Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Kamil Dudka
On Thursday, November 4, 2021 2:07:53 AM CET Adam Williamson wrote: > On Wed, 2021-11-03 at 09:38 -0700, Adam Williamson wrote: > > > and that its > > > > > > subject nor the body contained any information besides the (currently > > > valid) URL to some JSON data. > > > > I don't recall exactly

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Reon Beon via devel
Sounds interesting. Thanks. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Adam Williamson
On Wed, 2021-11-03 at 09:38 -0700, Adam Williamson wrote: > > > and that its > > subject nor the body contained any information besides the (currently > > valid) > > URL to some JSON data. > > I don't recall exactly how this part works, but it's *probably* because > this is broken: > >

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Kevin Fenzi
On Wed, Nov 03, 2021 at 09:38:57AM -0700, Adam Williamson wrote: ...snip... > > I'll send a patch to fix that. Of course, what we're *really* behind on > here is getting datagrepper and FMN rewritten to use fedora-messaging > and message schemas[0] instead of fedmsg and the fedmsg_meta stuff... >

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Adam Williamson
On Wed, 2021-11-03 at 08:54 +0100, Kamil Dudka wrote: > On Tuesday, November 2, 2021 6:32:34 PM CET Adam Williamson wrote: > > 4. The email notifications should be customizable via > > https://apps.fedoraproject.org/notifications/ , I believe. I do agree > > it would be good if we could tweak some

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Kamil Dudka
On Tuesday, November 2, 2021 6:32:34 PM CET Adam Williamson wrote: > 4. The email notifications should be customizable via > https://apps.fedoraproject.org/notifications/ , I believe. I do agree > it would be good if we could tweak some defaults in the notification > code to not notify you when

Re: Fedora 35 security update of curl blocked for a month

2021-11-03 Thread Kamil Dudka
On Tuesday, November 2, 2021 8:30:15 PM CET Adam Williamson wrote: > Further to this: I did re-run the tests, they did pass, it did make > Bodhi happy, and I successfully submitted the update to stable. It > should get pushed in the next push, I hope. > > It looks like what happened is that Bodhi

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Gary Buhrmaster
On Tue, Nov 2, 2021 at 7:30 PM Adam Williamson wrote: > Further to this . Thanks for the report on your research. When there are enough fragile moving parts, sooner or later something goes sideways ___ devel mailing list --

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Matthew Miller
On Tue, Nov 02, 2021 at 02:43:05PM +0100, Kamil Dudka wrote: > As a side-effect I received 49 identical e-mails from > notificati...@fedoraproject.org > with not very specific subject "fedmsg notification" and the following link > inside: "Update fedmsg notification email system" is one of the

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Adam Williamson
On Tue, 2021-11-02 at 10:32 -0700, Adam Williamson wrote: > > 3. I'm not sure why Bodhi is still not allowing the update to be > submitted for stable even though the tests have been waived, this is > odd. I ran the greenwave query manually and it returns (in part): > > "policies_satisfied":

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Adam Williamson
On Tue, 2021-11-02 at 16:19 +0100, Kalev Lember wrote: > On Tue, Nov 2, 2021 at 3:50 PM Kamil Dudka wrote: > > > On Tuesday, November 2, 2021 3:37:03 PM CET Fabio Valentini wrote: > > > Maybe multiple people attempting to waive test results and re-triggering > > > tests while things are still

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 4:19:23 PM CET Kalev Lember wrote: > My understanding is that the test that failed and is blocking the push to > stable is the openQA test. When I discussed a similar issue that a GNOME > megaupdate ran into with adamw a few weeks ago, he said that the way to >

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kalev Lember
On Tue, Nov 2, 2021 at 3:50 PM Kamil Dudka wrote: > On Tuesday, November 2, 2021 3:37:03 PM CET Fabio Valentini wrote: > > Maybe multiple people attempting to waive test results and re-triggering > > tests while things are still pending is not a good idea? > > > > It looks like the re-triggered

