The following Fedora EPEL 10.2 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-cedd3cbf22
python-pdfminer-20251230-1.el10_2
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-647b8b14e9
wasmedge-0.15.0-5.el10_2
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-46c186c902
exim-4.99.1-1.el10_2
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d03f559c4f
coturn-4.7.0-4.el10_2
The following builds have been pushed to Fedora EPEL 10.2 updates-testing
R-rpm-macros-1.3.1-1.el10_2
composer-2.9.3-1.el10_2
cppad-20260000.0-1.el10_2
gnulib-0-55.20251223git.el10_2
incron-0.5.12-28.el10_2
ntfs-3g-system-compression-1.1-1.el10_2
php-pecl-amqp-2.2.0-1.el10_2
pie-1.3.4-1.el10_2
python-gitlab-7.1.0-1.el10_2
python-humanize-4.15.0-1.el10_2
rust-lzma-rust2-0.15.5-1.el10_2
rust-procfs-0.18.0-1.el10_2
rust-procfs-core-0.18.0-1.el10_2
Details about builds:
================================================================================
R-rpm-macros-1.3.1-1.el10_2 (FEDORA-EPEL-2026-997a4adb09)
Macros to help produce R packages
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 5 2026 Iñaki Ãcar <[email protected]> - 1.3.1-1
- Update to 1.3.1
--------------------------------------------------------------------------------
================================================================================
composer-2.9.3-1.el10_2 (FEDORA-EPEL-2026-bc7502f16e)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
Version 2.9.3 - 2025-12-30
Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746)
Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected for updates done
via the install command, and added --no-security-blocking flag to install as
well (#12677)
Fixed update --lock / update mirrors not working when locked packages contain
vulnerabilities (#12645)
Fixed client-certificate authentication implementation (#12667)
Fixed php-ext schema not being validated in ValidatingArrayLoader (#12694)
Fixed crash when --bump-after-update is used and the lock file is disabled
(#12660)
Fixed support for SecureTransport + LibreSSL on macOS (#12615)
Fixed display of reasons for why advisories are ignored (#12668)
Fixed compatibility issues when git has log.showSignature enabled (#12666)
Fixed curl downloader not retrying when a timeout (err 28) failure occurs
(#12662)
Fixed EventDispatcher requiring a full Composer instance to function (#12629)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 31 2025 Remi Collet <[email protected]> - 2.9.3-1
- update to 2.9.3
--------------------------------------------------------------------------------
================================================================================
cppad-20260000.0-1.el10_2 (FEDORA-EPEL-2026-80c33c602a)
C++ Algorithmic Differentiation (AD), cppad-devel and cppad-doc
--------------------------------------------------------------------------------
Update Information:
New upstream source cppad-20260000.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 5 2026 Brad Bell <bradbell at seanet dot com> - 20260000.0-1
- New upstream source cppad-20260000.0.
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
20250000.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gnulib-0-55.20251223git.el10_2 (FEDORA-EPEL-2026-3b29263ab5)
GNU Portability Library
--------------------------------------------------------------------------------
Update Information:
Update on 2025-12-23
Use stable branch instead of master
Add next generation of Gnulib the python release of Gnulib
Fix building tests
Re-struct for gnulib ng with python base
Update dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 23 2025 Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
- Update on 2025-12-23
- Use stable branch instead of master
- Add next generation of Gnulib the python release of Gnulib
- Fix building tests
- Re-struct for gnulib ng with python base
- Update dependencies
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
0-54.20250704git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jul 4 2025 Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-53.20250704git
- Update on 2025-07-04
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
0-52.20230709git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> -
0-51.20230709git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <[email protected]> -
0-49.20230709git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> -
0-48.20230709git
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2335616 - [RFE:EPEL10] Please branch and build gnulib for EPEL10
https://bugzilla.redhat.com/show_bug.cgi?id=2335616
[ 2 ] Bug #2376582 - Autoconf fails just in F43
https://bugzilla.redhat.com/show_bug.cgi?id=2376582
[ 3 ] Bug #2381900 - gnulib-tool doesn't work (gnulib-tool.py missing)
https://bugzilla.redhat.com/show_bug.cgi?id=2381900
[ 4 ] Bug #2381901 - gnulib-tool doesn't work (gnulib-tool.py missing)
https://bugzilla.redhat.com/show_bug.cgi?id=2381901
[ 5 ] Bug #2384640 - gnulib: FTBFS in Fedora rawhide/f43
