[EPEL-devel] Re: NetworkManager-openvpn

2024-07-18 Thread Leon Fauster via epel-devel
pinions about this. Using a NEVR is valid but I do not see it that much, and with the mentioned patch obviously necessary. Not sure how to include it in epel-next, though, I don't see any `epel*-next` branch in NetworkManager-openvpn dist-git. I will need to read the docs, I guess. Well, with

[EPEL-devel] Re: NetworkManager-openvpn

2024-07-18 Thread Leon Fauster via epel-devel
9 (via EPEL9-NEXT) if you want ... -- Leon -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/projec

[EPEL-devel] EPEL-ANNOUNCERe: Incompatible upgrade: python-{botocore,s3transfer,boto3}

2024-07-11 Thread Major Hayden via epel-devel
The content of this message was lost. It was probably cross-posted to multiple lists and previously handled on another list. -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le

[EPEL-devel] Re: [EPEL-devel]NetworkManager-openvpn

2024-07-04 Thread Leon Fauster via epel-devel
Of course it isn't correct to be released in EPEL 9 if the dependency cannot be met by what is currently available in RHEL 9 (NetworkManager-1.46.0-8.el9_4). CentOS Stream 9 has a new enough version (NetworkManager-1.48.0-1.el9), but it's unlikely for that build to show up in RHEL 9 until 9.5 is released

[EPEL-devel]NetworkManager-openvpn

2024-06-30 Thread Leon Fauster via epel-devel
epel-testing (epel9) provides a new NetworkManager-openvpn package that requires NetworkManager >= 1:1.46.2, and that one is currently not provided by RHEL9. Is this intentional ...? -- Leon -- ___ epel-devel mailing list -- epel-de

[EPEL-devel] Re: Contact to Oracle Linux EPEL repo maintainer

2024-05-31 Thread Leon Fauster via epel-devel
Am 31.05.24 um 15:30 schrieb Troy Dawson: On Fri, May 31, 2024 at 2:48 AM Peter Soppe <mailto:pe...@soppe.net>> wrote: Hello EPEL Team, I am trying to find out how to contact the maintainer of the Oracle Linux EPEL repository. The only website I found about EPEL an

[EPEL-devel] Re: EPEL-ANNOUNCE Incompatible Upgrade of singularity-ce in EPEL 7 / 8 / 9

2024-04-11 Thread Jonathan Wright via epel-devel
Thank you for the followup. On Thu, Apr 11, 2024 at 7:51 PM David Trudgian via epel-devel < epel-devel@lists.fedoraproject.org> wrote: > The singularity-ce incompatible upgrade has now been pushed to stable. > > This is the final announcement prescribed by the EPEL Incompatible &g

[EPEL-devel] Re: EPEL-ANNOUNCE Incompatible Upgrade of singularity-ce in EPEL 7 / 8 / 9

2024-04-11 Thread David Trudgian via epel-devel
The singularity-ce incompatible upgrade has now been pushed to stable. This is the final announcement prescribed by the EPEL Incompatible Upgrades Policy: https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/ Cheers, DT On 9 Feb 2024, at 10:45, David Trudgian wrote

[EPEL-devel] Re: activemq-cpp in epel8

2024-04-04 Thread Ward, Evan M CIV USN NRL (8112) Washington DC (USA) via epel-devel
Wow, that was fast! Thanks Jonathan! Regards, Evan From: Jonathan Wright Sent: Wednesday, April 3, 2024 10:55:40 PM To: EPEL Development List Cc: Ward, Evan M CIV USN NRL (8112) Washington DC (USA) Subject: Re: [EPEL-devel] activemq-cpp in epel8 Managed

[EPEL-devel] Re: activemq-cpp in epel8

2024-04-03 Thread Jonathan Wright via epel-devel
viewer will pick it > up, and if it will build against modern versions of Fedora/RHEL. > > On Wed, Apr 3, 2024 at 9:57 AM Ward, Evan M CIV USN NRL (8112) Washington > DC (USA) via epel-devel wrote: > >> Hi, >> >> Are there any packagers who would like to package act

[EPEL-devel] Re: activemq-cpp in epel8

2024-04-03 Thread Jonathan Wright via epel-devel
and EPEL8 is a 2-6 weeks depending on how quickly a reviewer will pick it up, and if it will build against modern versions of Fedora/RHEL. On Wed, Apr 3, 2024 at 9:57 AM Ward, Evan M CIV USN NRL (8112) Washington DC (USA) via epel-devel wrote: > Hi, > > Are there any packagers who would like t

[EPEL-devel] activemq-cpp in epel8

2024-04-03 Thread Ward, Evan M CIV USN NRL (8112) Washington DC (USA) via epel-devel
Hi, Are there any packagers who would like to package activemq-cpp in epel8? It's already in epel7. https://bugzilla.redhat.com/show_bug.cgi?id=2244652 Regards, Evan Ward smime.p7s Description: S/MIME cryptographic signature -- ___ epel-devel

