September 2022 - Epel-packagers-sig

[Bug 2124370] request epel 9 branch for glpk
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2124370 Fedora Update System <updates(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |ON_QA --- Comment #9 from Fedora Update System <updates(a)fedoraproject.org> --- FEDORA-EPEL-2022-6fec4c6e57 has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-6fec4c6e57 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2124370

1 0

[Bug 2126824] New: CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2126824 Bug ID: 2126824 Summary: CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: trathi(a)redhat.com CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, jhorak(a)redhat.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Other ImageMagick before version 7.1.0-47 is vulnerable to heap buffer overflow, while processing a malformed TIFF file. https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e4… https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126824

1 7

[Bug 2126825] New: CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file [fedora-all]
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2126825 Bug ID: 2126825 Summary: CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file [fedora-all] Product: Fedora Version: 36 Status: NEW Component: ImageMagick Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: luya_tfz(a)thefinalzone.net Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126825

1 6

[Bug 2125990] New: ImageMagick-6.9.12.63 is available
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2125990 Bug ID: 2125990 Summary: ImageMagick-6.9.12.63 is available Product: Fedora Version: rawhide Status: NEW Component: ImageMagick Keywords: FutureFeature, Triaged Assignee: luya_tfz(a)thefinalzone.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora Releases retrieved: 6.9.12.63 Upstream release that is considered latest: 6.9.12.63 Current version/release in rawhide: 6.9.12.62-1.fc38 URL: https://legacy.imagemagick.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/258035/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/ImageMagick -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2125990

1 13

[Bug 2124542] New: CVE-2021-3574 ImageMagick: memory leaks with convert command [fedora-all]
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2124542 Bug ID: 2124542 Summary: CVE-2021-3574 ImageMagick: memory leaks with convert command [fedora-all] Product: Fedora Version: 36 Status: NEW Component: ImageMagick Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: luya_tfz(a)thefinalzone.net Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2124542

1 18

[Bug 2124541] New: CVE-2021-3574 ImageMagick: memory leaks with convert command [epel-all]
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2124541 Bug ID: 2124541 Summary: CVE-2021-3574 ImageMagick: memory leaks with convert command [epel-all] Product: Fedora EPEL Version: epel8 Status: NEW Component: ImageMagick Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: luya_tfz(a)thefinalzone.net Reporter: trathi(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of epel-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora EPEL. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2124541

1 18

[Bug 2121962] New: ImageMagick-6.9.12.62 is available
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2121962 Bug ID: 2121962 Summary: ImageMagick-6.9.12.62 is available Product: Fedora Version: rawhide Status: NEW Component: ImageMagick Keywords: FutureFeature, Triaged Assignee: luya_tfz(a)thefinalzone.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora Releases retrieved: 6.9.12.62 Upstream release that is considered latest: 6.9.12.62 Current version/release in rawhide: 6.9.12.61-1.fc38 URL: https://legacy.imagemagick.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/258035/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/ImageMagick -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2121962

1 18

[Bug 2116537] New: ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2116537 Bug ID: 2116537 Summary: ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: tcullum(a)redhat.com CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, jhorak(a)redhat.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Other In ImageMagick 7.1.0-29, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30. References: https://github.com/ImageMagick/ImageMagick/commit/716496e6df0add89e9679d6da… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2116537

1 7

[Bug 2116540] New: CVE-2022-2719 ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list [fedora-all]
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2116540 Bug ID: 2116540 Summary: CVE-2022-2719 ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list [fedora-all] Product: Fedora Version: 36 Status: NEW Component: ImageMagick Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: luya_tfz(a)thefinalzone.net Reporter: tcullum(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: blaise(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name, ngompa13(a)gmail.com, pampelmuse(a)gmx.at, sergio(a)serjux.com, troy(a)troycurtisjr.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2116540

1 5

[Bug 2126518] New: libdwarf-0.4.2 is available
by bugzilla＠redhat.com 17 Sep '22

17 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=2126518 Bug ID: 2126518 Summary: libdwarf-0.4.2 is available Product: Fedora Version: rawhide Status: NEW Component: libdwarf Keywords: FutureFeature, Triaged Assignee: tom(a)compton.nu Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jitesh.1337(a)gmail.com, michel(a)michel-slm.name, orion(a)nwra.com, tom(a)compton.nu Target Milestone: --- Classification: Fedora Releases retrieved: 0.4.2 Upstream release that is considered latest: 0.4.2 Current version/release in rawhide: 0.4.1-2.fc37 URL: http://www.prevanders.net/dwarf.html Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/1597/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/libdwarf -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2126518

1 5

2024

2023

2022

2021

Epel-packagers-sig September 2022