epel-devel August 2023

epel-devel@lists.fedoraproject.org

5 participants
96 discussions

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 19 Aug '23

19 Aug '23

The following builds have been pushed to Fedora EPEL 7 updates-testing batctl-2023.2-1.el7 chromium-116.0.5845.96-1.el7 clamav-0.103.9-1.el7 inxi-3.3.29-1.el7 ytree-2.05-1.el7 Details about builds: ================================================================================ batctl-2023.2-1.el7 (FEDORA-EPEL-2023-5008a5d4e2) B.A.T.M.A.N. advanced control and management tool -------------------------------------------------------------------------------- Update Information: No code changes -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 17 2023 Felix Kaechele <heffer(a)fedoraproject.org> - 2023.2-1 - update to 2023.2 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2023.1-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed May 31 2023 John W. Linville <linville(a)tuxdriver.com> - 2023.1-1 - update to 2023.1 * Thu Jan 26 2023 John W. Linville <linville(a)tuxdriver.com> - 2023.0-1 - update to 2023.0 * Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2022.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Nov 10 2022 Felix Kaechele <heffer(a)fedoraproject.org> - 2022.3-1 - update to 2022.3 * Tue Jul 26 2022 John W. Linville <linville(a)tuxdriver.com> - 2022.2-1 - update to 2022.2 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2022.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232408 - batctl-2023.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232408 -------------------------------------------------------------------------------- ================================================================================ chromium-116.0.5845.96-1.el7 (FEDORA-EPEL-2023-254992a2ef) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: update to 116.0.5845.96. Fixes following security issues: CVE-2023-2312 CVE-2023-4349 CVE-2023-4350 CVE-2023-4351 CVE-2023-4352 CVE-2023-4353 CVE-2023-4354 CVE-2023-4355 CVE-2023-4356 CVE-2023-4357 CVE-2023-4358 CVE-2023-4359 CVE-2023-4360 CVE-2023-4361 CVE-2023-4362 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Than Ngo <than(a)redhat.com> - 116.0.5845.96-1 - update to 116.0.5845.96 * Wed Aug 9 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.170-2 - set use_all_cpus=1 for aarch64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232176 - CVE-2023-2312 chromium-browser: Use after free in Offline https://bugzilla.redhat.com/show_bug.cgi?id=2232176 [ 2 ] Bug #2232177 - CVE-2023-4349 chromium-browser: Use after free in Device Trust Connectors https://bugzilla.redhat.com/show_bug.cgi?id=2232177 [ 3 ] Bug #2232178 - CVE-2023-4350 chromium-browser: Inappropriate implementation in Fullscreen https://bugzilla.redhat.com/show_bug.cgi?id=2232178 [ 4 ] Bug #2232179 - CVE-2023-4351 chromium-browser: Use after free in Network https://bugzilla.redhat.com/show_bug.cgi?id=2232179 [ 5 ] Bug #2232180 - CVE-2023-4352 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2232180 [ 6 ] Bug #2232181 - CVE-2023-4353 chromium-browser: Heap buffer overflow in ANGLE https://bugzilla.redhat.com/show_bug.cgi?id=2232181 [ 7 ] Bug #2232182 - CVE-2023-4354 chromium-browser: Heap buffer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=2232182 [ 8 ] Bug #2232183 - CVE-2023-4355 chromium-browser: Out of bounds memory access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2232183 [ 9 ] Bug #2232184 - CVE-2023-4356 chromium-browser: Use after free in Audio https://bugzilla.redhat.com/show_bug.cgi?id=2232184 [ 10 ] Bug #2232185 - CVE-2023-4357 chromium-browser: Insufficient validation of untrusted input in XML https://bugzilla.redhat.com/show_bug.cgi?id=2232185 [ 11 ] Bug #2232186 - CVE-2023-4358 chromium-browser: Use after free in DNS https://bugzilla.redhat.com/show_bug.cgi?id=2232186 [ 12 ] Bug #2232187 - CVE-2023-4359 chromium-browser: Inappropriate implementation in App Launcher https://bugzilla.redhat.com/show_bug.cgi?id=2232187 [ 13 ] Bug #2232188 - CVE-2023-4360 chromium-browser: Inappropriate implementation in Color https://bugzilla.redhat.com/show_bug.cgi?id=2232188 [ 14 ] Bug #2232189 - CVE-2023-4361 chromium-browser: Inappropriate implementation in Autofill https://bugzilla.redhat.com/show_bug.cgi?id=2232189 [ 15 ] Bug #2232190 - CVE-2023-4362 chromium-browser: Heap buffer overflow in Mojom IDL https://bugzilla.redhat.com/show_bug.cgi?id=2232190 [ 16 ] Bug #2232191 - CVE-2023-4363 chromium-browser: Inappropriate implementation in WebShare https://bugzilla.redhat.com/show_bug.cgi?id=2232191 [ 17 ] Bug #2232192 - CVE-2023-4364 chromium-browser: Inappropriate implementation in Permission Prompts https://bugzilla.redhat.com/show_bug.cgi?id=2232192 [ 18 ] Bug #2232193 - CVE-2023-4365 chromium-browser: Inappropriate implementation in Fullscreen https://bugzilla.redhat.com/show_bug.cgi?id=2232193 [ 19 ] Bug #2232194 - CVE-2023-4366 chromium-browser: Use after free in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=2232194 [ 20 ] Bug #2232195 - CVE-2023-4367 chromium-browser: Insufficient policy enforcement in Extensions API https://bugzilla.redhat.com/show_bug.cgi?id=2232195 [ 21 ] Bug #2232196 - CVE-2023-4368 chromium-browser: Insufficient policy enforcement in Extensions API https://bugzilla.redhat.com/show_bug.cgi?id=2232196 -------------------------------------------------------------------------------- ================================================================================ clamav-0.103.9-1.el7 (FEDORA-EPEL-2023-0454ca80fd) End-user tools for the Clam Antivirus scanner -------------------------------------------------------------------------------- Update Information: CVE-2023-20197 ClamAV File Scanning Infinite Loop Denial of Service Vulnerability -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 18 2023 Orion Poplawski <orion(a)nwra.com> - 0.103.9-1 - Update to 0.103.9 CVE-2023-20197 (bz#2232508) * Fri Feb 24 2023 S��rgio Basto <sergio(a)serjux.com> - 0.103.8-4 - Update data files with help of Cisco-Talos/cvdupdate -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232508 - CVE-2023-20197 fedora: ClamAV File Scanning Infinite Loop Denial of Service Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2232508 -------------------------------------------------------------------------------- ================================================================================ inxi-3.3.29-1.el7 (FEDORA-EPEL-2023-e0d83dbc60) A full featured system information script -------------------------------------------------------------------------------- Update Information: Update to 3.3.29. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 17 2023 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.3.29-1 - Update to 3.3.29 * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.27-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ytree-2.05-1.el7 (FEDORA-EPEL-2023-5982a4ac8f) A filemanager similar to XTree -------------------------------------------------------------------------------- Update Information: update to 2.05 -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 18 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.05-1 - update to ytree-2.05 * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.04-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.04-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.04-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Mar 30 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.04-1 - Update to 2.04 fixes rhbz#2020860 * Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.03-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.03-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.03-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sun Jan 17 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.03-1 - Update to 2.03 fixes rhbz#1813702 * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.01-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Feb 17 2020 Filipe Rosset <rosset.filipe(a)gmail.com> - 2.01-1 - Update to 2.01 fixes rhbz#1756725 + spec cleanup and modernization * Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> - 1.99pl1-9 - Rebuild for readline 8.0 * Sun Feb 3 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.99pl1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Jan 12 2017 Igor Gnatenko <ignatenko(a)redhat.com> - 1.99pl1-2 - Rebuild for readline 7.x * Fri Dec 2 2016 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.99pl1-1 - Rebuilt new release 1.99pl1, fixes rhbz #1178453 and rhbz #1371310 * Fri Feb 5 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.97-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri Feb 15 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.97-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 22 2011 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.97-1 - Bug fix release * Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.94-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Fri Jun 18 2010 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.94-1 - New upstream release - Dropped the redundant buildroot items and clean section * Sun Aug 30 2009 Minto Joseph <mvaliyav at redhat.com> - 1.93-1 - Rebased to 1.93 * Thu May 28 2009 Minto Joseph <mvaliyav at redhat.com> - 1.92-3 - Cleaned up spec file * Thu May 28 2009 Minto Joseph <mvaliyav at redhat.com> - 1.92-2 - Cleaned up spec file * Thu May 28 2009 Minto Joseph <mvaliyav at redhat.com> - 1.92-1 - initial package --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 18 Aug '23