[EPEL-devel] certbot Update From 2.6.0 to 2.9.0 in EPEL9

2024-03-09 Thread Jonathan Wright via epel-devel
will allow, in the near future. 1. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-226fa082a4 2. https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#_other_packages -- Jonathan Wright AlmaLinux Foundation Mattermost: chat <https://chat.almalinux.org/almalinux/messages/@jonat

[EPEL-devel] Incompatible Upgrade of singularity-ce in EPEL 7 / 8 / 9

2024-02-13 Thread David Trudgian via epel-devel
After approval in the last EPEL meeting [1], I have submitted an incompatible upgrade of singularity-ce to testing for EPEL 7, 8 & 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-cbd86d2020 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f299fbc570 h

[EPEL-devel] Re: Bodhi 8.0.2 deployed to prod today

2024-02-06 Thread Mattia Verga via epel-devel
Actually, someone else did that for you: https://github.com/fedora-infra/bodhi/issues/4737 Not much mind reading! ;-) Mattia -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le

[EPEL-devel] Re: EL9: conflict gpgme1.22 vs gpgme

2024-02-06 Thread Leon Fauster via epel-devel
o.6()(64bit)" and dnf chooses gpgme1.22 from epel instead gpgme from appstream. # LANG=C dnf whatprovides "libgpgmepp.so.6()(64bit)" Last metadata expiration check: 4:43:48 ago on Tue Feb 6 12:21:37 2024. gpgme1.22pp-1.22.0-1.el9.x86_64 : C++ bindings/wrapper for GPGME Repo:

[EPEL-devel] EL9: conflict gpgme1.22 vs gpgme

2024-02-06 Thread Leon Fauster via epel-devel
usr/lib64/libgpgme.so.11 -> libgpgme.so.11.31.0 -rwxr-xr-x. 1 root root 350864 13. Mai 2022 /usr/lib64/libgpgme.so.11.24.1 # rpm -qf /usr/lib64/libgpgme.so.11 gpgme-1.15.1-6.el9.x86_64 -- Leon -- ___ epel-devel mailing list -- epel

[EPEL-devel] Bodhi 8.0.2 deployed to prod today

2024-02-05 Thread Mattia Verga via epel-devel
Hello, I'd like to announce that Bodhi 8.0.2 has been deployed today and brings a feature which was requested specifically for EPEL: from now on (if everything works as expected) all builds submitted as buildroot overrides for EPEL9 will also be tagged as buildroot overrides for EPEL9N

[EPEL-devel] Incompatible Upgrade Request - singularity-ce

2024-01-29 Thread David Trudgian via epel-devel
Dear all, Following advice from Neal elsewhere on this list [1], I’m requesting that the singularity-ce EPEL packages may be updated to 4.1.0 following the incompatible upgrade procedure. The justification for the upgrade is that 3.x singularity-ce is no longer maintained upstream. Note

[EPEL-devel] Re: Packaging a newer singularity-ce as singularity-ce4

2024-01-26 Thread David Trudgian via epel-devel
y packaged at v4.0.3 in Fedora Rawhide, and >> v.3.11.5 elsewhere (Fedora releases and EPEL). >> >> We want to make a v4 available to EPEL users, as many would be interested in >> it, but I wouldn’t consider it a compatible update because there are some >> CLI c

[EPEL-devel] Packaging a newer singularity-ce as singularity-ce4

2024-01-26 Thread David Trudgian via epel-devel
(Fedora releases and EPEL). We want to make a v4 available to EPEL users, as many would be interested in it, but I wouldn’t consider it a compatible update because there are some CLI changes, and small behaviour changes. My understanding is that in order to provide a 4.x in EPEL, without any

[EPEL-devel] Re: Bundling newer 3rd party binaries than are packaged separately

2024-01-24 Thread David Trudgian via epel-devel
cific libexec dir. Thanks again, Dave Trudgian -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

[EPEL-devel] Bundling newer 3rd party binaries than are packaged separately

2024-01-23 Thread David Trudgian via epel-devel
Hi all, I currently package singularity-ce for Fedora and EPEL. Upstream, we bundle current versions of squashfuse and conmon with our source and own binary packages… because many distros package versions that are too old to work with SingularityCE, and users installing our upstream binary

[EPEL-devel] Re: VLC via EPEL vs via RPMFUSION

2024-01-09 Thread Leon Fauster via epel-devel
Hi Dominik, thanks for your reply. Am 09.01.24 um 10:16 schrieb Dominik 'Rathann' Mierzejewski: Hello, Leon. On Monday, 08 January 2024 at 17:18, Leon Fauster via epel-devel wrote: Hi all, it seems that VLC is in EPEL9 now. Looks like some license changes allows packaging some multimedia

