June 2024 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2292707] New: CVE-2024-24789 golang-x-vuln: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all]
by bugzilla＠redhat.com 17 Jun '24

17 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2292707 Bug ID: 2292707 Summary: CVE-2024-24789 golang-x-vuln: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] Product: Fedora Version: 40 Status: NEW Component: golang-x-vuln Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: asm(a)redhat.com Reporter: mbenatto(a)redhat.com CC: asm(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292668 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292707 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2292711] New: CVE-2024-24789 hugo: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all]
by bugzilla＠redhat.com 17 Jun '24

17 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2292711 Bug ID: 2292711 Summary: CVE-2024-24789 hugo: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] Product: Fedora Version: 40 Status: NEW Component: hugo Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: athoscribeiro(a)gmail.com Reporter: mbenatto(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: athoscribeiro(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, neil(a)shrug.pw, quantum.analyst(a)gmail.com, redhat(a)flyn.org Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292668 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292711 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2292706] New: CVE-2024-24789 golang-x-tools: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all]
by bugzilla＠redhat.com 17 Jun '24

17 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2292706 Bug ID: 2292706 Summary: CVE-2024-24789 golang-x-tools: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] Product: Fedora Version: 40 Status: NEW Component: golang-x-tools Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: mbenatto(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de, quantum.analyst(a)gmail.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2292668 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292706 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2292539] New: scribus-1.6.2 is available
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2292539 Bug ID: 2292539 Summary: scribus-1.6.2 is available Product: Fedora Version: rawhide Status: NEW Component: scribus Keywords: FutureFeature, Triaged Assignee: walter.pete(a)yandex.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dan(a)danny.cz, epel-packagers-sig(a)lists.fedoraproject.org, luya_tfz(a)thefinalzone.net, walter.pete(a)yandex.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.6.2 Upstream release that is considered latest: 1.6.2 Current version/release in rawhide: 1.6.1-4.fc41 URL: https://www.scribus.net Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/4773/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/scribus -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292539 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2256773] New: OpenImageIO with OpenColorIO
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2256773 Bug ID: 2256773 Summary: OpenImageIO with OpenColorIO Product: Fedora EPEL Version: epel9 Status: NEW Component: OpenImageIO Assignee: hobbes1069(a)gmail.com Reporter: manuel.rais(a)nousvoir.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, hobbes1069(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: OpenImageIO is build without OpenColorIO support Version-Release number of selected component (if applicable): How reproducible: oiiotool -help : the command output shows No OpenColorIO, color config: built-in Steps to Reproduce: 1. 2. 3. Actual results: oiiotool cannot use Opencolor profile to change image colors Expected results: oiiotool should read opencolor profiles Additional info: In this folder https://github.com/AcademySoftwareFoundation/OpenImageIO/tree/master/src/bu…, several bash scripts can be found to build OpenImageIO dependencies. https://github.com/AcademySoftwareFoundation/OpenImageIO/blob/master/src/bu… is one of them. I've tested to build locally and it works. Is it possible to add this feature to OpenImageIO rpm package ? Thanks -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2256773 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2271388] New: python-autobahn fails to build with Python 3.13: 'Logger' object has no attribute 'warn'
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2271388 Bug ID: 2271388 Summary: python-autobahn fails to build with Python 3.13: 'Logger' object has no attribute 'warn' Product: Fedora Version: rawhide Status: NEW Component: python-autobahn Assignee: jujens(a)jujens.eu Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jujens(a)jujens.eu, ksurma(a)redhat.com, mail(a)fabian-affolter.ch, mhroncok(a)redhat.com Blocks: 2244836 (PYTHON3.13) Target Milestone: --- Classification: Fedora python-autobahn fails to build with Python 3.13.0a5. 'Logger' object has no attribute 'warn' FAILED wamp/test/test_wamp_component_aio.py::test_asyncio_component - Asserti... FAILED wamp/test/test_wamp_component_aio.py::test_asyncio_component_404 - Ass... According to https://docs.python.org/3.13/whatsnew/3.13.html: logging: Remove undocumented and untested Logger.warn() and LoggerAdapter.warn() methods and logging.warn() function. Deprecated since Python 3.3, they were aliases to the logging.Logger.warning() method, logging.LoggerAdapter.warning() method and logging.warning() function. (Contributed by Victor Stinner in gh-105376.) https://docs.python.org/3.13/whatsnew/3.13.html For the build logs, see: https://copr-be.cloud.fedoraproject.org/results/@python/python3.13/fedora-r… For all our attempts to build python-autobahn with Python 3.13, see: https://copr.fedorainfracloud.org/coprs/g/python/python3.13/package/python-… Testing and mass rebuild of packages is happening in copr. You can follow these instructions to test locally in mock if your package builds with Python 3.13: https://copr.fedorainfracloud.org/coprs/g/python/python3.13/ Let us know here if you have any questions. Python 3.13 is planned to be included in Fedora 41. To make that update smoother, we're building Fedora packages with all pre-releases of Python 3.13. A build failure prevents us from testing all dependent packages (transitive [Build]Requires), so if this package is required a lot, it's important for us to get it fixed soon. We'd appreciate help from the people who know this package best, but if you don't want to work on this now, let us know so we can try to work around it on our side. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2244836 [Bug 2244836] Python 3.13 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2271388 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2291000] New: tesseract-5.4.0 is available
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2291000 Bug ID: 2291000 Summary: tesseract-5.4.0 is available Product: Fedora Version: rawhide Status: NEW Component: tesseract Keywords: FutureFeature, Triaged Assignee: manisandro(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, karlikt(a)gmail.com, manisandro(a)gmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 5.4.0 Upstream release that is considered latest: 5.4.0 Current version/release in rawhide: 5.3.4-4.fc40 URL: https://github.com/tesseract-ocr/tesseract Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/4954/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/tesseract -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2291000 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2292475] New: golang-github-spf13-cobra-1.8.1 is available
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2292475 Bug ID: 2292475 Summary: golang-github-spf13-cobra-1.8.1 is available Product: Fedora Version: rawhide Status: NEW Component: golang-github-spf13-cobra Keywords: FutureFeature, Triaged Assignee: mikel(a)olasagasti.info Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, jchaloup(a)redhat.com, mikel(a)olasagasti.info Target Milestone: --- Classification: Fedora Releases retrieved: 1.8.1 Upstream release that is considered latest: 1.8.1 Current version/release in rawhide: 1.8.0-3.fc40 URL: https://github.com/spf13/cobra/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/9374/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/golang-github-spf13-cobra -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2292475 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2291903] New: F41FailsToInstall: python3-routes
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2291903 Bug ID: 2291903 Summary: F41FailsToInstall: python3-routes Product: Fedora Version: rawhide Status: NEW Component: python-routes Assignee: mrunge(a)redhat.com Reporter: fti-bugs(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jcaratza(a)redhat.com, mrunge(a)redhat.com, openstack-sig(a)lists.fedoraproject.org, python-packagers-sig(a)lists.fedoraproject.org Blocks: 2260877 (F41FailsToInstall,RAWHIDEFailsToInstall) Target Milestone: --- Classification: Fedora Hello, Please note that this comment was generated automatically by https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py If you feel that this output has mistakes, please open an issue at https://pagure.io/releng/ Your package (python-routes) Fails To Install in Fedora 41: can't install python3-routes: - nothing provides python3.12dist(six) needed by python3-routes-2.5.1-9.fc40.noarch - nothing provides python(abi) = 3.12 needed by python3-routes-2.5.1-9.fc40.noarch - nothing provides python3.12dist(repoze-lru) >= 0.3 needed by python3-routes-2.5.1-9.fc40.noarch If you know about this problem and are planning on fixing it, please acknowledge so by setting the bug status to ASSIGNED. If you don't have time to maintain this package, consider orphaning it, so maintainers of dependent packages realize the problem. If you don't react accordingly to the policy for FTBFS/FTI bugs (https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…) your package may be orphaned in 8+ weeks. P.S. The data was generated solely from koji buildroot, so it might be newer than the latest compose or the content on mirrors. To reproduce, use the koji/local repo only, e.g. in mock: $ mock -r fedora-41-x86_64 --config-opts mirrored=False install python3-routes P.P.S. If this bug has been reported in the middle of upgrading multiple dependent packages, please consider using side tags: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d… Thanks! Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2260877 [Bug 2260877] Fedora 41 Fails To install Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2291903 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 11

