https://bugzilla.redhat.com/show_bug.cgi?id=2249285
Bug ID: 2249285
Summary: TRIAGE CVE-2023-46695 python-django3: python-django:
Potential denial of service vulnerability in
UsernameField on Windows [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: python-django3
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: michel(a)michel-slm.name
Reporter: ntait(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2247097
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2249285
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2274411
Bug ID: 2274411
Summary: python-pandas-2.2.2 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: python-pandas
Keywords: FutureFeature, Triaged
Assignee: jonathan(a)almalinux.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
jonathan(a)almalinux.org, mail(a)kushaldas.in,
neuro-sig(a)lists.fedoraproject.org, orion(a)nwra.com,
python-packagers-sig(a)lists.fedoraproject.org,
sergio.pasra(a)gmail.com, tomspur(a)fedoraproject.org
Target Milestone: ---
Classification: Fedora
Releases retrieved: 2.2.2
Upstream release that is considered latest: 2.2.2
Current version/release in rawhide: 2.2.1-2.fc41
URL: http://pandas.pydata.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/7578/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-pandas
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2274411
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2273889
Bug ID: 2273889
Summary: python-flask-3.0.3 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: python-flask
Keywords: FutureFeature, Triaged
Assignee: fzatlouk(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
fzatlouk(a)redhat.com, hushan.jia(a)gmail.com,
karlthered(a)gmail.com, patrick(a)puiterwijk.org,
python-packagers-sig(a)lists.fedoraproject.org,
tdawson(a)redhat.com, tflink(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 3.0.3
Upstream release that is considered latest: 3.0.3
Current version/release in rawhide: 3.0.2-1.fc40
URL: https://pypi.python.org/pypi/Flask
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/3867/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-flask
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2273889
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2272538
Bug ID: 2272538
Summary: python-werkzeug-3.0.2 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: python-werkzeug
Keywords: FutureFeature, Triaged
Assignee: fzatlouk(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: aurelien(a)bompard.org,
epel-packagers-sig(a)lists.fedoraproject.org,
fzatlouk(a)redhat.com, karlthered(a)gmail.com,
python-packagers-sig(a)lists.fedoraproject.org,
tdawson(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 3.0.2
Upstream release that is considered latest: 3.0.2
Current version/release in rawhide: 3.0.1-3.fc40
URL: https://pypi.python.org/pypi/Werkzeug
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/4092/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/python-werkzeug
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2272538
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
leigh scott <leigh123linux(a)googlemail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|alt-gtk-de-sig(a)lists.fedora |extras-orphan@fedoraproject
|project.org |.org
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
leigh scott <leigh123linux(a)googlemail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|leigh123linux(a)googlemail.co |alt-gtk-de-sig(a)lists.fedora
|m |project.org
CC| |alt-gtk-de-sig(a)lists.fedora
| |project.org,
| |extras-orphan@fedoraproject
| |.org, nonamedotc(a)gmail.com
Component|cinnamon |blueberry
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
Miro Hrončok <mhroncok(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC|cstratak(a)redhat.com, |epel-packagers-sig(a)lists.fe
|mhroncok(a)redhat.com, |doraproject.org,
|python-maint(a)redhat.com, |leigh123linux(a)googlemail.co
|python-packagers-sig@lists. |m, miketwebster(a)gmail.com,
|fedoraproject.org, |riehecky(a)fnal.gov
|thrnciar(a)redhat.com, |
|torsava(a)redhat.com, |
|vstinner(a)redhat.com |
Assignee|python-maint(a)redhat.com |leigh123linux(a)googlemail.co
| |m
QA Contact| |extras-qa(a)fedoraproject.org
Component|python3.11 |cinnamon
--- Comment #12 from Miro Hrončok <mhroncok(a)redhat.com> ---
Thanks for the report, but I don't think this is an issue in Python itself.
Assigning the report to cinnamon, but perhaps a more specific component would
be better.
(Feel free to assign back in case you think it is a bug in Python.)
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2274348
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2272567
Bug ID: 2272567
Summary: TRIAGE CVE-2024-28219 python-pillow: buffer overflow
in _imagingcms.c [fedora-all]
Product: Fedora
Version: 39
Status: NEW
Component: python-pillow
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: manisandro(a)gmail.com
Reporter: rgatica(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
infra-sig(a)lists.fedoraproject.org,
manisandro(a)gmail.com,
python-packagers-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2272563
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2272567
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2209669
Bug ID: 2209669
Summary: hugo-0.112.2 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: hugo
Keywords: FutureFeature, Triaged
Assignee: athoscribeiro(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: athoscribeiro(a)gmail.com,
epel-packagers-sig(a)lists.fedoraproject.org,
go-sig(a)lists.fedoraproject.org,
quantum.analyst(a)gmail.com, redhat(a)flyn.org
Target Milestone: ---
Classification: Fedora
Releases retrieved: 0.112.0, 0.112.1, 0.112.2
Upstream release that is considered latest: 0.112.2
Current version/release in rawhide: 0.111.3-1.fc39
URL: https://gohugo.io
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/12959/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/hugo
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2209669