May 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2082387] CVE-2022-29167 hawk: REDoS in hawk.utils.parseHost() when parsing Host header
by bugzilla＠redhat.com 11 May '22

11 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2082387 --- Comment #3 from Dmitry Butskoy <dmitry(a)butskoy.name> --- Looking at the header of https://hg.mozilla.org/releases/mozilla-release/file/tip/services/common/ha…, it seems some another hawk implementation, just mentioning an ancient "https://github.com/hueniverse/hawk" link, and does not have any regexp code for the host parsing. IOW, it seems that even the current upstream Firefox still uses its own hawk implementation, which yet not affected by the issue, since does not use any regexp for host parsing yet. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2082387

1 0

[Bug 2084246] New: python-pytest-randomly-3.12.0 is available
by bugzilla＠redhat.com 11 May '22

11 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2084246 Bug ID: 2084246 Summary: python-pytest-randomly-3.12.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-pytest-randomly Keywords: FutureFeature, Triaged Assignee: mikel(a)olasagasti.info Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mikel(a)olasagasti.info, python-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 3.12.0 Current version/release in rawhide: 3.11.0-2.fc36 URL: https://github.com/pytest-dev/pytest-randomly Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/58472/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2084246

1 2

[Bug 2081905] New: python-stack-data FTBFS with the latest Pygments 2.12.0
by bugzilla＠redhat.com 11 May '22

11 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2081905 Bug ID: 2081905 Summary: python-stack-data FTBFS with the latest Pygments 2.12.0 Product: Fedora Version: rawhide Status: NEW Component: python-stack-data Assignee: lbalhar(a)redhat.com Reporter: cstratak(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, lbalhar(a)redhat.com, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Created attachment 1877168 --> https://bugzilla.redhat.com/attachment.cgi?id=1877168&action=edit build.log python-stack-data presents two assertion errors in tests with building with the latest Pygments 2.12.0 intended for rawhide: =================================== FAILURES =================================== __________________________ test_executing_style_defs ___________________________ def test_executing_style_defs(): style = style_with_executing_node("native", "bg:#ffff00") formatter = HtmlFormatter(style=style) style_defs = formatter.get_style_defs() expected = """ .c { color: #999999; font-style: italic } .err { color: #a61717; background-color: #e3d2d2 } .c-ExecutingNode { color: #999999; font-style: italic; background-color: #ffff00 } .err-ExecutingNode { color: #a61717; background-color: #ffff00 } """.strip().splitlines() for line in expected: > assert line.strip() in style_defs E AssertionError: assert '.c { color: #999999; font-style: italic }' in 'pre { line-height: 125%; }\ntd.linenos .normal { color: #aaaaaa; background-color: transparent; padding-left: 5px; pa...de */\n.il-ExecutingNode { color: #51b2fd; background-color: #ffff00 } /* Literal.Number.Integer.Long.ExecutingNode */' E + where '.c { color: #999999; font-style: italic }' = <built-in method strip of str object at 0x7fecd1c04e10>() E + where <built-in method strip of str object at 0x7fecd1c04e10> = '.c { color: #999999; font-style: italic }'.strip tests/test_core.py:568: AssertionError ____________________________ test_pygments_example _____________________________ def test_pygments_example(): <snip> """ E AssertionError: assert 'Terminal256F...=========\n\n' == 'Terminal256F...=========\n\n' E Skipping 75 identical leading characters in diff, use -v to show E - 39mbar(): E ? ^^ E + 39mbar(): E ? ^^ E - 14 | x = 1 E ? -... E E ...Full output truncated (193 lines hidden), use '-vv' to show tests/test_core.py:620: AssertionError <snip> Full build logs are attached -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2081905

1 5

[Bug 2081497] New: libnice-0.1.19 is available
by bugzilla＠redhat.com 10 May '22

10 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2081497 Bug ID: 2081497 Summary: libnice-0.1.19 is available Product: Fedora Version: rawhide Status: NEW Component: libnice Keywords: FutureFeature, Triaged Assignee: kdudka(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: chemobejk(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, kdudka(a)redhat.com, philip(a)tecnocode.co.uk, svashisht(a)redhat.com, uraeus(a)linuxrising.org Target Milestone: --- Classification: Fedora Latest upstream release: 0.1.19 Current version/release in rawhide: 0.1.18-3.fc36 URL: https://libnice.freedesktop.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1683/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2081497

1 5

[Bug 2075939] New: notmuch-0.36~rc1 is available
by bugzilla＠redhat.com 08 May '22

08 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2075939 Bug ID: 2075939 Summary: notmuch-0.36~rc1 is available Product: Fedora Version: rawhide Status: NEW Component: notmuch Keywords: FutureFeature, Triaged Assignee: mjg(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lewk(a)openmailbox.org, mjg(a)fedoraproject.org, rbean(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 0.36~rc1 Current version/release in rawhide: 0.35-2.fc37 URL: http://notmuchmail.org/releases/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2498/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2075939

1 17

[Bug 2069579] New: Please update to at least 3.7.4.3
by bugzilla＠redhat.com 08 May '22