18 Aug '23

The following Fedora EPEL 8 Security updates need testing: Age URL 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9a26de25cf GitPython-3.1.18-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing grass-7.8.8-1.el8 intel-ipp-crypto-mb-1.0.8-3.el8 netdata-1.42.1-1.el8 Details about builds: ================================================================================ grass-7.8.8-1.el8 (FEDORA-EPEL-2023-919d68f5f4) GRASS GIS - Geographic Resources Analysis Support System -------------------------------------------------------------------------------- Update Information: New upstream version GRASS GIS 7.8.8 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 6 2023 Markus Neteler <neteler(a)mundialis.de> - 7.8.8-1 - New upstream version GRASS GIS 7.8.8 -------------------------------------------------------------------------------- ================================================================================ intel-ipp-crypto-mb-1.0.8-3.el8 (FEDORA-EPEL-2023-1403bdb1ca) Intel IPP Cryptography multi-buffer library -------------------------------------------------------------------------------- Update Information: Update to 1.0.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 14 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-3 - Update to IPP Crypto 2021.8 * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-1 - Update to 1.0.8 * Wed Feb 15 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.6-1 - Update to 1.0.6 * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ netdata-1.42.1-1.el8 (FEDORA-EPEL-2023-07b0778efa) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.1. update go config version to 0.54.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.1-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2228415 - Cannot process /proc/<PID>/limits files https://bugzilla.redhat.com/show_bug.cgi?id=2228415 [ 2 ] Bug #2231185 - netdata-1.42.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231185 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 18 Aug '23

18 Aug '23

The following builds have been pushed to Fedora EPEL 7 updates-testing netdata-1.42.1-1.el7 Details about builds: ================================================================================ netdata-1.42.1-1.el7 (FEDORA-EPEL-2023-269941ab0f) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.1. update go config version to 0.54.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.1-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2228415 - Cannot process /proc/<PID>/limits files https://bugzilla.redhat.com/show_bug.cgi?id=2228415 [ 2 ] Bug #2231185 - netdata-1.42.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231185 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 18 Aug '23

18 Aug '23

The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-369c889880 chromium-115.0.5790.170-1.el9 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-917679773c GitPython-3.1.32-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing epel-release-9-7.el9 intel-ipp-crypto-mb-1.0.8-3.el9 intel-ipsec-mb-1.4-3.el9 llhttp-8.1.1-1.el9 netdata-1.42.1-1.el9 python-aiohttp-3.8.5-1.el9 python-sphinx-pytest-0.1.1-1.el9 rust-packaging-24-6.el9 yubihsm-shell-2.4.1-1.el9 Details about builds: ================================================================================ epel-release-9-7.el9 (FEDORA-EPEL-2023-1e3199f53c) Extra Packages for Enterprise Linux repository configuration -------------------------------------------------------------------------------- Update Information: Add EPEL OpenH264 repository (#2053295) -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 17 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9-7 - Fix typo to actually enable EPEL OpenH264 repo * Tue Aug 15 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9-6 - Add EPEL OpenH264 repository (#2053295) -------------------------------------------------------------------------------- ================================================================================ intel-ipp-crypto-mb-1.0.8-3.el9 (FEDORA-EPEL-2023-a1caaa79c0) Intel IPP Cryptography multi-buffer library -------------------------------------------------------------------------------- Update Information: Update to 1.0.8 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 14 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-3 - Update to IPP Crypto 2021.8 * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-1 - Update to 1.0.8 * Wed Feb 15 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.6-1 - Update to 1.0.6 * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Dec 23 2021 Andrey Matyukov <andrey.matyukov(a)intel.com> - 1.0.4-2 - Fixed a symbolic link in intel-ipp-crypto-mb-devel package. * Wed Dec 22 2021 Andrey Matyukov <andrey.matyukov(a)intel.com> - 1.0.4-1 - Added ECDSA/ECDHE for the NIST P-521 curve; - Added ECC over SM2 curve: Public Key Generation, ECDSA Signature / Verification, ECDHE; - Added SM3 algorithm; - Added SM4 algorithm (ECB, CBC, CTR, OFB and CFB modes of operation); - Added ed25519 Signature / Verification schemes; - Added x25519 key agreement functionality: public key generation, shared key computation; - Added modular exponentiation for fixed sizes: 1k, 2k, 3k, 4k. * Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.0.1-3 - Rebuilt with OpenSSL 3.0.0 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ intel-ipsec-mb-1.4-3.el9 (FEDORA-EPEL-2023-250dabfe3a) IPsec cryptography library optimized for Intel Architecture -------------------------------------------------------------------------------- Update Information: new package for EPEL -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Ali Erdinc Koroglu <aekoroglu(a)linux.intel.com> 1.4-3 - Packaging optimization to prevent AVX512 based gcc compilation errors * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.4.0-1 - Update for release package v1.4 * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jan 11 2023 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.3.0-2 - Add patch to fix multi-threaded performance scaling issue * Wed Sep 28 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.3.0-1 - Update for release package v1.3 * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Mar 2 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.2.0-2 - Correct spelling of IPsec in package description * Fri Feb 25 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.2.0-1 - Update for release package v1.2 * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Oct 29 2021 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.1.0-1 - Update for release package v1.1 -------------------------------------------------------------------------------- ================================================================================ llhttp-8.1.1-1.el9 (FEDORA-EPEL-2023-e2fcc4af81) Port of http_parser to llparse -------------------------------------------------------------------------------- Update Information: Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break, https://pagure.io/epel/issue/241) and `python-aiohttp` to 3.8.5. Fixes CVE-2023-30589. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.1-1 - Update to 8.1.1 (close RHBZ#2216591) * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-3 - Fix test compiling/execution * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-2 - Indicate dirs. in files list with trailing slashes * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-1 - Update to 8.1.0 (close RHBZ#2131175) * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.0.0-1 - Update to 8.0.0 (close RHBZ#2131175) * Sat Jul 29 2023 Stephen Gallagher <sgallagh(a)redhat.com> - 6.0.10-1 - Update to v6.0.10 * Sat Jul 29 2023 Miro Hron��ok <miro(a)hroncok.cz> - 6.0.9-2 - Use tomllib/python-tomli instead of dead upstream python-toml * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.9-1 - Update to 6.0.9 (close RHBZ#2116231) - Bumped .so version from downstream 0.1 to upstream 6.0 - Better upstream support for building and installing a shared library - The -devel package now contains a .pc file - Tests are now built with gcc and fully respect distro flags * Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-6 - Drop ��forge�� macros, which aren��t really doing much here * Fri Dec 24 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-5 - Add a note about LLHTTP_STRICT_MODE to the package description * Fri Dec 24 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-4 - Revert "Build with LLHTTP_STRICT_MODE enabled" * Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-3 - Build with LLHTTP_STRICT_MODE enabled * Tue Dec 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-2 - Dep. on cmake-filesystem is now auto-generated -------------------------------------------------------------------------------- References: [ 1 ] Bug #2216591 - llhttp-8.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2216591 [ 2 ] Bug #2227458 - python-aiohttp-3.8.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2227458 -------------------------------------------------------------------------------- ================================================================================ netdata-1.42.1-1.el9 (FEDORA-EPEL-2023-0d230f1117) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.1. update go config version to 0.54.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.1-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2228415 - Cannot process /proc/<PID>/limits files https://bugzilla.redhat.com/show_bug.cgi?id=2228415 [ 2 ] Bug #2231185 - netdata-1.42.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231185 -------------------------------------------------------------------------------- ================================================================================ python-aiohttp-3.8.5-1.el9 (FEDORA-EPEL-2023-e2fcc4af81) Python HTTP client/server for asyncio -------------------------------------------------------------------------------- Update Information: Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break, https://pagure.io/epel/issue/241) and `python-aiohttp` to 3.8.5. Fixes CVE-2023-30589. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.8.5-1 - Update to 3.8.5 (close RHBZ#2227458) * Mon May 15 2023 Tom�� Hrn��iar <thrnciar(a)redhat.com> - 3.8.4-2 - Backport upstream patch to fix a test failing with python-yarl 1.9.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2216591 - llhttp-8.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2216591 [ 2 ] Bug #2227458 - python-aiohttp-3.8.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2227458 -------------------------------------------------------------------------------- ================================================================================ python-sphinx-pytest-0.1.1-1.el9 (FEDORA-EPEL-2023-5e9efeee30) Helpful pytest fixtures for sphinx extensions -------------------------------------------------------------------------------- Update Information: Build for EPEL9 -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 19 2023 Karolina Surma <ksurma(a)redhat.com> - 0.1.1-1 - Update to 0.1.1 * Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 0.0.3-4 - Rebuilt for Python 3.12 * Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jun 22 2022 Karolina Surma <ksurma(a)redhat.com> - 0.0.3-1 - Initial package Resolves: rhbz#2100032 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2223228 - Please branch and build python-sphinx-pytest for EPEL9 https://bugzilla.redhat.com/show_bug.cgi?id=2223228 -------------------------------------------------------------------------------- ================================================================================ rust-packaging-24-6.el9 (FEDORA-EPEL-2023-aa02a88efc) RPM macros and generators for building Rust packages -------------------------------------------------------------------------------- Update Information: Apply a patch to fix the value of the `%cargo_registry` macro not to rely on `%{_datadir}`, which breaks for flatpak builds or other environments where `%{_prefix} != /usr`. ---- Apply a patch to fix values of the `%__cargo` and `%__cargo_to_rpm` macros not to rely on `%{_bindir}`, which breaks for flatpak builds or other environments where `%{_prefix} != /usr`. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 17 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 24-6 - Correct cargo_registry path * Thu Aug 17 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 24-5 - Correct cargo and cargo2rpm paths -------------------------------------------------------------------------------- ================================================================================ yubihsm-shell-2.4.1-1.el9 (FEDORA-EPEL-2023-61384360ca) Tools to interact with YubiHSM 2 -------------------------------------------------------------------------------- Update Information: New upstream release (#2232340) -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 17 2023 Jakub Jelen <jjelen(a)redhat.com> - 2.4.1-1 - New upstream release (#2232340) * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232340 - yubihsm-shell-2.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232340 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 17 Aug '23

