August 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2097310] CVE-2022-2068 openssl: the c_rehash script allows command injection
by bugzilla＠redhat.com 03 Aug '22

03 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2097310 --- Comment #18 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:5818 https://access.redhat.com/errata/RHSA-2022:5818 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2097310

1 0

[Bug 2105253] New: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS)
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2105253 Bug ID: 2105253 Summary: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS) Product: Fedora Version: rawhide Status: NEW Component: python-pikepdf Assignee: quantum.analyst(a)gmail.com Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, python-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, zdohnal(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: python-pikepdf won't build with Sphinx 5, because it depends on python-sphinx-panels. Upstream developers of the package deprecated it and proposed migration to sphinx-design. Upstream developers of pikepdf have already migrated to this new dependency in the latest released version 5.3.1: https://github.com/pikepdf/pikepdf/blob/v5.3.1/setup.cfg#L66 Please update the package in Rawhide to make it work with Sphinx 5. Version-Release number of selected component (if applicable): 5.1.3-2 How reproducible: Always Steps to Reproduce: $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ --no-clean <your.src.rpm> $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ shell Actual results: FTBFS -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2105253

1 4

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5866 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 --- Comment #32 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Developer Tools Via RHSA-2022:5866 https://access.redhat.com/errata/RHSA-2022:5866 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5866 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 --- Comment #35 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Developer Tools Via RHSA-2022:5866 https://access.redhat.com/errata/RHSA-2022:5866 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 0

[Bug 2104113] New: native zbar depends on to be removed i686 java-openjdk packages
by bugzilla＠redhat.com 01 Aug '22

01 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2104113 Bug ID: 2104113 Summary: native zbar depends on to be removed i686 java-openjdk packages Product: Fedora Version: rawhide Status: NEW Component: zbar Severity: high Assignee: gwync(a)protonmail.com Reporter: jvanek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dougsland(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, gwync(a)protonmail.com, java-maint-sig(a)lists.fedoraproject.org, jhuttana(a)redhat.com, jvanek(a)redhat.com, mchehab(a)infradead.org, mr.marcelo.barbosa(a)gmail.com, negativo17(a)gmail.com, pmikova(a)redhat.com, sgehwolf(a)redhat.com, zzambers(a)redhat.com Blocks: 2083750 Target Milestone: --- Classification: Fedora Dear maintainer, we are going to drop i686 java packages in f37 - https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs your package (or maybe jsut some subpackage) is directly depending on java and is native. Please take care, and adapt your package to exclude java on i686. For your convenience, there was added macro %{java_arches}, including all arches java is available on, which you can use to ifarch-out java specific features out in i686 (on non-java arches). Although for plain java package, the change is as simple as https://src.fedoraproject.org/rpms/maven/c/520942645bfd1e4721dacd536a6ccbf8…, you can not use it. The ExclusiveArch: %{java_arches} is not going to work for you, because your package is not simple java application, and also non-java world depends on it. See exemplar PR: https://src.fedoraproject.org/rpms/graphviz/pull-request/9#request_diff See more details eg in:: https://bugzilla.redhat.com/show_bug.cgi?id=2102298 See why in : https://pagure.io/fesco/issue/2772 Please read carefully proposal: https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs Please see tracking bug for most up to date informations: https://bugzilla.redhat.com/show_bug.cgi?id=2083750 I'm terribly sorry to report this bug so late in f37 lifecycle. If you can, please handle this with priority. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2083750 [Bug 2083750] Drop i686 builds of jdk8,11,17 and latest (18) rpms from f37 onwards -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2104113

1 1

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 01 Aug '22

01 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5799 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 01 Aug '22

01 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 --- Comment #31 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:5799 https://access.redhat.com/errata/RHSA-2022:5799 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
by bugzilla＠redhat.com 01 Aug '22

01 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2022:5799 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 0

2026

2025

2024

2023

2022

2021

Epel-packagers-sig August 2022