January 2024 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2254463] warning: runaway fork() in Lua script
by bugzilla＠redhat.com 29 Jan '24

29 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2254463 Miro Hrončok <mhroncok(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|RAWHIDE |--- Version|rawhide |39 Status|CLOSED |NEW Keywords| |Reopened --- Comment #12 from Miro Hrončok <mhroncok(a)redhat.com> --- This is now happening in Fedora 39 with rpm-4.19.1-1.fc39. The fix https://src.fedoraproject.org/rpms/rpm/c/0ae9b336476cfc4291411bc004c79d554e… has not made it to Fedora 39. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2254463 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 0

[Bug 2257671] New: CVE-2023-47996 freeimage: integer overflow in jpeg_read_exif_dir in Exif.cpp [fedora-all]
by bugzilla＠redhat.com 29 Jan '24

29 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2257671 Bug ID: 2257671 Summary: CVE-2023-47996 freeimage: integer overflow in jpeg_read_exif_dir in Exif.cpp [fedora-all] Product: Fedora Version: 39 Status: NEW Component: freeimage Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: bruno(a)wolff.to Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bruno(a)wolff.to, epel-packagers-sig(a)lists.fedoraproject.org, hobbes1069(a)gmail.com, i(a)cicku.me, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2257653 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2257671 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2257664] New: CVE-2023-47993 freeimage: out-of-bound read vulnerability in ReadInt32 [fedora-all]
by bugzilla＠redhat.com 29 Jan '24

29 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2257664 Bug ID: 2257664 Summary: CVE-2023-47993 freeimage: out-of-bound read vulnerability in ReadInt32 [fedora-all] Product: Fedora Version: 39 Status: NEW Component: freeimage Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: bruno(a)wolff.to Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bruno(a)wolff.to, epel-packagers-sig(a)lists.fedoraproject.org, hobbes1069(a)gmail.com, i(a)cicku.me, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2257650 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2257664 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2257662] New: CVE-2023-47994 freeimage: integer overflow in LoadPixelDataRLE4() function in PluginBMP.cpp [fedora-all]
by bugzilla＠redhat.com 29 Jan '24

29 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2257662 Bug ID: 2257662 Summary: CVE-2023-47994 freeimage: integer overflow in LoadPixelDataRLE4() function in PluginBMP.cpp [fedora-all] Product: Fedora Version: 39 Status: NEW Component: freeimage Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: bruno(a)wolff.to Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bruno(a)wolff.to, epel-packagers-sig(a)lists.fedoraproject.org, hobbes1069(a)gmail.com, i(a)cicku.me, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2257651 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2257662 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2257663] New: CVE-2023-47992 freeimage: integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc() [fedora-all]
by bugzilla＠redhat.com 29 Jan '24

29 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2257663 Bug ID: 2257663 Summary: CVE-2023-47992 freeimage: integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc() [fedora-all] Product: Fedora Version: 39 Status: NEW Component: freeimage Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: bruno(a)wolff.to Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bruno(a)wolff.to, epel-packagers-sig(a)lists.fedoraproject.org, hobbes1069(a)gmail.com, i(a)cicku.me, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2257649 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2257663 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2260656] New: libdwarf-0.9.1 is available
by bugzilla＠redhat.com 28 Jan '24

28 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2260656 Bug ID: 2260656 Summary: libdwarf-0.9.1 is available Product: Fedora Version: rawhide Status: NEW Component: libdwarf Keywords: FutureFeature, Triaged Assignee: tom(a)compton.nu Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, orion(a)nwra.com, tom(a)compton.nu Target Milestone: --- Classification: Fedora Releases retrieved: 0.9.1 Upstream release that is considered latest: 0.9.1 Current version/release in rawhide: 0.9.0-1.fc40 URL: http://www.prevanders.net/dwarf.html Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1597/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/libdwarf -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2260656 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2259066] New: python-pydata-sphinx-theme-0.15.2 is available
by bugzilla＠redhat.com 28 Jan '24

28 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2259066 Bug ID: 2259066 Summary: python-pydata-sphinx-theme-0.15.2 is available Product: Fedora Version: rawhide Status: NEW Component: python-pydata-sphinx-theme Keywords: FutureFeature, Triaged Assignee: loganjerry(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, loganjerry(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 0.15.2 Upstream release that is considered latest: 0.15.2 Current version/release in rawhide: 0.15.1-1.fc40 URL: https://pypi.org/project/pydata-sphinx-theme/0.1.0 Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/87078/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-pydata-sphinx-theme -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2259066 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2250372] New: python-matplotlib-3.8.2 is available
by bugzilla＠redhat.com 27 Jan '24

27 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2250372 Bug ID: 2250372 Summary: python-matplotlib-3.8.2 is available Product: Fedora Version: rawhide Status: NEW Component: python-matplotlib Keywords: FutureFeature, Triaged Assignee: quantum.analyst(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gwync(a)protonmail.com, paulo.cesar.pereira.de.andrade(a)gmail.com, python-packagers-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, tomspur(a)fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 3.8.2 Upstream release that is considered latest: 3.8.2 Current version/release in rawhide: 3.8.1-1.fc40 URL: https://matplotlib.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/3919/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-matplotlib -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2250372 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 11

[Bug 2254772] New: python-dask-2023.12.1 is available
by bugzilla＠redhat.com 27 Jan '24

27 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2254772 Bug ID: 2254772 Summary: python-dask-2023.12.1 is available Product: Fedora Version: rawhide Status: NEW Component: python-dask Keywords: FutureFeature, Triaged Assignee: quantum.analyst(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, python-packagers-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 2023.12.1 Upstream release that is considered latest: 2023.12.1 Current version/release in rawhide: 2023.8.1-3.fc40~bootstrap URL: https://github.com/dask/dask/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/18909/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-dask -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2254772 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2251415] New: AttributeError: 'function' object has no attribute '__wrapped__'
by bugzilla＠redhat.com 27 Jan '24

27 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=2251415 Bug ID: 2251415 Summary: AttributeError: 'function' object has no attribute '__wrapped__' Product: Fedora Version: 39 Hardware: x86_64 OS: Linux Status: NEW Component: python-rpmautospec Severity: high Assignee: asaleh(a)redhat.com Reporter: amessina(a)messinet.com QA Contact: extras-qa(a)fedoraproject.org CC: asaleh(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, nphilipp(a)redhat.com, sgallagh(a)redhat.com Target Milestone: --- Classification: Fedora After upgrading from 0.3.5-4.fc39 to 0.3.8-1.fc39, I am unable to use the plugin in my private Koji instance. Reverting allows builds to succeed. CallbackError: Error running postSCMCheckout callback from _koji_plugin__rpmautospec_builder: Traceback (most recent call last): File "/usr/lib/python3.12/site-packages/koji/plugin.py", line 221, in run_callbacks func(cbtype, *cb_args, **cb_kwargs) File "/usr/lib/koji-builder-plugins/rpmautospec_builder.py", line 19, in process_distgit_cb if not process_distgit(srcdir, enable_caching=False): ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.12/site-packages/rpmautospec/subcommands/process_distgit.py", line 83, in process_distgit features = check_specfile_features.__wrapped__(processor.specfile) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ AttributeError: 'function' object has no attribute '__wrapped__' -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2251415 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

2025

2024

2023

2022

2021

Epel-packagers-sig January 2024