https://bugzilla.redhat.com/show_bug.cgi?id=2369091
Bug ID: 2369091
Summary: CVE-2025-48734 apache-commons-configuration: Apache
Commons BeanUtils: PropertyUtilsBean does not
suppresses an enum's declaredClass property by default
[fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["eab3bab3-4899-4c1c-9a5a-99d460d29b47"]}
Component: apache-commons-configuration
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: loganjerry(a)gmail.com
Reporter: jmoroney(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
loganjerry(a)gmail.com, michel(a)michel-slm.name,
SpikeFedora(a)gmail.com
Blocks: 2368956
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2369091
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2337166
Bug ID: 2337166
Summary: python-hypothesis-6.123.15 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: python-hypothesis
Keywords: FutureFeature, Triaged
Assignee: mhroncok(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: davide(a)cavalca.name,
epel-packagers-sig(a)lists.fedoraproject.org,
igor.raits(a)gmail.com, kkeithle(a)redhat.com,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
pingou(a)pingoured.fr,
python-packagers-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Releases retrieved: 6.123.14, 6.123.15
Upstream release that is considered latest: 6.123.15
Current version/release in rawhide: 6.123.0-1.fc42
URL: https://hypothesis.works/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/7372/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-hypothesis
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2337166
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2316503
Bug ID: 2316503
Summary: Please branch and build lirc for EPEL 10
Product: Fedora EPEL
Version: epel10
Status: NEW
Component: lirc
Assignee: hobbes1069(a)gmail.com
Reporter: xavier(a)bachelot.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, leamas.alec(a)gmail.com,
sean(a)mess.org
Blocks: 2303880 (EPEL10Tracker)
Target Milestone: ---
Classification: Fedora
Hi,
Could you please branch and build lirc for EPEL 10 ?
It is needed to build another package.
Regards,
Xavier
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2303880
[Bug 2303880] EPEL 10 Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2316503
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2359815
Bug ID: 2359815
Summary: python-pikepdf fails to build with Python 3.14: Test
failures related to refcounting
Product: Fedora
Version: rawhide
Status: NEW
Component: python-pikepdf
Assignee: quantum.analyst(a)gmail.com
Reporter: ksurma(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com,
python-packagers-sig(a)lists.fedoraproject.org,
quantum.analyst(a)gmail.com, zdohnal(a)redhat.com
Blocks: 2322407 (PYTHON3.14)
Target Milestone: ---
Classification: Fedora
python-pikepdf fails to build with Python 3.14.0a7.
__________________________ test_copy_foreign_refcount
__________________________
[gw1] linux -- Python 3.14.0 /usr/bin/python3
refcount = <built-in function getrefcount>
vera = <pikepdf.Pdf
description='/builddir/build/BUILD/python-pikepdf-9.5.2-build/pikepdf-9.5.2/tests/resources/veraPDF
test suite 6-2-10-t02-pass-a.pdf'>
outlines = <pikepdf.Pdf
description='/builddir/build/BUILD/python-pikepdf-9.5.2-build/pikepdf-9.5.2/tests/resources/outlines.pdf'>
def test_copy_foreign_refcount(refcount, vera, outlines):
> assert refcount(outlines.Root.Names) == 2
E assert 1 == 2
E + where 1 = <built-in function getrefcount>(<pikepdf.Dictionary({\n
"/Dests": {\n "/Kids": [ {\n "/Limits": [ "0", "1" ],\n "/Names":
[ "0", [ <Pdf.page...29'), Decimal('607.2'), None ] ]\n }, {\n
"/Limits": [ "4", <...> ],\n "/Names": <...>\n }, <...> ]\n }\n})>)
E + where <pikepdf.Dictionary({\n "/Dests": {\n "/Kids": [ {\n
"/Limits": [ "0", "1" ],\n "/Names": [ "0", [ <Pdf.page...29'),
Decimal('607.2'), None ] ]\n }, {\n "/Limits": [ "4", <...> ],\n
"/Names": <...>\n }, <...> ]\n }\n})> =
<pikepdf.Dictionary(Type="/Catalog")({\n "/Names": {\n "/Dests": {\n
"/Kids": [ {\n "/Limits": [ "0", "1" .../UseOutlines",\n "/Pages": {\n
"/Count": <...>,\n "/Kids": <...>,\n "/Type": <...>\n },\n "/Type":
"/Catalog"\n})>.Names
E + where <pikepdf.Dictionary(Type="/Catalog")({\n "/Names": {\n
"/Dests": {\n "/Kids": [ {\n "/Limits": [ "0", "1"
.../UseOutlines",\n "/Pages": {\n "/Count": <...>,\n "/Kids": <...>,\n
"/Type": <...>\n },\n "/Type": "/Catalog"\n})> = <pikepdf.Pdf
description='/builddir/build/BUILD/python-pikepdf-9.5.2-build/pikepdf-9.5.2/tests/resources/outlines.pdf'>.Root
tests/test_foreign.py:102: AssertionError
_______________________ TestStream.test_stream_refcount
________________________
[gw1] linux -- Python 3.14.0 /usr/bin/python3
self = <test_object.TestStream object at 0x7f981e890500>
