[EPEL-devel] Fedora EPEL 6 updates-testing report

2019-02-11 Thread updates
The following Fedora EPEL 6 Security updates need testing:
 Age  URL
  59  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8   
tomcat-7.0.92-1.el6
  55  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8   
game-music-emu-0.6.2-1.el6
   7  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-809dcc772f   
golang-1.11.5-1.el6


The following builds have been pushed to Fedora EPEL 6 updates-testing

drupal7-admin_menu-3.0-0.13.rc6.el6
php-horde-Horde-Compress-2.2.2-1.el6
php-horde-Horde-Core-2.31.8-1.el6
php-horde-Horde-Mapi-1.0.9-1.el6
php-theseer-autoload-1.25.3-1.el6
recap-2.0.1-1.el6

Details about builds:



 drupal7-admin_menu-3.0-0.13.rc6.el6 (FEDORA-EPEL-2019-0667c3af7e)
 Provides a drop-down menu to most administrative tasks

Update Information:

https://www.drupal.org/project/admin_menu/releases/7.x-3.0-rc6

ChangeLog:

* Mon Feb 11 2019 Shawn Iwinski  - 3.0-0.13.rc6
- Update to 3.0-rc6
- Modernize spec
* Thu Jan 31 2019 Fedora Release Engineering  - 
3.0-0.12.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Thu Jul 12 2018 Fedora Release Engineering  - 
3.0-0.11.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb  7 2018 Fedora Release Engineering  - 
3.0-0.10.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering  - 
3.0-0.9.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering  - 
3.0-0.8.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Feb  3 2016 Fedora Release Engineering  - 
3.0-0.7.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering  
- 3.0-0.6.rc5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild




 php-horde-Horde-Compress-2.2.2-1.el6 (FEDORA-EPEL-2019-7171eda489)
 Horde Compression API

Update Information:

**Horde_Compress 2.2.2**  * [mjr] Remove dependency on Math_BigInteger.

ChangeLog:

* Mon Feb 11 2019 Remi Collet  - 2.2.2-1
- update to 2.2.2
- drop patch merged upstream
- use range dependencies




 php-horde-Horde-Core-2.31.8-1.el6 (FEDORA-EPEL-2019-2aa537e18c)
 Horde Core Framework libraries

Update Information:

**Horde_Core 2.31.8**  * [mjr] Improve ActiveSync RESOLVERECIPIENT reqeuests.

ChangeLog:

* Mon Feb 11 2019 Remi Collet  - 2.31.8-1
- update to 2.31.8




 php-horde-Horde-Mapi-1.0.9-1.el6 (FEDORA-EPEL-2019-275e0f9eb1)
 MAPI utility library

Update Information:

**Horde_Mapi 1.0.9**  * [mjr] No longer support Math_BigInteger, require the
bcmath extension instead.

ChangeLog:

* Mon Feb 11 2019 Remi Collet  - 1.0.9-1
- update to 1.0.9
- use range dependencies
- drop dependency on Math_BigInteger
- open https://github.com/horde/Mapi/pull/2 fix for tests




 php-theseer-autoload-1.25.3-1.el6 (FEDORA-EPEL-2019-89f2e39081)
 A tool and library to generate autoload code

Update Information:

**Release 1.25.3**  * Fix [#83](https://github.com/theseer/Autoload/issues/83):
Error with recursive Composer dependencies     **Release 1.25.2**  * Fix
Parser to ignore "inline" use of keywords `class`, `interface` and `trait`  
**Release 1.25.1**  * Merge PR
[#81](https://github.com/theseer/Autoload/pull/81): Fix PHP 7.3 warnings [Remi]

ChangeLog:

* Mon Feb 11 2019 Remi Collet  - 1.25.3-1
- update to 1.25.3
- add patch for PHP 5.3 

