January 2024 - Epel-packagers-sig - Fedora Mailing-Lists

[Bug 2248387] New: hugo: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2248387 Bug ID: 2248387 Summary: hugo: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] Product: Fedora Version: 38 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: athoscribeiro(a)gmail.com Reporter: zmiele(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2248209 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2248387 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
3
0 / 0

[Bug 2248374] New: golang-x-tools: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2248374 Bug ID: 2248374 Summary: golang-x-tools: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] Product: Fedora Version: 38 Status: NEW Component: golang-x-tools Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: mark.e.fuller(a)gmx.de Reporter: zmiele(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2248209 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2248374 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
3
0 / 0

[Bug 2248325] New: golang-github-pelletier-toml-2: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2248325 Bug ID: 2248325 Summary: golang-github-pelletier-toml-2: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] Product: Fedora Version: 38 Status: NEW Component: golang-github-pelletier-toml-2 Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: redhat(a)flyn.org Reporter: zmiele(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2248209 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2248325 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
3
0 / 0

[Bug 2248263] New: dnscrypt-proxy: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2248263 Bug ID: 2248263 Summary: dnscrypt-proxy: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] Product: Fedora Version: 38 Status: NEW Component: dnscrypt-proxy Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: davide(a)cavalca.name Reporter: zmiele(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, zebob.m(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2248209 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2248263 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
3
0 / 0

[Bug 2247821] New: CVE-2023-44271 python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2247821 Bug ID: 2247821 Summary: CVE-2023-44271 python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument [fedora-all] Product: Fedora Version: 38 Status: NEW Component: python-pillow Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: manisandro(a)gmail.com Reporter: gsuckevi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, python-packagers-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2247820 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2247821 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
11
0 / 0

[Bug 2247758] New: [abrt] blender: wl_proxy_get_version(): blender killed by SIGSEGV

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2247758 Bug ID: 2247758 Summary: [abrt] blender: wl_proxy_get_version(): blender killed by SIGSEGV Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:7ba81cddb619ef34a9ed2a1e5afc5a9bab9874a0;VAR IANT_ID=kde; Component: blender Assignee: luya_tfz(a)thefinalzone.net Reporter: woonj(a)woontech.com QA Contact: extras-qa(a)fedoraproject.org CC: code(a)musicinmybrain.net, design-devel(a)lists.fedoraproject.org, epel-packagers-sig(a)lists.fedoraproject.org, kwizart(a)gmail.com, luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: Just trying to open Blender caused an issue, according to a friend of mine who is having the same issue, it seems to not cause a segfault on X11 Version-Release number of selected component: blender-1:3.6.4-2.fc38 Additional info: reporter: libreport-2.17.11 type: CCpp reason: blender killed by SIGSEGV journald_cursor: s=1eb4744f8e7f4f39a927068fdcb0e976;i=ff75e8;b=b485a249c2c4461cbf9ec851785563a3;m=1162546347;t=60939f7ff690b;x=3f2f8445cc94170f executable: /usr/bin/blender cmdline: /usr/bin/blender $'/home/jwoon/IdeaProjects/CodeLyoko-Legacy/Wii - Code Lyoko Quest for Infinity - Skidbladnir/Skidbladnir/skid.obj' cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/app-blender-44b6febaa58d4207b3e0a2e6eecf5d4f.scope rootdir: / uid: 1000 kernel: 6.5.8-200.fc38.x86_64 package: blender-1:3.6.4-2.fc38 runlevel: N 5 backtrace_rating: 4 crash_function: wl_proxy_get_version comment: Just trying to open Blender caused an issue, according to a friend of mine who is having the same issue, it seems to not cause a segfault on X11 Truncated backtrace: Thread no. 0 (19 frames) #0 wl_proxy_get_version at ../src/wayland-client.c:2248 #1 wl_drm_create_prime_buffer at src/egl/wayland/wayland-drm/wayland-drm-client-protocol.h:303 #2 create_wl_buffer at ../src/egl/drivers/dri2/platform_wayland.c:1548 #3 dri2_wl_swap_buffers_with_damage at ../src/egl/drivers/dri2/platform_wayland.c:1637 #4 dri2_swap_buffers at ../src/egl/drivers/dri2/egl_dri2.c:1880 #5 eglSwapBuffers at ../src/egl/main/eglapi.c:1468 #6 GHOST_ContextEGL::initializeDrawingContext() at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_ContextEGL.cc:592 #7 GHOST_WindowWayland::newDrawingContext(GHOST_TDrawingContextType) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_WindowWayland.cc:1796 #8 GHOST_Window::setDrawingContextType(GHOST_TDrawingContextType) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_Window.cc:64 #10 GHOST_WindowWayland::GHOST_WindowWayland(GHOST_SystemWayland*, char const*, int, int, unsigned int, unsigned int, GHOST_TWindowState, GHOST_IWindow const*, GHOST_TDrawingContextType, bool, bool, bool) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_WindowWayland.cc:1456 #11 GHOST_SystemWayland::createWindow(char const*, int, int, unsigned int, unsigned int, GHOST_TWindowState, GHOST_GLSettings, bool, bool, GHOST_IWindow const*) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_SystemWayland.cc:6406 #12 GHOST_CreateWindow at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/intern/ghost/intern/GHOST_C-api.cc:168 #13 wm_window_ghostwindow_add at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm_window.c:683 #14 wm_window_ghostwindow_ensure(wmWindowManager*, wmWindow*, _Bool) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm_window.c:773 #15 wm_window_ghostwindows_ensure at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm_window.c:826 #16 WM_check(bContext*) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm.c:508 #17 wm_homefile_read_ex(bContext*, wmHomeFileRead_Params const*, ReportList*, wmFileReadPost_Params**) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm_files.cc:1453 #18 WM_init(bContext*, int, char const**) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/blender/windowmanager/intern/wm_init_exit.cc:300 #19 main(int, char const**) at /usr/src/debug/blender-3.6.4-2.fc38.x86_64/source/creator/creator.c:527 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2247758 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
1
0 / 0