17 Aug '23

The following Fedora EPEL 7 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d38bbaaf16 chromium-115.0.5790.170-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing copr-cli-1.110-1.el7 libpri-1.6.1-1.el7 python-copr-1.130-1.el7 ssldump-1.8-1.el7 Details about builds: ================================================================================ copr-cli-1.110-1.el7 (FEDORA-EPEL-2023-4519b66845) Command line interface for COPR -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.110-1 - priority=X support for copr DNF repositories added - new 'copr-cli download-build --logs' option added - make the pyp2spec tool the default PyPI spec generator -------------------------------------------------------------------------------- ================================================================================ libpri-1.6.1-1.el7 (FEDORA-EPEL-2023-863bcb1bf2) An implementation of Primary Rate ISDN -------------------------------------------------------------------------------- Update Information: Update to 1.6.1: q931.c: Fix subaddress finding octet 4. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.6.1-1 - Update to 1.6.1 (close RHBZ#2232386) - New GPG key for dev team -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232386 - libpri-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232386 -------------------------------------------------------------------------------- ================================================================================ python-copr-1.130-1.el7 (FEDORA-EPEL-2023-4519b66845) Python interface for Copr -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.130-1 - priority=X support added for copr project repositories - several forward/backward compat fixes with libs/tooling -------------------------------------------------------------------------------- ================================================================================ ssldump-1.8-1.el7 (FEDORA-EPEL-2023-688a608bc3) SSL/TLS network protocol analyzer -------------------------------------------------------------------------------- Update Information: # ssldump 1.8 - Switch build system from autotools to cmake - Add `-z` option for printing timestamps in front of TCP headers -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Robert Scheck <robert(a)fedoraproject.org> 1.8-1 - Upgrade to 1.8 (#2231870) * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231870 - ssldump-1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231870 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 17 Aug '23

