April 2024 - Epel-packagers-sig - Fedora Mailing-Lists

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2024:2180 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

5 minutes

1
0
0 / 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 --- Comment #107 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2180 https://access.redhat.com/errata/RHSA-2024:2180 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

5 minutes

1
0
0 / 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 --- Comment #110 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2180 https://access.redhat.com/errata/RHSA-2024:2180 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

5 minutes

1
0
0 / 0

[Bug 2271766] New: kyua: please provide epel9 package

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2271766 Bug ID: 2271766 Summary: kyua: please provide epel9 package Product: Fedora Version: rawhide OS: Linux Status: NEW Component: kyua Severity: medium Assignee: jonathan(a)almalinux.org Reporter: denis(a)fateyev.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org Target Milestone: --- Classification: Fedora Description of problem: Please provide "kyua" package in EPEL9. Bug has been opened against rawhide, since there were no "kyua" packages in EPEL earlier. Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2271766 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

8 hours, 30 minutes

1
7
0 / 0

[Bug 2268572] New: kyua: create epel{7,8,9} builds

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2268572 Bug ID: 2268572 Summary: kyua: create epel{7,8,9} builds Product: Fedora Version: rawhide URL: https://copr.fedorainfracloud.org/coprs/pemensik/atf/ OS: Linux Status: NEW Component: kyua Keywords: RFE Severity: medium Assignee: jonathan(a)almalinux.org Reporter: pemensik(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org Target Milestone: --- Classification: Fedora I have made my copr pemensik/atf with atf at [1]. I would like to have easier way to install kyua and its dependencies, which are atf and lutok. I am aware those tools are basically with dead upstream. I sometime want to test bind 9.16 or older with unit tests. I had to fiddle somehow to make also s390x builds. It would be simpler if I could do that directly on epel branches. Only few minor changes are needed for building them for rhel7 and rhel8. We had internal kyua builds, but those seem to be untagged even from internal buildroot. It would be phased out anyway, but if there are few things to keep them still compiled, it would help me. CentOS builds would stay still for some time. Sources moved to: - https://github.com/freebsd/atf - https://github.com/freebsd/lutok - https://github.com/freebsd/kyua While very little activity is there, still a tiny bit better that none. I would be willing to do simple fixes either to epel or fedora, if my time allows that. Could you please make branches and add me as epel assignee with commit rights? Some of my changes are at my fork [2]. 1. https://copr.fedorainfracloud.org/coprs/pemensik/atf/ 2. https://src.fedoraproject.org/fork/pemensik/rpms/atf Reproducible: Always Steps to Reproduce: 1. Use CentOS any version 2. dnf install kyua 3. Actual Results: # dnf list kyua\* --disablerepo=copr:copr.fedorainfracloud.org:pemensik:atf --enablerepo=epel --available Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register. Last metadata expiration check: 2:07:22 ago on Fri 08 Mar 2024 04:07:11 AM EST. Error: No matching Packages to list Expected Results: # dnf list kyua\* --enablerepo=epel --available Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register. Last metadata expiration check: 2:07:40 ago on Fri 08 Mar 2024 04:07:11 AM EST. Available Packages kyua.src 0.13-15.el9 copr:copr.fedorainfracloud.org:pemensik:atf kyua-debuginfo.s390x 0.13-15.el9 copr:copr.fedorainfracloud.org:pemensik:atf kyua-debugsource.s390x 0.13-15.el9 copr:copr.fedorainfracloud.org:pemensik:atf kyua-tests.s390x 0.13-15.el9 copr:copr.fedorainfracloud.org:pemensik:atf kyua-tests-debuginfo.s390x 0.13-15.el9 copr:copr.fedorainfracloud.org:pemensik:atf but with epel repos Depends on bug #2268570 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2268572 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

