Comments

42 Comments

Note that waiver db appears down and we can't waive the results.

If I could waive them I'd add: "Gating test fixed with https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b946530b2. DJ reviewed results. Waiving."

... merge of the side tag. (hit enter too early)

We're in the middle of the sbin merge so we should ditch this and wait for the merge of the

I triggered a new test run again after the last two runs failed due to infrastructure issues. Arjun triggered the last test run again also because of infrastructure issues. I'm leaving this issue with Arjun Shankar to monitor so we can get it past gating.

karma

System reboot successful. CVE-2024-2961 is fixed. Firefox test with various sites works too. LGTM.

BZ#2275855 CVE-2024-2961 glibc: Out of bounds write in iconv may lead to remote code execution [fedora-all]
karma

System reboot successful. CVE-2024-2961 is fixed. LGTM.

BZ#2275855 CVE-2024-2961 glibc: Out of bounds write in iconv may lead to remote code execution [fedora-all]

We have infrastructure issues with Fedora CI in the form of "Failure during Ansible playbook execution" and so I'm waiving the required CI test. The changes for this sync are really small.

Submitted https://bugzilla.redhat.com/show_bug.cgi?id=2218998 for the Rawhide CI failure seen when building strace against the new glibc. Looks like strace false positive failures on CI systems with load.

Carried out mass-prebuild run to test @critical-path-base packages still built and they all did.

This update has been unpushed.

karma

Tested on Steam with Multiversus and it works correctly.

BZ#2129358 glibc 2.36+ breaks EAC with removal of DT_HASH (and other game libraries), making games fail to load

This went through testing using the mass-prebuild tooling and I tested that this doesn't break the critical-path-base group.

karma

Rebooting with new glibc works. Firefox works. Youtube video works. Overall functional.

karma

Works. Rebooted. Ran firefox. Tested various systems and it works.

This build is in STABLE, but bodhi state is buggy due to the in-progress upgrade that happend during the update.

Tested glibc-2.34.9000-15 is functional in a modern system with AVX512 and tested that installing via dnf update with a repo results in a working system. This was broken in -14 because of an incorrect downstream revert (glibc-ld-readonly-revert.patch.)

karma

Dynamic loader does not function when invoked indirectly.

CI gating: baseos-qe.koji-build.scratch-build.validation was missing from test gating. Re-trigger'd the tests.

karma

Installed on F35, did date/time tests, looks good. Rebooted and systems continue to function.

BZ#2007807 tzdata-2021b is available
karma

Tested in F36 VM. Looks good. Samoa timezone looks good. Rebooted with new zones and everything works correctly. Tested with date command and it looks good.