17 Aug '23

The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-72cd403ec5 chromium-115.0.5790.170-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing GitPython-3.1.18-2.el8 caddy-2.6.4-1.el8 converseen-0.10.0.1-2.el8 copr-cli-1.110-1.el8 copr-rpmbuild-0.69-1.el8 grsync-1.3.1-1.el8 libpri-1.6.1-1.el8 python-copr-1.130-1.el8 python-copr-common-0.20-1.el8 ssldump-1.8-1.el8 Details about builds: ================================================================================ GitPython-3.1.18-2.el8 (FEDORA-EPEL-2023-9a26de25cf) Python Git Library -------------------------------------------------------------------------------- Update Information: Backport a patch to fully fix CVE-2022-24439 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Lubom��r Sedl�� <lsedlar(a)redhat.com> - 3.1.18-2 - Backport upstream patch to fully fix CVE-2022-24439, resolves rhbz#2231476 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231476 - TRIAGE-CVE-2023-40267 GitPython: Insecure non-multi options in clone and clone_from is not blocked [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2231476 -------------------------------------------------------------------------------- ================================================================================ caddy-2.6.4-1.el8 (FEDORA-EPEL-2023-0b57e19163) Web server with automatic HTTPS -------------------------------------------------------------------------------- Update Information: Initial caddy package for EPEL 8. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Carl George <carlwgeorge(a)fedoraproject.org> - 2.6.4-1 - Update to version 2.6.4 - Add man pages - Use generated shell completion files instead of static ones - Add fish shell completions * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jan 24 2023 Carl George <carl(a)george.computer> - 2.5.2-3 - Rebuild for CVE-2022-41717 in golang * Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Tue Aug 9 2022 Carl George <carl(a)george.computer> - 2.5.2-1 - Latest upstream, resolves rhbz#2062499 rhbz#2113136 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> - 2.4.6-4 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang * Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.4.6-3 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 * Fri Feb 25 2022 Carl George <carl(a)george.computer> - 2.4.6-2 - Update welcome page symlink and image to work on both Fedora and EPEL * Wed Feb 16 2022 Carl George <carl(a)george.computer> - 2.4.6-1 - Latest upstream rhbz#1984163 * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Mar 3 2021 Carl George <carl(a)george.computer> - 2.3.0-1 - Latest upstream - Fix vendored license handling - Switch to white logo rhbz#1934864 * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.2.1-3 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Oct 30 2020 Carl George <carl(a)george.computer> - 2.2.1-1 - Latest upstream * Sat Sep 26 2020 Carl George <carl(a)george.computer> - 2.2.0-1 - Latest upstream * Sat Sep 19 2020 Carl George <carl(a)george.computer> - 2.2.0~rc3-1 - Latest upstream * Fri Aug 14 2020 Carl George <carl(a)george.computer> - 2.1.1-2 - Add bash and zsh completion support * Sun Aug 9 2020 Carl George <carl(a)george.computer> - 2.1.1-1 - Update to Caddy v2 - Remove all v1 plugins - Use vendored dependencies - Remove devel subpackage - Rename config file per upstream request - Use webserver test page from system-logos-httpd * Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 7 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.4-1 - Update to 1.0.4 (#1803691) * Mon Feb 17 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.3-3 - Rebuilt for GHSA-jf24-p9p9-4rjh * Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Sep 7 2019 Carl George <carl(a)george.computer> - 1.0.3-1 - Latest upstream - Remove bundled lego and plugins - Remove dyn, gandi, namecheap, and rfc2136 dns providers - Add patch0 to fix `-version` flag - Add patch1 to adjust blackfriday import path - Add devel subpackages - Run test suite * Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu May 9 2019 Carl George <carl(a)george.computer> - 0.11.4-2 - Switch unit file from ProtectSystem strict to full rhbz#1706651 * Wed Mar 6 2019 Carl George <carl(a)george.computer> - 0.11.4-1 - Latest upstream - Update bundled dnsproviders to 0.1.3 - Update bundled lego to 2.2.0 - Enable googlecloud, route53, and azure dns providers on epel7 - Allow custom http port with default config file rhbz#1685446 * Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Nov 14 2018 Carl George <carl(a)george.computer> - 0.11.1-2 - Buildrequires at least golang 1.10 * Tue Nov 13 2018 Carl George <carl(a)george.computer> - 0.11.1-1 - Latest upstream - Update bundled geoip * Fri Oct 19 2018 Carl George <carl(a)george.computer> - 0.11.0-3 - Enable httpd_can_network_connect selinux boolean to connect to ACME endpoint rhbz#1641158 - Define UDP 80/443 as selinux http_port_t for QUIC rhbz#1608548 - Define TCP 5033 as selinux http_port_t for HTTP challenge rhbz#1641160 * Thu Jul 12 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sat May 12 2018 Carl George <carl(a)george.computer> - 0.11.0-1 - Latest upstream * Sat Apr 21 2018 Carl George <carl(a)george.computer> - 0.10.14-1 - Latest upstream - Overhaul %prep to extract everything with %setup - Edit lego providers to require acmev2 instead of acme - Add provides for specific providers from %import_path_dnsproviders and %import_path_lego - Add azure dns provider on f28+ * Fri Apr 20 2018 Carl George <carl(a)george.computer> - 0.10.11-6 - Enable geoip plugin on EL7 - Only provide bundled geoip/realip/dnsproviders/lego when the respective plugin is enabled * Wed Apr 18 2018 Carl George <carl(a)george.computer> - 0.10.11-5 - Add geoip plugin * Tue Apr 17 2018 Carl George <carl(a)george.computer> - 0.10.11-4 - Correct ExclusiveArch fallback * Mon Apr 16 2018 Carl George <carl(a)george.computer> - 0.10.11-3 - Enable s390x - Disable googlecloud and route53 dns providers on EL7 due to dependency issues * Fri Mar 30 2018 Carl George <carl(a)george.computer> - 0.10.11-2 - Add googlecloud dns provider - Add route53 dns provider - Set minimum golang version to 1.9 - Set selinux labels in scriptlets * Sat Feb 24 2018 Carl George <carl(a)george.computer> - 0.10.11-1 - Latest upstream * Sat Feb 24 2018 Carl George <carl(a)george.computer> - 0.10.10-4 - Change ProtectSystem from strict to full in unit file on RHEL * Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Jan 11 2018 Carl George <carl(a)george.computer> - 0.10.10-2 - Add powerdns provider * Mon Oct 9 2017 Carl George <carl(a)george.computer> - 0.10.10-1 - Latest upstream * Mon Oct 2 2017 Carl George <carl(a)george.computer> - 0.10.9-6 - Add provides for bundled libraries * Mon Oct 2 2017 Carl George <carl(a)george.computer> - 0.10.9-5 - Enable rfc2136 dns provider - List plugins in description * Mon Sep 18 2017 Carl George <carl(a)george.computer> - 0.10.9-4 - Exclude s390x * Sun Sep 17 2017 Carl George <carl(a)george.computer> - 0.10.9-3 - Add realip plugin - Add conditionals for plugins * Sat Sep 16 2017 Carl George <carl(a)george.computer> - 0.10.9-2 - Add sources for caddyserver/dnsproviders and xenolf/lego - Disable all dns providers that require additional libraries (dnsimple, dnspod, googlecloud, linode, ovh, route53, vultr) - Rewrite default index.html * Tue Sep 12 2017 Carl George <carl(a)george.computer> - 0.10.9-1 - Latest upstream - Add config validation to unit file - Disable exoscale dns provider https://github.com/xenolf/lego/issues/429 * Fri Sep 8 2017 Carl George <carl(a)george.computer> - 0.10.8-1 - Latest upstream - Build with %gobuild macro - Move config subdirectory from /etc/caddy/caddy.conf.d to /etc/caddy/conf.d * Tue Aug 29 2017 Carl George <carl(a)george.computer> - 0.10.7-1 - Latest upstream * Fri Aug 25 2017 Carl George <carl(a)george.computer> - 0.10.6-2 - Use SIQQUIT to stop service - Increase the process limit from 64 to 512 - Only `go get` in caddy/caddymain * Fri Aug 11 2017 Carl George <carl(a)george.computer> - 0.10.6-1 - Latest upstream - Add webserver virtual provides - Drop tmpfiles and just own /var/lib/caddy directly - Remove PrivateDevices setting from unit file, it prevents selinux process transitions - Disable rfc2136 dns provider https://github.com/caddyserver/dnsproviders/issues/11 * Sat Jun 3 2017 Carl George <carl.george(a)rackspace.com> - 0.10.3-2 - Rename Envfile to envfile - Rename Caddyfile to caddy.conf - Include additional configs from caddy.conf.d directory * Fri May 19 2017 Carl George <carl.george(a)rackspace.com> - 0.10.3-1 - Latest upstream * Mon May 15 2017 Carl George <carl.george(a)rackspace.com> - 0.10.2-1 - Initial package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1759830 - No caddy package in EPEL-8 https://bugzilla.redhat.com/show_bug.cgi?id=1759830 -------------------------------------------------------------------------------- ================================================================================ converseen-0.10.0.1-2.el8 (FEDORA-EPEL-2023-cc79943cdb) A batch image conversion tool written in C++ with Qt5 and Magick++ -------------------------------------------------------------------------------- Update Information: fix rhbz#2232396 - converseen-0.10.0.1 is available -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.10.0.1-1 - fix rhbz#2232396 - converseen-0.10.0.1 is available * Fri Aug 11 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.10.0.0-1 - update to converseen-0.10.0.0 fixes rhbz#2231420 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Mar 31 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.11.1-1 - Update to 0.9.11.1 fixes rhbz#2177564 * Wed Feb 15 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.11.0-1 - Update to 0.9.11.0 fixes rhbz#2169785 * Sun Feb 12 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.10.1-1 - Update to 0.9.10.1 fixes rhbz#2161445 * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Mon Jan 9 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.10.0-1 - Update to 0.9.10.0 fixes rhbz#2159141 * Thu Jan 5 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 0.9.9.8-2 - Rebuild for ImageMagick 7 * Thu Sep 15 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.8-1 - Update to 0.9.9.8 fixes rhbz#2126958 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2229724 - [abrt] converseen: qTerminate(): converseen killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=2229724 -------------------------------------------------------------------------------- ================================================================================ copr-cli-1.110-1.el8 (FEDORA-EPEL-2023-134dfe248c) Command line interface for COPR -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.110-1 - priority=X support for copr DNF repositories added - new 'copr-cli download-build --logs' option added - make the pyp2spec tool the default PyPI spec generator -------------------------------------------------------------------------------- ================================================================================ copr-rpmbuild-0.69-1.el8 (FEDORA-EPEL-2023-1c9d3f9e3a) Run COPR build tasks -------------------------------------------------------------------------------- Update Information: Copr Servers - August 2023 release -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 0.69-1 - require python-specfile (in new enough) version, and use it for specfile parsing instead of parsing the metadata from SRPMs - make sure we have (also) the latest DNF5 on builders - override disttag macro to None - make sure detected epoch is int() or None - build RPMs in one Mock step, instead of two (SRPM and then RPM) - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required) - store review.json generated by fedora-review into the result directory - better/more verbose logging in the results.json generator - drop dependency on simplejson - repeatedly try to download files from lookaside cache - moving the package NEVRA parsing to from backend here into copr-rpmbuild - priority=X support added for the Copr repository itself - query exclusivearch and excludearch from the specfile, and store into results.json * Tue May 23 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.68-1 - Fix python3-backoff dependency * Mon May 22 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.67-1 - Add loggs to python-backoff decorator - Set git.safe_directory as repo rootdir - Explain how to reproduce the build locally - Retry only git clone without checkouting - Use git checkout instead of switch but ignore files * Tue Apr 4 2023 Jiri Kyjovsky <j1.kyjovsky(a)gmail.com> 0.66-1 - Ise 'git switch', not 'git checkout' * Wed Mar 22 2023 Jiri Kyjovsky <j1.kyjovsky(a)gmail.com> 0.65-1 - Add basic "clone" method - Define some copr-specific environment variables * Wed Jan 25 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.64-1 - Add runtime dependency for python-backoff * Tue Jan 24 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.63-1 - Retry when copr-distgit is temporarily down - Don't print traceback for 404 errors on SRPM download - Decode URL encoded characters such as %5E into caret - Use SPDX license * Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.62-1 - migrate from pipes to shlex - move to GitHub home page - use repos from task for custom method - switch to template for custom method - strip trailing / from clone url * Tue Aug 9 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.61-1 - rpmbuild: specify some optional parameters for pyp2spec * Wed Jul 27 2022 Pavel Raiskup <praiskup(a)redhat.com> 0.60-1 - fix source build detection needed for %dist hacks * Tue Jul 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.59-1 - Add support for pyp2spec generator - Define copr-specific macros for make_srpm method - Define copr-specific macros for custom builds - Determine SRPM builds by having source_type - Undefine %dist for SRPM builds - Build SRPM from DistGit even with missing sources - Drop an unused extract_srpm method * Tue Jun 21 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.58-1 - Fix make_srpm with new git - Define copr-specific macros also for SRPM builds - SCM method to clone recursively * Mon Apr 11 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.57-1 - Don't fail a build because of fedora-review - Require a new version of fedora-review tool * Fri Mar 18 2022 Pavel Raiskup <praiskup(a)redhat.com> 0.56-1 - copr-distgit-client: document the configuration for the dist-git subpackage - copr-distgit-client: add the centos-stream configuration - copr-distgit-client: new --forked-from option that allows builds from (any) forks - rpmbuild: support for remote refs in committish (PR#2049 and PR#2081) * Wed Feb 2 2022 Silvie Chlupova <schlupov(a)redhat.com> 0.55.2-1 - don't depend on autospec in EL9 - use config file in *-cancel and *-log scripts - better PID for copr-rpmbuild-log - keep the required common version on one place * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 0.55.1-1 - Fixing copr-common version * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 0.54.2.dev-1 - Fixup ACR handling - Always set 'requests.get()' timeout - Drop ANSI escape sequences from logs again - Install fedora-review-plugin-java * Mon Oct 11 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.54-1 - %auto{spec,changelog} support for DistGit method * Thu Sep 30 2021 Silvie Chlupova 0.53-1 - rpmbuild: require the latest version of gem2rpm - rpmbuild: update main.ini and rpkg.conf.j2 for rpkg 3.0 compatibility * Tue Jun 15 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.52-1 - provide the build results as results.json - ensure the latest *rpm macros packages on builder * Thu May 20 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.51-1 - don't cleanup resultdir itself, only contents * Tue Apr 27 2021 Jakub Kadlcik <frostyx(a)email.cz> 0.50-1 - rpmbuild: properly cleanup mock bootstrap - rpmbuild: document the options in main.ini file - rpmbuild: clarify and encapsulate Provider's directories - rpmbuild: cleanup the Provider class API - rpmbuild: better error for cleanup issue#1258 * Tue Mar 16 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.49-1 - don't require fedora_review tag in task json * Tue Mar 16 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.48-1 - support running the fedora-review tool * Tue Feb 9 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.47-1 - scm method to not enforce 'master' * Tue Feb 9 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.46-1 - rpmbuild: don't checkout master when not requested * Wed Jan 20 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.45-1 - allow disabling modules in the buildroot - fix background process (group) cancellation * Mon Nov 30 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.44-1 - don't override isolation config by default - require appropriate common version - repeatedly send requests to frontend until they succeed * Mon Nov 30 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.43-1 - new --isolation copr option in Copr - require up2date copr-common * Thu Nov 12 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.42-1 - require podman on all builders - move the whole copr-distgit-client below copr-builder - git module name to define the lookaside download url * Wed Nov 11 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.41-1 - non-dev version and release * Mon Nov 9 2020 Jakub Kadlcik <frostyx(a)email.cz> 0.40.2.dev-1 - rpmbuild: fix chroot_scan copying - rpmbuild: fix mock --buildsrpm option - rpmbuild: set Vendor metadata for builds - rpmbuild: use mock --srpmbuild for spec file uploads - frontend, cli, python, rpmbuild: better bootstrap config - beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap - all: run pytest with -vv in package build - rpmbuild: disable source fetch for the dist-git method - rpmbuild: catch FileNotFound on el6 correctly - rpmbuild: drop SourceType and rely on BuildSourceEnum - common, cli, python, rpmbuild, frontend, backend: DistGit source method - rpmbuild: fix Provider class design - rpmbuild: inform about testsuite coverage * Mon Aug 10 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.40-1 - provide the "dynamic" %buildtag - define config_opts['root'] mock config for make srpm method * Tue Jun 9 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.39-1 - more work delegate to builder scripts from backend - don't delete the "old" .rpmnew files - fix macro in comment (rpmlint) * Fri Apr 3 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.38-1 - do not scrub mock caches, to re-use dnf/yum caches - scrub chroot and bootstrap chroot when build is done - invent /etc/copr-rpmbuild/mock-config-overrides config dir - print human friendly error for nonexisting subdirectory - less verbose error output * Wed Feb 19 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.37-1 - add tests that we properly cleanup tmp directories - mock 2.0: config s/use_bootstrap_container/use_bootstrap/ - mock 2.0: disable bootstrap chroot for make_srpm method - put complete set of mock configs to resultdir, in tarball - mock 2.0: use dnf.conf/yum.conf automatically - make sure builders have the latest libsolv * Thu Feb 6 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.36-1 - do not fail if we can not remove temporary we created * Wed Feb 5 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.35-1 - mock config - module_enable needs to be an array - catch FileExistsError in python2 compatible manner * Wed Feb 5 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.34-1 - don't create unnecessary tmp directory - prefix the name of all copr-rpmbuild temporary directory - properly cleanup after obtaining sources, and build failure - add support for mock's module_enable * Fri Dec 6 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.33-1 - rpmbuild: skip_if_unavailable=1 for non-ACR projects * Wed Dec 4 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.32-1 - fix custom method for F31's nspawn (--console=pipe is not default) - buildrequires: add qemu-user-static for building armhfp - module_hotfixes support - define %copr_username again on copr builders - skip_if_unavailable=False for copr_base * Wed Jul 31 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.31-1 - rpmbuild: make sure librepo/libdnf is always up2date * Mon Jul 29 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.30-1 - drop SCM parameters from copr-rpmbuild - implement --task-file and --task-url parameters (issue#517) * Fri Jun 7 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.29-1 - clean /var/cache/mock automatically * Mon May 27 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.28-1 - don't use --private-users=pick * Mon May 20 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.27-1 - enforce use_host_resolv - require even nosync.i686 * Tue May 14 2019 Pavel Raiskup <praiskup(a)redhat.com> 0.26-1 - [rpmbuild] ansible_python_interpreter: /usr/bin/python3 - [rpmbuild] install dnf-utils instead of yum-utils on Fedora - [rpmbuild] builder: document some of the requires - [rpmbuild] builder: merge dependencies from playbooks - [rpmbuild] don't define %_disable_source_fetch - [rpmbuild] use six.moves.urllib.parse - [rpmbuild] download srpm/spec if url contains query string * Wed Apr 24 2019 Jakub Kadl��k <frostyx(a)email.cz> 0.25-1 - remove dependency on python3-configparser * Thu Jan 10 2019 Miroslav Such�� <msuchy(a)redhat.com> 0.24-1 - create