Bug 2065706
| Summary: | Removal of invalid vendored project with unwanted license in aardvark-dns/netavark | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Jindrich Novy <jnovy> | |
| Component: | containers-common | Assignee: | Jindrich Novy <jnovy> | |
| Status: | CLOSED ERRATA | QA Contact: | Joy Pu <ypu> | |
| Severity: | high | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 9.0 | CC: | ddarrah, pholzing, pvlasin, tsweeney, ypu | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | containers-common-1-34.el9_0 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2065707 2067486 (view as bug list) | Environment: | ||
| Last Closed: | 2022-05-17 12:35:38 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2065707, 2067486 | |||
|
Description
Jindrich Novy
2022-03-18 14:26:07 UTC
@ddarrah @ypu could we get a qa_ack on this please? ======= Impact Statement ======= What is the benefit of making this change after the deadline? What is the impact on customer satisfaction, and on the business? a. For bugfixes, there must be support from someone in Customer Support, a Partner Manager, Product Manager, and/or a Business Unit rep. (e.g., potentially from a layered product BU). b. It is unusual for new features to be allowed in the release after the deadline. For this reason, additional justification must be obtained from a stakeholder outside of the SST, to ensure an objective review of the benefit to the product. What is the risk to the release schedule, quality, and the impact of diverting resources from other efforts? Will there be enough time to do the necessary large-scale, cross-function, regression, stress, or fault-insertion testing that may be required to verify this change? This issue was discovered in a late PELC review. There's a gnu-license for SSL that's old and that the licensing folks have asked us to remove if at all possible. It is being pulled into the aardvark-dns project via the usage of the Rust libgit2-sys library. There were only a few calls made to this library in aardvark-dns. By removing the library and making a few small tweaks, which was already completed in Upstream a few weeks ago, the problematic license is no longer included in aardvark-dns. The aardvarkk-dns project is a relatively new project that's used to handle DNS functionality within Podman. There is little risk to the change, and it would be only for Podman as no other projects use aardvark-dns. The fix is ready to go, we just need the green light. PR complete. Setting to Post an assigning to @jnovy for further BZ and packaging needs. PR: https://github.com/containers/aardvark-dns/pull/106 And I left of the second PR that is part of this fix: https://github.com/containers/netavark/pull/262 New PELC review in progress: https://pelc.engineering.redhat.com/tasks/509312/ Checked with containers-common-1-34.el9_0.src.rpm and the file is already removed. So move it to verified. Details: # find . -name "openssl_dynamic.h" # ls containers-aardvark-dns-0a8eabf containers-netavark-93af394 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (new packages: containers-common), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:2354 The needinfo request[s] on this closed bug have been removed as they have been unresolved for 365 days |