May 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2087912] CVE-2022-1434 openssl: Incorrect MAC key used in the RC4-MD5 ciphersuite
by bugzilla＠redhat.com 27 May '22

27 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087912 Dmitry Belyavskiy <dbelyavs(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(dbelyavs(a)redhat.c | |om) | -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087912

1 0

[Bug 2087912] CVE-2022-1434 openssl: Incorrect MAC key used in the RC4-MD5 ciphersuite
by bugzilla＠redhat.com 27 May '22

27 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087912 Todd Cullum <tcullum(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |NEW Resolution|NOTABUG |--- Keywords| |Reopened -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087912

1 0

[Bug 2087912] CVE-2022-1434 openssl: Incorrect MAC key used in the RC4-MD5 ciphersuite
by bugzilla＠redhat.com 27 May '22

27 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087912 Todd Cullum <tcullum(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(dbelyavs(a)redhat.c | |om) -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087912

1 0

[Bug 2087911] CVE-2022-1343 openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087911 --- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> --- A flaw was found in OpenSSL's Online Certificate Status Protocol (OCSP) response functionality in the signer certificate verification routines. This flaw could result in a linked application falsely believing that an x.509 Digital Certificate is either "good" or "unknown" when revoked and requires that the application use a non-default configuration. This vulnerability leads to an issue with data integrity and confidentiality. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087911

1 0

[Bug 2087913] CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087913 --- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> --- A memory leak flaw was found in OpenSSL, resulting in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker needs to repeat actions continuously to trigger this vulnerability, resulting in a loss of application availability. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087913

