epel-devel September 2026

epel-devel@lists.fedoraproject.org

7 participants
153 discussions

Orphaning python-sphinxcontrib-apidoc
by Miro Hrončok 07 Oct '26

07 Oct '26

Hello, we have orphaned python-sphinxcontrib-apidoc in EPEL. The package does not install in epel9: https://bugzilla.redhat.com/2510867 If you wish to take it over, let me know. -- Miro Hrončok -- Phone: +420777974800

2 3

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-fa7b2ec3a3 wordpress-6.9.9-1.el10_2 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3f535077b3 aom-3.13.3-1.el10_2 libheif-1.23.5-4.el10_2 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d54ae88fef lemonldap-ng-2.23.4-1.el10_2 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-fa11901f44 openbao-2.6.3-2.el10_2 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-237c7e9b4d pgbouncer-1.26.0-1.el10_2 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0891129b6b vlc-3.0.24-1.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing 7zip-26.03-1.el10_2 Lmod-9.4.2-1.el10_2 openarc-1.3.2-1.el10_2 rust-rustls-pki-types-1.15.1-1.el10_2 rust-ruzstd-0.8.3-1.el10_2 rust-socket2-0.6.5-1.el10_2 rust-tower-0.5.3-1.el10_2 rust-tower-http-0.6.11-1.el10_2 rust-uuid-1.26.1-1.el10_2 rust-zerocopy-0.8.59-1.el10_2 rust-zerocopy-derive-0.8.59-1.el10_2 rust-zune-jpeg-0.5.15-1.el10_2 Details about builds: ================================================================================ 7zip-26.03-1.el10_2 (FEDORA-EPEL-2026-df468d5f67) A file archiver -------------------------------------------------------------------------------- Update Information: 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 -------------------------------------------------------------------------------- ================================================================================ Lmod-9.4.2-1.el10_2 (FEDORA-EPEL-2026-71829777d3) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Orion Poplawski <orion(a)nwra.com> - 9.4.2-1 - Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2511011 - Lmod upgrade to version 9.3 https://bugzilla.redhat.com/show_bug.cgi?id=2511011 -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.2-1.el10_2 (FEDORA-EPEL-2026-6292cc7106) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.2 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.2 Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.2-1 - Update to 1.3.2 (RHBZ#2542928) * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ rust-rustls-pki-types-1.15.1-1.el10_2 (FEDORA-EPEL-2026-c6ee7a0144) Shared types for the rustls PKI ecosystem -------------------------------------------------------------------------------- Update Information: Update to version 1.15.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.15.1-1 - Update to version 1.15.1 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-ruzstd-0.8.3-1.el10_2 (FEDORA-EPEL-2026-ce5648742d) Decoder for the zstd compression format -------------------------------------------------------------------------------- Update Information: Update to version 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.3-1 - Update to version 0.8.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-socket2-0.6.5-1.el10_2 (FEDORA-EPEL-2026-bac0cdc336) Utilities for handling networking sockets -------------------------------------------------------------------------------- Update Information: Update to version 0.6.5. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.5-1 - Update to version 0.6.5 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-0.5.3-1.el10_2 (FEDORA-EPEL-2026-f3bb64e776) Modular and reusable components for building robust clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.5.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.3-1 - Update to version 0.5.3; Fixes RHBZ#2428785 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-http-0.6.11-1.el10_2 (FEDORA-EPEL-2026-23b794c75e) Tower middleware and utilities for HTTP clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.6.11. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.11-1 - Update to version 0.6.11 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-uuid-1.26.1-1.el10_2 (FEDORA-EPEL-2026-96a3215e68) Library to generate and parse UUIDs -------------------------------------------------------------------------------- Update Information: Update to version 1.26.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.26.1-1 - Update to version 1.16.1; Fixes RHBZ#2531228 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-0.8.59-1.el10_2 (FEDORA-EPEL-2026-914458baed) Zerocopy makes zero-cost memory manipulation effortless -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539958 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-derive-0.8.59-1.el10_2 (FEDORA-EPEL-2026-914458baed) Custom derive for traits from the zerocopy crate -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539959 -------------------------------------------------------------------------------- ================================================================================ rust-zune-jpeg-0.5.15-1.el10_2 (FEDORA-EPEL-2026-9f2e520372) Fast, correct and safe jpeg decoder -------------------------------------------------------------------------------- Update Information: Update to version 0.5.15. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.15-1 - Update to version 0.5.15; Fixes RHBZ#2449984 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

The following Fedora EPEL 8 Security updates need testing: Age URL 314 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d6a23de049 lemonldap-ng-2.23.4-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5ad8f660b9 openbao-2.6.3-2.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing ImageMagick-6.9.13.57-1.el8 Lmod-9.4.2-2.el8 Details about builds: ================================================================================ ImageMagick-6.9.13.57-1.el8 (FEDORA-EPEL-2026-679efe2b31) An X application for displaying and manipulating images -------------------------------------------------------------------------------- Update Information: Automatic update for ImageMagick-6.9.13.57-1.el8. Changelog for ImageMagick * Tue Sep 29 2026 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.13.57-1 - Update to version 6.9.13.57 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.13.57-1 - Update to version 6.9.13.57 -------------------------------------------------------------------------------- ================================================================================ Lmod-9.4.2-2.el8 (FEDORA-EPEL-2026-c8f12d0f09) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Orion Poplawski <orion(a)nwra.com> - 9.4.2-1 - Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2511011 - Lmod upgrade to version 9.3 https://bugzilla.redhat.com/show_bug.cgi?id=2511011 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 96 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-14c20cf8b8 wordpress-7.1.2-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0d891ec3ad aom-3.13.3-1.el10_3 libheif-1.23.5-4.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1b43c541cb lemonldap-ng-2.23.4-1.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-107b1939e2 prometheus-3.15.0-1.el10_3 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8ce56f7e4a vlc-3.0.24-1.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing 7zip-26.03-1.el10_3 Lmod-9.4.2-1.el10_3 bsh-2.1.0-19.el10_3 openarc-1.3.2-1.el10_3 python-anytree-2.13.0-1.el10_3 rocm-examples-7.2.0-3.el10_3 rust-rustls-pki-types-1.15.1-1.el10_3 rust-ruzstd-0.8.3-1.el10_3 rust-socket2-0.6.5-1.el10_3 rust-tower-0.5.3-1.el10_3 rust-tower-http-0.6.11-1.el10_3 rust-uuid-1.26.1-1.el10_3 rust-zerocopy-0.8.59-1.el10_3 rust-zerocopy-derive-0.8.59-1.el10_3 rust-zune-jpeg-0.5.15-1.el10_3 Details about builds: ================================================================================ 7zip-26.03-1.el10_3 (FEDORA-EPEL-2026-e754615b89) A file archiver -------------------------------------------------------------------------------- Update Information: 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 -------------------------------------------------------------------------------- ================================================================================ Lmod-9.4.2-1.el10_3 (FEDORA-EPEL-2026-0c7da253d0) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Orion Poplawski <orion(a)nwra.com> - 9.4.2-1 - Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2511011 - Lmod upgrade to version 9.3 https://bugzilla.redhat.com/show_bug.cgi?id=2511011 -------------------------------------------------------------------------------- ================================================================================ bsh-2.1.0-19.el10_3 (FEDORA-EPEL-2026-c0693a3ff5) Lightweight Scripting for Java -------------------------------------------------------------------------------- Update Information: epel10 -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Mon Jul 28 2025 jiri vanek <jvanek(a)redhat.com> - 0:2.1.0-17 - Rebuilt for java-25-openjdk as preffered jdk * Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Thu Jan 16 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Wed May 22 2024 Marian Koncek <mkoncek(a)redhat.com> - 0:2.1.0-13 - Fix license field * Tue Feb 27 2024 Jiri Vanek <jvanek(a)redhat.com> - 0:2.1.0-12 - Rebuilt for java-21-openjdk as system jdk * Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0:2.1.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2499650 - Please branch and build bsh in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2499650 -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.2-1.el10_3 (FEDORA-EPEL-2026-e1eee23ce4) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.2 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.2 Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.2-1 - Update to 1.3.2 (RHBZ#2542928) * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ python-anytree-2.13.0-1.el10_3 (FEDORA-EPEL-2026-344891cc98) Powerful and Lightweight Python Tree Data Structure -------------------------------------------------------------------------------- Update Information: Bump to 2.13.0, use new Python macros (rhbz#2377452) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2026 Federico Pellegrin <fede(a)evolware.org> - 2.13.0-1 - Bump to 2.13.0, use new Python macros (rhbz#2377452) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 2.8.0-25 - Rebuilt for Python 3.15 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Sep 19 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-23 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-22 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jun 2 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-20 - Rebuilt for Python 3.14 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2490993 - Please branch and build python-anytree in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2490993 -------------------------------------------------------------------------------- ================================================================================ rocm-examples-7.2.0-3.el10_3 (FEDORA-EPEL-2026-ec97c2eb12) A collection of examples for the ROCm software stack -------------------------------------------------------------------------------- Update Information: Increase gpus -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 15 2026 Tom Rix <Tom.Rix(a)amd.com> - 7.2.0-3 - Increase gpus -------------------------------------------------------------------------------- ================================================================================ rust-rustls-pki-types-1.15.1-1.el10_3 (FEDORA-EPEL-2026-057e38d4af) Shared types for the rustls PKI ecosystem -------------------------------------------------------------------------------- Update Information: Update to version 1.15.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.15.1-1 - Update to version 1.15.1 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-ruzstd-0.8.3-1.el10_3 (FEDORA-EPEL-2026-63ac63eccf) Decoder for the zstd compression format -------------------------------------------------------------------------------- Update Information: Update to version 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.3-1 - Update to version 0.8.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-socket2-0.6.5-1.el10_3 (FEDORA-EPEL-2026-60ef06d8f6) Utilities for handling networking sockets -------------------------------------------------------------------------------- Update Information: Update to version 0.6.5. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.5-1 - Update to version 0.6.5 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-0.5.3-1.el10_3 (FEDORA-EPEL-2026-1a7b277bdc) Modular and reusable components for building robust clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.5.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.3-1 - Update to version 0.5.3; Fixes RHBZ#2428785 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-http-0.6.11-1.el10_3 (FEDORA-EPEL-2026-9ca4c34a2f) Tower middleware and utilities for HTTP clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.6.11. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.11-1 - Update to version 0.6.11 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-uuid-1.26.1-1.el10_3 (FEDORA-EPEL-2026-ed15e4fdee) Library to generate and parse UUIDs -------------------------------------------------------------------------------- Update Information: Update to version 1.26.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.26.1-1 - Update to version 1.16.1; Fixes RHBZ#2531228 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-0.8.59-1.el10_3 (FEDORA-EPEL-2026-47aa170acd) Zerocopy makes zero-cost memory manipulation effortless -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539958 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-derive-0.8.59-1.el10_3 (FEDORA-EPEL-2026-47aa170acd) Custom derive for traits from the zerocopy crate -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539959 -------------------------------------------------------------------------------- ================================================================================ rust-zune-jpeg-0.5.15-1.el10_3 (FEDORA-EPEL-2026-429bece43c) Fast, correct and safe jpeg decoder -------------------------------------------------------------------------------- Update Information: Update to version 0.5.15. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.15-1 - Update to version 0.5.15; Fixes RHBZ#2449984 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