[EPEL-devel] VLC via EPEL vs via RPMFUSION

2024-01-08 Thread Leon Fauster via epel-devel
Hi all, it seems that VLC is in EPEL9 now. Looks like some license changes allows packaging some multimedia stuff now. I noticed also the new epel-cisco-openh264 repo. Unfortunately, I'm not involved in the upstream/Fedora discussions. So, I miss some kind of documentation. A look into Fedoras

[EPEL-devel] Re: Broken version of wsdd released in EPEL7

2023-12-15 Thread Nick Howitt via epel-devel
. On 15/12/2023 14:46, Troy Dawson wrote: The way to stop it from being pushed is to give it negative karma in it's bodhi testing. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4e7c9d636e You know what's strange, the updates-testing report that get's automatically generated, doesn't put

[EPEL-devel] Re: Broken version of wsdd released in EPEL7

2023-12-15 Thread Nick Howitt via epel-devel
for its parameters in /etc/defaults/wsdd, but creates them in /etc/sysconfig/wsdd leading to an immediate failure on start.-- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le

[EPEL-devel] Broken version of wsdd released in EPEL7

2023-12-15 Thread Nick Howitt via epel-devel
ignored and now there has bee a breaking release. How can we get it fixed and what could I have done differently to get it fixed prior to release? Regards, Nick -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send

[EPEL-devel] Re: cloud-utils-growpart package conflict

2023-12-11 Thread Leon Fauster via epel-devel
Am 11.12.23 um 20:29 schrieb Neal Gompa: On Mon, Dec 11, 2023 at 2:19 PM Leon Fauster via epel-devel wrote: While updating to EL8.9 I noticed that cloud-utils-growpart is in EPEL and RHEL8? cloud-utils-growpart noarch 0.33-0.el8 rhel-8-for-x86_64-appstream-rpms cloud-utils-growpart noarch

[EPEL-devel] cloud-utils-growpart package conflict

2023-12-11 Thread Leon Fauster via epel-devel
While updating to EL8.9 I noticed that cloud-utils-growpart is in EPEL and RHEL8? cloud-utils-growpart noarch 0.33-0.el8 rhel-8-for-x86_64-appstream-rpms cloud-utils-growpart noarch 0.33-3.el8 epel Subpackage conflict? -- Leon -- ___ epel-devel

[EPEL-devel] Re: Fedora EPEL 7 updates-testing report

2023-12-07 Thread Nick Howitt via epel-devel
This wsdd update contains a potential breaking change and systemd service file errors. I have filed a bug report at https://bugzilla.redhat.com/show_bug.cgi?id=2253415. On 07/12/2023 02:43, upda...@fedoraproject.org wrote: The following Fedora EPEL 7 Security updates need testing: Age URL

[EPEL-devel] Missing EL sub-package: perl-lasso-epel EPEL only package for perl bindings

2023-11-28 Thread Xavier Bachelot via epel-devel
-package and thus has SAML support, and also in EPEL, where SAML support is indeed missing [2]. I have prepared a perl-lasso-epel spec file to add missing perl bindings support to EL releases and as this is the first time I go this route, although the EPEL guidelines states this is a review request

[EPEL-devel] Re: chromium regression on EL9

2023-11-21 Thread Leon Fauster via epel-devel
Am 20.11.23 um 21:42 schrieb Leon Fauster: Am 20.11.23 um 01:38 schrieb Neal Gompa: On Sun, Nov 19, 2023 at 5:25 PM Leon Fauster via epel-devel wrote: Am 19.11.23 um 14:30 schrieb Neal Gompa: On Sat, Nov 18, 2023 at 4:20 PM Leon Fauster via epel-devel wrote: Just noticed that the current

[EPEL-devel] Re: chromium regression on EL9

2023-11-20 Thread Leon Fauster via epel-devel
Am 20.11.23 um 01:38 schrieb Neal Gompa: On Sun, Nov 19, 2023 at 5:25 PM Leon Fauster via epel-devel wrote: Am 19.11.23 um 14:30 schrieb Neal Gompa: On Sat, Nov 18, 2023 at 4:20 PM Leon Fauster via epel-devel wrote: Just noticed that the current chromium in epel-testing can

[EPEL-devel] Re: chromium regression on EL9

2023-11-19 Thread Leon Fauster via epel-devel
Am 19.11.23 um 14:30 schrieb Neal Gompa: On Sat, Nov 18, 2023 at 4:20 PM Leon Fauster via epel-devel wrote: Just noticed that the current chromium in epel-testing can not be installed on E9 with rpmfusion repo enabled. All versions before did not have this problem. It seems the build pulls

[EPEL-devel] chromium regression on EL9

2023-11-18 Thread Leon Fauster via epel-devel
Just noticed that the current chromium in epel-testing can not be installed on E9 with rpmfusion repo enabled. All versions before did not have this problem. It seems the build pulls a new dep (libavformat-free) that conflicts with ffmpeg-libs of rpmfusion. This results in an incompatibility

[EPEL-devel] Re: qbittorrent in EPEL9

2023-11-17 Thread Palla Dium via epel-devel
. -- ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https

