Afternoon,
I'm currently working through the final stages of a new release for
Patchwork [1]. One of the things that's been discussed extensively in
the past is the versions of Django we support. Most sysadmins refuse to
use packages outside of those provided by their distro (i.e. no pip).
After a long discussion about this time last year [2], we resigned
ourselves to having to support the deprecated Django 1.6 and 1.7
releases as these are the most recent version available in EPEL and
Debian Stable, respectively. However, the next version of Patchwork
introduces a new dependency - Django REST Framework - which is
technically avoidable but really should be used. This dependency is
available in Debian Testing, but I see no recent version of package in
EPEL, sadly.
I looked into packaging DRF, but it seems EPEL doesn't support a modern
version of Django. I realize there's been a lot of discussion on this in
the past [3][4][5], but I couldn't find any conclusion. As such, I have
a question: what would it take to start packaging the *stable* versions
of Django (currently 1.8)? Django publishes a timeline for stable vs.
non-stable packages, which includes some overlap between the last stable
release and the next one, a la Ubuntu [6]. This seems compatible with
EPEL's packaging strategies, thus, I imagine it should be possible to
package stable versions. When a stable package is deprecated upstream,
we could remove from EPEL as expected. Any package that doesn't upgrade
to support the latest stable version is probably dead and not worth
retaining in EPEL, with some exceptions (Reviewboard).
I realise that, for better or worse, Django 1.6 must be kept
(ReviewBoard, for example, is stuck with 1.6 for the foreseeable future
[7]). This would probably mean we'd need to create a versioned Django
package (python2-django18, python3-django18). However, I'd be willing to
help with both this and a DRF package as long as I continue to
contribute to and maintain Patchwork (it's been two years and I'm not
quitting any time soon).
Is this something that we could put together a game plan on?
Cheers,
Stephen
[1] https://github.com/getpatchwork/patchwork
[2]
https://lists.ozlabs.org/pipermail/patchwork/2015-November/002046.html
[3]
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec…
[4]
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec…
[5]
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec…
[6] https://www.djangoproject.com/download/
[7]
http://blog.beanbaginc.com/2015/09/11/work-toward-a-django-1-8-port-for-rev…
Dear all,
You are kindly invited to the meeting:
EPSCO meeting on 2016-11-09 from 18:00:00 to 19:00:00 GMT
At fedora-meeting(a)irc.freenode.net
The meeting will be about:
Extra Packages for Enterprise Linux Steering COmmittee (EPSCO) has a weekly meeting to go over concerns and problems in the EPEL distribution.
You are kindly invited to come and meet with us
Source: https://apps.fedoraproject.org/calendar/meeting/4639/
The following Fedora EPEL 5 Security updates need testing:
Age URL
729 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849 sblim-sfcb-1.3.8-2.el5
372 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516 mcollective-2.8.4-1.el5
344 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6 thttpd-2.25b-24.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
prosody-0.9.11-1.el5
Details about builds:
================================================================================
prosody-0.9.11-1.el5 (FEDORA-EPEL-2016-1b87280ec3)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.9.11 ============== A summary of changes in this release: * HTTP
parser: Improve buffering of incoming HTTP data and add size limits (#603) *
sessionmanager: Fix for an issue which caused people to be kicked from
conferences if mod_smacks was enabled (#648) * Dependencies: Workaround for
compatibility with LuaSec 0.6 (#749) * MUC: Accept missing form as "instant
room" request (#377) * C2S: Fix issues with destroying disconnected
connections (#590, #641) * mod_privacy: Fix selection of the top resource(s)
(#694) * mod_presence: Make sure both users get each others presence after
adding each other (#673) * mod_http_files: Fix traceback when serving a non-
wildcard path (#611) * mod_http_files: Preserve a trailing slash in paths
(#639) * util.datamanager: Fix error handling (#632) * net.server_event: Fix
internal socket API to allow writing from socket.ondrain callback (#661) *
net.server_event: Fix timeout (commit) * net.server_event: Fix traceback due
to write during TLS handshake (commit) * net.server_event: Fix buffer length
check (commit)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1391802 - prosody-0.9.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1391802
--------------------------------------------------------------------------------
The following Fedora EPEL 6 Security updates need testing:
Age URL
488 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031 python-virtualenv-12.0.7-1.el6
482 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168 rubygem-crack-0.3.2-2.el6
413 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
372 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb mcollective-2.8.4-1.el6
344 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9 thttpd-2.25b-24.el6
74 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8594ed3a53 chicken-4.11.0-3.el6
47 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-25e30f6dc3 jansson-2.9-1.el6
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-a886ace670 tomcat-7.0.72-1.el6
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-cb5398893b nodejs-0.10.48-3.el6
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e69bdefcde pdns-3.3.3-2.el6
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-dc75157b92 ansible-2.2.0.0-3.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
php-horde-Horde-Core-2.27.2-1.el6
php-horde-Horde-Service-Weather-2.5.0-1.el6
pps-tools-0-0.12.20120407git0deb9c.el6
prosody-0.9.11-1.el6
python-ase-3.12.0-21.el6
python-pytg-0.4.10-3.el6
Details about builds:
================================================================================
php-horde-Horde-Core-2.27.2-1.el6 (FEDORA-EPEL-2016-555e6229c7)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.27.2** * [mjr] Prevent building invalid HTML when building an
email from a SMART_REPLY (Bug #14500). ---- **Horde_Core 2.27.1** * [jan]
Allow administrators to log in if preference backend is not available. * [mjr]
Log message headers on error when sending email via ActiveSync. * [jan] Fix
warning if an old locale is longer than 255 characters (Bug #14489). * [jan] Fix
abbreviated Norwegian month names in JavaScript to include trailing dot (Bug
#14488). * [jan] Fix reading session data from the command line with PHP 7.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Service-Weather-2.5.0-1.el6 (FEDORA-EPEL-2016-c13ffc07da)
Horde Weather Provider
--------------------------------------------------------------------------------
Update Information:
**Horde_Service_Weather 2.5.0** * [mjr] Replace defunct data source for surface
station data (Bug #14502). ---- ** Horde_Service_Weather 2.4.1** * [jan]
Update location of METAR stations.
