The following Fedora EPEL 10.1 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-4f15f84740
syslog-ng-4.8.2-1.el10_1
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-71821d8da3
sfnt2woff-zopfli-1.3.1-15.el10_1
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f244b113ba
woff-0.20091126-47.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
apptainer-1.4.1-1.el10_1
asdcplib-2.13.0-6.el10_1
bird-3.1.1-1.el10_1
glfw-3.4-4.el10_1
libjwt-2.1.2-1.el10_1
pgbouncer-1.24.1-3.el10_1
python-cookiecutter-2.6.0-1.el10_1
python-watchfiles-1.0.4-5.el10_1
qm-0.7.4-1.el10_1
rust-boxcar-0.2.12-1.el10_1
Details about builds:
================================================================================
apptainer-1.4.1-1.el10_1 (FEDORA-EPEL-2025-66b9e3135f)
Application and environment virtualization formerly known as Singularity
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Dave Dykstra <[email protected]> - 1.4.1
- Update to upstream 1.4.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2366385 - apptainer-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2366385
--------------------------------------------------------------------------------
================================================================================
asdcplib-2.13.0-6.el10_1 (FEDORA-EPEL-2025-cd7f5e83eb)
AS-DCP file access libraries
--------------------------------------------------------------------------------
Update Information:
Fix build failures.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Simone Caronni <[email protected]> - 2.13.0-6
- Fix build on Fedora 43+.
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
2.13.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Oct 21 2024 Pete Walter <[email protected]> - 2.13.0-3
- Rebuild for xerces-c 3.3
* Fri Oct 18 2024 Pete Walter <[email protected]> - 2.13.0-2
- Rebuild for xerces-c 3.3
--------------------------------------------------------------------------------
================================================================================
bird-3.1.1-1.el10_1 (FEDORA-EPEL-2025-387bfb8a61)
BIRD Internet Routing Daemon
--------------------------------------------------------------------------------
Update Information:
Migrating from BIRD 2 to BIRD 3
Pretty much any BIRD 2.x configuration should be reusable with BIRD 3.1.x
without changes
Configuration changes, similar as those required between minor releases in the
past, may still be required
See also: https://gitlab.nic.cz/labs/bird/-/blob/stable-v3.1/doc/migration-
bird3.md
Please pay attention to possible warnings or errors; it might look like this:
[0001] <WARN> /etc/bird.conf:179:1: Missing authentication option, assuming MD5
You also can run e.g. bird -c /etc/bird.conf -p manually. Here it's a warning,
and while a configuration change might not be mandatory, it's still recommented:
For the above example warning, the configuration file /etc/bird.conf looks like
this:
protocol bgp isp1 from bgp6 {
neighbor 2001:db8::179 port 179 as 64496;
authentication md5; # New configuration option introduced with BIRD 3
password "MD5_auth3nt!catiOn";
}
To avoid the warning, the newly introduced configuration option authentication
md5; needs to be added as demonstrated in the example configuration above.
BIRD 3.1.1 (2025-05-13)
Makefile: Fix accidentally added dry-run markers
BGP: Fix route refresh behavior
BGP: Fix reconfiguration of import behavior modifiers
BGP: Fix crash on too long export
Conf: Fix invalid check in text_or_ipa grammar
Netlink: Fix FreeBSD build error
Fix use-after-free in thread group reconfiguration
Fix CentOS 7 and NetBSD build
Fix several crashes in table export (already fixed in 3.0.2)
Fix crash on graceful restart of a channel with ROA subscription
Lots of internal tooling and CI updates
BIRD 3.1.0 (2025-04-01)
CLI v2 compatibility layer for show route
Thread configuration rework
Merged 2.17
BIRD 3.0.2 (2025-04-01)
Multiple route propagation crash fixes
BGP export table route source leak
Kernel export of source.specific routes fix
Filter gw setting fix
Merged 2.16.2
BIRD 3.0.1 (2025-01-10)
BGP: Fixed crash in dynamic spawn
BGP: Fixed crash in graceful recovery
BGP: Fixed crash with deterministic med
BGP: Renamed the otc attribute to bgp_otc
BFD: Fixed crash in session reconfiguration
Kernel: Fixed crash with merged paths
Kernel: Simplified initial scan
Tables: Fixed old best route propagation
Tables: Fixed debug configuration propagation
Tables: Fixed initial feeds
CLI: Fixed buffer allocation heap bloating
Reduced route attribute normalization heap bloating
Merged 2.16.1
BIRD 3.0.0 (2024-12-17)
from 2.16
Multithreaded execution
Decoupled exports from imports
Unified route attribute names
Slightly different log format
Separate reload command for filters and protocols
BGP: Export tables show the state as on wire
Lots of internal changes
from 3.0alpha3
Merged changes from 2.16
BMP and MRT converted to the new API and working
Internal protocol state journal
Optimized table journal cleanup
Fixed show route export
Fixed minor bugs
BIRD 3.0alpha3 (2024-07-01)
Merged 2.15.1
Fixed major issues with channel reloads
Fixed data inconsistencies in many corner cases