The following Fedora EPEL 9 Security updates need testing: Age URL 314 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 96 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-12b7f6fc6c aom-3.13.3-1.el9 libheif-1.23.5-2.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c032162b28 wordpress-6.9.9-1.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1d4952c503 slurm-22.05.11-2.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-306ffcea82 lemonldap-ng-2.23.4-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1c3b7b89de prometheus-3.15.0-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-62de33e876 pgbouncer-1.26.0-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e47857b934 python-engineio-4.12.3-2.el9 python-simple-websocket-1.0.0-8.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing 7zip-26.03-1.el9 ImageMagick-6.9.13.57-1.el9 Lmod-9.4.2-1.el9 ntfs-3g-2022.10.3-13.el9 ntfs-3g-system-compression-1.1-2.el9 openarc-1.3.2-1.el9 partclone-0.3.50-2.el9 rust-lru-0.18.5-1.el9 rust-rustls-pki-types-1.15.1-1.el9 rust-ruzstd-0.8.3-1.el9 rust-socket2-0.6.5-1.el9 rust-tower-0.5.3-1.el9 rust-tower-http-0.6.11-1.el9 rust-uuid-1.26.1-1.el9 rust-zerocopy-0.8.59-1.el9 rust-zerocopy-derive-0.8.59-1.el9 rust-zune-jpeg-0.5.15-1.el9 testdisk-7.2-2.el9 Details about builds: ================================================================================ 7zip-26.03-1.el9 (FEDORA-EPEL-2026-940a22a7bf) A file archiver -------------------------------------------------------------------------------- Update Information: 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 -------------------------------------------------------------------------------- ================================================================================ ImageMagick-6.9.13.57-1.el9 (FEDORA-EPEL-2026-d014fdaf61) An X application for displaying and manipulating images -------------------------------------------------------------------------------- Update Information: Automatic update for ImageMagick-6.9.13.57-1.el9. Changelog for ImageMagick * Tue Sep 29 2026 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.13.57-1 - Update to version 6.9.13.57 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.13.57-1 - Update to version 6.9.13.57 -------------------------------------------------------------------------------- ================================================================================ Lmod-9.4.2-1.el9 (FEDORA-EPEL-2026-ee052742f4) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Orion Poplawski <orion(a)nwra.com> - 9.4.2-1 - Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2511011 - Lmod upgrade to version 9.3 https://bugzilla.redhat.com/show_bug.cgi?id=2511011 -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-2022.10.3-13.el9 (FEDORA-EPEL-2026-1843885c69) Linux NTFS userspace driver -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2022.10.3-13 - merge upstream fix for behavior regression causes by other security fixes (from 2026.9.28) * Fri Sep 25 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2022.10.3-12 - apply upstream patches for: NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 * Thu Sep 24 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2022.10.3-11 - apply upstream patches for: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-system-compression-1.1-2.el9 (FEDORA-EPEL-2026-1843885c69) NTFS-3G plugin for reading "system compressed" files -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 1.1-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.2-1.el9 (FEDORA-EPEL-2026-b6b59718c4) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.2 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.2 Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.2-1 - Update to 1.3.2 (RHBZ#2542928) * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ partclone-0.3.50-2.el9 (FEDORA-EPEL-2026-1843885c69) Utility to clone and restore a partition -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 0.3.50-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ rust-lru-0.18.5-1.el9 (FEDORA-EPEL-2026-5f11ed6518) LRU cache implementation -------------------------------------------------------------------------------- Update Information: rust-lru 0.18.5 Specify desired hashbrown features to reduce dependencies. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 0.18.5-1 - Update to version 0.18.5; Resolves RHBZ#2539091 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539091 - rust-lru-0.18.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2539091 -------------------------------------------------------------------------------- ================================================================================ rust-rustls-pki-types-1.15.1-1.el9 (FEDORA-EPEL-2026-3dd823b101) Shared types for the rustls PKI ecosystem -------------------------------------------------------------------------------- Update Information: Update to version 1.15.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.15.1-1 - Update to version 1.15.1 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-ruzstd-0.8.3-1.el9 (FEDORA-EPEL-2026-3ba705f2c8) Decoder for the zstd compression format -------------------------------------------------------------------------------- Update Information: Update to version 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.3-1 - Update to version 0.8.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-socket2-0.6.5-1.el9 (FEDORA-EPEL-2026-115b13aa26) Utilities for handling networking sockets -------------------------------------------------------------------------------- Update Information: Update to version 0.6.5. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.5-1 - Update to version 0.6.5 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-0.5.3-1.el9 (FEDORA-EPEL-2026-7d0448a726) Modular and reusable components for building robust clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.5.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.3-1 - Update to version 0.5.3; Fixes RHBZ#2428785 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-http-0.6.11-1.el9 (FEDORA-EPEL-2026-0ab98a00ed) Tower middleware and utilities for HTTP clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.6.11. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.11-1 - Update to version 0.6.11 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-uuid-1.26.1-1.el9 (FEDORA-EPEL-2026-e1f98966a4) Library to generate and parse UUIDs -------------------------------------------------------------------------------- Update Information: Update to version 1.26.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.26.1-1 - Update to version 1.16.1; Fixes RHBZ#2531228 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-0.8.59-1.el9 (FEDORA-EPEL-2026-09de20ffb8) Zerocopy makes zero-cost memory manipulation effortless -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539958 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-derive-0.8.59-1.el9 (FEDORA-EPEL-2026-09de20ffb8) Custom derive for traits from the zerocopy crate -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539959 -------------------------------------------------------------------------------- ================================================================================ rust-zune-jpeg-0.5.15-1.el9 (FEDORA-EPEL-2026-9cedcdd568) Fast, correct and safe jpeg decoder -------------------------------------------------------------------------------- Update Information: Update to version 0.5.15. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.15-1 - Update to version 0.5.15; Fixes RHBZ#2449984 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ testdisk-7.2-2.el9 (FEDORA-EPEL-2026-1843885c69) Tool to check and undelete partition, PhotoRec recovers lost files -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 7.2-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.4 updates-testing report
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

