i18n-bugs September 2026

i18n-bugs@lists.fedoraproject.org

1 participants
34 discussions

[Bug 2460541] New: [abrt] imsettings: g_malloc0_n(): imsettings-daemon killed by SIGABRT
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2460541 Bug ID: 2460541 Summary: [abrt] imsettings: g_malloc0_n(): imsettings-daemon killed by SIGABRT Product: Fedora Version: 44 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:8b8d4cb79153aa86bf5c71a5a74b459e4bd8183c;VAR IANT_ID=workstation; Component: imsettings Assignee: tagoh(a)redhat.com Reporter: mfabian(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Version-Release number of selected component: imsettings-1.8.11-2.fc44 Additional info: reporter: libreport-2.17.15 type: CCpp reason: imsettings-daemon killed by SIGABRT journald_cursor: s=0a42150c4c5e4daaa68849b7d3dfe01e;i=100ef;b=fa8669f8e32147168fe5695ed2047724;m=14d6fe891f;t=65008f24d3ae9;x=9ae49b695a645e79 executable: /usr/libexec/imsettings-daemon cmdline: /usr/libexec/imsettings-daemon --replace cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/run-p17043-i17044.service rootdir: / uid: 1000 kernel: 6.19.13-300.fc44.x86_64 package: imsettings-1.8.11-2.fc44 runlevel: /bin/sh: 行 1: runlevel: command not found xsession_errors: backtrace_rating: 4 crash_function: g_malloc0_n comment: Truncated backtrace: Thread no. 1 (9 frames) #7 g_malloc0_n at ../glib/gmem.c:435 #8 _start_process at /usr/src/debug/imsettings-1.8.11-2.fc44.x86_64/imsettings-daemon/imsettings-proc.c:351 #9 _start_main_process at /usr/src/debug/imsettings-1.8.11-2.fc44.x86_64/imsettings-daemon/imsettings-proc.c:272 #10 imsettings_proc_spawn at /usr/src/debug/imsettings-1.8.11-2.fc44.x86_64/imsettings-daemon/imsettings-proc.c:716 #11 imsettings_server_cb_switch_im at /usr/src/debug/imsettings-1.8.11-2.fc44.x86_64/imsettings-daemon/imsettings-server.c:921 #12 imsettings_server_bus_method_call at /usr/src/debug/imsettings-1.8.11-2.fc44.x86_64/imsettings-daemon/imsettings-server.c:1277 #13 call_in_idle_cb at ../gio/gdbusconnection.c:5476 #16 g_main_context_dispatch_unlocked at ../glib/gmain.c:4451 #17 g_main_context_iterate_unlocked at ../glib/gmain.c:4516 Potential duplicate: bug 2361916 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2460541 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2411832] New: [abrt] imsettings: g_malloc0_n(): imsettings-daemon killed by SIGTRAP
by bugzilla＠redhat.com 08 Oct '26

