epel-devel October 2026

epel-devel@lists.fedoraproject.org

4 participants
36 discussions

Orphaning python-sphinxcontrib-apidoc
by Miro Hrončok 07 Oct '26

07 Oct '26

Hello, we have orphaned python-sphinxcontrib-apidoc in EPEL. The package does not install in epel9: https://bugzilla.redhat.com/2510867 If you wish to take it over, let me know. -- Miro Hrončok -- Phone: +420777974800

2 3

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 06 Oct '26

06 Oct '26

The following Fedora EPEL 8 Security updates need testing: Age URL 321 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-be34e6a49a openbao-2.6.4-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0b2b7eab8b baresip-4.12.0-1.el8 libre-4.12.0-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-097fd3579f zabbix6.0-6.0.48-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-367fe24aeb zabbix7.0-7.0.31-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing exim-4.100.1-1.el8 radicale-3.8.2-1.el8 tomcat-native-1.3.9-2.el8 wasmedge-0.18.0-1.el8 Details about builds: ================================================================================ exim-4.100.1-1.el8 (FEDORA-EPEL-2026-71b80f48fa) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Jaroslav Škarvada <jskarvad(a)redhat.com> - 4.100.1-1 - New version Resolves: rhbz#2537003 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2537003 - exim-4.100.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2537003 [ 2 ] Bug #2539250 - CVE-2026-94054 exim: Exim: Arbitrary code execution via attacker-controlled Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539250 [ 3 ] Bug #2539252 - CVE-2026-94056 exim: Exim: Information disclosure via attacker-controlled proxy when using Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539252 [ 4 ] Bug #2539253 - CVE-2026-94057 exim: Exim: SMTP smuggling via crafted data during DATA processing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539253 [ 5 ] Bug #2539415 - CVE-2026-94055 exim: Exim: Use-after-free vulnerability in GnuTLS TLS settings leading to denial of service [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539415 -------------------------------------------------------------------------------- ================================================================================ radicale-3.8.2-1.el8 (FEDORA-EPEL-2026-8a60a0c633) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information: Update to 3.8.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.2-1 - Update to 3.8.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546290 - radicale-3.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546290 -------------------------------------------------------------------------------- ================================================================================ tomcat-native-1.3.9-2.el8 (FEDORA-EPEL-2026-f2050982a3) Tomcat native library -------------------------------------------------------------------------------- Update Information: Update to 1.3.9 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Dimitris Soumis <dsoumis(a)redhat.com> - 1:1.3.9-2 - Backport OpenSSL 1.1.1 compatibility to fix the EL8 build (guard the core_names.h include, add a pre-3.0 fallback in SSL_ec_GetParamFromFile) * Mon Oct 5 2026 Dimitris Soumis <dsoumis(a)redhat.com> - 1:1.3.9-1 - Update to 1.3.9 -------------------------------------------------------------------------------- ================================================================================ wasmedge-0.18.0-1.el8 (FEDORA-EPEL-2026-c2abdb5db4) High performance WebAssembly Virtual Machine -------------------------------------------------------------------------------- Update Information: Update to 0.18.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 hydai <hydai(a)hyd.ai> - 0.18.0-1 - Update to 0.18.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 06 Oct '26

