releng

#11651 Pull python-django from EPEL 8
Closed: Fixed with Explanation by humaton. Opened by salimma.

Closed: Fixed with Explanation
Reopen Issue
  • Describe the issue
    python-django in EPEL 8 is really old and affected by CVEs e.g.
    https://bugzilla.redhat.com/show_bug.cgi?id=1781272

python-django3 is already packaged as a replacement.

python-django has been retired from dist-git, but please remove it from the repo as well.

  • When do you need this? (YYYY/MM/DD)
    2023/09/08

  • When is this no longer needed or useful? (YYYY/MM/DD)
    N/A

  • If we cannot complete your request, what is the impact?
    Vulnerable package available for installation

Metadata Update from @phsmoura:
- Issue tagged with: low-gain, low-trouble, ops

List of active builds in epel8 was obtained by running:

$ koji list-history --tag epel8 --package python-django --active
Wed Dec 23 01:14:07 2020 python-django-2.2.17-1.el8 tagged into epel8 by bodhi [still active]
Sat Mar 20 01:22:09 2021 python-django-2.2.19-1.el8 tagged into epel8 by bodhi [still active]
Thu May  6 12:30:25 2021 package list entry created: python-django in epel8 by bodhi [still active]
Thu Sep 16 20:06:22 2021 python-django-2.2.24-1.el8 tagged into epel8 by bodhi [still active]
Fri Sep  1 13:32:04 2023 package owner salimma set for python-django in epel8 by bodhi [still active]

All builds were untagged from epel8 and re-tagged to python-django-epel8-retirement
so the builds will not get garbage collected and we keep them just in case.

koji untag-build epel8 python-django-2.2.24-1.el8 python-django-2.2.19-1.el8 python-django-2.2.17-1.el8

result:

$ koji list-history --tag epel8 --package python-django --active
Thu May  6 12:30:25 2021 package list entry created: python-django in epel8 by bodhi [still active]
Fri Sep  1 13:32:04 2023 package owner salimma set for python-django in epel8 by bodhi [still active]

Builds will be removed from ongoing composes.

Metadata Update from @humaton:
- Issue close_status updated to: Fixed with Explanation
- Issue status updated to: Closed (was: Open)
Metadata
None

low-gain low-trouble ops

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.