iusrepo / announce Goto Github PK

The Redis project does active support for the two most recent major version branches. This means that with the release of 7.0.0 last month, only the 6.0 and 7.0 branches are supported upstream, and the 5.0 branch is now EOL. In approximately one month, redis5 packages will move to our archive repository and will no longer be maintained.

The IUS project will be migrating from our existing mirror network to utilizing Rackspace CDN. Users of the ius-release package should not have to take any action other than upgrading ius-release. Please see iusrepo/infrastructure#14 for more details.

Hi,
How can I get notified that in IUS repo was released a package with security fixes? E.g. for CentOS I get it from this list https://lists.centos.org/pipermail/centos-announce/ .

HAProxy 1.8 has been unmaintained upstream since Q4 2022. It was an oversight on the part of IUS to leave our haproxy18u package in the main repository for this long past the EOL. Since we are just now announcing this, we will keep them in the main repository for one more month before moving them to the archive repository, where they will no longer be maintained.

As of 2018-12-03, PHP 7.0 is end of life (EOL) upstream.

https://secure.php.net/eol.php

In approximately one month, all IUS php70u packages will move to our archive repository and will no longer be maintained.

Red Hat has issued a security advisory regarding Red Hat Enterprise Linux (RHEL) 5. Red Hat will be retiring RHEL 5 in six months and IUS will follow suit. On or shortly after March 31, 2017, IUS will move all Enterprise Linux (EL) 5 packages into the archive repositories and IUS will no longer support those packages. See Red Hat Enterprise Linux Life Cycle for more information regarding RHEL's life cycle.

Note, the term Enterprise Linux (EL) refers to Red Hat Enterprise Linux (RHEL) and all of the various forks. In our case, it refers to both RHEL and CentOS.

Please see the requirements removed from EPEL issue for information regarding the status of the php56u-pecl-sphinx packages.

As of 2019-12-01, PHP 7.1 is end of life (EOL) upstream.

https://www.php.net/eol.php

In approximately one month, all IUS php71u packages will move to our archive repository and will no longer be maintained.

IUS has always maintained links that get users the latest release of the ius-release package. Currently those links are served by our CDN.

• https://repo.ius.io/ius-release-el6.rpm
• https://repo.ius.io/ius-release-el7.rpm

Before we started using the ius.io domain, we pointed users to different URLs.

• https://rhel6.iuscommunity.org/ius-release.rpm
• https://rhel7.iuscommunity.org/ius-release.rpm
• https://centos6.iuscommunity.org/ius-release.rpm
• https://centos7.iuscommunity.org/ius-release.rpm

The server handling the *.iuscommunity.org redirects will be decommissioned on 2020-06-01. The website has pointed users to the new URLs for some time now. Please update any automation, scripts, or notes that is still reference the old URLs.

Per the Python 3.4 release schedule, Python 3.4 is no longer being maintained upstream. IUS originally packaged this as python34u, but recently we renamed the package to python34 to help users transition to EPEL's python34. The Fedora Python SIG plans to continue to maintain python34 in EPEL on a best effort basis past the upstream EOL date.

As of python34-3.4.10-4, the EPEL package now obsoletes the python34u name, which will provide a seamless upgrade path for users. Once that release is published to the EPEL repository, the IUS python34u and python34 packages will be moved to our archive repository.

Python 2.7 has been unmaintained upstream since 2020-01-01. It was an oversight on the part of IUS to leave our python27 packages in the main repository for this long past the EOL. Since we are just now announcing this, we will keep them in the main repository for one more month before moving them to the archive repository, where they will no longer be maintained.

Production 3 Phase for Red Hat Enterprise Linux (RHEL) 6 will start on May 10, 2017. When that time comes, IUS will no longer accept new package requests for Enterprise Linux (EL) 6. We will continue to support the existing packages until Red Hat retires RHEL 6 on November 30, 2020.

Note, the term Enterprise Linux (EL) refers to Red Hat Enterprise Linux (RHEL) and all of the various forks. In our case, it refers to both RHEL and CentOS.