copr-rpmbuild-all subpackage - Fix `copr-cli mock-config` after switching to APIv3 by preprocessing repos on frontend - add python-srpm-macros - print nice error when suggested package is not installed - tito and rpkg should be required only by copr-builder - create copr-builder - let mock rootdir generation on clients - rename repos 'url' attribute to 'baseurl' - provide repo_id in project chroot build config - Allow per-package chroot-blacklisting by wildcard patterns - preprocess repo URLs on frontend - revert back Suggests - drop "downloading" state - allow blacklisting packages from chroots * Fri Oct 19 2018 Miroslav Such�� <msuchy(a)redhat.com> 0.23-1 - /usr/bin/env python3 -> /usr/bin/python3 - nicer live logs * Tue Sep 18 2018 clime <clime(a)redhat.com> 0.22-1 - make spec_template for pypi in build config optional - EPEL6 fixes - EPEL7 fixes - Merge #393 `use git_dir_archive instead of git_dir_pack` - handle non-existent chroot for given build-id - fix requests exception - add support for copr:// - generate some sane mock root param when --copr arg is used - add --copr arg to build/dump-configs against copr+chroot build defs - pg#251 Make it possible for user to select pyp2rpm template - --dump-configs option * Wed Aug 29 2018 clime <clime(a)redhat.com> 0.21-1 - [rpmbuild] add possibility to supply rpkg.conf in top-level scm dir - packaging: Python 2/3, RHEL/Fedora fixes * Mon Aug 6 2018 clime <clime(a)redhat.com> 0.20-1 - for py3 use unittest.mock, otherwise mock from python2-mock - avoid subprocess.communicate(timeout=..) - BlockingIOError, IOError -> OSError - hack for optional argparse subparser - fix shebang for epel7 - use fcntl.lockf (works with python 2.7, too) - make copr-rpmbuild installable/buildable on el7 * Fri May 18 2018 clime <clime(a)redhat.com> 0.19-1 - add --with/--without rpmbuild options for build chroot * Thu Apr 26 2018 Dominik Turecek <dturecek(a)redhat.com> 0.18-1 - rpkg deployment into COPR - containers + releng continuation - updates for latest upstream rpkg - update rpkg.conf.j2 to the latest rpkg version - s|/bin/env|/usr/bin/env| in shebang * Fri Feb 23 2018 clime <clime(a)redhat.com> 0.17-1 - remove unused requires and rename rpm-python3 to python3-rpm - switch copr-sources-custom to python3 shebang - keep tmpfs data mounted acros mock invocations for custom method * Mon Feb 19 2018 clime <clime(a)redhat.com> 0.16-1 - new custom source method * Sun Feb 18 2018 clime <clime(a)redhat.com> 0.15-1 - add support for fetch_sources_only in task defition - allow building rpms from srpms fetched by providers, - extend cmdline with scm submode - optionally set a priority for a repo - add test for create_rpmmacros + refactoring - allow only https and ftps protocols for source fetch * Thu Jan 11 2018 clime <clime(a)redhat.com> 0.14-1 - copy out dnf and yum logs when using mock - introspection and --version argument * Mon Dec 11 2017 clime <clime(a)redhat.com> 0.13-1 - update man pages - update help - exclude 'tests' in package auto-discovery - don't install additional stuff into bootstrap of custom buildroot - Bug 1514221 - Copr fails to clone the repository. Build fails. * Thu Nov 9 2017 clime <clime(a)redhat.com> 0.12-1 - fix get_mock_uniqueext call - fortify make_srpm - add '--private-users=pick' to make_srpm container to improve security - compatibility with rpkg-client-0.11 - add config for src.stg.fedoraproject.org into default rpmbuild config - fix download url for new rpkg-client version * Wed Oct 18 2017 clime <clime(a)redhat.com> 0.11-1 - provide option to root spec file path in SCM with '/' - fix exception raising in scm provider - make command debug info nicer - print task structure in the beginning even without -v - add listdir after srpm production - some Git backends do not support --depth - remove unused run method - checkout master by default - with limited depth, we need to clone with --no-single-branch - remove original perl script and mock config for it - remove no longer needed options from rpkg.conf.j2 - SCM source types unification - apply continuing line filtering from f4561c149893 - increase clone depth to address pag#129 SCM source type error * Tue Sep 26 2017 clime <clime(a)redhat.com> 0.10-1 - use https for copr frontend in default config - Make error message when the build task does not exist more user- friendly - add --build-id switch instead of positional argument - do not fail when lockfile does not exist - change arguments to build_id and chroot - remove lockfile import - remove unused requires: - remove unused variables in try-excepts - #138 FileExistsError: [Errno 17] File exists: '/var/lib/copr- rpmbuild/lockfile.lock' * Fri Sep 15 2017 clime <clime(a)redhat.com> 0.9-1 - copy spec file to the result dir to have a quick overview on the package * Thu Sep 14 2017 clime <clime(a)redhat.com> 0.8-1 - provide more verbose exception logging - take timeout into account - fix downstream/upstream condition - set also use_host_resolv to False if enable_net is False - when building rpms, prebuild srpm in mock chroot * Thu Sep 7 2017 clime <clime(a)redhat.com> 0.7-1 - rewrite to python - build-srpm from upstream ability added * Fri Jul 7 2017 clime <clime(a)redhat.com> 0.6-1 - support for source downloading * Tue Jun 27 2017 clime <clime(a)redhat.com> 0.5-1 - use Perl Virtual naming for Requires * Fri Jun 23 2017 clime <clime(a)redhat.com> 0.4-1 - use dnf.conf for custom-1 chroots - also copy .spec to the build result directory - raise curl timeout for downloading sources to be built - changes according to review bz#1460630 - rpmbuild_networking option is now used to enable/disable net * Wed Jun 14 2017 clime <clime(a)redhat.com> 0.3-1 - support for mock's bootstrap container - check each line of sources file separately - allow multiple sources and use current dir for mock as source dir - also check for value of repos first before array referencing in mockcfg.tmpl - handle null for buildroot_pkgs in mockcfg.tmpl * Fri Jun 9 2017 clime <clime(a)redhat.com> 0.2-1 - new package built with tito * Fri Jun 2 2017 clime <clime(a)redhat.com> 0.1-1 - Initial version -------------------------------------------------------------------------------- ================================================================================ grsync-1.3.1-1.el8 (FEDORA-EPEL-2023-735a00eb62) A Gtk+ GUI for rsync -------------------------------------------------------------------------------- Update Information: fixes rhbz#2231904 - grsync-1.3.1 is available -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.3.1-1 - fixes rhbz#2231904 - grsync-1.3.1 is available * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ libpri-1.6.1-1.el8 (FEDORA-EPEL-2023-ae2eef2d3f) An implementation of Primary Rate ISDN -------------------------------------------------------------------------------- Update Information: Update to 1.6.1: q931.c: Fix subaddress finding octet 4. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.6.1-1 - Update to 1.6.1 (close RHBZ#2232386) - New GPG key for dev team -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232386 - libpri-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232386 -------------------------------------------------------------------------------- ================================================================================ python-copr-1.130-1.el8 (FEDORA-EPEL-2023-134dfe248c) Python interface for Copr -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.130-1 - priority=X support added for copr project repositories - several forward/backward compat fixes with libs/tooling -------------------------------------------------------------------------------- ================================================================================ python-copr-common-0.20-1.el8 (FEDORA-EPEL-2023-1c9d3f9e3a) Python code used by Copr -------------------------------------------------------------------------------- Update Information: Copr Servers - August 2023 release -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 0.20-1 - move chroot_to_branch from frontend to copr-common - redis authentication support added * Tue May 23 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.19-1 - Specfile compatibility with OpenEuler * Tue Jan 24 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.18-1 - Periodically dump the priority queue to a JSON file - Use SPDX license * Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.17-1 - move to GitHub home page - logging shouldn't affect stdout - move dispatcher and background workers to copr-common - scripts should log also timestamps etc when logging into file - move setup_script_logger to copr-common * Thu Oct 27 2022 Jakub Kadlcik <frostyx(a)email.cz> - 0.16.2.dev-1 - Add background_worker.py from backend - Add get_redis_connection function - Add Dispatcher, WorkerManager, and QueueTask classes - Add WorkerLimit, PredicateWorkerLimit, and GroupWorkerLimit classes * Sun Oct 2 2022 Jakub Kadlcik <frostyx(a)email.cz> - 0.16-1 - Add setup_script_logger function * Tue Jun 21 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.15-1 - Allow SafeRequest's timeout to be specified * Wed Feb 2 2022 Silvie Chlupova <schlupov(a)redhat.com> 0.14-1 - Fixing copr-common version * Wed Feb 2 2022 Silvie Chlupova <schlupov(a)redhat.com> 0.13.2.dev-1 - dist-git: python code for removing unused tarballs on dist-git server * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 0.13.1-1 - Fixing copr-common version * Wed Nov 10 2021 Silvie Chlupova <schlupov(a)redhat.com> 0.12.2.dev-1 - Always set 'requests.get()' timeout * Tue Jun 15 2021 Pavel Raiskup <praiskup(a)redhat.com> 0.12-1 - new action type for automatically deleting pull-request CoprDirs * Mon Nov 30 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.11-1 - add first tests for copr-common package - repeatedly send requests to frontend until they succeed * Mon Nov 30 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.10-1 - ship LICENSE file in PyPI tarball -------------------------------------------------------------------------------- ================================================================================ ssldump-1.8-1.el8 (FEDORA-EPEL-2023-d3052deb0a) SSL/TLS network protocol analyzer -------------------------------------------------------------------------------- Update Information: # ssldump 1.8 - Switch build system from autotools to cmake - Add `-z` option for printing timestamps in front of TCP headers -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Robert Scheck <robert(a)fedoraproject.org> 1.8-1 - Upgrade to 1.8 (#2231870) * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231870 - ssldump-1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231870 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 17 Aug '23

