July 2025 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2293212] New: CVE-2024-28863 yarnpkg: node-tar: denial of service while parsing a tar file due to lack of folders depth validation [epel-8]
by bugzilla＠redhat.com 29 Jul '26

29 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2293212 Bug ID: 2293212 Summary: CVE-2024-28863 yarnpkg: node-tar: denial of service while parsing a tar file due to lack of folders depth validation [epel-8] Product: Fedora EPEL Version: epel8 Status: NEW Component: yarnpkg Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: zsvetlik(a)redhat.com Reporter: trathi(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, ngompa13(a)gmail.com, zsvetlik(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2293200 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2293212 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2222350] New: CVE-2022-38900 yarnpkg: decode-uri-component: improper input validation resulting in DoS [epel-8]
by bugzilla＠redhat.com 29 Jul '26

29 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2222350 Bug ID: 2222350 Summary: CVE-2022-38900 yarnpkg: decode-uri-component: improper input validation resulting in DoS [epel-8] Product: Fedora EPEL Version: epel8 Status: NEW Component: yarnpkg Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: zsvetlik(a)redhat.com Reporter: mrehak(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, manisandro(a)gmail.com, ngompa13(a)gmail.com, zsvetlik(a)redhat.com Target Milestone: --- Classification: Fedora More information about this security flaw is available in the following bug: http://bugzilla.redhat.com/show_bug.cgi?id=2170644 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2222350 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2260040] New: Unable to install
by bugzilla＠redhat.com 29 Jul '26

29 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2260040 Bug ID: 2260040 Summary: Unable to install Product: Fedora EPEL Version: epel9 Status: NEW Component: python-statsmodels Assignee: epel-packagers-sig(a)lists.fedoraproject.org Reporter: eric.soderman(a)smhi.se CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org, sergio.pasra(a)gmail.com Target Milestone: --- Link ID: Red Hat Bugzilla 2144676 Classification: Fedora Description of problem: I am unable to install python3-statsmodels. Version-Release number of selected component (if applicable): 0.13.2-4.el9 How reproducible: Always Steps to Reproduce: $ sudo dnf install python3-statsmodels Actual results: Last metadata expiration check: 0:00:51 ago on Wed 24 Jan 2024 09:10:20 CET. Error: Problem: conflicting requests - nothing provides python3.9dist(patsy) >= 0.5.2 needed by python3-statsmodels-0.13.2-4.el9.x86_64 from epel - nothing provides python3.9dist(packaging) >= 21.3 needed by python3-statsmodels-0.13.2-4.el9.x86_64 from epel (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Additional info: There is another closed bugzila also mentioning this problem: https://bugzilla.redhat.com/show_bug.cgi?id=2144676 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2260040 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2314154] New: libraqm-0.10.2 is available
by bugzilla＠redhat.com 23 Jul '26

23 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2314154 Bug ID: 2314154 Summary: libraqm-0.10.2 is available Product: Fedora Version: rawhide Status: NEW Component: libraqm Keywords: FutureFeature, Triaged Assignee: moceap(a)hotmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, moceap(a)hotmail.com Target Milestone: --- Classification: Fedora Releases retrieved: 0.10.2 Upstream release that is considered latest: 0.10.2 Current version/release in rawhide: 0.8.0-8.fc41 URL: https://github.com/HOST-Oman/libraqm Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/10672/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/libraqm -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2314154 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 17

[Bug 2128273] New: Please port your pcre dependency to pcre2. Pcre has been deprecated
by bugzilla＠redhat.com 22 Jul '26

22 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2128273 Bug ID: 2128273 Summary: Please port your pcre dependency to pcre2. Pcre has been deprecated Product: Fedora Version: rawhide Status: NEW Component: ccze Assignee: dcavalca(a)fb.com Reporter: ljavorsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, pahan(a)hubbitus.info Target Milestone: --- Classification: Fedora Pcre has been deprecated since Fedora 38. Please consider porting to the new pcre2 version. Fedora change that describes the pcre deprecation is located here: https://fedoraproject.org/wiki/PcreDeprecation FESCo approval is located here: https://pagure.io/fesco/issue/2862 If your component has already ported to pcre2 or you don't Require/BuildRequire any pcre subpackage, feel free to close this Bugzilla. This Bugzilla was created automatically and some issues might have occurred along the way. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2128273

