The following Fedora EPEL 10.1 Security updates need testing:
Age URL
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6401fbfc0c
java-latest-openjdk-24.0.2.0.12-1.rolling.el10_1
java-latest-openjdk-portable-24.0.2.0.12-1.rolling.el8
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-94f44962fe
chromium-138.0.7204.168-1.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
GitPython-3.1.45-1.el10_1
botan2-2.19.5-7.el10_1
catch-3.8.1-1.el10_1
oidc-agent-5.3.3-1.el10_1
opensmtpd-7.7.0p0-2.el10_1
perl-Test-UNIXSock-0.4-1.el10_1
python-urlgrabber-4.1.0-22.el10_1
rust-postcard-1.1.3-1.el10_1
rust-postcard-derive-0.2.2-1.el10_1
xdg-terminal-exec-0.13.2-1.el10_1
Details about builds:
================================================================================
GitPython-3.1.45-1.el10_1 (FEDORA-EPEL-2025-4c110ca122)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.45
https://github.com/gitpython-developers/GitPython/releases/tag/3.1.45
https://github.com/gitpython-developers/GitPython/releases/tag/3.1.44
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2025 Benjamin A. Beasley <[email protected]> - 3.1.45-1
- Update to 3.1.45 (close RHBZ#2383187)
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
3.1.43-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 3.1.43-3
- Rebuilt for Python 3.14
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
3.1.43-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2383187 - GitPython-3.1.45 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383187
--------------------------------------------------------------------------------
================================================================================
botan2-2.19.5-7.el10_1 (FEDORA-EPEL-2025-9c73449be0)
Crypto and TLS for C++11
--------------------------------------------------------------------------------
Update Information:
fix vulnerability CVE-2024-50383 (rhbz#2321555)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Carlos Rodriguez-Fernandez <[email protected]> -
2.19.5-7
- fix vulnerability CVE-2024-50383 (rhbz#2321555)
* Fri Oct 4 2024 Frantisek Sumsal <[email protected]> - 2.19.5-6
- Update license SPDX identifier
* Wed Aug 28 2024 Miroslav Suchý <[email protected]> - 2.19.5-5
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2321555 - CVE-2024-50383 botan2: compiler-induced side channel in
lib/utils/donna128.h [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2321555
--------------------------------------------------------------------------------
================================================================================
catch-3.8.1-1.el10_1 (FEDORA-EPEL-2025-ea703500ca)
Modern, C++-native, header-only, framework for unit-tests, TDD and BDD
--------------------------------------------------------------------------------
Update Information:
Update to 3.8.1 upstream release
https://github.com/catchorg/Catch2/blob/v3.8.1/docs/release-notes.md
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 9 2025 Tom Hughes <[email protected]> - 3.8.1-1
- Update to 3.8.1 upstream release
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
3.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Jan 6 2025 Tom Hughes <[email protected]> - 3.8.0-1
- Update to 3.8.0 upstream release
* Tue Sep 17 2024 Tom Hughes <[email protected]> - 3.7.1-1
- Update to 3.7.1 upstream release
* Thu Aug 15 2024 Tom Hughes <[email protected]> - 3.7.0-1
- Update to 3.7.0 upstream release
--------------------------------------------------------------------------------
================================================================================
oidc-agent-5.3.3-1.el10_1 (FEDORA-EPEL-2025-b1c32886c8)
Managing OpenID Connect tokens on the command line
--------------------------------------------------------------------------------
Update Information:
oidc-agent 5.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Mattias Ellert <[email protected]> - 5.3.3-1
- Update to version 5.3.3
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
5.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jul 19 2025 Mattias Ellert <[email protected]> - 5.3.2-1
- Update to version 5.3.2
--------------------------------------------------------------------------------
================================================================================
opensmtpd-7.7.0p0-2.el10_1 (FEDORA-EPEL-2025-b0585b279f)
Free implementation of the server-side SMTP protocol as defined by RFC 5321
--------------------------------------------------------------------------------
Update Information:
opensmtpd: fix spec parameters
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Denis Fateyev <[email protected]> - 7.7.0p0-2
- Small cleanup: invalid group id, pid path and description
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2379483 - smtpd.conf(5) examples use wrong group _smtpd
https://bugzilla.redhat.com/show_bug.cgi?id=2379483
--------------------------------------------------------------------------------
================================================================================
perl-Test-UNIXSock-0.4-1.el10_1 (FEDORA-EPEL-2025-d790ad362c)
Testing UNIX domain socket program
--------------------------------------------------------------------------------
Update Information:
First build.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 14 2025 Xavier Bachelot <[email protected]> 0.4-1
- Initial spec file
--------------------------------------------------------------------------------
================================================================================
python-urlgrabber-4.1.0-22.el10_1 (FEDORA-EPEL-2025-7b1163c494)
A high-level cross-protocol url-grabber
--------------------------------------------------------------------------------
Update Information:
build for epel10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
4.1.0-22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 4.1.0-21
- Rebuilt for Python 3.14
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
4.1.0-20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Sep 4 2024 Miroslav Suchý <[email protected]> - 4.1.0-19
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
4.1.0-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 4.1.0-17
- Rebuilt for Python 3.13
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
4.1.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
4.1.0-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-postcard-1.1.3-1.el10_1 (FEDORA-EPEL-2025-4b5cc26f34)
No_std + serde compatible message library for Rust
--------------------------------------------------------------------------------
Update Information:
https://github.com/jamesmunns/postcard/compare/postcard/v1.1.2...postcard/v1.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Benjamin A. Beasley <[email protected]> - 1.1.3-1
- Update to version 1.1.3; Fixes RHBZ#2383265
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2383265 - rust-postcard-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383265
[ 2 ] Bug #2383266 - rust-postcard-derive-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383266
--------------------------------------------------------------------------------
================================================================================
rust-postcard-derive-0.2.2-1.el10_1 (FEDORA-EPEL-2025-4b5cc26f34)
No_std + serde compatible message library for Rust - Derive Crate
--------------------------------------------------------------------------------
Update Information:
https://github.com/jamesmunns/postcard/compare/postcard/v1.1.2...postcard/v1.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Benjamin A. Beasley <[email protected]> - 0.2.2-1
- Update to version 0.2.2; Fixes RHBZ#2383266
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2383265 - rust-postcard-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383265
[ 2 ] Bug #2383266 - rust-postcard-derive-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383266
--------------------------------------------------------------------------------
================================================================================
xdg-terminal-exec-0.13.2-1.el10_1 (FEDORA-EPEL-2025-29f24530a3)
Proposed XDG Default Terminal Execution Spec implementation
--------------------------------------------------------------------------------
Update Information:
v0.13.2
Change dir for unsupported --dir= arg, wip #68
v0.13.1
Configurable delimiter, help message
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 26 2025 Packit <[email protected]> - 0.13.2-1
- Update to 0.13.2 upstream release
- Resolves: rhbz#2375083
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2375083 - xdg-terminal-exec-0.13.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375083
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
