August 2022 - Epel-packagers-sig - Fedora Mailing-Lists

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 amctagga(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2115944, 2115952, 2115939, | |2115950, 2115942, 2115935, | |2115934, 2115943, 2115936, | |2115932, 2115948, 2115949, | |2115945, 2115937, 2115946, | |2115933, 2115941, 2115940, | |2115938, 2115947, 2115951 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 year, 9 months

1
0
0 / 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 --- Doc Text *updated* by amctagga(a)redhat.com --- A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 year, 9 months

1
0
0 / 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 amctagga(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2115538, 2115541, 2115545, | |2115551, 2115544, 2115547, | |2115536, 2115550, 2115537, | |2115549, 2115533, 2115546, | |2115534, 2115535, 2115543, | |2115530, 2115532, 2115540, | |2115548, 2115539, 2115531 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 year, 9 months

1
0
0 / 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 --- Doc Text *updated* by amctagga(a)redhat.com --- A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 year, 9 months

1
0
0 / 0

[Bug 2113719] New: python-flask-2.2.0 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2113719 Bug ID: 2113719 Summary: python-flask-2.2.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-flask Keywords: FutureFeature, Triaged Assignee: fzatlouk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: danielmyoung(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, fzatlouk(a)redhat.com, hushan.jia(a)gmail.com, karlthered(a)gmail.com, puiterwijk(a)redhat.com, python-sig(a)lists.fedoraproject.org, tdawson(a)redhat.com, tflink(a)tirfa.us Target Milestone: --- Classification: Fedora Releases retrieved: 2.2.0 Upstream release that is considered latest: 2.2.0 Current version/release in rawhide: 2.1.3-2.fc37 URL: https://pypi.python.org/pypi/Flask Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/3867/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-flask -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2113719

1 year, 9 months

1
7
0 / 0

[Bug 2097310] CVE-2022-2068 openssl: the c_rehash script allows command injection

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2097310 Przemyslaw Roguski <proguski(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|2098089 | -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2097310

1 year, 9 months

1
0
0 / 0

[Bug 2097310] CVE-2022-2068 openssl: the c_rehash script allows command injection

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2097310 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5818 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2097310

1 year, 9 months

1
0
0 / 0

[Bug 2097310] CVE-2022-2068 openssl: the c_rehash script allows command injection

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2097310 --- Comment #18 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:5818 https://access.redhat.com/errata/RHSA-2022:5818 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2097310

1 year, 9 months

1
0
0 / 0

[Bug 2105253] New: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS)

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2105253 Bug ID: 2105253 Summary: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS) Product: Fedora Version: rawhide Status: NEW Component: python-pikepdf Assignee: quantum.analyst(a)gmail.com Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, python-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, zdohnal(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: python-pikepdf won't build with Sphinx 5, because it depends on python-sphinx-panels. Upstream developers of the package deprecated it and proposed migration to sphinx-design. Upstream developers of pikepdf have already migrated to this new dependency in the latest released version 5.3.1: https://github.com/pikepdf/pikepdf/blob/v5.3.1/setup.cfg#L66 Please update the package in Rawhide to make it work with Sphinx 5. Version-Release number of selected component (if applicable): 5.1.3-2 How reproducible: Always Steps to Reproduce: $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ --no-clean <your.src.rpm> $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ shell Actual results: FTBFS -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2105253

1 year, 9 months

1
4
0 / 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5866 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 year, 9 months

1
0
0 / 0

2024

2023

2022

2021

Epel-packagers-sig August 2022