[SRU to impish] Mitigate KNS load on KDE servers
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| plasma-discover (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
| Impish |
Fix Released
|
Undecided
|
Unassigned | ||
Bug Description
See: https:/
Dear distributors,
In the last few days, we have been looking into mitigating the impact
of Discover against certain KDE web services.
Some of the problems can be addressed in the service itself but not
them entirely, so it would be useful if the following changes were
backported into your own packaging. We have already included it in our
stable branches but on the distributions that ship unsupported
versions of our software it would be useful you can apply these
patches.
https:/
https:/
https:/
https:/
If you feel unsure about the patch on a specific branch, feel free to
contact me here or in private and I will backport it if necessary.
Impact]
* Effectively a DDOS on some KDE servers that were not intended to take this traffic
[Test Plan]
* Test that Discover functions normally with the changes. e.g. KNS, packagekit, snap backends work as intended.
[Where problems could occur]
* Could fail to fetch resources, crash etc. It will need to be tested with a reasonable sample of these that this does not happen.
| Changed in plasma-discover (Ubuntu Impish): | |
| status: | New → In Progress |
| Łukasz Zemczak (sil2100) wrote Please test proposed package | #1 |
| Changed in plasma-discover (Ubuntu Impish): | |
| status: | In Progress → Fix Committed |
| tags: | added: verification-needed verification-needed-impish |
| Łukasz Zemczak (sil2100) wrote | #2 |
| Rik Mills (rikmills) wrote Re: [Bug 1962449] Re: [SRU to impish] Mitigate KNS load on KDE servers | #3 |
| Marco Parillo (marco-parillo) wrote | #4 |
| Rik Mills (rikmills) wrote | #5 |
| Rik Mills (rikmills) wrote | #6 |
| tags: |
added: verification-done verification-done-impish removed: verification-needed verification-needed-impish |
| Launchpad Janitor (janitor) wrote | #7 |
| Changed in plasma-discover (Ubuntu Impish): | |
| status: | Fix Committed → Fix Released |
| Łukasz Zemczak (sil2100) wrote Update Released | #8 |
Hello Rik, or anyone else affected,
Accepted plasma-discover into impish-proposed. The package will build now and be available at https:/
Please help us by testing this new package. See https:/
If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-
Further information regarding the verification process can be found at https:/
N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.