July 2024 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2292704] New: CVE-2024-24789 golang-x-mod: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all]
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2292704 Bug ID: 2292704 Summary: CVE-2024-24789 golang-x-mod: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] Product: Fedora Version: 40 Status: NEW Component: golang-x-mod Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: mbenatto(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292668 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292704 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2292692] New: CVE-2024-24789 golang-github-pelletier-toml-2: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all]
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2292692 Bug ID: 2292692 Summary: CVE-2024-24789 golang-github-pelletier-toml-2: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] Product: Fedora Version: 40 Status: NEW Component: golang-github-pelletier-toml-2 Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: redhat(a)flyn.org Reporter: mbenatto(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292668 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292692 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2292380] New: [abrt] gnome-calendar: g_date_time_add_days(): gnome-calendar killed by SIGSEGV
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2292380 Bug ID: 2292380 Summary: [abrt] gnome-calendar: g_date_time_add_days(): gnome-calendar killed by SIGSEGV Product: Fedora Version: 40 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:abb5d0ab9e6ff7f5ceede07a2d765f2b2c849ee5;VAR IANT_ID=workstation; Component: gnome-calendar Assignee: gnome-sig(a)lists.fedoraproject.org Reporter: pabloganuza(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, igor.raits(a)gmail.com, klember(a)redhat.com Target Milestone: --- Classification: Fedora Version-Release number of selected component: gnome-calendar-46.1-1.fc40 Additional info: reporter: libreport-2.17.15 type: CCpp reason: gnome-calendar killed by SIGSEGV journald_cursor: s=3969539fcbc54a1ab6fd2db6232e614c;i=13c498;b=cf51ea7fd6a146858cf72ffd235110ad;m=52120cbaa;t=61ab12da99a0b;x=6b2d07b5dca7db3b executable: /usr/bin/gnome-calendar cmdline: /usr/bin/gnome-calendar --gapplication-service cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/dbus-:1.2-org.gnome.Calendar@0.service rootdir: / uid: 1000 kernel: 6.8.11-300.fc40.x86_64 package: gnome-calendar-46.1-1.fc40 runlevel: N 5 backtrace_rating: 4 crash_function: g_date_time_add_days Truncated backtrace: Thread no. 1 (7 frames) #0 g_date_time_add_days at ../glib/gdatetime.c:1915 #2 update_event_indicators at ../src/gui/event-editor/gcal-date-chooser.c:453 #3 update_event_indicators_in_idle_cb at ../src/gui/event-editor/gcal-date-chooser.c:493 #6 g_main_context_dispatch_unlocked at ../glib/gmain.c:4152 #7 g_main_context_iterate_unlocked.isra.0 at ../glib/gmain.c:4217 #8 g_main_context_iteration at ../glib/gmain.c:4282 #9 g_application_run at ../gio/gapplication.c:2712 Potential duplicate: bug 2236563 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292380 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

[Bug 2292348] New: CVE-2024-36587 dnscrypt-proxy: escalate privileges to root via overwriting the binary dnscrypt-proxy [fedora-all]
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2292348 Bug ID: 2292348 Summary: CVE-2024-36587 dnscrypt-proxy: escalate privileges to root via overwriting the binary dnscrypt-proxy [fedora-all] Product: Fedora Version: 40 Status: NEW Component: dnscrypt-proxy Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: davide(a)cavalca.name Reporter: rkeshri(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, zebob.m(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292346 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292348 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2281507] New: CVE-2024-34083 python-aiosmtpd: aiosmtpd: servers based on aiosmtpd accept extra unencrypted commands [fedora-all]
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2281507 Bug ID: 2281507 Summary: CVE-2024-34083 python-aiosmtpd: aiosmtpd: servers based on aiosmtpd accept extra unencrypted commands [fedora-all] Product: Fedora Version: 40 Status: NEW Component: python-aiosmtpd Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: aurelien(a)bompard.org Reporter: ybuenos(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: aurelien(a)bompard.org, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, psimovec(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2281505 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2281507 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2281497] New: CVE-2024-35190 asterisk: wrongly matches ALL unauthorized SIP requests [fedora-all]
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2281497 Bug ID: 2281497 Summary: CVE-2024-35190 asterisk: wrongly matches ALL unauthorized SIP requests [fedora-all] Product: Fedora Version: 40 Status: NEW Component: asterisk Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: jsmith.fedora(a)gmail.com Reporter: ybuenos(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: bennie.joubert(a)jsdaav.com, epel-packagers-sig(a)lists.fedoraproject.org, jsmith.fedora(a)gmail.com, rbryant(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2281495 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2281497 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2280857] New: [abrt] cinnamon: __call__(): Gio.py:349:__call__:gi.repository.GLib.GError: g-io-error-quark: GDBus.Error:org.gnome.gjs.JSError.TypeError: type is undefined (36)
by bugzilla＠redhat.com 20 May '25

