I have a security update for FC6 (for xfsdump) which addresses CVE-2007-2654.
I marked it as security, and it seems that perhaps therefore I can't be the one who pushes it out? At least the email I get says:
Your update for xfsdump-2.2.45-1.fc6 has not yet been submitted to the Release Team for Pushing.
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Actions: o Edit Update o Delete Update o Disable periodic notifications regarding this update
Help? :)
-Eric
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen sandeen@redhat.com wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
Jesse Keating wrote:
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen sandeen@redhat.com wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
No, the only way I get it is if I un-check [ ] security.
(hmm forgot to mention that this is an "extras" package... if that matters.)
-Eric
On Sun, 2007-10-21 at 14:19 -0500, Eric Sandeen wrote:
Jesse Keating wrote:
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen sandeen@redhat.com wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
No, the only way I get it is if I un-check [ ] security.
(hmm forgot to mention that this is an "extras" package... if that matters.)
No need to do anything to push those -- those get to repositories once built in plague.
On Sun, 21 Oct 2007 21:34:20 +0200, Lubomir Kundrak wrote:
On Sun, 2007-10-21 at 14:19 -0500, Eric Sandeen wrote:
Jesse Keating wrote:
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen <sandeen redhat com> wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
No, the only way I get it is if I un-check [ ] security.
(hmm forgot to mention that this is an "extras" package... if that matters.)
No need to do anything to push those -- those get to repositories once built in plague.
Hmm, pardon? What do you mean with "extras" here?
The Fedora Extras for Fedora Core 6 packages are not published automatically. They sit and wait in the "plague-results" (= needsign) repository until they are pushed by the Extras' signers.
Further, there is no pending xfsdump-2.2.45-1.fc6 build in the needsign queue:
$ lspen fedora-6-extras: alsa-tools-1.0.14-1.fc6 ctapi-cyberjack-3.0.5-1.fc6 dkms-2.0.17.5-1.fc6
Checking CVS, I find in rpms/xfsdump/FC-6 the following:
* Thu May 31 2007 Eric Sandeen <sandeen redhat com> - 2.2.45-1 - Update to xfsdump 2.2.45
On Sun, 21 Oct 2007 14:19:02 -0500, Eric Sandeen wrote:
Jesse Keating wrote:
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen sandeen@redhat.com wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
No, the only way I get it is if I un-check [ ] security.
(hmm forgot to mention that this is an "extras" package... if that matters.)
Pushed over a month ago:
http://download.fedora.redhat.com/pub/fedora/linux/extras/6/i386/repoview/xf...
The cvs log:
revision 1.2 date: 2007/09/10 16:38:16; author: sandeen; state: Exp; lines: +7 -4 * Thu May 31 2007 Eric Sandeen <sandeen redhat com> - 2.2.45-1 - Update to xfsdump 2.2.45
Michael Schwendt wrote:
On Sun, 21 Oct 2007 14:19:02 -0500, Eric Sandeen wrote:
Jesse Keating wrote:
On Sat, 20 Oct 2007 23:12:09 -0500 Eric Sandeen sandeen@redhat.com wrote:
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Do you see that URL when you edit update?
No, the only way I get it is if I un-check [ ] security.
(hmm forgot to mention that this is an "extras" package... if that matters.)
Pushed over a month ago:
http://download.fedora.redhat.com/pub/fedora/linux/extras/6/i386/repoview/xf...
Hrmph ok. Emails saying "not pushed" threw me off.. ;-) I'll just delete the update then. *shrug* Sorry....
-Eric
On Sun, 21 Oct 2007 16:06:40 -0500, Eric Sandeen wrote:
http://download.fedora.redhat.com/pub/fedora/linux/extras/6/i386/repoview/xf...
Hrmph ok. Emails saying "not pushed" threw me off.. ;-) I'll just delete the update then. *shrug* Sorry....
Core != Extras
for Fedora 6 and older. Different buildsys, different push tools. The internal Fedora Core 6 build infrastructure does not know about Fedora Extras' packages.
Only for Fedora 7 things are merged with koji/bodhi.
On Sat, Oct 20, 2007 at 11:12:09PM -0500, Eric Sandeen wrote:
I have a security update for FC6 (for xfsdump) which addresses CVE-2007-2654.
I marked it as security, and it seems that perhaps therefore I can't be the one who pushes it out? At least the email I get says:
Your update for xfsdump-2.2.45-1.fc6 has not yet been submitted to the Release Team for Pushing.
To submit this update, please visit the following URL and select "Submit to Release Team for Pushing"
... but I don't see that option at the given URL, only:
Actions: o Edit Update o Delete Update o Disable periodic notifications regarding this update
Help? :)
FC6 security updates need approval from the Red Hat Security Response Team. When you added the update, they should have received an email. Once approved, it will automatically be submitted to the release team.
I'll make sure someone approves it ASAP.
luke