The following Fedora EPEL 10.4 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1c88fd080f apptainer-1.5.4-1.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-18d39b7b8d aom-3.13.3-1.el10_4 libheif-1.23.5-4.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9a22fff830 wordpress-7.1.2-1.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c06694481d vlc-3.0.24-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3ddfd6e04f lemonldap-ng-2.23.4-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-de6f0d9586 prometheus-3.15.0-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8f4089cccc python-uv-build-0.12.19-1.el10_4 ruff-0.16.9-1.el10_4 rust-libcst-1.9.0-1.el10_4 rust-libcst_derive-1.9.0-1.el10_4 rust-salsa-0.28.5-1.el10_4 rust-salsa-macro-rules-0.28.5-1.el10_4 rust-salsa-macros-0.28.5-1.el10_4 uv-0.12.19-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-39a80c0763 pgbouncer-1.26.0-1.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d688c1b291 djvulibre-3.5.29-1.el10_4 The following builds have been pushed to Fedora EPEL 10.4 updates-testing 7zip-26.03-1.el10_4 Lmod-9.4.2-1.el10_4 jline2-2.14.6-18.el10_4 mediawriter-5.3.2-2.el10_4 ntfs-3g-2026.9.28-1.el10_4 ntfs-3g-system-compression-1.1-2.el10_4 openarc-1.3.2-1.el10_4 partclone-0.3.50-2.el10_4 python-anytree-2.13.0-1.el10_4 rust-lru-0.18.5-1.el10_4 rust-rustls-pki-types-1.15.1-1.el10_4 rust-ruzstd-0.8.3-1.el10_4 rust-socket2-0.6.5-1.el10_4 rust-tower-0.5.3-1.el10_4 rust-tower-http-0.6.11-1.el10_4 rust-uuid-1.26.1-1.el10_4 rust-zerocopy-0.8.59-1.el10_4 rust-zerocopy-derive-0.8.59-1.el10_4 rust-zune-jpeg-0.5.15-1.el10_4 testdisk-7.2-2.el10_4 tmux-top-1.0.2-2.el10_4 xdotool-4.20260303.1-1.el10_4 Details about builds: ================================================================================ 7zip-26.03-1.el10_4 (FEDORA-EPEL-2026-0e6b871bb0) A file archiver -------------------------------------------------------------------------------- Update Information: 7-Zip 26.03 Improved support for Joliet ISO images and Compound archives. Some bugs and vulnerabilities were fixed. Irrelevant to us, listing for completeness as it affects only decompressing RAR archives (which we disable) on Windows (which we're not) CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive. https://github.com/ip7z/7zip/releases/tag/26.03 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 26.03-1 - Update to version 26.03; Resolves: rhbz#2528433 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 26.02-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528433 - 7zip-26.03 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528433 -------------------------------------------------------------------------------- ================================================================================ Lmod-9.4.2-1.el10_4 (FEDORA-EPEL-2026-fa23a27cab) Environmental Modules System in Lua -------------------------------------------------------------------------------- Update Information: Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Orion Poplawski <orion(a)nwra.com> - 9.4.2-1 - Update to 9.4.2 (CVE-2026-85013) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2511011 - Lmod upgrade to version 9.3 https://bugzilla.redhat.com/show_bug.cgi?id=2511011 -------------------------------------------------------------------------------- ================================================================================ jline2-2.14.6-18.el10_4 (FEDORA-EPEL-2026-f26c682ce8) Java library for handling console input -------------------------------------------------------------------------------- Update Information: epel10 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.6-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.6-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Tue Jul 29 2025 jiri vanek <jvanek(a)redhat.com> - 2.14.6-16 - Rebuilt for java-25-openjdk as preffered jdk * Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.6-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jan 17 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.6-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.6-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529774 - Please branch and build jline2 in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2529774 -------------------------------------------------------------------------------- ================================================================================ mediawriter-5.3.2-2.el10_4 (FEDORA-EPEL-2026-cfe11b2406) Fedora Media Writer -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Jul 13 2026 Packit <hello(a)packit.dev> - 5.3.2-1 - Update to version 5.3.2 - Resolves: rhbz#2499674 * Fri Apr 10 2026 Packit <hello(a)packit.dev> - 5.3.1-1 - Update to version 5.3.1 - Resolves: rhbz#2457245 * Thu Apr 2 2026 Jan Grulich <jgrulich(a)redhat.com> - 5.3.0-1 - Update to version 5.3.0 * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Oct 29 2025 Packit <hello(a)packit.dev> - 5.2.9-1 - Update to version 5.2.9 * Wed Oct 29 2025 Packit <hello(a)packit.dev> - 5.2.8-1 - Update to version 5.2.8 * Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Wed Jul 23 2025 Packit <hello(a)packit.dev> - 5.2.8-1 - Update to version 5.2.8 * Mon Jun 23 2025 Packit <hello(a)packit.dev> - 5.2.6-1 - Update to version 5.2.6 * Thu Apr 24 2025 Packit <hello(a)packit.dev> - 5.2.5-1 - Update to version 5.2.5 * Tue Apr 15 2025 Packit <hello(a)packit.dev> - 5.2.4-1 - Update to version 5.2.4 * Fri Jan 17 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Jan 6 2025 Jan Grulich <jgrulich(a)redhat.com> - 5.2.3-1 - 5.2.3 * Mon Nov 25 2024 Jan Grulich <grulja(a)gmail.com> - 5.2.1-1 - 5.2.1 * Fri Nov 22 2024 Jan Grulich <jgrulich(a)redhat.com> - 5.2.0-1 - 5.2.0 * Mon Nov 11 2024 Jan Grulich <jgrulich(a)redhat.com> - 5.1.90-2 - Fix overfloating heading for longer texts Resolves: bz#2324977 * Wed Oct 30 2024 Jan Grulich <jgrulich(a)redhat.com> - 5.1.90-1 - 5.1.90 * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-2026.9.28-1.el10_4 (FEDORA-EPEL-2026-6769292d4a) Linux NTFS userspace driver -------------------------------------------------------------------------------- Update Information: Update to 2026.9.28. ntfs-3g changes: Fix regression caused by overly strict return value check after MST fixups which was introduced in a security hardening commit (issues #217 and #218). Fix option parsing issues in ntfslabel preventing setting labels beginning with '-' (issue #177). Fix various low-impact instances of use-after-free and improper realloc usage (issue #153). Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. (ntfscat) Fix missing cleanup of opened attribute on error (issue #212). Fix heap out of bounds read/write in ntfs_ie_add_vcn(). (GHSA-r6xj-6488-p8mv, CVE pending) Fix heap data corruption in ntfs_mapping_pairs_decompress_i(). (GHSA- mc3c-983p-wqm8, CVE pending) Fix heap buffer overflow in ntfs_external_attr_find(). (GHSA-wf3w-fjjg-x4w3, CVE pending) Fix heap buffer overflow in ntfs_ea_check_wsldev(). (GHSA-2c97-47cr-9xr8, CVE pending) Fix heap buffer overflow in ntfs_check_restart_area(). (GHSA-xrvx-6jrp-4q3x, CVE pending) Fix denial-of-service in ntfs_inode_attach_all_extents(). (GHSA-jcjj-9262-6j6p, CVE pending) Fix heap buffer overflow in ntfs_same_sid(). (GHSA-x98j-3g35-f59x, CVE pending) Fix heap buffer overflow in ntfs_acl_owner(). (GHSA-pc48-m7cx-qf72, CVE pending) (ntfsresize) Fix stale $MFTMirr data when the first extent of $MFT is relocated (issue #209). Update to 2026.7.7 to fix: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2026.9.28-1 - update to 2026.9.28 * Thu Sep 24 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2026.9.18-1 - update to 2026.9.18 * Thu Aug 27 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2026.7.7-2 - rebuild for side tag * Thu Aug 27 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2026.7.7-1 - update to 2026.7.7 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:2026.2.25-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2506707 - ntfs-3g: multiple memory safety vulnerabilities in EPEL 10 package https://bugzilla.redhat.com/show_bug.cgi?id=2506707 [ 2 ] Bug #2523139 - CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523139 [ 3 ] Bug #2523142 - CVE-2026-56136 ntfs-3g: NTFS-3G: Information disclosure due to out-of-bounds read [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523142 -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-system-compression-1.1-2.el10_4 (FEDORA-EPEL-2026-6769292d4a) NTFS-3G plugin for reading "system compressed" files -------------------------------------------------------------------------------- Update Information: Update to 2026.9.28. ntfs-3g changes: Fix regression caused by overly strict return value check after MST fixups which was introduced in a security hardening commit (issues #217 and #218). Fix option parsing issues in ntfslabel preventing setting labels beginning with '-' (issue #177). Fix various low-impact instances of use-after-free and improper realloc usage (issue #153). Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. (ntfscat) Fix missing cleanup of opened attribute on error (issue #212). Fix heap out of bounds read/write in ntfs_ie_add_vcn(). (GHSA-r6xj-6488-p8mv, CVE pending) Fix heap data corruption in ntfs_mapping_pairs_decompress_i(). (GHSA- mc3c-983p-wqm8, CVE pending) Fix heap buffer overflow in ntfs_external_attr_find(). (GHSA-wf3w-fjjg-x4w3, CVE pending) Fix heap buffer overflow in ntfs_ea_check_wsldev(). (GHSA-2c97-47cr-9xr8, CVE pending) Fix heap buffer overflow in ntfs_check_restart_area(). (GHSA-xrvx-6jrp-4q3x, CVE pending) Fix denial-of-service in ntfs_inode_attach_all_extents(). (GHSA-jcjj-9262-6j6p, CVE pending) Fix heap buffer overflow in ntfs_same_sid(). (GHSA-x98j-3g35-f59x, CVE pending) Fix heap buffer overflow in ntfs_acl_owner(). (GHSA-pc48-m7cx-qf72, CVE pending) (ntfsresize) Fix stale $MFTMirr data when the first extent of $MFT is relocated (issue #209). Update to 2026.7.7 to fix: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 1.1-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2506707 - ntfs-3g: multiple memory safety vulnerabilities in EPEL 10 package https://bugzilla.redhat.com/show_bug.cgi?id=2506707 [ 2 ] Bug #2523139 - CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523139 [ 3 ] Bug #2523142 - CVE-2026-56136 ntfs-3g: NTFS-3G: Information disclosure due to out-of-bounds read [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523142 -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.2-1.el10_4 (FEDORA-EPEL-2026-cda52b07de) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.2 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.2 Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.2-1 - Update to 1.3.2 (RHBZ#2542928) * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ partclone-0.3.50-2.el10_4 (FEDORA-EPEL-2026-6769292d4a) Utility to clone and restore a partition -------------------------------------------------------------------------------- Update Information: Update to 2026.9.28. ntfs-3g changes: Fix regression caused by overly strict return value check after MST fixups which was introduced in a security hardening commit (issues #217 and #218). Fix option parsing issues in ntfslabel preventing setting labels beginning with '-' (issue #177). Fix various low-impact instances of use-after-free and improper realloc usage (issue #153). Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. (ntfscat) Fix missing cleanup of opened attribute on error (issue #212). Fix heap out of bounds read/write in ntfs_ie_add_vcn(). (GHSA-r6xj-6488-p8mv, CVE pending) Fix heap data corruption in ntfs_mapping_pairs_decompress_i(). (GHSA- mc3c-983p-wqm8, CVE pending) Fix heap buffer overflow in ntfs_external_attr_find(). (GHSA-wf3w-fjjg-x4w3, CVE pending) Fix heap buffer overflow in ntfs_ea_check_wsldev(). (GHSA-2c97-47cr-9xr8, CVE pending) Fix heap buffer overflow in ntfs_check_restart_area(). (GHSA-xrvx-6jrp-4q3x, CVE pending) Fix denial-of-service in ntfs_inode_attach_all_extents(). (GHSA-jcjj-9262-6j6p, CVE pending) Fix heap buffer overflow in ntfs_same_sid(). (GHSA-x98j-3g35-f59x, CVE pending) Fix heap buffer overflow in ntfs_acl_owner(). (GHSA-pc48-m7cx-qf72, CVE pending) (ntfsresize) Fix stale $MFTMirr data when the first extent of $MFT is relocated (issue #209). Update to 2026.7.7 to fix: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 0.3.50-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2506707 - ntfs-3g: multiple memory safety vulnerabilities in EPEL 10 package https://bugzilla.redhat.com/show_bug.cgi?id=2506707 [ 2 ] Bug #2523139 - CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523139 [ 3 ] Bug #2523142 - CVE-2026-56136 ntfs-3g: NTFS-3G: Information disclosure due to out-of-bounds read [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523142 -------------------------------------------------------------------------------- ================================================================================ python-anytree-2.13.0-1.el10_4 (FEDORA-EPEL-2026-10dab4b761) Powerful and Lightweight Python Tree Data Structure -------------------------------------------------------------------------------- Update Information: Bump to 2.13.0, use new Python macros (rhbz#2377452) -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 30 2026 Federico Pellegrin <fede(a)evolware.org> - 2.13.0-1 - Bump to 2.13.0, use new Python macros (rhbz#2377452) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 2.8.0-25 - Rebuilt for Python 3.15 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Sep 19 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-23 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-22 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jun 2 2025 Python Maint <python-maint(a)redhat.com> - 2.8.0-20 - Rebuilt for Python 3.14 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.0-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2490993 - Please branch and build python-anytree in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2490993 -------------------------------------------------------------------------------- ================================================================================ rust-lru-0.18.5-1.el10_4 (FEDORA-EPEL-2026-7418939f10) LRU cache implementation -------------------------------------------------------------------------------- Update Information: rust-lru 0.18.5 Specify desired hashbrown features to reduce dependencies. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Michel Lind <salimma(a)fedoraproject.org> - 0.18.5-1 - Update to version 0.18.5; Resolves RHBZ#2539091 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539091 - rust-lru-0.18.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2539091 -------------------------------------------------------------------------------- ================================================================================ rust-rustls-pki-types-1.15.1-1.el10_4 (FEDORA-EPEL-2026-a9091be6ef) Shared types for the rustls PKI ecosystem -------------------------------------------------------------------------------- Update Information: Update to version 1.15.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.15.1-1 - Update to version 1.15.1 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-ruzstd-0.8.3-1.el10_4 (FEDORA-EPEL-2026-2d5e612380) Decoder for the zstd compression format -------------------------------------------------------------------------------- Update Information: Update to version 0.8.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.3-1 - Update to version 0.8.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-socket2-0.6.5-1.el10_4 (FEDORA-EPEL-2026-f058ac2294) Utilities for handling networking sockets -------------------------------------------------------------------------------- Update Information: Update to version 0.6.5. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.5-1 - Update to version 0.6.5 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-0.5.3-1.el10_4 (FEDORA-EPEL-2026-25d9b4598c) Modular and reusable components for building robust clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.5.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.3-1 - Update to version 0.5.3; Fixes RHBZ#2428785 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tower-http-0.6.11-1.el10_4 (FEDORA-EPEL-2026-b2ba2cfe4c) Tower middleware and utilities for HTTP clients and servers -------------------------------------------------------------------------------- Update Information: Update to version 0.6.11. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.11-1 - Update to version 0.6.11 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-uuid-1.26.1-1.el10_4 (FEDORA-EPEL-2026-89adea4724) Library to generate and parse UUIDs -------------------------------------------------------------------------------- Update Information: Update to version 1.26.1. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.26.1-1 - Update to version 1.16.1; Fixes RHBZ#2531228 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-0.8.59-1.el10_4 (FEDORA-EPEL-2026-6145db5477) Zerocopy makes zero-cost memory manipulation effortless -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539958 -------------------------------------------------------------------------------- ================================================================================ rust-zerocopy-derive-0.8.59-1.el10_4 (FEDORA-EPEL-2026-6145db5477) Custom derive for traits from the zerocopy crate -------------------------------------------------------------------------------- Update Information: Update the zerocopy and zerocopy-derive crates to version 0.8.59. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.59-1 - Update to version 0.8.59; Fixes RHBZ#2539959 -------------------------------------------------------------------------------- ================================================================================ rust-zune-jpeg-0.5.15-1.el10_4 (FEDORA-EPEL-2026-a7bc3e79fc) Fast, correct and safe jpeg decoder -------------------------------------------------------------------------------- Update Information: Update to version 0.5.15. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 29 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.15-1 - Update to version 0.5.15; Fixes RHBZ#2449984 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ testdisk-7.2-2.el10_4 (FEDORA-EPEL-2026-6769292d4a) Tool to check and undelete partition, PhotoRec recovers lost files -------------------------------------------------------------------------------- Update Information: Update to 2026.9.28. ntfs-3g changes: Fix regression caused by overly strict return value check after MST fixups which was introduced in a security hardening commit (issues #217 and #218). Fix option parsing issues in ntfslabel preventing setting labels beginning with '-' (issue #177). Fix various low-impact instances of use-after-free and improper realloc usage (issue #153). Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. (ntfscat) Fix missing cleanup of opened attribute on error (issue #212). Fix heap out of bounds read/write in ntfs_ie_add_vcn(). (GHSA-r6xj-6488-p8mv, CVE pending) Fix heap data corruption in ntfs_mapping_pairs_decompress_i(). (GHSA- mc3c-983p-wqm8, CVE pending) Fix heap buffer overflow in ntfs_external_attr_find(). (GHSA-wf3w-fjjg-x4w3, CVE pending) Fix heap buffer overflow in ntfs_ea_check_wsldev(). (GHSA-2c97-47cr-9xr8, CVE pending) Fix heap buffer overflow in ntfs_check_restart_area(). (GHSA-xrvx-6jrp-4q3x, CVE pending) Fix denial-of-service in ntfs_inode_attach_all_extents(). (GHSA-jcjj-9262-6j6p, CVE pending) Fix heap buffer overflow in ntfs_same_sid(). (GHSA-x98j-3g35-f59x, CVE pending) Fix heap buffer overflow in ntfs_acl_owner(). (GHSA-pc48-m7cx-qf72, CVE pending) (ntfsresize) Fix stale $MFTMirr data when the first extent of $MFT is relocated (issue #209). Update to 2026.7.7 to fix: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> 7.2-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2506707 - ntfs-3g: multiple memory safety vulnerabilities in EPEL 10 package https://bugzilla.redhat.com/show_bug.cgi?id=2506707 [ 2 ] Bug #2523139 - CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523139 [ 3 ] Bug #2523142 - CVE-2026-56136 ntfs-3g: NTFS-3G: Information disclosure due to out-of-bounds read [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2523142 -------------------------------------------------------------------------------- ================================================================================ tmux-top-1.0.2-2.el10_4 (FEDORA-EPEL-2026-2c5d4acd19) Monitoring information for your tmux status line -------------------------------------------------------------------------------- Update Information: Add tmux-top to EPEL 10 -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Tue Feb 17 2026 Tomas Tomecek <ttomecek(a)redhat.com> - 1.0.2-1 - update to 1.0.2 * Wed Feb 4 2026 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.0.0-1 - Adopt Go Vendor Tools * Tue Feb 3 2026 Maxwell G <maxwell(a)gtmx.me> - 0.1.1-16 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sáez <asm(a)redhat.com> - 0.1.1-14 - rebuild * Fri Aug 15 2025 Maxwell G <maxwell(a)gtmx.me> - 0.1.1-13 - Rebuild for golang-1.25.0 * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 0.1.1-10 - convert license to SPDX * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xdotool-4.20260303.1-1.el10_4 (FEDORA-EPEL-2026-2f3ba510bb) Fake keyboard/mouse input -------------------------------------------------------------------------------- Update Information: Initial build for EPEL10 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 30 2026 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1:4.20260303.1-1 - Update to v4.20260303.1 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.20211022.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.20211022.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.20211022.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.20211022.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Sep 4 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1:3.20211022.1-7 - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2416651 - Please branch xdotool for EPEL10 https://bugzilla.redhat.com/show_bug.cgi?id=2416651 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 29 Sep '26

