April 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 19 Apr '22

19 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHBA-2022:1397 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 19 Apr '22

19 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHBA-2022:1395 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 18 Apr '22

18 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHBA-2022:1381 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2075813] New: notmuch-0.36~rc0 is available
by bugzilla＠redhat.com 15 Apr '22

15 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2075813 Bug ID: 2075813 Summary: notmuch-0.36~rc0 is available Product: Fedora Version: rawhide Status: NEW Component: notmuch Keywords: FutureFeature, Triaged Assignee: mjg(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, lewk(a)openmailbox.org, mjg(a)fedoraproject.org, rbean(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 0.36~rc0 Current version/release in rawhide: 0.35-2.fc37 URL: http://notmuchmail.org/releases/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/2498/ -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2075813

1 3

[Bug 2071404] New: [RFE: EPEL9] EPEL9 branch for python-memcached
by bugzilla＠redhat.com 14 Apr '22

14 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2071404 Bug ID: 2071404 Summary: [RFE: EPEL9] EPEL9 branch for python-memcached Product: Fedora EPEL Version: epel9 Status: NEW Component: python-memcached Assignee: apevec(a)gmail.com Reporter: nnavneet1001(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: apevec(a)gmail.com, epel-packagers-sig(a)lists.fedoraproject.org, infra-sig(a)lists.fedoraproject.org, karlthered(a)gmail.com, kevin(a)scrye.com, python-sig(a)lists.fedoraproject.org, sgallagh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Please branch and build python-memcached in epel9. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2071404

1 4

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 14 Apr '22

14 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 --- Comment #57 from Dmitry Belyavskiy <dbelyavs(a)redhat.com> --- 1.0.2zd is an upstream version, we normally don't rebase to a new upstream version on fixing CVE. We apply the patches fixing the vulnerability and increase our version. Yes, the patch was added to openssl-1.0.2k-25 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 14 Apr '22

14 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 Jace Liang <jaliang(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jaliang(a)redhat.com --- Comment #56 from Jace Liang <jaliang(a)redhat.com> --- Dear team, I see our errata for RHEL 7 only upgrades openssl to openssl-1.0.2k-25.el7_9 But the description of this CVE noted that 'OpenSSL 1.0.2 users should upgrade to 1.0.2zd' Is our RHSA-2022:1066 already fixes this CVE? -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 12 Apr '22

12 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 Bug 2062202 depends on bug 2070101, which changed state. Bug 2070101 Summary: CVE-2022-0778 edk2: Infinite loop in BN_mod_sqrt() reachable when parsing certificates [ovirt-4.5] https://bugzilla.redhat.com/show_bug.cgi?id=2070101 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 12 Apr '22

12 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHBA-2022:1318 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla＠redhat.com 12 Apr '22

12 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=2062202 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHBA-2022:1314 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2062202

1 0

2024

2023

2022

2021

Epel-packagers-sig April 2022