June 2023 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2212089] New: notmuch: FTBFS in Fedora Rawhide
by bugzilla＠redhat.com 22 Jun '23

22 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2212089 Bug ID: 2212089 Summary: notmuch: FTBFS in Fedora Rawhide Product: Fedora Version: rawhide Hardware: All URL: https://koschei.fedoraproject.org/package/notmuch OS: Linux Status: NEW Component: notmuch Severity: medium Assignee: mjg(a)fedoraproject.org Reporter: mjg(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mjg(a)fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: Package notmuch fails to build from source in Fedora Rawhide. Version-Release number of selected component (if applicable): 0.37-5.fc38 Steps to Reproduce: koji build --scratch f39 notmuch-0.37-5.fc38.src.rpm Additional info: This package is tracked by Koschei. See: https://koschei.fedoraproject.org/package/notmuch Reproducible: Always Steps to Reproduce: 1. build against current rawhide Actual Results: T350-crypto.sh and T357-index-decryption.sh fail Expected Results: Test suite passes -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2212089

1 3

[Bug 2213884] New: python-fsspec-2023.6.0 is available
by bugzilla＠redhat.com 19 Jun '23

19 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2213884 Bug ID: 2213884 Summary: python-fsspec-2023.6.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-fsspec Keywords: FutureFeature, Triaged Assignee: quantum.analyst(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, python-packagers-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 2023.6.0 Upstream release that is considered latest: 2023.6.0 Current version/release in rawhide: 2023.5.0-1.fc39 URL: https://github.com/intake/filesystem_spec Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/21932/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-fsspec -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2213884 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2192351] Please branch and build unoconv for EPEL 9
by bugzilla＠redhat.com 18 Jun '23

18 Jun '23

1 0

[Bug 2192351] Please branch and build unoconv for EPEL 9
by bugzilla＠redhat.com 18 Jun '23

18 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2192351 Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|dtardon(a)redhat.com |epel-packagers-sig(a)lists.fe | |doraproject.org --- Comment #4 from Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> --- This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component. -- You are receiving this mail because: You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2192351 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 0

[Bug 2155514] New: scribus fails to build with Python 3.12: error: 'PyUnicode_AS_UNICODE' was not declared in this scope
by bugzilla＠redhat.com 17 Jun '23

17 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2155514 Bug ID: 2155514 Summary: scribus fails to build with Python 3.12: error: 'PyUnicode_AS_UNICODE' was not declared in this scope Product: Fedora Version: rawhide Status: NEW Component: scribus Assignee: walter.pete(a)yandex.com Reporter: thrnciar(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: andreas.bierfert(a)lowlatency.de, dan(a)danny.cz, epel-packagers-sig(a)lists.fedoraproject.org, luya_tfz(a)thefinalzone.net, mhroncok(a)redhat.com, thrnciar(a)redhat.com, walter.pete(a)yandex.com Blocks: 2135404 (PYTHON3.12) Target Milestone: --- Classification: Fedora scribus fails to build with Python 3.12.0a3. /builddir/build/BUILD/scribus-1.5.8/scribus/plugins/scriptplugin/cmdgetsetprop.cpp:413:84: error: 'PyUnicode_AS_UNICODE' was not declared in this scope; did you mean 'PyUnicode_AsUCS4'? 413 | const unsigned short * ucs2Data = (const unsigned short *) PyUnicode_AS_UNICODE(objValue); | ^~~~~~~~~~~~~~~~~~~~ | PyUnicode_AsUCS4 /builddir/build/BUILD/scribus-1.5.8/scribus/plugins/scriptplugin/cmdgetsetprop.cpp:433:84: error: 'PyUnicode_AS_UNICODE' was not declared in this scope; did you mean 'PyUnicode_AsUCS4'? 433 | const unsigned short * utf16Data = (const unsigned short *)PyUnicode_AS_UNICODE(objValue); | ^~~~~~~~~~~~~~~~~~~~ | PyUnicode_AsUCS4 Leagcy Unicode APIs has been removed. See PEP 623 for detail. PyUnicode_WCHAR_KIND PyUnicode_AS_UNICODE() PyUnicode_AsUnicode() PyUnicode_AsUnicodeAndSize() PyUnicode_AS_DATA() PyUnicode_FromUnicode() PyUnicode_GET_SIZE() PyUnicode_GetSize() PyUnicode_GET_DATA_SIZE() https://docs.python.org/3.12/whatsnew/3.12.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.12/fedora-r… For all our attempts to build scribus with Python 3.12, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.12/package/scribus/ Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.12: https://copr.fedorainfracloud.org/coprs/g/python/python3.12/ Let us know here if you have any questions. Python 3.12 is planned to be included in Fedora 39. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.12. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2135404 [Bug 2135404] Python 3.12 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2155514

1 2

[Bug 2090572] New: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all]
by bugzilla＠redhat.com 16 Jun '23

16 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2090572 Bug ID: 2090572 Summary: CVE-2022-21680 thrift: marked: regular expression block.def may lead Denial of Service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: thrift Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: ctubbsii(a)fedoraproject.org Reporter: saroy(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, milleruntime(a)gmail.com, orion(a)nwra.com, willb(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2090572

1 3

[Bug 2092715] New: CVE-2022-21681 thrift: marked: regular expression inline.reflinkSearch may lead Denial of Service [epel-all]
by bugzilla＠redhat.com 16 Jun '23

16 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2092715 Bug ID: 2092715 Summary: CVE-2022-21681 thrift: marked: regular expression inline.reflinkSearch may lead Denial of Service [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: thrift Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: ctubbsii(a)fedoraproject.org Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, milleruntime(a)gmail.com, orion(a)nwra.com, willb(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2092715

1 3

[Bug 2126276] CVE-2021-43138 async: Prototype Pollution in async
by bugzilla＠redhat.com 15 Jun '23

15 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2126276 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:3645 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126276

1 0

[Bug 2126276] CVE-2021-43138 async: Prototype Pollution in async
by bugzilla＠redhat.com 15 Jun '23

15 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2126276 --- Comment #30 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat OpenShift Service Mesh 2.2 for RHEL 8 Via RHSA-2023:3645 https://access.redhat.com/errata/RHSA-2023:3645 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126276 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 15 Jun '23

15 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2023:3642 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

2024

2023

2022

2021

Epel-packagers-sig June 2023