Re: Disable a package for Fedora 26

2018-01-10 Thread Jonny Heggheim
On 01/09/2018 10:09 PM, Kevin Kofler wrote: > Jonny Heggheim wrote: >> I think the best solution, based on my knowledge and available time, is >> to upgrade Fedora 26 to the latest upstream. > So please do that then. The sooner, the better. I agree, pushed updates to bodhi yesterday, it would be g

Re: Disable a package for Fedora 26

2018-01-09 Thread Kevin Kofler
Jonny Heggheim wrote: > I think the best solution, based on my knowledge and available time, is > to upgrade Fedora 26 to the latest upstream. So please do that then. The sooner, the better. > The fixes from upstream are spread on several commits and releases. That is also the case with, e.g., F

Re: Disable a package for Fedora 26

2018-01-09 Thread Jonny Heggheim
Hi Kevin, thanks for your feedback. On 01/09/2018 11:36 AM, Kevin Kofler wrote: > … if you can't do the backport in a reasonable time frame (This > vulnerability is very critical, since it allows remote money stealing!), the > recommendation is to just upgrade to the latest upstream immediately

Re: Disable a package for Fedora 26

2018-01-09 Thread Kevin Kofler
Jonny Heggheim wrote: > We just pused a urgent security update for Electrum for Fedora 27 and > rawhide, Fedora 26 is still affected. > > All versions of Electrum is affected by this bug, Fedora 26 still runs > an older version because of big changes in Electrum 3.0 and an updated > version of a d

Re: Disable a package for Fedora 26

2018-01-08 Thread Kevin Fenzi
On 01/08/2018 06:20 AM, Jonny Heggheim wrote: > Hi! > > We just pused a urgent security update for Electrum for Fedora 27 and > rawhide, Fedora 26 is still affected. > > All versions of Electrum is affected by this bug, Fedora 26 still runs > an older version because of big changes in Electrum 3.

Disable a package for Fedora 26

2018-01-08 Thread Jonny Heggheim
Hi! We just pused a urgent security update for Electrum for Fedora 27 and rawhide, Fedora 26 is still affected. All versions of Electrum is affected by this bug, Fedora 26 still runs an older version because of big changes in Electrum 3.0 and an updated version of a dependency. So I see 3 option