The following Fedora EPEL 10.1 Security updates need testing:
Age URL
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5fd0f09216
mod_security-2.9.9-1.el10_1
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9c3b16e06c
fcgi-2.4.0-52.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
almalinux-git-utils-0.0.3^git20240927.3a7c848-1.el10_1
chromium-137.0.7151.55-1.el10_1
gn-2239^20250530gitafd24ed11bc5-1.el10_1
image-builder-20-1.el10_1
python-fastapi-0.115.12-4.el10_1
python-pydantic-extra-types-2.10.5-1.el10_1
python-rich-toolkit-0.14.7-1.el10_1
python-starlette-0.47.0-1.el10_1
rust-av1-grain-0.2.4-1.el10_1
rust-cc-1.2.25-1.el10_1
rust-clap-4.5.39-1.el10_1
rust-clap_builder-4.5.39-1.el10_1
rust-clap_complete-4.5.52-1.el10_1
rust-clap_complete_nushell-4.5.6-1.el10_1
rust-cursor-icon-1.2.0-1.el10_1
rust-derive-where-1.4.0-1.el10_1
rust-hyper-rustls-0.27.6-1.el10_1
rust-prettyplease-0.2.33-1.el10_1
rust-webpki-roots-1.0.0-1.el10_1
rust-webpki-roots0.26-0.26.11-1.el10_1
Details about builds:
================================================================================
almalinux-git-utils-0.0.3^git20240927.3a7c848-1.el10_1
(FEDORA-EPEL-2025-18cb1cd9de)
Utilities for working with the AlmaLinux Git server
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2025 Neal Gompa <[email protected]> -
0.0.3^git20240927.3a7c848-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368841 - Review Request: almalinux-git-utils - Utilities for
working with the AlmaLinux Git server
https://bugzilla.redhat.com/show_bug.cgi?id=2368841
--------------------------------------------------------------------------------
================================================================================
chromium-137.0.7151.55-1.el10_1 (FEDORA-EPEL-2025-b92d1d4371)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 137.0.7151.55
CVE-2025-5063: Use after free in Compositing
CVE-2025-5280: Out of bounds write in V8
CVE-2025-5064: Inappropriate implementation in Background Fetch API
CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
CVE-2025-5066: Inappropriate implementation in Messages
CVE-2025-5281: Inappropriate implementation in BFCache
CVE-2025-5283: Use after free in libvpx
CVE-2025-5067: Inappropriate implementation in Tab Strip
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 27 2025 Than Ngo <[email protected]> - 137.0.7151.55-1
- Update to 137.0.7151.55
* CVE-2025-5063: Use after free in Compositing
* CVE-2025-5280: Out of bounds write in V8
* CVE-2025-5064: Inappropriate implementation in Background Fetch API
* CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
* CVE-2025-5066: Inappropriate implementation in Messages
* CVE-2025-5281: Inappropriate implementation in BFCache
* CVE-2025-5283: Use after free in libvpx
* CVE-2025-5067: Inappropriate implementation in Tab Strip
- Fix FTBFS caused by simdutf and pdfium-png_decoder
- Remove chromium-135-gperf.patch and
chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by
upstream
- Refresh ppc64le patches
- Enable system simdutf for F43
* Tue May 27 2025 Jitka Plesnikova <[email protected]> - 136.0.7103.113-2
- Rebuilt for flac 1.5.0
--------------------------------------------------------------------------------
================================================================================
gn-2239^20250530gitafd24ed11bc5-1.el10_1 (FEDORA-EPEL-2025-1612aba18a)
Meta-build system that generates build files for Ninja
--------------------------------------------------------------------------------
Update Information:
Update to version 2239
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Benjamin A. Beasley <[email protected]> -
2239^20250530gitafd24ed11bc5-1
- Update to version 2239
* Sat May 31 2025 Benjamin A. Beasley <[email protected]> -
2237^20250525gitebc8f16ca7b0-1
- Update to version 2237
--------------------------------------------------------------------------------
================================================================================
image-builder-20-1.el10_1 (FEDORA-EPEL-2025-0d4a30ee39)
An image building executable using osbuild
--------------------------------------------------------------------------------
Update Information:
Automatic update for image-builder-20-1.el10_1.
Changelog for image-builder
* Fri May 30 2025 Packit <[email protected]> - 20-1
Changes with 20
----------------
* deps: update (#219)
* Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
â Somewhere on the Internet, 2025-05-30
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2025 Packit <[email protected]> - 20-1
Changes with 20
----------------
* deps: update (#219)
* Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
â Somewhere on the Internet, 2025-05-30
--------------------------------------------------------------------------------
================================================================================
python-fastapi-0.115.12-4.el10_1 (FEDORA-EPEL-2025-c5e1668422)
FastAPI framework
--------------------------------------------------------------------------------
Update Information:
Starlette 0.47.0 (May 29, 2025)
Added
Add support for ASGI pathsend extension.
Add partitioned attribute to Response.set_cookie.
Changed
Change methods parameter type from list[str] to Collection[str].
Replace import typing by from typing import ... in the whole codebase.
