Bug 20163

Summary:	liferea is missing a critical Requires
Product:	Mageia	Reporter:	Johnny A. Solbu <cooker>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	major
Priority:	Normal	CC:	davidwhodgins, lewyssmith, lists.jjorge, pkg-bugs, sysadmin-bugs
Version:	5	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	advisory MGA5-64-OK MGA5-32-OK
Source RPM:	liferea	CVE:
Status comment:

Description Johnny A. Solbu 2017-01-22 22:30:28 CET

Description of problem:

liferea needs glib-networking in order to parse https-encrypted feeds.
Without it it cannot parse https feeds.

A simpe Â«Requires:  glib-networkingÂ» fixes it.

Rémi Verschelde 2017-01-22 22:55:02 CET

Keywords: (none) => Junior_job
CC: (none) => pkg-bugs
Assignee: bugsquad => julien.moragny

Comment 1 Johnny A. Solbu 2017-06-05 10:04:37 CEST

I have pushed an updated package to 5 updates testing repo.

Testing procedure:
Make sure glib-networking is not installed.

Install liferea, and add an https encrypted RSS feed.
  (You can use my site as a test: https://www.solbu.net/english/feeds/all.atom.xml )

The feed will not populate.

After installing the update, which will install glib-networking as dependency, the feed now populates.


Suggested Advisory:
========================
A missing dependency may result in liferea not being able to read https encrypted rss feeds.
This update fixes this.


========================

Updated packages in 5/core/updates_testing:
========================
liferea-1.10.11-3.1.mga5.x86_64.rpm
liferea-1.10.11-3.1.mga5.i586.rpm

Source RPM:   liferea-1.10.11-3.1.mga5.src.rpm

Assignee: julien.moragny => qa-bugs

Dave Hodgins 2017-06-13 05:38:28 CEST

CC: (none) => davidwhodgins
Whiteboard: (none) => advisory

Comment 2 Lewis Smith 2017-06-13 15:37:22 CEST

Testing M5 x64

Many thanks to Johnny for the test given in Comment 1. I take it that you tried it yourself.
Unable to uninstall glib-networking because it would have taken too much with it. So no point in installing liferea to try the given test. Instead, doing a Claire style package check:-

BEFORE potential update, normal repos:
 $ urpmq -i liferea
Name        : liferea
Version     : 1.10.11
Release     : 3.mga5
Source RPM  : liferea-1.10.11-3.mga5.src.rpm

 $ urpmq -d liferea | grep ^glib
glib2.0-common
glibc
--------------
AFTER potential update, Updates Testing enabled:
 $ urpmq -i liferea
[same as above; plus...]
Name        : liferea
Version     : 1.10.11
Release     : 3.1.mga5
Source RPM  : liferea-1.10.11-3.1.mga5.src.rpm

$ urpmq -d liferea | grep ^glib
glib-networking
glib2.0-common
glibc

OKing.

CC: (none) => lewyssmith
Whiteboard: advisory => advisory MGA5-64-OK

Comment 3 José Jorge 2017-06-18 15:48:37 CEST

Tested on i586 with https://linuxfr.org/news.atom

Update fixes the bug.

Whiteboard: advisory MGA5-64-OK => advisory MGA5-64-OK MGA5-32-OK
Status: NEW => ASSIGNED
CC: (none) => lists.jjorge

José Jorge 2017-06-18 15:49:28 CEST

Keywords: Junior_job => validated_update
CC: (none) => sysadmin-bugs

Comment 4 Mageia Robot 2017-06-19 09:44:41 CEST

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2017-0025.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED