bugzilla.redhat.com/show_bug.cgi?id=1835982 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 16 May '20

16 May '20

The following Fedora EPEL 8 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f seamonkey-2.53.2-1.el8 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3 pure-ftpd-1.0.49-4.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe chromium-81.0.4044.138-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072 perl-Mojolicious-8.42-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-765ceaa306 clamav-0.102.3-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing exim-4.93-3.el8 log4net-2.0.8-10.el8 supervisor-4.2.0-1.el8 Details about builds: ================================================================================ exim-4.93-3.el8 (FEDORA-EPEL-2020-2056b1c4a9) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is an update fixing out-of-bounds read in the SPA authenticator. -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.93-3 - Fixed out-of-bounds read in the SPA authenticator Resolves: CVE-2020-12783 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1836362 - CVE-2020-12783 exim: out-of-bounds read in the SPA authenticator can lead to SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c https://bugzilla.redhat.com/show_bug.cgi?id=1836362 -------------------------------------------------------------------------------- ================================================================================ log4net-2.0.8-10.el8 (FEDORA-EPEL-2020-30aba92944) A .NET framework for logging -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2018-1285 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Timotheus Pokorra <timotheus.pokorra(a)solidcharity.com> - 2.0.8-10 - apply security fix for xml configurator: [CVE-2018-1285] XXE vulnerability in Apache log4net -------------------------------------------------------------------------------- References: [ 1 ] Bug #1835982 - CVE-2018-1285 log4net: XXE in applications that accept arbitrary configuration files from users https://bugzilla.redhat.com/show_bug.cgi?id=1835982 -------------------------------------------------------------------------------- ================================================================================ supervisor-4.2.0-1.el8 (FEDORA-EPEL-2020-47bcd56bcf) A System for Allowing the Control of Process State on UNIX -------------------------------------------------------------------------------- Update Information: Upgrade to 4.2.0 version; packaging cleanups to align with current Fedora Packaging Guidelines -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2020 Francisco Javier Tsao Sant��n <tsao(a)gpul.org> - 4.2.0-1 - Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13(a)gmail.com> - Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Sant��n <tsao(a)gpul.org> --------------------------------------------------------------------------------

1 0

EPEL bugzilla / component listing limited
by Leon Fauster 15 May '20

15 May '20

I wanted to request a new EPEL package and noticed that it is not possible to select the package name (fedora) in the component field in the bug report form (Product: Fedora EPEL). Is this enforced or is this a regression? I remember making such requests without problem. The targeted package in request is: xdg-dbus-proxy Any ideas? -- Thanks, Leon

2 2

Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Michel Alexandre Salim 15 May '20

15 May '20

On 5/14/20 4:59 PM, Nico Kadel-Garcia wrote: > It's an ongoing problem. EPEL's decision to show only the most recent > versions of RPMs, and to trim old RPMs out, is a destabilizing problem > and why I make hrdlinked snapshots of EPEL using "rsnapshot" for > internal access to old packages. So that's a problem we have with Fedora (e.g. hardware regressions preventing some hardware from being in the latest kernel, *but* if they were not updating often enough, the last known-good version might not be available anymore unless you pull from Koji). But it does not really apply to the EPEL retirement. If a decision is made to retire packages for a given branch, it does not matter how many versions you keep, they will all be retired, right? Perhaps having additional metadata in dist-git (e.g. "retire from EL 8.2 onwards") would allow maintainers to keep building as normal, we can publish epel/8-all, epel/8.1, epel/8.2 etc. repos where the first repo has all packages, and the others have symlinks to 8-all but filtering out the retired packages? But that won't work if there are ABI incompatibilities... so yeah, overall I think the best solution is to just try and get CentOS releases out of the door sooner rather than later. Or have a "purgatory" repo where packages retired in EL 8.2 get to live until, say, a month after CentOS 8.2 is GA? Again, seems like too much work. In our case, hopefully this is a one-off (it's because we deploy RPM-with-zstd internally). -- Michel Alexandre Salim profile: https://keybase.io/michel_slm chat via email: https://delta.chat/ GPG key: 96A7 A6ED FB4D 2113 4056 3257 CAF9 AD10 ACB1 BEF2

2 1

Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Stephen John Smoogen 15 May '20