17 Aug '23

The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-369c889880 chromium-115.0.5790.170-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing GitPython-3.1.32-1.el9 converseen-0.10.0.1-1.el9 copr-cli-1.110-1.el9 copr-rpmbuild-0.69-1.el9 cr-marcstevens-snippets-0^20210722gite01ae88-0.1.el9 epel-release-9-6.el9 grsync-1.3.1-1.el9 libpri-1.6.1-1.el9 lua-ldap-1.3.1-3.el9 openvpn-otp-1.0^20230731git47f8ccf-1.el9 python-copr-1.130-1.el9 python-copr-common-0.20-1.el9 python-mapbox-earcut-1.0.1-3.el9 pythoncapi-compat-0^20230816git91e323f-1.el9 ssldump-1.8-1.el9 Details about builds: ================================================================================ GitPython-3.1.32-1.el9 (FEDORA-EPEL-2023-917679773c) Python Git Library -------------------------------------------------------------------------------- Update Information: New upstream release 3.1.32 completely fixing CVE-2022-24439. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Lubom��r Sedl�� <lsedlar(a)redhat.com> - 3.1.32-1 - New upstream release 3.1.32 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 3.1.31-2 - Rebuilt for Python 3.12 * Tue May 23 2023 Lubom��r Sedl�� <lsedlar(a)redhat.com> - 3.1.31-1 - Update to 3.1.31 (#2170552) * Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.30-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231476 - TRIAGE-CVE-2023-40267 GitPython: Insecure non-multi options in clone and clone_from is not blocked [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2231476 -------------------------------------------------------------------------------- ================================================================================ converseen-0.10.0.1-1.el9 (FEDORA-EPEL-2023-f4b44a65ea) A batch image conversion tool written in C++ with Qt5 and Magick++ -------------------------------------------------------------------------------- Update Information: fix rhbz#2232396 - converseen-0.10.0.1 is available -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.10.0.1-1 - fix rhbz#2232396 - converseen-0.10.0.1 is available * Fri Aug 11 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.10.0.0-1 - update to converseen-0.10.0.0 fixes rhbz#2231420 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Mar 31 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.11.1-1 - Update to 0.9.11.1 fixes rhbz#2177564 * Wed Feb 15 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.11.0-1 - Update to 0.9.11.0 fixes rhbz#2169785 * Sun Feb 12 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.10.1-1 - Update to 0.9.10.1 fixes rhbz#2161445 * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Mon Jan 9 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.10.0-1 - Update to 0.9.10.0 fixes rhbz#2159141 * Thu Jan 5 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 0.9.9.8-2 - Rebuild for ImageMagick 7 * Thu Sep 15 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.8-1 - Update to 0.9.9.8 fixes rhbz#2126958 * Wed Aug 24 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.7-1 - Update to 0.9.9.7 fixes rhbz#2121168 * Fri Aug 19 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.6-1 - Update to 0.9.9.6 fixes rhbz#2103519 * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Mar 21 2022 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.5-1 - Update to 0.9.9.5 fixes rhbz#2031546 * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Sun Oct 17 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.9.9.2-2 - Rebuild against new ImageMagick * Wed Oct 6 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.9.2-1 - Update to 0.9.9.2 fixes rhbz#1979067 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2229724 - [abrt] converseen: qTerminate(): converseen killed by SIGABRT https://bugzilla.redhat.com/show_bug.cgi?id=2229724 -------------------------------------------------------------------------------- ================================================================================ copr-cli-1.110-1.el9 (FEDORA-EPEL-2023-69b82c6596) Command line interface for COPR -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.110-1 - priority=X support for copr DNF repositories added - new 'copr-cli download-build --logs' option added - make the pyp2spec tool the default PyPI spec generator -------------------------------------------------------------------------------- ================================================================================ copr-rpmbuild-0.69-1.el9 (FEDORA-EPEL-2023-c4c747a39b) Run COPR build tasks -------------------------------------------------------------------------------- Update Information: Copr Servers - August 2023 release -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 0.69-1 - require python-specfile (in new enough) version, and use it for specfile parsing instead of parsing the metadata from SRPMs - make sure we have (also) the latest DNF5 on builders - override disttag macro to None - make sure detected epoch is int() or None - build RPMs in one Mock step, instead of two (SRPM and then RPM) - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required) - store review.json generated by fedora-review into the result directory - better/more verbose logging in the results.json generator - drop dependency on simplejson - repeatedly try to download files from lookaside cache - moving the package NEVRA parsing to from backend here into copr-rpmbuild - priority=X support added for the Copr repository itself - query exclusivearch and excludearch from the specfile, and store into results.json * Tue May 23 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.68-1 - Fix python3-backoff dependency * Mon May 22 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.67-1 - Add loggs to python-backoff decorator - Set git.safe_directory as repo rootdir - Explain how to reproduce the build locally - Retry only git clone without checkouting - Use git checkout instead of switch but ignore files * Tue Apr 4 2023 Jiri Kyjovsky <j1.kyjovsky(a)gmail.com> 0.66-1 - Ise 'git switch', not 'git checkout' * Wed Mar 22 2023 Jiri Kyjovsky <j1.kyjovsky(a)gmail.com> 0.65-1 - Add basic "clone" method - Define some copr-specific environment variables * Wed Jan 25 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.64-1 - Add runtime dependency for python-backoff * Tue Jan 24 2023 Jakub Kadlcik <frostyx(a)email.cz> 0.63-1 - Retry when copr-distgit is temporarily down - Don't print traceback for 404 errors on SRPM download - Decode URL encoded characters such as %5E into caret - Use SPDX license * Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.62-1 - migrate from pipes to shlex - move to GitHub home page - use repos from task for custom method - switch to template for custom method - strip trailing / from clone url -------------------------------------------------------------------------------- ================================================================================ cr-marcstevens-snippets-0^20210722gite01ae88-0.1.el9 (FEDORA-EPEL-2023-82e833a6f5) Collection of useful one-file C/C++ headers -------------------------------------------------------------------------------- Update Information: Initial package (close RHBZ#2090707) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0^20210722gite01ae88-0.1 - Initial package (close RHBZ#2090707) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2090707 - Review Request: cr-marcstevens-snippets - Collection of useful one-file C/C++ headers https://bugzilla.redhat.com/show_bug.cgi?id=2090707 -------------------------------------------------------------------------------- ================================================================================ epel-release-9-6.el9 (FEDORA-EPEL-2023-1e3199f53c) Extra Packages for Enterprise Linux repository configuration -------------------------------------------------------------------------------- Update Information: Add EPEL OpenH264 repository (#2053295) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9-6 - Add EPEL OpenH264 repository (#2053295) -------------------------------------------------------------------------------- ================================================================================ grsync-1.3.1-1.el9 (FEDORA-EPEL-2023-cac7123b80) A Gtk+ GUI for rsync -------------------------------------------------------------------------------- Update Information: fixes rhbz#2231904 - grsync-1.3.1 is available -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.3.1-1 - fixes rhbz#2231904 - grsync-1.3.1 is available * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ libpri-1.6.1-1.el9 (FEDORA-EPEL-2023-b29d279809) An implementation of Primary Rate ISDN -------------------------------------------------------------------------------- Update Information: Update to 1.6.1: q931.c: Fix subaddress finding octet 4. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.6.1-1 - Update to 1.6.1 (close RHBZ#2232386) - New GPG key for dev team -------------------------------------------------------------------------------- References: [ 1 ] Bug #2232386 - libpri-1.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232386 -------------------------------------------------------------------------------- ================================================================================ lua-ldap-1.3.1-3.el9 (FEDORA-EPEL-2023-1ac6a6d6ae) LDAP client library for Lua, using OpenLDAP -------------------------------------------------------------------------------- Update Information: Add unretired lua-ldap to EPEL 9. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 9 2023 Christian Krause <chkr(a)fedoraproject.org> - 1.3.1-3 - Disable C89 support to match the lua runtime (required on i686) * Thu Aug 3 2023 Christian Krause <chkr(a)fedoraproject.org> - 1.3.1-2 - Cleanup spec file according to review comments * Sun Jun 25 2023 Christian Krause <chkr(a)fedoraproject.org> - 1.3.1-1 - Unretire lua-ldap (#2217273) - Cleanup spec file - Update to latest upstream - Remove obsolete patches * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2217273 - Review Request: lua-ldap - LDAP client library for Lua, using OpenLDAP https://bugzilla.redhat.com/show_bug.cgi?id=2217273 -------------------------------------------------------------------------------- ================================================================================ openvpn-otp-1.0^20230731git47f8ccf-1.el9 (FEDORA-EPEL-2023-eef50acb52) OpenVPN OTP authentication support -------------------------------------------------------------------------------- Update Information: Initial package -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 11 2023 Christian Schuermann <spike(a)fedoraproject.org> 1.0^20230731git47f8ccf-1 - Initial package -------------------------------------------------------------------------------- ================================================================================ python-copr-1.130-1.el9 (FEDORA-EPEL-2023-69b82c6596) Python interface for Copr -------------------------------------------------------------------------------- Update Information: https://github.com/fedora-copr/copr/issues/2824 (added priority=X DNF parameter per-project) -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.130-1 - priority=X support added for copr project repositories - several forward/backward compat fixes with libs/tooling -------------------------------------------------------------------------------- ================================================================================ python-copr-common-0.20-1.el9 (FEDORA-EPEL-2023-c4c747a39b) Python code used by Copr -------------------------------------------------------------------------------- Update Information: Copr Servers - August 2023 release -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Pavel Raiskup <praiskup(a)redhat.com> 0.20-1 - move chroot_to_branch from frontend to copr-common - redis authentication support added -------------------------------------------------------------------------------- ================================================================================ python-mapbox-earcut-1.0.1-3.el9 (FEDORA-EPEL-2023-5a08c4c4a7) Python bindings to the mapbox earcut C++ library -------------------------------------------------------------------------------- Update Information: Fix FTBFS due to Python version confusion with pybind11 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.0.1-3 - Drop BR on virtual Provides for header-only pybind11 - Fixes FTBFS due to a conflict between Python 3.9 and 3.11 pybind11 packages in EL9; the Python 3.11 one now appears to provide pybind11-static. -------------------------------------------------------------------------------- ================================================================================ pythoncapi-compat-0^20230816git91e323f-1.el9 (FEDORA-EPEL-2023-c0f8fb696f) Python C API compatibility -------------------------------------------------------------------------------- Update Information: Minor enhancements, and several new API functions -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0^20230816git91e323f-1 - Update to 0^20230816git91e323f -------------------------------------------------------------------------------- ================================================================================ ssldump-1.8-1.el9 (FEDORA-EPEL-2023-11b618a00f) SSL/TLS network protocol analyzer -------------------------------------------------------------------------------- Update Information: # ssldump 1.8 - Switch build system from autotools to cmake - Add `-z` option for printing timestamps in front of TCP headers -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Robert Scheck <robert(a)fedoraproject.org> 1.8-1 - Upgrade to 1.8 (#2231870) * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231870 - ssldump-1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2231870 --------------------------------------------------------------------------------

1 0

incompatible update of caddy in EPEL 9
by Carl George 16 Aug '23

16 Aug '23

Per policy [0], this is an announcement that I would like to do an incompatible update of the caddy package in EPEL 9. The version in the EPEL 9 repo is currently 2.4.6. RHEL 8 currently has golang 1.19. Based on my recent investigation of the EPEL 7 package [1], I've discovered just how sensitive caddy is to the version of golang it is built with. Upstream caddy only ever tested version 2.4.6 with golang 1.16 and 1.17 [2]. I did previously build caddy 2.4.6 with golang 1.18, which required swapping out the bundled quic library to work [3]. Thankfully that worked without patching the caddy code, but updating the bundled quic further in order to build with golang 1.19 would require significant patching, which isn't even guaranteed to work. I do not believe that rebuilding caddy at the current version in EPEL 9 is feasible, which prevents even attempting to backport outstanding CVEs. I'm currently tracking two CVEs for the EPEL 9 package that I would like to fix. - CVE-2022-28923 [4][5][6] - CVE-2022-41721 [7][8][9] To resolve these CVEs, and to get compatible with RHEL 9's golang 1.19, I think the best version of caddy to update to is 2.6.4. Updating caddy from 2.4.6 to 2.6.4 includes some backwards-incompatible changes (hence this email). After review, I believe these changes are on the milder side, and most users shouldn't notice a difference. Here are the most notable removals/changes: - Reverse proxy: Incoming X-Forwarded-* headers will no longer be automatically trusted, to prevent spoofing. - Logging: Removed the deprecated common_log field from HTTP access logs, and the single_field encoder. - Logging: The remote_addr field has been replaced by remote_ip and remote_port fields in HTTP access logs, which split up the two parts of the remote address. - Caddyfile: The reverse_proxy directive's handle_response subdirective has had its status replacement functionality moved to a new replace_status subdirective. There are also a few additional changes to features labeled as experimental, and some deprecations (not yet removed). For a full list, see the upstream release notes [10][11]. Finally, I'll note that RHEL 8 has the same version of golang as RHEL 9, so I also targeted caddy 2.6.4 for the initial EPEL 8 package that is on its way to testing [12]. It will be nice to have the same version of caddy in both EPEL 8 and EPEL 9. [0] https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/ [1] https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec… [2] https://github.com/caddyserver/caddy/blob/v2.4.6/.github/workflows/ci.yml#L… [3] https://src.fedoraproject.org/rpms/caddy/c/8a639d7060ef6ff610880429d161b5f0… [4] https://bugzilla.redhat.com/show_bug.cgi?id=2226939 [5] https://access.redhat.com/security/cve/CVE-2022-28923 [6] https://nvd.nist.gov/vuln/detail/CVE-2022-28923 [7] https://bugzilla.redhat.com/show_bug.cgi?id=2232267 [8] https://access.redhat.com/security/cve/CVE-2022-41721 [9] https://nvd.nist.gov/vuln/detail/CVE-2022-41721 [10] https://github.com/caddyserver/caddy/releases/tag/v2.5.0 [11] https://github.com/caddyserver/caddy/releases/tag/v2.6.0 [12] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0b57e19163 -- Carl George

