https://bugzilla.redhat.com/show_bug.cgi?id=2193301
Bug ID: 2193301
Summary: CVE-2022-44368 nasm: null pointer dereference in
obj_directive in output/outobj.c [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: nasm
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: dominik(a)greysector.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, pbonzini(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2193050
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2193301
https://bugzilla.redhat.com/show_bug.cgi?id=2193300
Bug ID: 2193300
Summary: CVE-2022-44369 nasm: null pointer dereference in
aout_add_gotoff_reloc() in output/outaout.c
[fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: nasm
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: dominik(a)greysector.net
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, pbonzini(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2193051
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2193300
https://bugzilla.redhat.com/show_bug.cgi?id=2358742
Bug ID: 2358742
Summary: tomcat-9.0.104 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: tomcat
Keywords: FutureFeature, Triaged
Assignee: csutherl(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 9.0.104
Upstream release that is considered latest: 9.0.104
Current version/release in rawhide: 9.0.98-1.fc42
URL: https://tomcat.apache.org/whichversion.html
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/17032/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/tomcat
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2358742
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2366515
Bug ID: 2366515
Summary: CVE-2024-13009 jetty: Jetty: Gzip Request Body Buffer
Corruption [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["84aabf9b-04f6-4507-bd43-ce052f797a97"]}
Component: jetty
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mat.booth(a)gmail.com
Reporter: mfindra(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)gmail.com, mizdebsk(a)redhat.com
Blocks: 2365135
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2365135
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2366515
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2362228
Bug ID: 2362228
Summary: jackson-parent-2.19 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: jackson-parent
Keywords: FutureFeature, Triaged
Assignee: mfargett(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: ckelley(a)redhat.com, edewata(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mfargett(a)redhat.com, michel(a)michel-slm.name,
puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Releases retrieved: 2.19
Upstream release that is considered latest: 2.19
Current version/release in rawhide: 2.18.1-2.fc42
URL: https://github.com/FasterXML/jackson-parent
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/7567/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/jackson-parent
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2362228
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2211537
Bug ID: 2211537
Summary: truth-1.1.4 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: truth
Keywords: FutureFeature, Triaged
Assignee: orion(a)nwra.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
orion(a)nwra.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 1.1.4
Upstream release that is considered latest: 1.1.4
Current version/release in rawhide: 1.0.1-6.fc38
URL: https://github.com/google/truth
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/6624/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/truth
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2211537
https://bugzilla.redhat.com/show_bug.cgi?id=2345667
Bug ID: 2345667
Summary: fasterxml-oss-parent-63 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: fasterxml-oss-parent
Keywords: FutureFeature, Triaged
Assignee: edewata(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: ckelley(a)redhat.com, edewata(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mfargett(a)redhat.com, michel(a)michel-slm.name,
puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Releases retrieved: 63
Upstream release that is considered latest: 63
Current version/release in rawhide: 62-2.fc42
URL: https://github.com/FasterXML/oss-parent
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M…
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/114915/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/fasterxml-oss-parent
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2345667
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2019329
Bug ID: 2019329
Summary: nosync.so is linked against GLIBC_2.34 symbols, it
breaks mock
Product: Fedora
Version: 35
Status: NEW
Component: nosync
Assignee: mizdebsk(a)redhat.com
Reporter: praiskup(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
I'm not sure what changed, but the new dependency is breaking
Mock builds for older distributions (e.g. even Fedora 34 doesn't
provide 2.34 symbols).
$ cat ~/.config/mock.cfg | grep nosync
config_opts['nosync'] = True
$ mock -r fedora-34-x86_64 --shell
...
Running scriptlet: ca-certificates-2021.2.50-1.0.fc34.noarch
83/134
/bin/sh: /lib64/libc.so.6: version `GLIBC_2.34' not found (required by
/var/tmp/tmp.mock.khvcffv5/lib64/nosync.so)
error: %prein(ca-certificates-2021.2.50-1.0.fc34.noarch) scriptlet failed, exit
status 1
Error in PREIN scriptlet in rpm package ca-certificates
Installing : krb5-libs-1.19.2-2.fc34.x86_64
84/134
error: ca-certificates-2021.2.50-1.0.fc34.noarch: install failed
...
Failed:
ca-certificates-2021.2.50-1.0.fc34.noarch
tpm2-tss-3.1.0-1.fc34.x86_64
Error: Transaction failed
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2019329