[EPEL-devel] Re: EPEL and RHEL High Availability / Resilient Storage

2019-02-11 Thread Ken Dreyer
On Mon, Feb 11, 2019 at 11:38 AM Kevin Fenzi  wrote:
>
> On 2/11/19 9:27 AM, Ken Dreyer wrote:
> > Hi EPEL folks,
> >
> > There are some packages in CentOS 7 that did not ship in the main RHEL
> > 7 Server product.
> >
> > Examples:
> >
> > python-jwt http://access.redhat.com/errata/RHEA-2018:1032
> > python-adal https://access.redhat.com/errata/RHEA-2018:1042
> >
> > This went into the "High Availability" and "Resilient Storage" add-ons
> > of RHEL, not the usual RHEL Base/Optional/Extras.
> >
> > This means that CentOS 7 really includes the RHEL 7 HA and RS products.
> >
> > This also means that some EPEL 7 packages cannot install without these
> > repos enabled on RHEL, see eg.
> > https://bugzilla.redhat.com/show_bug.cgi?id=1674764
> >
> > Should EPEL's documentation include these two repos?
> > https://fedoraproject.org/wiki/EPEL
>
> Well, we have:
>
> https://fedoraproject.org/wiki/EPEL/FAQ#Does_EPEL_replace_packages_provided_within_Red_Hat_Enterprise_Linux_or_layered_products.3F
>
> I am not sure this belongs on the front page... but it might be nice to
> be more visible yeah.

Cool, thanks for the confirmation! My teammates and I have hit this a
couple times unfortunately.

I've edited the front EPEL wiki page to instruct RHEL users to enable
the HA repo in addition to Optional and Extras.

- Ken
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org


[EPEL-devel] Re: Trying to figure out "internal" packages

2019-02-11 Thread Todd Zullinger
Kevin Fenzi wrote:
> On 2/3/19 11:48 AM, Stephen John Smoogen wrote:
>> Over the weekend, tmz asked on IRC why their RHEL-6 build was
>> failing when it had not failed previously. The problem was that
>> the expat21 package was being seen in the buildroot and
>> over-riding the RHEL-6 expat.
>> 
>> https://koji.fedoraproject.org/koji/rpmlist?buildrootID=15142150%20=50=nvr=component
>> 
>> This was due to a bug in the expat21 package, but the part that I
>> am trying to figure out is why the following packages are shown
>> as "internal" in the buildroot.
>> 
>> expat21-2.1.0-1.el6.x86_64.rpm internal
>> expat21-devel-2.1.0-1.el6.x86_64.rpm internal
>> highlight-3.8-1.el6.x86_64.rpm internal
>> pcre2-10.21-22.el6.x86_64.rpm internal
>> pcre2-devel-10.21-22.el6.x86_64.rpm internal
>> perl-IO-Tty-1.08-3.el6.x86_64.rpm internal
>> 
>> The following do make sense:
>> 
>> epel-release-6-8.noarch.rpm internal
>> epel-rpm-macros-6-21.noarch.rpm internal
>> python2-rpm-macros-3-13.el6.noarch.rpm internal
>> python-rpm-macros-3-13.el6.noarch.rpm internal
>> python-srpm-macros-3-13.el6.noarch.rpm internal
>> 
>> Are the above items where the buildrequires in a package are pulling
>> them in or is there a buildroot directive adding them?
> 
> "internal" here means local to koji, ie, in epel.
> 
> expat21 is in epel. I have no idea why this bug wouldn't have hit
> before, as expat21 hasn't been changed in many years, but it is in epel.

I'm not sure either, but until recently (in the past month
or two), this didn't affect koji.  It still does not affect
builds on el6 either via mock from a fedora host or directly
via rpmbuild.

For the local el6 builds, I used fedpkg --release el6 srpm
and then yum-builddep on the srpm to install the deps.

However, Carl George filed a bug report on this last June:

https://bugzilla.redhat.com/show_bug.cgi?id=1585248

In that report he noted that yum-builddep was a symlink to
dnf-utils.  On the f27/f28/f29 systems I tested, yum-utils
had been installed, so perhaps that is one of the important
differences which keeps this from affecting normal epel
users and many local/mock builds?

Installing epel-release and then running yum install
expat-devel also doesn't pull in expat21.  I thought this
might be because expat from base is already installed, so I
installed expat-devel-2.0 and then ran yum update
expat-devel and still don't get expat21 pulled in.

In any case, is there an audit trail that shows when (and
perhaps why) expat21 was added to the internal koji repo?
It seems like it should be removed from there if it's
manually tagged into that location.