[EPEL-devel] Re: qbittorrent in EPEL9

2023-11-17 Thread Jonathan Wright via epel-devel
I want it just haven't had a chance to circle back. I saw this email and glanced back at it but I've been traveling this week. I'll finish the EPEL request per docs this week and get this rolling. On Fri, Nov 17, 2023, 09:04 Troy Dawson wrote: > It looks like Jonathan Wright was the per

[EPEL-devel] qbittorrent in EPEL9

2023-11-16 Thread Palla Dium via epel-devel
Hello, as per the EPEL package request documentation, I am kindly asking if there are any packagers who would like to package and maintain qbittorrent on EPEL. The request has been stalled since February 2023. https://bugzilla.redhat.com/show_bug.cgi?id=2172281 https://src.fedoraproject.org

[EPEL-devel] Re: Orphaning packages

2023-06-27 Thread Jonathan Wright via epel-devel
t; Thanks- > > -- > Lance Albertson > Director > Oregon State University | Open Source Lab > ___ > epel-devel mailing list -- epel-devel@lists.fedoraproject.org > To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-30 Thread Dave Dykstra via epel-devel
:51:10AM -0500, Dave Dykstra wrote: > To Troy and the rest of the EPEL Steering Committee: > > Thank you very much for granting the request. > > The apptainer maintainers promise to do our best to avoid incompatible > updates in the future. However if we discover ano

[EPEL-devel] Update of minor version of golang-1.19 coming to EPEL7

2023-05-30 Thread Dave Dykstra via epel-devel
golang-1.19.6 is now available in epel-testing for EPEL7, an update of a minor version from 1.18.9. I expect it to be promoted in about a week unless karma changes that. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ba899b9717 My policy for updating golang in EPEL7 is to follow

[EPEL-devel] Re: Update of minor version of golang-1.19 coming to EPEL7

2023-05-30 Thread Dave Dykstra via epel-devel
I posted the below a couple of weeks ago but I don't think it ever came through. 1.9.6 is now in EPEL7's stable epel repository. Another new update 1.9.9 is now in EPEL7's epel-testing, since RHEL8 did another update due to a high severity vulnerability. https://bodhi.fedoraproject.org/updates

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-19 Thread Dave Dykstra via epel-devel
if there was a compatible way to deal with this security vulnerability, we would have done it. Dave On Thu, May 11, 2023 at 10:34:40PM -0500, Carl George wrote: > Tens of thousands of upstream projects are packaged into Fedora and > EPEL. If they can find ways to deliver security fixes

[EPEL-devel] Re: KDE broken on CentOS Stream 9

2023-05-17 Thread Jonathan Wright via epel-devel
e KDE Plasma Desktop. This didn't go well. > I will be removing the updates from epel-next-testing and starting again > with just the packages that need a rebuild due to the qt5 update. > > I'm sorry for the inconvenience, and appreciate the patience you have > shown. > > Troy &

[EPEL-devel] Re: Ansible in EPEL 9

2023-05-16 Thread Leon Fauster via epel-devel
Am 15.05.23 um 20:50 schrieb Jonathan Wright: EPEL tracks RHEL, not clones. EPEL10 is likely to resolve this, however.  Ref https://discussion.fedoraproject.org/t/epel-10-proposal <https://discussion.fedoraproject.org/t/epel-10-proposal> On Mon, May 15, 2023 at 1:31 PM Leon Fauster vi

[EPEL-devel] Re: Ansible in EPEL 9

2023-05-15 Thread Jonathan Wright via epel-devel
EPEL tracks RHEL, not clones. EPEL10 is likely to resolve this, however. Ref https://discussion.fedoraproject.org/t/epel-10-proposal On Mon, May 15, 2023 at 1:31 PM Leon Fauster via epel-devel < epel-devel@lists.fedoraproject.org> wrote: > Am 10.05.23 um 05:24 schrieb Maxwell G: >

[EPEL-devel] Re: Ansible in EPEL 9

2023-05-15 Thread Leon Fauster via epel-devel
Am 10.05.23 um 05:24 schrieb Maxwell G: Hello EPEL users and developers, RHEL 9.2 was released today, so I have updated ansible in EPEL 9 from 6.3.0 to 7.2.0 to match RHEL 9.2's ansible-core bump from 2.13.3 to 2.14.2. Each ansible major version is tied to a specific major version of ansible

[EPEL-devel] Re: Incompatible change in apptainer-suid-1.1.8 now in epel-testing

2023-05-15 Thread Dave Dykstra via epel-devel
This change has now been approved by the EPEL Steering Committee and requested to be pushed to stable. I expect it to be in stable sometime tomorrow. Dave On Wed, Apr 26, 2023 at 01:07:32PM -0500, Dave Dykstra wrote: > The apptainer-suid package version 1.1.8 now in epel-testing