Fixed
Mark ExceptionMiddleware.http_exception as async to prevent thread creation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2025 Benjamin A. Beasley <[email protected]> - 0.115.12-4
- Bump Starlette to allow up to 0.47.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2369219 - python-starlette-0.47.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2369219
--------------------------------------------------------------------------------
================================================================================
python-pydantic-extra-types-2.10.5-1.el10_1 (FEDORA-EPEL-2025-d59ec6c8df)
Extra types for Pydantic
--------------------------------------------------------------------------------
Update Information:
Update to 2.10.5: https://github.com/pydantic/pydantic-extra-
types/releases/tag/v2.10.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 29 2025 Benjamin A. Beasley <[email protected]> - 2.10.5-1
- Update to 2.10.5 (close RHBZ#2369192)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2369192 - python-pydantic-extra-types-2.10.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2369192
--------------------------------------------------------------------------------
================================================================================
python-rich-toolkit-0.14.7-1.el10_1 (FEDORA-EPEL-2025-1552b6f15f)
Rich toolkit for building command-line applications
--------------------------------------------------------------------------------
Update Information:
Update to 0.14.7 upstream release: Fix placeholder when input is done.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Packit <[email protected]> - 0.14.7-1
- Update to 0.14.7 upstream release
- Resolves: rhbz#2368787
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368787 - python-rich-toolkit-0.14.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2368787
--------------------------------------------------------------------------------
================================================================================
python-starlette-0.47.0-1.el10_1 (FEDORA-EPEL-2025-c5e1668422)
The little ASGI library that shines
--------------------------------------------------------------------------------
Update Information:
Starlette 0.47.0 (May 29, 2025)
Added
Add support for ASGI pathsend extension.
Add partitioned attribute to Response.set_cookie.
Changed
Change methods parameter type from list[str] to Collection[str].
Replace import typing by from typing import ... in the whole codebase.
Fixed
Mark ExceptionMiddleware.http_exception as async to prevent thread creation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 30 2025 Packit <[email protected]> - 0.47.0-1
- Update to 0.47.0 upstream release
- Resolves: rhbz#2369219
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2369219 - python-starlette-0.47.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2369219
--------------------------------------------------------------------------------
================================================================================
rust-av1-grain-0.2.4-1.el10_1 (FEDORA-EPEL-2025-d41929ae3f)
Helpers for generating and parsing AV1 film grain data
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.2.4-1
- Update to version 0.2.4; Fixes RHBZ#2367735
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.2.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-cc-1.2.25-1.el10_1 (FEDORA-EPEL-2025-bf04636581)
Build-time dependency for Cargo build scripts to invoke the native C compiler
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.25.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 1.2.25-1
- Update to version 1.2.25; Fixes RHBZ#2368170
--------------------------------------------------------------------------------
================================================================================
rust-clap-4.5.39-1.el10_1 (FEDORA-EPEL-2025-72140d2854)
Simple to use, efficient, and full-featured Command Line Argument Parser
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.39-1
- Update to version 4.5.39; Fixes RHBZ#2368827
--------------------------------------------------------------------------------
================================================================================
rust-clap_builder-4.5.39-1.el10_1 (FEDORA-EPEL-2025-72140d2854)
Simple to use, efficient, and full-featured Command Line Argument Parser
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.39-1
- Update to version 4.5.39; Fixes RHBZ#2368824
--------------------------------------------------------------------------------
================================================================================
rust-clap_complete-4.5.52-1.el10_1 (FEDORA-EPEL-2025-72140d2854)
Generate shell completion scripts for your clap::Command
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.52-1
- Update to version 4.5.52; Fixes RHBZ#2368825
--------------------------------------------------------------------------------
================================================================================
rust-clap_complete_nushell-4.5.6-1.el10_1 (FEDORA-EPEL-2025-72140d2854)
Generator library used with clap for Nushell completion scripts
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.6-1
- Update to version 4.5.6; Fixes RHBZ#2368826
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
4.5.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-cursor-icon-1.2.0-1.el10_1 (FEDORA-EPEL-2025-c791a0940a)
Cross platform cursor icon type
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 1.2.0-1
- Update to version 1.2.0; Fixes RHBZ#2368457
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-derive-where-1.4.0-1.el10_1 (FEDORA-EPEL-2025-6f92aca3db)
Deriving with custom trait bounds
--------------------------------------------------------------------------------
Update Information:
Update to version 1.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 1.4.0-1
- Update to version 1.4.0; Fixes RHBZ#2363536
--------------------------------------------------------------------------------
================================================================================
rust-hyper-rustls-0.27.6-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1)
Rustls+hyper integration for pure rust HTTPS
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.27.6-1
- Update to version 0.27.6; Fixes RHBZ#2368156
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.27.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-prettyplease-0.2.33-1.el10_1 (FEDORA-EPEL-2025-5ce01c5a46)
Minimal syn syntax tree pretty-printer
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.33.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.2.33-1
- Update to version 0.2.33; Fixes RHBZ#2369523
--------------------------------------------------------------------------------
================================================================================
rust-webpki-roots-1.0.0-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1)
Mozilla's CA root certificates for use with webpki
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 26 2025 Fabio Valentini <[email protected]> - 1.0.0-1
- Update to version 1.0.0; Fixes RHBZ#2362543
--------------------------------------------------------------------------------
================================================================================
rust-webpki-roots0.26-0.26.11-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1)
Mozilla's CA root certificates for use with webpki
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.26.11-1
- Initial import (webpki-roots 0.26 compat package)
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
