The following Fedora EPEL 9 Security updates need testing:
Age URL
64 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7d20038bca qownnotes-26.1.7-4.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
dfuzzer-2.6-1.el9
duo_unix-2.2.3-1.el9
Details about builds:
================================================================================
dfuzzer-2.6-1.el9 (FEDORA-EPEL-2026-c4244ed4ea)
D-Bus fuzz testing tool
--------------------------------------------------------------------------------
Update Information:
Bump to v2.6 (rhbz#2431167)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Frantisek Sumsal <frantisek(a)sumsal.cz> - 2.6-1
- Bump to v2.6 (rhbz#2431167)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2431167 - dfuzzer-2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2431167
--------------------------------------------------------------------------------
================================================================================
duo_unix-2.2.3-1.el9 (FEDORA-EPEL-2026-eb3ade1bb6)
Duo two-factor authentication for UNIX systems
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.3
This comes with the new CA bundle; versions < 2.1.0 will stop working on 2/2:
https://help.duo.com/s/article/9451?language=en_US
One potentially breaking change is that su now asks the target user for 2FA
instead of the requesting user, as of version 2.0.0 - arguably this is the safer
behavior anyway:
https://github.com/duosecurity/duo_unix/releases/tag/duo_unix-2.0.0
Not landing this until it clears the incompatible request process:
https://pagure.io/epel/issue/360
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Davide Cavalca <dcavalca(a)fedoraproject.org> - 2.2.3-1
- Update to 2.2.3; Fixes: RHBZ#2428862
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Jul 29 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.12.1-11
- convert license to SPDX
* Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2428862 - must upgrade duo_unix/pam_duo to version ≥2.1.0 before 2026-02-02
https://bugzilla.redhat.com/show_bug.cgi?id=2428862
--------------------------------------------------------------------------------
The following Fedora EPEL 10.1 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1353d8e248 openvpn-2.7_rc5-1.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
composer-2.9.4-1.el10_1
duo_unix-2.2.3-1.el10_1
gh-2.86.0-2.el10_1
perl-Text-Format-0.63-4.el10_1
python-astropy-iers-data-0.2026.1.19.0.42.31-1.el10_1
ruby-build-20260121-1.el10_1
Details about builds:
================================================================================
composer-2.9.4-1.el10_1 (FEDORA-EPEL-2026-c5c653c7f9)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
Version 2.9.4 - 2026-01-22
Added active plugins to the diagnose command output (#12706)
Fixed HTTP/3 causing issues with proxies (#12699)
Fixed show command regression with long descriptions containing unicode
characters (#12704)
Fixed regression handling invalid unicode sequences in output (#12707)
Fixed git rev-list usages to support older pre-2.33 git versions (#12705)
Fixed issue handling paths with = in them on Windows (#12726)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 22 2026 Remi Collet <remi(a)remirepo.net> - 2.9.4-1
- update to 2.9.4
--------------------------------------------------------------------------------
================================================================================
duo_unix-2.2.3-1.el10_1 (FEDORA-EPEL-2026-7af1bc2f16)
Duo two-factor authentication for UNIX systems
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.3
This comes with the new CA bundle; versions < 2.1.0 will stop working on 2/2:
https://help.duo.com/s/article/9451?language=en_US
One potentially breaking change is that su now asks the target user for 2FA
instead of the requesting user, as of version 2.0.0 - arguably this is the safer
behavior anyway:
https://github.com/duosecurity/duo_unix/releases/tag/duo_unix-2.0.0
Not landing this until it clears the incompatible request process:
https://pagure.io/epel/issue/360
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Davide Cavalca <dcavalca(a)fedoraproject.org> - 2.2.3-1
- Update to 2.2.3; Fixes: RHBZ#2428862
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2428862 - must upgrade duo_unix/pam_duo to version ≥2.1.0 before 2026-02-02
https://bugzilla.redhat.com/show_bug.cgi?id=2428862
--------------------------------------------------------------------------------
================================================================================
gh-2.86.0-2.el10_1 (FEDORA-EPEL-2026-b50e7a9914)
GitHub's official command line tool
--------------------------------------------------------------------------------
Update Information:
Update to 2.86.0
Update to 2.85.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 2.86.0-2
- Fix test build
* Wed Jan 21 2026 Packit <hello(a)packit.dev> - 2.86.0-1
- Update to 2.86.0 upstream release
- Resolves: rhbz#2431732
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.85.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jan 15 2026 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 2.85.0-1
- Update 2.85.0 - Closes rhbz#2429758
--------------------------------------------------------------------------------
================================================================================
perl-Text-Format-0.63-4.el10_1 (FEDORA-EPEL-2026-a9ba74292d)
Various subroutines to format text
--------------------------------------------------------------------------------
Update Information:
First EPEL 10 build.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.63-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.63-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.63-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Sep 9 2024 Xavier Bachelot <xavier(a)bachelot.org> - 0.63-1
- Update to 0.63 (RHBZ#2310607)
* Tue Aug 6 2024 Miroslav Suchý <msuchy(a)redhat.com> - 0.62-13
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.62-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.62-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.62-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2431584 - Please branch and build perl-Text-Format for EPEL10
https://bugzilla.redhat.com/show_bug.cgi?id=2431584
--------------------------------------------------------------------------------
================================================================================
python-astropy-iers-data-0.2026.1.19.0.42.31-1.el10_1 (FEDORA-EPEL-2026-2e115599ea)
IERS Earth Rotation and Leap Second tables for the astropy core package
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-astropy-iers-data-0.2026.1.19.0.42.31-1.el10_1.