Postfix 3.2 appears to be unmaintained upstream. The last release was on 2021-04-11, as part of a batch of "legacy releases". The next batch of "legacy releases" on 2022-01-14 did not include a 3.2.x version. It also appears on the primary download mirror as "no longer supported".

We will keep existing postfix32u packages in the main IUS repo for one month after this announcement, at which point they will be moved to the archive repository where they will no longer be maintained.

It has come to our attention that dovecot 2.2 is no longer being maintained upstream. The last release was 2.2.36.4 on 2019-08-28, which fixed CVE-2019-11500. Since then, multiple CVEs affecting the 2.2 series have been announced with no corresponding release. The same CVEs have been fixed in 2.3 releases.

• CVE-2020-12100
• CVE-2020-12673
• CVE-2020-12674
• CVE-2020-24386
• CVE-2020-28200

We will keep the dovecot22u package in the main repository for one more month before moving it to the archive repository, where it will no longer be maintained.

The rsync project only maintains the current version. This means that since rsync 3.2.0 has been released, there will never be another 3.1.x version. In approximately one month, all rsync31u packages will move to our archive repository and will no longer be maintained.

phpMyAdmin 5.0 has been unmaintained upstream since 2020-10-15. It was an oversight on the part of IUS to leave our phpMyAdmin50 package in the main repository for this long past the EOL. Since we are just now announcing this, we will keep it in the main repository for one more month before moving it to the archive repository, where it will no longer be maintained.

HAProxy 1.6 has been unmaintained upstream since 2021-03-19. It was an oversight on the part of IUS to leave our haproxy16u package in the main repository for this long past the EOL. Since we are just now announcing this, we will keep it in the main repository for one more month before moving it to the archive repository, where it will no longer be maintained.

The Git project recently announced CVE-2022-24765. The Git project doesn't declare what branches they consider as supported. All packagers can do is observe what branches get backports when a security issue is announced. In this case, the security fix was applied as far back as the 2.30 branch. That means Git 2.22 and 2.24 are now end of life upstream. We will keep the git222 and git224 packages in the main IUS repo for one month after this announcement, at which point they will be moved to the archive repository where they will no longer be maintained.

As of 2018-12-31, PHP 5.6 is end of life (EOL) upstream.

https://secure.php.net/eol.php

In approximately one month, all IUS php56u packages will move to our archive repository and will no longer be maintained.

Redis does active support for the two most recent major branches. This means that with the release of 5.0.0, only the 4.0 and 5.0 branches are supported upstream, and the 3.2 branch is now EOL. The IUS project plans to retain our redis32u package in the stable repositories for approximately one month to allow users a reasonable amount of time to upgrade. After that month, we will be moving all redis32u packages to our archive repository, where they will no longer be maintained.

As of 2020-11-30, PHP 7.2 is end of life (EOL) upstream.

https://www.php.net/eol.php

In approximately one month, all IUS php72u packages will move to our archive repository and will no longer be maintained.

Redis does active support for the two most recent major branches. This means that with the release of 4.0.0, only the 3.2 and 4.0 branches are supported upstream, and the 3.0 branch is now EOL. The IUS project plans to retain our redis30u package in the stable repositories for approximately one month to allow users a reasonable amount of time to upgrade. After that month, we will be moving all redis30u packages to our archive repository, where they will no longer be maintained.

Python 3.5 has been unmaintained upstream since 2020-09-05. It was an oversight on the part of IUS to leave our python35u packages in the main repository for this long past the EOL. Since we are just now announcing this, we will keep them in the main repository for one more month before moving them to the archive repository, where they will no longer be maintained.

According to the MariaDB maintenance policy, the 10.0 series is no longer being maintained upstream. The IUS project plans to retain our mariadb100u package in the main repositories for approximately one month to allow users a reasonable amount of time from this notice to upgrade. After that month, we will move all mariadb100u packages to our archive repository, where they will no longer be maintained.