15 May '20

On Fri, 15 May 2020 at 09:06, Nico Kadel-Garcia <nkadel(a)gmail.com> wrote: > On Fri, May 15, 2020 at 8:02 AM Stephen John Smoogen <smooge(a)gmail.com> > wrote: > > > > > > > > On Thu, 14 May 2020 at 20:00, Nico Kadel-Garcia <nkadel(a)gmail.com> > wrote: > >> > >> On Thu, May 14, 2020 at 3:32 PM Michel Alexandre Salim > >> <michel(a)michel-slm.name> wrote: > >> > > >> > Hi, > >> > > >> > We're working on validating CentOS 8 for some desktop use cases at > work, > >> > and noticed that after working fine on a machine that's installed > >> > several months ago, it's now failing on a freshly-installed machine. > >> > >> Do not get me *started* on the ansible version fun and games, or the > >> confusing state of the python3 for various EPEL, RHEL and CentOS > >> migrations. The situation is exacerbated when RHEL elects to use a > >> kind-of-sort-of distinct naming scheme for software previously > >> published via EPEL. > >> > >> It's an ongoing problem. EPEL's decision to show only the most recent > >> versions of RPMs, and to trim old RPMs out, is a destabilizing problem > >> and why I make hrdlinked snapshots of EPEL using "rsnapshot" for > >> internal access to old packages. > > > > > > To be clear here.. the 'decision' is that EPEL is built using the same > build system that Fedora uses. The Fedora build system does not keep older > versions of packages in its composes for a space and so EPEL can not keep > older versions of packages either. We tried several 'hacks' to do this and > they broke the Fedora side or didn't do what we wanted on the EPEL side > either. > > That is not clear at all. Build systems normally build new versions of > software and deploy them to some target space. The decision to delete > older packages is a very distinct one. Review of that workspace and > expiration of old packages pretty much *must* be a distinct one. > Deletion of obsolete packages in anticipation of their activation in > an entirely distinct repository is a very distinct decision. > > I believe Dennis Gilmore and others have tried to explain this multiple times in the past, but it seems that it just doesn't get through. Here is my take on it.. which is not as nice as theirs and probably flawed because I am tired. The Fedora build system means everything from pkgs, pdc, bodhi, koji, pungi, and several other tools. The way that this system is built is to build a complete operating system with the 'compose' being just like what is in rawhide or a release. Everything is tagged to be in the compose, a fresh tree is generated, createrepo and other items are built on that tree, and that tree then replaces the old one on the download servers. Just like F32 directories and rawhide do not have older copies of packages.. neither does EPEL. So to the system there are no old rpms to keep around.. [and trying to keep them seems to end up with a good many mirrors carrying new packages but old repodata (or vice versa.. new repodata but no new rpms) so can't be used by yum/dnf] Of course there could be other solutions that would fix this problem.. but each one takes time and energy that no one seems to have the time to volunteer to get done. If you have the time to do so, I am sure people will welcome it. -- Stephen J Smoogen.

1 0

Re: [CentOS-devel] Handling packages retired in epel but not yet available in CentOS?
by Stephen John Smoogen 15 May '20

15 May '20

On Thu, 14 May 2020 at 20:00, Nico Kadel-Garcia <nkadel(a)gmail.com> wrote: > On Thu, May 14, 2020 at 3:32 PM Michel Alexandre Salim > <michel(a)michel-slm.name> wrote: > > > > Hi, > > > > We're working on validating CentOS 8 for some desktop use cases at work, > > and noticed that after working fine on a machine that's installed > > several months ago, it's now failing on a freshly-installed machine. > > Do not get me *started* on the ansible version fun and games, or the > confusing state of the python3 for various EPEL, RHEL and CentOS > migrations. The situation is exacerbated when RHEL elects to use a > kind-of-sort-of distinct naming scheme for software previously > published via EPEL. > > It's an ongoing problem. EPEL's decision to show only the most recent > versions of RPMs, and to trim old RPMs out, is a destabilizing problem > and why I make hrdlinked snapshots of EPEL using "rsnapshot" for > internal access to old packages. > To be clear here.. the 'decision' is that EPEL is built using the same build system that Fedora uses. The Fedora build system does not keep older versions of packages in its composes for a space and so EPEL can not keep older versions of packages either. We tried several 'hacks' to do this and they broke the Fedora side or didn't do what we wanted on the EPEL side either. At this point it is either someone finding the time to deep dive into pungi and other tools to make it work for this 2 different case mode or moving EPEL to a different build system. Both are giant projects which no one has had the time to do. -- Stephen J Smoogen.

