July 2022 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2072386] New: Remove xmlstarlet from epel8
by bugzilla＠redhat.com 24 Aug '22

24 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2072386 Bug ID: 2072386 Summary: Remove xmlstarlet from epel8 Product: Fedora EPEL Version: epel8 Status: NEW Component: xmlstarlet Assignee: stickster(a)gmail.com Reporter: rhel-process-autobot(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: daltonminer(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, ngompa13(a)gmail.com, stickster(a)gmail.com Target Milestone: --- Classification: Fedora -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2072386

1 5

[Bug 2084488] New: Remove xmlstarlet from epel9
by bugzilla＠redhat.com 24 Aug '22

24 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2084488 Bug ID: 2084488 Summary: Remove xmlstarlet from epel9 Product: Fedora EPEL Version: epel9 Status: NEW Component: xmlstarlet Assignee: stickster(a)gmail.com Reporter: rhel-process-autobot(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: daltonminer(a)gmail.com, dcavalca(a)fb.com, epel-packagers-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, ngompa13(a)gmail.com, stickster(a)gmail.com Target Milestone: --- Classification: Fedora -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2084488

1 4

[Bug 2079295] New: Busybox requires ld-musl-x86_64.so.1, but must be static
by bugzilla＠redhat.com 16 Aug '22

16 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2079295 Bug ID: 2079295 Summary: Busybox requires ld-musl-x86_64.so.1, but must be static Product: Fedora Version: rawhide OS: Linux Status: NEW Component: busybox Severity: medium Assignee: spotrh(a)gmail.com Reporter: atu(a)nmetau.edu.ua QA Contact: extras-qa(a)fedoraproject.org CC: admiller(a)redhat.com, dcavalca(a)fb.com, dvlasenk(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, spotrh(a)gmail.com Target Milestone: --- Classification: Fedora Description of problem: Busybox is a special binary, which must be static. However, it requires so from musl library. Version-Release number of selected component (if applicable): busybox-1:1.35.0-4.fc37.x86_64 How reproducible: Always Steps to Reproduce: 1. rpm -Uvh --test busybox-1.35.0-4.fc37.x86_64.rpm Actual results: error: Failed dependencies: ld-musl-x86_64.so.1()(64bit) is needed by busybox-1:1.35.0-4.fc37.x86_64 Expected results: Clean install without dependencies from any library. Additional info: -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2079295

1 1

[Bug 2102019] New: CVE-2022-34299 libdwarf: heap buffer over-read in dwarf_global_formref_b() in dwarf_form.c
by bugzilla＠redhat.com 12 Aug '22

12 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2102019 Bug ID: 2102019 Summary: CVE-2022-34299 libdwarf: heap buffer over-read in dwarf_global_formref_b() in dwarf_form.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: trathi(a)redhat.com CC: epel-packagers-sig(a)lists.fedoraproject.org, jitesh.1337(a)gmail.com, michel(a)michel-slm.name, orion(a)nwra.com, tom(a)compton.nu Target Milestone: --- Classification: Other There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b. https://github.com/davea42/libdwarf-code/issues/119 https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb24… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2102019

1 9

[Bug 2105253] New: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS)
by bugzilla＠redhat.com 02 Aug '22

02 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2105253 Bug ID: 2105253 Summary: python-pikepdf depends on package that won't support Sphinx 5 (FTBFS) Product: Fedora Version: rawhide Status: NEW Component: python-pikepdf Assignee: quantum.analyst(a)gmail.com Reporter: ksurma(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, python-sig(a)lists.fedoraproject.org, quantum.analyst(a)gmail.com, zdohnal(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: python-pikepdf won't build with Sphinx 5, because it depends on python-sphinx-panels. Upstream developers of the package deprecated it and proposed migration to sphinx-design. Upstream developers of pikepdf have already migrated to this new dependency in the latest released version 5.3.1: https://github.com/pikepdf/pikepdf/blob/v5.3.1/setup.cfg#L66 Please update the package in Rawhide to make it work with Sphinx 5. Version-Release number of selected component (if applicable): 5.1.3-2 How reproducible: Always Steps to Reproduce: $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ --no-clean <your.src.rpm> $ mock -r fedora-rawhide-x86_64 --addrepo=https://download.copr.fedorainfracloud.org/results/ksurma/sphinx-5/fedora-rawhide-x86_64/ shell Actual results: FTBFS -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2105253

