Bug 2005231

Summary:	awscli no longer installable with recent python3-rsa 4.7.2
Product:	[Fedora] Fedora EPEL	Reporter:	Steve Traylen <steve.traylen>
Component:	awscli	Assignee:	David Duncan <davdunc>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel8	CC:	bperkins, davdunc, gwync, jmontleo, me
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	awscli-1.18.156-2.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-09-24 20:57:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Steve Traylen 2021-09-17 07:55:07 UTC

Description of problem:

The existing RPM requirement  of python3.6dist(rsa) <= 4.7 is problematic
and python-rsa was just released to epel-testing as 4.7.3 to resolve a CVE

https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d5cf26cbeb


Version-Release number of selected component (if applicable):

awscli-1.18.156-1.el8.noarch.rpm


How reproducible:

Everytime

Steps to Reproduce:
1. Start with existing packages installed


   rpm -q awscli python3-rsa
   awscli-1.18.156-1.el8.noarch
   python3-rsa-3.4.2-16.el8.noarch


2. Apply the epel-testing updates 

dnf update 

3.

Actual results:
Error: 
 Problem: package awscli-1.18.156-1.el8.noarch requires python3.6dist(rsa) <= 4.7, but none of the providers can be installed
  - cannot install both python3-rsa-4.7.2-1.el8.noarch and python3-rsa-3.4.2-16.el8.noarch
  - cannot install the best update candidate for package python3-rsa-3.4.2-16.el8.noarch
  - cannot install the best update candidate for package awscli-1.18.156-1.el8.noarch
  - package python3-rsa-3.4.2-13.el8.noarch is filtered out by exclude filtering


Expected results:


python3-rsa-4.7.2-1.el8.noarch  should install okay.

Additional info:

.spec files contains a sed:

# https://bugzilla.redhat.com/show_bug.cgi?id=1854288
sed -i s/4.5.0/4.7/g setup.py
sed -i s/4.5.0/4.7/g setup.cfg


so seems to be a familiar problem.

Comment 1 Jason Montleon 2021-09-17 12:43:36 UTC

I did a quick test build bumping this to 4.8 (same value used by 1.19, 1.20, and I believe also python-google-auth) and a very quick test. The aws command did seem to work OK. Either adjusting the sed or bumping the version would probably fix it.

Comment 2 Jason Montleon 2021-09-17 12:59:50 UTC

I opened a PR https://src.fedoraproject.org/rpms/awscli/pull-request/7#

Let me know if there is anything else I can do to help.

Comment 3 Gwyn Ciesla 2021-09-17 13:06:01 UTC

Excellent, thank you!

Comment 4 Fedora Update System 2021-09-17 13:22:04 UTC

FEDORA-EPEL-2021-4cdea1b0ae has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4cdea1b0ae

Comment 5 Fedora Update System 2021-09-17 15:50:06 UTC

FEDORA-EPEL-2021-4cdea1b0ae has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4cdea1b0ae

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2021-09-24 20:57:04 UTC

FEDORA-EPEL-2021-4cdea1b0ae has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.