Changelog for python-astropy-iers-data
* Mon Jan 19 2026 Packit <hello(a)packit.dev> - 0.2026.1.19.0.42.31-1
- Update to 0.2026.1.19.0.42.31 upstream release
- Resolves: rhbz#2430749
* Mon Jan 12 2026 Packit <hello(a)packit.dev> - 0.2026.1.12.0.42.13-1
- Update to 0.2026.1.12.0.42.13 upstream release
- Resolves: rhbz#2428609
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 19 2026 Packit <hello(a)packit.dev> - 0.2026.1.19.0.42.31-1
- Update to 0.2026.1.19.0.42.31 upstream release
- Resolves: rhbz#2430749
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2428609 - python-astropy-iers-data-0.2026.1.12.0.42.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428609
[ 2 ] Bug #2430749 - python-astropy-iers-data-0.2026.1.19.0.42.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2430749
--------------------------------------------------------------------------------
================================================================================
ruby-build-20260121-1.el10_1 (FEDORA-EPEL-2026-5ceaf7ebca)
Compile and install Ruby
--------------------------------------------------------------------------------
Update Information:
Update to 20260121
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Packit <hello(a)packit.dev> - 20260121-1
- Update to 20260121 upstream release
- Resolves: rhbz#2431769
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 20260114-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
64 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
dfuzzer-2.6-1.el8
duo_unix-2.2.3-1.el8
Details about builds:
================================================================================
dfuzzer-2.6-1.el8 (FEDORA-EPEL-2026-e248b71a69)
D-Bus fuzz testing tool
--------------------------------------------------------------------------------
Update Information:
Bump to v2.6 (rhbz#2431167)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 22 2026 Frantisek Sumsal <frantisek(a)sumsal.cz> - 2.6-1
- Bump to v2.6 (rhbz#2431167)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2431167 - dfuzzer-2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2431167
--------------------------------------------------------------------------------
================================================================================
duo_unix-2.2.3-1.el8 (FEDORA-EPEL-2026-b6a2a57e2c)
Duo two-factor authentication for UNIX systems
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.3
This comes with the new CA bundle; versions < 2.1.0 will stop working on 2/2:
https://help.duo.com/s/article/9451?language=en_US
One potentially breaking change is that su now asks the target user for 2FA
instead of the requesting user, as of version 2.0.0 - arguably this is the safer
behavior anyway:
https://github.com/duosecurity/duo_unix/releases/tag/duo_unix-2.0.0
Not landing this until it clears the incompatible request process:
https://pagure.io/epel/issue/360
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Davide Cavalca <dcavalca(a)fedoraproject.org> - 2.2.3-1
- Update to 2.2.3; Fixes: RHBZ#2428862
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Jul 29 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.12.1-11
- convert license to SPDX
* Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2428862 - must upgrade duo_unix/pam_duo to version ≥2.1.0 before 2026-02-02
https://bugzilla.redhat.com/show_bug.cgi?id=2428862
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
63 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
partclone-0.3.41-1.el8
Details about builds:
================================================================================
partclone-0.3.41-1.el8 (FEDORA-EPEL-2026-ac1188d0df)
Utility to clone and restore a partition
--------------------------------------------------------------------------------
Update Information:
partclone v0.3.41
Security enhancements across multiple filesystems to prevent potential denial-
of-service attacks and memory exhaustion
Add option for partclone.dd to manually define device size while pipe input
Fix some jfs issue
Fix some ufs issue
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Robert Scheck <robert(a)fedoraproject.org> 0.3.41-1
- Upgrade to 0.3.41 (#2430752)
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.40-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2430752 - partclone-0.3.42 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2430752
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
63 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7d20038bca qownnotes-26.1.7-4.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
partclone-0.3.41-1.el9
xrootd-s3-http-0.6.1-1.el9
Details about builds:
================================================================================
partclone-0.3.41-1.el9 (FEDORA-EPEL-2026-c30d7931fc)
Utility to clone and restore a partition
--------------------------------------------------------------------------------
Update Information:
partclone v0.3.41
Security enhancements across multiple filesystems to prevent potential denial-
of-service attacks and memory exhaustion
Add option for partclone.dd to manually define device size while pipe input
Fix some jfs issue
Fix some ufs issue
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 21 2026 Robert Scheck <robert(a)fedoraproject.org> 0.3.41-1
- Upgrade to 0.3.41 (#2430752)
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.40-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2430752 - partclone-0.3.42 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2430752
--------------------------------------------------------------------------------
================================================================================
xrootd-s3-http-0.6.1-1.el9 (FEDORA-EPEL-2026-851fb31902)
S3/HTTP/Globus filesystem plugins for XRootD
--------------------------------------------------------------------------------
Update Information:
xrootd S3/http 0.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 20 2026 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.1-1
- Update to version 0.6.1
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------