https://bugzilla.redhat.com/show_bug.cgi?id=2531962
Bug ID: 2531962
Summary: Missing ibus-panel in XFCE spins
Product: Fedora
Version: 45
OS: Linux
Status: NEW
Component: ibus
Severity: medium
Assignee: tfujiwar(a)redhat.com
Reporter: tagoh(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com
Target Milestone: ---
Classification: Fedora
I'm not sure if we should address this in comps though, open this for the
record since ibus has conditional dependencies for desktops.
ibus doesn't work on F45 XFCE spins so far because it doesn't have ibus-xinit
(I opened PR to add ibus-xinit to input-methods-xorg group for this) and
ibus-panel.
Without ibus-panel, `ibus start` stops with "Can not execute default panel
program".
Reproducible: Always
Steps to Reproduce:
1.Install XFCE iso on KVM for example (tested with
Fedora-Xfce-Live-45-20260906.n.0.x86_64.iso)
2.Update installed packages
3.login and/or ibus start on the terminal
Actual Results:
No ibus running
Expected Results:
ibus should works
Additional Information:
ibus-1.5.35~beta2-2.fc45 installed
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2531962
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2531850
Bug ID: 2531850
Summary: ibus sometimes stops working or crashes GTK apps
running in KDE
Product: Fedora
Version: 45
OS: Linux
Status: NEW
Component: ibus
Keywords: i18n, Regression
Severity: medium
Assignee: tfujiwar(a)redhat.com
Reporter: petersen(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com
Target Milestone: ---
Classification: Fedora
When trying to input with ibus in KDE inside GTK apps.
Input sometimes seems to stop working or cause the application to crash.
Reproducible: Always
Steps to Reproduce:
1. zenity --entry
2. input Japanese text
3. input into gtk4-demo
Actual Results:
2. zenity sometimes crashes
3. Committing text may cause the demo app to segfault.
(Somehow I cannot input into gtk4-demo-application.)
Expected Results:
Input to work normally (and no crashes).
Additional Information:
I can attach a backtrace later, though this shouldn't hard to reproduce.
Akira Tagoh also mentioned similar problems to me last week.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2531850
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2531708
Bug ID: 2531708
Summary: CVE-2026-78254 cldr-emoji-annotation: Apache Ant:
Arbitrary file write via path traversal in ftp and scp
tasks [fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["18cfd50e-f5bb-406a-85dc-ee04475e3fc9"]}
Component: cldr-emoji-annotation
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: tfujiwar(a)redhat.com
Reporter: jechoi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com
Blocks: 2529299 (CVE-2026-78254)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
The ftp and scp tasks of Apache Ant can download files from a remote server. A
malicious server can provide relative paths that allow it to write outside of
the dedicated target directory for the download, making it possible to
overwrite files of the attacker's choice using the permissions of the user
running Ant in versions prior to Ant 1.10.18.
In order to exploit this vulnerability, the server would either have to be
malicious or be subject to a machine-in-the-middle attack. Additionally in the
case of scp or the ftp task using ftps the server must pass the server identity
checks performed by the tasks.
For ftp tasks not using ftps a malicious server could act as a
machine-in-the-middle to provide malicious files.
Starting with Ant 1.10.18 both tasks will prevent writing outside of the
destination directory by default. An option is available to disable this
behavior in the unlikely case that the old behavior is required by existing
build files.
Mitigations:
Users of scp and ftp (when using ftps) in any version of Ant should not bypass
server identity checks. Users of ftp not using ftps should switch to ftps where
possible.
All users are recommended to upgrade to Apache Ant 1.10.18, which fixes this
issue.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2529299
[Bug 2529299] CVE-2026-78254 org.apache.ant/ant: Apache Ant: Arbitrary file
write via path traversal in ftp and scp tasks
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2531708
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2528019
Bug ID: 2528019
Summary: CVE-2026-59272 cldr-emoji-annotation: Log4j2 AMQP
Appender: Information disclosure due to disabled TLS
hostname verification [fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["bc1ff7e2-421d-4678-be0d-a6e6beb0e742"]}
Component: cldr-emoji-annotation
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: tfujiwar(a)redhat.com
Reporter: msignori(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tfujiwar(a)redhat.com
Blocks: 2525069
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender,
relying on the documented default, is exposed to man-in-the-middle interception
of every log event.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2528019
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2528349
Bug ID: 2528349
Summary: Missing ‘lexical-binding’ cookie in
"/usr/share/emacs/site-lisp/site-start.d/anthy-init.el
"
Product: Fedora
Version: rawhide
OS: Linux
Status: NEW
Component: anthy
Severity: medium
Assignee: tagoh(a)redhat.com
Reporter: tagoh(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com,
tfujiwar(a)redhat.com
Target Milestone: ---
Classification: Fedora
Emacs warns it at the startup time.
Reproducible: Always
Actual Results:
⛔ Warning (files): Missing ‘lexical-binding’ cookie in
"/usr/share/emacs/site-lisp/site-start.d/anthy-init.el".
You can add one with ‘M-x elisp-enable-lexical-binding RET’.
See ‘(elisp)Selecting Lisp Dialect’ and ‘(elisp)Converting to Lexical Binding’
for more information.
Expected Results:
No warnings
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2528349
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2511868
Bug ID: 2511868
Summary: man-pages-ja-20260615 is available
Product: Fedora
Version: 45
OS: Linux
Status: NEW
Component: man-pages-ja
Keywords: i18n, ManPageChange
Severity: medium
Assignee: tagoh(a)redhat.com
Reporter: ribbon(a)ribbon.or.jp
QA Contact: extras-qa(a)fedoraproject.org
CC: i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com
Target Milestone: ---
Classification: Fedora
man-pages-ja-20260615 is available.
In this version, we updated a few manuals.
Reproducible: Always
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2511868
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…