https://bugzilla.redhat.com/show_bug.cgi?id=2342437
Bug ID: 2342437
Summary: python-affine-3.0a1 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: python-affine
Keywords: FutureFeature, Triaged
Assignee: quantum.analyst(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jonathan(a)almalinux.org,
python-packagers-sig(a)lists.fedoraproject.org,
quantum.analyst(a)gmail.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 3.0a1
Upstream release that is considered latest: 3.0a1
Current version/release in rawhide: 2.4.0-9.fc42
URL: https://github.com/rasterio/affine
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/16816/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-affine
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2342437
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2480167
Bug ID: 2480167
Summary: python-joblib fails to build with Python 3.15:
ValueError: Cannot register
"REGISTER","rtype":"folder","base64_name" for
automatic cleanup: unknown resource type. Resource
type should be one of the following: ['noop',
'folder', 'file', 'semlock'
Product: Fedora
Version: rawhide
Status: NEW
Component: python-joblib
Assignee: sergio.pasra(a)gmail.com
Reporter: ksurma(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: besser82(a)fedoraproject.org,
epel-packagers-sig(a)lists.fedoraproject.org,
igor.raits(a)gmail.com, jonathan(a)almalinux.org,
ksurma(a)redhat.com, mhroncok(a)redhat.com,
romain.geissler(a)amadeus.com, sergio.pasra(a)gmail.com
Blocks: 2412434 (PYTHON3.15)
Target Milestone: ---
Classification: Fedora
python-joblib fails to build with Python 3.15.0b1.
There's quite a few test failures which seem to boil down to the variations of:
_______ test_multithreaded_parallel_termination_resource_tracker_silent
________
@with_numpy
@with_multiprocessing
def test_multithreaded_parallel_termination_resource_tracker_silent():
# test that concurrent termination attempts of a same executor does not
# emit any spurious error from the resource_tracker. We test various
# situations making 0, 1 or both parallel call sending a task that will
# make the worker (and thus the whole Parallel call) error out.
cmd = """if 1:
import os
import numpy as np
from joblib import Parallel, delayed
from joblib.externals.loky.backend import resource_tracker
from concurrent.futures import ThreadPoolExecutor, wait
resource_tracker.VERBOSE = 0
array = np.arange(int(1e2))
temp_dirs_thread_1 = set()
temp_dirs_thread_2 = set()
def raise_error(array):
raise ValueError
def parallel_get_filename(array, temp_dirs):
with Parallel(backend="loky", n_jobs=2, max_nbytes=10) as p:
for i in range(10):
[filename] = p(
delayed(getattr)(array, "filename") for _ in
range(1)
)
temp_dirs.add(os.path.dirname(filename))
def parallel_raise(array, temp_dirs):
with Parallel(backend="loky", n_jobs=2, max_nbytes=10) as p:
for i in range(10):
[filename] = p(
delayed(raise_error)(array) for _ in range(1)
)
temp_dirs.add(os.path.dirname(filename))
executor = ThreadPoolExecutor(max_workers=2)
# both function calls will use the same loky executor, but with a
# different Parallel object.
future_1 = executor.submit({f1}, array, temp_dirs_thread_1)
future_2 = executor.submit({f2}, array, temp_dirs_thread_2)
# Wait for both threads to terminate their backend
wait([future_1, future_2])
future_1.result()
future_2.result()
"""
functions_and_returncodes = [
("parallel_get_filename", "parallel_get_filename", 0),
("parallel_get_filename", "parallel_raise", 1),
("parallel_raise", "parallel_raise", 1),
]
for f1, f2, returncode in functions_and_returncodes:
p = subprocess.Popen(
[sys.executable, "-c", cmd.format(f1=f1, f2=f2)],
stderr=subprocess.PIPE,
stdout=subprocess.PIPE,
)
p.wait()
_, err = p.communicate()
assert p.returncode == returncode, err.decode()
> assert b"resource_tracker" not in err, err.decode()
E AssertionError: Traceback (most recent call last):
E File
"/builddir/build/BUILD/python-joblib-1.5.3-build/joblib-1.5.3/joblib/externals/loky/backend/resource_tracker.py",
line 297, in main
E raise ValueError(
E ...<4 lines>...
E )
E ValueError: Cannot register
"REGISTER","rtype":"folder","base64_name" for automatic cleanup: unknown
resource type
("L3RtcC9qb2JsaWJfbWVtbWFwcGluZ19mb2xkZXJfMTMxMl85NjA5NzRlZGMyZTU0MDM0OWYwZWM0MjVhNmVjOGQ0Nl9kM2RhZTQ5NzdiMTk0ZDE1OTM3MjUyOGMyMGE0OGMyOQ=="}).
Resource type should be one of the following: ['noop', 'folder', 'file',
'semlock']
https://docs.python.org/3.15/whatsnew/3.15.html
For the build logs, see:
https://copr-be.cloud.fedoraproject.org/results/@python/python3.15-b1/fedor…
For all our attempts to build python-joblib with Python 3.15, see:
https://copr.fedorainfracloud.org/coprs/g/python/python3.15-b1/package/pyth…
Testing and mass rebuild of packages is happening in copr.
You can follow these instructions to test locally in mock if your package
builds with Python 3.15:
https://copr.fedorainfracloud.org/coprs/g/python/python3.15-b1/
Let us know here if you have any questions.
Python 3.15 is planned to be included in Fedora 45.