06 Oct '26

The following Fedora EPEL 9 Security updates need testing: Age URL 321 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-12b7f6fc6c aom-3.13.3-1.el9 libheif-1.23.5-2.el9 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4132a6573a libmodsecurity-3.0.17-1.el9 nginx-mod-modsecurity-1.0.4-18.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e0e0737425 GitPython-3.2.0-1.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-46350ad475 openbao-2.6.4-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-01f818d873 simdjson-5.0.1-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d64ba97176 python3.13-3.13.16-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9b46dea8e0 baresip-4.12.0-1.el9 libre-4.12.0-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d82469a549 zabbix-6.0.48-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0879abafaa zabbix7.0-7.0.31-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing 7zip-26.04-1.el9 chromium-154.0.8037.97-1.el9 exim-4.100.1-1.el9 pythoncapi-compat-0^20261005.cb1eadf-1.el9 radicale-3.8.2-1.el9 tomcat-native-1.3.9-1.el9 wasmedge-0.18.0-1.el9 Details about builds: ================================================================================ 7zip-26.04-1.el9 (FEDORA-EPEL-2026-29947f7caa) A file archiver -------------------------------------------------------------------------------- Update Information: Some bugs and vulnerabilities were fixed 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.04-1 - Update to version 26.04; Resolves: rhbz#2546547 * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 [ 2 ] Bug #2546547 - 7zip-26.04 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546547 -------------------------------------------------------------------------------- ================================================================================ chromium-154.0.8037.97-1.el9 (FEDORA-EPEL-2026-923ac1e238) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG CVE-2026-103623: Use after free in MediaStream CVE-2026-103624: Use after free in Contextual Tasks CVE-2026-103625: Type confusion in V8 CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103627: Information leak in SVG CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103629: Integer overflow in Skia CVE-2026-103630: Use after free in FedCM CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 3 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.97-1 - Update to 154.0.8037.97 * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103625: Type confusion in V8 * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103627: Information leak in SVG * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103630: Use after free in FedCM * CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546085 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546085 [ 2 ] Bug #2546090 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546090 -------------------------------------------------------------------------------- ================================================================================ exim-4.100.1-1.el9 (FEDORA-EPEL-2026-61a5ea9fcd) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Jaroslav Škarvada <jskarvad(a)redhat.com> - 4.100.1-1 - New version Resolves: rhbz#2537003 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2537003 - exim-4.100.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2537003 [ 2 ] Bug #2539250 - CVE-2026-94054 exim: Exim: Arbitrary code execution via attacker-controlled Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539250 [ 3 ] Bug #2539252 - CVE-2026-94056 exim: Exim: Information disclosure via attacker-controlled proxy when using Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539252 [ 4 ] Bug #2539253 - CVE-2026-94057 exim: Exim: SMTP smuggling via crafted data during DATA processing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539253 [ 5 ] Bug #2539415 - CVE-2026-94055 exim: Exim: Use-after-free vulnerability in GnuTLS TLS settings leading to denial of service [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539415 -------------------------------------------------------------------------------- ================================================================================ pythoncapi-compat-0^20261005.cb1eadf-1.el9 (FEDORA-EPEL-2026-d405e1e3e0) Python C API compatibility -------------------------------------------------------------------------------- Update Information: Update to 0^20261005.cb1eadf Add support for the limited C API (Py_LIMITED_API) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1:0^20261005.cb1eadf-1 - Update to 0^20261005.cb1eadf -------------------------------------------------------------------------------- ================================================================================ radicale-3.8.2-1.el9 (FEDORA-EPEL-2026-bbbd9f2e11) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information: Update to 3.8.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.2-1 - Update to 3.8.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546290 - radicale-3.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546290 -------------------------------------------------------------------------------- ================================================================================ tomcat-native-1.3.9-1.el9 (FEDORA-EPEL-2026-9bb4556752) Tomcat native library -------------------------------------------------------------------------------- Update Information: Update to 1.3.9 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Dimitris Soumis <dsoumis(a)redhat.com> - 1:1.3.9-1 - Update to 1.3.9 -------------------------------------------------------------------------------- ================================================================================ wasmedge-0.18.0-1.el9 (FEDORA-EPEL-2026-1b1bff4a78) High performance WebAssembly Virtual Machine -------------------------------------------------------------------------------- Update Information: Update to 0.18.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 hydai <hydai(a)hyd.ai> - 0.18.0-1 - Update to 0.18.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 06 Oct '26

