mingw May 2016

mingw@lists.fedoraproject.org

5 participants
21 discussions

Mass rebuild report for May 11 2016
by Erik van Pienbroek 25 May '16

25 May '16

This is a report for the 20160511 mass rebuild of all Fedora MinGW packages against Fedora Rawhide and a list of all the changes which have been applied since the previous mass rebuild. During this mass rebuild the following toolchain was used: * mingw-w64 v5.0rc2 * binutils 2.26 * gcc 6.1.0 Statistics about current mass rebuild: -------------------------------------- Timestamp of mass rebuild: 20160511 Total packages: 224 Number of failed packages: 7 Number of succeeded packages: 217 Number of added packages since previous mass rebuild: 6 Time needed to perform mass rebuild: 10 hours, 59 minutes, 23 seconds Statistics about previous mass rebuild: --------------------------------------- Timestamp of previous mass rebuild: 20150130 Total packages: 218 Number of failed packages: 4 Number of succeeded packages: 214 =============================================================================== The following packages were added since the previous rebuild: mingw-jxrlib mingw-libepoxy mingw-nspr mingw-openjpeg2 mingw-SDL2_image mingw-SDL2_mixer =============================================================================== The following packages FAILED to rebuild: mingw-clucene-2.3.3.4-14 Package owner: greghellings Time to build: 1 minute, 16 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-clucene-2… mingw-cximage-600-14 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: elmarco Time to build: 45 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-cximage-6… mingw-LibRaw-0.17.1-2 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: smani Time to build: 52 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-LibRaw-0.… mingw-llvm-3.0-11 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: brouhaha Time to build: 4 minutes, 31 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-llvm-3.0-… mingw-OpenEXR-2.2.0-3 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: smani Time to build: 1 minute, 7 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-OpenEXR-2… mingw-qt5-qtwebkit-5.5.1-3 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: epienbro Time to build: 15 minutes, 3 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-qt5-qtweb… mingw-wine-gecko-2.44-1 ** Package failed to build while it succeeded during the previous mass rebuild ** Package owner: awjb Time to build: 7 minutes, 51 seconds Build logs: http://build1.vanpienbroek.nl/fedora-mingw-rebuild/20160511/mingw-wine-geck… =============================================================================== The following packages were rebuilt successfully: mingw-admesh-0.98.2-3 Time to build: 29 seconds mingw-adwaita-icon-theme-3.20-1 Time to build: 5 minutes, 20 seconds mingw-angleproject-0-0.15.git.30d6c2.20141113 Time to build: 2 minutes, 19 seconds mingw-antlr-2.7.7-15 Time to build: 53 seconds mingw-atk-2.20.0-1 Time to build: 1 minute, 53 seconds mingw-atkmm-2.24.2-2 Time to