February 2023 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2140597] CVE-2022-37603 loader-utils:Regular expression denial of service
by bugzilla＠redhat.com 09 Feb '23

09 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2140597 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:0713 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2140597

1 0

[Bug 2140597] CVE-2022-37603 loader-utils:Regular expression denial of service
by bugzilla＠redhat.com 09 Feb '23

09 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2140597 --- Comment #25 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Data Grid 8.4.1 Via RHSA-2023:0713 https://access.redhat.com/errata/RHSA-2023:0713 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2140597

1 0

[Bug 2126276] CVE-2021-43138 async: Prototype Pollution in async
by bugzilla＠redhat.com 08 Feb '23

08 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2126276 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:0693 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126276

1 0

[Bug 2126276] CVE-2021-43138 async: Prototype Pollution in async
by bugzilla＠redhat.com 08 Feb '23

08 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2126276 --- Comment #28 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Migration Toolkit for Containers 1.7 Via RHSA-2023:0693 https://access.redhat.com/errata/RHSA-2023:0693 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126276

1 0

[Bug 2168021] New: python-autobahn-23.1.2 is available
by bugzilla＠redhat.com 08 Feb '23

08 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2168021 Bug ID: 2168021 Summary: python-autobahn-23.1.2 is available Product: Fedora Version: rawhide Status: NEW Component: python-autobahn Keywords: FutureFeature, Triaged Assignee: jujens(a)jujens.eu Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jujens(a)jujens.eu, mail(a)fabian-affolter.ch Target Milestone: --- Classification: Fedora Releases retrieved: 23.1.2 Upstream release that is considered latest: 23.1.2 Current version/release in rawhide: 23.1.1-2.fc38 URL: http://autobahn.ws/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/7015/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-autobahn -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2168021

1 2

[Bug 2165693] New: msmtp-1.8.23 is available
by bugzilla＠redhat.com 07 Feb '23

07 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2165693 Bug ID: 2165693 Summary: msmtp-1.8.23 is available Product: Fedora Version: rawhide Status: NEW Component: msmtp Keywords: FutureFeature, Triaged Assignee: lemenkov(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gbcox(a)bzb.us, lemenkov(a)gmail.com, ndevos(a)redhat.com, wart(a)kobold.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.8.23 Upstream release that is considered latest: 1.8.23 Current version/release in rawhide: 1.8.22-4.fc38 URL: https://marlam.de/msmtp/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2024/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/msmtp -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2165693

1 8

[Bug 2167940] New: man2html: Fixes for C99 compatibility
by bugzilla＠redhat.com 07 Feb '23

07 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2167940 Bug ID: 2167940 Summary: man2html: Fixes for C99 compatibility Product: Fedora Version: rawhide Status: ASSIGNED Component: man2html Assignee: fweimer(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, orion(a)nwra.com, sergio(a)serjux.com, tchollingsworth(a)gmail.com Blocks: 2141798 (PortingToModernCNoUpstream) Target Milestone: --- Classification: Fedora Created attachment 1942761 --> https://bugzilla.redhat.com/attachment.cgi?id=1942761&action=edit man2html-configure-c99.patch This package needs various fixes before it can be built with compilers which do not accept implicit ints and implicit function declarations by default. Given that the number of fixes are small, I think we should just patch the sources. I can't find an upstream site for this package, so I'm opening this bug for tracking purposes. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2141798 [Bug 2141798] Porting Fedora to modern C: Bugs without (referenceable) upstream -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2167940

1 2

[Bug 2167366] New: links: Port configure script to C99
by bugzilla＠redhat.com 06 Feb '23

06 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2167366 Bug ID: 2167366 Summary: links: Port configure script to C99 Product: Fedora Version: rawhide Status: ASSIGNED Component: links Assignee: fweimer(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lkundrak(a)v3.sk, michel(a)michel-slm.name, ovasik(a)redhat.com Blocks: 2141798 (PortingToModernCNoUpstream) Target Milestone: --- Classification: Fedora Created attachment 1942529 --> https://bugzilla.redhat.com/attachment.cgi?id=1942529&action=edit links-configure-c99.patch The configure script was compiled with autoconf 2.13 and contains many C99 incompatibilities, plus one incompatibility that is links-specific. Upstream does not seem to have a public bug tracker, and the mailing list on linuxfromscratch.org seems to be gone. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2141798 [Bug 2141798] Porting Fedora to modern C: Bugs without (referenceable) upstream -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2167366

1 1

[Bug 2167186] New: Branch request: tesseract-tessdata for EPEL9
by bugzilla＠redhat.com 05 Feb '23

05 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2167186 Bug ID: 2167186 Summary: Branch request: tesseract-tessdata for EPEL9 Product: Fedora EPEL Version: epel9 Status: NEW Component: tesseract-tessdata Assignee: manisandro(a)gmail.com Reporter: leonfauster(a)googlemail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: tesseract-tessdata is in EPEL8 but not in EPEL9 Please consider adding it to EPEL9. Thank you! -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2167186

1 0

[Bug 2157799] Please branch and build python-lmdb in epel9
by bugzilla＠redhat.com 03 Feb '23

03 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=2157799 Fedora Update System <updates(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |ON_QA --- Comment #5 from Fedora Update System <updates(a)fedoraproject.org> --- FEDORA-EPEL-2023-5aa83c29cc has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5aa83c29cc See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. -- You are receiving this mail because: You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2157799

1 0