The following Fedora EPEL 9 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9c4456ae83
perl-YAML-Syck-1.36-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-cf5aa6c3bb
python-sqlparse-0.4.2-14.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
fluidsynth-2.4.8-2.el9
rust-axum-0.8.6-1.el9
rust-axum-core-0.5.5-1.el9
rust-tokio-tungstenite-0.28.0-1.el9
rust-tungstenite-0.28.0-1.el9
Details about builds:
================================================================================
fluidsynth-2.4.8-2.el9 (FEDORA-EPEL-2025-ae4b2d1417)
Real-time software synthesizer
--------------------------------------------------------------------------------
Update Information:
Fix world writeable /run/lock/fluidsynth
Update to 2.4.8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 20 2025 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.4.8-2
- Fix world writeable /run/lock/fluidsynth
* Thu Oct 16 2025 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.4.8-1
- Update to 2.4.8
- Fix world writeable /run/lock/fluidsynth
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2404360 - /run/lock/fluidsynth is world-writable
https://bugzilla.redhat.com/show_bug.cgi?id=2404360
--------------------------------------------------------------------------------
================================================================================
rust-axum-0.8.6-1.el9 (FEDORA-EPEL-2025-6638026203)
Web framework that focuses on ergonomics and modularity
--------------------------------------------------------------------------------
Update Information:
rust-axum
0.8.6
Released without changes to fix docs.rs build.
0.8.5
fixed: Reject JSON request bodies with trailing characters after the JSON
document
added: Implement OptionalFromRequest for Multipart
added: Getter methods Location::{status_code, location}
added: Support for writing arbitrary binary data into server-sent events
added: middleware::ResponseAxumBodyLayer for mapping response body to
axum::body::Body
added: impl FusedStream for WebSocket
changed: The sse module and Sse type no longer depend on the tokio feature
changed: If the location given to one of Redirects constructors is not a valid
header value, instead of panicking on construction, the IntoResponse impl now
returns
an HTTP 500, just like Json does when serialization fails
changed: Update minimum rust version to 1.78
rust-axum-core
0.5.5
Released without changes to fix docs.rs build.
0.5.4
fixed: Removed unused rustversion dependency
0.5.3
added: DefaultBodyLimit::apply for changing the DefaultBodyLimit inside
extractors.
changed: Update minimum rust version to 1.78
rust-tokio-tungstenite
0.28.0
Update tungstenite to 0.18.0. See tungstenite release.
0.27.0
See performance updates in tungstenite-rs.
rust-tungstenite
0.28.0
Reduce Error size 136 -> 32 by boxing internals of Error::Http,
Error::WriteBufferFull,
ProtocolError::InvalidHeader, TlsError::Native, TlsError::Rustls.
Dependency update (socket to 0.6.0).
Add into_inner() to the WebSocket, so that the user can extract the underlying
stream.
Address the edge-case for the WebSocket request generation when tungstenite is
built with -Zfmt-debug=none.
0.27.0
Fix large message read performance by enforcing max read_buffer_size read
chunks.
Make Hash implementation consistent for Utf8Bytes payloads.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 20 2025 Benjamin A. Beasley <[email protected]> - 0.8.6-1
- Update to version 0.8.6; Fixes RHBZ#2399996
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2308209 - rust-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2308209
[ 2 ] Bug #2312368 - rust-tokio-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2312368
[ 3 ] Bug #2399996 - rust-axum-0.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399996
[ 4 ] Bug #2399997 - rust-axum-core-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399997
--------------------------------------------------------------------------------
================================================================================
rust-axum-core-0.5.5-1.el9 (FEDORA-EPEL-2025-6638026203)
Core types and traits for axum
--------------------------------------------------------------------------------
Update Information:
rust-axum
0.8.6
Released without changes to fix docs.rs build.
0.8.5
fixed: Reject JSON request bodies with trailing characters after the JSON
document
added: Implement OptionalFromRequest for Multipart
added: Getter methods Location::{status_code, location}
added: Support for writing arbitrary binary data into server-sent events
added: middleware::ResponseAxumBodyLayer for mapping response body to
axum::body::Body
added: impl FusedStream for WebSocket
changed: The sse module and Sse type no longer depend on the tokio feature
changed: If the location given to one of Redirects constructors is not a valid
header value, instead of panicking on construction, the IntoResponse impl now
returns
an HTTP 500, just like Json does when serialization fails
changed: Update minimum rust version to 1.78
rust-axum-core
0.5.5
Released without changes to fix docs.rs build.
0.5.4
fixed: Removed unused rustversion dependency
0.5.3
added: DefaultBodyLimit::apply for changing the DefaultBodyLimit inside
extractors.
changed: Update minimum rust version to 1.78
rust-tokio-tungstenite
0.28.0
Update tungstenite to 0.18.0. See tungstenite release.
0.27.0
See performance updates in tungstenite-rs.
rust-tungstenite
0.28.0
Reduce Error size 136 -> 32 by boxing internals of Error::Http,
Error::WriteBufferFull,
ProtocolError::InvalidHeader, TlsError::Native, TlsError::Rustls.
Dependency update (socket to 0.6.0).
Add into_inner() to the WebSocket, so that the user can extract the underlying
stream.
Address the edge-case for the WebSocket request generation when tungstenite is
built with -Zfmt-debug=none.