build: 46 seconds mingw-binutils-2.26-1 Time to build: 3 minutes, 31 seconds mingw-boost-1.60.0-1 Time to build: 14 minutes, 12 seconds mingw-bzip2-1.0.6-7 Time to build: 39 seconds mingw-cairo-1.14.6-1 Time to build: 1 minute, 52 seconds mingw-cairomm-1.12.0-2 Time to build: 45 seconds mingw-c-ares-1.11.0-1 Time to build: 3 minutes, 51 seconds mingw-celt051-0.5.1.3-15 Time to build: 41 seconds mingw-colord-1.2.9-3 Time to build: 1 minute, 20 seconds mingw-colord-gtk-0.1.26-3 Time to build: 1 minute, mingw-colorhug-client-0.2.6-3 Time to build: 1 minute, 6 seconds mingw-cppunit-1.12.1-15 Time to build: 30 seconds mingw-crossreport-201406-3 Time to build: 45 seconds mingw-crt-5.0-0.1.rc2 Time to build: 1 minute, 54 seconds mingw-curl-7.47.0-1 Time to build: 3 minutes, 41 seconds mingw-cxxtest-3.10.1-15 Time to build: 16 seconds mingw-dbus-1.8.16-3 Time to build: 1 minute, 12 seconds mingw-dbus-glib-0.104-3 Time to build: 59 seconds mingw-dirac-1.0.2-14 Time to build: 41 seconds mingw-dlfcn-0-0.19.r11 Time to build: 25 seconds mingw-eigen3-3.2.8-1 Time to build: 17 minutes, 3 seconds mingw-enchant-1.6.0-12 Time to build: 45 seconds mingw-expat-2.1.0-8 Time to build: 32 seconds mingw-fftw-3.3.4-4 Time to build: 5 minutes, 52 seconds mingw-filesystem-101-1 Time to build: 16 seconds mingw-flac-1.3.1-3 Time to build: 1 minute, 28 seconds mingw-fontconfig-2.11.95-1 Time to build: 52 seconds mingw-freeglut-2.8.1-5 Time to build: 43 seconds mingw-freeimage-3.17.0-3 Time to build: 54 seconds mingw-freetype-2.6.3-1 Time to build: 42 seconds mingw-ftplib-4.0-2 Time to build: 27 seconds mingw-gcc-6.1.0-1 Time to build: 12 minutes, 22 seconds mingw-GConf2-3.2.6-6 Time to build: 1 minute, 29 seconds mingw-gdb-7.8.1-3 Time to build: 2 minutes, 54 seconds mingw-gdbm-1.11-3 Time to build: 51 seconds mingw-gdk-pixbuf-2.32.3-3 Time to build: 1 minute, 14 seconds mingw-gettext-0.19.7-1 Time to build: 3 minutes, 46 seconds mingw-giflib-5.1.4-1 Time to build: 32 seconds mingw-glew-1.13.0-3 Time to build: 1 minute, mingw-glib2-2.48.1-1 Time to build: 4 minutes, 7 seconds mingw-glibmm24-2.48.1-1 Time to build: 2 minutes, 40 seconds mingw-glib-networking-2.48.2-1 Time to build: 49 seconds mingw-gmp-6.0.0-4 Time to build: 1 minute, 9 seconds mingw-gnutls-3.4.9-1 Time to build: 2 minutes, 55 seconds mingw-goocanvas2-2.0.2-3 Time to build: 1 minute, 3 seconds mingw-gsl-1.16-4 Time to build: 1 minute, 50 seconds mingw-gsm-1.0.13-3 Time to build: 25 seconds mingw-gstreamer-0.10.36-9 Time to build: 1 minute, 40 seconds mingw-gstreamer1-1.6.0-2 Time to build: 1 minute, 19 seconds mingw-gstreamer1-plugins-bad-free-1.6.0-2 Time to build: 2 minutes, 38 seconds mingw-gstreamer1-plugins-base-1.6.0-2 Time to build: 1 minute, 43 seconds mingw-gstreamer1-plugins-good-1.6.0-2 Time to build: 1 minute, 47 seconds mingw-gstreamer-plugins-bad-free-0.10.23-13 Time to build: 2 minutes, 13 seconds mingw-gstreamer-plugins-base-0.10.36-8 Time to build: 1 minute, 43 seconds mingw-gstreamer-plugins-good-0.10.31-13 Time to build: 1 minute, 51 seconds mingw-gtk2-2.24.30-1 