The following Fedora EPEL 9 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-dfc8e38f18
rust-matchers-0.2.0-1.el9 rust-tracing-subscriber-0.3.20-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-938ea797ca
checkpointctl-1.4.0-2.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-0c4d46b03e
civetweb-1.16-9.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-4eaf593998
chromium-140.0.7339.80-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
barman-3.15.0-1.el9
bitcoin-core-29.1-1.el9
libopenmpt-0.8.3-1.el9
libsidplayfp-2.15.0-1.el9
linenoise-1.0-3.20200312git97d2850.el9
rpmrebuild-2.21-1.el9
Details about builds:
================================================================================
barman-3.15.0-1.el9 (FEDORA-EPEL-2025-8b9db540ff)
Backup and Recovery Manager for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Update to 3.15.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 6 2025 Simone Caronni <[email protected]> - 3.15.0-1
- Update to 3.15.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2386959 - barman-3.15.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2386959
--------------------------------------------------------------------------------
================================================================================
bitcoin-core-29.1-1.el9 (FEDORA-EPEL-2025-9465a65d1b)
Peer to Peer Cryptographic Currency
--------------------------------------------------------------------------------
Update Information:
Update to 29.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 6 2025 Simone Caronni <[email protected]> - 29.1-1
- Update to 29.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2366834 - [abrt] bitcoin-core-desktop: std::filesystem::status():
bitcoin-qt killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=2366834
[ 2 ] Bug #2392917 - bitcoin-core-29.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392917
--------------------------------------------------------------------------------
================================================================================
libopenmpt-0.8.3-1.el9 (FEDORA-EPEL-2025-305ac41026)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
libopenmpt 0.8.3 (2025-09-06)
[Bug] libopenmpt is now compatible with most non-standard builds of libmpg123
which do not by default output signed 16bit PCM.
[Bug] openmpt123: Pausing playback using the space key did not work since 0.8.0.
[Bug] Windows 10 binaries wrongly targeted Windows 11 22H2. They now target
Windows 10 2004.
[Bug] in_openmpt: in_openmpt for Windows XP or later did not ever work in Winamp
2.x. We now provide a build specifically for Winamp 2.x in the Winamp2/ folder
inside the retro.winxp package. The retro.win98 build was not affected.
[Change] in_openmpt: Modern and legacy builds of in_openmpt now officially only
support Winamp 5.x.
IT: Even when the filter cutoff envelope is stopped before its first tick is
applied, the filter should still be activated.
mpg123: Update to v1.33.2 (2025-08-05).
libopenmpt 0.8.2 (2025-07-19)
[Sec] Possible out-of-bounds sample data read in a specific combination of
reverse sample playback + offset past sample loop.
[Bug] Fixed pre-C++20 undefined behaviour due to left-shifting negative integer
values.
[New] Makefile now supports DragonFly BSD.
openmpt123: FLAC multithreaded encoding has been enabled for Windows builds.
Since libopenmpt 0.8.0, swapping between samples on the rear channels could
introduce a click on the front channels.
IT: Volume column slides no longer propagate their effect memory to the regular
effect column volume slides.
FC: Allow files with a sequence size of 0 to load (fixes a broken copy of
cult.smod).
ogg: Update to v1.3.6 (2025-06-16).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 6 2025 Michael Schwendt <[email protected]> - 0.8.3-1
- update to 0.8.3
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
0.8.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jul 19 2025 Michael Schwendt <[email protected]> - 0.8.2-1
- update to 0.8.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2382072 - libopenmpt-0.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2382072
--------------------------------------------------------------------------------
================================================================================
libsidplayfp-2.15.0-1.el9 (FEDORA-EPEL-2025-138b64c2b9)
SID chip music module playing library
--------------------------------------------------------------------------------
Update Information:
libsidplayfp 2.15.0
Compile with fast math, without unsafe optimizations
residfp: reworked the SIMD support, removed the intrinsics code leaving the
compiler vectorize the loop
Extended the new play API
Marked old play API functions as deprecated
libsidplayfp 2.14.0
Rough approximation of MDAC saturation for the 6581
New play API for client side mixing
Minor fixes and optimizations
libsidplayfp 2.13.1
Fix build with inlining disabled
Add missing files to the tarball
Update exsid driver
Fixed an uninitialized warning
libsidplayfp 2.13.0
Add support for c++23 where available
Reworked power on delay
Correctly link to pthread library
Add proper compiler flag when enabling sse4
resid/residfp: Use more bits for the 8580 filter cutoff
resid: reduce aliasing noise
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 13 2025 Karel Volný <[email protected]> - 2.15.0-1
- Update to 2.15.0 (rhbz#2359289)
- See the upstream changes at
https://github.com/libsidplayfp/libsidplayfp/releases
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
2.12.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
linenoise-1.0-3.20200312git97d2850.el9 (FEDORA-EPEL-2025-e35c40aadd)
Minimal replacement for readline
--------------------------------------------------------------------------------
Update Information:
CVE-2025-9810
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 5 2025 Garry T. Williams <[email protected]> -
1.0-3.20200312git97d2850
- Fixed CVE-2025-9810
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2392579 - CVE-2025-9810 linenoise: TOCTOU race in Linenoise
enables arbitrary file overwrite and permission changes [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2392579
--------------------------------------------------------------------------------
================================================================================
rpmrebuild-2.21-1.el9 (FEDORA-EPEL-2025-c6ad6fbfa5)
A tool to build rpm file from rpm database
--------------------------------------------------------------------------------
Update Information:
Latest package from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 5 2025 Anderson Silva <[email protected]> - 2.21-1
- Latest package from upstream.
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
