[EPEL-devel] Fedora EPEL 7 updates-testing report

[updates]

The following Fedora EPEL 7 Security updates need testing:
 Age  URL
 680  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-1087   
dokuwiki-0-0.24.20140929c.el7
 443  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-dac7ed832f   
mcollective-2.8.4-1.el7
 161  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-23fa04bf1c   
redis-3.2.3-1.el7
 145  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-e8f4ff76b3   
chicken-4.11.0-3.el7
  25  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-04bc9dd81d   
libbsd-0.8.3-1.el7
  15  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-92129d651d   
exim-4.88-2.el7
  13  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-770d2afc7d   
mingw-flac-1.3.2-1.el7
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-fbb2447c6e   
php-PHPMailer-5.2.22-1.el7
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-3d29bf8e34   
php-ZendFramework2-2.4.11-1.el7
   4  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-f1acebb58b   
wordpress-4.7.1-1.el7
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6ee140a6d3   
fedmsg-0.18.2-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6e3dadcb1d   
pdns-recursor-3.7.4-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9bcc7b6164   
mingw-nsis-3.01-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-ad7467bd9c   
pdns-3.4.11-1.el7
   0  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-450698b0ed   
ansible-2.2.1.0-1.el7


The following builds have been pushed to Fedora EPEL 7 updates-testing

ansible-2.2.1.0-1.el7
liblxqt-0.11.1-2.el7
lximage-qt-0.5.1-1.el7
lxqt-about-0.11.1-1.el7
lxqt-common-0.11.2-1.el7
lxqt-config-0.11.1-2.el7
lxqt-globalkeys-0.11.1-1.el7
lxqt-notificationd-0.11.1-1.el7
lxqt-openssh-askpass-0.11.1-1.el7
lxqt-panel-0.11.1-1.el7
lxqt-policykit-0.11.1-1.el7
lxqt-powermanagement-0.11.1-1.el7
lxqt-qtplugin-0.11.1-1.el7
lxqt-runner-0.11.1-1.el7
lxqt-session-0.11.1-1.el7
lxqt-sudo-0.11.1-1.el7
obconf-qt-0.11.1-1.el7
pavucontrol-qt-0.2.0-1.el7
pdc-updater-0.4.8-1.el7
pdns-3.4.11-1.el7
perl-Image-ExifTool-10.40-1.el7
php-bartlett-PHP-CompatInfo-5.0.4-1.el7
texlive-extension-2012-48.el7

Details about builds:



 ansible-2.2.1.0-1.el7 (FEDORA-EPEL-2017-450698b0ed)
 SSH-based configuration management, deployment, and task execution system

Update Information:

Update to ansible 2.2.1. Fixes several CVEs as well as a number of other
bugfixes.   See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
for full changes.

References:

  [ 1 ] Bug #1403231 - ansible: Variables from vault are being output to 
console/log when using with_items [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1403231
  [ 2 ] Bug #1396176 - CVE-2016-8647 Ansible: in some circumstances the 
mysql_user module may fail to correctly change a password [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1396176




 liblxqt-0.11.1-2.el7 (FEDORA-EPEL-2017-2bab9c5e7d)
 Core shared library for LXQt desktop suite

Update Information:

LXQt 0.11.1 update

References:

  [ 1 ] Bug #1403560 - obconf-qt-0.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1403560




 lximage-qt-0.5.1-1.el7 (FEDORA-EPEL-2017-2bab9c5e7d)
 The image viewer and screenshot tool for LXQt

Update Information:

LXQt 0.11.1 update

References:

  [ 1 ] Bug #1403560 - obconf-qt-0.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1403560




 lxqt-about-0.11.1-1.el7 (FEDORA-EPEL-2017-2bab9c5e7d)
 About application for LXQt desktop suite

Update Information:

LXQt 0.11.1 update

References:

  [ 1 ] Bug 

[EPEL-devel] Re: rethinking the epel testing

[Matthew Miller]

On Tue, Jan 17, 2017 at 04:11:31PM +0100, Nikos Mavrogiannopoulos wrote:
> 1. The majority of people who use EPEL are not Fedora users. They are
> more likely to report a bug they encounter, in CentOS forums (or RHEL)
> rather than understand fedora process and the need for karma.

Can we help steer those people into understanding Bodhi? It's not like
a deep knowledge of all things Fedora is required.


> I do not have any good suggestion, other than reducing the long period
> of testing to the Fedora defaults (7 days). A better approach would be
> to tie more to centos processes, and allow centos registered users to
> give karma and test, but I have no idea how feasible it is, and whether
> centos users will actually get involved in EPEL.

I think we should be able to do federated authentication with CentOS
and accept CentOS accounts as valid for meaningful karma. But I'd
really rather encourage just getting Fedora accounts and helping draw
people who are in the Fedora community though EPEL into more close
connections.

-- 
Matthew Miller

Fedora Project Leader
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org

[EPEL-devel] rethinking the epel testing

[Nikos Mavrogiannopoulos]

Hi,
 As it is now in the EPEL package update process the testing phase
takes 14 days (double of Fedora). My impression is that this testing
phase is quite long and unhelpful for the following reasons:

1. The majority of people who use EPEL are not Fedora users. They are
more likely to report a bug they encounter, in CentOS forums (or RHEL)
rather than understand fedora process and the need for karma.

2. The testing-imposed delay does not help detecting failures such as a
library ABI breakage as in:
https://bugzilla.redhat.com/show_bug.cgi?id=1411021
My guess is that these systems upgrade on even slower cycle than 14
days (it may even be the RHEL/Centos cycles).


Most likely only then an issue will be spotted and the 14-day delay
prevents from providing fast a fix. 

I do not have any good suggestion, other than reducing the long period
of testing to the Fedora defaults (7 days). A better approach would be
to tie more to centos processes, and allow centos registered users to
give karma and test, but I have no idea how feasible it is, and whether
centos users will actually get involved in EPEL.

regards,
Nikos

[0]. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-63c298b073
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org