06 Oct '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3f535077b3 aom-3.13.3-1.el10_2 libheif-1.23.5-4.el10_2 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-96afd3621b openbao-2.6.4-1.el10_2 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5dfbf08d30 python3.13-3.13.16-1.el10_2 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c3ee85c015 GitPython-3.2.0-1.el10_2 python-mkdocs-rss-plugin-1.17.4-2.el10_2 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a918489cff baresip-4.12.0-1.el10_2 libre-4.12.0-1.el10_2 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6aaa054bb4 zabbix7.0-7.0.31-1.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing 7zip-26.04-1.el10_2 chromium-154.0.8037.97-1.el10_2 opkssh-0.17.0-1.el10_2 python-klein-23.5.0-8.el10_2 python-tubes-0.2.1-3.el10_2 wasmedge-0.18.0-1.el10_2 Details about builds: ================================================================================ 7zip-26.04-1.el10_2 (FEDORA-EPEL-2026-0f7d08267e) A file archiver -------------------------------------------------------------------------------- Update Information: Some bugs and vulnerabilities were fixed -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.04-1 - Update to version 26.04; Resolves: rhbz#2546547 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546547 - 7zip-26.04 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546547 -------------------------------------------------------------------------------- ================================================================================ chromium-154.0.8037.97-1.el10_2 (FEDORA-EPEL-2026-421dd4a529) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG CVE-2026-103623: Use after free in MediaStream CVE-2026-103624: Use after free in Contextual Tasks CVE-2026-103625: Type confusion in V8 CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103627: Information leak in SVG CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103629: Integer overflow in Skia CVE-2026-103630: Use after free in FedCM CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 3 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.97-1 - Update to 154.0.8037.97 * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103625: Type confusion in V8 * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103627: Information leak in SVG * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103630: Use after free in FedCM * CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546085 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546085 [ 2 ] Bug #2546090 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546090 -------------------------------------------------------------------------------- ================================================================================ opkssh-0.17.0-1.el10_2 (FEDORA-EPEL-2026-c49728272e) OpenPubkey SSH -------------------------------------------------------------------------------- Update Information: Update to opkssh 0.17.0. Security-relevant fixes in this release: verify: reject unsafe principals in authorized_keys deny malformed OIDC policy rows instead of panicking reject empty identity attributes in policy warn when a policy row matches on an unverified email accept a string email_verified claim in the plugin env vars ssh-agent is now off by default New features: CI/CD login from Forgejo Actions (Codeberg), GitLab CI provider support, and loading the certificate into ssh-agent with a configurable lifetime at login. Upstream release notes: https://github.com/openpubkey/opkssh/releases/tag/v0.17.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Till Hofmann <thofmann(a)fedoraproject.org> - 0.17.0-1 - Update to 0.17.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546276 - opkssh-0.17.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546276 -------------------------------------------------------------------------------- ================================================================================ python-klein-23.5.0-8.el10_2 (FEDORA-EPEL-2026-11e0806b41) Python microframework built on werkzeug + twisted.web -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 3 2025 Python Maint <python-maint(a)redhat.com> - 23.5.0-8 - Rebuilt for Python 3.14 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 23.5.0-5 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jul 5 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 23.5.0-1 - 23.5.0 * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 20.6.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.1-3.el10_2 (FEDORA-EPEL-2026-11e0806b41) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 14 2025 Lumír Balhar <lbalhar(a)redhat.com> - 0.2.1-3 - Fix compatibility with the latest setuptools * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Aug 14 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.1-1 - 0.2.1, modernize packaging. * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 0.2.0-13 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 0.2.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ wasmedge-0.18.0-1.el10_2 (FEDORA-EPEL-2026-61e2ab0004) High performance WebAssembly Virtual Machine -------------------------------------------------------------------------------- Update Information: Release 0.18.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 hydai <hydai(a)hyd.ai> - 0.18.0-1 - Release 0.18.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 06 Oct '26

