epel-devel January 2013

epel-devel@lists.fedoraproject.org

18 participants
31 discussions

Start a nNew thread

How can I commit a new package to EPEL5?
by Kirby Zhou 29 Jan '15

29 Jan '15

How can I commit a new package to EPEL5? I adapted python3-3.1.2 from F-13 to RHEL5, anyone need it?

5 10

Fixed but buggy - Re: [CentOS] More on amavis/clam permission errors on Centos 6.3
by Robert Moskowitz 31 Jan '13

31 Jan '13

Posted on the Centos list originally. I believe this is a bug in the amavis package and maybe the clamav package. On 01/31/2013 07:05 AM, Ned Slider wrote: > On 31/01/13 11:17, Robert Moskowitz wrote: >> On 01/31/2013 02:30 AM, John Hinton wrote: >>> On 1/30/2013 5:05 PM, Robert Moskowitz wrote: >>>> On 01/30/2013 04:31 PM, Nicolas Thierry-Mieg wrote: >>>>> Robert Moskowitz wrote: >>>>>> I should probably find either the amavis or clam list(s) and take this >>>>>> there? >>>>>> >>>>> <snip> >>>>>> Oh, I have not applied the updated policy rpms that Dan Walsh pointed me >>>>>> to. This is all 'out of the box' rpms, following the amavis/clamav >>>>>> recommendations from: http://wiki.centos.org/HowTos/Amavisd >>>>> is it? so your rpms come from rpmforge? I thought you mentioned epel at >>>>> some point. Hopefully you're not mixing them? >>>> Sorry, I followed the HowTo, but got all the rpms from epel. >>>> >>>>> If you are, then that might be your problem. >>>>> If you really followed the wiki instructions you must be using RF >>>>> packages, so you could take it to the RF list. >>>>> And if you're using epel, then you didn't follow the wiki instructions >>>>> but nevertheless you should take it to the epel list... >>>> epel list. Hmm. Now to find that. >>>> >>>> Thanks for the direction. >>>> >>> Read near the top of the amavis config file. It will reference the >>> directories you are having trouble with. It tells you to create them and >>> that they need to be owned by whatever you set the amavis user to be. It >>> is all right there in the conf file. >>> >> Yes, I read that. >> >> >> amavis from the epel repo defaults to /var/spool/amavisd which is owned >> by amavis:amavis with permissions 700. >> >> The rpm created the subdirs under this of quarantine, tmp, and db also >> owned by amavis:amavis with permissions 700. I had to create var myself >> for spamassassin to use. >> >> The permissions problem is under /var/spool/amavis/tmp if you look at >> the maillog entry. I have altered all permissions to 750 and still have >> the problem; the directory created is with 700, and perhaps that is why >> the problem? >> > Permissions should be 750 as the clamav user is a member of the amavis > group and needs group access. So this is one bug for epel, as the rpm creates the directories with the wrong permissions. Either do it right, or leave to the installer. So I just changed all the amavis directories to 750 and restarted both amavisd and clamd and it worked this time! I thought I did the restart back before the rebuild, but maybe I didn't or I had other things configured wrong. So this IS a bug in the packaging for me to submit to epel. > >> I am thinking to change the clamd conf files to run with user amavis >> instead of clam and see if that gets around the problem... >> > That will likely cause other problems. The clamav user just needs to be > a member of the amavis group. That was my initial read, but as my frustration was rising, it looked like a way to troubleshoot the problem. So now I don't have to try this. > >> I have joined the epel-devel list (I did not find an epel-users list) >> and posted this there yesterday. I see that epel repo is the same >> version currently available from rpmforge that the howto uses. >> Interestingly, rpmforge uses userid clamav and epel uses userid clam. >> Don't know what other differences there are. So far no replies on the >> epel list. >> > As you have seen there are differences between the packages. This makes > the CentOS documentation worthless to you as you are not using the same > versions used in the documentation. I had hopes that the 'official' packaging would work well, particularly now that both are on the same release. I really wanted to do this all 'official' packages. I know there is nothing wrong with rpmforge, I use it for a number of things, just this time around for mail, I was shooting for 'fully supported cruft'. Shows how good that approach takes! > You should take this thread, and your issue, to the EPEL list as it > really has nothing to do with CentOS. Well I have and will post this there as well and submit the bug report. I have two on these packages so far. I started here as I did not know where best to take it (for example an amavis or clamav list?) but more becuase I was hoping that there would be Centos users that have worked with these packages and might be kind enough to share their insights. And thank you for your help.

2 2

New - problems with amavis-new and clamav on Centos 6.3
by Robert Moskowitz 30 Jan '13

30 Jan '13

I hope I have come to the right place for help. My travails have been reported on the Centos list... I am setting up a mailserver on Centos 6.3. I am guided by two Howtos: http://www.campworld.net/thewiki/pmwiki.php/LinuxServersCentOS/Cent6VirtMai… and http://wiki.centos.org/HowTos/Amavisd The former I used for setting up Postfix/mysql/postfixadmin/dovecot/Roundcube for basic mail handling. The later I used for the anti-stuff, but instead of using the rpms from rpmforge, I used the epel rpms, so here I am with my problems. It looks like a permissions problem; at least that is what I am seeing in maillog. I am using the test messages shown in sec 4 of the amavisd howto pointed to above: Jan 30 14:14:10 test1 postfix/pickup[6682]: DA8082A099B: uid=0 from=<root> Jan 30 14:14:10 test1 postfix/cleanup[6773]: DA8082A099B: message-id=<20130130191410.DA8082A099B(a)test1.test.htt-consult.com> Jan 30 14:14:10 test1 postfix/qmgr[6683]: DA8082A099B: from=<root(a)test1.test.htt-consult.com>, size=446, nrcpt=1 (queue active) Jan 30 14:14:11 test1 amavis[6756]: (06756-01) LMTP::10024 /var/spool/amavisd/tmp/amavis-20130130T141411-06756: <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com> SIZE=446 Received: from test1.test.htt-consult.com ([127.0.0.1]) by localhost (test1.test.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <faxit(a)test.htt-consult.com>; Wed, 30 Jan 2013 14:14:11 -0500 (EST) Jan 30 14:14:11 test1 amavis[6756]: (06756-01) Checking: 95-+1-aqz4Cb <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com> Jan 30 14:14:11 test1 amavis[6756]: (06756-01) (!)run_av (ClamAV-clamd) FAILED - unexpected , output="/var/spool/amavisd/tmp/amavis-20130130T141411-06756/parts: lstat() failed: Permission denied. ERROR\n" Jan 30 14:14:11 test1 amavis[6756]: (06756-01) (!)ClamAV-clamd av-scanner FAILED: CODE(0x9fff7b8) unexpected , output="/var/spool/amavisd/tmp/amavis-20130130T141411-06756/parts: lstat() failed: Permission denied. ERROR\n" at (eval 100) line 594. Jan 30 14:14:11 test1 amavis[6756]: (06756-01) (!!)WARN: all primary virus scanners failed, considering backups Jan 30 14:14:21 test1 amavis[6756]: (06756-01) Blocked INFECTED (Eicar-Test-Signature), <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com>, Message-ID: <20130130191410.DA8082A099B(a)test1.test.htt-consult.com>, mail_id: 95-+1-aqz4Cb, Hits: -, size: 446, 10352 ms Jan 30 14:14:21 test1 postfix/lmtp[6777]: DA8082A099B: to=<faxit(a)test.htt-consult.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=11, delays=0.19/0.01/0.01/10, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=06756-01 - INFECTED: Eicar-Test-Signature) Jan 30 14:14:21 test1 postfix/qmgr[6683]: DA8082A099B: removed Jan 30 14:18:37 test1 postfix/pickup[6682]: 6E6342A099C: uid=0 from=<root> Jan 30 14:18:37 test1 postfix/cleanup[6807]: 6E6342A099C: message-id=<GTUBE1.1010101(a)example.net> Jan 30 14:18:37 test1 postfix/qmgr[6683]: 6E6342A099C: from=<root(a)test1.test.htt-consult.com>, size=947, nrcpt=1 (queue active) Jan 30 14:18:37 test1 amavis[6755]: (06755-01) LMTP::10024 /var/spool/amavisd/tmp/amavis-20130130T141837-06755: <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com> SIZE=947 Received: from test1.test.htt-consult.com ([127.0.0.1]) by localhost (test1.test.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <faxit(a)test.htt-consult.com>; Wed, 30 Jan 2013 14:18:37 -0500 (EST) Jan 30 14:18:37 test1 amavis[6755]: (06755-01) Checking: iVLEI2wVyvfc <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com> Jan 30 14:18:37 test1 amavis[6755]: (06755-01) (!)run_av (ClamAV-clamd) FAILED - unexpected , output="/var/spool/amavisd/tmp/amavis-20130130T141837-06755/parts: lstat() failed: Permission denied. ERROR\n" Jan 30 14:18:37 test1 amavis[6755]: (06755-01) (!)ClamAV-clamd av-scanner FAILED: CODE(0x9fff7b8) unexpected , output="/var/spool/amavisd/tmp/amavis-20130130T141837-06755/parts: lstat() failed: Permission denied. ERROR\n" at (eval 100) line 594. Jan 30 14:18:37 test1 amavis[6755]: (06755-01) (!!)WARN: all primary virus scanners failed, considering backups Jan 30 14:19:01 test1 amavis[6755]: (06755-01) Blocked SPAM, <root(a)test1.test.htt-consult.com> -> <faxit(a)test.htt-consult.com>, Message-ID: <GTUBE1.1010101(a)example.net>, mail_id: iVLEI2wVyvfc, Hits: 1005.069, size: 947, 23998 ms Jan 30 14:19:01 test1 postfix/lmtp[6811]: 6E6342A099C: to=<faxit(a)test.htt-consult.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=24, delays=0.13/0.01/0.01/24, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=06755-01 - SPAM) Jan 30 14:19:01 test1 postfix/qmgr[6683]: 6E6342A099C: removed Note the permissions denied above. I am really unsure of how clamav is running. The howto references a userid of clamav, but the rpm from epel sets up a user of clam and that is what I believe I have adjusted for. Then there are the conf files: /etc/clamd.conf /etc/clamd.d/amavisd.conf /etc/amavisd.conf Getting the .pid and .sock for clam all correct for these three took a bit. One would think that since they came from the same repo, things would line up better. I *believe* that clamd is running under userid clam and I have added clam to the amavis group. So I hope I have come to the right place that can help me get this working. thank you

