#800 [xz] CVE-2022-1271 | rhbz#2080938
Closed 2 years ago by blockerbot. Opened 2 years ago by blockerbot.

Bug details: https://bugzilla.redhat.com/show_bug.cgi?id=2080938
Information from BlockerBugs App:
2080938

Current vote summary

Commented but haven't voted yet: coremodule

The votes have been last counted at 2022-05-02 18:32 UTC and the last processed comment was #comment-795439

To learn how to vote, see:
https://pagure.io/fedora-qa/blocker-review
A quick example: BetaBlocker +1 (where the tracker name is one of BetaBlocker/FinalBlocker/BetaFE/FinalFE/0Day/PreviousRelease and the vote is one of +1/0/-1)


The same bug, just for gzip, is in #777. Some justification is in https://pagure.io/fedora-qa/blocker-review/issue/777#comment-794014

FinalFE +1
FinalBlocker 0
(can be convinced)

FinalBlocker -1
FinalFE +1

This is for consistency with the gzip issue, which we did not take as a blocker. The criterion says "which cannot be satisfactorily resolved by a package update (e.g. issues during installation)" - this is not an issue that's likely to be encountered during installation or typical use of the live image, IMHO.

AGREED RejectedFinalBlocker
AGREED AcceptedFinalFE

Discussed during the 2022-05-02 blocker review meeting: [0]

The decision to classify this bug as a "RejectedBlocker (Final)" and an "AcceptedFreezeException (Final)" was made based off precedent set with the same bug in gzip (2073312) which was rejected as a blocker, this is rejected as it can be satisfactorily resolved with an update; the issue is not likely to be encountered during installation or typical use of a live image.

[0] https://meetbot.fedoraproject.org/fedora-blocker-review/2022-05-02/f36-blocker-review.2022-05-02-16.00.txt

The following votes have been closed:

Metadata Update from @blockerbot:
- Issue status updated to: Closed (was: Open)

2 years ago

Release F36 is no longer tracked by BlockerBugs, closing this ticket.

Login to comment on this ticket.

Metadata