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-11 Thread Dave Dykstra via epel-devel
To Troy and the reset of the EPEL Steering Committee: Thank you very much for granting the request. The apptainer maintainers promise to do our best to avoid incompatible updates in the future. However if we discover another high severity vulnerability in the setuid-root portion that cannot

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-08 Thread Dave Dykstra via epel-devel
chines on RHEL 7,8 and 9 to use the same > version and secure options. > Users that only have machines on RHEL 8 and 9, would then have the option > to move to the more secure option when the time is good for them. > > Troy > > On Fri, May 5, 2023 at 3:30 PM Dave Dykstra via

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-05 Thread Dave Dykstra via epel-devel
ess already gives privilege > escalation in much easier ways. I said that that's probably why they only > counted it as denial of service since that was the only thing new. > > Dave > > On Thu, May 04, 2023 at 02:14:08PM +0100, David Trudgian wrote: > > Dave, > >

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-04 Thread Dave Dykstra via epel-devel
g new. Dave On Thu, May 04, 2023 at 02:14:08PM +0100, David Trudgian wrote: > Dave, > > On Wed, May 3, 2023, at 10:31 PM, Dave Dykstra via epel-devel wrote: > > On Wed, May 03, 2023 at 02:59:42PM -0500, Carl George wrote: > > > On Thu, Apr 27, 2023 at 10:20

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-03 Thread Dave Dykstra via epel-devel
On Wed, May 03, 2023 at 02:48:05PM -0500, Carl George wrote: > On Thu, Apr 27, 2023 at 9:42 AM Dave Dykstra via epel-devel > wrote: > > > > We believe that it is important to apply this change to all EPEL releases, > > for these reasons: > > 1. The general vulne

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-05-03 Thread Dave Dykstra via epel-devel
On Wed, May 03, 2023 at 02:59:42PM -0500, Carl George wrote: > On Thu, Apr 27, 2023 at 10:20 AM Dave Dykstra via epel-devel > wrote: > > > > On Thu, Apr 27, 2023 at 02:11:46AM -0500, Carl George wrote: ... > > > The Red Hat CVSS score for CVE-2022-1184 has the same brea

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-27 Thread Dave Dykstra via epel-devel
I learned about CVE-2023-0386, but it was before publication. I don't know how to get that corrected, but I will try. > Also, I don't know what the justification is on the GHSA for bumping > confidentiality / integrity impact, nor changing complexity from low > -> high versus CVE-2022-11

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-27 Thread Dave Dykstra via epel-devel
On Thu, Apr 27, 2023 at 02:11:46AM -0500, Carl George wrote: > On Wed, Apr 26, 2023 at 11:20 AM Dave Dykstra via epel-devel ... > > The summary of the CVE is that the way that apptainer & singularity > > allow mounts of ext3 filesystems in setuid mode raises the severi

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-27 Thread Dave Dykstra via epel-devel
On Thu, Apr 27, 2023 at 09:09:57AM +0100, Nick Howitt via epel-devel wrote: > On 2023-04-27 08:42, Carl George wrote: ... > > should be modified to set the "allow setuid-mount extfs" option to yes > > for compatibility, even if that isn't the upstream default. >

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-27 Thread Dave Dykstra via epel-devel
We believe that it is important to apply this change to all EPEL releases, for these reasons: 1. The general vulnerability described in this CVE applies equally to all currently supported Linux distributions. The Singularity/Apptainer community has long been aware that making setuid-root

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-27 Thread Nick Howitt via epel-devel
project's CVE-2023-30549 available here: https://sylabs.io/2023/04/response-to-cve-2023-30549/ which is likely broader than is relevant for EPEL packaging, but takes a basic position that CVE-2023-30549 is a duplicate of CVE-2022-1184 and is a medium severity DoS kernel vuln, and not a high

[EPEL-devel] Incompatible change in apptainer-suid-1.1.8 now in epel-testing

2023-04-26 Thread Dave Dykstra via epel-devel
The apptainer-suid package version 1.1.8 now in epel-testing has an incompatible change because of a security vulnerability. The change is that a new option "allow setuid-mount extfs" was added which defaults to no, preventing ordinary users from mounting ext3 filesystems in setuid

[EPEL-devel] Re: apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-26 Thread Jonathan Wright via epel-devel
Dave (Dykstra), The process is pretty well laid out at https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/#process_for_incompatible_upgrades I think leaving the package in epel-testing for now is OK but you definitely need to hold it from release repos until the policy

[EPEL-devel] apptainer 1.1.8-1 has an incompatible change for apptainer-suid users

2023-04-26 Thread Dave Dykstra via epel-devel
DT is correct, this change is subject to the EPEL incompatible change policy. apptainer-suid-1.1.8 by default disables mounting of ext3 filesystems, because of CVE-2023-30549 https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg Most users don't use this feature

[EPEL-devel] Re: EPEL2RHEL - New Wording? - New Workflow?

