The following Fedora EPEL 9 Security updates need testing:
Age URL
33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-0d5788d77e
roundcubemail-1.5.12-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-54c41ca693
singularity-ce-4.3.6-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-204f4ee0f5
gdu-5.32.0-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6a38045e00
gobuster-3.8.2-1.el9
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-aec4175816
podman-tui-1.10.0-2.el9
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a9a40c69d3
duc-1.4.6-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
cadical-2.1.3-1.el9
drat-trim-0-0.25.20240427giteffa1dc.el9
prometheus-podman-exporter-1.20.0-1.el9
rust-crossterm-0.29.0-1.el9
rust-crossterm0.28-0.28.1-1.el9
rust-hashlink-0.11.0-1.el9
rust-hashlink0.10-0.10.0-1.el9
rust-hashlink0.9-0.9.1-1.el9
rust-libsqlite3-sys-0.36.0-1.el9
rust-libsqlite3-sys0.28-0.28.0-1.el9
rust-rusqlite-0.38.0-1.el9
rust-rusqlite0.31-0.31.0-1.el9
tmt-1.64.0-3.el9
Details about builds:
================================================================================
cadical-2.1.3-1.el9 (FEDORA-EPEL-2025-8ce79369e2)
Simplified SAT solver
--------------------------------------------------------------------------------
Update Information:
new cadical package and its build dependency drat-trim
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 1 2025 Jerry James <[email protected]> - 1:2.1.3-1
- Version 2.1.3
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
1:2.0.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Jul 17 2024 Fedora Release Engineering <[email protected]> -
1:2.0.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Tue Jul 16 2024 Jerry James <[email protected]> - 1:2.0.0-2
- Install more header files for cryptominisat
- Add a VCS field
* Tue Jun 18 2024 Jerry James <[email protected]> - 1:2.0.0-1
- Version 2.0.0
* Thu Mar 14 2024 Jerry James <[email protected]> - 1:1.9.5-1
- Version 1.9.5
* Tue Jan 23 2024 Fedora Release Engineering <[email protected]> -
1:1.9.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> -
1:1.9.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 10 2024 Jerry James <[email protected]> - 1:1.9.4-1
- Version 1.9.4
- Stop building for 32-bit x86
* Sat Sep 16 2023 Jerry James <[email protected]> - 1:1.7.4-1
- Version 1.7.4
* Fri Sep 15 2023 Jerry James <[email protected]> - 1:1.7.3-1
- Version 1.7.3
* Fri Sep 1 2023 Jerry James <[email protected]> - 1:1.7.1-1
- Version 1.7.1
* Fri Jul 28 2023 Jerry James <[email protected]> - 1:1.7.0-1
- Version 1.7.0
* Wed Jul 19 2023 Fedora Release Engineering <[email protected]> -
1:1.5.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2323502 - please branch cadical for epel 9 and 10
https://bugzilla.redhat.com/show_bug.cgi?id=2323502
[ 2 ] Bug #2424292 - build drat-trim for epel
https://bugzilla.redhat.com/show_bug.cgi?id=2424292
--------------------------------------------------------------------------------
================================================================================
drat-trim-0-0.25.20240427giteffa1dc.el9 (FEDORA-EPEL-2025-8ce79369e2)
Proof checker for DIMACS proofs
--------------------------------------------------------------------------------
Update Information:
new cadical package and its build dependency drat-trim
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 6 2024 Jerry James <[email protected]> - 0-0.25.20240427giteffa1dc
- Update for LRAT bug fixes
* Thu Mar 14 2024 Jerry James <[email protected]> - 0-0.24.20240309git89ddbfb
- Update for proof (de)compression fixes
- Stop building for 32-bit x86
* Wed Jan 24 2024 Fedora Release Engineering <[email protected]> - 0-0.23
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> - 0-0.22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jul 28 2023 Jerry James <[email protected]> - 0-0.21.20230709git16f1d72
- Update for several minor bug fixes
* Wed Jul 19 2023 Fedora Release Engineering <[email protected]> - 0-0.20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <[email protected]> - 0-0.19
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Nov 23 2022 Jerry James <[email protected]> - 0-0.18.20221019gitcbd2915
- Update for drat-gapless and minor bug fixes
* Thu Jul 21 2022 Fedora Release Engineering <[email protected]> - 0-0.17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jul 6 2022 Jerry James <[email protected]> - 0-0.16.20220423git43fce1c
- Update for lrat-check print and off-by-one fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2323502 - please branch cadical for epel 9 and 10
https://bugzilla.redhat.com/show_bug.cgi?id=2323502
[ 2 ] Bug #2424292 - build drat-trim for epel
https://bugzilla.redhat.com/show_bug.cgi?id=2424292
--------------------------------------------------------------------------------
================================================================================
prometheus-podman-exporter-1.20.0-1.el9 (FEDORA-EPEL-2025-bf01fd3ada)
Prometheus exporter for podman environment
--------------------------------------------------------------------------------
Update Information:
release 1.20.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Navid Yaghoobi <[email protected]> - 1.20.0-1
- Release v1.20.0
* Fri Oct 10 2025 Alejandro Sáez <[email protected]> - 1.19.0-2
- rebuild
* Sat Oct 4 2025 Navid Yaghoobi <[email protected]> - 1.19.0-1
- Release v1.19.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2398371 - CVE-2025-47910 prometheus-podman-exporter:
CrossOriginProtection bypass in net/http [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2398371
[ 2 ] Bug #2399019 - CVE-2025-47906 prometheus-podman-exporter: Unexpected
paths returned from LookPath in os/exec [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2399019
[ 3 ] Bug #2407557 - CVE-2025-58189 prometheus-podman-exporter: go crypto/tls
ALPN negotiation error contains attacker controlled information [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2407557
[ 4 ] Bug #2408556 - CVE-2025-61725 prometheus-podman-exporter: Excessive CPU
consumption in ParseAddress in net/mail [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2408556
[ 5 ] Bug #2409012 - CVE-2025-61723 prometheus-podman-exporter: Quadratic
complexity when parsing some invalid inputs in encoding/pem [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2409012
[ 6 ] Bug #2409958 - CVE-2025-58185 prometheus-podman-exporter: Parsing DER