1 3

[Bug 2217559] New: lua-lpeg-1.1.0 is available
by bugzilla＠redhat.com 20 Jul '26

20 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2217559 Bug ID: 2217559 Summary: lua-lpeg-1.1.0 is available Product: Fedora Version: rawhide Status: NEW Component: lua-lpeg Keywords: FutureFeature, Triaged Assignee: asn(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: asn(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, tkrizek(a)isc.org Target Milestone: --- Classification: Fedora Releases retrieved: 1.1.0 Upstream release that is considered latest: 1.1.0 Current version/release in rawhide: 1.0.2-10.fc38 URL: http://www.inf.puc-rio.br/~roberto/lpeg/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1852/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/lua-lpeg -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2217559 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2209027] New: psutils-3.0 is available
by bugzilla＠redhat.com 20 Jul '26

20 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2209027 Bug ID: 2209027 Summary: psutils-3.0 is available Product: Fedora Version: rawhide Status: NEW Component: psutils Keywords: FutureFeature, Triaged Assignee: opohorel(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, opohorel(a)redhat.com, ppisar(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 3.0 Upstream release that is considered latest: 3.0 Current version/release in rawhide: 2.10-1.fc39 URL: https://github.com/rrthomas/psutils Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12921/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/psutils -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2209027

1 28

[Bug 2210415] New: gajim-1.8.0 is available
by bugzilla＠redhat.com 15 Jul '26

15 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2210415 Bug ID: 2210415 Summary: gajim-1.8.0 is available Product: Fedora Version: rawhide Status: NEW Component: gajim Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lemenkov(a)gmail.com, mschmidt(a)redhat.com, redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 1.8.0 Upstream release that is considered latest: 1.8.0 Current version/release in rawhide: 1.7.3-2.fc39 URL: https://gajim.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/870/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/gajim -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210415

1 113

[Bug 2210464] New: python-nbxmpp-4.3.0 is available
by bugzilla＠redhat.com 15 Jul '26

15 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2210464 Bug ID: 2210464 Summary: python-nbxmpp-4.3.0 is available Product: Fedora Version: rawhide Status: NEW Component: python-nbxmpp Keywords: FutureFeature, Triaged Assignee: mschmidt(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mschmidt(a)redhat.com, suraia(a)ikkoku.de Target Milestone: --- Classification: Fedora Releases retrieved: 4.3.0 Upstream release that is considered latest: 4.3.0 Current version/release in rawhide: 4.2.2-1.fc39 URL: https://dev.gajim.org/gajim/python-nbxmpp/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/12980/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-nbxmpp -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2210464

1 83

[Bug 2336942] New: Changing Background doesn't populate with images
by bugzilla＠redhat.com 11 Jul '26

11 Jul '26

https://bugzilla.redhat.com/show_bug.cgi?id=2336942 Bug ID: 2336942 Summary: Changing Background doesn't populate with images Product: Fedora EPEL Version: epel9 Hardware: x86_64 OS: Linux Status: NEW Component: cinnamon Severity: medium Assignee: epel-packagers-sig(a)lists.fedoraproject.org Reporter: will.senn(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, leigh123linux(a)googlemail.com, miketwebster(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: When I right click on the desktop, choose Change Desktop Background, it doesn't show any wallpapers. Version-Release number of selected component (if applicable): cinnamon-5.6.8-2.el9.src.rpm How reproducible: as described, every time. Steps to Reproduce: 1. Right click on the desktop 2. Choose Change Desktop Background 3. Click on any folder or add one Actual results: Nothing is displayed and nothing can be chosen as background Expected results: Images to choose as background should appear Additional info: This has been addressed in other ports: https://salsa.debian.org/cinnamon-team/cinnamon/-/commit/6172cacec9d5012ad0… The workaround found in the patch is to edit: /usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py /usr/share/cinnamon/cinnamon-settings/bin/imtools.py /usr/share/cinnamon/cinnamon-settings/modules/cs_backgrounds.py /usr/share/cinnamon/cinnamon-settings/modules/cs_user.py and change instances of Image.ANTIALIAS to Image.LANCZOS This works and the problem is solved in my case. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2336942 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 3

2026

2025

2024

2023

2022

2021

Epel-packagers-sig July 2025