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 14 May '20

14 May '20

The following Fedora EPEL 7 Security updates need testing: Age URL 639 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 381 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c499781e80 python-gnupg-0.4.4-1.el7 379 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 28 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12ba1ceddb wordpress-5.1.5-1.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-76347da426 seamonkey-2.53.2-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ec788c8a86 viewvc-1.1.28-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c9c5ded31b pure-ftpd-1.0.47-4.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-32b3a77f8c sleuthkit-4.9.0-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cd30b5b1cf chromium-81.0.4044.138-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6847d3b59 perl-Mojolicious-7.94-3.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ff94ccbdec openssl11-1.1.1c-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-624f38e579 qbittorrent-3.3.16-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing clamav-0.102.3-1.el7 python-jsonpickle-0.9.4-3.el7 python-uritemplate-3.0.1-1.el7 python3-rpm-4.11.3-8.el7 uwsgi-2.0.18-8.el7 wireguard-tools-1.0.20200513-1.el7 xrdp-0.9.13-2.el7 Details about builds: ================================================================================ clamav-0.102.3-1.el7 (FEDORA-EPEL-2020-235a51a239) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: ClamAV 0.102.3 is a bug patch release to address the following issues. - CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper bounds checking of an unsigned variable results in an out-of-bounds read which causes a crash. Special thanks to Daehui Chang and Fady Othman for helping identify the ARJ parsing vulnerability. - CVE-2020-3341: Fix a vulnerability in the PDF parsing module in ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper size checking of a buffer used to initialize AES decryption routines results in an out-of-bounds read which may cause a crash. Bug found by OSS-Fuzz. - Fix "Attempt to allocate 0 bytes" error when parsing some PDF documents. - Fix a couple of minor memory leaks. ---- - Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning certain PDFs - Do not log freshclam output to syslog by default - creates double entries in the journal (bz#1822012) - (#1820069) add try-restart clamav- freshclam.service on logrotate - Enable prelude support (bz#1829726) - Move /etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7 libcurl - re-enable on-access scanning (bz#1820395) -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-1 - Update to 0.102.3 (bz#1834910) - Security fixes CVE-2020-3341 * Sat May 2 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-9 - Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning certain PDFs * Thu Apr 30 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-8 - Enable prelude support (bz#1829726) * Wed Apr 29 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-7 - Move /etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7 libcurl - re-enable on-access scanning (bz#1820395) - Add clamonacc.service * Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.102.2-6 - Rebuild (json-c) * Wed Apr 8 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-5 - Do not log freshclam output to syslog by default - creates double entries in the journal (bz#1822012) - (#1820069) add try-restart clamav-freshclam.service on logrotate -------------------------------------------------------------------------------- References: [ 1 ] Bug #1820069 - freshclam's logrotate settings incorrect because daemon is not restarted/nofitifed https://bugzilla.redhat.com/show_bug.cgi?id=1820069 [ 2 ] Bug #1820395 - Clamav OnAccessScanning disabled https://bugzilla.redhat.com/show_bug.cgi?id=1820395 [ 3 ] Bug #1822012 - When using the clamav-freshclam.service all log messages are logged twice https://bugzilla.redhat.com/show_bug.cgi?id=1822012 [ 4 ] Bug #1829726 - ClamAV: Enable Prelude support https://bugzilla.redhat.com/show_bug.cgi?id=1829726 [ 5 ] Bug #1834910 - clamav-0.102.