From e6a88c0c84bf8d832c7640777a481c75b4b58268 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Wed, 20 Dec 2023 11:44:00 +0100 Subject: disable repo_gpgcheck as it raise too much issue being proxy and CVE-2021-20271 is fixed in rpm --- remi-modular.repo | 9 +++++---- remi-release.spec | 8 ++++++-- remi-safe.repo | 5 +++-- remi.repo | 9 +++++---- 4 files changed, 19 insertions(+), 12 deletions(-) diff --git a/remi-modular.repo b/remi-modular.repo index a77e64a..3047026 100644 --- a/remi-modular.repo +++ b/remi-modular.repo @@ -9,7 +9,8 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular/$basearch/mirror enabled=1 gpgcheck=1 -repo_gpgcheck=1 +# can be enabled if not being a proxy because of possible cache issue +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-modular-debuginfo] @@ -19,7 +20,7 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch - debugi mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular/$basearch/mirror enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-modular-test] @@ -29,7 +30,7 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular-test/$basearch/mirror enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-modular-test-debuginfo] @@ -39,6 +40,6 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular-test/$basearch/mirror enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION diff --git a/remi-release.spec b/remi-release.spec index 23e84b5..65ee1b6 100644 --- a/remi-release.spec +++ b/remi-release.spec @@ -10,12 +10,12 @@ Name: remi-release %if %{?rhel} == 9 # Match point release version Version: 9.3 -Release: 1%{?dist} +Release: 2%{?dist} %endif %if %{?rhel} == 8 # Match point release version Version: 8.9 -Release: 1%{?dist} +Release: 2%{?dist} %endif Summary: YUM configuration for remi repository Summary(fr): Configuration de YUM pour le dépôt remi @@ -159,6 +159,10 @@ mkdir -p %{buildroot}/opt/remi %changelog +* Wed Dec 20 2023 Remi Collet - 8.9-2 and 9.3-2 +- disable repo_gpgcheck as it raise too much issue being proxy + and CVE-2021-20271 is fixed in rpm + * Tue Dec 19 2023 Remi Collet - 8.9-1 and 9.3-1 - raise dependency on redhat-release >= 8.9 or 9.3 diff --git a/remi-safe.repo b/remi-safe.repo index 6e9dd63..bf278de 100644 --- a/remi-safe.repo +++ b/remi-safe.repo @@ -9,7 +9,8 @@ name=Safe Remi's RPM repository for Enterprise Linux VERSION - $basearch mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/safe/$basearch/mirror enabled=1 gpgcheck=1 -repo_gpgcheck=1 +# can be enabled if not being a proxy because of possible cache issue +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-safe-debuginfo] @@ -17,5 +18,5 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/ enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION diff --git a/remi.repo b/remi.repo index 2f54615..6e5adf8 100644 --- a/remi.repo +++ b/remi.repo @@ -9,7 +9,8 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/remi/$basearch/mirror enabled=0 gpgcheck=1 -repo_gpgcheck=1 +# can be enabled if not being a proxy because of possible cache issue +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-test] @@ -20,7 +21,7 @@ mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/test/$basearch/mirror # WARNING: If you enable this repository, you must also enable "remi" enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-debuginfo] @@ -28,7 +29,7 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/ enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION [remi-test-debuginfo] @@ -36,6 +37,6 @@ name=Remi's test RPM repository for Enterprise Linux VERSION - $basearch - debug baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-test/$basearch/ enabled=0 gpgcheck=1 -repo_gpgcheck=1 +repo_gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION -- cgit