IUS will be decommissioning our legacy dl.iuscommunity.org http/https/rsync endpoints on 2021-04-30. These endpoints have been deprecated since we completed our transition from a mirror network to a CDN back in 2019. If you are still using these endpoints, switch to one of the following:

• to directly consume IUS packages, install ius-release as described here
• to sync a private mirror of IUS, follow the instructions here

The expected end-of-life (EOL) date for Python 3.3 is 2017-09-29, two months from now. Once Python 3.3 goes EOL, all python33 packages will be moved into the archive repositories and will received no more updates or support.

The Redis project does active support for the two most recent major version branches. This means that with the release of 6.0.0 last month, only the 5.0 and 6.0 branches are supported upstream, and the 4.0 branch is now EOL. In approximately one month, all redis40u packages will move to our archive repository and will no longer be maintained.

RHEL 6 and CentOS 6 are now EOL. In approximately one month, all IUS EL6 packages will move to https://vault.ius.io and will no longer be maintained.

PHP 7.4 is end of life (EOL) upstream as of 2022-11-28. In approximately one month, all IUS php74 packages will move to our archive repository and will no longer be maintained.

PHP 7.3 is unmaintained upstream as of December 6th, 2021 (https://www.php.net/eol.php). We will keep existing PHP 7.3 packages in the main IUS repo for one month after this announcement, at which point they will be moved to the archive repository where they will no longer be maintained.

The Git project recently announced a vulnerability in Git. The Git project doesn't declare what branches they consider as supported. All packagers can do is observe what branches get backports when a security issue is announced. In this case, the security fix was applied as far back as the 2.17 branch. That means Git 2.16 is now end of life upstream.

IUS previously shipped this branch as the git2u package, which was later renamed to git216. In approximately one month, all git216 (and git2u) packages will move to our archive repository and will no longer be maintained.

Users looking for an alternative have two other choices from IUS. We have the git222 package in our stable repos. We also have git224 in the testing repos, waiting for user feedback in the original request.

Python 3.2 will be reaching end of life soon. According to the release schedule, 3.2.7 was planned to be released on 2016-02-27 and be the final release. That hasn't happened yet. We reached out to some core Python developers and it appears that final release is being delayed for some pending security fixes.

IUS plans to package that final version and make it available in our stable repositories for approximately one month to allow users a reasonable amount of time to upgrade. After that month, we will be moving all python32 packages to our archive repository, where they will no longer be maintained.

MariaDB 10.1 has been unmaintained upstream since 2020-10-17. It was an oversight on the part of IUS to leave our mariadb101u packages in the main repository for this long past the EOL. Since we are just now announcing this, we will keep them in the main repository for one more month before moving them to the archive repository, where they will no longer be maintained.

Redis does active support for the two most recent major branches. This means that with the recent release of 3.2.0, the 2.8.X branch is now EOL. The IUS project plans to retain this package in the stable repositories for approximately one month to allow users a reasonable amount of time to upgrade. After that month, we will be moving all redis28u packages to our archive repository, where they will no longer be maintained.

MariaDB 10.2 is unmaintained upstream as of 2022-05-23. We will keep existing mariadb102 packages in the main repository for one month after this announcement, at which point they will be moved to the archive repository where they will no longer be maintained.

MySQL 5.5 first reached general availability status on 2010-12-03. The MySQL support policy states that upstream maintains releases for 8 years, making the official EOL date 2018-12-03. It was an oversight on the part of IUS to leave our mysql55 packages in the main repository for this long past the EOL. Since we are just now announcing this, we will keep them in the main repository for one more month before moving them to the archive repository, where they will no longer be maintained.

PHP 5.5 has a planned EOL date of 2016-07-10. Based on past EOL dates, we expect the PHP Group to release a final version of 5.5 on or near that date. IUS plans to package that final version and make it available in our stable repositories for approximately one month to allow users a reasonable amount of time to upgrade. After that month, we will be moving all php55u packages to our archive repository, where they will no longer be maintained.

HAProxy 1.7 is unmaintained upstream as of Q4 2021. We will keep existing haproxy17u packages in the main IUS repo for one month after this announcement, at which point they will be moved to the archive repository where they will no longer be maintained.