The following Fedora EPEL 10.2 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-8018fd7ca5
lemonldap-ng-2.21.3-1.el10_2
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f73be56762
forgejo-12.0.3-1.el10_2
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-297a408c18
perl-Cpanel-JSON-XS-4.40-1.el10_2
The following builds have been pushed to Fedora EPEL 10.2 updates-testing
arpwatch-3.8-6.el10_2
baresip-4.1.0-1.el10_2
ghc9.10-9.10.3-11.el10_2
gn-2281^20250913gitaa3ecaecac29-1.el10_2
jupyterlab-4.4.7-1.el10_2
libre-4.1.0-1.el10_2
podman-tui-1.8.0-1.el10_2
prometheus-podman-exporter-1.18.1-1.el10_2
pypolicyd-spf-3.1.0-6.el10_2
python-pymilter-1.0.6-14.el10_2
python-pyspf-2.0.14-26.el10_2
python3-py3dns-4.0.0-11.el10_2
Details about builds:
================================================================================
arpwatch-3.8-6.el10_2 (FEDORA-EPEL-2025-9c51c100d1)
Network monitoring tools for tracking IP addresses on a network
--------------------------------------------------------------------------------
Update Information:
Generate ethercodes.dat from latest oui.csv
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Benjamin A. Beasley <[email protected]> - 14:3.8-6
- Generate ethercodes.dat from latest oui.csv
--------------------------------------------------------------------------------
================================================================================
baresip-4.1.0-1.el10_2 (FEDORA-EPEL-2025-dce3aa8ccf)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
Baresip v4.1.0 (2025-09-10)
package: Fix not working libdir
ci: temporary workaround for choco openssl failure
call: add getter call state name
play: set audio path to config
ci: update actions/checkout@v5
audio: avoid tx underruns if ausrc delivers small audio frames
test: ua - event_handler remove unused variables
test: ua - fix index for domain_add
jbuf: adaptive playout time calculation
config: fix video_jitter_buffer_size and add deprecation warnings
ua: avoid duplicates of URI params
gst: fix crash on shutdown
ua: avoid suffix for contact user if possible
doc: update jbuf settings in examples
uag: avoid peer-to-peer calls to registered accounts
message: log when UA is not found for incoming MESSAGE
ci/build/macos: use ffmpeg 7
test: convert some define values to enum
readme: update list of platforms and compilers
test: fix some pylint warnings in ccheck
jbuf: remove payload type from struct, only set not read
libre v4.1.0 (2025-09-10)
ci: temporary workaround for choco openssl failure
test: add support for IPv6 on UDP-test
ci: enable Windows testing when OpenSSL is disabled
websock: remove unused peer member
test: add testing of udp_rxsz_set() and udp_sockbuf_set()
ci/build: select xcode version 16.2
udp: combine udp_recv_helper() and udp_recv_packet()
test: add support for UDP multicast test
ci: update actions/checkout@v5
uri: remove uri_escape_user()
uri: remove some unused escape functions
test: add support for IPv6 and TURN
test: add support for testing more DTLS-SRTP suites
dtls: remove dtls_set_handlers() -- unused
tls: remove tls_set_certificate_der() -- unused
test: set low MTU in DTLS-test
test: add support for TURN mock-server authentication
tls: tls_set_resumption() -- change const enum to enum
ci/abi: bump old abi
ci/coverage: bump min coverage
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Robert Scheck <[email protected]> 4.1.0-1
- Upgrade to 4.1.0 (#2394394)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2394384 - libre-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2394384
[ 2 ] Bug #2394394 - baresip-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2394394
--------------------------------------------------------------------------------
================================================================================
ghc9.10-9.10.3-11.el10_2 (FEDORA-EPEL-2025-31d6bdd636)
Glasgow Haskell Compiler
--------------------------------------------------------------------------------
Update Information:
https://downloads.haskell.org/~ghc/9.10.3/docs/users_guide/9.10.3-notes.html
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 11 2025 Jens Petersen <[email protected]> - 9.10.3-11
- https://downloads.haskell.org/~ghc/9.10.3/docs/users_guide/9.10.3-notes.html
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
9.10.2-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jun 29 2025 Jens Petersen <[email protected]> - 9.10.2-9
- add openSUSE's backport of riscv64 NCG
- add conflicts for other ghcX.Y-compiler-default packages
--------------------------------------------------------------------------------
================================================================================
gn-2281^20250913gitaa3ecaecac29-1.el10_2 (FEDORA-EPEL-2025-483a95fc68)
Meta-build system that generates build files for Ninja
--------------------------------------------------------------------------------
Update Information:
Update to version 2281
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Benjamin A. Beasley <[email protected]> -
2281^20250913gitaa3ecaecac29-1
- Update to version 2281
--------------------------------------------------------------------------------
================================================================================
jupyterlab-4.4.7-1.el10_2 (FEDORA-EPEL-2025-b41d002be9)
JupyterLab computational environment
--------------------------------------------------------------------------------
Update Information:
Update to 4.4.7 (rhbz#2392881)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 3 2025 Lumir Balhar <[email protected]> - 4.4.7-1
- Update to 4.4.7 (rhbz#2392881)
* Sun Aug 17 2025 Lumir Balhar <[email protected]> - 4.4.6-1
- Update to 4.4.6 (rhbz#2388776)
* Fri Aug 15 2025 Python Maint <[email protected]> - 4.4.5-2
- Rebuilt for Python 3.14.0rc2 bytecode
