December 2023 - Epel-packagers-sig - Fedora Mailing-Lists

[Bug 2255322] New: asterisk: PJSIP logging allows attacker to inject fake Asterisk log entries [epel-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2255322 Bug ID: 2255322 Summary: asterisk: PJSIP logging allows attacker to inject fake Asterisk log entries [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: asterisk Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: epel-packagers-sig(a)lists.fedoraproject.org Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bennie.joubert(a)jsdaav.com, epel-packagers-sig(a)lists.fedoraproject.org, jsmith.fedora(a)gmail.com, rbryant(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2255321 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255322 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
2
0 / 0

[Bug 2255153] New: golang-x-crypto-0.17.0 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2255153 Bug ID: 2255153 Summary: golang-x-crypto-0.17.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-x-crypto Keywords: FutureFeature, Triaged Assignee: mark.e.fuller(a)gmx.de Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora Releases retrieved: 0.17.0 Upstream release that is considered latest: 0.17.0 Current version/release in rawhide: 0.16.0-1.fc40 URL: https://github.com/golang/crypto Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/328419/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-x-crypto -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255153 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
4
0 / 0

[Bug 2255116] New: [abrt] gnome-calendar: gtk_list_box_row_get_child(): gnome-calendar killed by SIGSEGV

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2255116 Bug ID: 2255116 Summary: [abrt] gnome-calendar: gtk_list_box_row_get_child(): gnome-calendar killed by SIGSEGV Product: Fedora Version: 39 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:ca7a59a53752557e80062383671d27cc665e7a45;VAR IANT_ID=workstation; Component: gnome-calendar Assignee: gnome-sig(a)lists.fedoraproject.org Reporter: eazel7(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, igor.raits(a)gmail.com, klember(a)redhat.com Target Milestone: --- Classification: Fedora Version-Release number of selected component: gnome-calendar-45.1-1.fc39 Additional info: reporter: libreport-2.17.11 type: CCpp reason: gnome-calendar killed by SIGSEGV journald_cursor: s=3452a52fb1ca43a28acf90fd9dda0129;i=33aaf;b=cb83aca6892849e3b74afa430acf9ff8;m=15f98ec181;t=60ccc6150421e;x=607631cee761312 executable: /usr/bin/gnome-calendar cmdline: /usr/bin/gnome-calendar --gapplication-service cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/dbus-:1.2-org.gnome.Calendar@1.service rootdir: / uid: 1000 kernel: 6.6.6-200.fc39.x86_64 package: gnome-calendar-45.1-1.fc39 runlevel: N 5 dso_list: /usr/bin/gnome-calendar gnome-calendar-45.1-1.fc39.x86_64 (Fedora Project) 1702679189 backtrace_rating: 4 crash_function: gtk_list_box_row_get_child Truncated backtrace: Thread no. 1 (8 frames) #0 gtk_list_box_row_get_child at ../gtk/gtklistbox.c:3009 #1 gcal_agenda_view_remove_event at ../src/gui/views/gcal-agenda-view.c:585 #2 remove_event_from_subscriber at ../src/core/gcal-timeline.c:255 #3 timeline_source_dispatch at ../src/core/gcal-timeline.c:774 #5 g_main_context_dispatch_unlocked at ../glib/gmain.c:4284 #6 g_main_context_iterate_unlocked.isra.0 at ../glib/gmain.c:4349 #7 g_main_context_iteration at ../glib/gmain.c:4414 #8 g_application_run at ../gio/gapplication.c:2577 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255116 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
0
0 / 0

[Bug 2255041] New: CVE-2023-48795 dropbear: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [epel-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2255041 Bug ID: 2255041 Summary: CVE-2023-48795 dropbear: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: dropbear Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: fede(a)evolware.org Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: buytenh(a)wantstofly.org, epel-packagers-sig(a)lists.fedoraproject.org, fede(a)evolware.org, i(a)cicku.me Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2254210 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255041 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
2
0 / 0