[Bug 2247164] New: [abrt] python3-textual-doc: module(): textual:5:<module>:ModuleNotFoundError: No module named 'textual'

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2247164 Bug ID: 2247164 Summary: [abrt] python3-textual-doc: module(): textual:5:<module>:ModuleNotFoundError: No module named 'textual' Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:f1961a9c5a582a93fb0d2c8ba423fef9dc6114f3;VAR IANT_ID=workstation; Component: python-textual Assignee: jonathan(a)almalinux.org Reporter: pavlikpika(a)gmail.com CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, python-packagers-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Version-Release number of selected component: python3-textual-doc-0.10.0-1.fc38 Additional info: reporter: libreport-2.17.11 kernel: 6.5.8-200.fc38.x86_64 cmdline: /usr/bin/python3 -sP /usr/bin/textual --help cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/app-org.gnome.Terminal.slice/vte-spawn-528f7120-a6e4-47c6-b46a-54951c7789d0.scope uid: 1000 reason: textual:5:<module>:ModuleNotFoundError: No module named 'textual' executable: /usr/bin/textual type: Python3 package: python3-textual-doc-0.10.0-1.fc38 runlevel: N 5 exception_type: ModuleNotFoundError crash_function: module interpreter: python3-3.11.6-1.fc38.x86_64 Truncated backtrace: textual:5:<module>:ModuleNotFoundError: No module named 'textual' Traceback (most recent call last): File "/usr/bin/textual", line 5, in <module> from textual.cli.cli import run ModuleNotFoundError: No module named 'textual' Local variables in innermost frame: __name__: '__main__' __doc__: None __package__: None __loader__: <_frozen_importlib_external.SourceFileLoader object at 0x7fe8d0336b90> __spec__: None __annotations__: {} __builtins__: <module 'builtins' (built-in)> __file__: '/usr/bin/textual' __cached__: None re: <module 're' from '/usr/lib64/python3.11/re/__init__.py'> sys: <module 'sys' (built-in)> -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2247164 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 17 hours

1
1
0 / 0

[Bug 2246569] New: CVE-2023-45322 mingw-libxml2: libxml2: use-after-free in xmlUnlinkNode() in tree.c [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2246569 Bug ID: 2246569 Summary: CVE-2023-45322 mingw-libxml2: libxml2: use-after-free in xmlUnlinkNode() in tree.c [fedora-all] Product: Fedora Version: 38 Status: NEW Component: mingw-libxml2 Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: rjones(a)redhat.com Reporter: gsuckevi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, rjones(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2242945 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2246569 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 18 hours

