June 2023 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2143996] New: FTBFS: ncrack on rawhide
by bugzilla＠redhat.com 09 Aug '24

09 Aug '24

https://bugzilla.redhat.com/show_bug.cgi?id=2143996 Bug ID: 2143996 Summary: FTBFS: ncrack on rawhide Product: Fedora Version: rawhide Status: NEW Component: ncrack Assignee: rebus(a)seznam.cz Reporter: davide(a)cavalca.name QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, rebus(a)seznam.cz, smilner(a)redhat.com Target Milestone: --- Classification: Fedora configure: creating ./config.status config.status: creating Makefile config.status: WARNING: 'Makefile.in' seems to ignore the --datarootdir setting config.status: creating modules/Makefile config.status: creating ncrack_config.h === configuring in nbase (/builddir/build/BUILD/ncrack-0.7/nbase) configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr' '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--runstatedir=/run' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CC=gcc' 'CFLAGS=-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fcommon' 'LDFLAGS=-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes' 'CXX=g++' 'CXXFLAGS=-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' '--with-libpcap=no' --cache-file=/dev/null --srcdir=. configure: error: unrecognized option: `--runstatedir=/run' Try `./configure --help' for more information configure: error: ./configure failed for nbase -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2143996

1 15

[Bug 2179094] New: python-breathe FTBFS with Sphinx 6+ in Rawhide
by bugzilla＠redhat.com 09 Aug '24

09 Aug '24

https://bugzilla.redhat.com/show_bug.cgi?id=2179094 Bug ID: 2179094 Summary: python-breathe FTBFS with Sphinx 6+ in Rawhide Product: Fedora Version: rawhide Status: NEW Component: python-breathe Assignee: dan.cermak(a)cgc-instruments.com Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dan.cermak(a)cgc-instruments.com, epel-packagers-sig(a)lists.fedoraproject.org, trix(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: python-breathe FTBFS with Sphinx 6+ in Rawhide Version-Release number of selected component (if applicable): 4.34.0-6 How reproducible: Always Steps to Reproduce: mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-6.1.3/fedora-rawhide-x86_64/ --no-clean your.src.rpm mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-6.1.3/fedora-rawhide-x86_64/ shell Additional info: version 4.35 seems to support Sphinx 6: https://github.com/breathe-doc/breathe/blob/v4.35.0/setup.py#L20 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2179094

1 8

[Bug 2052682] New: CVE-2022-24303 python-pillow: temporary directory with a space character allows removal of unrelated file after im.show() and related action
by bugzilla＠redhat.com 09 Jul '24

09 Jul '24

https://bugzilla.redhat.com/show_bug.cgi?id=2052682 Bug ID: 2052682 Summary: CVE-2022-24303 python-pillow: temporary directory with a space character allows removal of unrelated file after im.show() and related action Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: bdettelb(a)redhat.com, cstratak(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, miminar(a)redhat.com, orion(a)nwra.com, python-maint(a)redhat.com, python-sig(a)lists.fedoraproject.org, torsava(a)redhat.com Target Milestone: --- Classification: Other If the path to the temporary directory on Linux or macOS contained a space, this would break removal of the temporary image file after im.show() (and related actions), and potentially remove an unrelated file. This been present since PIL. Reference: https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2052682

1 11

[Bug 2042527] New: CVE-2022-22817 python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions
by bugzilla＠redhat.com 09 Jul '24

09 Jul '24

https://bugzilla.redhat.com/show_bug.cgi?id=2042527 Bug ID: 2042527 Summary: CVE-2022-22817 python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: bdettelb(a)redhat.com, cstratak(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, miminar(a)redhat.com, orion(a)nwra.com, python-maint(a)redhat.com, python-sig(a)lists.fedoraproject.org, torsava(a)redhat.com Target Milestone: --- Classification: Other PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. Reference: https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#restrict-bu… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2042527

1 23

[Bug 2042522] New: CVE-2022-22816 python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c
by bugzilla＠redhat.com 09 Jul '24

