mingw January 2015

mingw@lists.fedoraproject.org

8 participants
75 discussions

[Bug 851680] Review Request: mingw-libidl - MinGW Windows IDL Parsing Library.
by Red Hat Bugzilla 18 Jan '15

18 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=851680 Jon Ciesla <limburgher(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|fedora-cvs? | -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=diBIjq3HeN&a=cc_unsubscribe

1 0

[Bug 851680] Review Request: mingw-libidl - MinGW Windows IDL Parsing Library.
by Red Hat Bugzilla 18 Jan '15

18 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=851680 --- Comment #8 from Jon Ciesla <limburgher(a)gmail.com> --- WARNING: Requested package name mingw-libIDL doesn't match bug summary mingw-libidl Please correct. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gDnk5r8lXZ&a=cc_unsubscribe

1 0

[Bug 787067] CVE-2012-0841 libxml2: hash table collisions CPU usage DoS
by Red Hat Bugzilla 16 Jan '15

16 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=787067 Kurt Seifried <kseifried(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA Last Closed| |2015-01-16 23:43:35 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=zcJNCXjNdo&a=cc_unsubscribe

1 0

[Bug 851680] Review Request: mingw-libidl - MinGW Windows IDL Parsing Library.
by Red Hat Bugzilla 16 Jan '15

16 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=851680 greg.hellings(a)gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(greg.hellings@gma |needinfo+ fedora-cvs? |il.com) fedora-cvs+ | --- Comment #7 from greg.hellings(a)gmail.com --- As per the review, my initial SCM request was incorrect. I'm opening a new one. If the mingw-libidl one could be removed and replaced with this more correct one, I'd appreciate that. New Package SCM Request ======================= Package Name: mingw-libIDL Short Description: MinGW Windows IDL Parsing Library Upstream URL: http://ftp.gnome.org/pub/gnome/sources/libIDL/ Owners: greghellings Branches: f20 f21 InitialCC: -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5G1jXlB5YU&a=cc_unsubscribe

1 0

[Bug 1177278] CVE-2014-8964 mingw-pcre: pcre: incorrect handling of zero-repeat assertion conditions [fedora-all]
by Red Hat Bugzilla 12 Jan '15

12 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1177278 Fedora Update System <updates(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version|mingw-pcre-8.33-4.fc19 |mingw-pcre-8.35-1.el7 --- Comment #15 from Fedora Update System <updates(a)fedoraproject.org> --- mingw-pcre-8.35-1.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=VwvR9wXUZp&a=cc_unsubscribe

1 0

[Bug 1118276] New: Subpixel rendering patch invalid
by Red Hat Bugzilla 08 Jan '15

08 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1118276 Bug ID: 1118276 Summary: Subpixel rendering patch invalid Product: Fedora Version: rawhide Component: mingw-freetype Assignee: rjones(a)redhat.com Reporter: ntd(a)entidi.it QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, lfarkas(a)lfarkas.org, rjones(a)redhat.com Created attachment 917044 --> https://bugzilla.redhat.com/attachment.cgi?id=917044&action=edit The new patch updated to freetype 2.5.3 The latest update to 2.5.3 invalidated the subpixel rendering patch. I think the problem has not been caught because your build system does not enable subpixel rendering by default. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=OkPbJnEQkW&a=cc_unsubscribe

1 9

[Bug 1172635] New: mingw-freetype: freetype: OOB stack-based read/write in cf2_hintmap_build() (incomplete fix for CVE-2014-2240). [fedora-20]
by Red Hat Bugzilla 08 Jan '15

08 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1172635 Bug ID: 1172635 Summary: mingw-freetype: freetype: OOB stack-based read/write in cf2_hintmap_build() (incomplete fix for CVE-2014-2240). [fedora-20] Product: Fedora Version: 20 Component: mingw-freetype Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: rjones(a)redhat.com Reporter: vkaigoro(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, lfarkas(a)lfarkas.org, rjones(a)redhat.com Blocks: 1172633 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. fedora-20 tracking bug for mingw-freetype: see blocks bug list for full details of the security issue(s). This bug is never intended to be made public, please put any public notes in the blocked bugs. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1172633 [Bug 1172633] freetype: OOB stack-based read/write in cf2_hintmap_build() (incomplete fix for CVE-2014-2240). -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=dhuXAxrK1L&a=cc_unsubscribe

1 10

[Bug 1162678] New: mingw-binutils: binutils: out of bounds memory write [epel-all]
by Red Hat Bugzilla 08 Jan '15

08 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1162678 Bug ID: 1162678 Summary: mingw-binutils: binutils: out of bounds memory write [epel-all] Product: Fedora EPEL Version: el6 Component: mingw-binutils Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: rjones(a)redhat.com Reporter: vkaigoro(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, rjones(a)redhat.com Blocks: 1162666 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1162666 [Bug 1162666] binutils: out of bounds memory write -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=QEfoIFLnS8&a=cc_unsubscribe

1 4

[Bug 1162665] New: mingw-binutils: binutils: directory traversal vulnerability [epel-all]
by Red Hat Bugzilla 08 Jan '15

08 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1162665 Bug ID: 1162665 Summary: mingw-binutils: binutils: directory traversal vulnerability [epel-all] Product: Fedora EPEL Version: el6 Component: mingw-binutils Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: rjones(a)redhat.com Reporter: vkaigoro(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, rjones(a)redhat.com Blocks: 1162655 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1162655 [Bug 1162655] binutils: directory traversal vulnerability -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mAjttbGbKd&a=cc_unsubscribe

1 4

[Bug 1162630] New: CVE-2014-8504 mingw-binutils: binutils: stack overflow in the SREC parser [epel-all]
by Red Hat Bugzilla 08 Jan '15

08 Jan '15

https://bugzilla.redhat.com/show_bug.cgi?id=1162630 Bug ID: 1162630 Summary: CVE-2014-8504 mingw-binutils: binutils: stack overflow in the SREC parser [epel-all] Product: Fedora EPEL Version: el6 Component: mingw-binutils Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: rjones(a)redhat.com Reporter: vkaigoro(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, rjones(a)redhat.com Blocks: 1162621 (CVE-2014-8504) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora EPEL. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1162621 [Bug 1162621] CVE-2014-8504 binutils: stack overflow in the SREC parser -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JyPQu7TGVU&a=cc_unsubscribe

1 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

mingw January 2015