08 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2411832 Bug ID: 2411832 Summary: [abrt] imsettings: g_malloc0_n(): imsettings-daemon killed by SIGTRAP Product: Fedora Version: 43 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:8b8d4cb79153aa86bf5c71a5a74b459e4bd8183c;VAR IANT_ID=workstation; Component: imsettings Assignee: tagoh(a)redhat.com Reporter: mfabian(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Version-Release number of selected component: imsettings-1.8.10-3.fc43 Additional info: reporter: libreport-2.17.15 type: CCpp reason: imsettings-daemon killed by SIGTRAP journald_cursor: s=6ebab3d2e945482cb649938aa0c4a7e1;i=1887c;b=1816c5d43ae04dc1b079b40545bbe477;m=1e6cc54eba5;t=64299198fc0d5;x=16f76a41bc538a28 executable: /usr/libexec/imsettings-daemon cmdline: /usr/libexec/imsettings-daemon cgroup: 0::/user.slice/user-1000.slice/user@1000.service/app.slice/dbus-:1.2-com.redhat.imsettings@0.service rootdir: / uid: 1000 kernel: 6.17.1-300.fc43.x86_64 package: imsettings-1.8.10-3.fc43 runlevel: /bin/sh: 行 1: runlevel: command not found backtrace_rating: 4 crash_function: g_malloc0_n comment: Truncated backtrace: Thread no. 1 (9 frames) #3 g_malloc0_n at ../glib/gmem.c:435 #4 _start_process at /usr/src/debug/imsettings-1.8.10-3.fc43.x86_64/imsettings-daemon/imsettings-proc.c:351 #5 _start_main_process at /usr/src/debug/imsettings-1.8.10-3.fc43.x86_64/imsettings-daemon/imsettings-proc.c:272 #6 imsettings_proc_spawn at /usr/src/debug/imsettings-1.8.10-3.fc43.x86_64/imsettings-daemon/imsettings-proc.c:716 #7 imsettings_server_cb_switch_im at /usr/src/debug/imsettings-1.8.10-3.fc43.x86_64/imsettings-daemon/imsettings-server.c:921 #8 imsettings_server_bus_method_call at /usr/src/debug/imsettings-1.8.10-3.fc43.x86_64/imsettings-daemon/imsettings-server.c:1277 #9 call_in_idle_cb at ../gio/gdbusconnection.c:5476 #12 g_main_context_dispatch_unlocked at ../glib/gmain.c:4425 #13 g_main_context_iterate_unlocked at ../glib/gmain.c:4490 Potential duplicate: bug 2361916 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2411832 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2539584] New: xcompose.conf sets QT_IM_MODULE=xim on Plasma Wayland (ru_RU, fi_FI, pt_BR, el_GR, am_ET), breaking the virtual keyboard in Qt apps
by bugzilla＠redhat.com 07 Oct '26

07 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2539584 Bug ID: 2539584 Summary: xcompose.conf sets QT_IM_MODULE=xim on Plasma Wayland (ru_RU, fi_FI, pt_BR, el_GR, am_ET), breaking the virtual keyboard in Qt apps Product: Fedora Version: 44 Hardware: x86_64 OS: Linux Status: NEW Component: imsettings Severity: medium Assignee: tagoh(a)redhat.com Reporter: plaztininikolai(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora On Fedora 44 KDE Plasma (Wayland), users whose locale is in _xcompose_language_list (am_ET, el_GR, fi_FI, pt_BR, ru_RU) get QT_IM_MODULE=xim exported into the session by /etc/xdg/plasma-workspace/env/xinput.sh (imsettings-plasma). Qt/KDE applications then use XIM instead of the Wayland text-input protocol, so the Plasma virtual keyboard (plasma-keyboard) never appears in Qt/KDE applications. It still works in non-Qt applications (Chromium, Flatpaks). Other locales are not affected: they get none.conf, which has IMSETTINGS_IGNORE_ME=yes and IMSETTINGS_IGNORE_SESSION=*-wayland,GNOME (added for bug 2240722), so setup_qt_immodule unsets QT_IM_MODULE. xcompose.conf lacks these lines, so the xcompose locales still get "xim". Versions: imsettings-1.8.11-2.fc44 imsettings-plasma-1.8.11-2.fc44 plasma-workspace-6.7.5-1.fc44 kwin-6.7.5-1.fc44 plasma-keyboard-6.7.5-1.fc44 Rawhide (1.8.11-3) has the same xcompose.conf. Reproducible: Always Steps to Reproduce: 1. On Fedora 44 KDE Plasma, set the system locale to ru_RU.UTF-8 (or fi_FI, pt_BR, el_GR, am_ET). 2. Log in to a Plasma Wayland session. 3. Run: systemctl --user show-environment | grep QT_IM_MODULE 4. Enable the virtual keyboard (System Settings > Keyboard > Virtual Keyboard) and tap a text field in a Qt/KDE app (Dolphin, System Settings). Actual Results: 3. QT_IM_MODULE=xim 4. The virtual keyboard does not appear in Qt/KDE applications. Expected Results: 3. QT_IM_MODULE is not set, as with en_US and other none.conf locales. 4. The virtual keyboard appears in Qt/KDE applications. Additional Information: Result of the xinput.sh logic in a Plasma Wayland session with IMSETTINGS_DISABLE_USER_XINPUTRC=yes and different LANG values: ru_RU, fi_FI, pt_BR, el_GR -> QT_IM_MODULE=xim en_US, de_DE, fr_FR, uk_UA, es_ES, pt_PT, ja_JP, zh_CN -> unset none.conf ends with: IMSETTINGS_IGNORE_ME=yes # We don't take care of Wayland IMSETTINGS_IGNORE_SESSION=*-wayland,GNOME xcompose.conf has no such lines. Suggested fix: add the same two lines to /etc/X11/xinit/xinput.d/xcompose.conf: IMSETTINGS_IGNORE_ME=yes IMSETTINGS_IGNORE_SESSION=*-wayland,GNOME Related: the 1.8.11-2 changelog says "Disable imsettings for KDE", but Patch5 (imsettings-disable-kde.patch) is inside %if 0%{?rhel} in imsettings.spec and is not in the Fedora SRPM. On Fedora 44 /usr/libexec/imsettings-target-checker.sh has no kde* case and "imsettings-check --check-desktop KDE" returns 0, so KDE sessions are still handled by imsettings. Applying that patch on Fedora would also fix this. See also bug 2240722 and bug 2232064. Workaround: mkdir -p ~/.config/imsettings echo 'XIM=none' > ~/.config/imsettings/xinputrc then log out and back in. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2539584 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 9