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1834910 -------------------------------------------------------------------------------- ================================================================================ python-jsonpickle-0.9.4-3.el7 (FEDORA-EPEL-2020-bbeead1050) A module that allows any object to be serialized into JSON -------------------------------------------------------------------------------- Update Information: Python 3 subpackage, etc. -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.9.4-3 - add Python 3 subpackage (rhbz #1828910) - add source file verification -------------------------------------------------------------------------------- References: [ 1 ] Bug #1828910 - python-jsonpickle: provide Python 3 package for EPEL 7 https://bugzilla.redhat.com/show_bug.cgi?id=1828910 -------------------------------------------------------------------------------- ================================================================================ python-uritemplate-3.0.1-1.el7 (FEDORA-EPEL-2020-51e576edf1) Simple python library to deal with URI Templates (RFC 6570) -------------------------------------------------------------------------------- Update Information: - add Python 3 subpackage for EPEL 7 (rhbz #1829473) - Update to 3.0.1 - declare licensing correctly and include actual license files -------------------------------------------------------------------------------- ChangeLog: * Sun May 3 2020 Felix Schwarz <fschwarz(a)fedoraproject.org> - 3.0.1-1 - update to 3.0.1 - declare licensing correctly and include actual license files - add Python 3 subpackage for EPEL 7 (rhbz #1829473) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1829473 - python-uritemplate: please provide a Python 3 version in EPEL 7 https://bugzilla.redhat.com/show_bug.cgi?id=1829473 -------------------------------------------------------------------------------- ================================================================================ python3-rpm-4.11.3-8.el7 (FEDORA-EPEL-2020-3ef1e07e82) Python 3 bindings for apps which will manipulate RPM packages -------------------------------------------------------------------------------- Update Information: Sync with rpm-4.11.3-43.el7 (RHEL 7.8). -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 4.11.3-8 - Sync with rpm-4.11.3-43.el7 (RHEL 7.8) - Fix packages getting removed on failed update via dnf (#1710691) - Fix segfault on fingerprint symlink (#1660232) - Fix bogus if-condition in find-debuginfo.sh (#1720590) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1660232 - segfault when installing package with invalid signature https://bugzilla.redhat.com/show_bug.cgi?id=1660232 [ 2 ] Bug #1710691 - Package gets removed on failed update via dnf https://bugzilla.redhat.com/show_bug.cgi?id=1710691 [ 3 ] Bug #1720590 - fix bogus if-condition in find-debuginfo.sh https://bugzilla.redhat.com/show_bug.cgi?id=1720590 -------------------------------------------------------------------------------- ================================================================================ uwsgi-2.0.18-8.el7 (FEDORA-EPEL-2020-fa7b2f5f4a) Fast, self-healing, application container server -------------------------------------------------------------------------------- Update Information: Patching PHP plugin to fix Zend framework -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2020 Jorge A Gallegos <kad(a)blegh.net> - 2.0.18-8 - Patching PHP plugin to fix Zend framework -------------------------------------------------------------------------------- ================================================================================ wireguard-tools-1.0.20200513-1.el7 (FEDORA-EPEL-2020-baf3fdd3d3) Fast, modern, secure VPN tunnel -------------------------------------------------------------------------------- Update Information: - Update to 1.0.20200513 - Makefile: remember to install all systemd units - ipc: openbsd: switch to array ioctl interface ---- Update to 1.0.20200510 -------------------------------------------------------------------------------- ChangeLog: * Wed May 13 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200513-1 - Update to 1.0.20200513 - Makefile: remember to install all systemd units - ipc: openbsd: switch to array ioctl interface * Mon May 11 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200510-1 - Update to 1.0.20200510 - ipc: add support for openbsd kernel implementation - ipc: cleanup openbsd support - wg-quick: add support for openbsd kernel implementation - wg-quick: cleanup openbsd support - wg-quick: support dns search domains - Makefile: simplify silent cleaning - ipc: remove extra space - git: add gitattributes so tarball doesn't have gitignore files - terminal: specialize color_mode to stdout only - wg-quick: android: support application whitelist - systemd: add wg-quick.target * Wed Apr 15 2020 Leigh Scott <leigh123linux(a)gmail.com> - 1.0.20200319-2 - Add missing config directory - Remove default buildroot BuildRequires - Simplify doc install - Remove commented lines - Use correct macro for bash-completion -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.13-2.el7 (FEDORA-EPEL-2020-fcf52fc3c8) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: Move socket directory to /run/xrdp. -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13-2 - Move sockets to /run/xrdp, bug #1834178 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1834178 - Existing build not compatible with pam_namespace.so https://bugzilla.redhat.com/show_bug.cgi?id=1834178 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 14 May '20

