February 2023 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2150064] New: python-twine-4.0.2 is available
by bugzilla＠redhat.com 29 Aug '23

29 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=2150064 Bug ID: 2150064 Summary: python-twine-4.0.2 is available Product: Fedora Version: rawhide Status: NEW Component: python-twine Keywords: FutureFeature, Triaged Assignee: cstratak(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: cstratak(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, python-packagers-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 4.0.2 Upstream release that is considered latest: 4.0.2 Current version/release in rawhide: 4.0.1-2.fc37 URL: https://github.com/pypa/twine Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/11165/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-twine -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2150064

1 5

[Bug 2160261] New: python-typeguard-3.0.0b2 is available
by bugzilla＠redhat.com 30 Jul '23

30 Jul '23

https://bugzilla.redhat.com/show_bug.cgi?id=2160261 Bug ID: 2160261 Summary: python-typeguard-3.0.0b2 is available Product: Fedora Version: rawhide Status: NEW Component: python-typeguard Keywords: FutureFeature, Triaged Assignee: code(a)musicinmybrain.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: chris.brown(a)redhat.com, code(a)musicinmybrain.net, davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Releases retrieved: 3.0.0b2 Upstream release that is considered latest: 3.0.0b2 Current version/release in rawhide: 2.13.3-5.fc38 URL: https://pypi.org/project/typeguard/2.6.0 Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/38819/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-typeguard -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2160261

1 19

[Bug 2163203] New: CVE-2022-41717 golang-github-pelletier-toml-2: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all]
by bugzilla＠redhat.com 29 Jul '23

29 Jul '23

https://bugzilla.redhat.com/show_bug.cgi?id=2163203 Bug ID: 2163203 Summary: CVE-2022-41717 golang-github-pelletier-toml-2: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all] Product: Fedora Version: 37 Status: NEW Component: golang-github-pelletier-toml-2 Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: redhat(a)flyn.org Reporter: ahanwate(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2161274 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2163203

1 3

[Bug 2163275] New: CVE-2022-41717 hugo: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all]
by bugzilla＠redhat.com 29 Jul '23

29 Jul '23

https://bugzilla.redhat.com/show_bug.cgi?id=2163275 Bug ID: 2163275 Summary: CVE-2022-41717 hugo: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all] Product: Fedora Version: 37 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: athoscribeiro(a)gmail.com Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2161274 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2163275

1 3

[Bug 2171686] New: python-pytest-flake8: FTBFS in Fedora rawhide/f38
by bugzilla＠redhat.com 24 Jul '23

24 Jul '23

https://bugzilla.redhat.com/show_bug.cgi?id=2171686 Bug ID: 2171686 Summary: python-pytest-flake8: FTBFS in Fedora rawhide/f38 Product: Fedora Version: rawhide Status: NEW Component: python-pytest-flake8 Assignee: ngompa13(a)gmail.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, ngompa13(a)gmail.com, python-packagers-sig(a)lists.fedoraproject.org Blocks: 2117176 (F38FTBFS) Target Milestone: --- Classification: Fedora python-pytest-flake8 failed to build from source in Fedora rawhide/f38 https://koji.fedoraproject.org/koji/taskinfo?taskID=96429303 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Please fix python-pytest-flake8 at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, python-pytest-flake8 will be orphaned. Before branching of Fedora 39, python-pytest-flake8 will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails… Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2117176 [Bug 2117176] Fedora 38 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2171686

1 3

[Bug 2159812] New: Can't install blosc-bench on EPEL9
by bugzilla＠redhat.com 14 Jul '23

14 Jul '23

https://bugzilla.redhat.com/show_bug.cgi?id=2159812 Bug ID: 2159812 Summary: Can't install blosc-bench on EPEL9 Product: Fedora EPEL Version: epel9 Status: NEW Component: blosc Assignee: zbyszek(a)in.waw.pl Reporter: dherrera(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, python-packagers-sig(a)lists.fedoraproject.org, thibault(a)north.li, zbyszek(a)in.waw.pl Depends On: 2041315 Target Milestone: --- Classification: Fedora Description of problem: blosc-bench doesn't install on EPEL9 because nothing provides python3-matplotlib Version-Release number of selected component (if applicable): blosc-bench-1.21.1-3.el9 Steps to Reproduce: 1. sudo dnf -y install blosc-bench Actual results: ... Problem: conflicting requests - nothing provides python3-matplotlib needed by blosc-bench-1.21.1-3.el9.x86_64 Additional info: Even if the python-matplotlib package is available in EPEL8, it hasn't been ported to EPEL9 yet. This should get resolved when the proper packaging of python-matplotlib is done. This problem was found using the following service: https://tdawson.fedorapeople.org/epel/willit/epel9/status-wont-install.html Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2041315 [Bug 2041315] Please branch and build python-matplotlib in epel9 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2159812