[Bug 2255042] New: CVE-2023-48795 dropbear: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2255042 Bug ID: 2255042 Summary: CVE-2023-48795 dropbear: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [fedora-all] Product: Fedora Version: 39 Status: NEW Component: dropbear Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: fede(a)evolware.org Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: buytenh(a)wantstofly.org, epel-packagers-sig(a)lists.fedoraproject.org, fede(a)evolware.org, i(a)cicku.me Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2254210 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255042 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
2
0 / 0

[Bug 2254463] warning: runaway fork() in Lua script

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2254463 Panu Matilainen <pmatilai(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution|--- |RAWHIDE Last Closed| |2023-12-18 08:12:24 --- Comment #11 from Panu Matilainen <pmatilai(a)redhat.com> --- (In reply to Stephen Gallagher from comment #9) > Hmm, I wonder if the original report could be related to this change in > glibc: > https://src.fedoraproject.org/rpms/glibc/c/ > 259d575cdf1efb48b486811f4faadbcd836f0cbc?branch=rawhide Those would occur during package installation, the report here happens when parsing the spec, and even then the glibc scriptlets do an exec() after the fork so this would only happen if that exec failed, and in that case you'd see other errors too. Anyway, closing as per Orion's comment. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2254463 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
0
0 / 0

[Bug 2254841] New: Cinnamon Screensaver/Lock Screen Erroneously Uses Application Theme Instead of Desktop Theme

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2254841 Bug ID: 2254841 Summary: Cinnamon Screensaver/Lock Screen Erroneously Uses Application Theme Instead of Desktop Theme Product: Fedora Version: 39 Hardware: x86_64 OS: Linux Status: NEW Component: cinnamon Keywords: Desktop, Upgrades Severity: medium Assignee: leigh123linux(a)googlemail.com Reporter: nsleasy(a)hotmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, leigh123linux(a)googlemail.com, miketwebster(a)gmail.com, riehecky(a)fnal.gov Target Milestone: --- Classification: Fedora After upgrade from Fedora 38 to Fedora 39, the Cinnamon lock screen starts using Application Theme elements instead of Desktop Theme. The Cinnamon on Fedora 38 correctly uses desktop dark themes, even if an application light theme is selected. After upgrading to Dedora 39, the user must choose a dark application theme in order to get a dark background in the password field on the lock screen. The Cinnamon version is 5.8.4 in both Fedora releases and the problem does NOT exist in the same Cinnamon version on Mint. This appears to be a configuration issue on Fedora 39 only. I have eliminated any specific user configuration issues. The problem arises on a freshly created user account as well. Reproducible: Always Steps to Reproduce: 1. Set a light Applications theme 2. Set a dark Desktop theme 3. Lock the screen and authenticate to unlock Actual Results: A light theme (white password field) appears on authentication, matching the Applications theme. Expected Results: Since a dark Desktop theme was set, one would expect the screensaver/lock screen to use that, versus the Application theme. Selecting a dark Applications theme produces the expected dark password field, but the screensaver/lock screen should use the Desktop theme. To reiterate, the Cinnamon version is not upgraded going from F38 to F39 and the same version does not produce the same behavior on Linux Mint. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2254841 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
3
0 / 0

[Bug 2219556] python-inotify doesn't work: imports asyncore removed in Python 3.12

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2219556 Bug 2219556 depends on bug 2223081, which changed state. Bug 2223081 Summary: Review Request: python-pyasyncore - Python module asyncore for Python 3.12 onwards https://bugzilla.redhat.com/show_bug.cgi?id=2223081 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |DUPLICATE -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2219556

6 months, 1 week

1
0
0 / 0

[Bug 2219556] python-inotify doesn't work: imports asyncore removed in Python 3.12

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2219556 Terje Røsten <terje.rosten(a)ntnu.no> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2241084 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2241084 [Bug 2241084] Review Request: python-pyasyncore - Make asyncore available for Python 3.12 onwards -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2219556

6 months, 1 week

1
0
0 / 0

[Bug 2254463] warning: runaway fork() in Lua script

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2254463 --- Comment #10 from Orion Poplawski <orion(a)nwra.com> --- Looks good to me. Thank you for the quick fix. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2254463 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

6 months, 1 week

1
0
0 / 0

2024

2023

2022

2021

Epel-packagers-sig December 2023