06 Oct '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 103 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-bc47388d91 barman-3.20.1-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c45a714e8d openbao-2.6.4-1.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-36f6602332 simdjson-5.0.1-1.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0781e8eb3f python3.13-3.13.16-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b8f0b437b3 GitPython-3.2.0-1.el10_3 python-mkdocs-rss-plugin-1.17.4-2.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-48c2e2c10b baresip-4.12.0-1.el10_3 libre-4.12.0-1.el10_3 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-042a8bf4e4 zabbix7.0-7.0.31-1.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing 7zip-26.04-1.el10_3 chromium-154.0.8037.97-1.el10_3 ipv6calc-4.4.1-1.el10_3 opkssh-0.17.0-1.el10_3 python-klein-23.5.0-8.el10_3 python-tubes-0.2.1-3.el10_3 radicale-3.8.2-1.el10_3 wasmedge-0.18.0-1.el10_3 Details about builds: ================================================================================ 7zip-26.04-1.el10_3 (FEDORA-EPEL-2026-e527d77d36) A file archiver -------------------------------------------------------------------------------- Update Information: Some bugs and vulnerabilities were fixed 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.04-1 - Update to version 26.04; Resolves: rhbz#2546547 * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 [ 2 ] Bug #2546547 - 7zip-26.04 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546547 -------------------------------------------------------------------------------- ================================================================================ chromium-154.0.8037.97-1.el10_3 (FEDORA-EPEL-2026-b3497ed039) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG CVE-2026-103623: Use after free in MediaStream CVE-2026-103624: Use after free in Contextual Tasks CVE-2026-103625: Type confusion in V8 CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103627: Information leak in SVG CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103629: Integer overflow in Skia CVE-2026-103630: Use after free in FedCM CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 3 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.97-1 - Update to 154.0.8037.97 * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103625: Type confusion in V8 * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103627: Information leak in SVG * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103630: Use after free in FedCM * CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546085 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546085 [ 2 ] Bug #2546090 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546090 -------------------------------------------------------------------------------- ================================================================================ ipv6calc-4.4.1-1.el10_3 (FEDORA-EPEL-2026-ec4124109c) IPv6/IPv4 address information, format change, filter and calculation utility -------------------------------------------------------------------------------- Update Information: Final release 4.4.1 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 3 2026 Peter Bieringer <pb(a)bieringer.de> - 4.4.1-1 - Final release 4.4.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545503 - ipv6calc-4.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545503 -------------------------------------------------------------------------------- ================================================================================ opkssh-0.17.0-1.el10_3 (FEDORA-EPEL-2026-6b56bcb07c) OpenPubkey SSH -------------------------------------------------------------------------------- Update Information: Update to opkssh 0.17.0. Security-relevant fixes in this release: verify: reject unsafe principals in authorized_keys deny malformed OIDC policy rows instead of panicking reject empty identity attributes in policy warn when a policy row matches on an unverified email accept a string email_verified claim in the plugin env vars ssh-agent is now off by default New features: CI/CD login from Forgejo Actions (Codeberg), GitLab CI provider support, and loading the certificate into ssh-agent with a configurable lifetime at login. Upstream release notes: https://github.com/openpubkey/opkssh/releases/tag/v0.17.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Till Hofmann <thofmann(a)fedoraproject.org> - 0.17.0-1 - Update to 0.17.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546276 - opkssh-0.17.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546276 -------------------------------------------------------------------------------- ================================================================================ python-klein-23.5.0-8.el10_3 (FEDORA-EPEL-2026-81907a932e) Python microframework built on werkzeug + twisted.web -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 3 2025 Python Maint <python-maint(a)redhat.com> - 23.5.0-8 - Rebuilt for Python 3.14 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 23.5.0-5 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jul 5 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 23.5.0-1 - 23.5.0 * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 20.6.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.1-3.el10_3 (FEDORA-EPEL-2026-81907a932e) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 14 2025 Lumír Balhar <lbalhar(a)redhat.com> - 0.2.1-3 - Fix compatibility with the latest setuptools * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Aug 14 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.1-1 - 0.2.1, modernize packaging. * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 0.2.0-13 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 0.2.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ radicale-3.8.2-1.el10_3 (FEDORA-EPEL-2026-aedbe1412b) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information: Update to 3.8.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.2-1 - Update to 3.8.2 * Thu Sep 24 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.1-1 - Update to 3.8.1 * Thu Sep 3 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.0-1 - Update to 3.8.0 - Use radicale.service from contrib -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546290 - radicale-3.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546290 -------------------------------------------------------------------------------- ================================================================================ wasmedge-0.18.0-1.el10_3 (FEDORA-EPEL-2026-fba61f990f) High performance WebAssembly Virtual Machine -------------------------------------------------------------------------------- Update Information: Release 0.18.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 hydai <hydai(a)hyd.ai> - 0.18.0-1 - Release 0.18.0 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.4 updates-testing report
by updates＠fedoraproject.org 06 Oct '26