2023-03-17 Thread Patrick Riehecky via epel-devel
On Fri, 2023-03-17 at 07:09 -0700, Troy Dawson wrote: > On Fri, Mar 17, 2023 at 6:48 AM Patrick Riehecky > wrote: > > On Fri, 2023-03-17 at 06:22 -0700, Troy Dawson wrote: > > > On Thu, Mar 16, 2023 at 6:31 PM Patrick Riehecky via epel-devel > > > wrote: > > &

[EPEL-devel] Re: EPEL2RHEL - New Wording? - New Workflow?

2023-03-17 Thread Patrick Riehecky via epel-devel
On Fri, 2023-03-17 at 06:22 -0700, Troy Dawson wrote: > On Thu, Mar 16, 2023 at 6:31 PM Patrick Riehecky via epel-devel > wrote: > > On Thu, 2023-03-16 at 16:05 -0700, Troy Dawson wrote: > > > > > > > > > On Thu, Mar 16, 2023 at 3:43 PM Kevin Fenzi &g

[EPEL-devel] Re: Timeframe for EPEL retirement vs RHEL new package releases

2023-03-17 Thread Leon Fauster via epel-devel
their NVR's being higher than EPEL's. If that is so, the EPEL packages don't take precedence over RHEL's. They may not when you first check. The risk in leaving the branch active is that a maintainer may bump the version and/or release and start overriding the RHEL package at any given time. We

[EPEL-devel] Re: EPEL2RHEL - New Wording? - New Workflow?

2023-03-16 Thread Patrick Riehecky via epel-devel
gt; > of day) if > > > you think I need changes. > > > > > > Subject: > > > Notice: will be automatically retired from epel > > > when RHEL > > > . is released > > > > > > Comment: > > > Thank you for your work mai

[EPEL-devel] Re: Timeframe for EPEL retirement vs RHEL new package releases

2023-03-03 Thread Nick Howitt via epel-devel
, or semi-automated, so there is a consistent time when all of them are removed. That's a good idea. When do you actually remove the packages from the EPEL repository? It has been agreed that it will be after both Alma and Rocky have their latest release out. Ok, that's good, and should at least avoid

[EPEL-devel] Re: Hints for manual upgrading from CentOS 8 Stream to CentOS / Alma / Rockey 9

2023-02-09 Thread Jonathan Wright via epel-devel
am rebuilds? > > Free or not, the licensing aspect is annoying and that's why many people still choose rebuilds. > Just a thought. > > Ian > -- > Ian Laurie > FAS: nixuser | IRC: nixuser > TZ: Australia/Sydney > ________

[EPEL-devel] Fwd: Re: [SPF:fail] A coordinated plan for ansible-collection updates in EPEL?

2023-01-31 Thread Maxwell G via epel-devel
0 Orion Poplawski wrote: So, I'm wondering if we should have some kind of (at least semi-)coordinated plan for updating ansible collections in EPEL? My initial thought is we would sort of piggy back on to what the "ansible" community collection bundles on top of the ansible-core p

[EPEL-devel] Fwd: Re: [SPF:fail] A coordinated plan for ansible-collection updates in EPEL?

2023-01-31 Thread Maxwell G via epel-devel
2023 21:13:11 -0700 Orion Poplawski wrote: So, I'm wondering if we should have some kind of (at least semi-)coordinated plan for updating ansible collections in EPEL? My initial thought is we would sort of piggy back on to what the "ansible" community collection bundles on top of the

[EPEL-devel] Re: [SPF:fail] A coordinated plan for ansible-collection updates in EPEL?

2023-01-31 Thread Maxwell G via epel-devel
ith newer ansible-core versions. -- Thanks, Maxwell G (@gotmax23) Pronouns: He/They _______ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.

[EPEL-devel] Re: Updating tox to 4 in EPEL 9

2022-12-16 Thread Maxwell G via epel-devel
ould like to avoid the need to maintain tox 3 in EPEL9 for many > years after > upstream abandoned it (they have no intention to do maintenance > releases for > tox 3.x). > > We are currently upgrading to tox 4 in Fedora Rawhide. When the dust > settles > I'd like to have th

[EPEL-devel] Re: libssh2 epel vs rhel-8-for-x86_64-appstream-rpms

2022-12-13 Thread Maxwell G via epel-devel
On Tue Dec 13, 2022 at 16:47 +0100, Leon Fauster via epel-devel wrote: Hi Leon, > I noticed that on a RHEL8 workstation the deprecated and removed package > from EL8.0 - libssh2, does not get substituted by the package from epel: > > libssh2-1.8.0-8.module+el8.0.0+4084+cceb9f44.1

[EPEL-devel] libssh2 epel vs rhel-8-for-x86_64-appstream-rpms

2022-12-13 Thread Leon Fauster via epel-devel
I noticed that on a RHEL8 workstation the deprecated and removed package from EL8.0 - libssh2, does not get substituted by the package from epel: libssh2-1.8.0-8.module+el8.0.0+4084+cceb9f44.1.x86_64 vs libssh2-1.9.0-5.el8.x86_64 only possible with yum update libssh2 --disablerepo=rhel-8

