The following Fedora EPEL 7 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-0286a0e93a
python-bottle-0.12.21-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a9236c0113
oniguruma-6.8.2-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
trafficserver-9.1.2-8.el7
Details about builds:
================================================================================
trafficserver-9.1.2-8.el7 (FEDORA-EPEL-2022-6772eac3a5)
Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
--------------------------------------------------------------------------------
Update Information:
Cherry-pick patches to allow use of OpenSSL 3 for enabling EL9 builds ----
Update trafficserver to 9.1.2 and un-retire.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 13 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-8
- Cherry-pick OpenSSL 3 compatibility required for RHEL 9
- Switch to OpenSSL 3 on f36+
- Include automake in BuildRequires
* Tue Jun 7 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-7
- Exclude s390x architecture -- not supported upstream
* Thu May 12 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-6
- Further changes based on package review; perl dependencies, paths
* Thu May 5 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-5
- Changes based on spec review; change "RedHat" capitalization,
and add link to upstream file layout discussion
* Mon May 2 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-4
- Changes based on spec review
* Mon Apr 25 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-3
- Allow self:process setsched, requested on EL8
* Mon Apr 18 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-2
- Set SELinux policy to be more restrictive on privileged UDP ports
* Thu Apr 7 2022 Jered Floyd <jered(a)redhat.com> 9.1.2-1
- Initial revision
- Adapt to modern rpm conventions
- Add draft SELinux policy
- Don't run as root, just claim CAP_NET_BIND_SERVICE for
privileged ports
- Merge and cleanup of upstream .spec file along with Copr version
maintained by Hiroaki Nakamura <hnakamur(a)gmail.com>, based on
long-ophaned package. ChangeLog included below for reference.
* Wed Nov 3 2021 Hiroaki Nakamura <hnakamur(a)gmail.com> 9.1.1-1
- Update to 9.1.1
* Wed Sep 8 2021 Hiroaki Nakamura <hnakamur(a)gmail.com> 9.1.0-1
- Update to 9.1.0
- Disable mime-sanity-check which is usable only in debug build
* Tue Jun 29 2021 Hiroaki Nakamura <hnakamur(a)gmail.com> 9.0.2-1
- Update to 9.0.2
- Use yaml-cpp vendored in lib/yamlcpp
* Tue Jun 29 2021 Hiroaki Nakamura <hnakamur(a)gmail.com> 8.1.2-1
- Update to 8.1.2
* Fri Sep 13 2019 Hiroaki Nakamura <hnakamur(a)gmail.com> 8.0.5-1
- Update to 8.0.5 LTS release
* Fri Sep 13 2019 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.8-1
- Update to 7.1.8 LTS release
* Mon Feb 25 2019 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.6-1
- Update to 7.1.6 LTS release
- Return stale cache with s-maxage only if
cache_required_headers is 99
* Fri Apr 20 2018 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.3-1
- Update to 7.1.3 LTS release
* Mon Mar 26 2018 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.2-1
- Update to 7.1.2 LTS release
* Tue Oct 24 2017 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.1-1
- Update to 7.1.1 LTS release
* Thu Aug 3 2017 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.1.0-1
- Update to 7.1.0 LTS release
* Wed Nov 16 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.0.0-2
- Remove expat-devel from build dependencies
* Wed Nov 16 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 7.0.0-1
- Update to 7.0.0 LTS release
* Fri Sep 30 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.2.0-2
- Return stale cache even if the origin server response has
"Cache-Control: s-maxage" header.
* Wed Jul 27 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.2.0-1
- Update to 6.2.0 LTS release
* Fri May 20 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-10
- Add patch to add new value to proxy.config.http.cache.required_headers
to require s-maxage for contents to be cached.
- Remove patch to concatenate multiple header values of
the same name in TSLua.
* Wed May 11 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-9
- Fix bug in patch to concatenate multiple header values of
the same name in TSLua.
* Tue May 10 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-8
- Concatenate multiple header values of the same name in TSLua.