https://bugzilla.redhat.com/show_bug.cgi?id=2384640
[ 6 ] Bug #2386224 - git-merge-changelog should be updated from Gnulib's
master branch
https://bugzilla.redhat.com/show_bug.cgi?id=2386224
[ 7 ] Bug #2396058 - gnulib-tool broken, missing implementation file
https://bugzilla.redhat.com/show_bug.cgi?id=2396058
--------------------------------------------------------------------------------
================================================================================
incron-0.5.12-28.el10_2 (FEDORA-EPEL-2026-dfa5cbfc36)
Inotify cron system
--------------------------------------------------------------------------------
Update Information:
Initial version for epel10
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
0.5.12-28
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> -
0.5.12-27
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Jul 29 2024 Miroslav Suchý <[email protected]> - 0.5.12-26
- convert license to SPDX
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> -
0.5.12-25
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <[email protected]> -
0.5.12-24
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Fedora Release Engineering <[email protected]> -
0.5.12-23
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2427128 - incron package missing on epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2427128
--------------------------------------------------------------------------------
================================================================================
ntfs-3g-system-compression-1.1-1.el10_2 (FEDORA-EPEL-2026-66d2f0790c)
NTFS-3G plugin for reading "system compressed" files
--------------------------------------------------------------------------------
Update Information:
Update to v1.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 5 2026 Neal Gompa <[email protected]> - 1.1-1
- Update to 1.1
- Slightly modernize spec
- Drop unneeded patch
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> - 1.0-19
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> - 1.0-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> - 1.0-17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> - 1.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> - 1.0-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2422052 - ntfs-3g-system-compression-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2422052
--------------------------------------------------------------------------------
================================================================================
php-pecl-amqp-2.2.0-1.el10_2 (FEDORA-EPEL-2026-5d37bc2e7d)
Communicate with any AMQP compliant server
--------------------------------------------------------------------------------
Update Information:
Version 2.2.0
Add PHP 8.4 and 8.5 to CI matrix (Ruud Kamphuis) (https://github.com/php-
amqp/php-amqp/issues/597)
Adds connection_resource as parameter for PHP_AMQP_MAYBE_ERROR (Jeremy Smith
[email protected]) (https://github.com/php-amqp/php-amqp/issues/589)
Enable support for PIE (James Titcumb [email protected]) (https://github.com/php-
amqp/php-amqp/issues/584)
Ignore codebase reformatting for blame (Lars Strojny [email protected])
(https://github.com/php-amqp/php-amqp/commit/2ed7b6a)
PHP 8.5 toolchain update (Lars Strojny [email protected])
(https://github.com/php-amqp/php-amqp/issues/604)
Restore changelog for 2.1.1 (Lars Strojny [email protected])
(https://github.com/php-amqp/php-amqp/issues/533)
Update runner images, no longer build against ancient librabbitmq versions (Lars
Strojny [email protected]) (https://github.com/php-amqp/php-amqp/commit/e12a99c)
Upgrade GH actions (Lars Strojny [email protected]) (https://github.com/php-
amqp/php-amqp/commit/99acba7)
Use ZEND_LONG_FMT and ZEND_ULONG_FMT to fix warnings on 32-bit (Andy Postnikov
[email protected]) (https://github.com/php-amqp/php-amqp/issues/607)
Use php_format_date instead of php_std_date (Remi Collet [email protected])
(https://github.com/php-amqp/php-amqp/commit/6f1c675)
Use zend_ce_exception (Remi Collet [email protected]) (https://github.com/php-
amqp/php-amqp/commit/a7141b2)
Fix formatting (Lars Strojny [email protected]) (https://github.com/php-amqp/php-
amqp/commit/8b76bad)
Fix non-deterministic tests (Lars Strojny [email protected])
(https://github.com/php-amqp/php-amqp/commit/43209e0)
Fix segmentation fault in php_amqp_close_channel #598 (Paul Johnston paul-
[email protected]) (https://github.com/php-amqp/php-amqp/issues/606)
Fix: SIGPIPE handling (Kévin Dunglas [email protected]) (https://github.com/php-
amqp/php-amqp/issues/550)
Bump awalsh128/cache-apt-pkgs-action from 1.3.1 to 1.4.1 (dependabot[bot])
(https://github.com/php-amqp/php-amqp/issues/538)
Bump squizlabs/php_codesniffer from 3.8.1 to 3.9.0 (dependabot[bot])
(https://github.com/php-amqp/php-amqp/issues/539)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Remi Collet <[email protected]> - 2.2.0-1
- update to 2.2.0