14 May '20

The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-ac1fd7a29f seamonkey-2.53.2-1.el8 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aa8ce752c3 pure-ftpd-1.0.49-4.el8 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-03d5f14bbe chromium-81.0.4044.138-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-0d41abf072 perl-Mojolicious-8.42-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing clamav-0.102.3-1.el8 keepass-2.45-1.el8 libmongocrypt-1.0.4-1.el8 wireguard-tools-1.0.20200513-1.el8 xrdp-0.9.13-2.el8 Details about builds: ================================================================================ clamav-0.102.3-1.el8 (FEDORA-EPEL-2020-765ceaa306) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: ClamAV 0.102.3 is a bug patch release to address the following issues. - CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper bounds checking of an unsigned variable results in an out-of-bounds read which causes a crash. Special thanks to Daehui Chang and Fady Othman for helping identify the ARJ parsing vulnerability. - CVE-2020-3341: Fix a vulnerability in the PDF parsing module in ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS) condition. Improper size checking of a buffer used to initialize AES decryption routines results in an out-of-bounds read which may cause a crash. Bug found by OSS-Fuzz. - Fix "Attempt to allocate 0 bytes" error when parsing some PDF documents. - Fix a couple of minor memory leaks. ---- - Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning certain PDFs - Do not log freshclam output to syslog by default - creates double entries in the journal (bz#1822012) - (#1820069) add try-restart clamav- freshclam.service on logrotate - Enable prelude support (bz#1829726) - Move /etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7 libcurl - re-enable on-access scanning (bz#1820395) -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.3-1 - Update to 0.102.3 (bz#1834910) - Security fixes CVE-2020-3341 * Sat May 2 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-9 - Add upstream patch to fix "Attempt to allocate 0 bytes" errors while scanning certain PDFs * Thu Apr 30 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-8 - Enable prelude support (bz#1829726) * Wed Apr 29 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-7 - Move /etc/clamd.d/scan.conf to clamav-filesystem - Add patch to build with EL7 libcurl - re-enable on-access scanning (bz#1820395) - Add clamonacc.service * Tue Apr 21 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.102.2-6 - Rebuild (json-c) * Wed Apr 8 2020 Orion Poplawski <orion(a)nwra.com> - 0.102.2-5 - Do not log freshclam output to syslog by default - creates double entries in the journal (bz#1822012) - (#1820069) add try-restart clamav-freshclam.service on logrotate -------------------------------------------------------------------------------- References: [ 1 ] Bug #1820069 - freshclam's logrotate settings incorrect because daemon is not restarted/nofitifed https://bugzilla.redhat.com/show_bug.cgi?id=1820069 [ 2 ] Bug #1820395 - Clamav OnAccessScanning disabled https://bugzilla.redhat.com/show_bug.cgi?id=1820395 [ 3 ] Bug #1822012 - When using the clamav-freshclam.service all log messages are logged twice https://bugzilla.redhat.com/show_bug.cgi?id=1822012 [ 4 ] Bug #1829726 - ClamAV: Enable Prelude support https://bugzilla.redhat.com/show_bug.cgi?id=1829726 [ 5 ] Bug #1834910 - clamav-0.102.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1834910 -------------------------------------------------------------------------------- ================================================================================ keepass-2.45-1.el8 (FEDORA-EPEL-2020-dcffa3c4bb) Password manager -------------------------------------------------------------------------------- Update Information: keepass for Epel8 -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1792998 - Add to epel 8: keepass package please. https://bugzilla.redhat.com/show_bug.cgi?id=1792998 -------------------------------------------------------------------------------- ================================================================================ libmongocrypt-1.0.4-1.el8 (FEDORA-EPEL-2020-a604e933f7) The companion C library for client side encryption in drivers -------------------------------------------------------------------------------- Update Information: Upstream version 1.0.4 (no changelog) -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Remi Collet <remi(a)remirepo.net> - 1.0.4-1 - update to 1.0.4 -------------------------------------------------------------------------------- ================================================================================ wireguard-tools-1.0.20200513-1.el8 (FEDORA-EPEL-2020-e35d01a9f4) Fast, modern, secure VPN tunnel -------------------------------------------------------------------------------- Update Information: - Update to 1.0.20200513 - Makefile: remember to install all systemd units - ipc: openbsd: switch to array ioctl interface ---- Update to 1.0.20200510 -------------------------------------------------------------------------------- ChangeLog: * Wed May 13 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200513-1 - Update to 1.0.20200513 - Makefile: remember to install all systemd units - ipc: openbsd: switch to array ioctl interface * Mon May 11 2020 Joe Doss <joe(a)solidadmin.com> - 1.0.20200510-1 - Update to 1.0.20200510 - ipc: add support for openbsd kernel implementation - ipc: cleanup openbsd support - wg-quick: add support for openbsd kernel implementation - wg-quick: cleanup openbsd support - wg-quick: support dns search domains - Makefile: simplify silent cleaning - ipc: remove extra space - git: add gitattributes so tarball doesn't have gitignore files - terminal: specialize color_mode to stdout only - wg-quick: android: support application whitelist - systemd: add wg-quick.target * Wed Apr 15 2020 Leigh Scott <leigh123linux(a)gmail.com> - 1.0.20200319-2 - Add missing config directory - Remove default buildroot BuildRequires - Simplify doc install - Remove commented lines - Use correct macro for bash-completion -------------------------------------------------------------------------------- ================================================================================ xrdp-0.9.13-2.el8 (FEDORA-EPEL-2020-5818afc82e) Open source remote desktop protocol (RDP) server -------------------------------------------------------------------------------- Update Information: Move socket directory to /run/xrdp. -------------------------------------------------------------------------------- ChangeLog: * Thu May 14 2020 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.13-2 - Move sockets to /run/xrdp, bug #1834178 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1834178 - Existing build not compatible with pam_namespace.so https://bugzilla.redhat.com/show_bug.cgi?id=1834178 --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
11
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel May 2020