October 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2128527] New: Rebase python-nbxmpp to 3.2.2 in EPEL 9
by bugzilla＠redhat.com 02 Mar '24

02 Mar '24

https://bugzilla.redhat.com/show_bug.cgi?id=2128527 Bug ID: 2128527 Summary: Rebase python-nbxmpp to 3.2.2 in EPEL 9 Product: Fedora EPEL Version: epel9 Hardware: All OS: Linux Status: NEW Component: python-nbxmpp Severity: medium Assignee: redhat-bugzilla(a)linuxnetz.de Reporter: redhat-bugzilla(a)linuxnetz.de QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mschmidt(a)redhat.com, suraia(a)ikkoku.de Depends On: 2122047 Blocks: 2128525 Target Milestone: --- Classification: Fedora Rebase python-nbxmpp to 3.2.2 in EPEL 9 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2122047 [Bug 2122047] python-nbxmpp-3.2.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2128525 [Bug 2128525] Rebase gajim to 1.5.1 in EPEL 9 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2128527

1 2

[Bug 2127039] New: Please branch and build python3-pygraphviz in epel9
by bugzilla＠redhat.com 18 Jan '24

18 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2127039 Bug ID: 2127039 Summary: Please branch and build python3-pygraphviz in epel9 Product: Fedora EPEL Version: epel9 Status: NEW Component: python-pygraphviz Assignee: zbyszek(a)in.waw.pl Reporter: romain.geissler(a)amadeus.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, logans(a)cottsay.net, python-sig(a)lists.fedoraproject.org, zbyszek(a)in.waw.pl Target Milestone: --- Classification: Fedora Please branch and build python3-pygraphviz in epel9. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2127039

1 10

[Bug 2132180] New: python-numpydoc-1.5.0rc1 is available
by bugzilla＠redhat.com 01 Jan '24

01 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2132180 Bug ID: 2132180 Summary: python-numpydoc-1.5.0rc1 is available Product: Fedora Version: rawhide Status: NEW Component: python-numpydoc Keywords: FutureFeature, Triaged Assignee: python-packagers-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, orion(a)nwra.com, python-packagers-sig(a)lists.fedoraproject.org, tomspur(a)fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.5.0rc1 Upstream release that is considered latest: 1.5.0rc1 Current version/release in rawhide: 1.4.0-1.fc38 URL: https://pypi.python.org/pypi/numpydoc Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/10343/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-numpydoc -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2132180

1 15

[Bug 2125635] New: [abrt] zbar-qt: XCreateGC(): zbarcam-qt killed by SIGSEGV
by bugzilla＠redhat.com 05 Dec '23

05 Dec '23

https://bugzilla.redhat.com/show_bug.cgi?id=2125635 Bug ID: 2125635 Summary: [abrt] zbar-qt: XCreateGC(): zbarcam-qt killed by SIGSEGV Product: Fedora Version: 37 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:078632a70931f6bcf0d3a737df94c2bb4c797b8b;VAR IANT_ID=workstation; Component: zbar Assignee: gwync(a)protonmail.com Reporter: remyabel(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: dougsland(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, gwync(a)protonmail.com, mchehab(a)infradead.org, mr.marcelo.barbosa(a)gmail.com, negativo17(a)gmail.com Target Milestone: --- Classification: Fedora Version-Release number of selected component: zbar-qt-0.23.90-5.fc37 Additional info: reporter: libreport-2.17.2 backtrace_rating: 3 cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/app-org.gnome.Terminal.slice/vte-spawn-3fe4439d-5e15-4c55-880f-64488f2bf4b7.scope cmdline: zbarcam-qt crash_function: XCreateGC executable: /usr/bin/zbarcam-qt journald_cursor: s=759f6b6667fc40deb238abf796413863;i=4906;b=8bb2ff6253eb43b991e38d34d1424771;m=ea673b49;t=5e83e9c99f6b5;x=320ffbe6a9d0ebd3 kernel: 5.19.7-300.fc37.x86_64 rootdir: / runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 XCreateGC at /usr/src/debug/libX11-1.8.1-2.fc37.x86_64/src/CrGC.c:74 #1 _zbar_window_attach at window/x.c:168 #2 zbar_window_attach at /usr/src/debug/zbar-0.23.90-5.fc37.x86_64/zbar/window.c:73 #3 zbar::Window::attach at ./include/zbar/Window.h:75 #4 zbar::QZBar::changeEvent at qt/QZBar.cpp:337 #5 QWidget::event at kernel/qwidget.cpp:8975 #6 QApplicationPrivate::notify_helper at kernel/qapplication.cpp:3637 #7 QCoreApplication::notifyInternal2 at kernel/qcoreapplication.cpp:1064 #8 QWidget::setParent at kernel/qwidget.cpp:10505 #10 QLayoutPrivate::reparentChildWidgets at kernel/qlayout.cpp:841 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2125635