1 0

retiring caddy in EPEL 7
by Carl George 16 Aug '23

16 Aug '23

Per policy [0], this is an announcement that I intend to retire the caddy package in EPEL 7. This package is in a bit of a weird state. The version in the EPEL 7 repo is currently 1.0.3, which was released upstream on 2019-08-14. Upstream development on v1 stopped with the release of 1.0.5 on 2020-02-28. Recently I updated the package from 1.0.3 to 1.0.5 to bring it as current as possible without breaking changes. At the same time I updated a bundled library to resolve CVE-2022-3064 [1], and also expected that rebuilding it with a newer golang would resolve CVE-2022-41717 [2]. I published this update [3] to the testing repo with the intention of testing it myself, but life got in the way and it was promoted to stable before I had a chance to. I also forgot that while I had enabled the test suite in Fedora, I did not have it enabled in the epel7 branch. Unfortunately, I discovered that the binary in this package would core dump immediately and was completely non-functional. As a quick partial mitigation, I asked RelEng to untag the broken build to revert the repository back to the previous build [4]. After investigating the problem, and consulting with upstream, I believe that it is simply not possible to build a working caddy v1 binary with golang 1.19 (the version currently available EPEL 7). Caddy is rather sensitive to the version of golang that it is built with, both for the minimum version, and as I discovered during this ordeal, the maximum version as well. I considered doing an incompatible update to bring the EPEL 7 package to a version of caddy that works with golang 1.19, but ultimately decided against it. It would be a very disruptive incompatible update because the config file format changed drastically between v1 and v2. With a mere ten months left before EPEL 7's retirement, I do not believe it is worth the effort or disruption to do such an incompatible update. Due to the outstanding CVEs, and the inability to even rebuild the package, I think the best course of action is to just retire it. Per policy, I will take this action in one week. As an alternative, the upstream project maintains a Copr repository [5][6] that provides the latest version, even for RHEL 7. This will still be a disruptive update from caddy v1 to v2, but users can opt-in to it at their own pace if they are unable/unwilling to migrate away from RHEL 7 yet. Caddy is also available in EPEL 9, and will be available in EPEL 8 soon [7], so upgrading to RHEL 8 or 9 is another possible route if users are ready to migrate their OS. [0] https://docs.fedoraproject.org/en-US/epel/epel-policy-retirement/#process_s… [1] https://nvd.nist.gov/vuln/detail/CVE-2022-3064 [2] https://nvd.nist.gov/vuln/detail/CVE-2022-41717 [3] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-284c34a6cc [4] https://pagure.io/releng/issue/11606 [5] https://caddyserver.com/docs/install#fedora-redhat-centos [6] https://copr.fedorainfracloud.org/coprs/g/caddy/caddy/ [7] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0b57e19163 -- Carl George

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 16 Aug '23

16 Aug '23

The following Fedora EPEL 7 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5ec56987f0 rust-1.71.1-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d38bbaaf16 chromium-115.0.5790.170-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing fts-rest-client-3.12.3-1.el7 gnucobol-3.2-1.el7 ocserv-1.2.0-2.el7 python-msal-1.23.0-6.el7 smatch-1.73-2.el7 Details about builds: ================================================================================ fts-rest-client-3.12.3-1.el7 (FEDORA-EPEL-2023-a462871a59) File Transfer Service (FTS) -- Python3 Client and CLI -------------------------------------------------------------------------------- Update Information: New upstream release v3.12.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 14 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 3.12.3-1 - New upstream release 3.12.3 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.12.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ gnucobol-3.2-1.el7 (FEDORA-EPEL-2023-ff0f5422b8) COBOL compiler -------------------------------------------------------------------------------- Update Information: 3.2 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 28 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.2-1 - 3.2 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Mar 8 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.2-10 - migrated to SPDX license * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Sep 7 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.2-8 - Rebuild for link issue, disable package note. * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jul 18 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.2-6 - Rebuild to fix linker issue. * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Sat Jul 10 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.1.2-3 - Rebuild for versioned symbols in json-c * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ocserv-1.2.0-2.el7 (FEDORA-EPEL-2023-9ff1aaf365) OpenConnect SSL VPN server -------------------------------------------------------------------------------- Update Information: Restart service on upgrade -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> - 1.2.0-2 - Restart service on upgrade -------------------------------------------------------------------------------- ================================================================================ python-msal-1.23.0-6.el7 (FEDORA-EPEL-2023-8fa00b9060) Microsoft Authentication Library (MSAL) for Python -------------------------------------------------------------------------------- Update Information: Initial package for EPEL7 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-6 - Backport to EPEL7 (close RHBZ#2229737) - We do not build a Python 2 version because there is no python2-jwt. * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-5 - Reflow the description text * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-4 - Confirm the License is SPDX MIT * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-3 - Simplify macro usage: drop srcname and ��forge�� macros * Tue Aug 15 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-2 - Do run tests that can be run offline * Wed Aug 9 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.23.0-1 - Update to 1.23.0 * Wed Aug 9 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.22.0-2 - Backport to EPEL8 (close RHBZ#2229737) * Thu Jul 6 2023 Major Hayden <major(a)redhat.com> - 1.22.0-1 - Update to 1.22.0 rhbz#2219715 * Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 1.20.0-3 - Rebuilt for Python 3.12 * Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.20.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Tue Nov 1 2022 Major Hayden <major(a)redhat.com> - 1.20.0-1 - Update to 1.20.0 * Fri Oct 14 2022 Major Hayden <major(a)redhat.com> - 1.20.0~b1-1 - Update to 1.20.0b1 * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.0~b1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 1.18.0~b1-2 - Rebuilt for Python 3.11 * Tue May 24 2022 Major Hayden <major(a)mhtx.net> - 1.18.0~b1-1 - Update to 1.18.0~b1 * Fri Feb 11 2022 Major Hayden <major(a)mhtx.net> - 1.17.0-1 - Update to 1.17.0 * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.16.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Dec 15 2021 Major Hayden <major(a)mhtx.net> - 1.16.0-1 - Update to 1.16.0 * Fri Nov 12 2021 Major Hayden <major(a)mhtx.net> - 1.15.0-2 - Remove docs * Mon Oct 4 2021 Major Hayden <major(a)mhtx.net> - 1.15.0-1 - �� Update to 1.15.0 * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.13.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jul 21 2021 Major Hayden <major(a)mhtx.net> - 1.13.0-1 - Update to 1.13.0 * Tue Jul 6 2021 Major Hayden <major(a)mhtx.net> - 1.12.0-4 - Fix lato font requirement * Thu Jun 10 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 1.12.0-3 - Fix conditional to work when %fedora is not defined * Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.12.0-2 - Rebuilt for Python 3.10 * Fri Jun 4 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.12.0-1 - Update to 1.12.0 * Sun Mar 21 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.10.0-2 - Fix doc. build + disable online unit tests * Sun Mar 21 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.10.0-1 - Update to 1.10.0 * Mon Feb 15 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.8.0-1 - Update to 1.8.0 * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Jan 8 2021 Tom Stellard <tstellar(a)redhat.com> - 1.4.3-3 - Add BuildRequires: make * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Sat Jul 25 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.4.3-1 - Update to 1.4 3 * Fri Jul 24 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.4.2-1 - Update to 1.4.2 * Sat Jun 27 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.4.1-1 - Update to 1.4.1 * Sun May 31 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.3.0-2 - Rebuild for Python 3.9 * Fri May 29 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.3.0-1 - First import -------------------------------------------------------------------------------- References: [ 1 ] Bug #2229737 - Please provide python3-msal for EPEL8 (and maybe EPEL7 if it is going to fly) https://bugzilla.redhat.com/show_bug.cgi?id=2229737 -------------------------------------------------------------------------------- ================================================================================ smatch-1.73-2.el7 (FEDORA-EPEL-2023-975fdddc0f) A static analyzer for C -------------------------------------------------------------------------------- Update Information: ``` * Tue Aug 15 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 1.73-2 - drop %{?isa} for a noarch package * Tue Aug 15 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 1.73-1 - Initial import ``` -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 1.73-2 - drop %{?isa} for a noarch package * Tue Aug 15 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 1.73-1 - Initial import --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel August 2023