* Wed Apr 27 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-7
- Remove patch to add proxy.config.http.cache.ignore_expires and
proxy.config.http.cache.ignore_server_cc_max_age.
* Tue Apr 26 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-6
- Apply patch to add proxy.config.http.cache.ignore_expires and
proxy.config.http.cache.ignore_server_cc_max_age.
* Wed Mar 9 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-5
- Disable patch to enable unix domain socket.
* Mon Mar 7 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-4
- Apply patch to enable unix domain socket.
* Sun Feb 14 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-3
- Enable luajit
* Sun Feb 14 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-2
- Set prefix to /opt/trafficserver and use relative directories
* Tue Feb 9 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.1-1
- Update to 6.1.1 LTS release
* Wed Feb 3 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.1.0-1
- Update to 6.1.0 LTS release
* Wed Jan 13 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.0.0-3
- Build experimental plugins
* Fri Jan 1 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.0.0-2
- Just use configure --disable-luajit without a patch or deleting files
* Fri Jan 1 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 6.0.0-1
- Update to 6.0.0 LTS release
* Fri Jan 1 2016 Hiroaki Nakamura <hnakamur(a)gmail.com> 5.3.0-2
- Add patch to cache_insepector to split multiline URLs correctly
* Sun Jun 21 2015 Peter Robinson <pbrobinson(a)fedoraproject.org> 5.3.0-1
- Update to 5.3.0 LTS release
- Build on aarch64 and power64
- Split perl bindings to sub package
- Cleanup and modernise spec
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.0.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 5.0.1-3
- Rebuilt for GCC 5 C++11 ABI change
* Mon Jan 26 2015 Petr Machata <pmachata(a)redhat.com> - 5.0.1-2
- Rebuild for boost 1.57.0
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
5.0.1-1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Wed Jul 23 2014 Jan-Frode Myklebust <janfrode(a)tanso.net> - 5.0.1-0
- Fix CVE-2014-3525
* Wed Jul 16 2014 Jan-Frode Myklebust <janfrode(a)tanso.net> - 5.0.0-0
- New major version.
* Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
4.2.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu May 22 2014 Petr Machata <pmachata(a)redhat.com> - 4.2.1-4
- Rebuild for boost 1.55.0
* Wed May 21 2014 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.2.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Changes/f21tcl86
* Wed Apr 30 2014 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.2.1-2
- Bump release tag. RC1 became final.
* Sat Apr 26 2014 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.2.1-rc1
- Update to 4.2.1-RC1
* Thu Apr 10 2014 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.2.0-0
- Update to 4.2.0
* Tue Dec 17 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.1.2-0
- Bump to final. No change from rc0.
- What's new:
https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.1.x
* Thu Dec 12 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.1.2-rc0
- Update to 4.1.2-rc0.
* Mon Nov 11 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.0.2-5
- Buildrequire hwloc-devel, since it supposedly gives tremendous
positive performance impact to use hwlock to optimize scaling and
number of threads and alignment for actual hardware we're running on.
* Sun Oct 20 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.0.2-3
- Rebuild for picking up ECC/ECDHE/EC/ECDSA/elliptic curves
which are now enabled in OpenSSL.
* Fri Oct 11 2013 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 4.0.2-3
- Add BR: systemd for systemd.macros (RHBZ #1018080).
* Thu Oct 10 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.0.2-2
- Update to 4.0.2, which fixes the following bugs:
[TS-2144] - traffic_server crashes when clearing cache
[TS-2173] - cache total hit/miss stats broken in version 4.0.1
[TS-2174] - traffic_shell/traffic_line miss some stats value
[TS-2191] - when http_info enabled, the http_sm may be deleted but a event associated
it not cancelled.
[TS-2207] - Centos5 out of tree perl build fails
[TS-2217] - remove the option to turn off body factory - setting it to 0 will result
in empty responses
- Automatically verify GPG signature during RPM prep.