refcount = <built-in function getrefcount>
outpdf =
PosixPath('/tmp/pytest-of-mockbuild/pytest-0/popen-gw1/test_stream_refcount0/out.pdf')
def test_stream_refcount(self, refcount, outpdf):
pdf = pikepdf.new()
stream = Stream(pdf, b'blahblah')
> assert refcount(stream) == 2
E assert 1 == 2
E + where 1 = <built-in function
getrefcount>(<pikepdf.Stream(owner=<...>, data=b'blahblah', {\n "/Length":
8\n})>)
tests/test_object.py:595: AssertionError
___________________________ test_evil_page_deletion
____________________________
[gw1] linux -- Python 3.14.0 /usr/bin/python3
refcount = <built-in function getrefcount>
resources =
PosixPath('/builddir/build/BUILD/python-pikepdf-9.5.2-build/pikepdf-9.5.2/tests/resources')
outdir =
PosixPath('/tmp/pytest-of-mockbuild/pytest-0/popen-gw1/test_evil_page_deletion0')
def test_evil_page_deletion(refcount, resources, outdir):
copy(resources / 'sandwich.pdf', outdir / 'sandwich.pdf')
src = Pdf.open(outdir / 'sandwich.pdf') # no with clause
pdf = Pdf.open(resources / 'graph.pdf')
> assert refcount(src) == 2
E AssertionError: assert 1 == 2
E + where 1 = <built-in function getrefcount>(<pikepdf.Pdf
description='/tmp/pytest-of-mockbuild/pytest-0/popen-gw1/test_evil_page_deletion0/sandwich.pdf'>)
https://docs.python.org/3.14/whatsnew/3.14.html
For the build logs, see:
https://copr.fedorainfracloud.org/coprs/g/python/python3.14/build/8905534/
For all our attempts to build python-pikepdf with Python 3.14, see:
https://copr.fedorainfracloud.org/coprs/g/python/python3.14/package/python-…
Testing and mass rebuild of packages is happening in copr.
You can follow these instructions to test locally in mock if your package
builds with Python 3.14:
https://copr.fedorainfracloud.org/coprs/g/python/python3.14/
Let us know here if you have any questions.
Python 3.14 is planned to be included in Fedora 43.
To make that update smoother, we're building Fedora packages with all
pre-releases of Python 3.14.
A build failure prevents us from testing all dependent packages (transitive
[Build]Requires),
so if this package is required a lot, it's important for us to get it fixed
soon.
We'd appreciate help from the people who know this package best,
but if you don't want to work on this now, let us know so we can try to work
around it on our side.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2322407
[Bug 2322407] Python 3.14
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2359815
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2291978
Bug ID: 2291978
Summary: F41FailsToInstall: python3-xarray
Product: Fedora
Version: rawhide
Status: NEW
Component: python-xarray
Assignee: quantum.analyst(a)gmail.com
Reporter: fti-bugs(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jonathan(a)almalinux.org,
python-packagers-sig(a)lists.fedoraproject.org,
quantum.analyst(a)gmail.com
Blocks: 2260877 (F41FailsToInstall,RAWHIDEFailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically by
https://pagure.io/releng/blob/main/f/scripts/ftbfs-fti/follow-policy.py
If you feel that this output has mistakes, please open an issue at
https://pagure.io/releng/
Your package (python-xarray) Fails To Install in Fedora 41:
can't install python3-xarray:
- nothing provides python(abi) = 3.12 needed by
python3-xarray-2023.8.0-1.fc40.noarch
- nothing provides python3.12dist(numpy) >= 1.21 needed by
python3-xarray-2023.8.0-1.fc40.noarch
- nothing provides python3.12dist(packaging) >= 21.3 needed by
python3-xarray-2023.8.0-1.fc40.noarch
- nothing provides python3.12dist(pandas) >= 1.4 needed by
python3-xarray-2023.8.0-1.fc40.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…)
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors. To reproduce, use the
koji/local repo only, e.g. in mock:
$ mock -r fedora-41-x86_64 --config-opts mirrored=False install
python3-xarray
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d…
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2260877
[Bug 2260877] Fedora 41 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2291978
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2369423
Bug ID: 2369423
Summary: python-rasterio fails to build with Python 3.14:
Multiprocessing switched the default context method
from fork to forkserver
Product: Fedora
Version: rawhide
Status: NEW
Component: python-rasterio
Assignee: quantum.analyst(a)gmail.com
Reporter: ksurma(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jonathan(a)almalinux.org, ksurma(a)redhat.com,
mhroncok(a)redhat.com,
python-packagers-sig(a)lists.fedoraproject.org,
quantum.analyst(a)gmail.com
Blocks: 2322407 (PYTHON3.14)
Target Milestone: ---
Classification: Fedora
python-rasterio fails to build with Python 3.14.0b2.