[Bug 2538776] New: cldr-emoji-annotation-49-beta1 is available
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2538776 Bug ID: 2538776 Summary: cldr-emoji-annotation-49-beta1 is available Product: Fedora Version: rawhide Status: NEW Component: cldr-emoji-annotation Keywords: FutureFeature, Triaged Assignee: tfujiwar(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 49-beta1 Upstream release that is considered latest: 49-beta1 Current version/release in rawhide: 49~alpha2-1.fc46 URL: https://github.com/unicode-org/cldr Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/103642/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/cldr-emoji-annotation -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2538776 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2544396] New: harfbuzz-14.5.1 is available
by bugzilla＠redhat.com 05 Oct '26

05 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2544396 Bug ID: 2544396 Summary: harfbuzz-14.5.1 is available Product: Fedora Version: rawhide Status: NEW Component: harfbuzz Keywords: FutureFeature, Triaged Assignee: pnemade(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, kalevlember(a)gmail.com, moceap(a)hotmail.com, pnemade(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 14.5.1 Upstream release that is considered latest: 14.5.1 Current version/release in rawhide: 14.5.0-1.fc46 URL: https://harfbuzz.github.io Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1299/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/harfbuzz -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2544396 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2436031] New: [abrt] ibus-typing-booster: _atspi_dbus_call_partial_va(): python3.14 killed by SIGSEGV
by bugzilla＠redhat.com 28 Sep '26

