April 2024 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2273611] New: golang-x-sync-0.7.0 is available
by bugzilla＠redhat.com 08 Sep '26

08 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2273611 Bug ID: 2273611 Summary: golang-x-sync-0.7.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-x-sync Keywords: FutureFeature, Triaged Assignee: asm(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: asm(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, jchaloup(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 0.7.0 Upstream release that is considered latest: 0.7.0 Current version/release in rawhide: 0.1.0-4.fc40 URL: https://golang.org/x/sync Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/369039/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-x-sync -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2273611 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 50

[Bug 2261494] New: golang-mvdan-gofumpt-0.6.0 is available
by bugzilla＠redhat.com 08 Sep '26

08 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2261494 Bug ID: 2261494 Summary: golang-mvdan-gofumpt-0.6.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-mvdan-gofumpt Keywords: FutureFeature, Triaged Assignee: asm(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: asm(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 0.6.0 Upstream release that is considered latest: 0.6.0 Current version/release in rawhide: 0.5.0-4.fc40 URL: https://github.com/mvdan/gofumpt Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/205652/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-mvdan-gofumpt -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2261494 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2210415] New: gajim-1.8.0 is available
by bugzilla＠redhat.com 27 Aug '26

27 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2210415 Bug ID: 2210415 Summary: gajim-1.8.0 is available Product: Fedora Version: rawhide Status: NEW Component: gajim Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lemenkov(a)gmail.com, mschmidt(a)redhat.com, redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 1.8.0 Upstream release that is considered latest: 1.8.0 Current version/release in rawhide: 1.7.3-2.fc39 URL: https://gajim.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/870/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/gajim -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210415

1 116

[Bug 2210464] New: python-nbxmpp-4.3.0 is available
by bugzilla＠redhat.com 26 Aug '26

26 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2210464 Bug ID: 2210464 Summary: python-nbxmpp-4.3.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-nbxmpp Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mschmidt(a)redhat.com, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 4.3.0 Upstream release that is considered latest: 4.3.0 Current version/release in rawhide: 4.2.2-1.fc39 URL: https://dev.gajim.org/gajim/python-nbxmpp/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12980/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-nbxmpp -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210464

1 86

[Bug 2130200] New: CVE-2022-39835 python-nbxmpp: gajim: security issue [epel-all]
by bugzilla＠redhat.com 24 Aug '26

24 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2130200 Bug ID: 2130200 Summary: CVE-2022-39835 python-nbxmpp: gajim: security issue [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: python-nbxmpp Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: epel-packagers-sig(a)lists.fedoraproject.org Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mschmidt(a)redhat.com, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2130200

1 3

[Bug 2130197] New: CVE-2022-39835 gajim: security issue [epel-all]
by bugzilla＠redhat.com 24 Aug '26

24 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2130197 Bug ID: 2130197 Summary: CVE-2022-39835 gajim: security issue [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: gajim Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: redhat-bugzilla(a)linuxnetz.de Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lemenkov(a)gmail.com, mschmidt(a)redhat.com, redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2130197

1 3

[Bug 2264279] New: python-zarr-2.17.0 is available
by bugzilla＠redhat.com 20 Aug '26

20 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2264279 Bug ID: 2264279 Summary: python-zarr-2.17.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-zarr Keywords: FutureFeature, Triaged Assignee: quantum.analyst(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, python-packagers-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 2.17.0 Upstream release that is considered latest: 2.17.0 Current version/release in rawhide: 2.16.1-1.fc40 URL: https://github.com/zarr-developers/zarr Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/19522/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-zarr -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2264279 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 57

[Bug 2255708] New: golang-google-protobuf-1.32.0 is available
by bugzilla＠redhat.com 10 Aug '26

10 Aug '26

https://bugzilla.redhat.com/show_bug.cgi?id=2255708 Bug ID: 2255708 Summary: golang-google-protobuf-1.32.0 is available Product: Fedora Version: rawhide Status: NEW Component: golang-google-protobuf Keywords: FutureFeature, Triaged Assignee: asm(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: asm(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.32.0 Upstream release that is considered latest: 1.32.0 Current version/release in rawhide: 1.31.0-4.fc40 URL: https://github.com/protocolbuffers/protobuf-go Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/205517/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-google-protobuf -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2255708 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 19

[Bug 2222350] New: CVE-2022-38900 yarnpkg: decode-uri-component: improper input validation resulting in DoS [epel-8]
by bugzilla＠redhat.com 29 Jul '26

29 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2222350 Bug ID: 2222350 Summary: CVE-2022-38900 yarnpkg: decode-uri-component: improper input validation resulting in DoS [epel-8] Product: Fedora EPEL Version: epel8 Status: NEW Component: yarnpkg Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: zsvetlik(a)redhat.com Reporter: mrehak(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, ngompa13(a)gmail.com, zsvetlik(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2170644 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2222350 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2260040] New: Unable to install
by bugzilla＠redhat.com 29 Jul '26

29 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2260040 Bug ID: 2260040 Summary: Unable to install Product: Fedora EPEL Version: epel9 Status: NEW Component: python-statsmodels Assignee: epel-packagers-sig(a)lists.fedoraproject.org Reporter: eric.soderman(a)smhi.se CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, sergio.pasra(a)gmail.com Target Milestone: --- Link ID: Red Hat Bugzilla 2144676 Classification: Fedora Description of problem: I am unable to install python3-statsmodels. Version-Release number of selected component (if applicable): 0.13.2-4.el9 How reproducible: Always Steps to Reproduce: $ sudo dnf install python3-statsmodels Actual results: Last metadata expiration check: 0:00:51 ago on Wed 24 Jan 2024 09:10:20 CET. Error: Problem: conflicting requests - nothing provides python3.9dist(patsy) >= 0.5.2 needed by python3-statsmodels-0.13.2-4.el9.x86_64 from epel - nothing provides python3.9dist(packaging) >= 21.3 needed by python3-statsmodels-0.13.2-4.el9.x86_64 from epel (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Additional info: There is another closed bugzila also mentioning this problem: https://bugzilla.redhat.com/show_bug.cgi?id=2144676 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2260040 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

2026

2025

2024

2023

2022

2021

Epel-packagers-sig April 2024