0.27.0
Fix large message read performance by enforcing max read_buffer_size read
chunks.
Make Hash implementation consistent for Utf8Bytes payloads.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 20 2025 Benjamin A. Beasley <[email protected]> - 0.5.5-1
- Update to version 0.5.5; Fixes RHBZ#2399997
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2308209 - rust-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2308209
[ 2 ] Bug #2312368 - rust-tokio-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2312368
[ 3 ] Bug #2399996 - rust-axum-0.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399996
[ 4 ] Bug #2399997 - rust-axum-core-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399997
--------------------------------------------------------------------------------
================================================================================
rust-tokio-tungstenite-0.28.0-1.el9 (FEDORA-EPEL-2025-6638026203)
Tokio binding for Tungstenite
--------------------------------------------------------------------------------
Update Information:
rust-axum
0.8.6
Released without changes to fix docs.rs build.
0.8.5
fixed: Reject JSON request bodies with trailing characters after the JSON
document
added: Implement OptionalFromRequest for Multipart
added: Getter methods Location::{status_code, location}
added: Support for writing arbitrary binary data into server-sent events
added: middleware::ResponseAxumBodyLayer for mapping response body to
axum::body::Body
added: impl FusedStream for WebSocket
changed: The sse module and Sse type no longer depend on the tokio feature
changed: If the location given to one of Redirects constructors is not a valid
header value, instead of panicking on construction, the IntoResponse impl now
returns
an HTTP 500, just like Json does when serialization fails
changed: Update minimum rust version to 1.78
rust-axum-core
0.5.5
Released without changes to fix docs.rs build.
0.5.4
fixed: Removed unused rustversion dependency
0.5.3
added: DefaultBodyLimit::apply for changing the DefaultBodyLimit inside
extractors.
changed: Update minimum rust version to 1.78
rust-tokio-tungstenite
0.28.0
Update tungstenite to 0.18.0. See tungstenite release.
0.27.0
See performance updates in tungstenite-rs.
rust-tungstenite
0.28.0
Reduce Error size 136 -> 32 by boxing internals of Error::Http,
Error::WriteBufferFull,
ProtocolError::InvalidHeader, TlsError::Native, TlsError::Rustls.
Dependency update (socket to 0.6.0).
Add into_inner() to the WebSocket, so that the user can extract the underlying
stream.
Address the edge-case for the WebSocket request generation when tungstenite is
built with -Zfmt-debug=none.
0.27.0
Fix large message read performance by enforcing max read_buffer_size read
chunks.
Make Hash implementation consistent for Utf8Bytes payloads.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 20 2025 Benjamin A. Beasley <[email protected]> - 0.28.0-1
- Update to version 0.28.0; Fixes RHBZ#2312368
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2308209 - rust-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2308209
[ 2 ] Bug #2312368 - rust-tokio-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2312368
[ 3 ] Bug #2399996 - rust-axum-0.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399996
[ 4 ] Bug #2399997 - rust-axum-core-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399997
--------------------------------------------------------------------------------
================================================================================
rust-tungstenite-0.28.0-1.el9 (FEDORA-EPEL-2025-6638026203)
Lightweight stream-based WebSocket implementation
--------------------------------------------------------------------------------
Update Information:
rust-axum
0.8.6
Released without changes to fix docs.rs build.
0.8.5
fixed: Reject JSON request bodies with trailing characters after the JSON
document
added: Implement OptionalFromRequest for Multipart
added: Getter methods Location::{status_code, location}
added: Support for writing arbitrary binary data into server-sent events
added: middleware::ResponseAxumBodyLayer for mapping response body to
axum::body::Body
added: impl FusedStream for WebSocket
changed: The sse module and Sse type no longer depend on the tokio feature
changed: If the location given to one of Redirects constructors is not a valid
header value, instead of panicking on construction, the IntoResponse impl now
returns
an HTTP 500, just like Json does when serialization fails
changed: Update minimum rust version to 1.78
rust-axum-core
0.5.5
Released without changes to fix docs.rs build.
0.5.4
fixed: Removed unused rustversion dependency
0.5.3
added: DefaultBodyLimit::apply for changing the DefaultBodyLimit inside
extractors.
changed: Update minimum rust version to 1.78
rust-tokio-tungstenite
0.28.0
Update tungstenite to 0.18.0. See tungstenite release.
0.27.0
See performance updates in tungstenite-rs.
rust-tungstenite
0.28.0
Reduce Error size 136 -> 32 by boxing internals of Error::Http,
Error::WriteBufferFull,
ProtocolError::InvalidHeader, TlsError::Native, TlsError::Rustls.
Dependency update (socket to 0.6.0).
Add into_inner() to the WebSocket, so that the user can extract the underlying
stream.
Address the edge-case for the WebSocket request generation when tungstenite is
built with -Zfmt-debug=none.
0.27.0
Fix large message read performance by enforcing max read_buffer_size read
chunks.
Make Hash implementation consistent for Utf8Bytes payloads.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 20 2025 Benjamin A. Beasley <[email protected]> - 0.28.0-1
- Update to version 0.28.0; Fixes RHBZ#2308209
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2308209 - rust-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2308209
[ 2 ] Bug #2312368 - rust-tokio-tungstenite-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2312368
[ 3 ] Bug #2399996 - rust-axum-0.8.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399996
[ 4 ] Bug #2399997 - rust-axum-core-0.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2399997
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
