Bug 1967221
| Summary: | consider removing libmetalink from RHEL-9 | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Kamil Dudka <kdudka> |
| Component: | libmetalink | Assignee: | Richard Lescak <rlescak> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | rhel-cs-infra-services-qe <rhel-cs-infra-services-qe> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 9.0 | CC: | jorton, kdudka, mruprich |
| Target Milestone: | beta | Keywords: | Triaged |
| Target Release: | 9.0 Beta | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1967213 | Environment: | |
| Last Closed: | 2021-06-10 08:44:13 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1967213, 1967216 | ||
| Bug Blocks: | |||
Hi, I will remove libmetalink after both curl and wget get resolved. Thanks for the report. Hi Richard, wget is now metalink-free. The corresponding bug is in ON_QA and will probably stay that way until RHEL9 is released so it will not show itself as resolved here in this bug. But now it should be ready and you can start the process of removing libmetalink from the distribution. Regards, Michal Yes, both the blocking bugs are now technically resolved in el9 beta. It should be safe to proceed with the package removal. Thanks to all involved! |
libmetalink seems to be dead upstream: https://launchpad.net/libmetalink Today curl upstream decided to stop using it. I filed RHEL-9 bugs for curl and wget to stop using this library: bug #1967213 bug #1967216 Assuming both get resolved, please consider removing libmetalink from RHEL-9. +++ This bug was initially created as a clone of Bug #1967213 +++ Description of problem: Today curl upstream announced that they are going to completely remove support for metalink from curl already in the next release of curl due to a number of difficult to fix security issues: https://curl.se/mail/archive-2021-06/0006.html https://github.com/curl/curl/pull/7176 I believe it is not too late to follow this decision in RHEL-9, too. We could hardly support it ourselves till RHEL-9 EOL when it is broken and unsupported upstream since the beginning. Version-Release number of selected component (if applicable): curl-7.76.1-4.el9 Steps to Reproduce: 1. curl -V | grep -i metalink Additional info: We might want to do the same with wget and consider removing libmetalink, which seems to be dead upstream: https://launchpad.net/libmetalink I will file separate bugs for wget and libmetalink for consideration.