Time to build: 5 minutes, 2 seconds mingw-gtk3-3.20.4-1 Time to build: 5 minutes, 5 seconds mingw-gtkglext-1.2.0-14 Time to build: 1 minute, 31 seconds mingw-gtkhtml3-4.6.6-4 Time to build: 2 minutes, 15 seconds mingw-gtkmm24-2.24.4-5 Time to build: 2 minutes, 27 seconds mingw-gtkmm30-3.20.1-1 Time to build: 3 minutes, 4 seconds mingw-gtksourceview3-3.20.3-1 Time to build: 1 minute, 22 seconds mingw-gtkspell3-3.0.8-1 Time to build: 1 minute, 24 seconds mingw-gtkspellmm30-3.0.4-2 Time to build: 1 minute, 6 seconds mingw-gtk-vnc-0.5.4-5 Time to build: 1 minute, 22 seconds mingw-harfbuzz-1.2.7-1 Time to build: 1 minute, 16 seconds mingw-headers-5.0-0.1.rc2 Time to build: 41 seconds mingw-hicolor-icon-theme-0.15-3 Time to build: 18 seconds mingw-hidapi-0.8.0-0.2.d17db57 Time to build: 42 seconds mingw-hunspell-1.3.2-13 Time to build: 51 seconds mingw-icu-50.1.2-6 Time to build: 2 minutes, 15 seconds mingw-id3lib-3.8.3-36 Time to build: 1 minute, 8 seconds mingw-ilmbase-2.2.0-3 Time to build: 52 seconds mingw-jasper-1.900.1-28 Time to build: 50 seconds mingw-jxrlib-1.1-2 Time to build: 34 seconds mingw-lcms-1.19-8 Time to build: 47 seconds mingw-lcms2-2.7-3 Time to build: 49 seconds mingw-leptonica-1.73-3 Time to build: 2 minutes, 2 seconds mingw-libarchive-3.1.2-5 Time to build: 1 minute, 53 seconds mingw-libcroco-0.6.11-1 Time to build: 45 seconds mingw-libepoxy-1.3.1-3 Time to build: 1 minute, 21 seconds mingw-libffi-3.0.13-7 Time to build: 31 seconds mingw-libgcrypt-1.6.3-4 Time to build: 1 minute, 38 seconds mingw-libgeotiff-1.4.0-6 Time to build: 49 seconds mingw-libglade2-2.6.4-19 Time to build: 1 minute, 13 seconds mingw-libglademm24-2.6.7-21 Time to build: 54 seconds mingw-libgnurx-2.5.1-18 Time to build: 36 seconds mingw-libgovirt-0.3.2-3 Time to build: 52 seconds mingw-libgpg-error-1.22-1 Time to build: 58 seconds mingw-libgsf-1.14.34-2 Time to build: 1 minute, 8 seconds mingw-libgusb-0.2.4-3 Time to build: 48 seconds mingw-libid3tag-0.15.1b-20 Time to build: 33 seconds mingw-libIDL-0.8.14-5 Time to build: 52 seconds mingw-libidn-1.28-5 Time to build: 59 seconds mingw-libjpeg-turbo-1.4.2-1 Time to build: 50 seconds mingw-libltdl-2.4.6-2 Time to build: 37 seconds mingw-libmicrohttpd-0.9.46-2 Time to build: 56 seconds mingw-libmng-2.0.3-3 Time to build: 47 seconds mingw-libogg-1.3.0-8 Time to build: 33 seconds mingw-liboil-0.3.16-13 Time to build: 41 seconds mingw-libosinfo-0.2.8-4 Time to build: 52 seconds mingw-libpng-1.6.21-1 Time to build: 40 seconds mingw-librsvg2-2.40.15-1 Time to build: 1 minute, 16 seconds mingw-libsigc++20-2.8.0-1 Time to build: 36 seconds mingw-libsigsegv-2.6-12 Time to build: 27 seconds mingw-libsoup-2.52.2-3 Time to build: 1 minute, 15 seconds mingw-libsqlite3x-20071018-22 Time to build: 45 seconds mingw-libssh2-1.4.3-5 Time to build: 47 seconds mingw-libtasn1-4.5-2 Time to build: 41 seconds mingw-libtheora-1.1.1-4 Time to build: 49 seconds mingw-libtiff-4.0.3-8 Time to build: 1 minute, 13 seconds mingw-libusbx-1.0.19-3 Time to build: 38 seconds mingw-libvirt-1.3.1-2 