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 29 Jan '13

29 Jan '13

The following Fedora EPEL 6 Security updates need testing: Age URL 282 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0112/ettercap-0.7.… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0174/tinymce-spell… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0193/couchdb-1.0.4… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0194/seamonkey-2.1… 25 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0018/drupal7-conte… 59 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13610/drupal6-ctoo… 205 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3-1… 470 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0123/python-tw2-jq… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0106/moodle-2.1.10… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0128/php-symfony2-… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0157/proftpd-1.3.3… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0144/zabbix-1.8.16… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0170/asterisk-1.8.… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0141/drupal7-7.19-… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0155/zabbix20-2.0.… The following builds have been pushed to Fedora EPEL 6 updates-testing calendar-1.25-8.el6 drupal7-date_ical-2.2-1.el6 dvisvgm-1.1-1.el6 erlang-eleveldb-1.2.2-1.el6 fail2ban-0.8.8-2.el6 fedora-review-0.4.0-1.el6 gitolite3-3.3-1.el6 jabberd-2.2.14-5.el6 jemalloc-3.3.0-1.el6 nfsometer-1.3-1.el6 openstack-packstack-2012.2.2-0.6.dev345.el6 openstack-packstack-2012.2.2-0.7.dev346.el6 php-Metadata-1.1.1-1.el6 php-PhpOption-1.1.0-1.el6 php-pear-Text-CAPTCHA-0.4.4-1.el6 php-twig-Twig-1.12.1-1.el6 plowshare-0.9.4-0.40.20130126git.el6 python-fedora-0.3.32.1-1.el6 python-requests-0.14.1-2.el6 python-simplevisor-0.7-1.el6 python-straight-plugin-1.4.0-1.el6 tor-0.2.3.25-4.el6 trafficserver-3.2.4-2.el6 Details about builds: ================================================================================ calendar-1.25-8.el6 (FEDORA-EPEL-2013-0214) Reminder utility -------------------------------------------------------------------------------- Update Information: Sometimes calendar outputs a previous entry with today's date. For example, if there are two entries in .calendar: Jan 3 Today is Thursday January 3 Jan 4 Today is Friday January 4 Run calendar on Friday Jan 4, and the output will be: Jan 4 Today is Thursday January 3 Jan 4 Today is Friday January 4 The first entry is erroneous; the date is wrong. The problem was due to missing braces for the 'adjust bodun rate' if() block in the calendar-1.25-linux.patch. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2013 David Cantrell <dcantrell(a)redhat.com> - 1.25-8 - Add missing braces to 'adjust bodun rate' block (#892234) -------------------------------------------------------------------------------- References: [ 1 ] Bug #892234 - calendar mismatches entries during "Friday through Monday" processing (with fix) https://bugzilla.redhat.com/show_bug.cgi?id=892234 -------------------------------------------------------------------------------- ================================================================================ drupal7-date_ical-2.2-1.el6 (FEDORA-EPEL-2013-0208) Allows creation of an iCal feed in Views -------------------------------------------------------------------------------- Update Information: Update to upstream 2.2 release -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #903583 - drupal7-date_ical-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=903583 -------------------------------------------------------------------------------- ================================================================================ dvisvgm-1.1-1.el6 (FEDORA-EPEL-2013-0220) DVI to SVG converter -------------------------------------------------------------------------------- Update Information: The latest release of dvisvgm is a small feature update that introduces support for sub-fonts, TrueType collections (.ttc files), and PDF mapline/mapfile specials. These additions enable dvisvgm to convert a subset of DVI files created with CTeX, for example. For further information including a more detailed list of recent changes see the project page http://dvisvgm.sourceforge.net. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 29 2013 Martin Gieseking <martin.gieseking(a)uos.de> 1.1-1 - Updated to new upstream release. -------------------------------------------------------------------------------- ================================================================================ erlang-eleveldb-1.2.2-1.el6 (FEDORA-EPEL-2013-0219) Erlang LevelDB API -------------------------------------------------------------------------------- Update Information: * Initial build for EPEL -------------------------------------------------------------------------------- ================================================================================ fail2ban-0.8.8-2.el6 (FEDORA-EPEL-2013-0210) Ban IPs that make too many password failures -------------------------------------------------------------------------------- Update Information: Add patch to prevent sshd blocks of successful logins for systems that use sssd or ldap. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 18 2013 Orion Poplawski <orion(a)cora.nwra.com> - 0.8.8-2 - Add patch to prevent sshd blocks of successful logins for systems that use sssd or ldap -------------------------------------------------------------------------------- ================================================================================ fedora-review-0.4.0-1.el6 (FEDORA-EPEL-2013-0216) Review tool for fedora rpm packages -------------------------------------------------------------------------------- Update Information: - The deprecated JSON api has been removed. - Patch-naming check not mandated by GL is removed (#179). - New checks: * Bundled gnulib check (#53). * Run phpci static analyzer on php packages (#63). * Various scriptlet checks (#152). * Tmpfiles.d check (#156). * Bundled fonts check (#155). * Improper %_sourcedir usage test (#154). * Test that sources could be downloaded from SourceX: tag (#198) - Improved report layout (#135). - Improved console output, notably invisible yellow text fixed. (#185). - The report has got a fixed name 'review.txt'. - It's now possible to create a python plugin with some tests which becomes part of an existing group e. g., a plugin with one new php test (#182). - Improved handling of mock build failures (#79). - Make used buildroot more visible (#147). - New Guidelines update (#161). - Various internal refactoring and clean-ups: #134, #140, #145, #172 and a lot of commits... - Improved unit tests, notably for plugins. Unit tests are now packaged (#146, #163, many commits). - Roughly 20 other bugs fixed. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2013 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 0.4.0-1 - Updating to upstream 0.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #889087 - Unreadable colors in terminal with white background https://bugzilla.redhat.com/show_bug.cgi?id=889087 [ 2 ] Bug #881337 - AttributeError: 'GemCheckRequiresRubygems' object has no attribute 'spec_packages' https://bugzilla.redhat.com/show_bug.cgi?id=881337 [ 3 ] Bug #872898 - other Fatal error: Exception down the road https://bugzilla.redhat.com/show_bug.cgi?id=872898 [ 4 ] Bug #845651 - AttributeError: 'Source' object has no attribute 'filename' https://bugzilla.redhat.com/show_bug.cgi?id=845651 -------------------------------------------------------------------------------- ================================================================================ gitolite3-3.3-1.el6 (FEDORA-EPEL-2013-0201) Highly flexible server for git directory version tracker -------------------------------------------------------------------------------- Update Information: Update to 3.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #904185 - Update Request: gitolite3 in EPEL to version 3.3 https://bugzilla.redhat.com/show_bug.cgi?id=904185 -------------------------------------------------------------------------------- ================================================================================ jabberd-2.2.14-5.el6 (FEDORA-EPEL-2013-0226) OpenSource server implementation of the Jabber protocols -------------------------------------------------------------------------------- Update Information: fixes "jabberd has problems talking to ejabberd" -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 24 2013 Adrian Reber <adrian(a)lisas.de> - 2.2.14-5 - added patch for "Utilize XML_SetHashSalt" (#903205) https://github.com/Jabberd2/jabberd2/pull/5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #903205 - jabberd has problems talking to ejabberd https://bugzilla.redhat.com/show_bug.cgi?id=903205 -------------------------------------------------------------------------------- ================================================================================ jemalloc-3.3.0-1.el6 (FEDORA-EPEL-2013-0221) General-purpose scalable concurrent malloc implementation -------------------------------------------------------------------------------- Update Information: New upstream release >From the upstream release notes: 3.3.0 (January 23, 2013) This version includes a few minor performance improvements in addition to the listed new features and bug fixes. New features: - Add clipping support to lg_chunk option processing. - Add the --enable-ivsalloc option. - Add the --without-export option. - Add the --disable-zone-allocator option. Bug fixes: - Fix "arenas.extend" mallctl to output the number of arenas. - Fix chunk_recycyle() to unconditionally inform Valgrind that returned memory is undefined. - Fix build break on FreeBSD related to alloca.h -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 25 2013 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 3.3.0-1 - New upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #903589 - jemalloc-3.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=903589 -------------------------------------------------------------------------------- ================================================================================ nfsometer-1.3-1.el6 (FEDORA-EPEL-2013-0205) NFS Performance Framework Tool -------------------------------------------------------------------------------- Update Information: NFSometer is a performance measurement framework for running workloads and reporting results across NFS protocol versions, NFS options and Linux NFS client implementations. -------------------------------------------------------------------------------- ================================================================================ openstack-packstack-2012.2.2-0.6.dev345.el6 (FEDORA-EPEL-2013-0204) Openstack Install Utility -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. Here is where you give an explanation of your update. Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ================================================================================ openstack-packstack-2012.2.2-0.7.dev346.el6 (FEDORA-EPEL-2013-0225) Openstack Install Utility -------------------------------------------------------------------------------- Update Information: Here is where you give an explanation of your update. -------------------------------------------------------------------------------- ================================================================================ php-Metadata-1.1.1-1.el6 (FEDORA-EPEL-2013-0203) Class/method/property metadata management in PHP -------------------------------------------------------------------------------- Update Information: This library provides some commonly needed base classes for managing metadata for classes, methods and properties. The metadata can come from many different sources (annotations, YAML/XML/PHP configuration files). The metadata classes are used to abstract away that source and provide a common interface for all of them. -------------------------------------------------------------------------------- References: [ 1 ] Bug #903767 - Review Request: php-Metadata - Class/method/property metadata management in PHP https://bugzilla.redhat.com/show_bug.cgi?id=903767 -------------------------------------------------------------------------------- ================================================================================ php-PhpOption-1.1.0-1.el6 (FEDORA-EPEL-2013-0218) Option type for PHP -------------------------------------------------------------------------------- Update Information: This package adds an Option type for PHP. The Option type is intended for cases where you sometimes might return a value (typically an object), and sometimes you might return no value (typically null) depending on arguments, or other runtime factors. Often times, you forget to handle the case where no value is returned. Not intentionally of course, but maybe you did not account for all possible states of the system; or maybe you indeed covered all cases, then time goes on, code is refactored, some of these your checks might become invalid, or incomplete. Suddenly, without noticing, the no value case is not handled anymore. As a result, you might sometimes get fatal PHP errors telling you that you called a method on a non-object; users might see blank pages, or worse. On one hand, the Option type forces a developer to consciously think about both cases (returning a value, or returning no value). That in itself will already make your code more robust. On the other hand, the Option type also allows the API developer to provide more concise API methods, and empowers the API user in how he consumes these methods. -------------------------------------------------------------------------------- References: [ 1 ] Bug #903766 - Review Request: php-PhpOption - Option type for PHP https://bugzilla.redhat.com/show_bug.cgi?id=903766 -------------------------------------------------------------------------------- ================================================================================ php-pear-Text-CAPTCHA-0.4.4-1.el6 (FEDORA-EPEL-2013-0209) Generation of CAPTCHAs -------------------------------------------------------------------------------- Update Information: Implementation of CAPTCHAs (completely automated public Turing test to tell computers and humans apart) -------------------------------------------------------------------------------- References: [ 1 ] Bug #896019 - Review Request: php-pear-Text-CAPTCHA - Generation of CAPTCHAs https://bugzilla.redhat.com/show_bug.cgi?id=896019 -------------------------------------------------------------------------------- ================================================================================ php-twig-Twig-1.12.1-1.el6 (FEDORA-EPEL-2013-0213) The flexible, fast, and secure template engine for PHP -------------------------------------------------------------------------------- Update Information: 1.12.1 (2013-01-15) * added support for object instances as the second argument of the constant function * relaxed globals management to avoid a BC break * added support for {{ some_string[:2] }} See: http://blog.twig.sensiolabs.org/post/40619021918/twig-1-12-1-released Full changelog: https://github.com/fabpot/Twig/blob/v1.12.1/CHANGELOG 1.12.0 (2012-01-08) * added verbatim as an alias for the raw tag to avoid confusion with the raw filter * fixed registration of tests and functions as anonymous functions * fixed globals management 1.12.0-RC1 (2012-12-29) * added an include function (does the same as the include tag but in a more flexible way) * added the ability to use any PHP callable to define filters, functions, and tests * added a syntax error when using a loop variable that is not defined * added the ability to set default values for macro arguments * added support for named arguments for filters, tests, and functions * moved filters/functions/tests syntax errors to the parser * added support for extended ternary operator syntaxes Full changelog: https://github.com/fabpot/Twig/blob/v1.12.0/CHANGELOG See: * http://blog.twig.sensiolabs.org/post/40011861424/twig-1-12-0-released * http://blog.twig.sensiolabs.org/post/39237503408/twig-1-12-0-rc1-released -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 18 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.12.1-1 - Updated to upstream version 1.12.1 * Sun Jan 13 2013 Shawn Iwinski <shawn.iwinski(a)gmail.com> 1.12.0-1 - Updated to upstream version 1.12.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #895917 - php-twig-Twig-1.12.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=895917 [ 2 ] Bug #893710 - php-twig-Twig-1.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=893710 -------------------------------------------------------------------------------- ================================================================================ plowshare-0.9.4-0.40.20130126git.el6 (FEDORA-EPEL-2013-0217) Download and upload files from file-sharing websites -------------------------------------------------------------------------------- Update Information: New upstream snapshot. -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 27 2013 Elder Marco <eldermarco(a)fedoraproject.org> - 0.9.4-0.40.20130126git - New upstream snapshot -------------------------------------------------------------------------------- ================================================================================ python-fedora-0.3.32.1-1.el6 (FEDORA-EPEL-2013-0206) Python modules for talking to Fedora Infrastructure Services -------------------------------------------------------------------------------- Update Information: * Port from python-pycurl to python-requests to make the http connections to the servers. * Fixes a problem with soprovidercsrf if the database doesn't set an encoding * Fixes an issue with the login templates if the template is being translated. * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) * Fixes a problem with soprovidercsrf if the database doesn't set an encoding * Fixes an issue with the login templates if the template is being translated. * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) * Fixes a problem with soprovidercsrf if the database doesn't set an encoding * Fixes an issue with the login templates if the template is being translated. * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) * Fixes a problem with soprovidercsrf if the database doesn't set an encoding * Fixes an issue with the login templates if the template is being translated. * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 24 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.3.32.1-1 - Fix a documentation bug that slipped through * Wed Jan 23 2013 Ralph Bean <rbean(a)redhat.com> - 0.3.32-1 - Replace pyCurl with python-requests in ProxyClient. * Tue Jan 22 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.3.31-1 - Minor bugfix release * Thu Jan 10 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.3.30-1 - Make TG's loginForm and CSRF's text translated from tg-apps (laxathom). - Fix a bug in fedora.tg.utils.tg_absolute_url - Add a lookup email parameter to gravatar lookups - Add an auth provider for flask -------------------------------------------------------------------------------- ================================================================================ python-requests-0.14.1-2.el6 (FEDORA-EPEL-2013-0215) HTTP library, written in Python, for human beings -------------------------------------------------------------------------------- Update Information: More modern; cookie support. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2013 Ralph Bean <rbean(a)redhat.com> 0.14.1-2 - Merged latest rawhide into el6. * Mon Oct 22 2012 Arun S A G <sagarun(a)gmail.com> 0.14.1-1 - Updated to latest upstream release * Sun Jun 10 2012 Arun S A G <sagarun(a)gmail.com> 0.13.1-1 - Updated to latest upstream release 0.13.1 - Use system provided ca-certificates - No more async requests use grrequests https://github.com/kennethreitz/grequests - Remove gevent as it is no longer required by requests -------------------------------------------------------------------------------- References: [ 1 ] Bug #904243 - Package newer python-requests https://bugzilla.redhat.com/show_bug.cgi?id=904243 -------------------------------------------------------------------------------- ================================================================================ python-simplevisor-0.7-1.el6 (FEDORA-EPEL-2013-0222) Python simple daemons supervisor -------------------------------------------------------------------------------- Update Information: Updating to latest upstream 0.7. -------------------------------------------------------------------------------- ================================================================================ python-straight-plugin-1.4.0-1.el6 (FEDORA-EPEL-2013-0223) Python plugin loader -------------------------------------------------------------------------------- Update Information: Update to 1.4.0 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 25 2013 Pierre-Yves Chibon - 1.4.0-1 - Update to 1.4.0 - Remove doc as they are not part of the sources anymore (reported upstream) - Comment out the tests as they are apparently also not in the sources anymore - Add python{,3}-setuptools as BR * Sat Aug 4 2012 David Malcolm <dmalcolm(a)redhat.com> - 1.1.1-0.10.20111110.git57ef11c - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.1-0.9.20111110.git57ef11c - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1.1-0.8.20111110.git57ef11c - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ tor-0.2.3.25-4.el6 (FEDORA-EPEL-2013-0207) Anonymizing overlay network for TCP (The onion router) -------------------------------------------------------------------------------- Update Information: Various fixes for the initscript Remove dependency on fedora-usermgmt-devel Rewrite package from scratch and update to 0.2.3.25 -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 28 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.2.3.25-4 - add defaults-torrc - amend %pre scriptlet to add toranon user even when updating - several fixes to initscript including: - do not use torctl - use configuration from defaults-torrc - send SIGINT to shutdown gracefully - use --verify-config before starting, restarting or reloading - remove unnecessary variables -------------------------------------------------------------------------------- ================================================================================ trafficserver-3.2.4-2.el6 (FEDORA-EPEL-2013-0211) Fast, scalable and extensible HTTP/1.1 compliant caching proxy server -------------------------------------------------------------------------------- Update Information: Updated to 3.2.4 final. This fixes numerous bugs (including crashes) since the current v3.0.x version in EPEL, but there are a couple of incompatible configuration parameter changes, ref: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+3.2 1- SSL certificate configuration is now done in ssl_multicert.config. 2- removed proxy.config.http.quick_filter.mask from records.config. This functionality is moved to ip_allow.config. 3- There are changes to the DNS cache, so the /var/cache/trafficserver/host.db should be deleted before upgrading. 4- changes to stats snapshot file (/var/run/trafficserver/stats.snap) 5- deprecation of old port configuration parameters 1,2 - incompatible config options. 3,4 - files should be removed while trafficserver is stopped, before upgrading it 5 - Only deprecation. This version is intended for testing only. Point 3 and 4 should be fixed automatically by the upgrade before creating a final release. Also notification will be sent to EPEL-announce. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 26 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-2 - Update to 3.2.4 final. * Sat Jan 19 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-1 - Update to 3.2.4 release candiate * Fri Jan 4 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.3-1 - Update to v3.2.3. Remove patches no longer needed. * Fri Aug 24 2012 Václav Pavlín <vpavlin(a)redhat.com> - 3.2.0-6 - Scriptlets replaced with new systemd macros (#851462) * Thu Aug 16 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-5 - Add patch for TS-1392, to fix problem with SNI fallback. * Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jun 25 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-2 - Remove duplicate man-pages. * Sat Jun 23 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-1 - Update to v3.2.0 * Sun Jun 10 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.5-1 - Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk. * Fri Apr 13 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.4-5 - Add hardened build. * Wed Apr 11 2012 <janfrode(a)tanso.net> - 3.0.4-4 - Add patch for gcc-4.7 build issues. * Mon Apr 9 2012 Dan Horák <dan[at]danny.cz> - 3.0.4-3 - switch to ExclusiveArch --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 29 Jan '13