1 2

[Bug 2065645] New: Gmime 3.2.9 is available
by bugzilla＠redhat.com 01 Dec '23

01 Dec '23

https://bugzilla.redhat.com/show_bug.cgi?id=2065645 Bug ID: 2065645 Summary: Gmime 3.2.9 is available Product: Fedora Version: rawhide Hardware: All Status: NEW Component: gmime30 Severity: medium Assignee: klember(a)redhat.com Reporter: mjg(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, klember(a)redhat.com Target Milestone: --- Link ID: Github jstedfast/gmime/releases/tag/3.2.9 Classification: Fedora Description of problem: Gmime 3.2.7 as packaged is outdated (Mar 2020). Version-Release number of selected component (if applicable): 3.2.7-5 How reproducible: always Steps to Reproduce: 1. dnf list gmime30 Actual results: gmime30-3.2.7 Expected results: gmime30-3.2.9 Additional info: The real upstream has been at https://github.com/jstedfast/gmime/ for quite some time now (not on gnome any more, and never on gitlab). -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2065645

1 12

[Bug 2078238] New: gssdp-1.5.0 is available
by bugzilla＠redhat.com 22 Nov '23

22 Nov '23

https://bugzilla.redhat.com/show_bug.cgi?id=2078238 Bug ID: 2078238 Summary: gssdp-1.5.0 is available Product: Fedora Version: rawhide Status: NEW Component: gssdp Keywords: FutureFeature, Triaged Assignee: klember(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, klember(a)redhat.com, zeenix(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.5.0 Current version/release in rawhide: 1.4.0.1-2.fc36 URL: https://developer.gnome.org/gssdp/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1262/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2078238

1 27

[Bug 2081494] New: CVE-2022-1292 openssl: c_rehash script allows command injection
by bugzilla＠redhat.com 08 Nov '23