09 Jul '24

https://bugzilla.redhat.com/show_bug.cgi?id=2042522 Bug ID: 2042522 Summary: CVE-2022-22816 python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: bdettelb(a)redhat.com, cstratak(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, miminar(a)redhat.com, orion(a)nwra.com, python-maint(a)redhat.com, python-sig(a)lists.fedoraproject.org, torsava(a)redhat.com Target Milestone: --- Classification: Other path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. References: https://github.com/python-pillow/Pillow/blob/c5d9223a8b5e9295d15b5a9b1ef1da… https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-image… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2042522

1 22

[Bug 2042511] New: CVE-2022-22815 python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c
by bugzilla＠redhat.com 09 Jul '24

09 Jul '24

https://bugzilla.redhat.com/show_bug.cgi?id=2042511 Bug ID: 2042511 Summary: CVE-2022-22815 python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: bdettelb(a)redhat.com, cstratak(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, miminar(a)redhat.com, orion(a)nwra.com, python-maint(a)redhat.com, python-sig(a)lists.fedoraproject.org, torsava(a)redhat.com Target Milestone: --- Classification: Other path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. References: https://github.com/python-pillow/Pillow/blob/c5d9223a8b5e9295d15b5a9b1ef1da… https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-image… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2042511

1 19

[Bug 2215458] New: golang-x-tools-0.10.0 is available
by bugzilla＠redhat.com 23 Jun '24

23 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2215458 Bug ID: 2215458 Summary: golang-x-tools-0.10.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-x-tools Keywords: FutureFeature, Triaged Assignee: mark.e.fuller(a)gmx.de Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora Releases retrieved: 0.10.0 Upstream release that is considered latest: 0.10.0 Current version/release in rawhide: 0.9.3-1.fc39 URL: https://github.com/golang/tools Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/9382/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-x-tools -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2215458 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 93

[Bug 2176591] New: msmtp package should provide /usr/bin/sendmail
by bugzilla＠redhat.com 31 May '24

31 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2176591 Bug ID: 2176591 Summary: msmtp package should provide /usr/bin/sendmail Product: Fedora Version: rawhide Status: NEW Component: msmtp Assignee: lemenkov(a)gmail.com Reporter: yann(a)droneaud.fr QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gbcox(a)bzb.us, lemenkov(a)gmail.com, ndevos(a)redhat.com, wart(a)kobold.org Target Milestone: --- Classification: Fedora Description of problem: msmtp package is not declared to provide /usr/sbin/sendmail. But installing the package, makes msmtp the "mta" (see alternatives --display mta), and thus provide /usr/bin/sendmail. Some packages, see below, requires /usr/sbin/sendmail BackupPC-0:4.4.0-9.fc38.x86_64 alpine-0:2.26-3.fc38.x86_64 arpwatch-14:3.3-14.fc39.x86_64 asterisk-voicemail-0:18.12.1-1.fc38.3.x86_64 certwatch-mod_ssl-0:1.2-12.fc38.x86_64 fail2ban-sendmail-0:1.0.2-2.fc38.noarch fvwm-0:2.7.0-3.fc38.x86_64 hylafax+-client-0:7.0.7-1.fc39.i686 hylafax+-client-0:7.0.7-1.fc39.x86_64 mgetty-0:1.2.1-18.fc38.x86_64 quilt-0:0.67-4.fc39.noarch redhat-lsb-core-0:4.1-60.fc38.i686 redhat-lsb-core-0:4.1-60.fc38.x86_64 spamass-milter-0:0.4.0-24.fc38.x86_64 uudeview-0:0.5.20-51.fc38.x86_64 websec-0:1.9.0-34.fc38.noarch x509watch-0:0.6.1-14.fc38.noarch Thus, when asking dnf to install one of the packages above, it will also install another mta from the list below if none of them is already installed. Likely esmtp in my experience (likely because it's the first alphabetically). esmtp-0:1.2-21.fc38.x86_64 exim-0:4.96-8.fc38.x86_64 opensmtpd-0:6.8.0p2-11.fc38.x86_64 postfix-2:3.7.4-1.fc38.x86_64 sendmail-0:8.17.1-8.fc38.x86_64 ssmtp-0:2.64-32.fc38.x86_64 Having msmtp already installed should be enough to satisfy /usr/sbin/sendmail requirement, and no other MTA should be installed as part of installing another package. Version-Release number of selected component (if applicable): msmtp-1.8.23-1.fc38.x86_64 How reproducible: When installing a package that requires /usr/bin/sendmail when no other MTA is installed. Steps to Reproduce: 1. dnf install msmtp 2. dnf install arpwatch Actual results: "dnf install arpwatch" installs arpwatch and esmtp Expected results: "dnf install arpwatch" would install only arpwatch -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2176591

