December 2017 - i18n-bugs - Fedora Mailing-Lists

[Fedora-i18n-bugs] [Bug 1527789] New: translate-toolkit: Maliciously crafted .XLF files can result arbitrary file read and potential code exection

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1527789 Bug ID: 1527789 Summary: translate-toolkit: Maliciously crafted .XLF files can result arbitrary file read and potential code exection Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: sfowler(a)redhat.com CC: dwayne(a)translate.org.za, i18n-bugs(a)lists.fedoraproject.org, mfabian(a)redhat.com, mmraka(a)redhat.com, petersen(a)redhat.com translate-toolkit before version 2.2.0 is vulnerable to XML External Entity Execution. An attacker could exploit this by supplying a maliciously crafted .XLF file causing an arbitrary file read or potential arbitrary code execution. References: https://bugzilla.novell.com/show_bug.cgi?id=1073535 https://github.com/translate/translate/pull/3632/files https://hackerone.com/reports/232614 -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

1
1
0 / 0

[Fedora-i18n-bugs] [Bug 1527790] translate-toolkit: Maliciously crafted .XLF files can result arbitrary file read and potential code exection [epel-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1527790 --- Comment #1 from Sam Fowler <sfowler(a)redhat.com> --- Use the following template to for the 'fedpkg update' request to submit an update for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable. ===== # bugfix, security, enhancement, newpackage (required) type=security # testing, stable request=testing # Bug numbers: 1234,9876 bugs=1527789,1527790 # Description of your update notes=Security fix for [PUT CVEs HERE] # Enable request automation based on the stable/unstable karma thresholds autokarma=True stable_karma=3 unstable_karma=-3 # Automatically close bugs when this marked as stable close_bugs=True # Suggest that users restart after update suggest_reboot=False ====== Additionally, you may opt to use the bodhi web interface to submit updates: https://bodhi.fedoraproject.org/updates/new -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

1
0
0 / 0

[Fedora-i18n-bugs] [Bug 1527486] New: harfbuzz-1.7.3 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1527486 Bug ID: 1527486 Summary: harfbuzz-1.7.3 is available Product: Fedora Version: rawhide Component: harfbuzz Keywords: FutureFeature, Triaged Assignee: pnemade(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, klember(a)redhat.com, moceap(a)hotmail.com, pnemade(a)redhat.com, psatpute(a)redhat.com Latest upstream release: 1.7.3 Current version/release in rawhide: 1.7.1-2.fc28 URL: http://www.freedesktop.org/wiki/HarfBuzz Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1299/ -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

1
3
0 / 0

[Fedora-i18n-bugs] [Bug 844555] New: new IME switcher prevents to send the key events to kvm

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=844555 Bug ID: 844555 QA Contact: extras-qa(a)fedoraproject.org Severity: unspecified Version: 17 Priority: unspecified CC: i18n-bugs(a)lists.fedoraproject.org, shawn.p.huang(a)gmail.com, tfujiwar(a)redhat.com Assignee: tfujiwar(a)redhat.com Summary: new IME switcher prevents to send the key events to kvm Regression: --- Story Points: --- Classification: Fedora OS: Unspecified Reporter: tagoh(a)redhat.com Type: Bug Documentation: --- Hardware: Unspecified Mount Type: --- Status: NEW Component: ibus Product: Fedora Description of problem: With the latest version of ibus on f17, ibus can't be turned on on kvm. it works back when ibus on host machine is disabled. Version-Release number of selected component (if applicable): ibus-1.4.99.20120428-2.fc17.x86_64 How reproducible: always Steps to Reproduce: 1.run ibus on both host and guest 2.press ctrl+space on kvm 3. Actual results: the key events was ate on host. no IM activated on guest Expected results: should be turned on on kvm Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

2
18
0 / 0

[Fedora-i18n-bugs] [Bug 1494303] New: Use mariadb-connector-c-devel instead of mysql-devel or mariadb-devel

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1494303 Bug ID: 1494303 Summary: Use mariadb-connector-c-devel instead of mysql-devel or mariadb-devel Product: Fedora Version: rawhide Component: tomoe Assignee: pwu(a)redhat.com Reporter: mschorm(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dchen(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, petersen(a)redhat.com, pwu(a)redhat.com Hello, please apply following command to the package SPECfile: sed -i "s/mysql-devel/mariadb-connector-c-devel/" $(fedpkg gimmespec) ; You does not build with mysql currently and you have that Buildrequires commented out, but in case you would like to use it, this could come handy :) This change is currently applicable to the Rawhide (f28) only. For more information check the tracking bugzilla. -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

1
3
0 / 0

[Fedora-i18n-bugs] [Bug 1294622] New: the package contains wrong link to website ?