29 Sep '26

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2026-09-30 from 18:00:00 to 19:00:00 UTC At meeting-1(a)chat.fedoraproject.org The meeting will be about: https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha #topic EPEL Issues https://pagure.io/epel/issues * https://pagure.io/epel/issues?tags=meeting&status=Open #topic Old Business (if needed) #topic General Issues / Open Floor Source: https://calendar.fedoraproject.org//meeting/11230/

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 28 Sep '26

28 Sep '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 95 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-632de6378f apptainer-1.5.4-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-14c20cf8b8 wordpress-7.1.2-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0d891ec3ad aom-3.13.3-1.el10_3 libheif-1.23.5-4.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1b43c541cb lemonldap-ng-2.23.4-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-107b1939e2 prometheus-3.15.0-1.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing openarc-1.3.1-1.el10_3 perl-Class-DBI-3.0.17-54.el10_3 python-configargparse-1.8.0-1.el10_3 python-dunamai-1.26.2-3.el10_3 python-mackup-0.11.2-1.el10_3 rust-ct-codecs-1.1.8-1.el10_3 rust-data-encoding-2.11.1-1.el10_3 rust-data-encoding-macro-0.1.21-1.el10_3 rust-data-encoding-macro-internal-0.1.19-1.el10_3 rust-hyper-rustls-0.27.10-1.el10_3 rust-kstring-2.0.5-1.el10_3 rust-rand-0.10.3-1.el10_3 rust-rand0.8-0.8.8-1.el10_3 rust-smallvec-1.16.2-1.el10_3 rust-syn-3.0.6-1.el10_3 rust-thiserror-2.0.21-1.el10_3 rust-thiserror-impl-2.0.21-1.el10_3 rust-tokio-rustls-0.26.6-1.el10_3 vlc-3.0.24-1.el10_3 zig-0.16.0-7.el10_3 zxcvbn-c-2.6-3.el10_3 Details about builds: ================================================================================ openarc-1.3.1-1.el10_3 (FEDORA-EPEL-2026-0986fae8a0) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ perl-Class-DBI-3.0.17-54.el10_3 (FEDORA-EPEL-2026-7213488cfc) Simple Database Abstraction -------------------------------------------------------------------------------- Update Information: First EPEL10 build. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.17-54 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.17-53 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.17-52 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jan 17 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.17-51 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Aug 5 2024 Miroslav Suchý <msuchy(a)redhat.com> - 3.0.17-50 - convert license to SPDX * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.17-49 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2444081 - Please branch and build perl-Class-DBI for EPEL-10 https://bugzilla.redhat.com/show_bug.cgi?id=2444081 -------------------------------------------------------------------------------- ================================================================================ python-configargparse-1.8.0-1.el10_3 (FEDORA-EPEL-2026-bc36921711) Replacement for argparse that allows options to be set via config files -------------------------------------------------------------------------------- Update Information: Update to 1.8.0: values for mutually exclusive options now follow the usual override order. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.8.0-1 - Update to 1.8.0 (close RHBZ#2542557) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2542557 - python-configargparse-1.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2542557 -------------------------------------------------------------------------------- ================================================================================ python-dunamai-1.26.2-3.el10_3 (FEDORA-EPEL-2026-2e4b400e82) Dynamic version generation -------------------------------------------------------------------------------- Update Information: Initial package for EPEL10.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-3 - Add build conditionals for integration tests for particular VCSes * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-2 - Assert that the .dist-info directory contains a license file * Sun Aug 2 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-1 - Update to 1.26.2 upstream release - Resolves: rhbz#2510107 * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-8 - simplify .gitignore file * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-7 - commit sources from github * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-6 - get sources from github * Fri Jul 24 2026 Filipe Rosset <filiperosset(a)fedoraproject.org> - 1.26.1-5 - added patch to fix build against fossil-2.28 * Fri Jul 24 2026 Filipe Rosset <filiperosset(a)fedoraproject.org> - 1.26.1-4 - spec cleanup and modernization, use pypi sources * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.26.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Thu Jun 4 2026 Python Maint <python-maint(a)redhat.com> - 1.26.1-2 - Rebuilt for Python 3.15 * Sat Apr 4 2026 Packit <hello(a)packit.dev> - 1.26.1-1 - Update to 1.26.1 upstream release - Resolves: rhbz#2455088 * Sun Feb 15 2026 Packit <hello(a)packit.dev> - 1.26.0-1 - Update to 1.26.0 upstream release - Resolves: rhbz#2440008 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Tue Nov 4 2025 Miro Hrončok <miro(a)hroncok.cz> - 1.25.0-5 - Enable breezy tests (breezy has been fixed) * Fri Sep 19 2025 Python Maint <python-maint(a)redhat.com> - 1.25.0-4 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint <python-maint(a)redhat.com> - 1.25.0-3 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jul 4 2025 Packit <hello(a)packit.dev> - 1.25.0-1 - Update to 1.25.0 upstream release - Resolves: rhbz#2376448 * Thu Jun 19 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.24.1-3 - Disable breezy/bazaar integration tests for now (close RHBZ#2371874) * Tue Jun 3 2025 Python Maint <python-maint(a)redhat.com> - 1.24.1-2 - Rebuilt for Python 3.14 * Fri May 9 2025 Packit <hello(a)packit.dev> - 1.24.1-1 - Update to 1.24.1 upstream release - Resolves: rhbz#2365333 * Thu May 8 2025 Packit <hello(a)packit.dev> - 1.24.0-1 - Update to 1.24.0 upstream release - Resolves: rhbz#2364439 * Fri Mar 21 2025 Packit <hello(a)packit.dev> - 1.23.1-1 - Update to 1.23.1 upstream release - Resolves: rhbz#2353990 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.23.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Nov 18 2024 Packit <hello(a)packit.dev> - 1.23.0-1 - Update to 1.23.0 upstream release - Resolves: rhbz#2326880 -------------------------------------------------------------------------------- ================================================================================ python-mackup-0.11.2-1.el10_3 (FEDORA-EPEL-2026-257ec2cff4) Keep your application settings in sync -------------------------------------------------------------------------------- Update Information: Update mackup to 0.11.2 Add Topgrade support -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Packit <hello(a)packit.dev> - 0.11.2-1 - Update to 0.11.2 upstream release - Resolves: rhbz#2530692 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Jun 15 2026 Packit <hello(a)packit.dev> - 0.11.1-1 - Update to 0.11.1 upstream release - Resolves: rhbz#2488761 * Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 0.10.3-2 - Rebuilt for Python 3.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530692 - python-mackup-0.11.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2530692 -------------------------------------------------------------------------------- ================================================================================ rust-ct-codecs-1.1.8-1.el10_3 (FEDORA-EPEL-2026-ee5a05e93d) Constant-time base64, base32, and hex codecs -------------------------------------------------------------------------------- Update Information: Update to version 1.1.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.8-1 - Update to version 1.1.8; Fixes RHBZ#2541006 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-2.11.1-1.el10_3 (FEDORA-EPEL-2026-88f64481a7) Efficient and customizable data-encoding functions like base64, base32, and hex -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.11.1-1 - Update to version 2.11.1; Fixes RHBZ#2461424 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-macro-0.1.21-1.el10_3 (FEDORA-EPEL-2026-88f64481a7) Macros for data-encoding -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.21-1 - Update to version 0.1.21; Fixes RHBZ#2461425 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-macro-internal-0.1.19-1.el10_3 (FEDORA-EPEL-2026-88f64481a7) Internal library for data-encoding-macro -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.19-1 - Update to version 0.1.19; Fixes RHBZ#2461426 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-hyper-rustls-0.27.10-1.el10_3 (FEDORA-EPEL-2026-3e0d3b536d) Rustls+hyper integration for pure rust HTTPS -------------------------------------------------------------------------------- Update Information: Update to version 0.27.10. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.27.10-1 - Update to version 0.27.10; Fixes RHBZ#2457647 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-kstring-2.0.5-1.el10_3 (FEDORA-EPEL-2026-facf4c3543) Key String: optimized for map keys -------------------------------------------------------------------------------- Update Information: Update to version 2.0.5. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.5-1 - Update to version 2.0.5; Fixes RHBZ#2499987 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-rand-0.10.3-1.el10_3 (FEDORA-EPEL-2026-9fb32afb07) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.10.3. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.3-1 - Update to version 0.10.3; Fixes RHBZ#2537229 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-rand0.8-0.8.8-1.el10_3 (FEDORA-EPEL-2026-f4152501f7) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.8.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.8-1 - Update to version 0.8.8 -------------------------------------------------------------------------------- ================================================================================ rust-smallvec-1.16.2-1.el10_3 (FEDORA-EPEL-2026-9959fea6ad) Store up to a small number of items on the stack -------------------------------------------------------------------------------- Update Information: Update to version 1.16.2. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.16.2-1 - Update to version 1.16.2; Fixes RHBZ#2540959 -------------------------------------------------------------------------------- ================================================================================ rust-syn-3.0.6-1.el10_3 (FEDORA-EPEL-2026-2edc3477eb) Parser for Rust source code -------------------------------------------------------------------------------- Update Information: Update to version 3.0.6. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 3.0.6-1 - Update to version 3.0.6; Fixes RHBZ#2535780 -------------------------------------------------------------------------------- ================================================================================ rust-thiserror-2.0.21-1.el10_3 (FEDORA-EPEL-2026-88f64481a7) Derive(Error) -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.21-1 - Update to version 2.0.21; Fixes RHBZ#2539825 -------------------------------------------------------------------------------- ================================================================================ rust-thiserror-impl-2.0.21-1.el10_3 (FEDORA-EPEL-2026-88f64481a7) Implementation detail of the thiserror crate -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.21-1 - Update to version 2.0.21; Fixes RHBZ#2539824 -------------------------------------------------------------------------------- ================================================================================ rust-tokio-rustls-0.26.6-1.el10_3 (FEDORA-EPEL-2026-fadef3f050) Asynchronous TLS/SSL streams for Tokio using Rustls -------------------------------------------------------------------------------- Update Information: Update to version 0.26.6. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.6-1 - Update to version 0.26.6; Fixes RHBZ#2542434 -------------------------------------------------------------------------------- ================================================================================ vlc-3.0.24-1.el10_3 (FEDORA-EPEL-2026-8ce56f7e4a) The cross-platform open-source multimedia framework, player and server -------------------------------------------------------------------------------- Update Information: VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 (not for EPEL9) Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plugin -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.24-1 - 3.0.24 * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-21 - Use Qt6 on Fedora and EPEL 10+ * Tue Sep 15 2026 Ondrej Holy <oholy(a)redhat.com> - 1:3.0.23-20 - Disable freerdp support * Thu Sep 10 2026 Zbigniew Jędrzejewski-Szmek <zbyszek(a)amutable.com> - 1:3.0.23-19 - Rebuilt for libxml-2.5.4 * Thu Sep 3 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-18 - Rebuilt for FFmpeg 9 * Mon Jul 27 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-17 - Drop schroedinger plugin * Tue Jul 21 2026 Gwyn Ciesla <gwync(a)protonmail.com> - 1:3.0.23-16 - libupnp rebuild * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.0.23-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 26 2026 Gwyn Ciesla <gwync(a)protonmail.com> - 1:3.0.23-14 - libupnp rebuild * Wed Jun 24 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-13 - Rebuilt for abseil-cpp 20260526.0 * Wed Jun 24 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-12 - Rebuilt for live555 * Sun Apr 26 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-11 - Rebuilt for live555 * Fri Apr 17 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-10 - Re-enable spatialaudio * Tue Mar 24 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-9 - Fix spatialaudio disablement * Thu Mar 19 2026 Nicolas Chauvet <kwizart(a)gmail.com> - Temporary drop libspatialaudio#2 * Thu Mar 19 2026 Nicolas Chauvet <kwizart(a)gmail.com> - Temporary drop libspatialaudio * Mon Mar 9 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-6 - Rebuilt for libvpx-1.16.0 and live555-2026.02.26 * Sun Mar 8 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-5 - Rebuilt for lua 5.5 * Wed Feb 11 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-4 - Fix build with libupnp-1.18 * Tue Feb 10 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-3 - Fix build with gstreamer 1.28 * Sun Jan 25 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/TagLib2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530982 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530982 [ 2 ] Bug #2530983 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530983 [ 3 ] Bug #2530984 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530984 [ 4 ] Bug #2530985 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530985 [ 5 ] Bug #2535982 - vlc-3.0.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=2535982 -------------------------------------------------------------------------------- ================================================================================ zig-0.16.0-7.el10_3 (FEDORA-EPEL-2026-48962de21f) Programming language for maintaining robust, optimal, and reusable software -------------------------------------------------------------------------------- Update Information: Update Zig to 0.16.0 for EPEL 10.3. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Rénich Bon Ćirić <renich(a)evalinux.com> - 0.16.0-7 - fix(epel10): use llvm21 compat toolchain on RHEL 10.3+ and EPEL 10 rolling * Sat Sep 5 2026 Rénich Bon Ćirić <renich(a)evalinux.com> - 0.16.0-6 - fix: clean up unpackaged doc directory during bootstrap on RHEL * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Apr 15 2026 Jan200101 <sentrycraft123(a)gmail.com> - 0.16.0-1 - Update to 0.16.0 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.15.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ zxcvbn-c-2.6-3.el10_3 (FEDORA-EPEL-2026-dc3b8f1308) C/C++ version of the zxcvbn password strength estimator -------------------------------------------------------------------------------- Update Information: Initial build for zxcvbn-c -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Jul 30 2025 Gwyn Ciesla <gwync(a)protonmail.com> - 2.6-1 - 2.6 * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jan 20 2025 Mattia Verga <mattia.verga(a)proton.me> - 2.5-5 - Fix build with GCC15/c++23 * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2541423 - Please branch and build zxcvbn-c in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2541423 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 28 Sep '26