--------------------------------------------------------------------------------
================================================================================
pps-tools-0-0.12.20120407git0deb9c.el6 (FEDORA-EPEL-2016-285448a4aa)
LinuxPPS user-space tools
--------------------------------------------------------------------------------
Update Information:
Initial build for el6. Import from master.
--------------------------------------------------------------------------------
================================================================================
prosody-0.9.11-1.el6 (FEDORA-EPEL-2016-b59d825089)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.9.11 ============== A summary of changes in this release: * HTTP
parser: Improve buffering of incoming HTTP data and add size limits (#603) *
sessionmanager: Fix for an issue which caused people to be kicked from
conferences if mod_smacks was enabled (#648) * Dependencies: Workaround for
compatibility with LuaSec 0.6 (#749) * MUC: Accept missing form as "instant
room" request (#377) * C2S: Fix issues with destroying disconnected
connections (#590, #641) * mod_privacy: Fix selection of the top resource(s)
(#694) * mod_presence: Make sure both users get each others presence after
adding each other (#673) * mod_http_files: Fix traceback when serving a non-
wildcard path (#611) * mod_http_files: Preserve a trailing slash in paths
(#639) * util.datamanager: Fix error handling (#632) * net.server_event: Fix
internal socket API to allow writing from socket.ondrain callback (#661) *
net.server_event: Fix timeout (commit) * net.server_event: Fix traceback due
to write during TLS handshake (commit) * net.server_event: Fix buffer length
check (commit)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1391802 - prosody-0.9.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1391802
--------------------------------------------------------------------------------
================================================================================
python-ase-3.12.0-21.el6 (FEDORA-EPEL-2016-0feba509da)
Atomic Simulation Environment
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
================================================================================
python-pytg-0.4.10-3.el6 (FEDORA-EPEL-2016-936e818b0d)
Python package that communicates with the Telegram CLI
--------------------------------------------------------------------------------
Update Information:
- Exclude ppc64 s390x for dependence
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
608 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087 dokuwiki-0-0.24.20140929c.el7
370 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f mcollective-2.8.4-1.el7
88 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c redis-3.2.3-1.el7
72 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3 chicken-4.11.0-3.el7
15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-03fb3c1531 banshee-2.6.2-11.el7 dbus-sharp-0.7.0-15.el7 dbus-sharp-glib-0.5.0-13.el7 gdata-sharp-1.4.0.2-18.el7 gio-sharp-0.3-14.el7 gkeyfile-sharp-0.1-19.el7 gnome-sharp-2.24.2-12.el7 gtk-sharp-beans-2.14.0-17.el7 gtk-sharp2-2.12.26-3.el7 gtk-sharp3-2.99.3-16.el7 gudev-sharp-0.1-18.el7 libappindicator-12.10.0-11.el7 libgpod-0.8.3-14.el7 libyui-bindings-1.1.0-7.el7 mono-4.2.4-7.el7 mono-addins-1.1-3.el7 mono-cecil-0.9.6-6.el7 mono-zeroconf-0.9.0-16.el7 notify-sharp-0.4.0-0.26.20100411svn.el7 notify-sharp3-3.0.3-2.el7 nunit-3.5-1.el7 nunit2-2.6.4-14.el7 pinta-1.6-5.el7 taglib-sharp-2.1.0.0-3.el7
15 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-ee3cc4d1b6 compat-guile18-1.8.8-14.el7
14 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f0f6483aa7 tor-0.2.8.9-1.el7
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-2fcbc39837 chromium-54.0.2840.71-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-181efcf9c4 tre-0.8.0-18.20140228gitc2f5d13.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e26faf9489 python-simplejson-3.5.3-1.el7
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e26af89e16 ansible-2.2.0.0-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.2.0.0-3.el7
drupal7-i18n-1.14-1.el7
gnucash-2.6.14-1.el7
gnucash-docs-2.6.14-1.el7
php-horde-Horde-Core-2.27.1-1.el7
php-horde-Horde-Nls-2.2.1-1.el7
php-markdown-1.7.0-1.el7
php-ocramius-code-generator-utils-0.3.2-4.el7
php-ocramius-generated-hydrator-1.2.0-1.el7
php-ocramius-proxy-manager-1.0.2-2.el7
php-sentry-0.22.0-1.el7
php-solarium-3.7.0-1.el7
python-simplejson-3.5.3-1.el7
Details about builds:
================================================================================
ansible-2.2.0.0-3.el7 (FEDORA-EPEL-2016-e26af89e16)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Add patch to fix dnf module groupinstall handling ---- Update to new ansible
2.2 version. For full changes see:
https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1390564 - ansible-2.2.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1390564
[ 2 ] Bug #1380753 - The task of adding/updating an host on zabbix via ansible, the result always changed.