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1294622 Bug ID: 1294622 Summary: the package contains wrong link to website ? Product: Fedora Version: 23 Component: hunspell-te Assignee: pnemade(a)redhat.com Reporter: jb.holcroft(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com Description of problem: The website looks wrong on Fedora Packages : https://apps.fedoraproject.org/packages/hunspell-te/ Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: it points to Gitorious.org, but it tells you that " Gitorious.org is migrating all the repositories to Internet Archive." Expected results: I assume it is this one : http://hunspell.sourceforge.net/ Additional info: -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gJGcaQkDLR&a=cc_unsubscribe

6 years, 4 months

2
4
0 / 0

[Fedora-i18n-bugs] [Bug 1428636] New: [abrt] ibus: _g_log_abort(): ibus-daemon killed by SIGTRAP

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1428636 Bug ID: 1428636 Summary: [abrt] ibus: _g_log_abort(): ibus-daemon killed by SIGTRAP Product: Fedora Version: 25 Component: ibus Assignee: tfujiwar(a)redhat.com Reporter: dreamcarrior(a)yahoo.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, shawn.p.huang(a)gmail.com, smaitra(a)redhat.com, tfujiwar(a)redhat.com Description of problem: After rebooting the system, started the first VNC session, and remotely connected to it. The ibus crashed a couple of times. Version-Release number of selected component: ibus-1.5.14-5.fc25 Additional info: reporter: libreport-2.8.0 backtrace_rating: 4 cmdline: ibus-daemon crash_function: _g_log_abort executable: /usr/bin/ibus-daemon global_pid: 15098 kernel: 4.9.12-200.fc25.x86_64 pkg_fingerprint: 4089 D8F2 FDB1 9C98 pkg_vendor: Fedora Project runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (8 frames) #0 _g_log_abort at gmessages.c:509 #1 g_log_default_handler at gmessages.c:2896 #4 ik_source_read_some_events at inotify-kernel.c:156 #5 ik_source_read_all_the_events at inotify-kernel.c:172 #6 ik_source_dispatch at inotify-kernel.c:247 #10 g_main_context_iteration at gmain.c:3990 #11 glib_worker_main at gmain.c:5783 #12 g_thread_proxy at gthread.c:784 -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

1
2
0 / 0

[Fedora-i18n-bugs] [Bug 1319111] New: incorrect use of Requires(pre)?

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1319111 Bug ID: 1319111 Summary: incorrect use of Requires(pre)? Product: Fedora Version: rawhide Component: ibus-table-extraphrase Assignee: dchen(a)redhat.com Reporter: jsilhan(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dchen(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, liangsuilong(a)gmail.com We've identified your package for having `Requires(pre)` RPM flag without `Requires` [1]. `Requires(pre)` rpm tag could be interpreted wrongly, so to prevent any harm to Fedora users I am notifying you about this fact. Any package that is specified in `Requires(pre)` could be freely removed. Citing from RPM pages: ``` If there are no other dependencies on the package providing /usr/sbin/useradd, that package is permitted to be removed from the system after installation(!) ``` [2] If you really rely on dependency just during the installation process and your package don't necessary require the dependency for the proper run of your application then ignore this bug report and close it as NOTABUG. Otherwise add to your spec file additional `Requires` for the dependency, please. [1] paste.fedoraproject.org/341611/82208431 [2] http://www.rpm.org/wiki/PackagerDocs/MoreOnDependencies -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

2
3
0 / 0

[Fedora-i18n-bugs] [Bug 1413840] New: The various ibus-* modules tail to refresh gtk' s immodule cache in every instance