* Thu Jul 31 2025 Lumir Balhar <[email protected]> - 4.4.5-1
- Update to 4.4.5 (rhbz#2382133)
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
4.4.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jun 29 2025 Lumir Balhar <[email protected]> - 4.4.4-1
- Update to 4.4.4 (rhbz#2375330)
* Fri Jun 6 2025 Python Maint <[email protected]> - 4.4.3-2
- Rebuilt for Python 3.14
* Mon May 26 2025 Lumir Balhar <[email protected]> - 4.4.3-1
- Update to 4.4.3 (rhbz#2368575)
* Mon May 26 2025 Lumir Balhar <[email protected]> - 4.4.2-2
- Use cogapp for generated content
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2389812 - CVE-2025-54881 jupyterlab: Mermaid cross site scripting
[epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2389812
[ 2 ] Bug #2389813 - CVE-2025-54880 jupyterlab: Mermaid cross site scripting
[epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2389813
--------------------------------------------------------------------------------
================================================================================
libre-4.1.0-1.el10_2 (FEDORA-EPEL-2025-dce3aa8ccf)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
Baresip v4.1.0 (2025-09-10)
package: Fix not working libdir
ci: temporary workaround for choco openssl failure
call: add getter call state name
play: set audio path to config
ci: update actions/checkout@v5
audio: avoid tx underruns if ausrc delivers small audio frames
test: ua - event_handler remove unused variables
test: ua - fix index for domain_add
jbuf: adaptive playout time calculation
config: fix video_jitter_buffer_size and add deprecation warnings
ua: avoid duplicates of URI params
gst: fix crash on shutdown
ua: avoid suffix for contact user if possible
doc: update jbuf settings in examples
uag: avoid peer-to-peer calls to registered accounts
message: log when UA is not found for incoming MESSAGE
ci/build/macos: use ffmpeg 7
test: convert some define values to enum
readme: update list of platforms and compilers
test: fix some pylint warnings in ccheck
jbuf: remove payload type from struct, only set not read
libre v4.1.0 (2025-09-10)
ci: temporary workaround for choco openssl failure
test: add support for IPv6 on UDP-test
ci: enable Windows testing when OpenSSL is disabled
websock: remove unused peer member
test: add testing of udp_rxsz_set() and udp_sockbuf_set()
ci/build: select xcode version 16.2
udp: combine udp_recv_helper() and udp_recv_packet()
test: add support for UDP multicast test
ci: update actions/checkout@v5
uri: remove uri_escape_user()
uri: remove some unused escape functions
test: add support for IPv6 and TURN
test: add support for testing more DTLS-SRTP suites
dtls: remove dtls_set_handlers() -- unused
tls: remove tls_set_certificate_der() -- unused
test: set low MTU in DTLS-test
test: add support for TURN mock-server authentication
tls: tls_set_resumption() -- change const enum to enum
ci/abi: bump old abi
ci/coverage: bump min coverage
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Robert Scheck <[email protected]> 4.1.0-1
- Upgrade to 4.1.0 (#2394384)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2394384 - libre-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2394384
[ 2 ] Bug #2394394 - baresip-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2394394
--------------------------------------------------------------------------------
================================================================================
podman-tui-1.8.0-1.el10_2 (FEDORA-EPEL-2025-826e857d00)
Podman Terminal User Interface
--------------------------------------------------------------------------------
Update Information:
podman-tui release 1.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Navid Yaghoobi <[email protected]> - 1.8.0-1
- Release v1.8.0
* Fri Aug 15 2025 Maxwell G <[email protected]> - 1.7.0-3
- Rebuild for golang-1.25.0
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.7.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2391605 - CVE-2025-58058 podman-tui: github.com/ulikunitz/xz leaks
memory [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2391605
[ 2 ] Bug #2391613 - CVE-2025-58058 podman-tui: github.com/ulikunitz/xz leaks
memory [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2391613
[ 3 ] Bug #2391638 - CVE-2025-58058 podman-tui: github.com/ulikunitz/xz leaks
memory [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2391638
[ 4 ] Bug #2391670 - CVE-2025-58058 podman-tui: github.com/ulikunitz/xz leaks
memory [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2391670
--------------------------------------------------------------------------------
================================================================================
prometheus-podman-exporter-1.18.1-1.el10_2 (FEDORA-EPEL-2025-0e84d6eaa3)
Prometheus exporter for podman environment
--------------------------------------------------------------------------------
Update Information:
prometheus-podman-exporter v1.18.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 13 2025 Navid Yaghoobi <[email protected]> - 1.18.1-1
- Release v1.18.1
* Fri Aug 15 2025 Maxwell G <[email protected]> - 1.17.2-3
- Rebuild for golang-1.25.0
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.17.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2391248 - prometheus-podman-exporter-1.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2391248
[ 2 ] Bug #2391606 - CVE-2025-58058 prometheus-podman-exporter:
github.com/ulikunitz/xz leaks memory [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2391606
[ 3 ] Bug #2391614 - CVE-2025-58058 prometheus-podman-exporter:
github.com/ulikunitz/xz leaks memory [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2391614
[ 4 ] Bug #2391639 - CVE-2025-58058 prometheus-podman-exporter:
github.com/ulikunitz/xz leaks memory [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2391639