06 Oct '26

The following Fedora EPEL 10.4 Security updates need testing: Age URL 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6769292d4a ntfs-3g-2026.9.28-1.el10_4 ntfs-3g-system-compression-1.1-2.el10_4 partclone-0.3.50-2.el10_4 testdisk-7.2-2.el10_4 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6867b104b2 barman-3.20.1-1.el10_4 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-32677c15c7 openbao-2.6.4-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8a421bf5fb simdjson-5.0.1-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0498f387fb python3.13-3.13.16-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-45c2ca66b6 baresip-4.12.0-1.el10_4 libre-4.12.0-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-58b3caf388 GitPython-3.2.0-1.el10_4 python-mkdocs-rss-plugin-1.17.4-2.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3e248bfcbd zabbix7.0-7.0.31-1.el10_4 The following builds have been pushed to Fedora EPEL 10.4 updates-testing 7zip-26.04-1.el10_4 chromium-154.0.8037.97-1.el10_4 exim-4.100.1-1.el10_4 python-klein-23.5.0-8.el10_4 python-tubes-0.2.1-3.el10_4 radicale-3.8.2-1.el10_4 wasmedge-0.18.0-1.el10_4 Details about builds: ================================================================================ 7zip-26.04-1.el10_4 (FEDORA-EPEL-2026-7b07dd12c9) A file archiver -------------------------------------------------------------------------------- Update Information: Some bugs and vulnerabilities were fixed 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.04-1 - Update to version 26.04; Resolves: rhbz#2546547 * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 [ 2 ] Bug #2546547 - 7zip-26.04 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546547 -------------------------------------------------------------------------------- ================================================================================ chromium-154.0.8037.97-1.el10_4 (FEDORA-EPEL-2026-d1c26f4ffd) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG CVE-2026-103623: Use after free in MediaStream CVE-2026-103624: Use after free in Contextual Tasks CVE-2026-103625: Type confusion in V8 CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103627: Information leak in SVG CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103629: Integer overflow in Skia CVE-2026-103630: Use after free in FedCM CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 3 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.97-1 - Update to 154.0.8037.97 * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103625: Type confusion in V8 * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103627: Information leak in SVG * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103630: Use after free in FedCM * CVE-2026-103631: Buffer overflow in WebRTC -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546085 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546085 [ 2 ] Bug #2546090 - CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2546090 -------------------------------------------------------------------------------- ================================================================================ exim-4.100.1-1.el10_4 (FEDORA-EPEL-2026-15b5988543) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information: This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Jaroslav Škarvada <jskarvad(a)redhat.com> - 4.100.1-1 - New version Resolves: rhbz#2537003 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2537003 - exim-4.100.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2537003 [ 2 ] Bug #2539250 - CVE-2026-94054 exim: Exim: Arbitrary code execution via attacker-controlled Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539250 [ 3 ] Bug #2539252 - CVE-2026-94056 exim: Exim: Information disclosure via attacker-controlled proxy when using Proxy-Protocol [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539252 [ 4 ] Bug #2539253 - CVE-2026-94057 exim: Exim: SMTP smuggling via crafted data during DATA processing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539253 [ 5 ] Bug #2539415 - CVE-2026-94055 exim: Exim: Use-after-free vulnerability in GnuTLS TLS settings leading to denial of service [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2539415 -------------------------------------------------------------------------------- ================================================================================ python-klein-23.5.0-8.el10_4 (FEDORA-EPEL-2026-ac0a8d23e0) Python microframework built on werkzeug + twisted.web -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 3 2025 Python Maint <python-maint(a)redhat.com> - 23.5.0-8 - Rebuilt for Python 3.14 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 23.5.0-5 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jul 5 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 23.5.0-1 - 23.5.0 * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 20.6.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.1-3.el10_4 (FEDORA-EPEL-2026-ac0a8d23e0) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 14 2025 Lumír Balhar <lbalhar(a)redhat.com> - 0.2.1-3 - Fix compatibility with the latest setuptools * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Aug 14 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.1-1 - 0.2.1, modernize packaging. * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 0.2.0-13 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 0.2.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ radicale-3.8.2-1.el10_4 (FEDORA-EPEL-2026-795f93c2ec) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information: Update to 3.8.2 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 Peter Bieringer <pb(a)bieringer.de> - 3.8.2-1 - Update to 3.8.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2546290 - radicale-3.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2546290 -------------------------------------------------------------------------------- ================================================================================ wasmedge-0.18.0-1.el10_4 (FEDORA-EPEL-2026-594b09bdbb) High performance WebAssembly Virtual Machine -------------------------------------------------------------------------------- Update Information: Release 0.18.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 6 2026 hydai <hydai(a)hyd.ai> - 0.18.0-1 - Release 0.18.0 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 06 Oct '26

06 Oct '26

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2026-10-07 from 18:00:00 to 19:00:00 UTC At meeting-1(a)chat.fedoraproject.org The meeting will be about: https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha #topic EPEL Issues https://pagure.io/epel/issues * https://pagure.io/epel/issues?tags=meeting&status=Open #topic Old Business (if needed) #topic General Issues / Open Floor Source: https://calendar.fedoraproject.org//meeting/11230/

