The following Fedora EPEL 10.1 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-4fc78d5a83
python-starlette-0.47.0-2.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
gn-2288^20251104git092f4f0d612e-1.el10_1
lasso-2.9.0-1.el10_1
rust-bigdecimal-0.4.9-1.el10_1
rust-reqsign-0.18.1-1.el10_1
rust-reqsign-aws-v4-2.0.1-1.el10_1
rust-reqsign-command-execute-tokio-2.0.1-1.el10_1
rust-reqsign-core-2.0.1-1.el10_1
rust-reqsign-file-read-tokio-2.0.1-1.el10_1
rust-reqsign-http-send-reqwest-2.0.1-1.el10_1
Details about builds:
================================================================================
gn-2288^20251104git092f4f0d612e-1.el10_1 (FEDORA-EPEL-2025-ccf5e47ac0)
Meta-build system that generates build files for Ninja
--------------------------------------------------------------------------------
Update Information:
Update to version 2288.
Refactor container update by preferring the range insert. This should be a
modest performance optimization.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 4 2025 Benjamin A. Beasley <[email protected]> -
2288^20251104git092f4f0d612e-1
- Update to version 2288
--------------------------------------------------------------------------------
================================================================================
lasso-2.9.0-1.el10_1 (FEDORA-EPEL-2025-6099a398a7)
Liberty Alliance Single Sign On
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.0
Fixes CVE-2025-46705
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 19 2025 Xavier Bachelot <[email protected]> - 2.9.0-1
- Update to 2.9.0 (RHBZ#2387825)
* Fri Aug 15 2025 Python Maint <[email protected]> - 2.8.2-21
- Rebuilt for Python 3.14.0rc2 bytecode
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
2.8.2-20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jul 7 2025 Jitka Plesnikova <[email protected]> - 2.8.2-19
- Perl 5.42 rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 2.8.2-18
- Rebuilt for Python 3.14
--------------------------------------------------------------------------------
================================================================================
rust-bigdecimal-0.4.9-1.el10_1 (FEDORA-EPEL-2025-7e7c60c280)
Arbitrary precision decimal numbers
--------------------------------------------------------------------------------
Update Information:
Update to version 0.4.9: https://github.com/akubera/bigdecimal-
rs/releases/tag/v0.4.9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 4 2025 Benjamin A. Beasley <[email protected]> - 0.4.9-1
- Update to version 0.4.9; Fixes RHBZ#2405017
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.4.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2405017 - rust-bigdecimal-0.4.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2405017
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-0.18.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
Signing HTTP requests for popular cloud services
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 0.18.1-1
- Update to version 0.18.1; Fixes RHBZ#2411981
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 0.18.0-1
- Update to version 0.18.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-aws-v4-2.0.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
AWS SigV4 signing implementation for reqsign
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 2.0.1-1
- Update to version 2.0.1; Fixes RHBZ#2411980
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 2.0.0-1
- Update to version 2.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-command-execute-tokio-2.0.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
Tokio-based command execution implementation for reqsign
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 2.0.1-1
- Update to version 2.0.1; Fixes RHBZ#2411979
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 2.0.0-1
- Update to version 2.0.0; Fixes RHBZ#2402442
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-core-2.0.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
Signing API requests without effort
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 2.0.1-1
- Update to version 2.0.1; Fixes RHBZ#2411978
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 2.0.0-1
- Update to version 2.0.0; Fixes RHBZ#2402441
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-file-read-tokio-2.0.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
Tokio-based file reader implementation for reqsign
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 2.0.1-1
- Update to version 2.0.1; Fixes RHBZ#2411983
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 2.0.0-1
- Update to version 2.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
================================================================================
rust-reqsign-http-send-reqwest-2.0.1-1.el10_1 (FEDORA-EPEL-2025-6baec30555)
Reqwest-based HTTP client implementation for reqsign
--------------------------------------------------------------------------------
Update Information:
Update rust-reqsign to 0.18.1 and rust-reqsign-* to 2.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 5 2025 Benjamin A. Beasley <[email protected]> - 2.0.1-1
- Update to version 2.0.1; Fixes RHBZ#2411982
* Thu Oct 23 2025 Benjamin A. Beasley <[email protected]> - 2.0.0-1
- Update to version 2.0.0; Fixes RHBZ#2402443
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2411978 - rust-reqsign-core-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411978
[ 2 ] Bug #2411979 - rust-reqsign-command-execute-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411979
[ 3 ] Bug #2411980 - rust-reqsign-aws-v4-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411980
[ 4 ] Bug #2411981 - rust-reqsign-0.18.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411981
[ 5 ] Bug #2411982 - rust-reqsign-http-send-reqwest-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411982
[ 6 ] Bug #2411983 - rust-reqsign-file-read-tokio-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2411983
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