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 3:37:03 PM CET Fabio Valentini wrote: > Maybe multiple people attempting to waive test results and re-triggering > tests while things are still pending is not a good idea? > > It looks like the re-triggered tests failed again, after the tests had been > waived,

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Fabio Valentini
On Tue, Nov 2, 2021, 15:31 Miro Hrončok wrote: > On 02. 11. 21 15:10, Mattia Verga via devel wrote: > > Il 02/11/21 14:43, Kamil Dudka ha scritto: > >> On Tuesday, November 2, 2021 2:17:28 PM CET Kamil Dudka wrote: > >>> On Tuesday, November 2, 2021 1:58:02 PM CET Miro Hrončok wrote: > On

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Miro Hrončok
On 02. 11. 21 15:10, Mattia Verga via devel wrote: Il 02/11/21 14:43, Kamil Dudka ha scritto: On Tuesday, November 2, 2021 2:17:28 PM CET Kamil Dudka wrote: On Tuesday, November 2, 2021 1:58:02 PM CET Miro Hrončok wrote: On 02. 11. 21 8:47, Kamil Dudka wrote: On September 22 I submitted a

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 3:10:47 PM CET Mattia Verga via devel wrote: > It appears that the tests are now waived, so you can push the update to > stable as usual. > > Mattia I wish I could but it is unfortunately sill not the case: $ bodhi updates request FEDORA-2021-1d24845e93 stable

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Mattia Verga via devel
Il 02/11/21 14:43, Kamil Dudka ha scritto: > On Tuesday, November 2, 2021 2:17:28 PM CET Kamil Dudka wrote: >> On Tuesday, November 2, 2021 1:58:02 PM CET Miro Hrončok wrote: >>> On 02. 11. 21 8:47, Kamil Dudka wrote: On September 22 I submitted a Fedora 35 update of curl, which obsoleted

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 2:17:28 PM CET Kamil Dudka wrote: > On Tuesday, November 2, 2021 1:58:02 PM CET Miro Hrončok wrote: > > On 02. 11. 21 8:47, Kamil Dudka wrote: > > > On September 22 I submitted a Fedora 35 update of curl, which obsoleted > > > a previously submitted security update of

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 1:58:02 PM CET Miro Hrončok wrote: > On 02. 11. 21 8:47, Kamil Dudka wrote: > > On September 22 I submitted a Fedora 35 update of curl, which obsoleted > > a previously submitted security update of curl. The update has reached > > karma +13 since then, yet I was

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Miro Hrončok
On 02. 11. 21 8:47, Kamil Dudka wrote: On September 22 I submitted a Fedora 35 update of curl, which obsoleted a previously submitted security update of curl. The update has reached karma +13 since then, yet I was unable to make Bodhi push the update to stable:

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Nov 02, 2021 at 09:49:45AM +0100, Kamil Dudka wrote: > On Tuesday, November 2, 2021 9:14:31 AM CET Peter Robinson wrote: > > On Tue, Nov 2, 2021 at 7:48 AM Kamil Dudka wrote: > > > On September 22 I submitted a Fedora 35 update of curl, which obsoleted > > > a previously submitted

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On Tuesday, November 2, 2021 9:14:31 AM CET Peter Robinson wrote: > On Tue, Nov 2, 2021 at 7:48 AM Kamil Dudka wrote: > > > > > > > On September 22 I submitted a Fedora 35 update of curl, which obsoleted > > a previously submitted security update of curl. The update has reached > > karma +13

Re: Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Peter Robinson
On Tue, Nov 2, 2021 at 7:48 AM Kamil Dudka wrote: > > On September 22 I submitted a Fedora 35 update of curl, which obsoleted > a previously submitted security update of curl. The update has reached > karma +13 since then, yet I was unable to make Bodhi push the update to > stable: > >

Fedora 35 security update of curl blocked for a month

2021-11-02 Thread Kamil Dudka
On September 22 I submitted a Fedora 35 update of curl, which obsoleted a previously submitted security update of curl. The update has reached karma +13 since then, yet I was unable to make Bodhi push the update to stable: https://bodhi.fedoraproject.org/updates/FEDORA-2021-1d24845e93 I