Hello folks,

Bodhi will probably be upgraded to 7.1.1 before the F38 final freeze and
I want to highlight a notable change which may impact update
submissions. The change is that update notes field will now be limited
to 10k characters length.
The request came from https://github.com/fedora-infra/bodhi/issues/4982
which brought to attention that data of some updates were really huge
and may lead to DoS attacks. The 10k characters limit I chose should
have no impact for 99% of the updates. The limit is configurable in
bodhi config, personally I would have lowered that, but I preferred to
chose a high value to start with.

Most of the updates which have notes longer than 10k characters are
rawhide automatic updates which copies the RPM changelog over and over,
but there are some user created updates which would also been affected
by the new limit. I want to point out that copying the full upstream
changelogs into updates notes is not recommended.

With Bodhi 7.1.1 the webUI form will show a character counter at the
bottom of the notes input box which will help the user to check if
they're within length limits and the form will refuse to create the
update if notes exceed the limit. For CLI submitted updates, the server
will return an error and will refuse to create the update if notes
exceed the limit.

Other changes between the currently deployed Bodhi 7.0.1 and the
upcoming Bodhi 7.1.1 I encourage you to look at the upstream changelog
at https://github.com/fedora-infra/bodhi/releases

Cheers
Mattia

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to