September 2012 - mingw - Fedora Mailing-Lists

[Bug 806271] New: CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689) [fedora-all]

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=806271 Summary: CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689) [fedora-all] Product: Fedora Version: 16 Platform: All OS/Version: Linux Status: NEW Keywords: Security, SecurityTracking Severity: high Priority: high Component: mingw32-freetype AssignedTo: rjones(a)redhat.com ReportedBy: thoger(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: lfarkas(a)lfarkas.org, rjones(a)redhat.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org Blocks: 800607 Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected Fedora versions. For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please include this bug ID and the bug IDs of this bug's parent bugs filed against the "Security Response" product (the top-level CVE bugs). Please mention the CVE IDs being fixed in the RPM changelog when available. Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=800607 Please note: this issue affects multiple supported versions of Fedora. Only one tracking bug has been filed; please ensure that it is only closed when all affected versions are fixed. [bug automatically created by: add-tracking-bugs] -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

11 years, 3 months

1
11
0 / 0

[Bug 851189] New: Review Request: mingw-lcms2 - MinGW Color Management System

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=851189 Bug ID: 851189 QA Contact: extras-qa(a)fedoraproject.org Severity: unspecified Version: rawhide Priority: unspecified CC: fedora-mingw(a)lists.fedoraproject.org, notting(a)redhat.com, package-review(a)lists.fedoraproject.org Assignee: nobody(a)fedoraproject.org Summary: Review Request: mingw-lcms2 - MinGW Color Management System Regression: --- Story Points: --- Classification: Fedora OS: Unspecified Reporter: t.sailer(a)alumni.ethz.ch Type: Bug Documentation: --- Hardware: Unspecified Mount Type: --- Status: NEW Component: Package Review Product: Fedora Spec URL: http://sailer.fedorapeople.org/mingw-lcms2.spec SRPM URL: http://sailer.fedorapeople.org/mingw-lcms2-2.3-1.fc17.src.rpm Description: MinGW Color Management System Approved MinGW packaging guidelines are here: http://fedoraproject.org/wiki/Packaging/MinGW -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 3 months

1
10
0 / 0

[Bug 843190] New: CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=843190 Bug ID: 843190 Keywords: Security, SecurityTracking Blocks: 843179 (CVE-2011-3464) QA Contact: extras-qa(a)fedoraproject.org Severity: high Version: 17 Priority: high CC: drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, rjones(a)redhat.com Assignee: rjones(a)redhat.com Summary: CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17] Regression: --- Story Points: --- Classification: Fedora OS: Linux Reporter: kseifried(a)redhat.com Type: --- Documentation: --- Hardware: All Mount Type: --- Status: NEW Component: mingw-libpng Product: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected Fedora versions. For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please include this bug ID and the bug IDs of this bug's parent bugs filed against the "Security Response" product (the top-level CVE bugs). Please mention the CVE IDs being fixed in the RPM changelog when available. Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=843179 fedora-17 tracking bug for mingw-libpng: see blocks bug list for full details of the security issue(s). [bug automatically created by: add-tracking-bugs] -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 4 months

1
7
0 / 0

Broken dependencies: mingw32-libpng

by Fedora Koji Build System

mingw32-libpng has broken dependencies in the epel-6 tree: On ppc64: mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(msvcrt.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(zlib1.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(kernel32.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32-filesystem >= 0:63 mingw32-libpng-1.2.37-3.el6.noarch requires mingw32-runtime Please resolve this as soon as possible.

11 years, 7 months

1
0
0 / 0

Broken dependencies: mingw32-libpng

by Fedora Koji Build System

mingw32-libpng has broken dependencies in the epel-6 tree: On ppc64: mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(msvcrt.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(zlib1.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32(kernel32.dll) mingw32-libpng-1.2.37-3.el6.noarch requires mingw32-filesystem >= 0:63 mingw32-libpng-1.2.37-3.el6.noarch requires mingw32-runtime Please resolve this as soon as possible.

11 years, 7 months

1
0
0 / 0

File glib-2.34.0.tar.xz uploaded to lookaside cache by kalev

by Kalev Lember

A file has been added to the lookaside cache for mingw-glib2: d80aef668f981b5dcf157633d13081c0 glib-2.34.0.tar.xz

11 years, 7 months

1
0
0 / 0

[Bug 833623] Review Request: mingw-nettle - MinGW package for nettle cryptographic library

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=833623 Fedora Update System <updates(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA Last Closed| |2012-09-27 01:10:00 --- Comment #11 from Fedora Update System <updates(a)fedoraproject.org> --- mingw-nettle-2.4-2.fc18 has been pushed to the Fedora 18 stable repository. -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 7 months

1
0
0 / 0

[Bug 849693] CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=849693 --- Comment #16 from Jan Kratochvil <jan.kratochvil(a)redhat.com> --- (In reply to comment #15) > However, repoquery only mentions one package: > $ repoquery -q --whatprovides 'bundled(libiberty)' > insight-0:7.4.50-1.20120403cvs.fc16.x86_64 Since F-17 also: gdb-0:7.4.50.20120120-42.fc17.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 7 months

1
0
0 / 0

[Bug 849693] CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=849693 --- Comment #15 from Toshio Kuratomi <tkuratom(a)redhat.com> --- libiberty is one of the libraries that have been granted an exception to be bundled by the FPC (actually, the exception was granted by FESCo in the period during which FESCo had that responsibility). Therefore, this affects all packages that bundle libiberty as well. According to the Guidelines, packages that bundle libiberty are supposed to have a virtual Provides: bundled(libiberty) However, repoquery only mentions one package: $ repoquery -q --whatprovides 'bundled(libiberty)' insight-0:7.4.50-1.20120403cvs.fc16.x86_64 When libiberty was granted an exception by FESCo in the F13 time frame, an audit of the package set by ajax found 24 packages that bundled libiberty: https://fedorahosted.org/fesco/ticket/370#comment:13 So someone's going to have to re-audit the packageset, identify the packages that bundle libiberty, update them, and also add the Provides: bundled(libiberty) so that this is easier the next time around. -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 7 months

1
0
0 / 0

[Bug 849693] CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=849693 Jan Lieskovsky <jlieskov(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |860769 --- Comment #14 from Jan Lieskovsky <jlieskov(a)redhat.com> --- Created gdb tracking bugs for this issue Affects: fedora-all [bug 860769] -- You are receiving this mail because: You are on the CC list for the bug.

11 years, 7 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

mingw September 2012