Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1383857 - lsyncd-2.2.1 is available
Summary: lsyncd-2.2.1 is available
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: lsyncd
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Jason Taylor
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-10-12 00:56 UTC by Upstream Release Monitoring
Modified: 2017-01-14 14:19 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-01-14 14:19:42 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. (4.98 KB, patch)
2016-10-12 00:56 UTC, Upstream Release Monitoring 		no flags Details | Diff
Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. (4.98 KB, patch)
2017-01-04 12:16 UTC, Upstream Release Monitoring 		no flags Details | Diff
Rebase-helper rebase-helper-debug.log log file. See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues. (4.98 KB, patch)
2017-01-05 12:18 UTC, Upstream Release Monitoring 		no flags Details | Diff
View All

Description Upstream Release Monitoring 2016-10-12 00:56:13 UTC 
Latest upstream release: 2.1.6
Current version/release in rawhide: 2.1.5-9.fc24
URL: https://github.com/axkibe/lsyncd

Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy

More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring

Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.

Based on the information from anitya:  https://release-monitoring.org/project/1846/
Comment 1 Upstream Release Monitoring 2016-10-12 00:56:36 UTC 
Patching or scratch build for lsyncd-2.1.5 failed.
Comment 2 Upstream Release Monitoring 2016-10-12 00:56:38 UTC 
Created attachment 1209395 [details]
Rebase-helper rebase-helper-debug.log log file.
See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues.
Comment 3 Upstream Release Monitoring 2016-10-12 00:56:41 UTC 
Patches were not touched. All were applied properly
Comment 4 Upstream Release Monitoring 2017-01-04 12:16:20 UTC 
Latest upstream release: 2.2.0
Current version/release in rawhide: 2.1.5-9.fc24
URL: https://github.com/axkibe/lsyncd

Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy

More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring

Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.

Based on the information from anitya:  https://release-monitoring.org/project/1846/
Comment 5 Upstream Release Monitoring 2017-01-04 12:16:42 UTC 
Patching or scratch build for lsyncd-2.1.5 failed.
Comment 6 Upstream Release Monitoring 2017-01-04 12:16:45 UTC 
Created attachment 1237108 [details]
Rebase-helper rebase-helper-debug.log log file.
See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues.
Comment 7 Upstream Release Monitoring 2017-01-04 12:16:48 UTC 
Patches were not touched. All were applied properly
Comment 8 "FeRD" (Frank Dana) 2017-01-04 13:44:14 UTC 
(Copying my report from bug #1383855 so I can close that bug as a duplicate of this one. While it was originally based on lsyncd-2.1.6 coming available, all of the following commentary should hold for lsyncd-2.2.0 as well.)

lsyncd 2.1.6 was released on October 15, 2015 and can be downloaded here:

https://github.com/axkibe/lsyncd/archive/release-2.1.6.tar.gz


It contains a (complete) fix, most notably, for bug #1165078 -- a long-standing security vulnerability tagged CVE-2014-8990. The current Fedora spec file applies a patch (Patch0) which addresses that issue, but inadequately.

For more info see the oss-sec discussion at this URL provided in bug #1165078 :
http://seclists.org/oss-sec/2014/q4/796

(Our Patch0, which is based on the rejected incomplete fix, can now be dropped as upstreamed.)


In addition, the spec file still lists the old Google Code project URL. While that page does point visitors to the new GitHub home, it doesn't make sense to send people the long way around when the spec file should be using...

URL: https://github.com/axkibe/lsyncd/


Lastly (sorry), I would strongly urge removing the /bin/sh -c 'eval...' wrapper from ExecStart in lsyncd.service. See bug #1369274 for rationale. No other /etc/sysconfig/ file that I can find supports nested variables, and attempting to do so for /etc/sysconfig/lsyncd breaks systemd's collection and journaling of the lsyncd output, as detailed in that bug.
Comment 9 "FeRD" (Frank Dana) 2017-01-04 13:44:48 UTC 
*** Bug 1383855 has been marked as a duplicate of this bug. ***
Comment 10 Upstream Release Monitoring 2017-01-05 12:17:42 UTC 
Latest upstream release: 2.2.1
Current version/release in rawhide: 2.1.5-9.fc24
URL: https://github.com/axkibe/lsyncd

Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy

More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring

Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.

Based on the information from anitya:  https://release-monitoring.org/project/1846/
Comment 11 Upstream Release Monitoring 2017-01-05 12:18:03 UTC 
Patching or scratch build for lsyncd-2.1.5 failed.
Comment 12 Upstream Release Monitoring 2017-01-05 12:18:07 UTC 
Created attachment 1237591 [details]
Rebase-helper rebase-helper-debug.log log file.
See for details and report the eventual error to rebase-helper https://github.com/phracek/rebase-helper/issues.
Comment 13 Upstream Release Monitoring 2017-01-05 12:18:10 UTC 
Following patches has been deleted:
['nodejs-oauth-sha1.patch', 'nodejs-oauth-network.patch']
Comment 14 Upstream Release Monitoring 2017-01-10 14:55:19 UTC 
jtaylor's lsyncd-2.2.1-1.fc26 completed http://koji.fedoraproject.org/koji/buildinfo?buildID=832404
Note You need to log in before you can comment on or make changes to this bug.