- Build requires boost-devel.
* Tue Sep 3 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 4.0.1-1
- Update to 4.0.1. What's new in v4.0.0:
https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.0.0
- Upgrade instructions from earlier versions:
https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v4.0
Important notes:
proxy.config.remap.use_remap_processor has been removed,
use the proxy.config.remap.num_remap_threads instead.
Default proxy.config.cache.ram_cache.size has been increased by
a magnitude.
Support for pre v3.2 port configuration directives has been removed.
The following records.config parameters should be removed:
CONFIG proxy.config.bandwidth_mgmt.filename STRING ""
CONFIG proxy.config.admin.autoconf.wpad_filename STRING ""
CONFIG proxy.config.username.cache.enabled INT 0
CONFIG proxy.config.username.cache.filename STRING ""
CONFIG proxy.config.username.cache.size INT 0
CONFIG proxy.config.username.cache.storage_path STRING ""
CONFIG proxy.config.username.cache.storage_size INT 0
CONFIG proxy.config.http.wuts_enabled INT 0
CONFIG proxy.config.http.log_spider_codes INT 0
CONFIG proxy.config.http.accept_encoding_filter_enabled INT 0
CONFIG proxy.config.http.accept_encoding_filter.filename STRING ""
CONFIG proxy.config.net.throttle_enabled INT 0
CONFIG proxy.config.net.accept_throttle INT 0
CONFIG proxy.config.cluster.num_of_cluster_connections INT 0
CONFIG proxy.config.cache.url_hash_method INT 0
CONFIG proxy.config.plugin.extensions_dir STRING ""
CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0
CONFIG proxy.config.remap.use_remap_processor INT 0
* Sun Aug 25 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-3
- bz#994224 Use rpm configure macro, instead of calling configure
directly.
* Fri Aug 9 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-2
- bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure,
instead of overriding on make commandline. Thanks Dimitry Andric!
* Thu Aug 1 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.5-1
- Update to v3.2.5 which fixes the following bugs:
[TS-1923] Fix memory issue caused by resolve_logfield_string()
[TS-1918] SSL hangs after origin handshake.
[TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server.
[TS-1784] Fix FreeBSD block calculation (both RAW and directory)
[TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests.
[TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x.
[TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated.
[TS-1902] Remove iconv as dependency.
[TS-1900] Detect and link libhwloc on Ubuntu.
[TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart)
* Mon Jun 3 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-3
- Harden build with PIE flags, ref bz#955127.
* Sat Jan 19 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.4-1
- Update to 3.2.4 release candiate
* Fri Jan 4 2013 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.3-1
- Update to v3.2.3. Remove patches no longer needed.
* Fri Aug 24 2012 V��clav Pavl��n <vpavlin(a)redhat.com> - 3.2.0-6
- Scriptlets replaced with new systemd macros (#851462)
* Thu Aug 16 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-5
- Add patch for TS-1392, to fix problem with SNI fallback.
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
3.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jun 25 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-2
- Remove duplicate man-pages.
* Sat Jun 23 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.2.0-1
- Update to v3.2.0
* Sun Jun 10 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.5-1
- Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116.
- Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch,
and clean out not needed junk.
* Fri Apr 13 2012 Jan-Frode Myklebust <janfrode(a)tanso.net> - 3.0.4-5
- Add hardened build.
* Wed Apr 11 2012 <janfrode(a)tanso.net> - 3.0.4-4
- Add patch for gcc-4.7 build issues.
* Mon Apr 9 2012 Dan Hor��k <dan[at]danny.cz> - 3.0.4-3
- switch to ExclusiveArch
* Fri Mar 23 2012 <janfrode(a)tanso.net> - 3.0.4-2
- Create /var/run/trafficserver using tmpfiles.d on f15+.
* Thu Mar 22 2012 <janfrode(a)tanso.net> - 3.0.4-1
- Update to new upstream release, v3.0.4.
