The following Fedora EPEL 7 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-0286a0e93a python-bottle-0.12.21-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a9236c0113 oniguruma-6.8.2-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
trafficserver-9.1.2-8.el7
Details about builds:
================================================================================ trafficserver-9.1.2-8.el7 (FEDORA-EPEL-2022-6772eac3a5) Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server -------------------------------------------------------------------------------- Update Information:
Cherry-pick patches to allow use of OpenSSL 3 for enabling EL9 builds ---- Update trafficserver to 9.1.2 and un-retire. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 13 2022 Jered Floyd jered@redhat.com 9.1.2-8 - Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires * Tue Jun 7 2022 Jered Floyd jered@redhat.com 9.1.2-7 - Exclude s390x architecture -- not supported upstream * Thu May 12 2022 Jered Floyd jered@redhat.com 9.1.2-6 - Further changes based on package review; perl dependencies, paths * Thu May 5 2022 Jered Floyd jered@redhat.com 9.1.2-5 - Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion * Mon May 2 2022 Jered Floyd jered@redhat.com 9.1.2-4 - Changes based on spec review * Mon Apr 25 2022 Jered Floyd jered@redhat.com 9.1.2-3 - Allow self:process setsched, requested on EL8 * Mon Apr 18 2022 Jered Floyd jered@redhat.com 9.1.2-2 - Set SELinux policy to be more restrictive on privileged UDP ports * Thu Apr 7 2022 Jered Floyd jered@redhat.com 9.1.2-1 - Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura hnakamur@gmail.com, based on long-ophaned package. ChangeLog included below for reference. * Wed Nov 3 2021 Hiroaki Nakamura hnakamur@gmail.com 9.1.1-1 - Update to 9.1.1 * Wed Sep 8 2021 Hiroaki Nakamura hnakamur@gmail.com 9.1.0-1 - Update to 9.1.0 - Disable mime-sanity-check which is usable only in debug build * Tue Jun 29 2021 Hiroaki Nakamura hnakamur@gmail.com 9.0.2-1 - Update to 9.0.2 - Use yaml-cpp vendored in lib/yamlcpp * Tue Jun 29 2021 Hiroaki Nakamura hnakamur@gmail.com 8.1.2-1 - Update to 8.1.2 * Fri Sep 13 2019 Hiroaki Nakamura hnakamur@gmail.com 8.0.5-1 - Update to 8.0.5 LTS release * Fri Sep 13 2019 Hiroaki Nakamura hnakamur@gmail.com 7.1.8-1 - Update to 7.1.8 LTS release * Mon Feb 25 2019 Hiroaki Nakamura hnakamur@gmail.com 7.1.6-1 - Update to 7.1.6 LTS release - Return stale cache with s-maxage only if cache_required_headers is 99 * Fri Apr 20 2018 Hiroaki Nakamura hnakamur@gmail.com 7.1.3-1 - Update to 7.1.3 LTS release * Mon Mar 26 2018 Hiroaki Nakamura hnakamur@gmail.com 7.1.2-1 - Update to 7.1.2 LTS release * Tue Oct 24 2017 Hiroaki Nakamura hnakamur@gmail.com 7.1.1-1 - Update to 7.1.1 LTS release * Thu Aug 3 2017 Hiroaki Nakamura hnakamur@gmail.com 7.1.0-1 - Update to 7.1.0 LTS release * Wed Nov 16 2016 Hiroaki Nakamura hnakamur@gmail.com 7.0.0-2 - Remove expat-devel from build dependencies * Wed Nov 16 2016 Hiroaki Nakamura hnakamur@gmail.com 7.0.0-1 - Update to 7.0.0 LTS release * Fri Sep 30 2016 Hiroaki Nakamura hnakamur@gmail.com 6.2.0-2 - Return stale cache even if the origin server response has "Cache-Control: s-maxage" header. * Wed Jul 27 2016 Hiroaki Nakamura hnakamur@gmail.com 6.2.0-1 - Update to 6.2.0 LTS release * Fri May 20 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-10 - Add patch to add new value to proxy.config.http.cache.required_headers to require s-maxage for contents to be cached. - Remove patch to concatenate multiple header values of the same name in TSLua. * Wed May 11 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-9 - Fix bug in patch to concatenate multiple header values of the same name in TSLua. * Tue May 10 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-8 - Concatenate multiple header values of the same name in TSLua. * Wed Apr 27 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-7 - Remove patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age. * Tue Apr 26 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-6 - Apply patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age. * Wed Mar 9 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-5 - Disable patch to enable unix domain socket. * Mon