October 2023 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2222512] New: CVE-2022-25883 yarnpkg: nodejs-semver: Regular expression denial of service [epel-all]
by bugzilla＠redhat.com 24 Oct '24

24 Oct '24

https://bugzilla.redhat.com/show_bug.cgi?id=2222512 Bug ID: 2222512 Summary: CVE-2022-25883 yarnpkg: nodejs-semver: Regular expression denial of service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: yarnpkg Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: zsvetlik(a)redhat.com Reporter: trathi(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, ngompa13(a)gmail.com, zsvetlik(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2216475 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2222512 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2220677] New: CVE-2023-26136 yarnpkg: tough-cookie: prototype pollution in cookie memstore [epel-all]
by bugzilla＠redhat.com 24 Oct '24

24 Oct '24

https://bugzilla.redhat.com/show_bug.cgi?id=2220677 Bug ID: 2220677 Summary: CVE-2023-26136 yarnpkg: tough-cookie: prototype pollution in cookie memstore [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: yarnpkg Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: zsvetlik(a)redhat.com Reporter: ahanwate(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, ngompa13(a)gmail.com, zsvetlik(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2219310 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2220677 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2240723] New: python-utils-3.8.1 is available
by bugzilla＠redhat.com 08 Oct '24

08 Oct '24

https://bugzilla.redhat.com/show_bug.cgi?id=2240723 Bug ID: 2240723 Summary: python-utils-3.8.1 is available Product: Fedora Version: rawhide Status: NEW Component: python-utils Keywords: FutureFeature, Triaged Assignee: mhroncok(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mhroncok(a)redhat.com, python-packagers-sig(a)lists.fedoraproject.org, thomas.andrejak(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 3.8.0, 3.8.1 Upstream release that is considered latest: 3.8.1 Current version/release in rawhide: 3.7.0-1.fc40 URL: https://github.com/WoLpH/python-utils Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12707/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-utils -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2240723 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 13

[Bug 2231642] New: GraphicsMagick-1.3.41 is available
by bugzilla＠redhat.com 02 Oct '24

02 Oct '24

https://bugzilla.redhat.com/show_bug.cgi?id=2231642 Bug ID: 2231642 Summary: GraphicsMagick-1.3.41 is available Product: Fedora Version: rawhide Status: NEW Component: GraphicsMagick Keywords: FutureFeature, Triaged Assignee: andreas(a)bawue.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: andreas(a)bawue.net, davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, ngompa13(a)gmail.com, rdieter(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.3.41 Upstream release that is considered latest: 1.3.41 Current version/release in rawhide: 1.3.40-3.fc39 URL: http://www.graphicsmagick.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1248/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/GraphicsMagick -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2231642 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

[Bug 2210415] New: gajim-1.8.0 is available
by bugzilla＠redhat.com 30 Sep '24

30 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2210415 Bug ID: 2210415 Summary: gajim-1.8.0 is available Product: Fedora Version: rawhide Status: NEW Component: gajim Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lemenkov(a)gmail.com, mschmidt(a)redhat.com, redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 1.8.0 Upstream release that is considered latest: 1.8.0 Current version/release in rawhide: 1.7.3-2.fc39 URL: https://gajim.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/870/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/gajim -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210415

1 37

[Bug 2245891] New: python-memcached fails to build with Python 3.13: Directory not found: /builddir/build/BUILDROOT/python-memcached-1.59-11.fc40.x86_64/usr/lib/python3.13/site-packages/python_memcached-1.59-py*.egg-info
by bugzilla＠redhat.com 27 Sep '24