To make that update smoother, we're building Fedora packages with all
pre-releases of Python 3.15.
A build failure prevents us from testing all dependent packages (transitive
[Build]Requires),
so if this package is required a lot, it's important for us to get it fixed
soon.
We'd appreciate help from the people who know this package best,
but if you don't want to work on this now, let us know so we can try to work
around it on our side.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2412434
[Bug 2412434] Python 3.15
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2480167
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2423881
Bug ID: 2423881
Summary: python-kaptan fails to build with Python 3.15:
AttributeError: 'SourceFileLoader' object has no
attribute 'load_module'. Did you mean: 'exec_module'?
in test_py_file_handler and test_py_file_away_handler
Product: Fedora
Version: rawhide
Status: NEW
Component: python-kaptan
Assignee: davide(a)cavalca.name
Reporter: ksurma(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: davide(a)cavalca.name,
epel-packagers-sig(a)lists.fedoraproject.org,
ksurma(a)redhat.com, mhroncok(a)redhat.com
Blocks: 2412434 (PYTHON3.15)
Target Milestone: ---
Classification: Fedora
python-kaptan fails to build with Python 3.15.0a3.
__________________________ test_py_file_away_handler
___________________________
tmpdir = local('/tmp/pytest-of-mockbuild/pytest-0/test_py_file_away_handler0')
testconfig = {'debug': False}
def test_py_file_away_handler(tmpdir, testconfig):
py_file = tmpdir.join('config2.py')
py_file.write("""DATABASE = 'mysql://root:123456@localhost/girlz'
DEBUG = False
PAGINATION = {
'per_page': 10,
'limit': 20,
}
""")
config = kaptan.Kaptan()
> config.import_config(str(py_file))
tests/test_kaptan.py:273:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
../BUILDROOT/usr/lib/python3.15/site-packages/kaptan/__init__.py:91: in
import_config
self.configuration_data = self.handler.load(data)
^^^^^^^^^^^^^^^^^^^^^^^
../BUILDROOT/usr/lib/python3.15/site-packages/kaptan/handlers/pyfile_handler.py:55:
in load
module = import_pyfile(file_)
^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
pathname =
'/tmp/pytest-of-mockbuild/pytest-0/test_py_file_away_handler0/config2.py'
mod_name = ''
def import_pyfile(pathname, mod_name=''):
"""Import the contents of filepath as a Python module.
Parameters
----------
pathname: str
Path to the .py file to be imported as a module
mod_name: str
Name of the module when imported
Returns
-------
mod
The imported module
Raises
------
IOError
If file is not found
"""
if not os.path.isfile(pathname):
raise IOError('File {0} not found.'.format(pathname))
if sys.version_info[0] == 3 and sys.version_info[1] > 2: # Python >=
3.3
import importlib.machinery
loader = importlib.machinery.SourceFileLoader('', pathname)
> mod = loader.load_module(mod_name)
^^^^^^^^^^^^^^^^^^
E AttributeError: 'SourceFileLoader' object has no attribute
'load_module'. Did you mean: 'exec_module'?
FAILED tests/test_kaptan.py::test_py_file_handler - AttributeError:
'SourceFi...
FAILED tests/test_kaptan.py::test_py_file_away_handler - AttributeError:
'Sou...
https://docs.python.org/3.15/whatsnew/3.15.html
For the build logs, see:
https://copr-be.cloud.fedoraproject.org/results/@python/python3.15/fedora-r…
For all our attempts to build python-kaptan with Python 3.15, see:
https://copr.fedorainfracloud.org/coprs/g/python/python3.15/package/python-…
Testing and mass rebuild of packages is happening in copr.
You can follow these instructions to test locally in mock if your package
builds with Python 3.15:
https://copr.fedorainfracloud.org/coprs/g/python/python3.15/
Let us know here if you have any questions.
Python 3.15 is planned to be included in Fedora 45.
To make that update smoother, we're building Fedora packages with all
pre-releases of Python 3.15.
A build failure prevents us from testing all dependent packages (transitive
[Build]Requires),
so if this package is required a lot, it's important for us to get it fixed
soon.
We'd appreciate help from the people who know this package best,
but if you don't want to work on this now, let us know so we can try to work
around it on our side.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2412434
[Bug 2412434] Python 3.15
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2423881
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2512435
Bug ID: 2512435
Summary: CVE-2026-71497 maven-doxia: jsoup: Cross-site
scripting via malformed HTML tag names [fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["c629c33b-58ad-43ff-95de-238cf795de1d"]}
Component: maven-doxia
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: loganjerry(a)gmail.com
Reporter: hvyas(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
loganjerry(a)gmail.com, michel(a)michel-slm.name,
mizdebsk(a)redhat.com, mkoncek(a)redhat.com
Blocks: 2512346 (CVE-2026-71497)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
jsoup is a Java library for working with real-world HTML. From 1.14.3 until
1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name
ending in a control character, causing the tag to acquire the parsing behavior
of a different element. When a custom Safelist permits certain raw-text
elements, this misparsing can cause content that should remain inert text to be
emitted as active markup after serialization, potentially resulting in
cross-site scripting. jsoup's built-in Safelists are not affected. This issue
is fixed in version 1.23.1.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2512346
[Bug 2512346] CVE-2026-71497 org.jsoup/jsoup: jsoup: Cross-site scripting via
malformed HTML tag names
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2512435
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…