Time to build: 4 minutes, 58 seconds mingw-libvirt-glib-0.2.3-2 Time to build: 1 minute, 38 seconds mingw-libvorbis-1.3.4-4 Time to build: 34 seconds mingw-libwebp-0.5.0-2 Time to build: 48 seconds mingw-libxml++-2.40.1-2 Time to build: 43 seconds mingw-libxml2-2.9.3-1 Time to build: 1 minute, 59 seconds mingw-libxslt-1.1.28-6 Time to build: 54 seconds mingw-libzip-1.1.2-1 Time to build: 40 seconds mingw-log4c-1.2.4-5 Time to build: 40 seconds mingw-mpfr-3.1.4-1 Time to build: 49 seconds mingw-nettle-3.2-1 Time to build: 58 seconds mingw-nsis-2.50-1 Time to build: 1 minute, 43 seconds mingw-nsiswrapper-10-7 Time to build: 15 seconds mingw-nspr-4.12-1 Time to build: 1 minute, 26 seconds mingw-openjpeg-1.5.2-5 Time to build: 51 seconds mingw-openjpeg2-2.1.0-2 Time to build: 42 seconds mingw-openssl-1.0.2h-1 Time to build: 6 minutes, 11 seconds mingw-opus-1.1.2-2 Time to build: 38 seconds mingw-opusfile-0.7-2 Time to build: 32 seconds mingw-orc-0.4.24-2 Time to build: 43 seconds mingw-p11-kit-0.23.2-1 Time to build: 1 minute, 6 seconds mingw-pango-1.40.1-1 Time to build: 1 minute, 17 seconds mingw-pangomm-2.40.0-1 Time to build: 1 minute, 4 seconds mingw-pcre-8.38-1 Time to build: 57 seconds mingw-pdcurses-3.4-18 Time to build: 33 seconds mingw-physfs-2.0.3-7 Time to build: 44 seconds mingw-pixman-0.34.0-1 Time to build: 51 seconds mingw-pkg-config-0.28-6 Time to build: 23 seconds mingw-plotmm-0.1.2-21 Time to build: 1 minute, 26 seconds mingw-polyclipping-6.2.0-3 Time to build: 37 seconds mingw-poppler-0.43.0-1 Time to build: 5 minutes, 12 seconds mingw-portablexdr-4.9.1-14 Time to build: 31 seconds mingw-postgresql-9.5.2-1 Time to build: 6 minutes, 15 seconds mingw-proj-4.9.1-3 Time to build: 41 seconds mingw-qpid-cpp-0.14-12 Time to build: 9 minutes, 21 seconds mingw-qt-4.8.7-1 ** Package built successfully while it failed during the previous mass rebuild ** Time to build: 1 hour, 34 minutes, 31 seconds mingw-qt5-qt3d-5.6.0-2 Time to build: 6 minutes, 28 seconds mingw-qt5-qtactiveqt-5.6.0-1 Time to build: 1 minute, 35 seconds mingw-qt5-qtbase-5.6.0-4 Time to build: 26 minutes, 40 seconds mingw-qt5-qtconnectivity-5.4.1-1 Time to build: 1 minute, 18 seconds mingw-qt5-qtdeclarative-5.6.0-1 Time to build: 13 minutes, 57 seconds mingw-qt5-qtenginio-5.4.1-1 Time to build: 1 minute, 3 seconds mingw-qt5-qtfeedback-5.0.0-0.10.git20140527.dea0da72 Time to build: 1 minute, 9 seconds mingw-qt5-qtgraphicaleffects-5.6.0-1 Time to build: 51 seconds mingw-qt5-qtimageformats-5.6.0-1 Time to build: 54 seconds mingw-qt5-qtjsbackend-5.1.1-9 ** Package built successfully while it failed during the previous mass rebuild ** Time to build: 2 minutes, 21 seconds mingw-qt5-qtlocation-5.6.0-1 Time to build: 2 minutes, 58 seconds mingw-qt5-qtmultimedia-5.6.0-1 Time to build: 2 minutes, 52 seconds mingw-qt5-qtpim-5.0.0-0.10.git20160507.eb8899 Time to build: 2 minutes, 27 seconds mingw-qt5-qtquick1-5.5.1-3 Time to build: 3 minutes, 27 seconds mingw-qt5-qtquickcontrols-5.6.0-1 Time to build: 2 minutes, 1 second mingw-qt5-qtscript-5.6.0-1 