[EPEL-devel] Re: Should we retire weechat from EPEL 7?
On Thu, Oct 06, 2022 at 07:11:19PM +0200, Neal Gompa wrote: > On Thu, Oct 6, 2022 at 7:03 PM Michel Alexandre Salim > wrote: > > > > Hi all, > > > > We should probably retire weechat from EPEL 7 - it has multiple CVEs > > that can only be fixed by updating to versions >= 3.5, but the spec no > > longer works on EPEL 7 thanks to macros like `%cmake_build` not being > > available. > > > > https://bugz.fedoraproject.org/weechat > > > > I'm not sure either Paul or myself really care enough about EL7 to > > maintain a divergent spec. If someone does still care, PR appreciated to > > fix this, otherwise consider this the first notice that I'll retire this > > branch in a few days. > > > > The cmake3 package has all the macros from the mainline cmake package in > Fedora. > > It should be fully compatible, just swap %cmake_* for %cmake3_*. > > Oh thanks, that works. We can keep this going for now then: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-e8cd6275b1 -- Michel Alexandre Salim identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Re: Should we retire weechat from EPEL 7?
On Thu Oct 6, 2022 at 19:11 +0200, Neal Gompa wrote: > The cmake3 package has all the macros from the mainline cmake package in > Fedora. > > It should be fully compatible, just swap %cmake_* for %cmake3_*. Oops, I responded before I saw this. -- Maxwell G (@gotmax23) Pronouns: He/Him/His signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Re: Should we retire weechat from EPEL 7?
On Thu Oct 6, 2022 at 12:02 CDT, Michel Alexandre Salim wrote: > I'm not sure either Paul or myself really care enough about EL7 to > maintain a divergent spec. The %cmake3* macros work everywhere. -- Maxwell G (@gotmax23) Pronouns: He/Him/His signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Re: Should we retire weechat from EPEL 7?
On Thu, Oct 6, 2022 at 7:03 PM Michel Alexandre Salim wrote: > > Hi all, > > We should probably retire weechat from EPEL 7 - it has multiple CVEs > that can only be fixed by updating to versions >= 3.5, but the spec no > longer works on EPEL 7 thanks to macros like `%cmake_build` not being > available. > > https://bugz.fedoraproject.org/weechat > > I'm not sure either Paul or myself really care enough about EL7 to > maintain a divergent spec. If someone does still care, PR appreciated to > fix this, otherwise consider this the first notice that I'll retire this > branch in a few days. > The cmake3 package has all the macros from the mainline cmake package in Fedora. It should be fully compatible, just swap %cmake_* for %cmake3_*. -- 真実はいつも一つ！/ Always, there's only one truth! ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Should we retire weechat from EPEL 7?
Hi all, We should probably retire weechat from EPEL 7 - it has multiple CVEs that can only be fixed by updating to versions >= 3.5, but the spec no longer works on EPEL 7 thanks to macros like `%cmake_build` not being available. https://bugz.fedoraproject.org/weechat I'm not sure either Paul or myself really care enough about EL7 to maintain a divergent spec. If someone does still care, PR appreciated to fix this, otherwise consider this the first notice that I'll retire this branch in a few days. Best regards, -- Michel Alexandre Salim identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Re: Proposal: Dropping modules from EPEL-8. Not adding modules to EPEL-9
On Wed, 31 Aug 2022 at 17:08, Stephen Smoogen wrote: > > When EPEL-8 was launched, it came with some support for modules with the > hope that a module ecosystem could be built from Fedora packages using RHEL > modules as an underlying tool. This has never happened and we have ended up > with a muddle of modular packages which will 'build' but may not install or > even run on an EL-8 system. Attempts to fix this and work within how EPEL > is normally built have been tried for several years by different people but > have not worked. > > At this point it is time to say this experiment with modules in EPEL has > not worked and focus resources on what does work. I would like to propose > that modular support is removed from EPEL by January 2023. > > Steps: > 1. Approval of this proposal by the EPEL Steering committee and any other > ones required. > 2. Announcement of end of life to various lists. > 3. Archiving of the modules on XYZ date to > /pub/archive/epel/8.-MM/Modular and pointing mirrormanager to that for > that > 4. Make changes in bodhi to turn off reporting about modules for EL8. > 5. Make changes in MBS configs to turn off building modules for EL8. > 6. Make changes in PDC for EL8 modules > 7. Make changes in compose scripts and tools to no longer cover EPEL-8 > modules > 8. Remove epel-8 modules from /pub/epel/8 > 9. Announce closure of this proposal and any lessons learned. > > Due to the year end freezes that many Enterprise consumers are starting, I would like to propose the change to the timeline 2b. Make changes to epel-release so that EPEL modular is no longer turned on by default with README. 2c. Document configuration changes that would be needed for sites mirroring using Enterprise patch management systems. 3a. Start regular Archiving of the modules on XYZ date to /pub/archive/epel/8 3b. and pointing mirrormanager to that for that We can do steps up to 3a. and then start on 3b and other items after February 1st 2023. -- Stephen Smoogen, Red Hat Automotive Let us be kind to one another, for most of us are fighting a hard battle. -- Ian MacClaren ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Fedora EPEL 9 updates-testing report