29 Jan '13

The following Fedora EPEL 5 Security updates need testing: Age URL 282 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 177 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 59 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13612/drupal6-ctoo… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0171/moodle-1.9.19… 5 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0173/couchdb-1.0.4… 25 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0011/drupal7-conte… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0116/drupal6-6.28-… 13 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0102/ettercap-0.7.… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0139/proftpd-1.3.3… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0148/drupal7-7.19-… The following builds have been pushed to Fedora EPEL 5 updates-testing drupal7-date_ical-2.2-1.el5 php-pear-Text-CAPTCHA-0.4.4-1.el5 plowshare-0.9.4-0.40.20130126git.el5 python-simplevisor-0.7-1.el5 Details about builds: ================================================================================ drupal7-date_ical-2.2-1.el5 (FEDORA-EPEL-2013-0227) Allows creation of an iCal feed in Views -------------------------------------------------------------------------------- Update Information: Update to upstream 2.2 release -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #903583 - drupal7-date_ical-2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=903583 -------------------------------------------------------------------------------- ================================================================================ php-pear-Text-CAPTCHA-0.4.4-1.el5 (FEDORA-EPEL-2013-0202) Generation of CAPTCHAs -------------------------------------------------------------------------------- Update Information: Implementation of CAPTCHAs (completely automated public Turing test to tell computers and humans apart) -------------------------------------------------------------------------------- References: [ 1 ] Bug #896019 - Review Request: php-pear-Text-CAPTCHA - Generation of CAPTCHAs https://bugzilla.redhat.com/show_bug.cgi?id=896019 -------------------------------------------------------------------------------- ================================================================================ plowshare-0.9.4-0.40.20130126git.el5 (FEDORA-EPEL-2013-0224) Download and upload files from file-sharing websites -------------------------------------------------------------------------------- Update Information: New upstream snapshot. -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 27 2013 Elder Marco <eldermarco(a)fedoraproject.org> - 0.9.4-0.40.20130126git - New upstream snapshot -------------------------------------------------------------------------------- ================================================================================ python-simplevisor-0.7-1.el5 (FEDORA-EPEL-2013-0212) Python simple daemons supervisor -------------------------------------------------------------------------------- Update Information: Updating to latest upstream 0.7. --------------------------------------------------------------------------------

1 0

Updating python-requests for epel6
by Ralph Bean 28 Jan '13

28 Jan '13

I'm going to be bumping python-requests in epel6 from 0.11.1 to 0.14.1. If you are using python-requests and think this will cause issues for you, let me know so we can work out a solution.