payload can cause memory exhaustion in encoding/asn1 [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2409958
[ 7 ] Bug #2410892 - CVE-2025-58188 prometheus-podman-exporter: Panic when
validating certificates with DSA public keys in crypto/x509 [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2410892
[ 8 ] Bug #2420573 - CVE-2025-47913 prometheus-podman-exporter:
golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected
SSH_AGENT_SUCCESS [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2420573
--------------------------------------------------------------------------------
================================================================================
rust-crossterm-0.29.0-1.el9 (FEDORA-EPEL-2025-2877f39102)
Crossplatform terminal library for manipulating terminals
--------------------------------------------------------------------------------
Update Information:
Update crossterm to 0.29, and provide crossterm 0.28 compatibility packages
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2025 Michel Lind <[email protected]> - 0.29.0-1
- Update to version 0.29.0; Fixes RHBZ#2357617
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.28.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.28.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2357617 - rust-crossterm-0.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2357617
--------------------------------------------------------------------------------
================================================================================
rust-crossterm0.28-0.28.1-1.el9 (FEDORA-EPEL-2025-2877f39102)
Crossplatform terminal library for manipulating terminals
--------------------------------------------------------------------------------
Update Information:
Update crossterm to 0.29, and provide crossterm 0.28 compatibility packages
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Michel Lind <[email protected]> - 0.28.1-1
- Initial compat package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2357617 - rust-crossterm-0.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2357617
--------------------------------------------------------------------------------
================================================================================
rust-hashlink-0.11.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
HashMap-like containers with user controllable ordering
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2025 Fabio Valentini <[email protected]> - 0.11.0-1
- Update to version 0.11.0; Fixes RHBZ#2406400
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.10.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu May 1 2025 Cristian Le <[email protected]> - 0.10.0-1
- Update to version 0.10.0; Fixes RHBZ#2331134
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.9.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-hashlink0.10-0.10.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
HashMap-like containers with user controllable order
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Fabio Valentini <[email protected]> - 0.10.0-1
- Initial import (hashlink 0.10 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-hashlink0.9-0.9.1-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
HashMap-like containers with user controllable order
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Fabio Valentini <[email protected]> - 0.9.1-1
- Initial import (hashlink 0.9 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-libsqlite3-sys-0.36.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
Native bindings to the libsqlite3 library
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2025 Fabio Valentini <[email protected]> - 0.36.0-1
- Update to version 0.36.0; Fixes RHBZ#2293748
* Sat Dec 20 2025 Fabio Valentini <[email protected]> - 0.35.0-1
- Update to version 0.35.0
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.28.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.28.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-libsqlite3-sys0.28-0.28.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
Native bindings to the libsqlite3 library
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 20 2025 Fabio Valentini <[email protected]> - 0.28.0-1
- Initial import (libsqlite3-sys 0.28 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-rusqlite-0.38.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
Ergonomic wrapper for SQLite
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 22 2025 Fabio Valentini <[email protected]> - 0.38.0-1
- Update to version 0.38.0; Fixes RHBZ#2299286
* Sat Dec 20 2025 Fabio Valentini <[email protected]> - 0.37.0-1
- Update to version 0.37.0
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.31.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-rusqlite0.31-0.31.0-1.el9 (FEDORA-EPEL-2025-ac97c2f08a)
Ergonomic wrapper for SQLite
--------------------------------------------------------------------------------
Update Information:
Update the rusqlite crate to version 0.38.0 and add a compat package for version
0.31.
Update the libsqlite3-sys crate to version 0.36.0 and add a compat package for
version 0.28.
Update the hashlink crate to version 0.11.0 and add compat packages for versions
0.10 and 0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 20 2025 Fabio Valentini <[email protected]> - 0.31.0-1
- Initial import (rusqlite 0.31 compat package)
--------------------------------------------------------------------------------
================================================================================
tmt-1.64.0-3.el9 (FEDORA-EPEL-2025-1cd3415994)
Test Management Tool
--------------------------------------------------------------------------------
Update Information:
Limit pomdan-machine dependency to available arches (properly)
Update tmt to 1.64.0-2.fc42
Automatic update for tmt-1.64.0-1.el9.
Changelog for tmt
* Thu Dec 18 2025 Packit <[email protected]> - 1.64.0-1
- Update to 1.64.0 upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Cristian Le <[email protected]> - 1.64.0-3
- Limit pomdan-machine dependency to available arches (properly)
* Mon Dec 22 2025 Cristian Le <[email protected]> - 1.64.0-2
- Limit pomdan-machine dependency to available arches
* Thu Dec 18 2025 Packit <[email protected]> - 1.64.0-1
- Update to 1.64.0 upstream release
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