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 05 Oct '26

05 Oct '26

The following Fedora EPEL 9 Security updates need testing: Age URL 320 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-12b7f6fc6c aom-3.13.3-1.el9 libheif-1.23.5-2.el9 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1843885c69 ntfs-3g-2022.10.3-13.el9 ntfs-3g-system-compression-1.1-2.el9 partclone-0.3.50-2.el9 testdisk-7.2-2.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4132a6573a libmodsecurity-3.0.17-1.el9 nginx-mod-modsecurity-1.0.4-18.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e0e0737425 GitPython-3.2.0-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-46350ad475 openbao-2.6.4-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-01f818d873 simdjson-5.0.1-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d64ba97176 python3.13-3.13.16-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9b46dea8e0 baresip-4.12.0-1.el9 libre-4.12.0-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing bird-3.3.3-1.el9 dkms-3.4.4-1.el9 rust-clap-cargo-0.19.0-1.el9 rust-sequoia-keystore-softkeys-0.7.3-1.el9 rust-tokei-15.0.0-2.el9 zabbix-6.0.48-1.el9 zabbix7.0-7.0.31-1.el9 Details about builds: ================================================================================ bird-3.3.3-1.el9 (FEDORA-EPEL-2026-8016a0621f) BIRD Internet Routing Daemon -------------------------------------------------------------------------------- Update Information: BIRD 3.3.3 (2026-10-01) BMP/Nest: No refeed after listener or protocol restart BMP: Fix crash on sending routes BMP: Fix route sending when no import table is configured EVPN: Improve tunnel and bridge interface handling Netlink: Fix handling of interface attributes for slave interfaces OSPF: Fix LSA length overflow RAdv: Add hop limit validation RPKI: Fix socket close detection during rx_hook Proto: Fix VRF settings MPLS: Fix crash on reconfiguring label ranges Tools: Fix version script for Git 2.55+ Conf: Fix use-after-free in cf_include() error path Lib: Fix bvsnprintf() on too long net_addr values Lib: Fix endptr in bstrtoul16() See also: https://trubka.network.cz/archives/list/bird- users(a)network.cz/thread/TR3H2XC3NUFGLOANJMCB4RH4FP5IHQG4/ -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Robert Scheck <robert(a)fedoraproject.org> - 3.3.3-1 - Upgrade to 3.3.3 (#2545882) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545882 - bird-3.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545882 -------------------------------------------------------------------------------- ================================================================================ dkms-3.4.4-1.el9 (FEDORA-EPEL-2026-eabe21803d) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Update to 3.4.4. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Simone Caronni <negativo17(a)gmail.com> - 3.4.4-1 - Update to 3.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545863 - dkms-3.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545863 -------------------------------------------------------------------------------- ================================================================================ rust-clap-cargo-0.19.0-1.el9 (FEDORA-EPEL-2026-e19b6c5ce5) Re-usable CLI flags for cargo plugins -------------------------------------------------------------------------------- Update Information: Update clap-cargo to 0.19.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.19.0-1 - Update to version 0.19.0; Fixes RHBZ#2518132 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.18.3-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2518132 - rust-clap-cargo-0.19.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2518132 -------------------------------------------------------------------------------- ================================================================================ rust-sequoia-keystore-softkeys-0.7.3-1.el9 (FEDORA-EPEL-2026-897a249154) Soft key (in-memory key) backend for Sequoia's private key store -------------------------------------------------------------------------------- Update Information: Update to version 0.7.3. Update to version 0.7.2. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.3-1 - Update to version 0.7.3; Fixes RHBZ#2545823 * Fri Oct 2 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.2-1 - Update to version 0.7.2; Fixes RHBZ#2414814 * Sat Jul 25 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.1-4 - Build with the default Fedora crypto backend (OpenSSL) * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tokei-15.0.0-2.el9 (FEDORA-EPEL-2026-e19b6c5ce5) Count your code, quickly -------------------------------------------------------------------------------- Update Information: Update clap-cargo to 0.19.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 15.0.0-2 - Allow clap-cargo 0.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2518132 - rust-clap-cargo-0.19.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2518132 -------------------------------------------------------------------------------- ================================================================================ zabbix-6.0.48-1.el9 (FEDORA-EPEL-2026-d82469a549) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Update to 6.0.48 (CVE-2026-59782, CVE-2026-59785, CVE-2026-59787) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Orion Poplawski <orion(a)nwra.com> - 1:6.0.48-1 - Update to 6.0.48 (CVE-2026-59787) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545895 - CVE-2026-59787 zabbix6.0: zabbix: Trap record injection via unsanitized delimiter in SNMP trap receiver [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545895 [ 2 ] Bug #2545901 - CVE-2026-59782 zabbix6.0: Zabbix: Information disclosure via the JavaScript preprocessing engine [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545901 [ 3 ] Bug #2545906 - CVE-2026-59785 zabbix6.0: zabbix: Information disclosure via frontend host search filtering [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545906 -------------------------------------------------------------------------------- ================================================================================ zabbix7.0-7.0.31-1.el9 (FEDORA-EPEL-2026-0879abafaa) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Orion Poplawski <orion(a)nwra.com> - 7.0.31-1 - Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545893 - CVE-2026-59787 zabbix7.0: zabbix: Trap record injection via unsanitized delimiter in SNMP trap receiver [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545893 [ 2 ] Bug #2545903 - CVE-2026-59782 zabbix7.0: Zabbix: Information disclosure via the JavaScript preprocessing engine [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545903 [ 3 ] Bug #2545904 - CVE-2026-59783 zabbix7.0: Zabbix: Denial of service via null byte input in binary items [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545904 [ 4 ] Bug #2545905 - CVE-2026-59785 zabbix7.0: zabbix: Information disclosure via frontend host search filtering [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545905 [ 5 ] Bug #2545909 - CVE-2026-59786 zabbix7.0: zabbix: Host status spoofing via unauthenticated active agent heartbeats [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545909 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 05 Oct '26