[EPEL-devel] 'novnc' major version/breaking update in EPEL7

2022-12-07 Thread Jonathan Wright via epel-devel
Hi, I intended to update novnc in EPEL7 to version 1.3.0 from 0.5.1. I am posting this here per EPEL policy and I've also posted an issue at https://pagure.io/epel/issue/212 for discussion and the meeting agenda. I recently took the novnc package which was orphaned and I'm trying to get

[EPEL-devel] Re: Replace versioned MODULE_COMPAT_ requires by generators

2022-12-05 Thread Maxwell G via epel-devel
On Mon Dec 5, 2022 at 21:52 +0100, Jitka Plesnikova wrote: > Could be the following file added to the package epel-rpm-macros (or > anything like this) for EPEL 9? It could, but it might be better to include this in a subpackage of epel-rpm-macros or as a separate perl-generators-epel com

[EPEL-devel] Update of minor version of golang coming to EPEL7

2022-12-01 Thread Dave Dykstra via epel-devel
golang-1.18.4 is now available in epel-testing for EPEL7, an update of a minor version from 1.17.12. I expect it to be promoted in about a week unless karma changes that. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-96dbad9cd3 My policy for updating golang is to follow

[EPEL-devel] Re: Fedora EPEL 9 request Compiz

2022-11-27 Thread Maxwell G via epel-devel
Hi John, On Sun Nov 27, 2022 at 08:51 +, john tatt via epel-devel wrote: > Hi everyoneI'll like to have Compiz / Emerald available on RHEL/Rocky aso > > is there a chance for this to happen ? > Thank you Please follow the standard EPEL Package Request[1] procedure and let us

[EPEL-devel] Re: Fedora EPEL 9 request Compiz

2022-11-27 Thread john tatt via epel-devel
Hi everyoneI'll like to have Compiz / Emerald available on RHEL/Rocky aso is there a chance for this to happen ? Thank you ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le

[EPEL-devel] Re: EPEL 10 proposal

2022-11-23 Thread Maxwell G via epel-devel
On Wed Nov 23, 2022 at 00:52 CST, Carl George wrote: > I would also ask that feedback be provided there instead of as email > replies here on the list. I don't think there's been a formal discussion about moving EPEL discussions over to the forums. We already have communication split b

[EPEL-devel] pypolicyd-spf-2.9.3 crashes Postfix

2022-11-14 Thread Sylvain Jones via epel-devel
EPEL Maintainers, It appears the update to pypolicyd-spf-2.9.3 from pypolicyd-spf-2.0.x crashes Postfix unexpectedly. Perhaps a missing dependency? Seems to be ahead from what I assume the upstream is, pip. Is this an error? Installing authres via pip was able to fix things without installing

[EPEL-devel] Re: Are there any plans to rebuild ClamAV in EPEL7 following CVE-2022-37434?

2022-11-01 Thread Nick Howitt via epel-devel
On 01/11/2022 18:36, Stephen Smoogen wrote: On Tue, 1 Nov 2022 at 13:44, Nick Howitt via epel-devel <mailto:epel-devel@lists.fedoraproject.org>> wrote: On 01/11/2022 15:46, Tuomo Soini wrote: > On Tue, 1 Nov 2022 10:50:02 + > Nick Howitt via epel-de

[EPEL-devel] Re: Are there any plans to rebuild ClamAV in EPEL7 following CVE-2022-37434?

2022-11-01 Thread Nick Howitt via epel-devel
On 01/11/2022 15:46, Tuomo Soini wrote: On Tue, 1 Nov 2022 10:50:02 + Nick Howitt via epel-devel wrote: Yesterday, ClamAV announced CVE-2022-37434 as critical (https://blog.clamav.net/2022/10/new-packages-for-clamav-01037-01044.html). Redhat only seem to classify the issue as Moderate

[EPEL-devel] Re: Are there any plans to rebuild ClamAV in EPEL7 following CVE-2022-37434?

2022-11-01 Thread Nick Howitt via epel-devel
On 01/11/2022 11:57, Stephen Smoogen wrote: On Tue, 1 Nov 2022 at 07:48, Andrew C Aitchison wrote: On Tue, 1 Nov 2022, Stephen Smoogen wrote: > On Tue, 1 Nov 2022 at 06:59, Nick Howitt via epel-devel < > epel-devel@lists.fedoraproject.org> wrote: >

[EPEL-devel] Are there any plans to rebuild ClamAV in EPEL7 following CVE-2022-37434?

2022-11-01 Thread Nick Howitt via epel-devel
it as Critical, zlib and zlib-devel won't get updated so ClamAV can't be rebuilt against the updated zlib-devel. What is the EPEL take on the issue?___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le

[EPEL-devel] Re: EPEL7 repo error for distribution-gpg-keys?