1 0

[Bug 2075405] New: python-flit fails to build with Python 3.11: AssertionError: assert None == 'readme.md'
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2075405 Bug ID: 2075405 Summary: python-flit fails to build with Python 3.11: AssertionError: assert None == 'readme.md' Product: Fedora Version: rawhide Status: NEW Component: python-flit Assignee: mhroncok(a)redhat.com Reporter: thrnciar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mhroncok(a)redhat.com, michel(a)michel-slm.name, python-sig(a)lists.fedoraproject.org, thrnciar(a)redhat.com Blocks: 2016048 (PYTHON3.11) Target Milestone: --- Classification: Fedora python-flit fails to build with Python 3.11.0a7. =================================== FAILURES =================================== _________________________ test_find_readme[readme.md] __________________________ readme_file = 'readme.md' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'readme.md' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef22533d0>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef22533d0>> = <flit.init.IniterBase object at 0x7fdef22533d0>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[README.MD] __________________________ readme_file = 'README.MD' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'README.MD' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef200acd0>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef200acd0>> = <flit.init.IniterBase object at 0x7fdef200acd0>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[README.md] __________________________ readme_file = 'README.md' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'README.md' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef2026b50>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef2026b50>> = <flit.init.IniterBase object at 0x7fdef2026b50>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[Readme.md] __________________________ readme_file = 'Readme.md' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'Readme.md' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef1fe3010>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef1fe3010>> = <flit.init.IniterBase object at 0x7fdef1fe3010>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[readme.MD] __________________________ readme_file = 'readme.MD' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'readme.MD' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef32c6b50>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef32c6b50>> = <flit.init.IniterBase object at 0x7fdef32c6b50>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[readme.rst] _________________________ readme_file = 'readme.rst' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'readme.rst' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef32e4d10>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef32e4d10>> = <flit.init.IniterBase object at 0x7fdef32e4d10>.find_readme tests/test_init.py:196: AssertionError _________________________ test_find_readme[readme.txt] _________________________ readme_file = 'readme.txt' @pytest.mark.parametrize( "readme_file", ["readme.md", "README.MD", "README.md", "Readme.md", "readme.MD", "readme.rst", "readme.txt"]) def test_find_readme(readme_file): with make_dir([readme_file]) as td: ib = init.IniterBase(td) > assert ib.find_readme() == readme_file E AssertionError: assert None == 'readme.txt' E + where None = <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef3263a50>>() E + where <bound method IniterBase.find_readme of <flit.init.IniterBase object at 0x7fdef3263a50>> = <flit.init.IniterBase object at 0x7fdef3263a50>.find_readme tests/test_init.py:196: AssertionError ______________________ test_init_readme_found_yes_choosen ______________________ def test_init_readme_found_yes_choosen(): responses = ['test_module_name', 'Test Author', 'test_email(a)example.com', '', # Home page omitted '4', # Skip - choose a license later ] with make_dir(["readme.md"]) as td, \ patch_data_dir(), \ faking_input(responses): ti = init.TerminalIniter(td) ti.initialise() with Path(td, 'pyproject.toml').open('rb') as f: data = tomli.load(f) > assert data['project'] == { 'authors': [{'name': 'Test Author', 'email': 'test_email(a)example.com'}], 'name': 'test_module_name', 'readme': 'readme.md', 'dynamic': ['version', 'description'], } E AssertionError: assert {'authors': [..._module_name'} == {'authors': [...: 'readme.md'} E Omitting 3 identical items, use -vv to show E Right contains 1 more item: E {'readme': 'readme.md'} E Use -v to get the full diff tests/test_init.py:220: AssertionError ----------------------------- Captured stdout call ----------------------------- Choose a license (see http://choosealicense.com/ for more info) 1. MIT - simple and permissive 2. Apache - explicitly grants patent rights 3. GPL - ensures that code based on this is shared with the same terms 4. Skip - choose a license later Written pyproject.toml; edit that file to add optional extra info. =========================== short test summary info ============================ FAILED tests/test_init.py::test_find_readme[readme.md] - AssertionError: asse... FAILED tests/test_init.py::test_find_readme[README.MD] - AssertionError: asse... FAILED tests/test_init.py::test_find_readme[README.md] - AssertionError: asse... FAILED tests/test_init.py::test_find_readme[Readme.md] - AssertionError: asse... FAILED tests/test_init.py::test_find_readme[readme.MD] - AssertionError: asse... FAILED tests/test_init.py::test_find_readme[readme.rst] - AssertionError: ass... FAILED tests/test_init.py::test_find_readme[readme.txt] - AssertionError: ass... FAILED tests/test_init.py::test_init_readme_found_yes_choosen - AssertionErro... =================== 8 failed, 192 passed, 2 skipped in 4.96s =================== https://docs.python.org/3.11/whatsnew/3.11.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.11/fedora-r… For all our attempts to build python-flit with Python 3.11, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.11/package/python-… Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.11: https://copr.fedorainfracloud.org/coprs/g/python/python3.11/ Let us know here if you have any questions. Python 3.11 is planned to be included in Fedora 37. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.11. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2016048 [Bug 2016048] Python 3.11 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2075405

1 2

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 Product Security DevOps Team <prodsec-dev(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(security-response |needinfo?(mcascell(a)redhat.c |-team(a)redhat.com) |om) -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 Asmita <agawand(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |agawand(a)redhat.com Flags| |needinfo?(security-response | |-team(a)redhat.com) -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2080476] New: ipython-8.3.0 is available
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2080476 Bug ID: 2080476 Summary: ipython-8.3.0 is available Product: Fedora Version: rawhide Status: NEW Component: ipython Keywords: FutureFeature, Triaged Assignee: lbalhar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dcantrell(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, lbalhar(a)redhat.com, mhroncok(a)redhat.com, michel(a)michel-slm.name, mrunge(a)redhat.com, orion(a)nwra.com, python-sig(a)lists.fedoraproject.org, tomspur(a)fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 8.3.0 Current version/release in rawhide: 8.2.0-1.fc37 URL: https://ipython.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1399/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2080476

1 7

[Bug 2087913] CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
by bugzilla＠redhat.com 25 May '22

25 May '22

https://bugzilla.redhat.com/show_bug.cgi?id=2087913 --- Doc Text *updated* by Todd Cullum <tcullum(a)redhat.com> --- There's a memory leak flaw in openssl that could result in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker would need to repeat actions to a persistent process in order to trigger this vulnerability. The impact here is to application availability. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2087913

1 0

2024

2023

2022

2021

Epel-packagers-sig May 2022