https://bugzilla.redhat.com/show_bug.cgi?id=2237984
Bug ID: 2237984
Summary: plantuml package for EPEL is over a year old
Product: Fedora EPEL
Version: epel9
Status: NEW
Component: plantuml
Assignee: saroy(a)redhat.com
Reporter: bajan.duncan(a)fb.com
CC: blaise(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, puntogil(a)libero.it,
saroy(a)redhat.com, sumitgarg44(a)gmail.com
Target Milestone: ---
Classification: Fedora
Description of problem:
The current package for Fedora EPEL is over 12 months behind Fedora itself,
meaning that the EPEL installations are missing fixes for CVEs and other
bugfixes from the upstream.
How reproducible:
Very, the package isn't updated in EPEL (8 or 9) to track upstream.
https://src.fedoraproject.org/rpms/plantuml
Expected results:
Fedora EPEL would track the upstream changes more frequently than once per
year.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2237984
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=1898907
Ondrej Soukup <osoukup(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Comment|17 |updated
--- Comment #17 has been edited ---
THIS COMMENT WAS REMOVED which however causes issues while migrating the
vulnerability data to the new Product Security database so I am adding a
comment placeholder instead.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1898907
https://bugzilla.redhat.com/show_bug.cgi?id=2239842
Bug ID: 2239842
Summary: TRIAGE-CVE-2023-36479 jetty: Improper addition of
quotation marks to user inputs in CgiServlet
[fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: jetty
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: mat.booth(a)gmail.com
Reporter: psampaio(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjohnstn(a)redhat.com, mat.booth(a)gmail.com,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2239630
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2239842
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2222114
Bug ID: 2222114
Summary: nasm: Update spec License entry to use SPDX
identifiers
Product: Fedora
Version: rawhide
OS: Linux
Status: NEW
Component: nasm
Severity: medium
Assignee: dominik(a)greysector.net
Reporter: mpolacek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, pbonzini(a)redhat.com
Target Milestone: ---
Classification: Fedora
Update spec License entry to use SPDX identifiers.
Reproducible: Always
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2222114
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...