08 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2069579 Bug ID: 2069579 Summary: Please update to at least 3.7.4.3 Product: Fedora EPEL Version: epel8 Status: NEW Component: python-typing-extensions Assignee: michel(a)michel-slm.name Reporter: lzachar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, hegjon(a)gmail.com, mail(a)fabian-affolter.ch, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Description of problem: Could we get (at least) 3.7.4.3 into the EPEL-8 please? In the testing of tmt package we use requre which uses GitPython which tries to import SupportsIndex. And current packaged version of python3-typing-extensions doesn't have it yet. Version-Release number of selected component (if applicable): python3-typing-extensions-3.7.4.2-1.el8 Additional info: https://github.com/teemtee/tmt/pull/1069#issuecomment-1076704492 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2069579

1 4

[Bug 2081954] New: Please update it to the last version (42)
by bugzilla＠redhat.com 08 May '22

08 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2081954 Bug ID: 2081954 Summary: Please update it to the last version (42) Product: Fedora Version: 34 Status: NEW Component: gnome-shell-extension-appindicator Assignee: ego.cordatus(a)gmail.com Reporter: bugzilla(a)terrortux.de QA Contact: extras-qa(a)fedoraproject.org CC: ego.cordatus(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, hdegoede(a)redhat.com Target Milestone: --- Classification: Fedora -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2081954

1 3

[Bug 2074735] New: libdwarf-0.4.0 is available
by bugzilla＠redhat.com 07 May '22

07 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2074735 Bug ID: 2074735 Summary: libdwarf-0.4.0 is available Product: Fedora Version: rawhide Status: NEW Component: libdwarf Keywords: FutureFeature, Triaged Assignee: tom(a)compton.nu Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jitesh.1337(a)gmail.com, michel(a)michel-slm.name, orion(a)nwra.com, tom(a)compton.nu Target Milestone: --- Classification: Fedora Latest upstream release: 0.4.0 Current version/release in rawhide: 0.3.4-1.fc37 URL: http://www.prevanders.net/dwarf.html Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1597/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2074735

1 5

[Bug 2073738] New: fennel-1.1.0 is available
by bugzilla＠redhat.com 07 May '22

07 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2073738 Bug ID: 2073738 Summary: fennel-1.1.0 is available Product: Fedora Version: rawhide Status: NEW Component: fennel Keywords: FutureFeature, Triaged Assignee: michel(a)michel-slm.name Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lua-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Latest upstream release: 1.1.0 Current version/release in rawhide: 1.0.0-2.fc36 URL: https://fennel-lang.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/22691/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2073738

1 16

[Bug 2073141] New: Busybox segfaults when running any command
by bugzilla＠redhat.com 07 May '22

07 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2073141 Bug ID: 2073141 Summary: Busybox segfaults when running any command Product: Fedora Version: 36 Hardware: x86_64 OS: Linux Status: NEW Component: busybox Assignee: spotrh(a)gmail.com Reporter: fedora(a)mail.mesa42.com QA Contact: extras-qa(a)fedoraproject.org CC: admiller(a)redhat.com, dcavalca(a)fb.com, dvlasenk(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, spotrh(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: Busybox crashes when running any command. Examples: $ busybox cat Segmentation fault (core dumped) $ /usr/sbin/busybox ls -l Segmentation fault (core dumped) $ busybox echo test Segmentation fault (core dumped) Version-Release number of selected component (if applicable): busybox-1.35.0-2.fc36.x86_64 How reproducible: Always, as seen above. Steps to Reproduce: See above. Actual results: Segmentation fault. Expected results: Program working properly. :) Additional info: The coredump as show by coredumpctl always looks the same: $ coredumpctl info PID: 7739 (busybox) UID: 1000 (rg3) GID: 1000 (rg3) Signal: 11 (SEGV) Timestamp: Thu 2022-04-07 19:58:18 CEST (2min 8s ago) Command Line: busybox echo test Executable: /usr/sbin/busybox Control Group: /user.slice/user-1000.slice/user@1000.service/app.slice/app-org.gnome.Terminal.slice/gnome-terminal-server.service Unit: user(a)1000.service User Unit: gnome-terminal-server.service Slice: user-1000.slice Owner UID: 1000 (rg3) Boot ID: 12b9764a50714b8a81593063f86c5ab6 Machine ID: 413dd3eafb9b4998949e24db6549c493 Hostname: deckard Storage: /var/lib/systemd/coredump/core.busybox.1000.12b9764a50714b8a81593063f86c5ab6.7739.1649354298000000.zst (present) Disk Size: 10.8K Package: busybox/1.35.0-2.fc36 build-id: 88baa87c0a47de9361e9abdbea1d01d5ee79f832 Message: Process 7739 (busybox) of user 1000 dumped core. Module /usr/sbin/busybox with build-id 88baa87c0a47de9361e9abdbea1d01d5ee79f832 Metadata for module /usr/sbin/busybox owned by FDO found: { "type" : "rpm", "name" : "busybox", "version" : "1.35.0-2.fc36", "architecture" : "x86_64", "osCpe" : "cpe:/o:fedoraproject:fedora:36" } Module linux-vdso.so.1 with build-id 1e1f6d732d4ae146d998a78a133181ef56456893 Stack trace of thread 7739: #0 0x0000000000409597 parse_config_file (/usr/sbin/busybox + 0x9597) #1 0x00000000004098f6 main (/usr/sbin/busybox + 0x98f6) #2 0x00000000004fdd9e __uClibc_main (/usr/sbin/busybox + 0xfdd9e) #3 0x0000000000401998 _start (/usr/sbin/busybox + 0x1998) ELF object binary architecture: AMD x86-64 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2073141

1 4

2024

2023

2022

2021

Epel-packagers-sig May 2022