05 Oct '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 102 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8ce56f7e4a vlc-3.0.24-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-bc47388d91 barman-3.20.1-1.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c45a714e8d openbao-2.6.4-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-36f6602332 simdjson-5.0.1-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0781e8eb3f python3.13-3.13.16-1.el10_3 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-48c2e2c10b baresip-4.12.0-1.el10_3 libre-4.12.0-1.el10_3 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b8f0b437b3 GitPython-3.2.0-1.el10_3 python-mkdocs-rss-plugin-1.17.4-2.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing bird-3.3.3-1.el10_3 dkms-3.4.4-1.el10_3 python-tubes-0.2.1-3.el10_3 pythoncapi-compat-0^20261005.cb1eadf-1.el10_3 zabbix7.0-7.0.31-1.el10_3 Details about builds: ================================================================================ bird-3.3.3-1.el10_3 (FEDORA-EPEL-2026-e3ea760078) BIRD Internet Routing Daemon -------------------------------------------------------------------------------- Update Information: BIRD 3.3.3 (2026-10-01) BMP/Nest: No refeed after listener or protocol restart BMP: Fix crash on sending routes BMP: Fix route sending when no import table is configured EVPN: Improve tunnel and bridge interface handling Netlink: Fix handling of interface attributes for slave interfaces OSPF: Fix LSA length overflow RAdv: Add hop limit validation RPKI: Fix socket close detection during rx_hook Proto: Fix VRF settings MPLS: Fix crash on reconfiguring label ranges Tools: Fix version script for Git 2.55+ Conf: Fix use-after-free in cf_include() error path Lib: Fix bvsnprintf() on too long net_addr values Lib: Fix endptr in bstrtoul16() See also: https://trubka.network.cz/archives/list/bird- users(a)network.cz/thread/TR3H2XC3NUFGLOANJMCB4RH4FP5IHQG4/ -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Robert Scheck <robert(a)fedoraproject.org> - 3.3.3-1 - Upgrade to 3.3.3 (#2545882) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545882 - bird-3.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545882 -------------------------------------------------------------------------------- ================================================================================ dkms-3.4.4-1.el10_3 (FEDORA-EPEL-2026-f56ceb1862) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Update to 3.4.4. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Simone Caronni <negativo17(a)gmail.com> - 3.4.4-1 - Update to 3.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545863 - dkms-3.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545863 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.1-3.el10_3 (FEDORA-EPEL-2026-81907a932e) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 14 2025 Lumír Balhar <lbalhar(a)redhat.com> - 0.2.1-3 - Fix compatibility with the latest setuptools * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Aug 14 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.1-1 - 0.2.1, modernize packaging. * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 0.2.0-13 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 0.2.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ pythoncapi-compat-0^20261005.cb1eadf-1.el10_3 (FEDORA-EPEL-2026-fa0ad7dc1e) Python C API compatibility -------------------------------------------------------------------------------- Update Information: Update to 0^20261005.cb1eadf Add support for the limited C API (Py_LIMITED_API) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1:0^20261005.cb1eadf-1 - Update to 0^20261005.cb1eadf -------------------------------------------------------------------------------- ================================================================================ zabbix7.0-7.0.31-1.el10_3 (FEDORA-EPEL-2026-042a8bf4e4) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Orion Poplawski <orion(a)nwra.com> - 7.0.31-1 - Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545893 - CVE-2026-59787 zabbix7.0: zabbix: Trap record injection via unsanitized delimiter in SNMP trap receiver [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545893 [ 2 ] Bug #2545903 - CVE-2026-59782 zabbix7.0: Zabbix: Information disclosure via the JavaScript preprocessing engine [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545903 [ 3 ] Bug #2545904 - CVE-2026-59783 zabbix7.0: Zabbix: Denial of service via null byte input in binary items [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545904 [ 4 ] Bug #2545905 - CVE-2026-59785 zabbix7.0: zabbix: Information disclosure via frontend host search filtering [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545905 [ 5 ] Bug #2545909 - CVE-2026-59786 zabbix7.0: zabbix: Host status spoofing via unauthenticated active agent heartbeats [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545909 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 05 Oct '26

