From e6a88c0c84bf8d832c7640777a481c75b4b58268 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 20 Dec 2023 11:44:00 +0100
Subject: disable repo_gpgcheck as it raise too much issue being proxy and
 CVE-2021-20271 is fixed in rpm

---
 remi-modular.repo | 9 +++++----
 remi-release.spec | 8 ++++++--
 remi-safe.repo    | 5 +++--
 remi.repo         | 9 +++++----
 4 files changed, 19 insertions(+), 12 deletions(-)

diff --git a/remi-modular.repo b/remi-modular.repo
index a77e64a..3047026 100644
--- a/remi-modular.repo
+++ b/remi-modular.repo
@@ -9,7 +9,8 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-debuginfo]
@@ -19,7 +20,7 @@ name=Remi's Modular repository for Enterprise Linux VERSION - $basearch - debugi
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-test]
@@ -29,7 +30,7 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-modular-test-debuginfo]
@@ -39,6 +40,6 @@ name=Remi's Modular testing repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/debug-modular-test/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
diff --git a/remi-release.spec b/remi-release.spec
index 23e84b5..65ee1b6 100644
--- a/remi-release.spec
+++ b/remi-release.spec
@@ -10,12 +10,12 @@ Name:           remi-release
 %if %{?rhel} == 9
 # Match point release version
 Version:        9.3
-Release:        1%{?dist}
+Release:        2%{?dist}
 %endif
 %if %{?rhel} == 8
 # Match point release version
 Version:        8.9
-Release:        1%{?dist}
+Release:        2%{?dist}
 %endif
 Summary:        YUM configuration for remi repository
 Summary(fr):    Configuration de YUM pour le dépôt remi
@@ -159,6 +159,10 @@ mkdir -p %{buildroot}/opt/remi
 
 
 %changelog
+* Wed Dec 20 2023 Remi Collet <remi@remirepo.net> - 8.9-2 and 9.3-2
+- disable repo_gpgcheck as it raise too much issue being proxy
+  and CVE-2021-20271 is fixed in rpm
+
 * Tue Dec 19 2023 Remi Collet <remi@remirepo.net> - 8.9-1 and 9.3-1
 - raise dependency on redhat-release >= 8.9 or 9.3
 
diff --git a/remi-safe.repo b/remi-safe.repo
index 6e9dd63..bf278de 100644
--- a/remi-safe.repo
+++ b/remi-safe.repo
@@ -9,7 +9,8 @@ name=Safe Remi's RPM repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/safe/$basearch/mirror
 enabled=1
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-safe-debuginfo]
@@ -17,5 +18,5 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
diff --git a/remi.repo b/remi.repo
index 2f54615..6e5adf8 100644
--- a/remi.repo
+++ b/remi.repo
@@ -9,7 +9,8 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch
 mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/remi/$basearch/mirror
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+# can be enabled if not being a proxy because of possible cache issue
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-test]
@@ -20,7 +21,7 @@ mirrorlist=http://cdn.remirepo.net/enterprise/VERSION/test/$basearch/mirror
 # WARNING: If you enable this repository, you must also enable "remi"
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-debuginfo]
@@ -28,7 +29,7 @@ name=Remi's RPM repository for Enterprise Linux VERSION - $basearch - debuginfo
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-remi/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
 [remi-test-debuginfo]
@@ -36,6 +37,6 @@ name=Remi's test RPM repository for Enterprise Linux VERSION - $basearch - debug
 baseurl=http://rpms.remirepo.net/enterprise/VERSION/debug-test/$basearch/
 enabled=0
 gpgcheck=1
-repo_gpgcheck=1
+repo_gpgcheck=0
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.elVERSION
 
-- 
cgit