Fixed internal scheduler corner cases
MRT and BMP still switched off
Expected one more alpha before stable
BIRD 3.0alpha2 (2023-05-11)
Fixed memory leaks and use-after free bugs
Simple thread work balancing
MRT switched off
Slow kernel route synchronization to be fixed later
BIRD 3.0alpha1 (2023-04-18)
Worker threads for BGP, Pipe, RPKI and BFD
Configurable number of threads
Asynchronous route export
Flat attribute structure
Inline import tables
Export tables merged with BGP prefix / attribute buckets
Fixed ROA check locking inversion in route table dumps
MRT switched off
BIRD 3.0-alpha0 (2022-02-07)
Removal of fixed protocol-specific route attributes
Asynchronous route export
Explicit table import / export hooks
Partially lockless route attribute cache
Thread-safe resource management
Thread-safe interface notifications
Thread-safe protocol API
Adoption of BFD IO loop for general use
Parallel Pipe protocol
Parallel RPKI protocol
Parallel BGP protocol
Lots of refactoring
Bugfixes and improvements as they came along
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 13 2025 Robert Scheck <[email protected]> - 3.1.1-1
- Upgrade to 3.1.1 (#2332837)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2332837 - bird-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332837
--------------------------------------------------------------------------------
================================================================================
glfw-3.4-4.el10_1 (FEDORA-EPEL-2025-93ba6318c5)
A cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
Switch build dependency from obsolete vulkan-devel (removed in Fedora 29) and
switch vulkan-loader-devel.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Simone Caronni <[email protected]> - 1:3.4-4
- Fix build on EL9.
* Thu May 15 2025 Simone Caronni <[email protected]> - 1:3.4-3
- Require vulkan-loader-devel in place of vulkan-devel (EOL with Fedora
29).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2310401 - use BR vulkan-loader-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2310401
--------------------------------------------------------------------------------
================================================================================
libjwt-2.1.2-1.el10_1 (FEDORA-EPEL-2025-708f746ecf)
A Javascript Web Token library in C
--------------------------------------------------------------------------------
Update Information:
Build for EPEL10
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 13 2025 Ward Poelmans <[email protected]> - 2.1.2-1
- Build for EPEL10
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> -
1.12.1-19
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Tue Oct 22 2024 Richard W.M. Jones <[email protected]> - 1.12.1-18
- Rebuild for Jansson 2.14
(https://lists.fedoraproject.org/archives/list/[email protected]/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> -
1.12.1-17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Sat Apr 13 2024 Miroslav Suchý <[email protected]> - 1.12.1-16
- convert license to SPDX
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> -
1.12.1-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
1.12.1-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <[email protected]> -
1.12.1-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331416 - request adding libjwt to epel 10
https://bugzilla.redhat.com/show_bug.cgi?id=2331416
--------------------------------------------------------------------------------
================================================================================
pgbouncer-1.24.1-3.el10_1 (FEDORA-EPEL-2025-e51947524f)
Lightweight connection pooler for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Fix log rotation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Simone Caronni <[email protected]> - 1.24.1-3
- Fix logrotate (#2364112).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2364112 - pgbouncer log file not deleted on rotation
https://bugzilla.redhat.com/show_bug.cgi?id=2364112
--------------------------------------------------------------------------------
================================================================================
python-cookiecutter-2.6.0-1.el10_1 (FEDORA-EPEL-2025-6f98adcefa)
CLI utility to create projects from templates
--------------------------------------------------------------------------------
Update Information:
2.6.0 release for EPEL
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Federico Pellegrin <[email protected]> - 2.6.0-1
- 2.6.0 release for EPEL
--------------------------------------------------------------------------------
================================================================================
python-watchfiles-1.0.4-5.el10_1 (FEDORA-EPEL-2025-a906d004e7)
Simple, modern and high performance file watching and code reload in python
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2025-4574 (fix RHBZ#2366569)
The package was rebuilt with rust-crossbeam-channel 0.5.15.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Benjamin A. Beasley <[email protected]> - 1.0.4-5
- Security fix for CVE-2025-4574 (fix RHBZ#2366569)
- The package was rebuilt with rust-crossbeam-channel 0.5.15.