[Bug 2291932] New: F41FailsToInstall: python3-statsmodels
by bugzilla＠redhat.com 15 Jun '24

15 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=2291932 Bug ID: 2291932 Summary: F41FailsToInstall: python3-statsmodels Product: Fedora Version: rawhide Status: NEW Component: python-statsmodels Assignee: sergio.pasra(a)gmail.com Reporter: fti-bugs(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, sergio.pasra(a)gmail.com Blocks: 2260877 (F41FailsToInstall,RAWHIDEFailsToInstall) Target Milestone: --- Classification: Fedora Hello, Please note that this comment was generated automatically by https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py If you feel that this output has mistakes, please open an issue at https://pagure.io/releng/ Your package (python-statsmodels) Fails To Install in Fedora 41: can't install python3-statsmodels: - nothing provides python(abi) = 3.12 needed by python3-statsmodels-0.14.1-3.fc40.x86_64 - nothing provides python3.12dist(packaging) >= 21.3 needed by python3-statsmodels-0.14.1-3.fc40.x86_64 - nothing provides (python3.12dist(numpy) < 2~~ with python3.12dist(numpy) >= 1.18) needed by python3-statsmodels-0.14.1-3.fc40.x86_64 - nothing provides ((python3.12dist(pandas) < 2.1 or python3.12dist(pandas) > 2.1) with python3.12dist(pandas) >= 1) needed by python3-statsmodels-0.14.1-3.fc40.x86_64 - nothing provides ((python3.12dist(scipy) < 1.9.2 or python3.12dist(scipy) > 1.9.2) with python3.12dist(scipy) >= 1.4) needed by python3-statsmodels-0.14.1-3.fc40.x86_64 If you know about this problem and are planning on fixing it, please acknowledge so by setting the bug status to ASSIGNED. If you don't have time to maintain this package, consider orphaning it, so maintainers of dependent packages realize the problem. If you don't react accordingly to the policy for FTBFS/FTI bugs (https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…) your package may be orphaned in 8+ weeks. P.S. The data was generated solely from koji buildroot, so it might be newer than the latest compose or the content on mirrors. To reproduce, use the koji/local repo only, e.g. in mock: $ mock -r fedora-41-x86_64 --config-opts mirrored=False install python3-statsmodels P.P.S. If this bug has been reported in the middle of upgrading multiple dependent packages, please consider using side tags: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d… Thanks! Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2260877 [Bug 2260877] Fedora 41 Fails To install Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2291932 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

2024

2023

2022

2021

Epel-packagers-sig June 2024