FEDORA-2017-ea72793352 — security update for fedpkg and rpkg

stable

fedpkg-1.30-4.fc26 and rpkg-1.51-2.fc26

FEDORA-2017-ea72793352 created by cqi 6 years ago for Fedora 26

Update

Fixed chain-build
Remove hard dependency of bash-completion from fedpkg

rpkg

Ignore TestModulesCli if openidc-client is unavailable (cqi)
Port mbs-build to rpkg (mprahl)
Add .vscode to .gitignore (mprahl)
Fix TestPatch.test_rediff in order to run with old version of mock (cqi)
Allow to specify alternative Copr config file - #184 (cqi)
Tests for patch command (cqi)
More Tests for mockbuild command (cqi)
More tests for getting spec file (cqi)
Tests for container-build-setup command (cqi)
Test for container-build to use custom config (cqi)
Suppress output from git command within setUp (cqi)
Skip test if rpmfluff is not available (lsedlar)
Allow to override build URL (cqi)
Test for mock-config command (cqi)
Tests for copr-build command (cqi)
Fix arch-override for container-build (lucarval)
Remove unsupported osbs for container-build (lucarval)
cli: add --arches support for koji_cointainerbuild (mlangsdo)
Strip refs/heads/ from branch only once (lsedlar)
Don't install bin and config files (cqi)
Fix kojiprofile selection in cliClient.container_build_koji (cqi)
Avoid branch detection for 'rpkg sources' (praiskup)
Fix encoding in new command (cqi)
Minor wording improvement in help (pgier)
Fix indentation (pviktori)
Add --with and --without options to mockbuild (pviktori)

fedpkg

Tests for update command (cqi)
Add support for module commands (mprahl)
Clean rest cert related code (cqi)
Remove fedora cert (cqi)
Override build URL for Koji (cqi)
changing anongiturl to use src.fp.o instead of pkgs.fp.o. - #119 (tflink)
Add tests (cqi)
Enable lookaside_namespaced - #130 (cqi)
Detect dist tag correctly for RHEL and CentOS - #141 (cqi)
Remove deprecated call to platform.dist (cqi)
Do not prompt hint for SSL cert if fail to log into Koji (cqi)
Add more container-build options to bash completion (cqi)
Remove osbs from bash completion - #138 (cqi)
Install executables via entry_points - #134 (cqi)
Fix container build target (lsedlar)
Get correct build target for rawhide containers (lsedlar)
Update error message to reflect deprecation of --dist option (pgier)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-ea72793352

This update has been submitted for testing by cqi.

6 years ago

cqi edited this update.

6 years ago

cqi edited this update.

6 years ago

mprahl commented & provided feedback 6 years ago

karma

The anongiturl in /etc/rpkg/fedpkg.conf was not set properly. This PR fixes it for me: https://pagure.io/fedpkg/pull-request/161

cqi commented & provided feedback 6 years ago

@mprahl What is the error when submit a module build?

mprahl commented & provided feedback 6 years ago

@cqi this is what I get:

[mprahl@mprahl-laptop testmodule]$ git remote -v
origin  ssh://pkgs.fedoraproject.org/modules/testmodule.git (fetch)
origin  ssh://pkgs.fedoraproject.org/modules/testmodule.git (push)
[mprahl@mprahl-laptop testmodule]$ fedpkg module-build
Submitting the module build...
Could not execute module_build: The build failed with:
The submitted scmurl https://src.fedoraproject.org/git/modules/testmodule?#629d4de1a32ab71ddbe083c01f3aa1c8b9baa28e is not allowed

cqi commented & provided feedback 6 years ago

@mprahl

This anongiturl with git+ works in Koji for submitting build from a anonymous clone, e.g. https://koji.fedoraproject.org/koji/taskinfo?taskID=19122540

The submitted scmurl https://src.fedoraproject.org/git/modules/testmodule?#629d4de1a32ab71ddbe083c01f3aa1c8b9baa28e is not allowed

From which service, Koji or MBS, this error is reported?

mprahl commented & provided feedback 6 years ago

karma

@cqi okay it seems that both URLs are valid. I will fix the config option in MBS. I retract my -1. Sorry about that.

mprahl commented & provided feedback 6 years ago

The config option is fixed in MBS. It works now.

This update has been pushed to testing.

6 years ago

cqi commented 6 years ago

This update has been unpushed.

cqi edited this update.

New build(s):

fedpkg-1.30-2.fc26

Removed build(s):

fedpkg-1.30-1.fc26

Karma has been reset.

6 years ago

This update has been submitted for testing by cqi.

6 years ago

mprahl commented & provided feedback 6 years ago

karma

Works

This update has been pushed to testing.

6 years ago

puiterwijk edited this update.

New build(s):

fedpkg-1.30-3.fc26

Removed build(s):

fedpkg-1.30-2.fc26

Karma has been reset.

6 years ago

This update has been submitted for testing by puiterwijk.

6 years ago

This update has been pushed to testing.

6 years ago

mprahl commented & provided feedback 6 years ago

karma

Still works for me.

pwalter commented & provided feedback 6 years ago

karma

Works

cqi edited this update.

New build(s):

rpkg-1.51-2.fc26
fedpkg-1.30-4.fc26

Removed build(s):

fedpkg-1.30-3.fc26
rpkg-1.51-1.fc26

Karma has been reset.

6 years ago

This update has been submitted for testing by cqi.

6 years ago

rdieter provided feedback 6 years ago

karma

Test Case download upstream sources

Test Case clone distgit repository

Test Case build from distgit with mock

Test Case scratch build from distgit

mprahl provided feedback 6 years ago

karma

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by cqi.

6 years ago

This update has been submitted for stable by cqi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

fedpkg-1.30-4.fc26

rpkg-1.51-2.fc26

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

modified

6 years ago

BZ#1188634 fedpkg clone -a should use https:// transport

BZ#1509322 fedpkg >= 1.30-1 depends on bash-completion

fedpkg-1.30-4.fc26

rpkg-1.51-2.fc26

Automated Test Results

None

Test Cases


0	1	Test Case build from distgit with mock
0	1	Test Case clone distgit repository
0	1	Test Case download upstream sources
0	1	Test Case scratch build from distgit