28 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2436031 Bug ID: 2436031 Summary: [abrt] ibus-typing-booster: _atspi_dbus_call_partial_va(): python3.14 killed by SIGSEGV Product: Fedora Version: 43 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:73256a6f593877c8123e20da5fd990c7e6846fca;VAR IANT_ID=workstation; Component: ibus-typing-booster Assignee: mfabian(a)redhat.com Reporter: 4242eli(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, mfabian(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: gnome calendar crashes when you select a day open the keyboard and when you type one word. if you using x11 problem not occur. Version-Release number of selected component: ibus-typing-booster-2.30.2-1.fc43 Additional info: reporter: libreport-2.17.15 type: CCpp reason: python3.14 killed by SIGSEGV journald_cursor: s=c88be49776e442c1ad412a666ac413fb;i=12dbd;b=10fd69e491504b4abfa7699dd7b003fe;m=3a9ef5a;t=649ca92597c7d;x=3038981150607bef executable: /usr/bin/python3.14 cmdline: /usr/bin/python3 /usr/share/ibus-typing-booster/engine/main.py --ibus cgroup: 0::/user.slice/user-1000.slice/user@1000.service/session.slice/org.freedesktop.IBus.session.GNOME.service rootdir: / uid: 1000 kernel: 6.18.7-1.surface.fc43.x86_64 package: ibus-typing-booster-2.30.2-1.fc43 runlevel: /bin/sh: line 1: runlevel: command not found backtrace_rating: 4 crash_function: _atspi_dbus_call_partial_va comment: gnome calendar crashes when you select a day open the keyboard and when you type one word. if you using x11 problem not occur. Truncated backtrace: Thread no. 1 (30 frames) #0 _atspi_dbus_call_partial_va at ../atspi/atspi-misc.c:1321 #1 _atspi_dbus_call_partial at ../atspi/atspi-misc.c:1361 #2 atspi_accessible_get_state_set at ../atspi/atspi-accessible.c:734 #4 ffi_call_unix64 at ../src/x86/unix64.S:104 #5 ffi_call_int at ../src/x86/ffi64.c:676 #6 ffi_call at ../src/x86/ffi64.c:713 #7 pygi_invoke_c_callable at ../gi/pygi-invoke.c:711 #8 pygi_function_cache_invoke at ../gi/pygi-cache.c:838 #9 pygi_callable_info_invoke at ../gi/pygi-invoke.c:756 #10 _callable_info_vectorcall at ../gi/pygi-info.c:547 #11 _function_info_vectorcall at ../gi/pygi-info.c:611 #12 _PyObject_VectorcallTstate at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_call.h:169 #13 PyObject_Vectorcall at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Objects/call.c:327 #14 _PyEval_EvalFrameDefault at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/generated_cases.c.h:4079 #15 _PyEval_EvalFrame at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_ceval.h:121 #16 _PyEval_Vector at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/ceval.c:2083 #17 _PyFunction_Vectorcall at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Objects/call.c:413 #18 _PyObject_VectorcallTstate at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_call.h:169 #19 method_vectorcall at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Objects/classobject.c:73 #20 _PyObject_VectorcallTstate at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_call.h:169 #21 context_run at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/context.c:728 #22 _PyEval_EvalFrameDefault at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/generated_cases.c.h:3744 #23 _PyEval_EvalFrame at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_ceval.h:121 #24 _PyEval_Vector at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/ceval.c:2083 #25 _PyFunction_Vectorcall at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Objects/call.c:413 #26 _PyObject_VectorcallTstate at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Include/internal/pycore_call.h:169 #27 method_vectorcall at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Objects/classobject.c:73 #28 thread_run at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Modules/_threadmodule.c:359 #29 pythread_wrapper at /usr/src/debug/python3.14-3.14.2-1.fc43.x86_64/Python/thread_pthread.h:242 #31 __clone3 at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78 Potential duplicate: bug 2328000 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2436031 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2537225] New: uim-1.9.7 is available
by bugzilla＠redhat.com 28 Sep '26

28 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2537225 Bug ID: 2537225 Summary: uim-1.9.7 is available Product: Fedora Version: rawhide Status: NEW Component: uim Keywords: FutureFeature, Triaged Assignee: tagoh(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 1.9.7 Upstream release that is considered latest: 1.9.7 Current version/release in rawhide: 1.9.6-4.fc45 URL: https://github.com/uim/uim Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/5037/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/uim -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2537225 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 7

[Bug 2539232] New: CVE-2026-75140 cldr-emoji-annotation: jsoup: Denial of Service via deeply nested XML documents [fedora-all]
by bugzilla＠redhat.com 28 Sep '26

28 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2539232 Bug ID: 2539232 Summary: CVE-2026-75140 cldr-emoji-annotation: jsoup: Denial of Service via deeply nested XML documents [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["93d0ae1f-1295-4ff3-94ce-e4335054e806"]} Component: cldr-emoji-annotation Keywords: Security, SecurityTracking Severity: high Assignee: tfujiwar(a)redhat.com Reporter: mpapadop(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2539232 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 2

[Bug 2539243] New: CVE-2026-75140 cldr-emoji-annotation: jsoup: Denial of Service via deeply nested XML documents [fedora-all]
by bugzilla＠redhat.com 28 Sep '26