20 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2280857 Bug ID: 2280857 Summary: [abrt] cinnamon: __call__(): Gio.py:349:__call__:gi.repository.GLib.GError: g-io-error-quark: GDBus.Error:org.gnome.gjs.JSError.TypeError: type is undefined (36) Product: Fedora Version: 40 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:fc69d83853bbb5ba6357513c90c6eb0168652112;VAR IANT_ID=cinnamon; Component: cinnamon Assignee: leigh123linux(a)googlemail.com Reporter: filmfan2142(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, leigh123linux(a)googlemail.com, miketwebster(a)gmail.com, riehecky(a)fnal.gov Target Milestone: --- Classification: Fedora Version-Release number of selected component: cinnamon-6.0.4-6.fc40 Additional info: reporter: libreport-2.17.15 kernel: 6.8.9-300.fc40.x86_64 cmdline: cinnamon-settings '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' cgroup: 0::/user.slice/user-1000.slice/session-5.scope uid: 1000 reason: Gio.py:349:__call__:gi.repository.GLib.GError: g-io-error-quark: GDBus.Error:org.gnome.gjs.JSError.TypeError: type is undefined (36) executable: /usr/share/cinnamon/cinnamon-settings/cinnamon-settings.py type: Python3 package: cinnamon-6.0.4-6.fc40 runlevel: N 5 exception_type: gi.repository.GLib.GError crash_function: __call__ interpreter: cinnamon-6.0.4-6.fc40.x86_64 Truncated backtrace: Gio.py:349:__call__:gi.repository.GLib.GError: g-io-error-quark: GDBus.Error:org.gnome.gjs.JSError.TypeError: type is undefined (36) Traceback (most recent call last): File "/usr/share/cinnamon/cinnamon-settings/bin/Spices.py", line 781, in _install_finished self.send_proxy_signal('ReloadXlet', '(ss)', uuid, self.collection_type.upper()) File "/usr/share/cinnamon/cinnamon-settings/bin/Spices.py", line 270, in send_proxy_signal getattr(self._proxy, command)(*args) File "/usr/lib64/python3.12/site-packages/gi/overrides/Gio.py", line 349, in __call__ result = self.dbus_proxy.call_sync(self.method_name, arg_variant, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ gi.repository.GLib.GError: g-io-error-quark: GDBus.Error:org.gnome.gjs.JSError.TypeError: type is undefined (36) Local variables in innermost frame: self: <gi.overrides.Gio._DBusProxyMethodCall object at 0x7ff24887ef90> args: ('CBlack', 'THEME') kwargs: {} signature: '(ss)' arg_variant: GLib.Variant('(ss)', ('CBlack', 'THEME')) Potential duplicate: bug 2035596 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2280857 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2283271] New: [abrt] gnome-calendar: gcal_date_chooser_day_get_date(): gnome-calendar killed by SIGSEGV
by bugzilla＠redhat.com 19 May '25

19 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2283271 Bug ID: 2283271 Summary: [abrt] gnome-calendar: gcal_date_chooser_day_get_date(): gnome-calendar killed by SIGSEGV Product: Fedora Version: rawhide Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:844fb481027285f020859b86186f23f850c81a94;VAR IANT_ID=workstation; Component: gnome-calendar Assignee: gnome-sig(a)lists.fedoraproject.org Reporter: derekenz(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, igor.raits(a)gmail.com, klember(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Launched the Calendar app from the dock. After clicking the X on the right to close the app, a few seconds later a message apears saying gnome-calendar quit unexpectedly. Version-Release number of selected component: gnome-calendar-46.1-1.fc41 Additional info: reporter: libreport-2.17.15 type: CCpp reason: gnome-calendar killed by SIGSEGV journald_cursor: s=d2a3c695abd4492abe4b1780b3a1b25a;i=2cc9;b=11fc1bdfbfdb412d81d3872386799a70;m=a9ea39b9;t=619513d5a5fba;x=bb64d8ab08fdaf7e executable: /usr/bin/gnome-calendar cmdline: /usr/bin/gnome-calendar --gapplication-service cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/dbus-:1.2-org.gnome.Calendar@2.service rootdir: / uid: 1000 kernel: 6.9.0-64.fc41.x86_64 package: gnome-calendar-46.1-1.fc41 runlevel: N 5 dso_list: /usr/bin/gnome-calendar gnome-calendar-46.1-1.fc41.x86_64 (Fedora Project) 1716621885 comment: Launched the Calendar app from the dock. After clicking the X on the right to close the app, a few seconds later a message apears saying gnome-calendar quit unexpectedly. backtrace_rating: 4 crash_function: gcal_date_chooser_day_get_date Truncated backtrace: Thread no. 1 (7 frames) #0 gcal_date_chooser_day_get_date at ../src/gui/event-editor/gcal-date-chooser-day.c:203 #1 update_event_indicators at ../src/gui/event-editor/gcal-date-chooser.c:452 #2 update_event_indicators_in_idle_cb at ../src/gui/event-editor/gcal-date-chooser.c:493 #5 g_main_context_dispatch_unlocked at ../glib/gmain.c:4152 #6 g_main_context_iterate_unlocked.isra.0 at ../glib/gmain.c:4217 #7 g_main_context_iteration at ../glib/gmain.c:4282 #8 g_application_run at ../gio/gapplication.c:2712 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2283271 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2264279] New: python-zarr-2.17.0 is available
by bugzilla＠redhat.com 19 May '25

19 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2264279 Bug ID: 2264279 Summary: python-zarr-2.17.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-zarr Keywords: FutureFeature, Triaged Assignee: quantum.analyst(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, python-packagers-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 2.17.0 Upstream release that is considered latest: 2.17.0 Current version/release in rawhide: 2.16.1-1.fc40 URL: https://github.com/zarr-developers/zarr Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/19522/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-zarr -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2264279 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 36

[Bug 2299957] New: python-incremental-24.7.0 is available
by bugzilla＠redhat.com 19 May '25

19 May '25

https://bugzilla.redhat.com/show_bug.cgi?id=2299957 Bug ID: 2299957 Summary: python-incremental-24.7.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-incremental Keywords: FutureFeature, Triaged Assignee: ykarel(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, ykarel(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 24.7.0 Upstream release that is considered latest: 24.7.0 Current version/release in rawhide: 22.10.0-7.fc41 URL: https://github.com/twisted/incremental Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/19663/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-incremental -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2299957 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 17

2025

2024

2023

2022

2021

Epel-packagers-sig July 2024