https://bugzilla.redhat.com/show_bug.cgi?id=1380753
[ 3 ] Bug #1390652 - CVE-2016-8614 ansible: Improper verification of key fingerprints in apt_key module [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1390652
[ 4 ] Bug #1390648 - CVE-2016-8628 ansible: Command injection by compromised server via ansible_ssh_executable or ssh_args [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1390648
--------------------------------------------------------------------------------
================================================================================
drupal7-i18n-1.14-1.el7 (FEDORA-EPEL-2016-e800aa7502)
Enables multilingual content
--------------------------------------------------------------------------------
Update Information:
[7.x-1.14](https://www.drupal.org/project/i18n/releases/7.x-1.14)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1387880 - drupal7-i18n-1.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1387880
--------------------------------------------------------------------------------
================================================================================
gnucash-2.6.14-1.el7 (FEDORA-EPEL-2016-68e9a15cbb)
Finance management application
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest bugfix release, 2.6.14. Upstream release
notes can be found at http://gnucash.org/#n-160917-2.6.14.news
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1350991 - gnucash-2.6.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1350991
--------------------------------------------------------------------------------
================================================================================
gnucash-docs-2.6.14-1.el7 (FEDORA-EPEL-2016-68e9a15cbb)
Help files and documentation for the GnuCash personal finanace manager
--------------------------------------------------------------------------------
Update Information:
This updates GnuCash to the latest bugfix release, 2.6.14. Upstream release
notes can be found at http://gnucash.org/#n-160917-2.6.14.news
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1350991 - gnucash-2.6.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1350991
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.27.1-1.el7 (FEDORA-EPEL-2016-1bf67375d0)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.27.1** * [jan] Allow administrators to log in if preference
backend is not available. * [mjr] Log message headers on error when sending
email via ActiveSync. * [jan] Fix warning if an old locale is longer than 255
characters (Bug #14489). * [jan] Fix abbreviated Norwegian month names in
JavaScript to include trailing dot (Bug #14488). * [jan] Fix reading session
data from the command line with PHP 7.
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Nls-2.2.1-1.el7 (FEDORA-EPEL-2016-e1b9176da8)
Native Language Support (NLS)
--------------------------------------------------------------------------------
Update Information:
**Horde_Nls 2.2.1** * [jan] Update country list.
--------------------------------------------------------------------------------
================================================================================
php-markdown-1.7.0-1.el7 (FEDORA-EPEL-2016-b2fa957d8a)
Markdown implementation in PHP
--------------------------------------------------------------------------------
Update Information:
**PHP Markdown Lib 1.7.0** (29 Oct 2016) * Added a `hard_wrap`
configuration variable to make all newline characters in the text
become `<br>` tags in the HTML output. By default, according to the
standard Markdown syntax these newlines are ignored unless they a
preceded by two spaces. Thanks to Jonathan Cohlmeyer for the implementation. *
Improved the parsing of list items to fix problematic cases that came to
light with the addition of `hard_wrap`. This should have no effect on the
output except span-level list items that ended with two spaces (and thus
ended with a line break). * Added a `code_span_content_func`
configuration variable which takes a function that will convert the
content of the code span to HTML. This can be useful to implement syntax
highlighting. Although contrary to its code block equivalent, there is
no syntax for specifying a language. Credits to styxit for the
implementation. * Fixed a Markdwon Extra issue where two-space-at-end-of-
line hard breaks wouldn't work inside of HTML block elements such as
`<p markdown="1">` where the element expects only span-level content.