1 4

[Bug 2104113] New: native zbar depends on to be removed i686 java-openjdk packages
by bugzilla＠redhat.com 01 Aug '22

01 Aug '22

https://bugzilla.redhat.com/show_bug.cgi?id=2104113 Bug ID: 2104113 Summary: native zbar depends on to be removed i686 java-openjdk packages Product: Fedora Version: rawhide Status: NEW Component: zbar Severity: high Assignee: gwync(a)protonmail.com Reporter: jvanek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dougsland(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, gwync(a)protonmail.com, java-maint-sig(a)lists.fedoraproject.org, jhuttana(a)redhat.com, jvanek(a)redhat.com, mchehab(a)infradead.org, mr.marcelo.barbosa(a)gmail.com, negativo17(a)gmail.com, pmikova(a)redhat.com, sgehwolf(a)redhat.com, zzambers(a)redhat.com Blocks: 2083750 Target Milestone: --- Classification: Fedora Dear maintainer, we are going to drop i686 java packages in f37 - https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs your package (or maybe jsut some subpackage) is directly depending on java and is native. Please take care, and adapt your package to exclude java on i686. For your convenience, there was added macro %{java_arches}, including all arches java is available on, which you can use to ifarch-out java specific features out in i686 (on non-java arches). Although for plain java package, the change is as simple as https://src.fedoraproject.org/rpms/maven/c/520942645bfd1e4721dacd536a6ccbf8…, you can not use it. The ExclusiveArch: %{java_arches} is not going to work for you, because your package is not simple java application, and also non-java world depends on it. See exemplar PR: https://src.fedoraproject.org/rpms/graphviz/pull-request/9#request_diff See more details eg in:: https://bugzilla.redhat.com/show_bug.cgi?id=2102298 See why in : https://pagure.io/fesco/issue/2772 Please read carefully proposal: https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs Please see tracking bug for most up to date informations: https://bugzilla.redhat.com/show_bug.cgi?id=2083750 I'm terribly sorry to report this bug so late in f37 lifecycle. If you can, please handle this with priority. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2083750 [Bug 2083750] Drop i686 builds of jdk8,11,17 and latest (18) rpms from f37 onwards -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2104113

1 1

[Bug 1279952] cronolog -l fails to update its symlink when log is deleted or too big
by bugzilla＠redhat.com 29 Jul '22

29 Jul '22

https://bugzilla.redhat.com/show_bug.cgi?id=1279952 Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|ktdreyer(a)ktdreyer.com |epel-packagers-sig(a)lists.fe | |doraproject.org --- Comment #2 from Fedora Admin user for bugzilla script actions <fedora-admin-xmlrpc(a)fedoraproject.org> --- This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component. -- You are receiving this mail because: You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=1279952

1 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 28 Jul '22

28 Jul '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 TEJ RATHI <trathi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2111833 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

[Bug 2107371] CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
by bugzilla＠redhat.com 28 Jul '22

28 Jul '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107371 TEJ RATHI <trathi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2111833 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107371

1 0

[Bug 2107386] CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
by bugzilla＠redhat.com 28 Jul '22

28 Jul '22

https://bugzilla.redhat.com/show_bug.cgi?id=2107386 TEJ RATHI <trathi(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2111826, 2111829, 2111830, | |2111828, 2111827, 2111831 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2107386

1 0

2024

2023

2022

2021

Epel-packagers-sig July 2022