- remove trafficserver-cluster_interface_linux.patch since this was fixed upstream,
TS-845.
* Thu Mar 22 2012 <janfrode(a)tanso.net> - 3.0.3-6
- Remove pidfile from systemd service file. This is a type=simple
service, so pidfile shouldn't be needed.
* Wed Mar 21 2012 <janfrode(a)tanso.net> - 3.0.3-5
- Add systemd support.
- Drop init.d-script on systemd-systems.
* Sun Mar 18 2012 <janfrode(a)tanso.net> - 3.0.3-3
- change default proxy.config.proxy_name to
FIXME.example.com instead of the
name of the buildhost
- configure proxy.config.ssl.server.cert.path and
proxy.config.ssl.server.private_key.path to point to the standard /etc/pki/
locations.
* Tue Mar 13 2012 <janfrode(a)tanso.net> - 3.0.3-2
- exclude ppc/ppc64 since build there fails, TS-1131.
* Sat Mar 10 2012 <janfrode(a)tanso.net> - 3.0.3-1
- Removed mixed use of spaces and tabs in specfile.
* Mon Feb 13 2012 <janfrode(a)tanso.net> - 3.0.3-0
- Update to v3.0.3
* Thu Dec 8 2011 <janfrode(a)tanso.net> - 3.0.2-0
- Update to v3.0.2
- Fix conderestart in initscript, TS-885.
* Tue Jul 19 2011 <janfrode(a)tanso.net> - 3.0.1-0
- Update to v3.0.1
- Remove uninstall-hook from trafficserver_make_install.patch, removed in v3.0.1.
* Thu Jun 30 2011 <janfrode(a)tanso.net> - 3.0.0-6
- Note FIXME's on top.
- Remove .la and static libs.
- mktemp'd buildroot.
- include license
* Mon Jun 27 2011 <janfrode(a)tanso.net> - 3.0.0-5
- Rename patches to start with trafficserver-.
- Remove odd version macro.
- Clean up mixed-use-of-spaces-and-tabs.
* Wed Jun 22 2011 <janfrode(a)tanso.net> - 3.0.0-4
- Use dedicated user/group ats/ats.
- Restart on upgrades.
* Thu Jun 16 2011 <zym(a)apache.org> - 3.0.0-3
- update man pages, sugest from Jan-Frode Myklebust <janfrode(a)tanso.net>
- patch records.config to fix the crashing with cluster iface is noexist
- cleanup spec file
* Wed Jun 15 2011 <zym(a)apache.org> - 3.0.0-2
- bump to version 3.0.0 stable release
- cleanup the spec file and patches
* Tue May 24 2011 <yonghao(a)taobao.com> - 2.1.8-2
- fix tcl linking
* Thu May 5 2011 <yonghao(a)taobao.com> - 2.1.8-1
- bump to 2.1.8
- comment out wccp
* Fri Apr 1 2011 <yonghao(a)taobao.com> - 2.1.7-3
- enable wccp and fixed compile warning
- never depends on sqlite and db4, add libz and xz-libs
- fix libary permission, do post ldconfig updates
* Sun Mar 27 2011 <yonghao(a)taobao.com> - 2.1.7-2
- patch traffic_shell fix
* Tue Mar 22 2011 <yonghao(a)taobao.com> - 2.1.7-1
- bump to v2.1.7
- fix centos5 building
- drop duplicated patches
* Sat Mar 12 2011 <yonghao(a)taobao.com> - 2.1.6-2
- fix gcc 4.6 building
- split into -devel package for devel libs
- fix init scripts for rpmlint requirement
- fix install scripts to build in mock, without root privileges
* Tue Mar 1 2011 <yonghao(a)taobao.com> - 2.1.6-1
- bump to 2.1.6 unstable
- replace config layout name as Fedora
* Thu Nov 18 2010 <yonghao(a)taobao.com> - 2.1.4
- initial release for public
- original spec file is from neomanontheway(a)gmail.com
--------------------------------------------------------------------------------