2022-10-22 Thread Nick Howitt via epel-devel
On 21/10/2022 23:53, Todd Zullinger wrote: manuel wolfshant wrote: On 10/22/22 00:22, Troy Dawson wrote: distribution-gpg-keys-1.78-1.el7 is currently in testing. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-318362b0c0 You can get things moving my using the epel-testing repo

[EPEL-devel] Re: Modularity transition plan

2022-10-21 Thread Leon Fauster via epel-devel
Am 21.10.22 um 17:11 schrieb Troy Dawson: ... == Transition Steps === 1 - Verify that you are using an EPEL 8 Module dnf list installed | grep epel-modular If nothing shows up, great, you are done. just wanted to add: dnf list installed | grep epel-testing-modular -- Leon

[EPEL-devel] Re: What to do about an incompatible update I approved

2022-10-20 Thread Dave Dykstra via epel-devel
Thanks, Troy. I will send a message to epel-announce. I looked through the last couple of years of epel-announce archives and don't see similar messages. I have a hard time imagining that somewhat incompatible changes aren't happening to other packages too, so it seems that such announcements

[EPEL-devel] What to do about an incompatible update I approved

2022-10-19 Thread Dave Dykstra via epel-devel
Hello all, It is been pointed out to me that I pushed out an update of a package to EPEL that did not follow the incompatible upgrades policy: https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/ That's because I wasn't aware of the policy until it was pointed out to me

[EPEL-devel] EPEL7 repo error for distribution-gpg-keys?

2022-10-19 Thread Nick Howitt via epel-devel
an update --> Processing Dependency: distribution-gpg-keys >= 1.77 for package: mock-core-configs-36.13-1.el7.noarch --> Finished Dependency Resolution Error: Package: mock-core-configs-36.13-1.el7.noarch (epel-unverified)    Requires: distribution-gpg-keys >= 1.77    In

[EPEL-devel] Re: Should we retire weechat from EPEL 7?

2022-10-06 Thread Maxwell G via epel-devel
: He/Him/His signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/

[EPEL-devel] Re: Should we retire weechat from EPEL 7?

2022-10-06 Thread Maxwell G via epel-devel
nature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines:

[EPEL-devel] Re: Fwd: xscreensaver package for epel9 (Bugzilla 2120163)

2022-09-19 Thread Jonathan Wright via epel-devel
ed message - >> From: metatron...@yahoo.com >> Date: Sun, 18 Sept 2022 at 20:01 >> Subject: xscreensaver package for epel9 (Bugzilla 2120163) >> To: epel-devel-ow...@lists.fedoraproject.org < >> epel-devel-ow...@lists.fedoraproject.org> >> &g

[EPEL-devel] Re: python-passlib for python38 module

2022-09-14 Thread Leon Fauster via epel-devel
Am 24.05.22 um 19:53 schrieb Maxwell G via epel-devel: On Monday, May 23, 2022 11:18:38 PM CDT Orion Poplawski wrote: I've been coming to the thinking that naming the SRPMS python3X-%{srcname}-epel is a better choice. This makes modifying original Fedora specs simpler. I think that makes

[EPEL-devel] Re: Proposal: Dropping modules from EPEL-8. Not adding modules to EPEL-9

2022-09-09 Thread Maxwell G via epel-devel
On Friday, September 9, 2022 Christopher Engelhard wrote: > I found it useful to ship the nextcloud package as a module, particularly in > EPEL, but if after multiple years there really are only 12 packages in the > repo and even those may or may not work then that is a pretty clear &

[EPEL-devel] Re: Proposal: Dropping modules from EPEL-8. Not adding modules to EPEL-9

2022-09-07 Thread Maxwell G via epel-devel
) Pronouns: He/Him/His signature.asc Description: PGP signature ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject

[EPEL-devel] Re: EPEL: packaging multiple versions and compat packages

2022-09-05 Thread Maxwell G via epel-devel
On Monday, September 5, 2022 Mark E. Fuller wrote: > Can someone point me to a good resource on how (if permitted) I can make > appropriate compat(?) packages to allow for two major versions of the > same package to be available? > Is this allowed for EPEL? You can package compat pack

[EPEL-devel] Re: EPEL2RHEL - New Wording? - New Workflow?

2022-09-05 Thread Davide Cavalca via epel-devel
On Mon, 2022-09-05 at 11:33 +0200, Dominik 'Rathann' Mierzejewski wrote: > It would be really nice if the wording of the bug could contain some > kind of a "thank you" note to the EPEL maintainers of the package in > question. Not everyone will understand this process as "

[EPEL-devel] Re: [Messaging] RabbitMQ for EPEL 9

2022-09-04 Thread Davide Cavalca via epel-devel
On Sat, 2022-09-03 at 13:39 -0500, Richard Shaw wrote: > Have you tried building the package yourself yet? When asking for > someone to support an EPEL branch it's not always straightforward. I > tried building the rawhide branch for EPEL 9 and ran into the > following: > > N

  1   2   3   4   >