Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1383857
|
Description
Upstream Release Monitoring
2016-10-12 00:56:13 UTC
Patching or scratch build for lsyncd-2.1.5 failed. Created attachment 1209395 [details] Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. Patches were not touched. All were applied properly Latest upstream release: 2.2.0 Current version/release in rawhide: 2.1.5-9.fc24 URL: https://github.com/axkibe/lsyncd Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1846/ Patching or scratch build for lsyncd-2.1.5 failed. Created attachment 1237108 [details] Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. Patches were not touched. All were applied properly (Copying my report from bug #1383855 so I can close that bug as a duplicate of this one. While it was originally based on lsyncd-2.1.6 coming available, all of the following commentary should hold for lsyncd-2.2.0 as well.) lsyncd 2.1.6 was released on October 15, 2015 and can be downloaded here: https://github.com/axkibe/lsyncd/archive/release-2.1.6.tar.gz It contains a (complete) fix, most notably, for bug #1165078 -- a long-standing security vulnerability tagged CVE-2014-8990. The current Fedora spec file applies a patch (Patch0) which addresses that issue, but inadequately. For more info see the oss-sec discussion at this URL provided in bug #1165078 : http://seclists.org/oss-sec/2014/q4/796 (Our Patch0, which is based on the rejected incomplete fix, can now be dropped as upstreamed.) In addition, the spec file still lists the old Google Code project URL. While that page does point visitors to the new GitHub home, it doesn't make sense to send people the long way around when the spec file should be using... URL: https://github.com/axkibe/lsyncd/ Lastly (sorry), I would strongly urge removing the /bin/sh -c 'eval...' wrapper from ExecStart in lsyncd.service. See bug #1369274 for rationale. No other /etc/sysconfig/ file that I can find supports nested variables, and attempting to do so for /etc/sysconfig/lsyncd breaks systemd's collection and journaling of the lsyncd output, as detailed in that bug. *** Bug 1383855 has been marked as a duplicate of this bug. *** Latest upstream release: 2.2.1 Current version/release in rawhide: 2.1.5-9.fc24 URL: https://github.com/axkibe/lsyncd Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1846/ Patching or scratch build for lsyncd-2.1.5 failed. Created attachment 1237591 [details] Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. Following patches has been deleted: ['nodejs-oauth-sha1.patch', 'nodejs-oauth-network.patch'] jtaylor's lsyncd-2.2.1-1.fc26 completed http://koji.fedoraproject.org/koji/buildinfo?buildID=832404 |