1 2

[Bug 2128273] New: Please port your pcre dependency to pcre2. Pcre has been deprecated
by bugzilla＠redhat.com 22 Jun '23

22 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2128273 Bug ID: 2128273 Summary: Please port your pcre dependency to pcre2. Pcre has been deprecated Product: Fedora Version: rawhide Status: NEW Component: ccze Assignee: dcavalca(a)fb.com Reporter: ljavorsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, pahan(a)hubbitus.info Target Milestone: --- Classification: Fedora Pcre has been deprecated since Fedora 38. Please consider porting to the new pcre2 version. Fedora change that describes the pcre deprecation is located here: https://fedoraproject.org/wiki/PcreDeprecation FESCo approval is located here: https://pagure.io/fesco/issue/2862 If your component has already ported to pcre2 or you don't Require/BuildRequire any pcre subpackage, feel free to close this Bugzilla. This Bugzilla was created automatically and some issues might have occurred along the way. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2128273

1 1

[Bug 2155514] New: scribus fails to build with Python 3.12: error: 'PyUnicode_AS_UNICODE' was not declared in this scope
by bugzilla＠redhat.com 18 Jun '23

18 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2155514 Bug ID: 2155514 Summary: scribus fails to build with Python 3.12: error: 'PyUnicode_AS_UNICODE' was not declared in this scope Product: Fedora Version: rawhide Status: NEW Component: scribus Assignee: walter.pete(a)yandex.com Reporter: thrnciar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: andreas.bierfert(a)lowlatency.de, dan(a)danny.cz, epel-packagers-sig(a)lists.fedoraproject.org, luya_tfz(a)thefinalzone.net, mhroncok(a)redhat.com, thrnciar(a)redhat.com, walter.pete(a)yandex.com Blocks: 2135404 (PYTHON3.12) Target Milestone: --- Classification: Fedora scribus fails to build with Python 3.12.0a3. /builddir/build/BUILD/scribus-1.5.8/scribus/plugins/scriptplugin/cmdgetsetprop.cpp:413:84: error: 'PyUnicode_AS_UNICODE' was not declared in this scope; did you mean 'PyUnicode_AsUCS4'? 413 | const unsigned short * ucs2Data = (const unsigned short *) PyUnicode_AS_UNICODE(objValue); | ^~~~~~~~~~~~~~~~~~~~ | PyUnicode_AsUCS4 /builddir/build/BUILD/scribus-1.5.8/scribus/plugins/scriptplugin/cmdgetsetprop.cpp:433:84: error: 'PyUnicode_AS_UNICODE' was not declared in this scope; did you mean 'PyUnicode_AsUCS4'? 433 | const unsigned short * utf16Data = (const unsigned short *)PyUnicode_AS_UNICODE(objValue); | ^~~~~~~~~~~~~~~~~~~~ | PyUnicode_AsUCS4 Leagcy Unicode APIs has been removed. See PEP 623 for detail. PyUnicode_WCHAR_KIND PyUnicode_AS_UNICODE() PyUnicode_AsUnicode() PyUnicode_AsUnicodeAndSize() PyUnicode_AS_DATA() PyUnicode_FromUnicode() PyUnicode_GET_SIZE() PyUnicode_GetSize() PyUnicode_GET_DATA_SIZE() https://docs.python.org/3.12/whatsnew/3.12.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.12/fedora-r… For all our attempts to build scribus with Python 3.12, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.12/package/scribus/ Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.12: https://copr.fedorainfracloud.org/coprs/g/python/python3.12/ Let us know here if you have any questions. Python 3.12 is planned to be included in Fedora 39. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.12. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2135404 [Bug 2135404] Python 3.12 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2155514

1 2

[Bug 2090572] New: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all]
by bugzilla＠redhat.com 17 Jun '23

17 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2090572 Bug ID: 2090572 Summary: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: thrift Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: ctubbsii(a)fedoraproject.org Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, milleruntime(a)gmail.com, orion(a)nwra.com, willb(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2090572

1 3

[Bug 2092715] New: CVE-2022-21681 thrift: marked: regular expression inline.reflinkSearch may lead Denial of Service [epel-all]
by bugzilla＠redhat.com 17 Jun '23

17 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2092715 Bug ID: 2092715 Summary: CVE-2022-21681 thrift: marked: regular expression inline.reflinkSearch may lead Denial of Service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: thrift Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: ctubbsii(a)fedoraproject.org Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, milleruntime(a)gmail.com, orion(a)nwra.com, willb(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2092715

1 3

2024

2023

2022

2021

Epel-packagers-sig February 2023