Time to build: 3 minutes, 20 seconds mingw-qt5-qtsensors-5.6.0-1 Time to build: 1 minute, 20 seconds mingw-qt5-qtserialport-5.4.1-1 Time to build: 47 seconds mingw-qt5-qtsvg-5.6.0-1 Time to build: 1 minute, 4 seconds mingw-qt5-qtsystems-5.0.0-0.18.git20160413.236b6b Time to build: 1 minute, 28 seconds mingw-qt5-qttools-5.6.0-2 Time to build: 7 minutes, 38 seconds mingw-qt5-qttranslations-5.6.0-1 Time to build: 48 seconds mingw-qt5-qtwebchannel-5.4.1-1 Time to build: 53 seconds mingw-qt5-qtwebsockets-5.4.1-1 Time to build: 58 seconds mingw-qt5-qtwinextras-5.6.0-1 Time to build: 1 minute, 13 seconds mingw-qt5-qtxmlpatterns-5.6.0-1 Time to build: 3 minutes, 26 seconds mingw-qwt-6.1.2-4 Time to build: 5 minutes, 11 seconds mingw-readline-6.2-7 Time to build: 42 seconds mingw-rest-0.7.92-3 Time to build: 1 minute, 20 seconds mingw-sane-backends-1.0.25-2 Time to build: 49 seconds mingw-SDL-1.2.15-7 Time to build: 52 seconds mingw-SDL2-2.0.3-8 ** Package built successfully while it failed during the previous mass rebuild ** Time to build: 1 minute, 19 seconds mingw-SDL2_image-2.0.0-7 Time to build: 43 seconds mingw-SDL2_mixer-2.0.0-5 Time to build: 36 seconds mingw-SDL_image-1.2.12-13 Time to build: 37 seconds mingw-SDL_mixer-1.2.12-7 Time to build: 32 seconds mingw-shapelib-1.3.0-7 Time to build: 1 minute, 1 second mingw-sigar-1.6.5-0.15.git58097d9 Time to build: 25 seconds mingw-speex-1.2-0.19.rc1 Time to build: 38 seconds mingw-spice-gtk-0.31-1 Time to build: 3 minutes, 49 seconds mingw-spice-protocol-0.12.11-1 Time to build: 19 seconds mingw-sqlite-3.12.2.0-1 Time to build: 2 minutes, 5 seconds mingw-srvany-1.0-17.20150115gitfd659e77 Time to build: 26 seconds mingw-sword-1.7.4-3 Time to build: 1 minute, 17 seconds mingw-taglib-1.11-0.2.beta2 Time to build: 1 minute, 13 seconds mingw-tcl-8.6.4-3 Time to build: 2 minutes, 34 seconds mingw-termcap-1.3.1-19 Time to build: 28 seconds mingw-tesseract-3.04.01-1 Time to build: 4 minutes, 34 seconds mingw-tk-8.6.1-3 Time to build: 31 seconds mingw-usbredir-0.7.1-2 Time to build: 32 seconds mingw-w64-tools-3.1.999-0.8.trunk.git430863.20140530 Time to build: 28 seconds mingw-wavpack-4.80.0-1 Time to build: 35 seconds mingw-webkitgtk-2.4.11-1 Time to build: 1 hour, 31 minutes, 59 seconds mingw-webkitgtk3-2.4.11-1 Time to build: 56 minutes, 47 seconds mingw-win-iconv-0.0.6-5 Time to build: 51 seconds mingw-winpthreads-5.0-0.1.rc2 Time to build: 45 seconds mingw-winstorecompat-4.0.2-3 Time to build: 39 seconds mingw-wpcap-4.1.final3-3 Time to build: 34 seconds mingw-wxWidgets-2.8.12-20 Time to build: 5 minutes, 34 seconds mingw-xerces-c-3.1.2-4 Time to build: 2 minutes, 57 seconds mingw-xz-5.2.2-2 Time to build: 43 seconds mingw-zfstream-20041202-20 Time to build: 39 seconds mingw-zlib-1.2.8-5 Time to build: 38 seconds wine-mono-4.6.2-1 Time to build: 15 minutes, 4 seconds =============================================================================== Mass rebuild script for the Fedora MinGW packages written and maintained by Erik van Pienbroek (epienbro(a)fedoraproject.org)