* In the parser code, switched to PHPDoc comment format. Thanks to
Robbie Averill for the help. Packaging change: * switch to
fedora/autoloader
--------------------------------------------------------------------------------
================================================================================
php-ocramius-code-generator-utils-0.3.2-4.el7 (FEDORA-EPEL-2016-44344001a3)
A set of code generator utilities built on top of PHP-Parsers
--------------------------------------------------------------------------------
Update Information:
## php-ocramius-proxy-manager ### 1.0.2 * 249: Weird problem with
FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator strategy
rename failures * 254: Please check 1.0.1 tag ### 1.0.1 * 249: Weird problem
with FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator
strategy rename failures --- ## php-ocramius-generated-hydrator RPM: Added
autoloader ### 1.2.0 * 31: travis add php 7 + hhvm-nightly * 34: update
manual's url to "current" instead of specified version at README * 41: Tag
release allowing PHP 7 in Composer dependencies list --- ## php-ocramius-code-
generator-utils RPM: Added autoloader
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1251784 - php-ocramius-proxy-manager-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1251784
--------------------------------------------------------------------------------
================================================================================
php-ocramius-generated-hydrator-1.2.0-1.el7 (FEDORA-EPEL-2016-44344001a3)
An object hydrator
--------------------------------------------------------------------------------
Update Information:
## php-ocramius-proxy-manager ### 1.0.2 * 249: Weird problem with
FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator strategy
rename failures * 254: Please check 1.0.1 tag ### 1.0.1 * 249: Weird problem
with FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator
strategy rename failures --- ## php-ocramius-generated-hydrator RPM: Added
autoloader ### 1.2.0 * 31: travis add php 7 + hhvm-nightly * 34: update
manual's url to "current" instead of specified version at README * 41: Tag
release allowing PHP 7 in Composer dependencies list --- ## php-ocramius-code-
generator-utils RPM: Added autoloader
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1251784 - php-ocramius-proxy-manager-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1251784
--------------------------------------------------------------------------------
================================================================================
php-ocramius-proxy-manager-1.0.2-2.el7 (FEDORA-EPEL-2016-44344001a3)
OOP proxy wrappers utilities
--------------------------------------------------------------------------------
Update Information:
## php-ocramius-proxy-manager ### 1.0.2 * 249: Weird problem with
FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator strategy
rename failures * 254: Please check 1.0.1 tag ### 1.0.1 * 249: Weird problem
with FileWriterGeneratorStrategy * 250: Hotfix - #249 file writer generator
strategy rename failures --- ## php-ocramius-generated-hydrator RPM: Added
autoloader ### 1.2.0 * 31: travis add php 7 + hhvm-nightly * 34: update
manual's url to "current" instead of specified version at README * 41: Tag
release allowing PHP 7 in Composer dependencies list --- ## php-ocramius-code-
generator-utils RPM: Added autoloader
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1251784 - php-ocramius-proxy-manager-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1251784
--------------------------------------------------------------------------------
================================================================================
php-sentry-0.22.0-1.el7 (FEDORA-EPEL-2016-1c2866b16d)
PHP client for Sentry
--------------------------------------------------------------------------------
Update Information:
PHP client for Sentry (http://getsentry.com) Note: This package obsoletes
`php-Raven`.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1387447 - Review Request: php-sentry - PHP client for Sentry
https://bugzilla.redhat.com/show_bug.cgi?id=1387447
--------------------------------------------------------------------------------
================================================================================
php-solarium-3.7.0-1.el7 (FEDORA-EPEL-2016-8bfafb6496)
Solarium PHP Solr client library
--------------------------------------------------------------------------------
Update Information:
**Version 3.7.0** - 2016-10-28 - added: support for nested documents in update
query - added: spatial component for select query - added: support for keys and
excludes in interval facet - added: support for grouping using a function
(group.func) - bugfix: spellcheck collation parsing for Solr 5+ - improvement:
lots of fixes in documentation markup - added: included suggestion in composer
file for a query builder library Packaging change: - switch from symfony
/class-loader to fedora/autoloader
--------------------------------------------------------------------------------
================================================================================
python-simplejson-3.5.3-1.el7 (FEDORA-EPEL-2016-e26faf9489)
Simple, fast, extensible JSON encoder/decoder for Python
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.3: * Fix lower bound checking in scan_once / raw_decode API
https://github.com/simplejson/simplejson/issues/98 * Consistently reject
int_as_string_bitcount settings that are not positive integers * Added
int_as_string_bitcount encoder option https://github.com/simplejson/pull/96 *
Fixed potential crash when encoder created with incorrect options * Native
setuptools support re-introduced
https://github.com/simplejson/simplejson/pull/92
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1115519 - CVE-2014-4616 python-simplejson: python: missing boundary check in JSON module [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1115519
--------------------------------------------------------------------------------