August 2023 - Epel-packagers-sig - Fedora Mailing-Lists

[Bug 2227497] New: asio-1.28.1 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2227497 Bug ID: 2227497 Summary: asio-1.28.1 is available Product: Fedora Version: rawhide Status: NEW Component: asio Keywords: FutureFeature, Triaged Assignee: belegdol(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: belegdol(a)gmail.com, davide(a)cavalca.name, epel-packagers-sig(a)lists.fedoraproject.org, me(a)fale.io, raineforest(a)raineforest.me, uwog(a)uwog.net Target Milestone: --- Classification: Fedora Releases retrieved: 1.28.1 Upstream release that is considered latest: 1.28.1 Current version/release in rawhide: 1.28.0-3.fc39 URL: https://think-async.com/Asio/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/117/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/asio -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2227497 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
8
0 / 0

[Bug 2219556] python-inotify doesn't work: imports asyncore removed in Python 3.12

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2219556 Troy Curtis <troy(a)troycurtisjr.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |troy(a)troycurtisjr.com --- Comment #6 from Troy Curtis <troy(a)troycurtisjr.com> --- It looks like "porting" isn't necessary, as there is already [asyncio support](https://github.com/seb-m/pyinotify/blob/master/python3/pyinotify.... asyncore is only used to provide one particular [asyncore utility](https://github.com/seb-m/pyinotify/blob/0f3f8950d12e4a6534320153.... So really all that needs to happen is to make asyncore import optional, and not create this class if it doesn't exist. Of course, if the user of pyinotify uses this class they will need to port over to one of the other options. However, they likely want to use that implementation because they are using elsewhere, and thus they'd already be broken under 3.12 anyway. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2219556 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
0
0 / 0

[Bug 2229647] New: golang-x-net-0.14.0 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229647 Bug ID: 2229647 Summary: golang-x-net-0.14.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-x-net Keywords: FutureFeature, Triaged Assignee: mark.e.fuller(a)gmx.de Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora Releases retrieved: 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0, 0.6.0, 0.7.0, 0.8.0, 0.9.0, 0.10.0, 0.11.0, 0.12.0, 0.13.0, 0.14.0 Upstream release that is considered latest: 0.14.0 Current version/release in rawhide: 0.10.0-2.fc39 URL: https://github.com/golang/net Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/368696/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-x-net -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229647 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
2
0 / 0

[Bug 2229599] New: CVE-2023-3978 golang-x-net: golang.org/x/net/html: Cross site scripting [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229599 Bug ID: 2229599 Summary: CVE-2023-3978 golang-x-net: golang.org/x/net/html: Cross site scripting [fedora-all] Product: Fedora Version: 38 Status: NEW Component: golang-x-net Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2228689 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229599 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
4
0 / 0

[Bug 2178463] New: CVE-2022-41723 golang-x-net: golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2178463 Bug ID: 2178463 Summary: CVE-2022-41723 golang-x-net: golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [fedora-all] Product: Fedora Version: 37 Status: NEW Component: golang-x-net Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: zebob.m(a)gmail.com Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, zebob.m(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2178358 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2178463

9 months, 2 weeks

1
6
0 / 0

[Bug 2229618] New: CVE-2023-29408 hugo: golang.org/x/image/tiff: TIFF decoder does not place a limit on the size of compressed tile data [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229618 Bug ID: 2229618 Summary: CVE-2023-29408 hugo: golang.org/x/image/tiff: TIFF decoder does not place a limit on the size of compressed tile data [fedora-all] Product: Fedora Version: 38 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: athoscribeiro(a)gmail.com Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2228742 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229618 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
2
0 / 0

[Bug 2229613] New: CVE-2023-29407 hugo: golang.org/x/image/tiff: excessive CPU consumption in decoding [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229613 Bug ID: 2229613 Summary: CVE-2023-29407 hugo: golang.org/x/image/tiff: excessive CPU consumption in decoding [fedora-all] Product: Fedora Version: 38 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: athoscribeiro(a)gmail.com Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2228735 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229613 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
2
0 / 0

[Bug 2229601] New: CVE-2023-3978 hugo: golang.org/x/net/html: Cross site scripting [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229601 Bug ID: 2229601 Summary: CVE-2023-3978 hugo: golang.org/x/net/html: Cross site scripting [fedora-all] Product: Fedora Version: 38 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: athoscribeiro(a)gmail.com Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2228689 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229601 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
2
0 / 0

[Bug 2229600] New: CVE-2023-3978 golang-x-tools: golang.org/x/net/html: Cross site scripting [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2229600 Bug ID: 2229600 Summary: CVE-2023-3978 golang-x-tools: golang.org/x/net/html: Cross site scripting [fedora-all] Product: Fedora Version: 38 Status: NEW Component: golang-x-tools Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: ahanwate(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2228689 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2229600 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
2
0 / 0

[Bug 2221309] New: fennel-1.3.1 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2221309 Bug ID: 2221309 Summary: fennel-1.3.1 is available Product: Fedora Version: rawhide Status: NEW Component: fennel Keywords: FutureFeature, Triaged Assignee: michel(a)michel-slm.name Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lua-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name Target Milestone: --- Classification: Fedora Releases retrieved: 1.3.1 Upstream release that is considered latest: 1.3.1 Current version/release in rawhide: 1.3.0-1.fc39 URL: https://fennel-lang.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release... Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/22691/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/fennel -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2221309 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...

9 months, 2 weeks

1
13
0 / 0

2024

2023

2022

2021

Epel-packagers-sig August 2023