FEDORA-2018-7be27ff1d8

bugfix update in Fedora 29 for asterisk, getdns, & 4 more

Status: stable 8 months ago

New unbound release fixes several issues.

  • Changes libunbound soname, rebuilds dependent packages.

  • Update to gnutls also fixes crash in libsoup

  • Asterisk is updated to version 16.0.0

How to install

sudo dnf upgrade --advisory=FEDORA-2018-7be27ff1d8

Comments 54

This update has been submitted for testing by pemensik.

GnuTLS rebuild is also required. Because of missing rights for me to include it, it has its own update

pemensik edited this update.

This update has been pushed to testing.

pemensik edited this update.

New build(s):

  • gnutls-3.6.4-2.fc29

Karma has been reset.

This update has been submitted for testing by pemensik.

pemensik edited this update.

Good.

karma: +1

This update has been pushed to testing.

no regressions noted

karma: +1

Running sudo dnf upgrade --refresh gave me the following errors

Problem 1: package libreswan-3.25-3.fc29.1.i686 requires libunbound.so.2, but none of the providers can be installed - cannot install both unbound-libs-1.8.1-1.fc29.i686 and unbound-libs-1.7.3-9.fc29.i686 - cannot install both unbound-libs-1.7.3-9.fc29.i686 and unbound-libs-1.8.1-1.fc29.i686 - cannot install the best update candidate for package unbound-libs-1.7.3-9.fc29.i686 - cannot install the best update candidate for package libreswan-3.25-3.fc29.1.i686 Problem 2: problem with installed package libreswan-3.25-3.fc29.1.i686 - package libreswan-3.25-3.fc29.1.i686 requires libunbound.so.2, but none of the providers can be installed - cannot install both unbound-libs-1.8.1-1.fc29.i686 and unbound-libs-1.7.3-9.fc29.i686 - cannot install both unbound-libs-1.7.3-9.fc29.i686 and unbound-libs-1.8.1-1.fc29.i686 - package gnutls-dane-3.6.4-2.fc29.i686 requires libunbound.so.8, but none of the providers can be installed - cannot install the best update candidate for package gnutls-dane-3.6.4-1.fc29.i686 ... Skipping packages with conflicts: (add '--best --allowerasing' to command line to force their upgrade): unbound-libs i686 1.8.1-1.fc29 updates-testing 498 k Skipping packages with broken dependencies: gnutls-dane i686 3.6.4-2.fc29 updates-testing 25 k

libreswan might need to be rebuilt to use libunbound.so.8 provided by unbound-libs-1.8.1-1 and added to this update. libreswan-3.27-1 is available for F27, F28, and F30 but doesn't appear to have been built for F29 on Koji.

This is missing libreswan and asterisk. An asterisk build has been run, but it's a major version bump, not just a rebuild for unbound; I'm not sure if @jsmith intends it to go out yet. @jsmith, what's the story there?

I will rebuild libreswan and add it. But this must not be pushed out until asterisk is dealt with.

karma: -1

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

The buildroot is broken again, because the override for gnutls expired yesterday, while the one for unbound was activated again.

karma: -1

adamwill edited this update.

New build(s):

  • libreswan-3.27-1.fc29

Karma has been reset.

This update has been submitted for testing by adamwill.

@decathorpe Thanks. I deactivated the override again. @jsmith please do not forget to activate override before new asterisk build.

works for me

karma: +1

This update has been pushed to testing.

Works great! LGTM! =)

karma: +1

Works fine

karma: +1 critpath: +1

I'm fine with the Asterisk package going live... it's an LTS release, which should be just fine.

Petr could you replace the gnutls build with the one in https://bodhi.fedoraproject.org/updates/FEDORA-2018-4a56319e68 ?

Or push this to stable so that the other build can move on

@jsmith If I push this update, asterisk would have broken dependencies and could not be updated in F29. Is that acceptable to you? I am blocking gnutls updates here, which is important. I am also blocking openvswitch update, but fortunately is has no karma to move on.

The thing is, I lack rights to add asterisk here. You should be able to do that as a proven packager or give me commit rights to asterisk please. Alternative is to have broken asterisk for some time.

@nmav Unfortunately gnutls-dane-3.6.4-3 was not built with unbound override in place, so it depends on current unbound 1.7.3. It must not be part of this update. I think new build would have to be done again anyway for this update.

@jsmith asterisk-16.0.0-1.fc29 already depends on this libunbound.so.8, it is sufficient to only add it here.

tmraz edited this update.

New build(s):

  • asterisk-16.0.0-1.fc29

Karma has been reset.

This update has been submitted for testing by tmraz.

I've added the asterisk. If @jsmith wants to add some asterisk bugs to the update, please let me know.

@pemensik are the right buildroot overrides in place to start a rebuild?

@nmav gnutls and unbound overrides should be active until tomorrow. Please run koji wait-repo f29-build --build=gnutls-3.6.4-2.fc29 && koji wait-repo f29-build --build=unbound-1.8.1-1.fc29 to check them before running the rebuild.

@nmav let me know when the build is finished, so I can untag the overrides again.

@nmav yes, they are. I bumped it and started the build

@besser82 the build is finished, not yet added to update because it is pending

The build is finished, so if you can edit this update please do! https://koji.fedoraproject.org/koji/buildinfo?buildID=1154626

@nmav I cannot edit it right also. I am afraid we have to wait until it is moved into testing only to remove it again and wait for it pending. Is is possible @tmraz could edit it sooner as he edited it last?

tmraz edited this update.

New build(s):

  • gnutls-3.6.4-4.fc29

Removed build(s):

  • gnutls-3.6.4-2.fc29

Karma has been reset.

Thank you! I think it requires only karma again

Works great! LGTM! =)

karma: +1 critpath: +1 #1562594: +1 #1633874: +1 #1634736: +1 #1637387: +1 #1637771: +1

This update has been pushed to testing.

No regressions found

karma: +1

Works after upgrade from F28 to F29.

karma: +1

Seems to work fine

karma: +1

Asterisk seems to work fine for me.

karma: +1 critpath: +1

Shouldn't we push this to stable?

This update has been submitted for batched by tmraz.

This update has been submitted for stable by tmraz.

This update has been pushed to stable.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
bugfix
Update Severity
medium
Karma
+6
stable threshold: 3
unstable threshold: -3
Autopush
Disabled
Dates
submitted 9 months ago
in testing 9 months ago
in stable 8 months ago
modified 9 months ago

Related Bugs 5

0+1 #1562594 Unbound 1.7.0 crashes with a buffer overflow
0+1 #1633874 Request to incorporate fix for forwarding without ipv6 connectivity
0+2 #1634736 Crash in libsoup get while getting https://tracker.debian.org/pkg/acpi-support/rss
0+2 #1637387 Cannot install gnutls-dane in rawhide
0+1 #1637771 unbound-libs-1.8.1-1.fc29(updates-testing) removes several packages

Automated Test Results