On Thu, 2021-06-10 at 09:24 +0200, Marcus Meissner wrote:
On Thu, Jun 10, 2021 at 08:50:15AM +0200, Dominique Leuenberger / DimStar wrote:
On Wed, 2021-06-09 at 23:11 +0200, Sarah Julia Kriesch wrote:
Hello,
we have got an open security issue [0] in the package tuned (only s390x). I am asked now whether the project setup has been done correctly and whether perhaps an old rpmlint-mini is used there. How can I verify the version (and the correct one) of rpmlint-mini? I don't have so much experience with such setups at the moment.
I just opened up that bug to the public - there is no security concern in there (even if tuned failed to build for the detected security issue: it was never published and as such could not cause a sec issue).
All in all: ignored build failures of rpmlint-mini lead to the state. Interested parties can read up everything on the bug.
FWIW, not doing transitive rebuilds led to this problem.
Either that, or, as I noted in the bug, the fact that OSRT:Config was incomplete. I doubt we will ever go back to transitive rebuilds for Tumbleweed. Cheers, Dominique