05 Oct '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3f535077b3 aom-3.13.3-1.el10_2 libheif-1.23.5-4.el10_2 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-96afd3621b openbao-2.6.4-1.el10_2 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5dfbf08d30 python3.13-3.13.16-1.el10_2 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a918489cff baresip-4.12.0-1.el10_2 libre-4.12.0-1.el10_2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c3ee85c015 GitPython-3.2.0-1.el10_2 python-mkdocs-rss-plugin-1.17.4-2.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing bird-3.3.3-1.el10_2 dkms-3.4.4-1.el10_2 postgresql16-pg_cron-1.6.7-1.el10_2 postgresql16-pg_tle-1.5.2-1.el10_2 python-tubes-0.2.1-3.el10_2 zabbix7.0-7.0.31-1.el10_2 Details about builds: ================================================================================ bird-3.3.3-1.el10_2 (FEDORA-EPEL-2026-7cd3b041ca) BIRD Internet Routing Daemon -------------------------------------------------------------------------------- Update Information: BIRD 3.3.3 (2026-10-01) BMP/Nest: No refeed after listener or protocol restart BMP: Fix crash on sending routes BMP: Fix route sending when no import table is configured EVPN: Improve tunnel and bridge interface handling Netlink: Fix handling of interface attributes for slave interfaces OSPF: Fix LSA length overflow RAdv: Add hop limit validation RPKI: Fix socket close detection during rx_hook Proto: Fix VRF settings MPLS: Fix crash on reconfiguring label ranges Tools: Fix version script for Git 2.55+ Conf: Fix use-after-free in cf_include() error path Lib: Fix bvsnprintf() on too long net_addr values Lib: Fix endptr in bstrtoul16() See also: https://trubka.network.cz/archives/list/bird- users(a)network.cz/thread/TR3H2XC3NUFGLOANJMCB4RH4FP5IHQG4/ -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Robert Scheck <robert(a)fedoraproject.org> - 3.3.3-1 - Upgrade to 3.3.3 (#2545882) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545882 - bird-3.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545882 -------------------------------------------------------------------------------- ================================================================================ dkms-3.4.4-1.el10_2 (FEDORA-EPEL-2026-de548fc0bd) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Update to 3.4.4. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Simone Caronni <negativo17(a)gmail.com> - 3.4.4-1 - Update to 3.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545863 - dkms-3.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2545863 -------------------------------------------------------------------------------- ================================================================================ postgresql16-pg_cron-1.6.7-1.el10_2 (FEDORA-EPEL-2026-63eb89e4ac) A simple cron-based job scheduler for PostgreSQL -------------------------------------------------------------------------------- Update Information: Inclusion of the package to the epel10.2 as well, requested by customer. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Daniel Handzus <dhandzus(a)redhat.com> - 1.6.7-1 - Initial import to epel10.2 -------------------------------------------------------------------------------- ================================================================================ postgresql16-pg_tle-1.5.2-1.el10_2 (FEDORA-EPEL-2026-c156585278) Framework for building and installing trusted language PostgreSQL extensions -------------------------------------------------------------------------------- Update Information: Inclusion of the package to the epel10.2 as well, requested by customer. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Daniel Handzus <dhandzus(a)redhat.com> - 1.5.2-1 - Initial import to epel10.2 -------------------------------------------------------------------------------- ================================================================================ python-tubes-0.2.1-3.el10_2 (FEDORA-EPEL-2026-11e0806b41) Flow control and backpressure for event-driven applications -------------------------------------------------------------------------------- Update Information: Build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 14 2025 Lumír Balhar <lbalhar(a)redhat.com> - 0.2.1-3 - Fix compatibility with the latest setuptools * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Aug 14 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 0.2.1-1 - 0.2.1, modernize packaging. * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jun 9 2024 Python Maint <python-maint(a)redhat.com> - 0.2.0-13 - Rebuilt for Python 3.13 * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 28 2023 Python Maint <python-maint(a)redhat.com> - 0.2.0-9 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- ================================================================================ zabbix7.0-7.0.31-1.el10_2 (FEDORA-EPEL-2026-6aaa054bb4) Open-source monitoring solution for your IT infrastructure -------------------------------------------------------------------------------- Update Information: Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 5 2026 Orion Poplawski <orion(a)nwra.com> - 7.0.31-1 - Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2545893 - CVE-2026-59787 zabbix7.0: zabbix: Trap record injection via unsanitized delimiter in SNMP trap receiver [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545893 [ 2 ] Bug #2545903 - CVE-2026-59782 zabbix7.0: Zabbix: Information disclosure via the JavaScript preprocessing engine [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545903 [ 3 ] Bug #2545904 - CVE-2026-59783 zabbix7.0: Zabbix: Denial of service via null byte input in binary items [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545904 [ 4 ] Bug #2545905 - CVE-2026-59785 zabbix7.0: zabbix: Information disclosure via frontend host search filtering [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545905 [ 5 ] Bug #2545909 - CVE-2026-59786 zabbix7.0: zabbix: Host status spoofing via unauthenticated active agent heartbeats [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2545909 --------------------------------------------------------------------------------

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel October 2026