summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRemi Collet <remi@remirepo.net>2023-12-20 11:52:48 +0100
committerRemi Collet <remi@php.net>2023-12-20 11:52:48 +0100
commit2e3c1684e65e6b329e2b998b1d74899f9b59a5c7 (patch)
treef947fe0345e7d062d45fdeea42d2e1aed73d47f3
parenteb4f71e878b4cd7e25e2d7bf8a535c956ca1222d (diff)
disable repo_gpgcheck as it raise too much issue being proxy
and CVE-2021-20271 is fixed in rpm
-rw-r--r--remi-debug.repo4
-rw-r--r--remi-modular-test.repo4
-rw-r--r--remi-modular.repo5
-rw-r--r--remi-release.spec8
-rw-r--r--remi-test.repo2
-rw-r--r--remi.repo3
6 files changed, 16 insertions, 10 deletions
diff --git a/remi-debug.repo b/remi-debug.repo
index 9d819ff..b10d344 100644
--- a/remi-debug.repo
+++ b/remi-debug.repo
@@ -3,7 +3,7 @@ name=Remi's RPM repository for Fedora $releasever - $basearch - debuginfo
baseurl=http://rpms.remirepo.net/fedora/$releasever/debug-remi/$basearch/
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
[remi-test-debuginfo]
@@ -11,5 +11,5 @@ name=Remi's test RPM repository for Fedora $releasever - $basearch - debuginfo
baseurl=http://rpms.remirepo.net/fedora/$releasever/debug-test/$basearch/
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-modular-test.repo b/remi-modular-test.repo
index b020fc7..bce3116 100644
--- a/remi-modular-test.repo
+++ b/remi-modular-test.repo
@@ -9,7 +9,7 @@ name=Remi's Modular testing repository - Fedora $releasever - $basearch
mirrorlist=http://cdn.remirepo.net/fedora/$releasever/modular-test/$basearch/mirror
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
@@ -19,6 +19,6 @@ name=Remi's Modular testing repository - Fedora $releasever - $basearch - debugi
mirrorlist=http://cdn.remirepo.net/fedora/$releasever/debug-modular-test/$basearch/mirror
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-modular.repo b/remi-modular.repo
index 0e839aa..6dd5931 100644
--- a/remi-modular.repo
+++ b/remi-modular.repo
@@ -9,7 +9,8 @@ name=Remi's Modular repository - Fedora $releasever - $basearch
mirrorlist=http://cdn.remirepo.net/fedora/$releasever/modular/$basearch/mirror
enabled=1
gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
@@ -19,6 +20,6 @@ name=Remi's Modular repository - Fedora $releasever - $basearch - debuginfo
mirrorlist=http://cdn.remirepo.net/fedora/$releasever/debug-modular/$basearch/mirror
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-release.spec b/remi-release.spec
index e7876f3..0ee1fbd 100644
--- a/remi-release.spec
+++ b/remi-release.spec
@@ -11,10 +11,10 @@
Name: remi-release
Version: %{fedora}
%if %{fedora} == 39
-Release: 2%{?dist}
+Release: 3%{?dist}
%endif
%if %{fedora} == 38
-Release: 3%{?dist}
+Release: 4%{?dist}
%endif
%if %{fedora} == 37
Release: 3%{?dist}
@@ -150,6 +150,10 @@ mkdir -p %{buildroot}/opt/remi
%changelog
+* Wed Dec 20 2023 Remi Collet <remi@remirepo.net> - 39-3, 38-4
+- disable repo_gpgcheck as it raise too much issue being proxy
+ and CVE-2021-20271 is fixed in rpm
+
* Mon Oct 30 2023 Remi Collet <remi@remirepo.net> - 39-2, 38-3, 37-3
- only obsolete libicu compat package when it matches system version
libicu71 on F37, libicu72 on F38, libicu73 on F39
diff --git a/remi-test.repo b/remi-test.repo
index 494b45e..10f87f4 100644
--- a/remi-test.repo
+++ b/remi-test.repo
@@ -5,6 +5,6 @@ mirrorlist=http://cdn.remirepo.net/fedora/$releasever/test/$basearch/mirror
# WARNING: If you enable this repository, you must also enable "remi"
enabled=0
gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi.repo b/remi.repo
index e388900..de9c701 100644
--- a/remi.repo
+++ b/remi.repo
@@ -9,6 +9,7 @@ name=Remi's RPM repository - Fedora $releasever - $basearch
mirrorlist=http://cdn.remirepo.net/fedora/$releasever/remi/$basearch/mirror
enabled=1
gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
fastestmirror=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever