Bug 2005231 - awscli no longer installable with recent python3-rsa 4.7.2
Summary: awscli no longer installable with recent python3-rsa 4.7.2
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: awscli
Version: epel8
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: David Duncan
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-09-17 07:55 UTC by Steve Traylen
Modified: 2021-09-24 20:57 UTC (History)
5 users (show)

Fixed In Version: awscli-1.18.156-2.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-09-24 20:57:04 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Steve Traylen 2021-09-17 07:55:07 UTC
Description of problem:

The existing RPM requirement  of python3.6dist(rsa) <= 4.7 is problematic
and python-rsa was just released to epel-testing as 4.7.3 to resolve a CVE

https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d5cf26cbeb


Version-Release number of selected component (if applicable):

awscli-1.18.156-1.el8.noarch.rpm


How reproducible:

Everytime

Steps to Reproduce:
1. Start with existing packages installed


   rpm -q awscli python3-rsa
   awscli-1.18.156-1.el8.noarch
   python3-rsa-3.4.2-16.el8.noarch


2. Apply the epel-testing updates 

dnf update 

3.

Actual results:
Error: 
 Problem: package awscli-1.18.156-1.el8.noarch requires python3.6dist(rsa) <= 4.7, but none of the providers can be installed
  - cannot install both python3-rsa-4.7.2-1.el8.noarch and python3-rsa-3.4.2-16.el8.noarch
  - cannot install the best update candidate for package python3-rsa-3.4.2-16.el8.noarch
  - cannot install the best update candidate for package awscli-1.18.156-1.el8.noarch
  - package python3-rsa-3.4.2-13.el8.noarch is filtered out by exclude filtering


Expected results:


python3-rsa-4.7.2-1.el8.noarch  should install okay.

Additional info:

.spec files contains a sed:

# https://bugzilla.redhat.com/show_bug.cgi?id=1854288
sed -i s/4.5.0/4.7/g setup.py
sed -i s/4.5.0/4.7/g setup.cfg


so seems to be a familiar problem.

Comment 1 Jason Montleon 2021-09-17 12:43:36 UTC
I did a quick test build bumping this to 4.8 (same value used by 1.19, 1.20, and I believe also python-google-auth) and a very quick test. The aws command did seem to work OK. Either adjusting the sed or bumping the version would probably fix it.

Comment 2 Jason Montleon 2021-09-17 12:59:50 UTC
I opened a PR https://src.fedoraproject.org/rpms/awscli/pull-request/7#

Let me know if there is anything else I can do to help.

Comment 3 Gwyn Ciesla 2021-09-17 13:06:01 UTC
Excellent, thank you!

Comment 4 Fedora Update System 2021-09-17 13:22:04 UTC
FEDORA-EPEL-2021-4cdea1b0ae has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4cdea1b0ae

Comment 5 Fedora Update System 2021-09-17 15:50:06 UTC
FEDORA-EPEL-2021-4cdea1b0ae has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4cdea1b0ae

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2021-09-24 20:57:04 UTC
FEDORA-EPEL-2021-4cdea1b0ae has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.