28 Sep '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5d2ba07938 apptainer-1.5.4-1.el10_2 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3f535077b3 aom-3.13.3-1.el10_2 libheif-1.23.5-4.el10_2 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-fa7b2ec3a3 wordpress-6.9.9-1.el10_2 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d54ae88fef lemonldap-ng-2.23.4-1.el10_2 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-fa11901f44 openbao-2.6.3-2.el10_2 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-237c7e9b4d pgbouncer-1.26.0-1.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing chromium-154.0.8037.57-1.el10_2 openarc-1.3.1-1.el10_2 python-mackup-0.11.2-1.el10_2 rust-ct-codecs-1.1.8-1.el10_2 rust-rand-0.10.3-1.el10_2 rust-rand0.8-0.8.8-1.el10_2 rust-smallvec-1.16.2-1.el10_2 rust-tokio-rustls-0.26.6-1.el10_2 vlc-3.0.24-1.el10_2 zxcvbn-c-2.6-3.el10_2 Details about builds: ================================================================================ chromium-154.0.8037.57-1.el10_2 (FEDORA-EPEL-2026-c4d340d432) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream CVE-2026-95276: Improper input validation in Themes CVE-2026-95277: Use after free in Views CVE-2026-95278: Missing authorization in WakeLock CVE-2026-95279: UI misrepresentation in Omnibox CVE-2026-95280: Race condition in V8 CVE-2026-95281: Buffer overflow in ANGLE CVE-2026-95282: Use after free in Platform CVE-2026-95283: Buffer overflow in Tint CVE-2026-95284: Buffer overflow in ANGLE CVE-2026-95285: Missing authorization in WebView CVE-2026-95286: Type confusion in Bindings CVE-2026-95287: Missing authorization in Navigation CVE-2026-95288: UI misrepresentation in Mobile CVE-2026-95289: Incorrect authorization in Scroll CVE-2026-95290: Missing authorization in NFC CVE-2026-95291: UI misrepresentation in SecurityIndicators CVE-2026-95292: Incorrect authorization in Safebrowsing CVE-2026-95293: Uninitialized resource in GPU CVE-2026-95294: UI misrepresentation in Browser CVE-2026-95295: Information leak in Mobile CVE-2026-95296: Missing authorization in Core CVE-2026-95297: Missing authorization in Contextual Tasks CVE-2026-95298: Use after free in Browser CVE-2026-95299: Use after free in GPU CVE-2026-95300: Missing authorization in DevTools CVE-2026-95301: Missing authorization in Extensions CVE-2026-95302: Incorrect authorization in WebAPKs CVE-2026-95303: Incomplete cleanup in SmartCard CVE-2026-95304: Out of bounds write in V8 CVE-2026-95305: UI misrepresentation in Chromoting CVE-2026-95306: Type confusion in V8 CVE-2026-95307: UI misrepresentation in ExtensionsMenu CVE-2026-95308: Integer overflow in Metrics CVE-2026-95309: UI misrepresentation in Mobile CVE-2026-95310: Use after free in AdFilter CVE-2026-95311: Free of non-heap memory in Fonts CVE-2026-95312: Information leak in Passwords CVE-2026-95313: Use after free in Fullscreen CVE-2026-95314: Incorrect authorization in HID CVE-2026-95315: Use after free in Aura CVE-2026-95316: Unchecked return value in Performance CVE-2026-95317: Incorrect authorization in MediaCapture CVE-2026-95318: Buffer overflow in Video CVE-2026-95319: Use after free in Printing CVE-2026-95320: Missing authorization in Navigation CVE-2026-95321: UI misrepresentation in Payments CVE-2026-95322: Out of bounds write in GPU CVE-2026-95323: UI misrepresentation in Chromium CVE-2026-95324: Uninitialized resource in GPU CVE-2026-95325: Use after free in ANGLE CVE-2026-95326: Incomplete cleanup in Bluetooth CVE-2026-95327: Information leak in Networking CVE-2026-95328: Confused deputy in Mobile CVE-2026-95329: Out of bounds write in WebGL CVE-2026-95330: Improper state validation in Downloads CVE-2026-95331: Out of bounds write in ANGLE CVE-2026-95332: Use of uninitialized variable in Tint CVE-2026-95333: Use after free in Metrics CVE-2026-95334: Incorrect reference resolution in WebProtect CVE-2026-95335: Use after free in HID CVE-2026-95336: Information leak in Transactions Platform CVE-2026-95337: UI misrepresentation in Messages CVE-2026-95338: Use after free in PDFium CVE-2026-95339: Use after free in ServiceWorker CVE-2026-95340: Incorrect authorization in PictureInPicture CVE-2026-95341: Improper input validation in Desktop CVE-2026-95342: Missing authorization in V8 CVE-2026-95343: Use after free in WebAudio CVE-2026-95344: Race condition in DevTools CVE-2026-95345: Use after free in Actor CVE-2026-95346: UI misrepresentation in Chromoting CVE-2026-95347: Use after free in Updater CVE-2026-95348: Use after free in Bluetooth CVE-2026-95349: Buffer overflow in WebGL CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95351: Use after free in Views CVE-2026-95352: Incorrect authorization in DevTools CVE-2026-95353: Use after free in Bindings CVE-2026-95354: Use after free in Verifier CVE-2026-95355: Incorrect authorization in Navigation CVE-2026-95356: Use after free in WindowDialog CVE-2026-95357: Out of bounds write in GPU CVE-2026-95358: Incorrect authorization in Mobile CVE-2026-95359: Uninitialized resource in GPU CVE-2026-95360: Race condition in Editing CVE-2026-95361: Confused deputy in DevTools CVE-2026-95362: Cross-site request forgery in DevTools CVE-2026-95363: UI misrepresentation in FileSystem CVE-2026-95364: Improper input validation in Passwords CVE-2026-95365: Type confusion in IndexedDB CVE-2026-95366: Use of released resource in Core CVE-2026-95367: Information leak in DataTransfer CVE-2026-95368: Incorrect authorization in DevTools CVE-2026-95369: Inappropriate implementation in XML CVE-2026-95370: Inappropriate implementation in NFC CVE-2026-95371: Missing authorization in Views CVE-2026-95372: Use after free in Chromecast CVE-2026-95373: Use after free in DevTools CVE-2026-95374: Incorrect authorization in Network CVE-2026-95375: Incorrect authorization in BrowserTag CVE-2026-95376: Externally controlled reference in DevTools CVE-2026-95380: Type confusion in V8 CVE-2026-95381: Improper input validation in Printing CVE-2026-95382: Improper input validation in Auth CVE-2026-95384: Race condition in Transactions Platform CVE-2026-95385: Inappropriate implementation in PlatformIntegration -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 23 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.57-1 - Update to 154.0.8037.57 * CVE-2026-95274: Improper output encoding in DevTools * CVE-2026-95275: Incorrect reference resolution in MediaStream * CVE-2026-95276: Improper input validation in Themes * CVE-2026-95277: Use after free in Views * CVE-2026-95278: Missing authorization in WakeLock * CVE-2026-95279: UI misrepresentation in Omnibox * CVE-2026-95280: Race condition in V8 * CVE-2026-95281: Buffer overflow in ANGLE * CVE-2026-95282: Use after free in Platform * CVE-2026-95283: Buffer overflow in Tint * CVE-2026-95284: Buffer overflow in ANGLE * CVE-2026-95285: Missing authorization in WebView * CVE-2026-95286: Type confusion in Bindings * CVE-2026-95287: Missing authorization in Navigation * CVE-2026-95288: UI misrepresentation in Mobile * CVE-2026-95289: Incorrect authorization in Scroll * CVE-2026-95290: Missing authorization in NFC * CVE-2026-95291: UI misrepresentation in SecurityIndicators * CVE-2026-95292: Incorrect authorization in Safebrowsing * CVE-2026-95293: Uninitialized resource in GPU * CVE-2026-95294: UI misrepresentation in Browser * CVE-2026-95295: Information leak in Mobile * CVE-2026-95296: Missing authorization in Core * CVE-2026-95297: Missing authorization in Contextual Tasks * CVE-2026-95298: Use after free in Browser * CVE-2026-95299: Use after free in GPU * CVE-2026-95300: Missing authorization in DevTools * CVE-2026-95301: Missing authorization in Extensions * CVE-2026-95302: Incorrect authorization in WebAPKs * CVE-2026-95303: Incomplete cleanup in SmartCard * CVE-2026-95304: Out of bounds write in V8 * CVE-2026-95305: UI misrepresentation in Chromoting * CVE-2026-95306: Type confusion in V8 * CVE-2026-95307: UI misrepresentation in ExtensionsMenu * CVE-2026-95308: Integer overflow in Metrics * CVE-2026-95309: UI misrepresentation in Mobile * CVE-2026-95310: Use after free in AdFilter * CVE-2026-95311: Free of non-heap memory in Fonts * CVE-2026-95312: Information leak in Passwords * CVE-2026-95313: Use after free in Fullscreen * CVE-2026-95314: Incorrect authorization in HID * CVE-2026-95315: Use after free in Aura * CVE-2026-95316: Unchecked return value in Performance * CVE-2026-95317: Incorrect authorization in MediaCapture * CVE-2026-95318: Buffer overflow in Video * CVE-2026-95319: Use after free in Printing * CVE-2026-95320: Missing authorization in Navigation * CVE-2026-95321: UI misrepresentation in Payments * CVE-2026-95322: Out of bounds write in GPU * CVE-2026-95323: UI misrepresentation in Chromium * CVE-2026-95324: Uninitialized resource in GPU * CVE-2026-95325: Use after free in ANGLE * CVE-2026-95326: Incomplete cleanup in Bluetooth * CVE-2026-95327: Information leak in Networking * CVE-2026-95328: Confused deputy in Mobile * CVE-2026-95329: Out of bounds write in WebGL * CVE-2026-95330: Improper state validation in Downloads * CVE-2026-95331: Out of bounds write in ANGLE * CVE-2026-95332: Use of uninitialized variable in Tint * CVE-2026-95333: Use after free in Metrics * CVE-2026-95334: Incorrect reference resolution in WebProtect * CVE-2026-95335: Use after free in HID * CVE-2026-95336: Information leak in Transactions Platform * CVE-2026-95337: UI misrepresentation in Messages * CVE-2026-95338: Use after free in PDFium * CVE-2026-95339: Use after free in ServiceWorker * CVE-2026-95340: Incorrect authorization in PictureInPicture * CVE-2026-95341: Improper input validation in Desktop * CVE-2026-95342: Missing authorization in V8 * CVE-2026-95343: Use after free in WebAudio * CVE-2026-95344: Race condition in DevTools * CVE-2026-95345: Use after free in Actor * CVE-2026-95346: UI misrepresentation in Chromoting * CVE-2026-95347: Use after free in Updater * CVE-2026-95348: Use after free in Bluetooth * CVE-2026-95349: Buffer overflow in WebGL * CVE-2026-95350: Buffer overflow in ANGLE * CVE-2026-95351: Use after free in Views * CVE-2026-95352: Incorrect authorization in DevTools * CVE-2026-95353: Use after free in Bindings * CVE-2026-95354: Use after free in Verifier * CVE-2026-95355: Incorrect authorization in Navigation * CVE-2026-95356: Use after free in WindowDialog * CVE-2026-95357: Out of bounds write in GPU * CVE-2026-95358: Incorrect authorization in Mobile * CVE-2026-95359: Uninitialized resource in GPU * CVE-2026-95360: Race condition in Editing * CVE-2026-95361: Confused deputy in DevTools * CVE-2026-95362: Cross-site request forgery in DevTools * CVE-2026-95363: UI misrepresentation in FileSystem * CVE-2026-95364: Improper input validation in Passwords * CVE-2026-95365: Type confusion in IndexedDB * CVE-2026-95366: Use of released resource in Core * CVE-2026-95367: Information leak in DataTransfer * CVE-2026-95368: Incorrect authorization in DevTools * CVE-2026-95369: Inappropriate implementation in XML * CVE-2026-95370: Inappropriate implementation in NFC * CVE-2026-95371: Missing authorization in Views * CVE-2026-95372: Use after free in Chromecast * CVE-2026-95373: Use after free in DevTools * CVE-2026-95374: Incorrect authorization in Network * CVE-2026-95375: Incorrect authorization in BrowserTag * CVE-2026-95376: Externally controlled reference in DevTools * CVE-2026-95380: Type confusion in V8 * CVE-2026-95381: Improper input validation in Printing * CVE-2026-95382: Improper input validation in Auth * CVE-2026-95384: Race condition in Transactions Platform * CVE-2026-95385: Inappropriate implementation in PlatformIntegration -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.1-1.el10_2 (FEDORA-EPEL-2026-c8a43a4fab) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ python-mackup-0.11.2-1.el10_2 (FEDORA-EPEL-2026-3ada536395) Keep your application settings in sync -------------------------------------------------------------------------------- Update Information: Update mackup to 0.11.2 Add Topgrade support -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Packit <hello(a)packit.dev> - 0.11.2-1 - Update to 0.11.2 upstream release - Resolves: rhbz#2530692 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Jun 15 2026 Packit <hello(a)packit.dev> - 0.11.1-1 - Update to 0.11.1 upstream release - Resolves: rhbz#2488761 * Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 0.10.3-2 - Rebuilt for Python 3.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530692 - python-mackup-0.11.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2530692 -------------------------------------------------------------------------------- ================================================================================ rust-ct-codecs-1.1.8-1.el10_2 (FEDORA-EPEL-2026-24dc1506a7) Constant-time base64, base32, and hex codecs -------------------------------------------------------------------------------- Update Information: Update to version 1.1.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.8-1 - Update to version 1.1.8; Fixes RHBZ#2541006 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-rand-0.10.3-1.el10_2 (FEDORA-EPEL-2026-84d3138281) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.10.3. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.3-1 - Update to version 0.10.3; Fixes RHBZ#2537229 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-rand0.8-0.8.8-1.el10_2 (FEDORA-EPEL-2026-3373187580) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.8.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.8-1 - Update to version 0.8.8 -------------------------------------------------------------------------------- ================================================================================ rust-smallvec-1.16.2-1.el10_2 (FEDORA-EPEL-2026-dfc5883f98) Store up to a small number of items on the stack -------------------------------------------------------------------------------- Update Information: Update to version 1.16.2. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.16.2-1 - Update to version 1.16.2; Fixes RHBZ#2540959 -------------------------------------------------------------------------------- ================================================================================ rust-tokio-rustls-0.26.6-1.el10_2 (FEDORA-EPEL-2026-14c88dcd65) Asynchronous TLS/SSL streams for Tokio using Rustls -------------------------------------------------------------------------------- Update Information: Update to version 0.26.6. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.6-1 - Update to version 0.26.6; Fixes RHBZ#2542434 -------------------------------------------------------------------------------- ================================================================================ vlc-3.0.24-1.el10_2 (FEDORA-EPEL-2026-0891129b6b) The cross-platform open-source multimedia framework, player and server -------------------------------------------------------------------------------- Update Information: VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 (not for EPEL9) Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plugin -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.24-1 - 3.0.24 * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-21 - Use Qt6 on Fedora and EPEL 10+ * Tue Sep 15 2026 Ondrej Holy <oholy(a)redhat.com> - 1:3.0.23-20 - Disable freerdp support * Thu Sep 10 2026 Zbigniew Jędrzejewski-Szmek <zbyszek(a)amutable.com> - 1:3.0.23-19 - Rebuilt for libxml-2.5.4 * Thu Sep 3 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-18 - Rebuilt for FFmpeg 9 * Mon Jul 27 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-17 - Drop schroedinger plugin * Tue Jul 21 2026 Gwyn Ciesla <gwync(a)protonmail.com> - 1:3.0.23-16 - libupnp rebuild * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.0.23-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 26 2026 Gwyn Ciesla <gwync(a)protonmail.com> - 1:3.0.23-14 - libupnp rebuild * Wed Jun 24 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-13 - Rebuilt for abseil-cpp 20260526.0 * Wed Jun 24 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-12 - Rebuilt for live555 * Sun Apr 26 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-11 - Rebuilt for live555 * Fri Apr 17 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-10 - Re-enable spatialaudio * Tue Mar 24 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-9 - Fix spatialaudio disablement * Thu Mar 19 2026 Nicolas Chauvet <kwizart(a)gmail.com> - Temporary drop libspatialaudio#2 * Thu Mar 19 2026 Nicolas Chauvet <kwizart(a)gmail.com> - Temporary drop libspatialaudio * Mon Mar 9 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 1:3.0.23-6 - Rebuilt for libvpx-1.16.0 and live555-2026.02.26 * Sun Mar 8 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-5 - Rebuilt for lua 5.5 * Wed Feb 11 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-4 - Fix build with libupnp-1.18 * Tue Feb 10 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-3 - Fix build with gstreamer 1.28 * Sun Jan 25 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/TagLib2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530982 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530982 [ 2 ] Bug #2530983 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530983 [ 3 ] Bug #2530984 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530984 [ 4 ] Bug #2530985 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530985 [ 5 ] Bug #2535982 - vlc-3.0.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=2535982 -------------------------------------------------------------------------------- ================================================================================ zxcvbn-c-2.6-3.el10_2 (FEDORA-EPEL-2026-a8389af4ae) C/C++ version of the zxcvbn password strength estimator -------------------------------------------------------------------------------- Update Information: Initial build for zxcvbn-c -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Jul 30 2025 Gwyn Ciesla <gwync(a)protonmail.com> - 2.6-1 - 2.6 * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jan 20 2025 Mattia Verga <mattia.verga(a)proton.me> - 2.5-5 - Fix build with GCC15/c++23 * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2541423 - Please branch and build zxcvbn-c in epel10 https://bugzilla.redhat.com/show_bug.cgi?id=2541423 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 28 Sep '26

