RHSA-2019:1467 Not Fixed In CentOS
Hi
It seems the fix for CVE-2019-9636 has slipped through the cracks as the SRPM has not been rebuilt and made available for CentOS 6.
https://access.redhat.com/security/cve/cve-2019-9636
https://access.redhat.com/errata/RHSA-2019:1467
Kind Regards, Andrew
7 thoughts on - RHSA-2019:1467 Not Fixed In CentOS
This actually failed to build .. working on it now.
Here are the build/root logs:
https://people.CentOS.org/hughesjr/c6/python/20190613163444/
Trying another build now. If that fails, will research the issue.
Johnny Hughes wrote:
I see this in the build log, right about the end:
RPM build errors:
File not found:
/builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/lib-dynload/ossaudiodev.so
File not found:
/builddir/build/BUILDROOT/python-2.6.6-68.el6_10.x86_64/usr/lib64/python2.6/plat-linux2
Hope this helps.
mark
That is weird, it builds for me without errors in my local mock setup.
– Andrew
Our new build system set up uses mock on CentOS-7 to build CentOS-6 and CentOS-7 packages .. python seems to fail with that setup.
I was able to build it in mock on a CentOS-6 machine just fine .. so I
will release it today along with the libvirt update:
https://access.redhat.com/errata/RHSA-2019:1578
In fact, those are going through CI testing right now .. if they pass they should be on mirror.CentOS.org in about an hour.
Thanks Johnny, i see the packages have come through.
There was an issue with software collections being missed as well but that seems to have fixed itself yesterday as i see that the software collections are now updated as well.
Thanks again for looking into this,
– Andrew
According to my notes, mock on C7 is currently broken for C5/C6 builds, but unfortunately I forgot to note the underlying reason …