[ 5 ] Bug #2391671 - CVE-2025-58058 prometheus-podman-exporter:
github.com/ulikunitz/xz leaks memory [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2391671
--------------------------------------------------------------------------------
================================================================================
pypolicyd-spf-3.1.0-6.el10_2 (FEDORA-EPEL-2025-349aee96d8)
SPF Policy Server for Postfix (Python implementation)
--------------------------------------------------------------------------------
Update Information:
Add python-pymilter to initial builds to make them installable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2025 Python Maint <[email protected]> - 3.1.0-6
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
3.1.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 3.1.0-4
- Rebuilt for Python 3.14
* Tue Feb 11 2025 Zbigniew JÄdrzejewski-Szmek <[email protected]> - 3.1.0-3
- Add sysusers.d config file to allow rpm to create users/groups automatically
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
3.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Oct 9 2024 Bojan Smojver <[email protected]> 3.1.0-1
- Update to 3.1.0
* Wed Jul 24 2024 Miroslav Suchý <[email protected]> - 3.0.4-7
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
3.0.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 3.0.4-5
- Rebuilt for Python 3.13
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
3.0.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
3.0.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368493 - Please branch and build pypolicyd-spf in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2368493
[ 2 ] Bug #2394905 - Please branch and build python-pymilter in epel10 and
epel10.1
https://bugzilla.redhat.com/show_bug.cgi?id=2394905
--------------------------------------------------------------------------------
================================================================================
python-pymilter-1.0.6-14.el10_2 (FEDORA-EPEL-2025-349aee96d8)
Python interface to sendmail milter API
--------------------------------------------------------------------------------
Update Information:
Add python-pymilter to initial builds to make them installable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2025 Python Maint <[email protected]> - 1.0.6-14
- Rebuilt for Python 3.14.0rc2 bytecode
* Mon Jul 28 2025 Sandro <[email protected]> - 1.0.6-13
- Migrate to pyproject macros (RHBZ#2378055)
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.0.6-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Tue Jun 3 2025 Python Maint <[email protected]> - 1.0.6-6
- Rebuilt for Python 3.14
* Wed Mar 12 2025 Sandro <[email protected]> - 1.0.6-5
- Use C17 standard (RHBZ#2341187)
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.0.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Tue Aug 13 2024 Sandro <[email protected]> - 1.0.6-1
- Update to 1.0.6
- Apply patch replacing unittest.makeSuite()
- Close RHBZ#2259637
* Fri Jul 26 2024 Miroslav Suchý <[email protected]> - 1.0.5-9
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.0.5-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 1.0.5-7
- Rebuilt for Python 3.13
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
1.0.5-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
1.0.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368493 - Please branch and build pypolicyd-spf in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2368493
[ 2 ] Bug #2394905 - Please branch and build python-pymilter in epel10 and
epel10.1
https://bugzilla.redhat.com/show_bug.cgi?id=2394905
--------------------------------------------------------------------------------
================================================================================
python-pyspf-2.0.14-26.el10_2 (FEDORA-EPEL-2025-349aee96d8)
Python module and programs for SPF (Sender Policy Framework)
--------------------------------------------------------------------------------
Update Information:
Add python-pymilter to initial builds to make them installable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2025 Python Maint <[email protected]> - 2.0.14-26
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
2.0.14-25
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jul 10 2025 Bojan Smojver <[email protected]> - 2.0.14-24
- Stop using deprecated %py3_build and %py3_install macros (bz#2378094)
* Mon Jun 2 2025 Python Maint <[email protected]> - 2.0.14-23
- Rebuilt for Python 3.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368493 - Please branch and build pypolicyd-spf in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2368493
[ 2 ] Bug #2394905 - Please branch and build python-pymilter in epel10 and
epel10.1
https://bugzilla.redhat.com/show_bug.cgi?id=2394905
--------------------------------------------------------------------------------
================================================================================
python3-py3dns-4.0.0-11.el10_2 (FEDORA-EPEL-2025-349aee96d8)
Python3 DNS library
--------------------------------------------------------------------------------
Update Information:
Add python-pymilter to initial builds to make them installable.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 15 2025 Python Maint <[email protected]> - 4.0.0-11
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
4.0.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 4.0.0-9
- Rebuilt for Python 3.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2368493 - Please branch and build pypolicyd-spf in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2368493
[ 2 ] Bug #2394905 - Please branch and build python-pymilter in epel10 and
epel10.1
https://bugzilla.redhat.com/show_bug.cgi?id=2394905
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
