Bug 1449136

Summary: lftp: switch to libidn2
Product: [Fedora] Fedora Reporter: Nikos Mavrogiannopoulos <nmavrogi>
Component: lftpAssignee: Michal Ruprich <mruprich>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 27CC: jaskalnik, luhliari, mruprich, thozza
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: lftp-4.8.1-1.fc26 lftp-4.8.1-1.fc25 lftp-4.8.1-1.fc27 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-09-26 23:54:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1439723    
Attachments:
Description Flags
patch for using libidn2 none

Description Nikos Mavrogiannopoulos 2017-05-09 09:32:21 UTC
Description of problem:
Internationalized domain names exist for quite some time (IDNA2003), although the protocols describing them have evolved in an incompatible way (IDNA2008). These incompatibilities will prevent applications written for IDNA2003 to access certain problematic domain names defined with IDNA2008, e.g., faß.de is translated to domain xn--fa-hia.de with IDNA2008, while in IDNA2003 it is translated to fass.de domain. That not only causes incompatibility problems, but may be used as an attack vector to redirect users to different web sites.

The change is about deprecating libidn, which supports IDNA2003, and switch all applications using libidn, to libidn2 2.0.0, which supports IDNA2008. The switch should be transparent as the libidn2 library is API compatible. See instructions at:
https://libidn.gitlab.io/libidn2/manual/libidn2.html#Converting-from-libidn


This is part of the IDNA2008 change:
https://fedoraproject.org/wiki/Changes/IDNA2008

If upstream is not aware of that change please involve them on the process.

Comment 1 Michal Ruprich 2017-05-31 08:53:58 UTC
Created attachment 1283668 [details]
patch for using libidn2

Comment 2 Michal Ruprich 2017-05-31 08:54:47 UTC
I created a patch so that lftp might optionally use libidn2. I will run this by upstream before including this in lftp.

Comment 3 Nikos Mavrogiannopoulos 2017-05-31 09:39:39 UTC
The patch looks reasonable. Thank you Michal.

Comment 5 Michal Ruprich 2017-08-10 06:57:38 UTC
Upstream already created a new patch based on the patch I provided. They are dropping the old libind and using the new one. I guess this should appear in new upstream release any time soon. As soon as the new release comes out I will rebase the package in f27.

Comment 6 Jan Kurik 2017-08-15 07:47:56 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle.
Changing version to '27'.

Comment 7 Fedora Update System 2017-09-14 10:09:57 UTC
lftp-4.8.1-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-af2a2991b6

Comment 8 Fedora Update System 2017-09-14 10:10:17 UTC
lftp-4.8.1-1.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-56d4ceb6bb

Comment 9 Fedora Update System 2017-09-14 10:10:28 UTC
lftp-4.8.1-1.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-fefa4cbcd3

Comment 10 Fedora Update System 2017-09-14 18:22:37 UTC
lftp-4.8.1-1.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-af2a2991b6

Comment 11 Fedora Update System 2017-09-15 04:50:23 UTC
lftp-4.8.1-1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-fefa4cbcd3

Comment 12 Fedora Update System 2017-09-15 04:52:14 UTC
lftp-4.8.1-1.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-56d4ceb6bb

Comment 13 Fedora Update System 2017-09-26 23:54:29 UTC
lftp-4.8.1-1.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 14 Fedora Update System 2017-09-27 05:25:54 UTC
lftp-4.8.1-1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.

Comment 15 Fedora Update System 2017-09-30 06:29:13 UTC
lftp-4.8.1-1.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.