28 Sep '26

The following Fedora EPEL 9 Security updates need testing: Age URL 313 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 95 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-11bdcd6e9d apptainer-1.5.4-1.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-12b7f6fc6c aom-3.13.3-1.el9 libheif-1.23.5-2.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c032162b28 wordpress-6.9.9-1.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1d4952c503 slurm-22.05.11-2.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-306ffcea82 lemonldap-ng-2.23.4-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-dfac9208da openbao-2.6.3-2.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1c3b7b89de prometheus-3.15.0-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-62de33e876 pgbouncer-1.26.0-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing ntfs-3g-2022.10.3-12.el9 ntfs-3g-system-compression-1.1-2.el9 openarc-1.3.1-1.el9 partclone-0.3.50-2.el9 python-configargparse-1.8.0-1.el9 python-dunamai-1.26.2-3.el9 python-engineio-4.12.3-2.el9 python-simple-websocket-1.0.0-8.el9 rust-cc-1.4.6-1.el9 rust-ct-codecs-1.1.8-1.el9 rust-data-encoding-2.11.1-1.el9 rust-data-encoding-macro-0.1.21-1.el9 rust-data-encoding-macro-internal-0.1.19-1.el9 rust-hyper-rustls-0.27.10-1.el9 rust-rand-0.10.3-1.el9 rust-rand0.8-0.8.8-1.el9 rust-smallvec-1.16.2-1.el9 rust-syn-3.0.6-1.el9 rust-thiserror-2.0.21-1.el9 rust-thiserror-impl-2.0.21-1.el9 rust-tokio-rustls-0.26.6-1.el9 rust-tree-sitter-sequel-0.3.11-4.el9 testdisk-7.2-2.el9 vlc-3.0.24-2.el9 Details about builds: ================================================================================ ntfs-3g-2022.10.3-12.el9 (FEDORA-EPEL-2026-1843885c69) Linux NTFS userspace driver -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 25 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2022.10.3-12 - apply upstream patches for: NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 * Thu Sep 24 2026 Tom Callaway <spot(a)fedoraproject.org> - 2:2022.10.3-11 - apply upstream patches for: CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ ntfs-3g-system-compression-1.1-2.el9 (FEDORA-EPEL-2026-1843885c69) NTFS-3G plugin for reading "system compressed" files -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 1.1-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ openarc-1.3.1-1.el9 (FEDORA-EPEL-2026-86496d6cfb) An open source library and milter for providing ARC service -------------------------------------------------------------------------------- Update Information: Update to 1.3.1 https://github.com/flowerysong/OpenARC/releases/tag/v1.3.1 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.1-1 - Update to 1.3.1 (RHBZ#2542555) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1.3.0-3 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- ================================================================================ partclone-0.3.50-2.el9 (FEDORA-EPEL-2026-1843885c69) Utility to clone and restore a partition -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 0.3.50-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ python-configargparse-1.8.0-1.el9 (FEDORA-EPEL-2026-4dba482149) Replacement for argparse that allows options to be set via config files -------------------------------------------------------------------------------- Update Information: Update to 1.8.0: values for mutually exclusive options now follow the usual override order. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.8.0-1 - Update to 1.8.0 (close RHBZ#2542557) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2542557 - python-configargparse-1.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2542557 -------------------------------------------------------------------------------- ================================================================================ python-dunamai-1.26.2-3.el9 (FEDORA-EPEL-2026-1e817f954b) Dynamic version generation -------------------------------------------------------------------------------- Update Information: Initial package for EPEL9 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-3 - Add build conditionals for integration tests for particular VCSes * Mon Sep 28 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-2 - Assert that the .dist-info directory contains a license file * Sun Aug 2 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.26.2-1 - Update to 1.26.2 upstream release - Resolves: rhbz#2510107 * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-8 - simplify .gitignore file * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-7 - commit sources from github * Fri Jul 24 2026 Filipe Rosset <rosset.filipe(a)gmail.com> - 1.26.1-6 - get sources from github * Fri Jul 24 2026 Filipe Rosset <filiperosset(a)fedoraproject.org> - 1.26.1-5 - added patch to fix build against fossil-2.28 * Fri Jul 24 2026 Filipe Rosset <filiperosset(a)fedoraproject.org> - 1.26.1-4 - spec cleanup and modernization, use pypi sources * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.26.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Thu Jun 4 2026 Python Maint <python-maint(a)redhat.com> - 1.26.1-2 - Rebuilt for Python 3.15 * Sat Apr 4 2026 Packit <hello(a)packit.dev> - 1.26.1-1 - Update to 1.26.1 upstream release - Resolves: rhbz#2455088 * Sun Feb 15 2026 Packit <hello(a)packit.dev> - 1.26.0-1 - Update to 1.26.0 upstream release - Resolves: rhbz#2440008 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Tue Nov 4 2025 Miro Hrončok <miro(a)hroncok.cz> - 1.25.0-5 - Enable breezy tests (breezy has been fixed) * Fri Sep 19 2025 Python Maint <python-maint(a)redhat.com> - 1.25.0-4 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint <python-maint(a)redhat.com> - 1.25.0-3 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jul 4 2025 Packit <hello(a)packit.dev> - 1.25.0-1 - Update to 1.25.0 upstream release - Resolves: rhbz#2376448 * Thu Jun 19 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.24.1-3 - Disable breezy/bazaar integration tests for now (close RHBZ#2371874) * Tue Jun 3 2025 Python Maint <python-maint(a)redhat.com> - 1.24.1-2 - Rebuilt for Python 3.14 * Fri May 9 2025 Packit <hello(a)packit.dev> - 1.24.1-1 - Update to 1.24.1 upstream release - Resolves: rhbz#2365333 * Thu May 8 2025 Packit <hello(a)packit.dev> - 1.24.0-1 - Update to 1.24.0 upstream release - Resolves: rhbz#2364439 * Fri Mar 21 2025 Packit <hello(a)packit.dev> - 1.23.1-1 - Update to 1.23.1 upstream release - Resolves: rhbz#2353990 * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.23.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Nov 18 2024 Packit <hello(a)packit.dev> - 1.23.0-1 - Update to 1.23.0 upstream release - Resolves: rhbz#2326880 -------------------------------------------------------------------------------- ================================================================================ python-engineio-4.12.3-2.el9 (FEDORA-EPEL-2026-e47857b934) Python Engine.IO server and client -------------------------------------------------------------------------------- Update Information: Update python-engineio to 4.12.3, which is not the latest version but is the latest version that could be reasonably backported to EPEL9. This required branching a new package for python-simple-websocket 1.0.0 – again, not quite the latest version. Furthermore, this update includes a backport from versions 4.13.2 and 4.13.5 of the fixes for CVE-2026-48802 and CVE-2026-48809. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 4.12.3-2 - Backport patches for CVE-2026-48802 and CVE-2026-48809 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.12.3-1 - Update to 4.12.3 upstream release - Resolves: rhbz#2399962 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.12.2-1 - Update to 4.12.2 upstream release - Resolves: rhbz#2370303 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.12.1-1 - Update to 4.12.1 upstream release - Resolves: rhbz#2365543 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.12.0-1 - Update to 4.12.0 upstream release - Resolves: rhbz#2359243 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.11.2-1 - Update to 4.11.2 upstream release - Resolves: rhbz#2334874 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.11.1-1 - Update to 4.11.1 upstream release - Resolves: rhbz#2332939 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.11.0-1 - Update to 4.11.0 upstream release - Resolves: rhbz#2332865 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.10.1-1 - Update to 4.10.1 upstream release - Resolves: rhbz#2319067 * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 4.9.1-2 - Conditionalize eventlet integration tests * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.9.1-1 - Update to 4.9.1 upstream release - Resolves: rhbz#2281563 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.9.0-1 - [packit] 4.9.0 upstream release - Resolves rhbz#2263093 * Thu Sep 24 2026 Packit <hello(a)packit.dev> - 4.8.2-1 - [packit] 4.8.2 upstream release - Resolves rhbz#2257182 * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 4.8.1-1 - Update to 4.8.1 (close RHBZ#2256247) * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 4.8.0-2 - Assert that %pyproject_files contains a license file * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 4.8.0-1 - Update to 4.8.0 (close RHBZ#2238547) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2537810 - CVE-2026-48802 python-engineio: python-engineio: Denial of Service via unbound thread allocation in heartbeat mechanism. [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2537810 -------------------------------------------------------------------------------- ================================================================================ python-simple-websocket-1.0.0-8.el9 (FEDORA-EPEL-2026-e47857b934) Simple WebSocket server and client for Python -------------------------------------------------------------------------------- Update Information: Update python-engineio to 4.12.3, which is not the latest version but is the latest version that could be reasonably backported to EPEL9. This required branching a new package for python-simple-websocket 1.0.0 – again, not quite the latest version. Furthermore, this update includes a backport from versions 4.13.2 and 4.13.5 of the fixes for CVE-2026-48802 and CVE-2026-48809. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 24 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.0.0-8 - Backport to EPEL9, without PDF docs or -doc subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #2537810 - CVE-2026-48802 python-engineio: python-engineio: Denial of Service via unbound thread allocation in heartbeat mechanism. [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2537810 -------------------------------------------------------------------------------- ================================================================================ rust-cc-1.4.6-1.el9 (FEDORA-EPEL-2026-c4c869188f) Build-time dependency for Cargo build scripts to invoke the native C compiler -------------------------------------------------------------------------------- Update Information: Update cc crate to version 1.4.6. Relax cc crate requirement bounds in tree-sitter-sequel to something more reasonable. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.4.6-1 - Update to version 1.4.6 -------------------------------------------------------------------------------- ================================================================================ rust-ct-codecs-1.1.8-1.el9 (FEDORA-EPEL-2026-4dba71bb26) Constant-time base64, base32, and hex codecs -------------------------------------------------------------------------------- Update Information: Update to version 1.1.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.8-1 - Update to version 1.1.8; Fixes RHBZ#2541006 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-2.11.1-1.el9 (FEDORA-EPEL-2026-2d3e6588b6) Efficient and customizable data-encoding functions like base64, base32, and hex -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.11.1-1 - Update to version 2.11.1; Fixes RHBZ#2461424 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-macro-0.1.21-1.el9 (FEDORA-EPEL-2026-2d3e6588b6) Macros for data-encoding -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.21-1 - Update to version 0.1.21; Fixes RHBZ#2461425 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.19-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-data-encoding-macro-internal-0.1.19-1.el9 (FEDORA-EPEL-2026-2d3e6588b6) Internal library for data-encoding-macro -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.19-1 - Update to version 0.1.19; Fixes RHBZ#2461426 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-hyper-rustls-0.27.10-1.el9 (FEDORA-EPEL-2026-65839d22b1) Rustls+hyper integration for pure rust HTTPS -------------------------------------------------------------------------------- Update Information: Update to version 0.27.10. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.27.10-1 - Update to version 0.27.10; Fixes RHBZ#2457647 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.27.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-rand-0.10.3-1.el9 (FEDORA-EPEL-2026-58d77a43ef) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.10.3. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.3-1 - Update to version 0.10.3; Fixes RHBZ#2537229 -------------------------------------------------------------------------------- ================================================================================ rust-rand0.8-0.8.8-1.el9 (FEDORA-EPEL-2026-bf35315939) Random number generators and other randomness functionality -------------------------------------------------------------------------------- Update Information: Update to version 0.8.8. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.8-1 - Update to version 0.8.8 -------------------------------------------------------------------------------- ================================================================================ rust-smallvec-1.16.2-1.el9 (FEDORA-EPEL-2026-4b3a080af6) Store up to a small number of items on the stack -------------------------------------------------------------------------------- Update Information: Update to version 1.16.2. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 1.16.2-1 - Update to version 1.16.2; Fixes RHBZ#2540959 -------------------------------------------------------------------------------- ================================================================================ rust-syn-3.0.6-1.el9 (FEDORA-EPEL-2026-ccff993cc8) Parser for Rust source code -------------------------------------------------------------------------------- Update Information: Update to version 3.0.6. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 3.0.6-1 - Update to version 3.0.6; Fixes RHBZ#2535780 -------------------------------------------------------------------------------- ================================================================================ rust-thiserror-2.0.21-1.el9 (FEDORA-EPEL-2026-2d3e6588b6) Derive(Error) -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.21-1 - Update to version 2.0.21; Fixes RHBZ#2539825 -------------------------------------------------------------------------------- ================================================================================ rust-thiserror-impl-2.0.21-1.el9 (FEDORA-EPEL-2026-2d3e6588b6) Implementation detail of the thiserror crate -------------------------------------------------------------------------------- Update Information: Update the thiserror and thiserror-impl crates to version 2.0.21. Update the data-encoding, data-encoding-macro, and data-encoding-macro-internal crates to the latest versions. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.21-1 - Update to version 2.0.21; Fixes RHBZ#2539824 -------------------------------------------------------------------------------- ================================================================================ rust-tokio-rustls-0.26.6-1.el9 (FEDORA-EPEL-2026-90383c8616) Asynchronous TLS/SSL streams for Tokio using Rustls -------------------------------------------------------------------------------- Update Information: Update to version 0.26.6. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.6-1 - Update to version 0.26.6; Fixes RHBZ#2542434 -------------------------------------------------------------------------------- ================================================================================ rust-tree-sitter-sequel-0.3.11-4.el9 (FEDORA-EPEL-2026-c4c869188f) Tree-sitter Grammar for SQL -------------------------------------------------------------------------------- Update Information: Update cc crate to version 1.4.6. Relax cc crate requirement bounds in tree-sitter-sequel to something more reasonable. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.11-4 - Relax overly strict 'cc' crate dependency * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ testdisk-7.2-2.el9 (FEDORA-EPEL-2026-1843885c69) Tool to check and undelete partition, PhotoRec recovers lost files -------------------------------------------------------------------------------- Update Information: apply upstream patches to resolve NTFS-3G-SA_2026-06-1_20 NTFS-3G-SA_2026-06-1_19 NTFS-3G-SA_2026-06-1_12 NTFS-3G-SA_2026-06-1_11 NTFS-3G-SA_2026-06-1_10 NTFS-3G-SA_2026-06-1_08 NTFS-3G-SA_2026-06-1_07 NTFS-3G-SA_2026-06-1_05 Apply backported fixes for CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569 CVE-2026-46571 CVE-2026-46570 CVE-2026-46572 CVE-2026-56135 CVE-2026-56136 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 28 2026 Tom Callaway <spot(a)fedoraproject.org> - 7.2-2 - rebuild for new ntfs-3g -------------------------------------------------------------------------------- References: [ 1 ] Bug #2539858 - ntfs-3g: Multiple security vulnerabilities fixed in upstream 2026.9.18 release https://bugzilla.redhat.com/show_bug.cgi?id=2539858 -------------------------------------------------------------------------------- ================================================================================ vlc-3.0.24-2.el9 (FEDORA-EPEL-2026-4ad00e5cac) The cross-platform open-source multimedia framework, player and server -------------------------------------------------------------------------------- Update Information: VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plugin -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.24-1 - 3.0.24 * Wed Sep 23 2026 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:3.0.23-21 - Use Qt6 on Fedora and EPEL 10+ -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530982 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530982 [ 2 ] Bug #2530983 - CVE-2026-73324 vlc: VLC media player: Information disclosure via unterminated RTSP response line [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530983 [ 3 ] Bug #2530984 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530984 [ 4 ] Bug #2530985 - CVE-2026-56711 vlc: VLC media player: Arbitrary code execution via integer overflow in picture allocation [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2530985 [ 5 ] Bug #2535982 - vlc-3.0.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=2535982 --------------------------------------------------------------------------------

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel September 2026