Hi
It seems the fix for CVE-2019-9636 has slipped through the cracks as the SRPM has not been rebuilt and made available for CentOS 6.
https://access.redhat.com/security/cve/cve-2019-9636 https://access.redhat.com/errata/RHSA-2019:1467
Kind Regards, Andrew
On 6/19/19 1:52 AM, Andrew Colin Kissa via CentOS wrote:
Hi
It seems the fix for CVE-2019-9636 has slipped through the cracks as the SRPM has not been rebuilt and made available for CentOS 6.
https://access.redhat.com/security/cve/cve-2019-9636 https://access.redhat.com/errata/RHSA-2019:1467
This actually failed to build .. working on it now.
On 6/19/19 9:28 AM, Johnny Hughes wrote:
On 6/19/19 1:52 AM, Andrew Colin Kissa via CentOS wrote:
Hi
It seems the fix for CVE-2019-9636 has slipped through the cracks as the SRPM has not been rebuilt and made available for CentOS 6.
https://access.redhat.com/security/cve/cve-2019-9636 https://access.redhat.com/errata/RHSA-2019:1467
This actually failed to build .. working on it now.
Here are the build/root logs:
https://people.centos.org/hughesjr/c6/python/20190613163444/
Trying another build now. If that fails, will research the issue.
Johnny Hughes wrote:
On 6/19/19 9:28 AM, Johnny Hughes wrote:
On 6/19/19 1:52 AM, Andrew Colin Kissa via CentOS wrote:
It seems the fix for CVE-2019-9636 has slipped through the cracks as the SRPM has not been rebuilt and made available for CentOS 6.
https://access.redhat.com/security/cve/cve-2019-9636 https://access.redhat.com/errata/RHSA-2019:1467
This actually failed to build .. working on it now.
Here are the build/root logs:
https://people.centos.org/hughesjr/c6/python/20190613163444/
Trying another build now. If that fails, will research the issue.
I see this in the build log, right about the end:
RPM build errors: File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/lib-dynload/ossaudiodev.so File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/plat-linux2
Hope this helps.
mark
On 19 Jun 2019, at 16:53, mark m.roth@5-cent.us wrote:
I see this in the build log, right about the end:
RPM build errors: File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/lib-dynload/ossaudiodev.so File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/plat-linux2
Hope this helps.
That is weird, it builds for me without errors in my local mock setup.
- Andrew
On 6/20/19 1:04 AM, Andrew Colin Kissa via CentOS wrote:
On 19 Jun 2019, at 16:53, mark m.roth@5-cent.us wrote:
I see this in the build log, right about the end:
RPM build errors: File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/lib-dynload/ossaudiodev.so File not found: /builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/plat-linux2
Hope this helps.
That is weird, it builds for me without errors in my local mock setup.
Our new build system set up uses mock on CentOS-7 to build CentOS-6 and CentOS-7 packages .. python seems to fail with that setup.
I was able to build it in mock on a CentOS-6 machine just fine .. so I will release it today along with the libvirt update:
https://access.redhat.com/errata/RHSA-2019:1578
In fact, those are going through CI testing right now .. if they pass they should be on mirror.centos.org in about an hour.
On 20 Jun 2019, at 19:34, Johnny Hughes johnny@centos.org wrote:
Our new build system set up uses mock on CentOS-7 to build CentOS-6 and CentOS-7 packages .. python seems to fail with that setup.
I was able to build it in mock on a CentOS-6 machine just fine .. so I will release it today along with the libvirt update:
https://access.redhat.com/errata/RHSA-2019:1578
In fact, those are going through CI testing right now .. if they pass they should be on mirror.centos.org in about an hour.
Thanks Johnny, i see the packages have come through.
There was an issue with software collections being missed as well but that seems to have fixed itself yesterday as i see that the software collections are now updated as well.
Thanks again for looking into this,
- Andrew
-
Andrew Colin Kissa -
isdtor -
Johnny Hughes -
mark