Mar 7 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-4 - Apply patch to enable unix domain socket. * Sun Feb 14 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-3 - Enable luajit * Sun Feb 14 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-2 - Set prefix to /opt/trafficserver and use relative directories * Tue Feb 9 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.1-1 - Update to 6.1.1 LTS release * Wed Feb 3 2016 Hiroaki Nakamura hnakamur@gmail.com 6.1.0-1 - Update to 6.1.0 LTS release * Wed Jan 13 2016 Hiroaki Nakamura hnakamur@gmail.com 6.0.0-3 - Build experimental plugins * Fri Jan 1 2016 Hiroaki Nakamura hnakamur@gmail.com 6.0.0-2 - Just use configure --disable-luajit without a patch or deleting files * Fri Jan 1 2016 Hiroaki Nakamura hnakamur@gmail.com 6.0.0-1 - Update to 6.0.0 LTS release * Fri Jan 1 2016 Hiroaki Nakamura hnakamur@gmail.com 5.3.0-2 - Add patch to cache_insepector to split multiline URLs correctly * Sun Jun 21 2015 Peter Robinson pbrobinson@fedoraproject.org 5.3.0-1 - Update to 5.3.0 LTS release - Build on aarch64 and power64 - Split perl bindings to sub package - Cleanup and modernise spec * Fri Jun 19 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 5.0.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat May 2 2015 Kalev Lember kalevlember@gmail.com - 5.0.1-3 - Rebuilt for GCC 5 C++11 ABI change * Mon Jan 26 2015 Petr Machata pmachata@redhat.com - 5.0.1-2 - Rebuild for boost 1.57.0 * Mon Aug 18 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 5.0.1-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Wed Jul 23 2014 Jan-Frode Myklebust janfrode@tanso.net - 5.0.1-0 - Fix CVE-2014-3525 * Wed Jul 16 2014 Jan-Frode Myklebust janfrode@tanso.net - 5.0.0-0 - New major version. * Sun Jun 8 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 4.2.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 22 2014 Petr Machata pmachata@redhat.com - 4.2.1-4 - Rebuild for boost 1.55.0 * Wed May 21 2014 Jaroslav ��karvada jskarvad@redhat.com - 4.2.1-3 - Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86 * Wed Apr 30 2014 Jan-Frode Myklebust janfrode@tanso.net - 4.2.1-2 - Bump release tag. RC1 became final. * Sat Apr 26 2014 Jan-Frode Myklebust janfrode@tanso.net - 4.2.1-rc1 - Update to 4.2.1-RC1 * Thu Apr 10 2014 Jan-Frode Myklebust janfrode@tanso.net - 4.2.0-0 - Update to 4.2.0 * Tue Dec 17 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.1.2-0 - Bump to final. No change from rc0. - What's new: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.1.x * Thu Dec 12 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.1.2-rc0 - Update to 4.1.2-rc0. * Mon Nov 11 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.0.2-5 - Buildrequire hwloc-devel, since it supposedly gives tremendous positive performance impact to use hwlock to optimize scaling and number of threads and alignment for actual hardware we're running on. * Sun Oct 20 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.0.2-3 - Rebuild for picking up ECC/ECDHE/EC/ECDSA/elliptic curves which are now enabled in OpenSSL. * Fri Oct 11 2013 Ralf Cors��pius corsepiu@fedoraproject.org - 4.0.2-3 - Add BR: systemd for systemd.macros (RHBZ #1018080). * Thu Oct 10 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.0.2-2 - Update to 4.0.2, which fixes the following bugs:
[TS-2144] - traffic_server crashes when clearing cache [TS-2173] - cache total hit/miss stats broken in version 4.0.1 [TS-2174] - traffic_shell/traffic_line miss some stats value [TS-2191] - when http_info enabled, the http_sm may be deleted but a event associated it not cancelled. [TS-2207] - Centos5 out of tree perl build fails [TS-2217] - remove the option to turn off body factory - setting it to 0 will result in empty responses
- Automatically verify GPG signature during RPM prep. - Build requires boost-devel. * Tue Sep 3 2013 Jan-Frode Myklebust janfrode@tanso.net - 4.0.1-1 - Update to 4.0.1. What's new in v4.0.0: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.0.0
- Upgrade instructions from earlier versions: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v4.0
Important notes:
proxy.config.remap.use_remap_processor has been removed, use the proxy.config.remap.num_remap_threads instead.