- drop patch merged upstream
- re-license spec file to CECILL-2.1
- add pie virtual provides
--------------------------------------------------------------------------------
================================================================================
pie-1.3.4-1.el10_2 (FEDORA-EPEL-2026-c80caa7459)
PHP Installer for Extensions
--------------------------------------------------------------------------------
Update Information:
Version 1.3.4
Ensure aarch64 is parsed as a valid architecture as arm64 thanks to @asgrim
Version 1.3.3
fix intermittent failure to look up packages thanks to @asgrim
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Remi Collet <[email protected]> - 1.3.4-1
- update to 1.3.4
--------------------------------------------------------------------------------
================================================================================
python-gitlab-7.1.0-1.el10_2 (FEDORA-EPEL-2026-e1f13c0cce)
Interact with GitLab API
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-gitlab-7.1.0-1.el10_2.
Changelog for python-gitlab
* Sun Dec 28 2025 Packit <[email protected]> - 7.1.0-1
- Update to 7.1.0 upstream release
- Resolves: rhbz#2425665
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 28 2025 Packit <[email protected]> - 7.1.0-1
- Update to 7.1.0 upstream release
- Resolves: rhbz#2425665
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2425665 - python-gitlab-7.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2425665
--------------------------------------------------------------------------------
================================================================================
python-humanize-4.15.0-1.el10_2 (FEDORA-EPEL-2026-f2ab972f27)
Turns dates in to human readable format, e.g '3 minutes ago'
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-humanize-4.15.0-1.el10_2.
Changelog for python-humanize
* Sat Dec 20 2025 Packit <[email protected]> - 4.15.0-1
- Update to 4.15.0 upstream release
- Resolves: rhbz#2424154
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 20 2025 Packit <[email protected]> - 4.15.0-1
- Update to 4.15.0 upstream release
- Resolves: rhbz#2424154
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424154 - python-humanize-4.15.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2424154
--------------------------------------------------------------------------------
================================================================================
rust-lzma-rust2-0.15.5-1.el10_2 (FEDORA-EPEL-2026-68bd57eaf7)
LZMA / LZMA2 / LZIP / XZ compression ported from 'tukaani xz for java'
--------------------------------------------------------------------------------
Update Information:
0.15.5 - 2026-01-05
Fixed
Fix possible panic in the range decoder when trying to read u32_be data
Fix race condition in multithreaded code in error conditions
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 5 2026 Benjamin A. Beasley <[email protected]> - 0.15.5-1
- Update to version 0.15.5; Fixes RHBZ#2427107
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2427107 - rust-lzma-rust2-0.15.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2427107
--------------------------------------------------------------------------------
================================================================================
rust-procfs-0.18.0-1.el10_2 (FEDORA-EPEL-2026-0c1a002414)
Interface to the linux procfs pseudo-filesystem
--------------------------------------------------------------------------------
Update Information:
https://github.com/eminence/procfs/releases/tag/v0.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 4 2026 Benjamin A. Beasley <[email protected]> - 0.18.0-1
- Update to version 0.18.0; Fixes RHBZ#2392071
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.17.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2392070 - rust-procfs-core-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392070
[ 2 ] Bug #2392071 - rust-procfs-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392071
--------------------------------------------------------------------------------
================================================================================
rust-procfs-core-0.18.0-1.el10_2 (FEDORA-EPEL-2026-0c1a002414)
Data structures and parsing for the linux procfs pseudo-filesystem
--------------------------------------------------------------------------------
Update Information:
https://github.com/eminence/procfs/releases/tag/v0.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 4 2026 Benjamin A. Beasley <[email protected]> - 0.18.0-1
- Update to version 0.18.0; Fixes RHBZ#2392070
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.17.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2392070 - rust-procfs-core-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392070
[ 2 ] Bug #2392071 - rust-procfs-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392071
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