The following Fedora EPEL 9 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-1ee1fe2c17 libopenmpt-0.6.6-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing gnome-shell-extension-appindicator-46-1.el9 ioping-1.3-1.el9 weechat-3.6-1.el9 Details about builds: gnome-shell-extension-appindicator-46-1.el9 (FEDORA-EPEL-2022-2531c94250) AppIndicator/KStatusNotifierItem support for GNOME Shell Update Information: Update to latest version ChangeLog: * Fri Sep 30 2022 Artem Polishchuk 46-1 - chore(update): 46 * Thu Sep 29 2022 Artem Polishchuk 45-1 - chore(update): 45 ioping-1.3-1.el9 (FEDORA-EPEL-2022-43ac9fb3fb) Simple disk I/O latency monitoring tool Update Information: ioping lets you monitor I/O latency in real time. It shows disk latency in the same way as ping shows network latency ChangeLog: * Thu Oct 6 2022 Robin Lee 1.3-1 - Update to 1.3 * Thu Jul 21 2022 Fedora Release Engineering - 1.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering - 1.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering - 1.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021 Fedora Release Engineering - 1.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild References: [ 1 ] Bug #2132428 - Please branch and build ioping in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2132428 weechat-3.6-1.el9 (FEDORA-EPEL-2022-1c6c522b07) Portable, fast, light and extensible IRC client Update Information: - add command "/item" to create custom bar items - add bar item "spacer" - add case conversion in evaluation of expressions with "lower:string" and "upper:string" - move detailed list of hooks from command "/plugin listfull" to "/debug hooks " - allow to remove multiple filters at once with command "/filter del" - allow to catch multiple signals in functions hook_signal and hook_hsignal - rename option "save" to "apply" in IRC command "/autojoin" - add support of RPL_HELPSTART, RPL_HELPTXT and RPL_ENDOFHELP (IRC messages 524, 704, 705, 706) - add support of PHP 8.2 - many bugs fixed. ChangeLog: * Wed Oct 5 2022 Michel Alexandre Salim 3.6-1 - Update to 3.6 References: [ 1 ] Bug #2063856 - weechat: SSL verification vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2063856 [ 2 ] Bug #2128160 - New version of weechat available 3.6 https://bugzilla.redhat.com/show_bug.cgi?id=2128160 ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Re: EPEL 8 Modules get the axe on Halloween 2022
On Wed, Sep 28, 2022 at 3:09 PM Troy Dawson wrote: > When EPEL-8 was launched, it came with some support for modules with the > hope that a module ecosystem could be built from Fedora packages using RHEL > modules as an underlying tool. This has never happened and we have ended up > with a muddle of modular packages which will 'build' but may not install or > even run on an EL-8 system. Attempts to fix this and work within how EPEL > is normally built have been tried for several years by different people but > have not worked. > > At this point we are saying that this experiment with modules in EPEL has > not worked and we will focus our resources on what does work. > > Schedule of EPEL 8 Module Retirement: > Next Week: > - epel-release will be updated. > -- epel-modular will set enabled = 0 > -- epel-modular full name will have "Deprecated" in it > > October 31 2022: > - The EPEL 8 modules will be archived and removed. > -- The mirror manager will be pointed to the archive. > - Packagers will no longer be able to build EPEL 8 modules. > > After October 31st (Actual date to be determined): > - epel-release will be updated again. > -- epel-modular repo configs will be removed. > > Questions and Answers: > > Question: Will I still be able to access the modules after October 31st? > Answer: It is not recommended, because the modules will not get any > security or bug fixes, but yes. They will be in the Fedora archives, > and the mirror managers will point at them. > > Question: What will you be dressed as on Halloween? > Answer (Troy): A Penguin > > EPEL Steering Committee > > [1] - https://pagure.io/epel/issue/198 > Question: Many Enterprise customers need time for a transition like this. Can the transition date be pushed back? Answer: This will have to be voted on by the EPEL Steering Committee. The answer is likely yes, but I won't give a firm answer until it's been discussed and voted on. ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[EPEL-devel] Fedora EPEL 7 updates-testing report
The following Fedora EPEL 7 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-de23d337b0 libopenmpt-0.6.6-1.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-66467c33ea seamonkey-2.53.14-3.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-d8f75949c3 git-lfs-2.10.0-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing luajit-2.0.5-1.20220913.46e62cd.el7 python3-mod_wsgi-4.7.1-3.el7 Details about builds: luajit-2.0.5-1.20220913.46e62cd.el7 (FEDORA-EPEL-2022-f174e47230) Just-In-Time Compiler for Lua Update Information: - Update to latest snapshot of 2.0 branch - Fixes CVE-2020-15890, resolves rhbz#1860331 - Fixes CVE-2020-24372, resolves rhbz#1870308 ChangeLog: * Mon Oct 3 2022 Carl George - 2.0.5-1.20220914.46e62cd - Update to latest snapshot of 2.0 branch - Fixes CVE-2020-15890, resolves rhbz#1860331 - Fixes CVE-2020-24372, resolves rhbz#1870308 References: [ 1 ] Bug #1860331 - CVE-2020-15890 luajit: out-of-bounds read because __gc handler frame traversal is mishandled [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1860331 [ 2 ] Bug #1870308 - CVE-2020-24372 luajit: out-of-bounds read in lj_err_run function in lj_err.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1870308 python3-mod_wsgi-4.7.1-3.el7 (FEDORA-EPEL-2022-3f600666f9) A WSGI interface for Python web applications in Apache Update Information: - Backported fix for CVE-2022-2255 ChangeLog: * Wed Oct 5 2022 Diego Herrera - 4.7.1-3 - Backported fix for CVE-2022-2255 References: [ 1 ] Bug #2108272 - CVE-2022-2255 python3-mod_wsgi: mod_wsgi: Trusted Proxy Headers Removing Bypass [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2108272 ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
