========================================== #fedora-blocker-review: F37-blocker-review ========================================== Meeting started by adamw at 16:00:18 UTC. The full logs are available at https://meetbot.fedoraproject.org/fedora-blocker-review/2022-10-31/f37-blocker-review.2022-10-31-16.00.log.html . Meeting summary --------------- * Roll Call (adamw, 16:07:01) * Introduction (adamw, 16:08:41) * Our purpose in this meeting is to review proposed blocker and nice-to-have bugs and decide whether to accept them, and to monitor the progress of fixing existing accepted blocker and nice-to-have bugs. (adamw, 16:08:47) * We'll be following the process outlined at: (adamw, 16:08:49) * LINK: https://fedoraproject.org/wiki/QA:SOP_Blocker_Bug_Meeting (adamw, 16:08:52) * The bugs up for review today are available at: (adamw, 16:08:54) * LINK: http://qa.fedoraproject.org/blockerbugs/current (adamw, 16:08:56) * The criteria for release blocking bugs can be found at: (adamw, 16:08:59) * LINK: https://fedoraproject.org/wiki/Basic_Release_Criteria (adamw, 16:09:01) * LINK: https://fedoraproject.org/wiki/Fedora_37_Beta_Release_Criteria (adamw, 16:09:04) * LINK: https://fedoraproject.org/wiki/Fedora_37_Final_Release_Criteria (adamw, 16:09:05) * for Final, we have: (adamw, 16:09:13) * 1 Proposed Blockers (adamw, 16:09:35) * 3 Accepted Blockers (adamw, 16:09:36) * 5 Proposed Freeze Exceptions (adamw, 16:09:36) * 16 Accepted Freeze Exceptions (adamw, 16:09:36) * adamw will secretarialize (adamw, 16:10:52) * Proposed Final blocker (adamw, 16:11:05) * (2135617) CVE-2022-3515 libksba: integer overflow may lead to remote code execution [fedora-all] (adamw, 16:11:11) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2135617 (adamw, 16:11:13) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/997 (adamw, 16:11:16) * Proposed Blocker, libksba, ON_QA (adamw, 16:11:17) * Ticket vote: FinalBlocker (+1,0,-0) (+gui1ty) (adamw, 16:11:20) * LINK: https://gnupg.org/software/libksba/index.html (adamw, 16:19:10) * LINK: https://lists.fedoraproject.org/pipermail/test/2012-October/111118.html was the original proposal. the discussion went down a different alley from 'what exactly doe fixable by an update mean?' and more down 'what release point should it be applied to?' (adamw, 16:36:34) * AGREED: 2135617 - AcceptedBlocker (Final) - this is accepted as a potential violation of "The release must contain no known security bugs of 'important' or higher impact according to the Red Hat severity classification scale which cannot be satisfactorily resolved by a package update (e.g. issues during installation)." We don't know for sure if this would be exploitable during install or live use, but it seems possible so we'd rather (adamw, 16:40:11) * proposed Final freeze exception issues (adamw, 16:40:26) * (2138491) The graphical install briefly shows "Initial Setup" even when the root account is disabled, after a fresh install, in all of the Fedora Spins (adamw, 16:40:40) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2138491 (adamw, 16:40:41) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/994 (adamw, 16:40:41) * Proposed Freeze Exceptions, anaconda, NEW (adamw, 16:40:41) * Ticket vote: FinalFreezeException (+2,0,-0) (+bcotton, +danya213) (adamw, 16:40:44) * AGREED: 2138491 - AcceptedFreezeException - this is accepted as a very visible annoyance during install that can't be fixed with an update. (adamw, 16:47:25) * (2094075) btrfs-progs-6.0 is available (adamw, 16:47:28) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2094075 (adamw, 16:47:31) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/996 (adamw, 16:47:35) * Proposed Freeze Exceptions, btrfs-progs, ON_QA (adamw, 16:47:39) * Ticket vote: FinalFreezeException (+2,0,-0) (+chrismurphy, +ngompa) (adamw, 16:47:42) * AGREED: 2094075 - AcceptedFreezeException (Final) - this is accepted on the basis that if we're freshening the kernel to 6.0, we should keep btrfs-progs in sync with it, as this is upstream's intent (adamw, 16:55:16) * (2134742) Consider mesa-22.2.2-1 pull into F37 (adamw, 16:55:28) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2134742 (adamw, 16:55:31) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/973 (adamw, 16:55:33) * Proposed Freeze Exceptions, mesa, ON_QA (adamw, 16:55:37) * Ticket vote: FinalFreezeException (+6,0,-3) (+gui1ty, +frantisekz, +geraldosimiao, +r00t, +ngompa, +kalev, -somethingsomethingfedora, -bcotton, -nb) (adamw, 16:55:40) * AGREED: 2134742 - AcceptedFreezeException (Final) - this is accepted as part of the general freshening of key components while we wait for the openssl fix, it's always good to ship final code where possible. We will carefully review results from RC-1.5 testing (which included this) before actually pulling it into any true RC compose (adamw, 17:01:26) * (2138453) F37 beta - gnome-shell crashes when trying to work with mangled EDID color calibration information (adamw, 17:01:33) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2138453 (adamw, 17:01:36) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/998 (adamw, 17:01:38) * Proposed Freeze Exceptions, mutter, POST (adamw, 17:01:40) * AGREED: 2138453 - AcceptedFreezeException (Final) - this is obviously a critical problem for affected systems (which includes the quite buzz-y Steam Deck) and cannot be resolved with an update (adamw, 17:08:17) * (2138870) The "Switch User" option is missing in the default XFCE screensaver. (adamw, 17:08:26) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=2138870 (adamw, 17:08:28) * LINK: https://pagure.io/fedora-qa/blocker-review/issue/999 (adamw, 17:08:31) * Proposed Freeze Exceptions, xfce4-screensaver, NEW (adamw, 17:08:34) * Ticket vote: FinalFreezeException (+1,0,-0) (+gui1ty) (adamw, 17:08:36) * AGREED: 2138870 - punt (delay decision) - the general feeling here was that folks wanted more information on the nature of the problem and any proposed fix before voting (adamw, 17:21:13) * Accepted Blocker review (adamw, 17:21:37) * 2135772 - we actually got a fix for this from upstream today, it will be in the next RC (adamw, 17:22:00) * 2137600 - we broadly know the problem here and how to fix it, but the upstream fix relies on other code that landed in 6.1 and is tricky to backport to 6.0. jforbes is actively working on figuring out the best way forward for 6.0 and hopes to have a build soon (adamw, 17:22:34) * 2137661 - this is still embargoed until tomorrow, as soon as the fix is released we'll be working to get it built ASAP (adamw, 17:23:00) * Open floor (adamw, 17:30:16) Meeting ended at 17:38:39 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * adamw (174) * Penguinpee (39) * MichaelCatanzaro (30) * geraldosimiao (17) * zodbot (15) * Eighth_Doctor (14) * bcotton (11) * nb (8) * kparal (7) * Southern_Gentlem (6) * jforbes (6) * OnuralpSezerhehi (4) * kalev (4) * bcottom (0) Generated by `MeetBot`_ 0.4 .. _`MeetBot`: https://fedoraproject.org/wiki/Zodbot#Meeting_Functions