From 2e3c1684e65e6b329e2b998b1d74899f9b59a5c7 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 20 Dec 2023 11:52:48 +0100
Subject: disable repo_gpgcheck as it raise too much issue being proxy and
 CVE-2021-20271 is fixed in rpm

---
 remi-debug.repo        | 4 ++--
 remi-modular-test.repo | 4 ++--
 remi-modular.repo      | 5 +++--
 remi-release.spec      | 8 ++++++--
 remi-test.repo         | 2 +-
 remi.repo              | 3 ++-
 6 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/remi-debug.repo b/remi-debug.repo
index 9d819ff..b10d344 100644
--- a/remi-debug.repo
+++ b/remi-debug.repo
@@ -3,7 +3,7 @@ name=Remi's RPM repository for Fedora $releasever - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/fedora/$releasever/debug-remi/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
 
 [remi-test-debuginfo]
@@ -11,5 +11,5 @@ name=Remi's test RPM repository for Fedora $releasever - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/fedora/$releasever/debug-test/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-modular-test.repo b/remi-modular-test.repo
index b020fc7..bce3116 100644
--- a/remi-modular-test.repo
+++ b/remi-modular-test.repo
@@ -9,7 +9,7 @@ name=Remi's Modular testing repository - Fedora $releasever - $basearch
 mirrorlist=http://cdn.remirepo.net/fedora/$releasever/modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
 
@@ -19,6 +19,6 @@ name=Remi's Modular testing repository - Fedora $releasever - $basearch - debugi
 mirrorlist=http://cdn.remirepo.net/fedora/$releasever/debug-modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-modular.repo b/remi-modular.repo
index 0e839aa..6dd5931 100644
--- a/remi-modular.repo
+++ b/remi-modular.repo
@@ -9,7 +9,8 @@ name=Remi's Modular repository - Fedora $releasever - $basearch
 mirrorlist=http://cdn.remirepo.net/fedora/$releasever/modular/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
 
@@ -19,6 +20,6 @@ name=Remi's Modular repository - Fedora $releasever - $basearch - debuginfo
 mirrorlist=http://cdn.remirepo.net/fedora/$releasever/debug-modular/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi-release.spec b/remi-release.spec
index e7876f3..0ee1fbd 100644
--- a/remi-release.spec
+++ b/remi-release.spec
@@ -11,10 +11,10 @@
 Name:           remi-release
 Version:        %{fedora}
 %if %{fedora} == 39
-Release:        2%{?dist}
+Release:        3%{?dist}
 %endif
 %if %{fedora} == 38
-Release:        3%{?dist}
+Release:        4%{?dist}
 %endif
 %if %{fedora} == 37
 Release:        3%{?dist}
@@ -150,6 +150,10 @@ mkdir -p %{buildroot}/opt/remi
 
 
 %changelog
+* Wed Dec 20 2023 Remi Collet <remi@remirepo.net> - 39-3, 38-4
+- disable repo_gpgcheck as it raise too much issue being proxy
+  and CVE-2021-20271 is fixed in rpm
+
 * Mon Oct 30 2023 Remi Collet <remi@remirepo.net> - 39-2, 38-3, 37-3
 - only obsolete libicu compat package when it matches system version
   libicu71 on F37, libicu72 on F38, libicu73 on F39
diff --git a/remi-test.repo b/remi-test.repo
index 494b45e..10f87f4 100644
--- a/remi-test.repo
+++ b/remi-test.repo
@@ -5,6 +5,6 @@ mirrorlist=http://cdn.remirepo.net/fedora/$releasever/test/$basearch/mirror
 # WARNING: If you enable this repository, you must also enable "remi"
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
diff --git a/remi.repo b/remi.repo
index e388900..de9c701 100644
--- a/remi.repo
+++ b/remi.repo
@@ -9,6 +9,7 @@ name=Remi's RPM repository - Fedora $releasever - $basearch
 mirrorlist=http://cdn.remirepo.net/fedora/$releasever/remi/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 fastestmirror=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi-$releasever
-- 
cgit