Bug 1955804

Summary:	please build osslsigncode for epel8
Product:	[Fedora] Fedora	Reporter:	Davide Cavalca <davide>
Component:	osslsigncode	Assignee:	Artem <ego.cordatus>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	ego.cordatus, ulrich.b
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	osslsigncode-2.1-3.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-04 00:50:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1914423

Description Davide Cavalca 2021-04-30 20:16:39 UTC

Please branch and build osslsigncode for epel8. I tested a mockbuild of the rawhide branch and it works fine, though the tests have do be disabled due to missing dependencies (https://src.fedoraproject.org/rpms/osslsigncode/pull-request/1). Also happy to do this myself if you prefer, just request the EPEL branch and add me as a co-maintainer for it in case (FAS: dcavalca). Thanks!

Comment 1 Fedora Update System 2021-05-01 18:28:19 UTC

FEDORA-EPEL-2021-aaded2d5c8 has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-aaded2d5c8

Comment 2 Artem 2021-05-01 18:31:29 UTC

Built for epe8 and added you with full permissions. Appreciate any help with package and maintenance. Thank you!

Comment 3 Fedora Update System 2021-05-02 01:12:51 UTC

FEDORA-EPEL-2021-aaded2d5c8 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-aaded2d5c8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2021-05-04 00:50:10 UTC

FEDORA-EPEL-2021-aaded2d5c8 has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Ulrich 2026-02-03 13:41:12 UTC

Today we discovered that osslsigncode disappeared from EPEL 8. Was this on purpose?

Comment 6 Artem 2026-02-03 14:00:30 UTC

CVE discovered. EPEL 8 is to old and updating on latest v2.12 not easy/possible. I didn't have time to post to the mailing list because it was very late and time for bed, but the solution required immediate action. The vulnerability critical. So package was immediately retired.

https://github.com/mtrojnar/osslsigncode/releases/tag/2.12

Comment 7 Ulrich 2026-02-03 14:13:34 UTC

okay, cool. thx for info!

Was it removed from EPEL 10 for the same reason? Or was it never part of EPEL 10?

Comment 8 Artem 2026-02-03 14:16:06 UTC

Never packaged. I am just a casual maintainer and doesn't have enough time/resources to maintain for EPEL branches, sorry.

Comment 9 Artem 2026-02-03 14:18:09 UTC

But i've updated for EPEL 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5cd59d2965

Comment 10 Ulrich 2026-02-04 12:30:26 UTC

K. Thx again for your effort and answers!