#2960 FESCo blocker bug: Popular third-party RPMs fail to install/update/remove in F38 due to security policies verification(sgallagh, 17:04:09)
AGREED: FESCo agrees
to block Beta for this issue. In order to unblock, RPM must accept
SHA-1 hashes and DSA keys for Fedora 38, ideally with a deprecation
warning that it will be disabled in F39. FESCo strongly advises
against allowing these algorithms elsewhere, but will accept that
for F38 if it's the only achievable, timely solution. (+8, 0,
-0)(sgallagh,
17:33:23)
#2951 Proposal: policy for resubmitting rejected proposals(sgallagh, 17:33:46)
#2956 Does FESCo want to implement the policy for retiring packages(sgallagh, 18:10:47)
AGREED: In the
current environment, FESCo feels that the CVE bug process is
insufficient to support implementing this policy. This can be
revisited in the future if conditions improve. (+6, 0, -0)(sgallagh,
18:23:40)