1
3
0 / 0

[Bug 2245557] New: fastboot is broken, does not work without root and lacks features, breaking GrapheneOS install

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2245557 Bug ID: 2245557 Summary: fastboot is broken, does not work without root and lacks features, breaking GrapheneOS install Product: Fedora Version: 38 Hardware: x86_64 OS: Linux Status: NEW Component: android-tools Severity: high Assignee: ivan.afonichev(a)gmail.com Reporter: lkenfwq83r984+RHBUGS(a)mailbox.org QA Contact: extras-qa(a)fedoraproject.org CC: admiller(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, ivan.afonichev(a)gmail.com, jeroen(a)tietema.net Target Milestone: --- Classification: Fedora Here is the issue, that was closed as upstream https://github.com/GrapheneOS/os-issue-tracker/issues/2582 It worked normally using Googles Binaries, which means the Fedora fastboot packahe is broken. Also worth a note that adb works rootless using the plugdev group, while fastboot doesnt. Fedora 38 Kinoite Native android-tools layered Pixel 7pro used over usb C with fastboot -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2245557 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 18 hours

1
4
0 / 0

[Bug 2243202] New: [abrt] nemo: icon_set_selected(): nemo killed by SIGABRT

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2243202 Bug ID: 2243202 Summary: [abrt] nemo: icon_set_selected(): nemo killed by SIGABRT Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:ddc18d9ccaea748531ab6cc2d8f5ae4d49c3275b;VAR IANT_ID=workstation; Component: nemo Assignee: leigh123linux(a)googlemail.com Reporter: ochal(a)kefren.be QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, leigh123linux(a)googlemail.com, riehecky(a)fnal.gov Target Milestone: --- Classification: Fedora Version-Release number of selected component: nemo-5.8.5-2.fc38 Additional info: reporter: libreport-2.17.11 type: CCpp reason: nemo killed by SIGABRT journald_cursor: s=2abe7920a38d4c308ad1c50c556572e8;i=6c9793;b=627096cd45ba42a79b3e40c7be1949de;m=21148ae5b;t=6074464d97c1b;x=e688926c24971c0d executable: /usr/bin/nemo cmdline: /usr/bin/nemo /home/ochal cgroup: 0::/user.slice/user-1000.slice/user@1000.service/session.slice/org.gnome.SettingsDaemon.MediaKeys.service rootdir: / uid: 1000 kernel: 6.4.15-200.fc38.x86_64 package: nemo-5.8.5-2.fc38 runlevel: N 5 backtrace_rating: 4 crash_function: icon_set_selected Truncated backtrace: Thread no. 1 (15 frames) #6 icon_set_selected at ../libnemo-private/nemo-icon-container.c:384 #8 select_one_unselect_others at ../libnemo-private/nemo-icon-container.c:1174 #9 unselect_all at ../libnemo-private/nemo-icon-container.c:1188 #10 button_press_event at ../libnemo-private/nemo-icon-container.c:3047 #11 _gtk_marshal_BOOLEAN__BOXED at gtk/gtkmarshalers.c:84 #13 signal_emit_unlocked_R.isra.0 at ../gobject/gsignal.c:3851 #16 gtk_widget_event_internal.part.0.lto_priv.0 at ../gtk/gtkwidget.c:7812 #17 propagate_event_up at ../gtk/gtkmain.c:2588 #18 propagate_event at ../gtk/gtkmain.c:2691 #19 gtk_propagate_event at ../gtk/gtkmain.c:2725 #20 gtk_main_do_event at ../gtk/gtkmain.c:1921 #22 _gdk_event_emit at ../gdk/gdkevents.c:73 #27 g_main_context_iterate.isra.0 at ../glib/gmain.c:4276 #28 g_main_context_iteration at ../glib/gmain.c:4343 #29 g_application_run at ../gio/gapplication.c:2573 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2243202 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

2 days, 18 hours

1
1
0 / 0

2024

2023

2022

2021

Epel-packagers-sig January 2024