8 hours, 30 minutes

1
9
0 / 0

[Bug 2277782] New: Package older clang-formats on newer Fedoras

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2277782 Bug ID: 2277782 Summary: Package older clang-formats on newer Fedoras Product: Fedora Version: 39 OS: Linux Status: NEW Component: clang16 Keywords: RFE Severity: medium Assignee: tuliom(a)redhat.com Reporter: alyssa(a)rosenzweig.io CC: epel-packagers-sig(a)lists.fedoraproject.org, fedora-llvm-team(a)lists.fedoraproject.org, michel(a)michel-slm.name, tuliom(a)redhat.com Target Milestone: --- Classification: Fedora Fedora packages clang-format, an automatic C/C++ code reformatting tool used by various FOSS projects, including the kernel and Mesa. Some project's CI systems enforce developer use of clang-format to produce a consistent style across the code base. However, clang-format's output is not stable from version to version, as upstream clang-format tweaks affect the results. Projects therefore pin a single "blessed" version of clang-format that all contributors use. Other distributions like Debian package simultaneously multiple versions of LLVM (and hence multiple version suffixed clang-formats), so contributors can install whatever the agreed upon version is without needing the whole team to use the same distro. Unfortunately, Fedora only packages a single latest clang version... and as soon as the Fedora LLVM is newer than what the project was using, boom! formatting changes randomly and the developer can no longer contribute. Therefore, this is a request to package older clang-formats even on newer Fedoras. For my own use case, I need clang-format-16 on F39 (soon F40), since that's the version FEX-Emu pins. But F39 only has clang-format-17, which is incompatible. Is it reasonable to include the older binaries in the newer Fedoras? If not, what is a reasonable workaround (that doesn't require switching from Fedora to another distro)? Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2277782 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

13 hours, 21 minutes

1
2
0 / 0

[Bug 2263999] New: Drop i686 support from python-pandas

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2263999 Bug ID: 2263999 Summary: Drop i686 support from python-pandas Product: Fedora Version: rawhide OS: Linux Status: NEW Component: python-pandas Keywords: Improvement, RFE, Upstream Severity: medium Assignee: jonathan(a)almalinux.org Reporter: gui1ty(a)penguinpee.nl QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, mail(a)kushaldas.in, neuro-sig(a)lists.fedoraproject.org, orion(a)nwra.com, python-packagers-sig(a)lists.fedoraproject.org, sergio.pasra(a)gmail.com, tomspur(a)fedoraproject.org, wfp5p(a)worldbroken.com Target Milestone: --- Classification: Fedora Upstream has plans[0] for adding a dependency on PyArrow in the next major release (3.0). With `libarrow`[1] excluding `%{ix86}` and `%{arm}` we need to follow suit. Since a lot of packages depend on pandas, we should set that in motion now. Even if upstream should decide not to depend on PyArrow, this effort is still worth it as a continuation of the i686 leaf removal effort[2] from a view release back. Besides, upstream has dropped 32-bit support in pandas a while back. Thus, this brings us in line with upstream. [0] https://github.com/pandas-dev/pandas/issues/54466 [1] https://src.fedoraproject.org/rpms/libarrow [2] https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2263999 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

16 hours, 47 minutes

1
25
0 / 0

[Bug 2277834] New: python-nbconvert-7.16.4 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2277834 Bug ID: 2277834 Summary: python-nbconvert-7.16.4 is available Product: Fedora Version: rawhide Status: NEW Component: python-nbconvert Keywords: FutureFeature, Triaged Assignee: lbalhar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, lbalhar(a)redhat.com, mhroncok(a)redhat.com, python-packagers-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 7.16.4 Upstream release that is considered latest: 7.16.4 Current version/release in rawhide: 7.16.3-1.fc41 URL: https://jupyter.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/10522/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-nbconvert -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2277834 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

17 hours, 31 minutes

1
0
0 / 0

[Bug 2277698] New: archlinux-keyring-20240429 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2277698 Bug ID: 2277698 Summary: archlinux-keyring-20240429 is available Product: Fedora Version: rawhide Status: NEW Component: archlinux-keyring Keywords: FutureFeature, Triaged Assignee: zbyszek(a)in.waw.pl Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, frantisek(a)sumsal.cz, zbyszek(a)in.waw.pl Target Milestone: --- Classification: Fedora Releases retrieved: 20240429 Upstream release that is considered latest: 20240429 Current version/release in rawhide: 20240427-1.fc41 URL: https://projects.archlinux.org/archlinux-keyring.git/refs/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/103/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/archlinux-keyring -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2277698 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

1 day

1
0
0 / 0

[Bug 2269314] New: sedutil-1.49 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2269314 Bug ID: 2269314 Summary: sedutil-1.49 is available Product: Fedora Version: rawhide Status: NEW Component: sedutil Keywords: FutureFeature, Triaged Assignee: cra(a)fea.st Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: cra(a)fea.st, epel-packagers-sig(a)lists.fedoraproject.org, filbranden(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.49 Upstream release that is considered latest: 1.49 Current version/release in rawhide: 1.20.0-6.fc40 URL: https://github.com/Drive-Trust-Alliance/sedutil/wiki Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/15203/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/sedutil -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2269314 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

1 day, 2 hours

1
7
0 / 0

2024

2023

2022

2021

Epel-packagers-sig April 2024