* Thu May 15 2025 Benjamin A. Beasley <[email protected]> - 1.0.4-4
- Assert that .dist-info contains license files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2366569 - CVE-2025-4574 python-watchfiles: crossbeam-channel
Vulnerable to Double Free on Drop [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2366569
--------------------------------------------------------------------------------
================================================================================
qm-0.7.4-1.el10_1 (FEDORA-EPEL-2025-c48b23e565)
Containerized environment for running Quality Management software
--------------------------------------------------------------------------------
Update Information:
New qm version available, v0.7.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 18 2025 Packit <[email protected]> - 0.7.4-1
- Update to version 0.7.4
* Wed Mar 5 2025 Packit <[email protected]> - 0.7.3-1
- Update to version 0.7.3
* Fri Feb 28 2025 Packit <[email protected]> - 0.7.2-1
- Update to version 0.7.2
* Thu Feb 27 2025 Packit <[email protected]> - 0.7.1-1
- Update to version 0.7.1
* Wed Feb 26 2025 Packit <[email protected]> - 0.7.0-1
- Update to version 0.7.0
* Sat Jan 4 2025 Packit <[email protected]> - 0.6.9-1
- Update to version 0.6.9
* Wed Nov 13 2024 Packit <[email protected]> - 0.6.8-1
- Update to version 0.6.8
* Thu Sep 12 2024 Packit <[email protected]> - 0.6.7-1
- Update to version 0.6.7
* Fri Jun 28 2024 Packit <[email protected]> - 0.6.5-1
- Update to version 0.6.5
* Tue May 14 2024 Packit <[email protected]> - 0.6.4-1
- Update to version 0.6.4
* Tue May 7 2024 Douglas Schilling Landgraf <[email protected]> - 0.6.3-1
- Update to 0.6.3 upstream release
* Fri Jan 26 2024 Douglas Schilling Landgraf <[email protected]> - 0.6.2-1
- Update to version v0.6.2
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
0.6.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jan 18 2024 Douglas Schilling Landgraf <[email protected]> - 0.6.1-2
- add vsomeip3-selinux as buildrequires
* Thu Jan 18 2024 Douglas Schilling Landgraf <[email protected]> - 0.6.1-1
- Update to version 0.6.1
* Mon Nov 27 2023 Douglas Schilling Landgraf <[email protected]> - 0.6.0-2
- sources v0.6.0
* Mon Nov 27 2023 Douglas Schilling Landgraf <[email protected]> - 0.6.0-1
- v0.6.0
* Wed Nov 1 2023 Packit <[email protected]> - 0.5.8-1
- [packit] 0.5.8 upstream release
* Thu Sep 7 2023 Packit <[email protected]> - 0.5.7-1
- [packit] 0.5.7 upstream release
* Fri Sep 1 2023 Packit <[email protected]> - 0.5.6-1
- [packit] 0.5.6 upstream release
* Wed Aug 30 2023 Packit <[email protected]> - 0.5.5-1
- [packit] 0.5.5 upstream release
* Tue Aug 29 2023 Packit <[email protected]> - 0.5.4-1
- [packit] 0.5.4 upstream release
* Mon Aug 28 2023 Packit <[email protected]> - 0.5.3-1
- [packit] 0.5.3 upstream release
* Wed Aug 16 2023 Packit <[email protected]> - 0.5.1-1
- [packit] 0.5.1 upstream release
* Fri Jul 21 2023 Fedora Release Engineering <[email protected]> -
0.4.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu May 18 2023 Packit <[email protected]> - 0.4.1-1
- [packit] 0.4.1 upstream release
* Thu May 18 2023 Packit <[email protected]> - 0.4.0-1
- [packit] 0.4.0 upstream release
* Tue May 16 2023 Packit <[email protected]> - 0.2.0-1
- [packit] 0.2.0 upstream release
* Tue May 9 2023 Lokesh Mandvekar <[email protected]> - 0.1.0-1
- Resolves: #2193400 - initial upload
--------------------------------------------------------------------------------
================================================================================
rust-boxcar-0.2.12-1.el10_1 (FEDORA-EPEL-2025-c4c3d3f60a)
Concurrent, append-only vector
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.12; the loom dependency was made optional.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 15 2025 Benjamin A. Beasley <[email protected]> - 0.2.12-1
- Update to version 0.2.12; Fixes RHBZ#2366484
* Thu May 15 2025 Benjamin A. Beasley <[email protected]> - 0.2.11-3
- Patch out criterion in the metadata patch rather than using tomcli
* Mon May 12 2025 Benjamin A. Beasley <[email protected]> - 0.2.11-2
- Remove no-longer-necessary .rpmlintrc file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2366484 - rust-boxcar-0.2.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2366484
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