1 16

[Bug 2208403] New: busybox-1.36.1 is available
by bugzilla＠redhat.com 30 May '24

30 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2208403 Bug ID: 2208403 Summary: busybox-1.36.1 is available Product: Fedora Version: rawhide Status: NEW Component: busybox Keywords: FutureFeature, Triaged Assignee: spotrh(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: admiller(a)redhat.com, davide(a)cavalca.name, dvlasenk(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, spotrh(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.36.1 Upstream release that is considered latest: 1.36.1 Current version/release in rawhide: 1.36.0-2.fc38 URL: https://www.busybox.net/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/230/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/busybox -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2208403

1 2

[Bug 2218820] New: [abrt] meld: get_path_for_repo_file(): _null.py:48:get_path_for_repo_file:FileNotFoundError: [Errno 2] No such file or directory: '/static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md'
by bugzilla＠redhat.com 28 May '24

28 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2218820 Bug ID: 2218820 Summary: [abrt] meld: get_path_for_repo_file(): _null.py:48:get_path_for_repo_file:FileNotFoundError: [Errno 2] No such file or directory: '/static/markdown/owms/owms-4.0-waardelijsten-thema-in deling-voor-officiele-publicaties.md' Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:30c15e3cd74d238b6f38fd99d10f0fbb8b6527e7;VAR IANT_ID=workstation; Component: meld Assignee: dmaphy(a)fedoraproject.org Reporter: jan.public(a)famvlug.nl QA Contact: extras-qa(a)fedoraproject.org CC: dmaphy(a)fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, lkundrak(a)v3.sk, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Version-Release number of selected component: meld-3.22.0-2.fc38 Additional info: reporter: libreport-2.17.10 kernel: 6.3.8-200.fc38.x86_64 cmdline: /usr/bin/python3 /usr/bin/meld ../../../../../../static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md uid: 1000 reason: _null.py:48:get_path_for_repo_file:FileNotFoundError: [Errno 2] No such file or directory: '/static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md' executable: /usr/bin/meld type: Python3 package: meld-3.22.0-2.fc38 runlevel: N 5 exception_type: FileNotFoundError crash_function: get_path_for_repo_file interpreter: python3-3.11.3-2.fc38.x86_64 Truncated backtrace: _null.py:48:get_path_for_repo_file:FileNotFoundError: [Errno 2] No such file or directory: '/static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md' Traceback (most recent call last): File "/usr/lib/python3.11/site-packages/meld/meldapp.py", line 86, in do_command_line tab = self.parse_args(command_line) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/meld/meldapp.py", line 368, in parse_args tab = self.open_files( ^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/meld/meldapp.py", line 166, in open_files return window.open_paths(gfiles, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/meld/meldwindow.py", line 466, in open_paths self._single_file_open(a) File "/usr/lib/python3.11/site-packages/meld/meldwindow.py", line 455, in _single_file_open doc.run_diff(path) File "/usr/lib/python3.11/site-packages/meld/vcview.py", line 565, in run_diff comp_path = self.vc.get_path_for_repo_file(path) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/meld/vc/_null.py", line 48, in get_path_for_repo_file with open(path, 'rb') as vc_file: ^^^^^^^^^^^^^^^^ FileNotFoundError: [Errno 2] No such file or directory: '/static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md' Local variables in innermost frame: self: <meld.vc._null.Vc object at 0x7fc770ce91d0> path: '/static/markdown/owms/owms-4.0-waardelijsten-thema-indeling-voor-officiele-publicaties.md' commit: None suffix: '.md' f: <tempfile._TemporaryFileWrapper object at 0x7fc771ac1090> -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2218820 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 9

2025

2024

2023

2022

2021

Epel-packagers-sig June 2023