08 Nov '23

https://bugzilla.redhat.com/show_bug.cgi?id=2081494 Bug ID: 2081494 Summary: CVE-2022-1292 openssl: c_rehash script allows command injection Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: pdelbell(a)redhat.com CC: aos-bugs(a)redhat.com, asoldano(a)redhat.com, bbaranow(a)redhat.com, bdettelb(a)redhat.com, berrange(a)redhat.com, bmaxwell(a)redhat.com, bootloader-eng-team(a)redhat.com, brian.stansberry(a)redhat.com, caswilli(a)redhat.com, cdewolf(a)redhat.com, cfergeau(a)redhat.com, chazlett(a)redhat.com, crobinso(a)redhat.com, crypto-team(a)lists.fedoraproject.org, csutherl(a)redhat.com, darran.lofthouse(a)redhat.com, dbelyavs(a)redhat.com, ddepaula(a)redhat.com, dhalasz(a)redhat.com, dkreling(a)redhat.com, dkuc(a)redhat.com, dosoudil(a)redhat.com, dueno(a)redhat.com, elima(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, erik-fedora(a)vanpienbroek.nl, f4bug(a)amsat.org, fjansen(a)redhat.com, fjuma(a)redhat.com, fmartine(a)redhat.com, gparvin(a)redhat.com, gzaronik(a)redhat.com, iweiss(a)redhat.com, jburrell(a)redhat.com, jclere(a)redhat.com, jferlan(a)redhat.com, jkoehler(a)redhat.com, jochrist(a)redhat.com, jramanat(a)redhat.com, jwong(a)redhat.com, jwon(a)redhat.com, kaycoth(a)redhat.com, krathod(a)redhat.com, kraxel(a)redhat.com, ktietz(a)redhat.com, lgao(a)redhat.com, marcandre.lureau(a)redhat.com, michal.skrivanek(a)redhat.com, michel(a)michel-slm.name, micjohns(a)redhat.com, mjg59(a)srcf.ucam.org, mosmerov(a)redhat.com, mperina(a)redhat.com, msochure(a)redhat.com, mspacek(a)redhat.com, msvehla(a)redhat.com, mturk(a)redhat.com, njean(a)redhat.com, nwallace(a)redhat.com, pahickey(a)redhat.com, pbonzini(a)redhat.com, pjindal(a)redhat.com, pjones(a)redhat.com, pmackay(a)redhat.com, redhat-bugzilla(a)linuxnetz.de, rfreiman(a)redhat.com, rharwood(a)redhat.com, rh-spice-bugs(a)redhat.com, rjones(a)redhat.com, rstancel(a)redhat.com, rsvoboda(a)redhat.com, sahana(a)redhat.com, sbonazzo(a)redhat.com, smaestri(a)redhat.com, stcannon(a)redhat.com, sthirugn(a)redhat.com, szappis(a)redhat.com, tmeszaro(a)redhat.com, tm(a)t8m.info, tom.jenkinson(a)redhat.com, virt-maint(a)lists.fedoraproject.org, virt-maint(a)redhat.com, vkrizan(a)redhat.com, vkumar(a)redhat.com, vmugicag(a)redhat.com Target Milestone: --- Classification: Other The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. OpenSSL 1.0.2 users should upgrade to 1.0.2ze OpenSSL 1.1.1 users should upgrade to 1.1.1o OpenSSL 3.0 users should upgrade to 3.0.3 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2081494

1 53

[Bug 2138645] New: python-utils-3.4.5 is available
by bugzilla＠redhat.com 30 Aug '23

30 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=2138645 Bug ID: 2138645 Summary: python-utils-3.4.5 is available Product: Fedora Version: rawhide Status: NEW Component: python-utils Keywords: FutureFeature, Triaged Assignee: mhroncok(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mhroncok(a)redhat.com, python-packagers-sig(a)lists.fedoraproject.org, thomas.andrejak(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5 Upstream release that is considered latest: 3.4.5 Current version/release in rawhide: 3.3.3-1.fc38 URL: https://github.com/WoLpH/python-utils Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12707/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-utils -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2138645

1 19

[Bug 2128273] New: Please port your pcre dependency to pcre2. Pcre has been deprecated
by bugzilla＠redhat.com 22 Jun '23

22 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2128273 Bug ID: 2128273 Summary: Please port your pcre dependency to pcre2. Pcre has been deprecated Product: Fedora Version: rawhide Status: NEW Component: ccze Assignee: dcavalca(a)fb.com Reporter: ljavorsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, pahan(a)hubbitus.info Target Milestone: --- Classification: Fedora Pcre has been deprecated since Fedora 38. Please consider porting to the new pcre2 version. Fedora change that describes the pcre deprecation is located here: https://fedoraproject.org/wiki/PcreDeprecation FESCo approval is located here: https://pagure.io/fesco/issue/2862 If your component has already ported to pcre2 or you don't Require/BuildRequire any pcre subpackage, feel free to close this Bugzilla. This Bugzilla was created automatically and some issues might have occurred along the way. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2128273

1 1

[Bug 2090572] New: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all]
by bugzilla＠redhat.com 16 Jun '23

16 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2090572 Bug ID: 2090572 Summary: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: thrift Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: ctubbsii(a)fedoraproject.org Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, milleruntime(a)gmail.com, orion(a)nwra.com, willb(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2090572

1 3

2024

2023

2022

2021

Epel-packagers-sig October 2022