Björn, have you had any luck on the CVE's affecting expat21
so an update dropping the expat-devel provides can be
submitted?

-- 
Todd


signature.asc
Description: PGP signature
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org


[EPEL-devel] Re: EPEL and RHEL High Availability / Resilient Storage

2019-02-11 Thread Kevin Fenzi
On 2/11/19 9:27 AM, Ken Dreyer wrote:
> Hi EPEL folks,
> 
> There are some packages in CentOS 7 that did not ship in the main RHEL
> 7 Server product.
> 
> Examples:
> 
> python-jwt http://access.redhat.com/errata/RHEA-2018:1032
> python-adal https://access.redhat.com/errata/RHEA-2018:1042
> 
> This went into the "High Availability" and "Resilient Storage" add-ons
> of RHEL, not the usual RHEL Base/Optional/Extras.
> 
> This means that CentOS 7 really includes the RHEL 7 HA and RS products.
> 
> This also means that some EPEL 7 packages cannot install without these
> repos enabled on RHEL, see eg.
> https://bugzilla.redhat.com/show_bug.cgi?id=1674764
> 
> Should EPEL's documentation include these two repos?
> https://fedoraproject.org/wiki/EPEL

Well, we have:

https://fedoraproject.org/wiki/EPEL/FAQ#Does_EPEL_replace_packages_provided_within_Red_Hat_Enterprise_Linux_or_layered_products.3F

I am not sure this belongs on the front page... but it might be nice to
be more visible yeah.

kevin




signature.asc
Description: OpenPGP digital signature
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org


[EPEL-devel] Re: Trying to figure out "internal" packages

2019-02-11 Thread Kevin Fenzi
On 2/3/19 11:48 AM, Stephen John Smoogen wrote:
> Over the weekend, tmz asked on IRC why their RHEL-6 build was
> failing when it had not failed previously. The problem was that
> the expat21 package was being seen in the buildroot and
> over-riding the RHEL-6 expat.
> 
> https://koji.fedoraproject.org/koji/rpmlist?buildrootID=15142150%20=50=nvr=component
> 
> This was due to a bug in the expat21 package, but the part that I
> am trying to figure out is why the following packages are shown
> as "internal" in the buildroot.
> 
> expat21-2.1.0-1.el6.x86_64.rpm internal
> expat21-devel-2.1.0-1.el6.x86_64.rpm internal
> highlight-3.8-1.el6.x86_64.rpm internal
> pcre2-10.21-22.el6.x86_64.rpm internal
> pcre2-devel-10.21-22.el6.x86_64.rpm internal
> perl-IO-Tty-1.08-3.el6.x86_64.rpm internal
> 
> The following do make sense:
> 
> epel-release-6-8.noarch.rpm internal
> epel-rpm-macros-6-21.noarch.rpm internal
> python2-rpm-macros-3-13.el6.noarch.rpm internal
> python-rpm-macros-3-13.el6.noarch.rpm internal
> python-srpm-macros-3-13.el6.noarch.rpm internal
> 
> Are the above items where the buildrequires in a package are pulling
> them in or is there a buildroot directive adding them?

"internal" here means local to koji, ie, in epel.

expat21 is in epel. I have no idea why this bug wouldn't have hit
before, as expat21 hasn't been changed in many years, but it is in epel.

kevin




signature.asc
Description: OpenPGP digital signature
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org


[EPEL-devel] EPEL and RHEL High Availability / Resilient Storage

2019-02-11 Thread Ken Dreyer
Hi EPEL folks,

There are some packages in CentOS 7 that did not ship in the main RHEL
7 Server product.

Examples:

python-jwt http://access.redhat.com/errata/RHEA-2018:1032
python-adal https://access.redhat.com/errata/RHEA-2018:1042

This went into the "High Availability" and "Resilient Storage" add-ons
of RHEL, not the usual RHEL Base/Optional/Extras.

This means that CentOS 7 really includes the RHEL 7 HA and RS products.

This also means that some EPEL 7 packages cannot install without these
repos enabled on RHEL, see eg.
https://bugzilla.redhat.com/show_bug.cgi?id=1674764

Should EPEL's documentation include these two repos?
https://fedoraproject.org/wiki/EPEL
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org