______________ ERROR at setup of test_reproject_error_propagation
______________
data =
local('/tmp/pytest-of-mockbuild/pytest-0/test_reproject_error_propagati0')
@pytest.mark.network
@pytest.fixture
def http_error_server(data):
"""Serves files from the test data directory, poorly."""
import functools
import multiprocessing
import http.server
Handler = functools.partial(RangeRequestErrorHandler,
directory=str(data))
httpd = http.server.HTTPServer(("", 0), Handler)
p = multiprocessing.Process(target=httpd.serve_forever)
> p.start()
tests/test_warp.py:2126:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/usr/lib64/python3.14/multiprocessing/process.py:121: in start
self._popen = self._Popen(self)
/usr/lib64/python3.14/multiprocessing/context.py:224: in _Popen
return _default_context.get_context().Process._Popen(process_obj)
/usr/lib64/python3.14/multiprocessing/context.py:300: in _Popen
return Popen(process_obj)
/usr/lib64/python3.14/multiprocessing/popen_forkserver.py:35: in __init__
super().__init__(process_obj)
/usr/lib64/python3.14/multiprocessing/popen_fork.py:20: in __init__
self._launch(process_obj)
/usr/lib64/python3.14/multiprocessing/popen_forkserver.py:47: in _launch
reduction.dump(process_obj, buf)
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
obj = <Process name='Process-9' parent=2132 initial>
file = <_io.BytesIO object at 0x7f384f02fa60>, protocol = None
def dump(obj, file, protocol=None):
'''Replacement for pickle.dump() using ForkingPickler.'''
> ForkingPickler(file, protocol).dump(obj)
E TypeError: cannot pickle '_thread.lock' object
E when serializing dict item '_lock'
E when serializing threading.Condition state
E when serializing threading.Condition object
E when serializing dict item '_cond'
E when serializing threading.Event state
E when serializing threading.Event object
E when serializing dict item '_BaseServer__is_shut_down'
E when serializing http.server.HTTPServer state
E when serializing http.server.HTTPServer object
E when serializing tuple item 0
E when serializing method reconstructor arguments
E when serializing method object
E when serializing dict item '_target'
E when serializing multiprocessing.context.Process state
E when serializing multiprocessing.context.Process object
See: https://docs.python.org/dev/whatsnew/3.14.html#multiprocessing
The default start method changed from fork to forkserver on platforms other
than macOS and Windows where it was already spawn.
If the threading incompatible fork method is required, you must explicitly
request it via a context from multiprocessing.get_context() (preferred) or
change the default via multiprocessing.set_start_method().
See forkserver restrictions for information and differences with the fork
method and how this change may affect existing code with mutable global shared
variables and/or shared objects that can not be automatically pickled.
For the build logs, see:
https://copr-be.cloud.fedoraproject.org/results/@python/python3.14-b1/fedor…
For all our attempts to build python-rasterio with Python 3.14, see:
https://copr.fedorainfracloud.org/coprs/g/python/python3.14-b1/package/pyth…
Testing and mass rebuild of packages is happening in copr.
You can follow these instructions to test locally in mock if your package
builds with Python 3.14:
https://copr.fedorainfracloud.org/coprs/g/python/python3.14-b1/
Let us know here if you have any questions.
Python 3.14 is planned to be included in Fedora 43.
To make that update smoother, we're building Fedora packages with all
pre-releases of Python 3.14.
A build failure prevents us from testing all dependent packages (transitive
[Build]Requires),
so if this package is required a lot, it's important for us to get it fixed
soon.
We'd appreciate help from the people who know this package best,
but if you don't want to work on this now, let us know so we can try to work
around it on our side.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2322407
[Bug 2322407] Python 3.14
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2369423
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…