#1697: Freeze break request for links, elinks and nss_compat_ossl

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
-----------------------------+----------------------------------------------
 Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
     Type:  task             |      Status:  new                            
Milestone:  Fedora 11 Final  |   Component:  koji                           
 Keywords:                   |  
-----------------------------+----------------------------------------------
 A bulk request, these three are related somehow. Please vote on them
 separately.
 I maintian one of these packages, maintainers of the other agree with
 these being submitted for dist-f11.

 nss_compat_ossl-0.9.5-3.fc11
  * This adds implementation of SSL_CTX_set_default_verify_paths()
  * links' and elinks' use of default CA bundle is dependent on this.
 Without it, all certificates are considered invalid
  * Without this function, https implementation in both links and elinks is
 nonfunctional
  * I've tested that handling of trusted, untrusted, valid and expired
 certification in both links and elinks works as expected. I am not aware
 of any other software using that function

 elinks-0.12-0.13.pre3.fc11
  * This release enables verification of certificates
  * Without it any certificate (untrusted, self-signed, expired) is
 accepted without a warning, which can be considered a security problem!
  * Without this fix, users of elinks are exposed to a security risk
  * See above for testing I've conducted

 links-0.12-0.13.pre3.fc11
  * This release fixes the Epoch so that elinks doesn't obsolete it
  * It contains no other change
  * What is currently tagged in dist-f11 already contains the security fix
 the above elinks build adds
  * Without this fix people would not be able to install the package, since
 elinks obsoletes it

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Comment (by lkundrak):

 Sorry the last NVR should have been links-2.2-9.fc11

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:1>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Comment (by kdudka):

 Tiny justification: elinks-0.12-0.13.pre3.fc11 does not depend on the new
 release of nss_compat_ossl. It can read CA bundle in PEM format from
 /etc/pki/tls/certs/ca-bundle.crt with the current nss_compat_ossl and
 reads it by default.

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:2>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Changes (by kdudka):

 * cc: kdudka(a)redhat.com (added)

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:3>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Comment (by jkeating):

 +1

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:4>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Comment (by wtogami):

 Tagged the first two, but there is no links of that version.

 Did you mean links-2.2-9.fc11?

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:5>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  new                            
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:                   |    Keywords:                                 
------------------------------+---------------------------------------------
Comment (by lkundrak):

 Replying to [comment:5 wtogami]:
>  Did you mean links-2.2-9.fc11?
>  
 Yup, see the [comment:1 first comment]

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:6>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project

[Fedora Release Engineering]

#1697: Freeze break request for links, elinks and nss_compat_ossl
------------------------------+---------------------------------------------
  Reporter:  lkundrak         |       Owner:  rel-eng(a)lists.fedoraproject.org
      Type:  task             |      Status:  closed                         
 Milestone:  Fedora 11 Final  |   Component:  koji                           
Resolution:  fixed            |    Keywords:                                 
------------------------------+---------------------------------------------
Changes (by notting):

  * status:  new => closed
  * resolution:  => fixed

Comment:

 OK, all tagged now.

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1697#comment:7>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project