27 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2245891 Bug ID: 2245891 Summary: python-memcached fails to build with Python 3.13: Directory not found: /builddir/build/BUILDROOT/python-memcached-1.59-11.fc4 0.x86_64/usr/lib/python3.13/site-packages/python_memca ched-1.59-py*.egg-info Product: Fedora Version: rawhide Status: NEW Component: python-memcached Assignee: karlthered(a)gmail.com Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: apevec(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, karlthered(a)gmail.com, kevin(a)scrye.com, ksurma(a)redhat.com, mhroncok(a)redhat.com, python-packagers-sig(a)lists.fedoraproject.org, sgallagh(a)redhat.com Blocks: 2244836 (PYTHON3.13) Target Milestone: --- Classification: Fedora python-memcached fails to build with Python 3.13.0a1. This report is automated and not very verbose, but we'll try to get back here with details. RPM build errors: Directory not found: /builddir/build/BUILDROOT/python-memcached-1.59-11.fc40.x86_64/usr/lib/python3.13/site-packages/python_memcached-1.59-py*.egg-info Instead, python_memcached-0.0.0-py3.13.egg-info is produced during the build. https://docs.python.org/3.13/whatsnew/3.13.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.13/fedora-r… For all our attempts to build python-memcached with Python 3.13, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.13/package/python-… Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.13: https://copr.fedorainfracloud.org/coprs/g/python/python3.13/ Let us know here if you have any questions. Python 3.13 is planned to be included in Fedora 41. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.13. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2244836 [Bug 2244836] Python 3.13 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2245891 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2174149] New: python-claripy-9.2.40 is available
by bugzilla＠redhat.com 27 Sep '24

27 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2174149 Bug ID: 2174149 Summary: python-claripy-9.2.40 is available Product: Fedora Version: rawhide Status: NEW Component: python-claripy Keywords: FutureFeature, Triaged Assignee: mail(a)fabian-affolter.ch Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mail(a)fabian-affolter.ch, redhat(a)flyn.org Target Milestone: --- Classification: Fedora Releases retrieved: 9.2.40 Upstream release that is considered latest: 9.2.40 Current version/release in rawhide: 9.2.39-1.fc39 URL: https://pypi.org/project/claripy/8.19.10.29 Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/34905/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-claripy -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2174149

1 83

[Bug 2210464] New: python-nbxmpp-4.3.0 is available
by bugzilla＠redhat.com 19 Sep '24

19 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2210464 Bug ID: 2210464 Summary: python-nbxmpp-4.3.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-nbxmpp Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mschmidt(a)redhat.com, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 4.3.0 Upstream release that is considered latest: 4.3.0 Current version/release in rawhide: 4.2.2-1.fc39 URL: https://dev.gajim.org/gajim/python-nbxmpp/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12980/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-nbxmpp -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210464

1 44

[Bug 2235168] New: python-kaptan-0.6.0 is available
by bugzilla＠redhat.com 18 Sep '24

18 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2235168 Bug ID: 2235168 Summary: python-kaptan-0.6.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-kaptan Keywords: FutureFeature, Triaged Assignee: mail(a)fabian-affolter.ch Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, mail(a)fabian-affolter.ch, randy(a)electronsweatshop.com Target Milestone: --- Classification: Fedora Releases retrieved: 0.6.0 Upstream release that is considered latest: 0.6.0 Current version/release in rawhide: 0.5.12-19.fc39 URL: https://pypi.python.org/pypi/kaptan Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12749/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-kaptan -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2235168 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2245465] New: python-postorius-1.3.10 is available
by bugzilla＠redhat.com 18 Sep '24

18 Sep '24

https://bugzilla.redhat.com/show_bug.cgi?id=2245465 Bug ID: 2245465 Summary: python-postorius-1.3.10 is available Product: Fedora Version: rawhide Status: NEW Component: python-postorius Keywords: FutureFeature, Triaged Assignee: michel(a)michel-slm.name Reporter: upstream-release-monitoring(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, ngompa13(a)gmail.com, python-packagers-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.3.9, 1.3.10 Upstream release that is considered latest: 1.3.10 Current version/release in rawhide: 1.3.8-3.fc39 URL: https://pypi.org/project/postorius Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/54848/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-postorius -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2245465 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 8

2025

2024

2023

2022

2021

Epel-packagers-sig October 2023