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 24 Jan '13

24 Jan '13

The following Fedora EPEL 6 Security updates need testing: Age URL 278 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0112/ettercap-0.7.… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0174/tinymce-spell… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0193/couchdb-1.0.4… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0194/seamonkey-2.1… 20 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0018/drupal7-conte… 55 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13610/drupal6-ctoo… 200 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3-1… 466 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 11 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0081/nagios-3.4.4-… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0123/python-tw2-jq… 8 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0106/moodle-2.1.10… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0128/php-symfony2-… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0157/proftpd-1.3.3… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0144/zabbix-1.8.16… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0170/asterisk-1.8.… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0141/drupal7-7.19-… 2 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0155/zabbix20-2.0.… The following builds have been pushed to Fedora EPEL 6 updates-testing GMT-4.5.9-1.el6 GMT-coastlines-2.2.2-1.el6 Zim-0.59-1.el6 trac-CGit-plugin-1.0.5-1.el6 yourls-1.5.1-1.el6 Details about builds: ================================================================================ GMT-4.5.9-1.el6 (FEDORA-EPEL-2013-0197) Generic Mapping Tools -------------------------------------------------------------------------------- Update Information: This stable release fixes several bugs only and is recommended for all GMT users. For a complete list of corrections see http://gmt.soest.hawaii.edu/gmt/html/GMT_Docs.html#x1-110001.1.1 At the same time we release GSHHG version 2.2.2. This version removes Sandy Island, improves the accuracy of Society Islands, and removes 50 duplicate, lower-quality islands deriving from WDBII (such as the Agalega islands); most of these were in the Red Sea, Persian Gulf, and the Cook-Austral area. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Orion Poplawski <orion(a)cora.nwra.com> 4.5.9-1 - Update to 4.5.9 - Add patch to add needed includes * Tue Apr 3 2012 Orion Poplawski <orion(a)cora.nwra.com> 4.5.8-1 - Update to 4.5.8 * Fri Aug 12 2011 Orion Poplawski <orion(a)cora.nwra.com> 4.5.7-1 - Update to 4.5.7 - Drop triangulate patch applied upstream - License is now (as of 4.5.6 actually) GPLv2 or later - Re-enable octave support since we are GPLv3 compatible now -------------------------------------------------------------------------------- ================================================================================ GMT-coastlines-2.2.2-1.el6 (FEDORA-EPEL-2013-0197) Coastline data for GMT -------------------------------------------------------------------------------- Update Information: This stable release fixes several bugs only and is recommended for all GMT users. For a complete list of corrections see http://gmt.soest.hawaii.edu/gmt/html/GMT_Docs.html#x1-110001.1.1 At the same time we release GSHHG version 2.2.2. This version removes Sandy Island, improves the accuracy of Society Islands, and removes 50 duplicate, lower-quality islands deriving from WDBII (such as the Agalega islands); most of these were in the Red Sea, Persian Gulf, and the Cook-Austral area. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Orion Poplawski <orion(a)cora.nwra.com> 2.2.2-1 - Update to 2.2.2 * Mon Aug 29 2011 Orion Poplawski <orion(a)cora.nwra.com> 2.2.0-1 - Update to 2.2.0 -------------------------------------------------------------------------------- ================================================================================ Zim-0.59-1.el6 (FEDORA-EPEL-2013-0200) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information: New upstream release -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 24 2013 Robin Lee <cheeselee(a)fedoraproject.org> - 0.59-1 - Update to 0.59 (#903621, #841803, #857820, #858250, #871030, #875776) * Mon Dec 17 2012 Robin Lee <cheeselee(a)fedoraproject.org> - 0.58-1 - Update to 0.58 * Mon Nov 19 2012 Robin Lee <cheeselee(a)fedoraproject.org> - 0.57-2 - Backport fix for #865078, #865079 * Tue Oct 9 2012 Robin Lee <cheeselee(a)fedoraproject.org> - 0.57-1 - Update to 0.57 (#807149, #826886) * Wed Jul 18 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.56-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ trac-CGit-plugin-1.0.5-1.el6 (FEDORA-EPEL-2013-0199) Replace the trac browser by CGit -------------------------------------------------------------------------------- Update Information: First packaging effort -------------------------------------------------------------------------------- References: [ 1 ] Bug #891739 - Review Request: trac-CGit-plugin - Replace the trac browser by CGit https://bugzilla.redhat.com/show_bug.cgi?id=891739 -------------------------------------------------------------------------------- ================================================================================ yourls-1.5.1-1.el6 (FEDORA-EPEL-2013-0198) Your Own URL Shortener -------------------------------------------------------------------------------- Update Information: Update to 1.5.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 7 2012 Martin Krizek <mkrizek(a)redhat.com> - 1.5.1-1 - Update to 1.5.1 * Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 updates-testing report
by updates＠fedoraproject.org 23 Jan '13