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1413840 Bug ID: 1413840 Summary: The various ibus-* modules tail to refresh gtk's immodule cache in every instance Product: Fedora Version: 25 Component: ibus Assignee: tfujiwar(a)redhat.com Reporter: phil(a)fifi.org QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, shawn.p.huang(a)gmail.com, smaitra(a)redhat.com, tfujiwar(a)redhat.com Description of problem: If both ibus-gtk3.x86_64 and ibus-gtk3.i686 are installed, only one of either the 32 or 64 bit immodule database is updated. The same applies to the gtk2 modules. Version-Release number of selected component (if applicable): ibus-gtk3-1.5.14-5.fc25.x86_64 How reproducible: Always. Steps to Reproduce: 1. dnf remove ibus-gtk* 2. dnf install ibus-gtk2.i686 ibus-gtk2.x86_64 ibus-gtk3.i686 ibus-gtk3.x86_64 Actual results: $ ls /usr/lib*/gtk-*/*/immodules.cache /usr/lib/gtk-2.0/2.10.0/immodules.cache /usr/lib/gtk-3.0/3.0.0/immodules.cache (no 64-bit immodules) Expected results: I'd expect all four /usr/lib*/gtk-*/*/immodules.cache files to be updated: $ ls /usr/lib*/gtk-*/*/immodules.cache /usr/lib64/gtk-2.0/2.10.0/immodules.cache /usr/lib64/gtk-3.0/3.0.0/immodules.cache /usr/lib/gtk-2.0/2.10.0/immodules.cache /usr/lib/gtk-3.0/3.0.0/immodules.cache Additional info: The postinstall scriplet is different for 32 and 64 bit packages, but when both 32 and 64 bit packages are installed: The first time the script runs (on the 32 bit package), $1 is equal to 1 anre runs gtk-query-immodules-3.0-32. When the 64-bit package is installed, $1 is equal to 2, and gtk-query-immodules-3.0-64 is not ran. if [ $1 -eq 1 ] ; then # For upgrades, the cache will be regenerated by the new package's %postun gtk-query-immodules-3.0-32 --update-cache &> /dev/null || : fi Note that because of the logic this only applies on the initial install, but the problem will cure itself on upgrades. -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1402602] New: Cannot input japanese character with ibus-mozc in Qt applications

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1402602 Bug ID: 1402602 Summary: Cannot input japanese character with ibus-mozc in Qt applications Product: Fedora Version: 25 Component: ibus-qt Assignee: tfujiwar(a)redhat.com Reporter: nicolas.brack(a)mail.be QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, shawn.p.huang(a)gmail.com, tfujiwar(a)redhat.com Description of problem: ----------------------- Since I upgraded to fedora 25, I cannot type in japanese using ibus and mozc in qt application such as, for example, scribus, krita or the Qt frontend to cmake. Instead when selecting the "hiragana" submode, latin character are type as if in "direct input" submode. I quickly tried to input japanese text with ibus-anthy with no more success. Both mozc and anthy works fine with GTK2/GTK3 applications I noticed this while trying to describe the issue in Bug#1395381. Version-Release number of selected component: --------------------------------------------- # dnf list ibus-\* Last metadata expiration check: 0:23:47 ago on Wed Dec 7 23:57:23 2016. Installed Packages ibus-anthy.x86_64 1.5.9-1.fc25 @fedora ibus-anthy-python.noarch 1.5.9-1.fc25 @fedora ibus-chewing.x86_64 1.5.1-1.fc25 @fedora ibus-gtk2.x86_64 1.5.14-3.fc25 @fedora ibus-gtk3.x86_64 1.5.14-3.fc25 @fedora ibus-handwrite.x86_64 3.0.0-4.fc24 @@commandline ibus-hangul.x86_64 1.5.0-6.fc24 @@commandline ibus-kkc.x86_64 1.5.22-4.fc24 @@commandline ibus-libpinyin.x86_64 1.8.0-2.fc25 @updates ibus-libs.x86_64 1.5.14-3.fc25 @fedora ibus-m17n.x86_64 1.3.4-20.fc24 @@commandline ibus-mozc.x86_64 2.17.2322.102-1.fc25 @fedora ibus-qt.x86_64 1.3.3-11.fc25 @fedora ibus-rawcode.x86_64 1.3.2-7.fc24 @@commandline ibus-setup.noarch 1.5.14-3.fc25 @fedora ibus-typing-booster.noarch 1.5.13-1.fc25 @updates ibus-wayland.x86_64 1.5.14-3.fc25 @fedora # dnf list anthy mozc Installed Packages anthy.x86_64 9100h-29.fc24 @@commandline mozc.x86_64 2.17.2322.102-1.fc25 @fedora How reproducible: ----------------- Always Steps to Reproduce: ------------------- 0.Make sure to have ibus-qt and ibus-mozc installed 1.Go to the general gnome settings panel, "Regions and languages" menu. 2.Add an input in Japanese (Mozc) 3.Find the ibus on the top right of gnome 3 and switch the IME to Japanese. 4.In the same pop-up to select mozc as the IME, make sure your input mode is set to "hiragana". 4.Open gedit. Type some japanese gibberish. It's in hiragana. 5.Open a qt application such as cmake-gui. Try to input japanese gibberish in any text entry. It's latin character as if you're still using qwerty or whatever latin keyboard layout. Additional info: ---------------- My default layout is dvorak. I set Mozc to form kana by using that dvorak layout, not to input kana directly. However setting Mozc to a kana keymap does not solve the problem at all : I still type latin characters with a dvorak keymap. -- You are receiving this mail because: You are on the CC list for the bug.

6 years, 4 months

2
26
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

i18n-bugs December 2017