Default proxy.config.cache.ram_cache.size has been increased by a magnitude.
Support for pre v3.2 port configuration directives has been removed.
The following records.config parameters should be removed:
CONFIG proxy.config.bandwidth_mgmt.filename STRING "" CONFIG proxy.config.admin.autoconf.wpad_filename STRING "" CONFIG proxy.config.username.cache.enabled INT 0 CONFIG proxy.config.username.cache.filename STRING "" CONFIG proxy.config.username.cache.size INT 0 CONFIG proxy.config.username.cache.storage_path STRING "" CONFIG proxy.config.username.cache.storage_size INT 0 CONFIG proxy.config.http.wuts_enabled INT 0 CONFIG proxy.config.http.log_spider_codes INT 0 CONFIG proxy.config.http.accept_encoding_filter_enabled INT 0 CONFIG proxy.config.http.accept_encoding_filter.filename STRING "" CONFIG proxy.config.net.throttle_enabled INT 0 CONFIG proxy.config.net.accept_throttle INT 0 CONFIG proxy.config.cluster.num_of_cluster_connections INT 0 CONFIG proxy.config.cache.url_hash_method INT 0 CONFIG proxy.config.plugin.extensions_dir STRING "" CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0 CONFIG proxy.config.remap.use_remap_processor INT 0 * Sun Aug 25 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.5-3 - bz#994224 Use rpm configure macro, instead of calling configure directly. * Fri Aug 9 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.5-2 - bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure, instead of overriding on make commandline. Thanks Dimitry Andric! * Thu Aug 1 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.5-1 - Update to v3.2.5 which fixes the following bugs:
[TS-1923] Fix memory issue caused by resolve_logfield_string() [TS-1918] SSL hangs after origin handshake. [TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server. [TS-1784] Fix FreeBSD block calculation (both RAW and directory) [TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests. [TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x. [TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated. [TS-1902] Remove iconv as dependency. [TS-1900] Detect and link libhwloc on Ubuntu. [TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart) * Mon Jun 3 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.4-3 - Harden build with PIE flags, ref bz#955127. * Sat Jan 19 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.4-1 - Update to 3.2.4 release candiate * Fri Jan 4 2013 Jan-Frode Myklebust janfrode@tanso.net - 3.2.3-1 - Update to v3.2.3. Remove patches no longer needed. * Fri Aug 24 2012 V��clav Pavl��n vpavlin@redhat.com - 3.2.0-6 - Scriptlets replaced with new systemd macros (#851462) * Thu Aug 16 2012 Jan-Frode Myklebust janfrode@tanso.net - 3.2.0-5 - Add patch for TS-1392, to fix problem with SNI fallback. * Sun Jul 22 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jun 25 2012 Jan-Frode Myklebust janfrode@tanso.net - 3.2.0-2 - Remove duplicate man-pages. * Sat Jun 23 2012 Jan-Frode Myklebust janfrode@tanso.net - 3.2.0-1 - Update to v3.2.0 * Sun Jun 10 2012 Jan-Frode Myklebust janfrode@tanso.net - 3.0.5-1 - Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk. * Fri Apr 13 2012 Jan-Frode Myklebust janfrode@tanso.net - 3.0.4-5 - Add hardened build. * Wed Apr 11 2012 janfrode@tanso.net - 3.0.4-4 - Add patch for gcc-4.7 build issues. * Mon Apr 9 2012 Dan Hor��k <dan[at]danny.cz> - 3.0.4-3 - switch to ExclusiveArch * Fri Mar 23 2012 janfrode@tanso.net - 3.0.4-2 - Create /var/run/trafficserver using tmpfiles.d on f15+. * Thu Mar 22 2012 janfrode@tanso.net - 3.0.4-1 - Update to new upstream release, v3.0.4. - remove trafficserver-cluster_interface_linux.patch since this was fixed upstream, TS-845. * Thu Mar 22 2012 janfrode@tanso.net - 3.0.3-6 - Remove pidfile from systemd service file. This is a type=simple service, so pidfile shouldn't be needed. * Wed Mar 21 2012 janfrode@tanso.net - 3.0.3-5 - Add systemd support. - Drop init.d-script on systemd-systems. * Sun Mar 18 2012 janfrode@tanso.net - 3.0.3-3 - change default proxy.config.proxy_name to FIXME.example.com instead of the name of the buildhost - configure proxy.config.ssl.server.cert.path and proxy.config.ssl.server.private_key.path to point to the standard /etc/pki/ locations. * Tue Mar 13 2012 janfrode@tanso.net - 3.0.3-2 - exclude ppc/ppc64 since build there fails, TS-1131. * Sat Mar 10 2012 janfrode@tanso.net - 3.0.3-1 - Removed mixed use of spaces and tabs in specfile. * Mon Feb 13 2012 janfrode@tanso.net - 3.0.3-0 - Update to v3.0.3 * Thu Dec 8 2011 janfrode@tanso.net - 3.0.2-0 - Update to v3.0.2 - Fix conderestart in initscript, TS-885. * Tue Jul 19 2011 janfrode@tanso.net - 3.0.1-0 - Update to v3.0.1 - Remove uninstall-hook from trafficserver_make_install.patch, removed in v3.0.1. * Thu Jun 30 2011 janfrode@tanso.net - 3.0.0-6 - Note FIXME's on top. - Remove .la and static libs. - mktemp'd buildroot. - include license * Mon Jun 27 2011 janfrode@tanso.net - 3.0.0-5 - Rename patches to start with trafficserver-. - Remove odd version macro. - Clean up mixed-use-of-spaces-and-tabs. * Wed Jun 22 2011 janfrode@tanso.net - 3.0.0-4 - Use dedicated user/group ats/ats. - Restart on upgrades. * Thu Jun 16 2011 zym@apache.org - 3.0.0-3 - update man pages, sugest from Jan-Frode Myklebust janfrode@tanso.net - patch records.config to fix the crashing with cluster iface is noexist - cleanup spec file * Wed Jun 15 2011 zym@apache.org - 3.0.0-2 - bump to version 3.0.0 stable release - cleanup the spec file and patches * Tue May 24 2011 yonghao@taobao.com - 2.1.8-2 - fix tcl linking * Thu May 5 2011 yonghao@taobao.com - 2.1.8-1 - bump to 2.1.8 - comment out wccp * Fri Apr 1 2011 yonghao@taobao.com - 2.1.7-3 - enable wccp and fixed compile warning - never depends on sqlite and db4, add libz and xz-libs - fix libary permission, do post ldconfig updates * Sun Mar 27 2011 yonghao@taobao.com - 2.1.7-2 - patch traffic_shell fix * Tue Mar 22 2011 yonghao@taobao.com - 2.1.7-1 - bump to v2.1.7 - fix centos5 building - drop duplicated patches * Sat Mar 12 2011 yonghao@taobao.com - 2.1.6-2 - fix gcc 4.6 building - split into -devel package for devel libs - fix init scripts for rpmlint requirement - fix install scripts to build in mock, without root privileges * Tue Mar 1 2011 yonghao@taobao.com - 2.1.6-1 - bump to 2.1.6 unstable - replace config layout name as Fedora * Thu Nov 18 2010 yonghao@taobao.com - 2.1.4 - initial release for public - original spec file is from neomanontheway@gmail.com --------------------------------------------------------------------------------