28 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2539243 Bug ID: 2539243 Summary: CVE-2026-75140 cldr-emoji-annotation: jsoup: Denial of Service via deeply nested XML documents [fedora-all] Product: Fedora Version: rawhide Status: NEW Whiteboard: {"flaws": ["93d0ae1f-1295-4ff3-94ce-e4335054e806"]} Component: cldr-emoji-annotation Keywords: Security, SecurityTracking Severity: high Assignee: tfujiwar(a)redhat.com Reporter: mpapadop(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2539243 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2476461] New: [abrt] ibus-libpinyin: pinyin_get_pinyin_key_rest_positions(): ibus-engine-libpinyin killed by SIGSEGV
by bugzilla＠redhat.com 28 Sep '26

28 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2476461 Bug ID: 2476461 Summary: [abrt] ibus-libpinyin: pinyin_get_pinyin_key_rest_positions(): ibus-engine-libpinyin killed by SIGSEGV Product: Fedora Version: 43 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:0f0193c4134c2216b21c48f5488238dae183763a;VAR IANT_ID=workstation; Component: ibus-libpinyin Assignee: alexepico(a)gmail.com Reporter: justin2233312(a)outlook.com QA Contact: extras-qa(a)fedoraproject.org CC: alexepico(a)gmail.com, i18n-bugs(a)lists.fedoraproject.org, petersen(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: when typing Chinese, this application suddenly crash. Version-Release number of selected component: ibus-libpinyin-1.16.5-2.fc43 Additional info: reporter: libreport-2.17.15 type: CCpp reason: ibus-engine-libpinyin killed by SIGSEGV journald_cursor: s=4eaf26e5bd4f48cd8371318296c73ed2;i=215830;b=2a7f161833ce4b8087df88b516d4c92d;m=112d42e80;t=64f9f92d00e44;x=f66d45ff278a2164 executable: /usr/libexec/ibus-engine-libpinyin cmdline: /usr/libexec/ibus-engine-libpinyin --ibus rootdir: / uid: 1000 kernel: 6.19.11-200.fc43.x86_64 package: ibus-libpinyin-1.16.5-2.fc43 runlevel: /bin/sh: 行 1: runlevel: 未找到命令 backtrace_rating: 4 crash_function: pinyin_get_pinyin_key_rest_positions comment: when typing Chinese, this application suddenly crash. Truncated backtrace: Thread no. 1 (14 frames) #0 pinyin_get_pinyin_key_rest_positions at /usr/src/debug/libpinyin-2.10.2-2.fc43.x86_64/src/pinyin.cpp:2970 #1 PY::LibPinyinCandidates::selectCandidate at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYPLibPinyinCandidates.cc:169 #2 PY::PhoneticEditor::selectCandidateInternal at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYPPhoneticEditor.cc:401 #3 PY::PhoneticEditor::selectCandidate at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYPPhoneticEditor.cc:523 #4 PY::PhoneticEditor::processSpace at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYPPhoneticEditor.cc:74 #6 PY::PinyinEngine::processKeyEvent at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYPPinyinEngine.cc:437 #7 _ibus_marshal_BOOLEAN__UINT_UINT_UINT at /usr/src/debug/ibus-1.5.33-5.fc43.x86_64/src/ibusmarshalers.c:280 #11 signal_emit_valist_unlocked at ../gobject/gsignal.c:3548 #14 ibus_engine_service_method_call at /usr/src/debug/ibus-1.5.33-5.fc43.x86_64/src/ibusengine.c:1323 #15 call_in_idle_cb at ../gio/gdbusconnection.c:5476 #18 g_main_context_dispatch_unlocked at ../glib/gmain.c:4425 #19 g_main_context_iterate_unlocked at ../glib/gmain.c:4490 #21 ibus_main at /usr/src/debug/ibus-1.5.33-5.fc43.x86_64/src/ibusshare.c:336 #22 start_component at /usr/src/debug/ibus-libpinyin-1.16.5-2.fc43.x86_64/src/PYMain.cc:161 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2476461 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

i18n-bugs September 2026