23 Jan '13

The following Fedora EPEL 6 Security updates need testing: Age URL 277 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5620/bugzilla-3.4.… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0112/ettercap-0.7.… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0174/tinymce-spell… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0193/couchdb-1.0.4… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0194/seamonkey-2.1… 19 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0018/drupal7-conte… 53 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13610/drupal6-ctoo… 199 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6348/bcfg2-1.2.3-1… 465 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4701/supybot-gribb… 10 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0081/nagios-3.4.4-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0123/python-tw2-jq… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0106/moodle-2.1.10… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0128/php-symfony2-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0157/proftpd-1.3.3… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0144/zabbix-1.8.16… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0170/asterisk-1.8.… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0141/drupal7-7.19-… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0155/zabbix20-2.0.… The following builds have been pushed to Fedora EPEL 6 updates-testing canl-c-2.0.3-1.el6 couchdb-1.0.4-2.el6 fedmsg-0.6.6-1.el6 ghc-rpm-macros-0.15.11-1.el6 ghc-xmonad-contrib-0.10-7.el6 libguac-client-rdp-0.7.2-1.el6 libguac-client-vnc-0.7.0-2.el6 mozilla-https-everywhere-3.1.3-1.el6 nordugrid-arc-2.0.1-2.el6 packagedb-cli-1.3.0-1.el6 php-PsrLog-1.0.0-2.el6 php-Raven-0.4.0-2.el6 python-cliff-1.3-1.el6 python-fedora-0.3.31-1.el6 python-pkgwat-api-0.5-1.el6 seamonkey-2.15.1-1.el6 tinymce-spellchecker-2.0.5-6.el6 ucarp-1.5.2-7.el6 weechat-0.4.0-2.el6 whatsup-1.14-1.el6 xmonad-0.10-3.4.2.el6 Details about builds: ================================================================================ canl-c-2.0.3-1.el6 (FEDORA-EPEL-2013-0190) EMI Common Authentication library - bindings for C -------------------------------------------------------------------------------- Update Information: This is the C part of the EMI caNl -- the Common Authentication Library. -------------------------------------------------------------------------------- References: [ 1 ] Bug #867368 - Review Request: canl-c - Common Authentication Library for C https://bugzilla.redhat.com/show_bug.cgi?id=867368 -------------------------------------------------------------------------------- ================================================================================ couchdb-1.0.4-2.el6 (FEDORA-EPEL-2013-0193) A document database server, accessible via a RESTful JSON API -------------------------------------------------------------------------------- Update Information: * Ver. 1.0.4 (security release) -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.4-2 - Fix for EPEL 5 (Erlang R12B) * Wed Jan 23 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.4-1 - Ver. 1.0.4 - Fixes CVE-2012-5649, CVE-2012-5650 -------------------------------------------------------------------------------- References: [ 1 ] Bug #784792 - Request: update CouchDB to 1.0.3 https://bugzilla.redhat.com/show_bug.cgi?id=784792 [ 2 ] Bug #895599 - CVE-2012-5649 CVE-2012-5650 couchdb various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=895599 -------------------------------------------------------------------------------- ================================================================================ fedmsg-0.6.6-1.el6 (FEDORA-EPEL-2013-0129) Tools for Fedora Infrastructure real-time messaging -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 Ralph Bean <rbean(a)redhat.com> - 0.6.6-1 - Typofix. - Support loading remote CA cert for end-user message validation. * Mon Jan 21 2013 Ralph Bean <rbean(a)redhat.com> - 0.6.5-1 - Latest upstream - Fix JSON encoding between php and python - Stop fedmsg-tweet from falling over. - Improved logging. - Improved crl cache location; don't keep it in /tmp/ - Fix a crl permissions issue with fedmsg-tail. - Remove duplicate help strings for commands. - Added systemd service files. - Multiple outbound relay endpoints are now possible. - Removed old chkconfig statements. * Fri Dec 7 2012 Ralph Bean <rbean(a)redhat.com> - 0.6.3-2 - Removed a file that shouldn't have been included. -------------------------------------------------------------------------------- ================================================================================ ghc-rpm-macros-0.15.11-1.el6 (FEDORA-EPEL-2013-0140) Macros for building packages for GHC -------------------------------------------------------------------------------- Update Information: - fix ownership of package library dir - add cabal-tweak-flag script - new %ghc_fix_dynamic_rpath -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Jens Petersen <petersen(a)redhat.com> - 0.15.11-1 - simplify cabal-tweak-flag script to take one flag value - new ghc_fix_dynamic_rpath macro for cleaning up package executables linked against their own libraries * Sat Jan 19 2013 Jens Petersen <petersen(a)redhat.com> - 0.15.10-1 - be more careful about library pkgdir ownership (#893777) - add cabal-tweak-flag script for toggling flag default -------------------------------------------------------------------------------- References: [ 1 ] Bug #893777 - duplicate directory between ghc-base and ghc-base-devel https://bugzilla.redhat.com/show_bug.cgi?id=893777 -------------------------------------------------------------------------------- ================================================================================ ghc-xmonad-contrib-0.10-7.el6 (FEDORA-EPEL-2013-0176) Third party extensions for xmonad -------------------------------------------------------------------------------- Update Information: Backport current Fedora changes - fix input focus issue with Java applications - backport xmonad-basic subpackage -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 17 2012 Jens Petersen <petersen(a)redhat.com> - 0.10-7 - add ICCCMFocus patch from upstream for WM_TAKE_FOCUS move to core (#874855) - use a patch for use_xft flag - condition X11-1.6 patch to fedora >= 18 - update packaging with cabal-rpm * Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.10-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #874855 - xmonad does not follow ICCCM and ignores WM_TAKE_FOCUS protocol https://bugzilla.redhat.com/show_bug.cgi?id=874855 -------------------------------------------------------------------------------- ================================================================================ libguac-client-rdp-0.7.2-1.el6 (FEDORA-EPEL-2013-0172) RDP support for guacd -------------------------------------------------------------------------------- Update Information: Guacamole stack 0.7.2 update -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Simone Caronni <negativo17(a)gmail.com> - 0.7.2-1 - Updated to 0.7.2, still requires libguac 0.7.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #853922 - Review Request: guacamole - The main Guacamole web application https://bugzilla.redhat.com/show_bug.cgi?id=853922 -------------------------------------------------------------------------------- ================================================================================ libguac-client-vnc-0.7.0-2.el6 (FEDORA-EPEL-2013-0172) VNC support for guacd -------------------------------------------------------------------------------- Update Information: Guacamole stack 0.7.2 update -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Simone Caronni <negativo17(a)gmail.com> - 0.7.0-2 - Require libguac 0.7.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #853922 - Review Request: guacamole - The main Guacamole web application https://bugzilla.redhat.com/show_bug.cgi?id=853922 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-3.1.3-1.el6 (FEDORA-EPEL-2013-0180) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s and product images), Libav, Google Maps, UserEcho https://trac.torproject.org/projects/tor/ticket/7931 https://trac.torproject.org/projects/tor/ticket/7888 https://trac.torproject.org/projects/tor/ticket/7594 https://trac.torproject.org/projects/tor/ticket/7539 https://trac.torproject.org/projects/tor/ticket/7698 Disable broken: Coursera, EBay, Etsy, OpenOffice, Ping.fm, Pinterest :( https://trac.torproject.org/projects/tor/ticket/7336 https://trac.torproject.org/projects/tor/ticket/7825 https://trac.torproject.org/projects/tor/ticket/7774 https://trac.torproject.org/projects/tor/ticket/7695 https://trac.torproject.org/projects/tor/ticket/7777 https://trac.torproject.org/projects/tor/ticket/7865 Update cert whitelist -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.1.3-1 - Internet Freedom Day stable bugfix release - Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s and product images), Libav, Google Maps, UserEcho https://trac.torproject.org/projects/tor/ticket/7931 https://trac.torproject.org/projects/tor/ticket/7888 https://trac.torproject.org/projects/tor/ticket/7594 https://trac.torproject.org/projects/tor/ticket/7539 https://trac.torproject.org/projects/tor/ticket/7698 - Disable broken: Coursera, EBay, Etsy, OpenOffice, Ping.fm, Pinterest :( https://trac.torproject.org/projects/tor/ticket/7336 https://trac.torproject.org/projects/tor/ticket/7825 https://trac.torproject.org/projects/tor/ticket/7774 https://trac.torproject.org/projects/tor/ticket/7695 https://trac.torproject.org/projects/tor/ticket/7777 https://trac.torproject.org/projects/tor/ticket/7865 - Update cert whitelist -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-2.0.1-2.el6 (FEDORA-EPEL-2013-0192) Advanced Resource Connector Grid Middleware -------------------------------------------------------------------------------- Update Information: SE Linux fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.1-2 - Additional selinux contexts - Fix for python wrappers using swig 2.0.9 -------------------------------------------------------------------------------- ================================================================================ packagedb-cli-1.3.0-1.el6 (FEDORA-EPEL-2013-0182) A CLI for pkgdb -------------------------------------------------------------------------------- Update Information: Update to 1.3.0 which provides some bugs fix including one for the use of the 'all' keyword for the branch. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #887950 - packagedb-cli: silently fails to change ACLs https://bugzilla.redhat.com/show_bug.cgi?id=887950 -------------------------------------------------------------------------------- ================================================================================ php-PsrLog-1.0.0-2.el6 (FEDORA-EPEL-2013-0185) Common interface for logging libraries -------------------------------------------------------------------------------- Update Information: This package holds all interfaces/classes/traits related to PSR-3 (https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-3-logger-…) Note that this is not a logger of its own. It is merely an interface that describes a logger. See the specification for more details. -------------------------------------------------------------------------------- References: [ 1 ] Bug #894167 - Review Request: php-PsrLog - Common interface for logging libraries https://bugzilla.redhat.com/show_bug.cgi?id=894167 -------------------------------------------------------------------------------- ================================================================================ php-Raven-0.4.0-2.el6 (FEDORA-EPEL-2013-0177) A PHP client for Sentry -------------------------------------------------------------------------------- Update Information: A PHP client for Sentry (http://getsentry.com) -------------------------------------------------------------------------------- References: [ 1 ] Bug #901742 - Review Request: php-Raven - A PHP client for Sentry https://bugzilla.redhat.com/show_bug.cgi?id=901742 -------------------------------------------------------------------------------- ================================================================================ python-cliff-1.3-1.el6 (FEDORA-EPEL-2013-0186) Command Line Interface Formulation Framework -------------------------------------------------------------------------------- Update Information: Latest upstream. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Ralph Bean <rbean(a)redhat.com> - 1.3-1 - Latest upstream. - Enabled python3 subpackage. - Remove requirement on python-tablib * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #902707 - auto-creation of pkgwat.log https://bugzilla.redhat.com/show_bug.cgi?id=902707 -------------------------------------------------------------------------------- ================================================================================ python-fedora-0.3.31-1.el6 (FEDORA-EPEL-2013-0175) Python modules for talking to Fedora Infrastructure Services -------------------------------------------------------------------------------- Update Information: * Fixes a problem with soprovidercsrf if the database doesn't set an encoding * Fixes an issue with the login templates if the template is being translated. * Added a lookup_email parameter to fedora.client.AccountSystem.gravatar_url() to allow generating gravaar urls without looking up email addresses in fas. * Fixed a bug in fedora.tg.utils.tg_absolute_url() where it was still appending the csrf_token. * Add an auth adapter for flask web apps to authenticate to FAS * New minimum version of python: requires python-2.5 or higher * Fix localization of login templates (laxathom) -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.3.31-1 - Minor bugfix release * Thu Jan 10 2013 Toshio Kuratomi <toshio(a)fedoraproject.org> - 0.3.30-1 - Make TG's loginForm and CSRF's text translated from tg-apps (laxathom). - Fix a bug in fedora.tg.utils.tg_absolute_url - Add a lookup email parameter to gravatar lookups - Add an auth provider for flask * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3.29-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-pkgwat-api-0.5-1.el6 (FEDORA-EPEL-2013-0189) Python API for querying the fedora packages webapp -------------------------------------------------------------------------------- Update Information: Latest upstream. Latest upstream with support for newer python-requests. -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Ralph Bean <rbean(a)redhat.com> - 0.5-1 - Latest upstream; Fix to the karma formatting. * Wed Jan 16 2013 Ralph Bean <rbean(a)redhat.com> - 0.4-1 - Latest upstream with support for newer python-requests. * Sat Aug 4 2012 David Malcolm <dmalcolm(a)redhat.com> - 0.3-5 - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #902714 - mangled releases output https://bugzilla.redhat.com/show_bug.cgi?id=902714 -------------------------------------------------------------------------------- ================================================================================ seamonkey-2.15.1-1.el6 (FEDORA-EPEL-2013-0194) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information: Update to 2.15.1 Update to 2.15 Fixes CVE-2013-0743, CVE-2013-{0744-0760}, CVE-2013-0762, CVE-2013-0764, CVE-2013-{0766-0770} -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.15.1-1 - update to 2.15.1 - add fix for #304121 (derived from Xulrunner) * Wed Jan 9 2013 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.15-1 - update to 2.15 - disable WebRTC support until nss >= 3.14 appear in RHEL6 - fix build with RHEL6 system nss-3.13.5 (actually cosmetic things was changed) - fix build with RHEL6 libjpeg library (just use some little old stuff from 3.14.1) - don't try to change global user settings for default browser/mail etc. -------------------------------------------------------------------------------- References: [ 1 ] Bug #902244 - seamonkey-2.15.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=902244 [ 2 ] Bug #893717 - seamonkey-2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=893717 -------------------------------------------------------------------------------- ================================================================================ tinymce-spellchecker-2.0.5-6.el6 (FEDORA-EPEL-2013-0174) TinyMCE spellchecker plugin -------------------------------------------------------------------------------- Update Information: backport security fix for CVE-2012-6112 -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Matthias Runge <mrunge(a)redhat.com> - 2.0.5-6 - fix CVE-2012-6112 -------------------------------------------------------------------------------- References: [ 1 ] Bug #902726 - CVE-2012-6112 tinymce-spellchecker (Google Spellchecker): Control characters not sanitized properly from $lang and $str arguments in _getMatches https://bugzilla.redhat.com/show_bug.cgi?id=902726 -------------------------------------------------------------------------------- ================================================================================ ucarp-1.5.2-7.el6 (FEDORA-EPEL-2013-0188) Common Address Redundancy Protocol (CARP) for Unix -------------------------------------------------------------------------------- Update Information: Remove MASTER from init script. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.5.2-7 - Dropped MASTER from init, BZ 896576. -------------------------------------------------------------------------------- References: [ 1 ] Bug #896576 - New init.d ucarp script wrong setting advskew=1 to all nodes if no MASTER variable set. https://bugzilla.redhat.com/show_bug.cgi?id=896576 -------------------------------------------------------------------------------- ================================================================================ weechat-0.4.0-2.el6 (FEDORA-EPEL-2013-0178) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information: Reimplement enchant patch, with new support for spelling suggestions -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.0-2 - reimplement enchant support as a separate patch - implement additional enchant support for displaying spelling suggestions in weechat_aspell_get_suggestions(), which is a new function introduced by upstream in 0.4.0 * Mon Jan 21 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.0-1 - update to upstream release 0.4.0 - add CMAKE options (DPREFIX and DLIBDIR) which negate the need to patch - remove enchant patches to keep close to upstream -------------------------------------------------------------------------------- ================================================================================ whatsup-1.14-1.el6 (FEDORA-EPEL-2013-0181) Node up/down detection utility -------------------------------------------------------------------------------- Update Information: This is an upstream version bump. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 David Brown <david.brown(a)pnnl.gov> - 1.14-1 - New upstream version of whatsup - added libtool-ltdl-devel build deps - added genders build deps and sub packages * Mon Sep 10 2012 David Brown <david.brown(a)pnnl.gov> - 1.13-6 - get the damn macro right for postun * Mon Sep 10 2012 David Brown <david.brown(a)pnnl.gov> - 1.13-5 - add systemd macros to post postun preun -------------------------------------------------------------------------------- ================================================================================ xmonad-0.10-3.4.2.el6 (FEDORA-EPEL-2013-0176) A tiling window manager -------------------------------------------------------------------------------- Update Information: Backport current Fedora changes - fix input focus issue with Java applications - backport xmonad-basic subpackage -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Jens Petersen <petersen(a)redhat.com> - 0.10-3.4.2 - xmonad-gnome now requires gnome-panel and gnome-settings-daemon to start - add upstream patches for ICCCM WM_TAKE_FOCUS protocol and tracking currently processing event to fix focus for Java apps: see http://code.google.com/p/xmonad/issues/detail?id=177 (#874855) - update to cabal-rpm packaging - change prof BRs to devel - allow building with X11-1.6 - backport xmonad-basic subpackaging -------------------------------------------------------------------------------- References: [ 1 ] Bug #874855 - xmonad does not follow ICCCM and ignores WM_TAKE_FOCUS protocol https://bugzilla.redhat.com/show_bug.cgi?id=874855 --------------------------------------------------------------------------------