4 5

wine-gecko
by Michael Cronenworth 18 May '16

18 May '16

Version 2.47 is currently in beta and wine-gecko needs another round of backports for successful building. A Fedora 23 build fails due to missing D3D11 definitions. At least "CD3D11_SHADER_RESOURCE_VIEW_DESC" is required. Erik, could you work on getting the backport in Fedora 22/23? Let me know if you need any more details. Thanks, Michael

1 0

[Bug 1281950] New: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1281950 Bug ID: 1281950 Summary: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com Stack-based buffer overread vulnerability with HTML parser in push mode in xmlSAX2TextNode causing segmentation fault when compiled with ASAN. Upstream bug (containing reproducer): https://bugzilla.gnome.org/show_bug.cgi?id=756372 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=S97GEQo7jh&a=cc_unsubscribe

1 20

[Bug 1281936] New: libxml2: Buffer overread with XML parser in xmlNextChar
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1281936 Bug ID: 1281936 Summary: libxml2: Buffer overread with XML parser in xmlNextChar Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com A buffer overread in xmlNextChar was found, causing segmentation fault when compiled with ASAN. Upstream bug (contains reproducer): https://bugzilla.gnome.org/show_bug.cgi?id=756263 Upstream patch: https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc… -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AuaeY9x6SN&a=cc_unsubscribe

1 19

[Bug 1281930] New: libxml2: Out-of-bounds heap read on 0xff char in xml declaration
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1281930 Bug ID: 1281930 Summary: libxml2: Out-of-bounds heap read on 0xff char in xml declaration Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com An out-of-bounds heap read in xmlParseXMLDecl happens when a file containing unfinished xml declaration, e.g. <?xml versionencoding="ISO88598", is followed by 0xff byte. Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=751631 Upstream patch: https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f264… -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=RtnuYLKA2T&a=cc_unsubscribe

1 18

[Bug 1277146] New: libxml2: DoS when parsing specially crafted XML document if XZ support is enabled
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1277146 Bug ID: 1277146 Summary: libxml2: DoS when parsing specially crafted XML document if XZ support is enabled Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com A vulnerability in libxml2 when parsing specially crafted XML document if XZ support is enabled causing DoS of application was found. CVE request (including reproducer): http://seclists.org/oss-sec/2015/q4/206 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5GhAg1MnGX&a=cc_unsubscribe

1 22

[Bug 1276297] New: CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections()
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1276297 Bug ID: 1276297 Summary: CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections() Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially-crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. Upstream patch: https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0… Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=756456 CVE assignment: http://seclists.org/oss-sec/2015/q4/130 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JWm7G50nVi&a=cc_unsubscribe

1 17

[Bug 1274222] New: libxml2: Out-of-bounds memory access
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1274222 Bug ID: 1274222 Summary: libxml2: Out-of-bounds memory access Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com, weli(a)redhat.com An out-of-bounds read vulnerability was found in libxml2 with crafted xml input. Report can be found here: https://bugzilla.gnome.org/show_bug.cgi?id=744980#c1 Upstream patches: https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e… https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0… CVE request: http://seclists.org/oss-sec/2015/q4/127 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=DBMrfilEPi&a=cc_unsubscribe

1 19

[Bug 1213957] New: libxml2: out-of-bounds memory access when parsing an unclosed HTML comment
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1213957 Bug ID: 1213957 Summary: libxml2: out-of-bounds memory access when parsing an unclosed HTML comment Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com Following issue was reported in libxml2 (http://seclists.org/oss-sec/2015/q2/214): """ This is an out-of-bounds memory access in libxml2. By entering a unclosed html comment such as <!-- the libxml2 parser didn't stop parsing at the end of the buffer, causing random memory to be included in the parsed comment that was returned to ruby. In Shopify, this caused ruby objects from previous http requests to be disclosed in the rendered page. Link to the issue in libxml2's bugtracker: https://bugzilla.gnome.org/show_bug.cgi?id=746048 A patched version of nokogiri (which uses a embedded libxml2) is available here: https://github.com/Shopify/nokogiri/compare/1b1fcad8bd64ab70256666c38d2c998… This bug is still not patched upstream, but both libxml2 and nokogiri developers are aware of the issue. """ No upstream patches exist at the time of creating this Bugzilla. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=zRmasjF3dU&a=cc_unsubscribe

1 27

[Bug 1335683] New: [Patch] Fix static libraries
by Red Hat Bugzilla 13 May '16

13 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1335683 Bug ID: 1335683 Summary: [Patch] Fix static libraries Product: Fedora Version: rawhide Component: mingw-cairo Assignee: rjones(a)redhat.com Reporter: manisandro(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, marcandre.lureau(a)redhat.com, rjones(a)redhat.com, t.sailer(a)alumni.ethz.ch Created attachment 1156933 --> https://bugzilla.redhat.com/attachment.cgi?id=1156933&action=edit Patch: fix static libraries The attached patch fixes the static libraries. These are currently broken because they end up containing a DllMain. A second patch fixes a current FTBFS issue due to "aclocal-1.14: command not found" - running autoreconf fixes this. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

mingw May 2016