1 0

Fedora EPEL 5 updates-testing report
by updates＠fedoraproject.org 23 Jan '13

23 Jan '13

The following Fedora EPEL 5 Security updates need testing: Age URL 277 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-5630/bugzilla-3.2.… 171 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-6608/Django-1.1.4-… 53 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2012-13612/drupal6-ctoo… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0171/moodle-1.9.19… 0 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0173/couchdb-1.0.4… 19 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0011/drupal7-conte… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0116/drupal6-6.28-… 7 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0102/ettercap-0.7.… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0139/proftpd-1.3.3… 1 https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0148/drupal7-7.19-… The following builds have been pushed to Fedora EPEL 5 updates-testing couchdb-1.0.4-2.el5.1 moodle-1.9.19-5.el5 mozilla-https-everywhere-3.1.3-1.el5 nordugrid-arc-2.0.1-2.el5 packagedb-cli-1.3.0-1.el5 ucarp-1.5.2-7.el5 weechat-0.4.0-2.el5 whatsup-1.14-1.el5 zabbix20-2.0.4-4.el5 Details about builds: ================================================================================ couchdb-1.0.4-2.el5.1 (FEDORA-EPEL-2013-0173) A document database server, accessible via a RESTful JSON API -------------------------------------------------------------------------------- Update Information: * Ver. 1.0.4 (security release) -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.4-2 - Fix for EPEL 5 (Erlang R12B) * Wed Jan 23 2013 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.4-1 - Ver. 1.0.4 - Fixes CVE-2012-5649, CVE-2012-5650 * Mon Aug 15 2011 Kalev Lember <kalevlember(a)gmail.com> - 1.0.3-2 - Rebuilt for rpm bug #728707 * Thu Jul 21 2011 Peter Lemenkov <lemenkov(a)gmail.com> - 1.0.3-1 - Ver. 1.0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #784792 - Request: update CouchDB to 1.0.3 https://bugzilla.redhat.com/show_bug.cgi?id=784792 [ 2 ] Bug #895599 - CVE-2012-5649 CVE-2012-5650 couchdb various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=895599 -------------------------------------------------------------------------------- ================================================================================ moodle-1.9.19-5.el5 (FEDORA-EPEL-2013-0171) A Course Management System -------------------------------------------------------------------------------- Update Information: Fix for CVE-2012-6098 and CVE-2012-6100. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #903264 - CVE-2012-6100 CVE-2012-6098 moodle various flaws [epel-5] https://bugzilla.redhat.com/show_bug.cgi?id=903264 -------------------------------------------------------------------------------- ================================================================================ mozilla-https-everywhere-3.1.3-1.el5 (FEDORA-EPEL-2013-0187) HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey -------------------------------------------------------------------------------- Update Information: Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s and product images), Libav, Google Maps, UserEcho https://trac.torproject.org/projects/tor/ticket/7931 https://trac.torproject.org/projects/tor/ticket/7888 https://trac.torproject.org/projects/tor/ticket/7594 https://trac.torproject.org/projects/tor/ticket/7539 https://trac.torproject.org/projects/tor/ticket/7698 Disable broken: Coursera, EBay, Etsy, OpenOffice, Ping.fm, Pinterest :( https://trac.torproject.org/projects/tor/ticket/7336 https://trac.torproject.org/projects/tor/ticket/7825 https://trac.torproject.org/projects/tor/ticket/7774 https://trac.torproject.org/projects/tor/ticket/7695 https://trac.torproject.org/projects/tor/ticket/7777 https://trac.torproject.org/projects/tor/ticket/7865 Update cert whitelist -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 Russell Golden <niveusluna(a)niveusluna.org> - 3.1.3-1 - Internet Freedom Day stable bugfix release - Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s and product images), Libav, Google Maps, UserEcho https://trac.torproject.org/projects/tor/ticket/7931 https://trac.torproject.org/projects/tor/ticket/7888 https://trac.torproject.org/projects/tor/ticket/7594 https://trac.torproject.org/projects/tor/ticket/7539 https://trac.torproject.org/projects/tor/ticket/7698 - Disable broken: Coursera, EBay, Etsy, OpenOffice, Ping.fm, Pinterest :( https://trac.torproject.org/projects/tor/ticket/7336 https://trac.torproject.org/projects/tor/ticket/7825 https://trac.torproject.org/projects/tor/ticket/7774 https://trac.torproject.org/projects/tor/ticket/7695 https://trac.torproject.org/projects/tor/ticket/7777 https://trac.torproject.org/projects/tor/ticket/7865 - Update cert whitelist -------------------------------------------------------------------------------- ================================================================================ nordugrid-arc-2.0.1-2.el5 (FEDORA-EPEL-2013-0183) Advanced Resource Connector Grid Middleware -------------------------------------------------------------------------------- Update Information: SE Linux fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Mattias Ellert <mattias.ellert(a)fysast.uu.se> - 2.0.1-2 - Additional selinux contexts - Fix for python wrappers using swig 2.0.9 -------------------------------------------------------------------------------- ================================================================================ packagedb-cli-1.3.0-1.el5 (FEDORA-EPEL-2013-0179) A CLI for pkgdb -------------------------------------------------------------------------------- Update Information: Update to 1.3.0 which provides some bugs fix including one for the use of the 'all' keyword for the branch. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #887950 - packagedb-cli: silently fails to change ACLs https://bugzilla.redhat.com/show_bug.cgi?id=887950 -------------------------------------------------------------------------------- ================================================================================ ucarp-1.5.2-7.el5 (FEDORA-EPEL-2013-0196) Common Address Redundancy Protocol (CARP) for Unix -------------------------------------------------------------------------------- Update Information: Remove MASTER from init script. -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 23 2013 Jon Ciesla <limburgher(a)gmail.com> - 1.5.2-7 - Dropped MASTER from init, BZ 896576. * Tue Dec 11 2012 Jon Ciesla <limburgher(a)gmail.com> - 1.5.2-6 - init fix from Alexander Bostrom, BZ 809421. -------------------------------------------------------------------------------- References: [ 1 ] Bug #896576 - New init.d ucarp script wrong setting advskew=1 to all nodes if no MASTER variable set. https://bugzilla.redhat.com/show_bug.cgi?id=896576 -------------------------------------------------------------------------------- ================================================================================ weechat-0.4.0-2.el5 (FEDORA-EPEL-2013-0191) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information: Reimplement enchant patch, with new support for spelling suggestions -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 22 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.0-2 - reimplement enchant support as a separate patch - implement additional enchant support for displaying spelling suggestions in weechat_aspell_get_suggestions(), which is a new function introduced by upstream in 0.4.0 * Mon Jan 21 2013 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.4.0-1 - update to upstream release 0.4.0 - add CMAKE options (DPREFIX and DLIBDIR) which negate the need to patch - remove enchant patches to keep close to upstream -------------------------------------------------------------------------------- ================================================================================ whatsup-1.14-1.el5 (FEDORA-EPEL-2013-0184) Node up/down detection utility -------------------------------------------------------------------------------- Update Information: New upstream version and fixes opensm linking problem. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 21 2013 David Brown <david.brown(a)pnnl.gov> - 1.14-1 - New upstream version of whatsup - added libtool-ltdl-devel build deps - added genders build deps and sub packages * Mon Sep 10 2012 David Brown <david.brown(a)pnnl.gov> - 1.13-6 - get the damn macro right for postun * Mon Sep 10 2012 David Brown <david.brown(a)pnnl.gov> - 1.13-5 - add systemd macros to post postun preun -------------------------------------------------------------------------------- ================================================================================ zabbix20-2.0.4-4.el5 (FEDORA-EPEL-2013-0195) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: zabbix20 packages the 2.0 series of Zabbix. EPEL policy only allows for bugfix releases, avoiding breaking things. Hence this package came into existence. Notice, there's no SSH support, due to the version of libssh2. While updating an agent is straight forward, you'll have to run multiple database schema upgrades when upgrading a server. There are a number of changes compared to earlier packages, documented in zabbix-fedora.README. If you're upgrading, you're strongly advised to go through this document. Please don't hesitate to contact volker27(a)gmx.at if something is wrong, hard to understand or missing there. You can file a bug as well, of course! -------------------------------------------------------------------------------- References: [ 1 ] Bug #867159 - Review Request: zabbix20 - Open-source monitoring solution for your IT infrastructure https://bugzilla.redhat.com/show_bug.cgi?id=867159 --------------------------------------------------------------------------------

1 0

Fudcon EPEL discussion summary/report
by Kevin Fenzi 23 Jan '13

23 Jan '13

Greetings. As you may know, we had a EPEL session on last friday at fudcon lawerence to try and discuss outstanding issues, etc. On the question of overlaps, it seemed like to me most people were fine with striving to not overlap with baseos, optional, ha and lb. So, unless someone strongly objects, I think we should just adopt that policy. On the question of incompatible upgrades, things were much less clear. There was a suggestion of using SCL (software collections) to help with this case, but I don't actually think it helps us too much. Consider the following four ideas: 1) incompatible upgrades have to create a parallel install-able package and only users who know it exists switch to it when they want. example: mediawiki116, mediawiki117, etc 2) incompatible upgrades are made in a epel-rawhide repo that moves faster than regular. Users would need to know it exists and pull that package from there instead of the normal repo. 3) incompatible upgrades are made with software collections. User has to explicitly change their install to switch to the new one when they want. 4) incompatible upgrades are marked in bodhi and a yum plugin sees them and stops updates until the maintainer wishes them. idea 1 means more work for the maintainer to make the new package. idea 2 means more work for releng. idea 3 means a bit more work for maintainers idea 4 means more work for releng, more work for a yum plugin writer, and could be bypassed by people not using the plugin. but all of them mean the user doesn't get the new thing until they know about it/switch, meaning they could still be using the old thing that never gets bugfixes. A lot of people seemed to agree that the root of the problem wasn't the technical details, but more the expectations. When EPEL was started long ago it was "best effort" and we knew some things were simply not going to be able to be supported for 5 years or 7 or 10. The perception seems to have drifted over to more 'epel will strive to support this old thing for the life of the rhel release' or 'epel will never push an incompatible upgrade' or 'epel maintainers are perfect and they have nice hair too!'. So, I'd like to propose the following: a) adjust documentation/announce a reminder from time to time that EPEL is a volunteer, best effort collection of packages. From time to time incompatible upgrades will happen, please watch the epel-announce list and gate your epel updates as your needs require. b) Maintainers should try not to push incompatible upgrades, however if they feel that is the only way forward, they can. When doing so they must: 1) announce their intention as much in advance as they know it to epel-announce, and their reasons for having to do this. 2) announce again when the package is in epel-testing. For that to work we would need to watch out for incompatible upgrades that were not announced. I'm not sure how to do this aside from asking folks enable epel-test on some machines and test updates more, and try 'best effort' some more. Thoughts? screams? kevin

9 15

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel January 2013