The following Fedora EPEL 9 Security updates need testing:
Age URL
52 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-082297644a
coturn-4.7.0-4.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-151ddbd53b
wasmedge-0.14.0-4.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-13503a8eac
composer-2.9.3-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-cecc10e473
seamonkey-2.53.23-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8ec67a8105
libsodium-1.0.18-9.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8919df6bce
foomuuri-0.31-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8461f97b9d
helm-4.0.4-1.el9 helm3-3.19.3-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
prosody-13.0.3-1.el9
psfex-3.24.1-1.el9
quassel-0.14.0-10.el9
radicale-3.6.0-1.el9
ruby-build-20260110-1.el9
rust-b3sum-1.8.3-1.el9
rust-blake2b_simd-1.0.3-3.el9
rust-blake3-1.8.3-1.el9
rust-constant_time_eq-0.4.2-1.el9
rust-gix-archive-0.24.0-2.el9
rust-zip-7.0.0-2.el9
rust-zip0.6-0.6.6-5.el9
rust-zip2-2.4.2-4.el9
Details about builds:
================================================================================
prosody-13.0.3-1.el9 (FEDORA-EPEL-2026-f04861630e)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 13.0.3
Happy new year! Upstream's first release of 2026 is a minor release for their
stable branch, with a range of tweaks, bug fixes and minor improvements for you.
Fixes and improvements
mod_storage_sql: Set configurable wait time for locked SQLite3 database
net.server_event: Port TLS 1.3 channel binding method to libevent backend
mod_roster: Add command for cleaning out invalid contact JIDs
migrator: Allow migrating between different configs of the same driver
mod_admin_shell: Allow pinging any JID with xmpp:ping()
mod_invites: Accept âadmin flag as shortcut for ârole prosody:admin
mod_mam: Add send_legacy_offline_messages_to_mam_clients config option
mod_limits: Allow configuration of general s2s limit, and have s2sout inherit
from s2sin
mod_storage_internal: Return item-not-found for unknown before/after ids
MUC: Fixes for room avatar caching
Minor changes
core.configmanager: Fix referencing previous config options
MUC: Ensure allow MUC PM setting has valid value (fixes: PM does not work on new
MUCs)
mod_storage_sql: Assert that serialization of archive:set() payload succeeds
mod_smacks: Remove extra optional from sm element
mod_s2s_auth_dane_in: Fix caching SHA2-512 hash
MUC: Fix muc_room_default_presence_broadcast option not working
util.sslconfig: Fix error when applying ssl={[port]=â¦}
net.server_epoll: Restore idle checks after pause (e.g. rate limits)
util.jid: Validate domainparts using IDNA or as IP literals (fixes: Invalid JID
in Roster)
util.datamanager: Fix detection of index files created on different
architectures
util.startup: Inform process manager about failure to reload config
mod_muc: Revert commit f4e16e6265e6 and invalidate avatar cache only on vcard
change
mod_http_file_share: Improve debug logging around unexpected file sizes
mod_admin_shell: Ensure JIDs are normalized in xmpp:ping()
mod_invites: Return error when generating password reset for non-existent
account
util.uuid: Update UUIDv7 to match RFC 9562
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 10 2026 Robert Scheck <[email protected]> 13.0.3-1
- Upgrade to 13.0.3 (#2427189)
* Sun Aug 10 2025 Robert Scheck <[email protected]> 13.0.2-4
- Use 'systemctl try-reload-or-restart' in logrotate postrotate
script (#2371331, thanks to Marcos Mello)
- Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
for Fedora 42 >= and RHEL >= 11
* Wed Aug 6 2025 František Zatloukal <[email protected]> - 13.0.2-3
- Rebuilt for icu 77.1
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
13.0.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2371331 - Simplify logrotate postrotate script with `systemctl
try-reload-or-restart`
https://bugzilla.redhat.com/show_bug.cgi?id=2371331
[ 2 ] Bug #2427189 - prosody-13.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2427189
--------------------------------------------------------------------------------
================================================================================
psfex-3.24.1-1.el9 (FEDORA-EPEL-2026-5776b23778)
Model the Point Spread Function from FITS images
--------------------------------------------------------------------------------
Update Information:
PSFEx extracts models of the Point Spread Function (PSF) from FITS images
processed with SExtractor and measures the quality of images. The generated PSF
models can be used for model-fitting photometry or morphological analyses.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 9 2025 Sergio Pascual <[email protected]> - 3.24.1-1
- Initial import
--------------------------------------------------------------------------------
================================================================================
quassel-0.14.0-10.el9 (FEDORA-EPEL-2026-4a3206e7fa)
A modern distributed IRC system
--------------------------------------------------------------------------------
Update Information:
package for epel9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.14.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
0.14.0-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Aug 7 2024 Miroslav Suchý <[email protected]> - 0.14.0-8
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
0.14.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
0.14.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
0.14.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
radicale-3.6.0-1.el9 (FEDORA-EPEL-2026-82ce14be7b)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 10 2026 Peter Bieringer <[email protected]> - 3.6.0-1
- Update to 3.6.0
- add BuildRequires: python3-packaging
- force to use "passlib" instead of "libpass"
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2428449 - radicale-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428449
--------------------------------------------------------------------------------
================================================================================
ruby-build-20260110-1.el9 (FEDORA-EPEL-2026-73c844b61a)
Compile and install Ruby
--------------------------------------------------------------------------------
Update Information:
Update to 20260110
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 10 2026 Packit <[email protected]> - 20260110-1
- Update to 20260110 upstream release
- Resolves: rhbz#2428461
--------------------------------------------------------------------------------
================================================================================
rust-b3sum-1.8.3-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Command line implementation of the BLAKE3 hash function
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 1.8.3-1
- Update to version 1.8.3; Fixes RHBZ#2428096
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-blake2b_simd-1.0.3-3.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Pure Rust BLAKE2b implementation with dynamic SIMD
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 10 2026 Benjamin A. Beasley <[email protected]> - 1.0.3-3
- Update constant_time_eq from 0.3.0 to 0.4.2
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-blake3-1.8.3-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
BLAKE3 hash function
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 1.8.3-1
- Update to version 1.8.3; Fixes RHBZ#2428121
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.8.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-constant_time_eq-0.4.2-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Compares two equal-sized byte strings in constant time
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 0.4.2-1
- Update to version 0.4.2; Fixes RHBZ#2347117
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.3.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.3.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-gix-archive-0.24.0-2.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Archive generation from of a worktree stream
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 0.24.0-2
- Allow zip 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-zip-7.0.0-2.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 7.0.0-2
- Update constant_time_eq from 0.3.1 to 0.4.2
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 7.0.0-1
- Update to version 7.0.0; Fixes RHBZ#2367905
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-zip0.6-0.6.6-5.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 0.6.6-5
- Update constant_time_eq from 0.3 to 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
================================================================================
rust-zip2-2.4.2-4.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3 and rust-
constant_time_eq to 0.4.2, patching reverse dependencies of rust-zip and rust-
constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 2.4.2-4
- Update constant_time_eq from 0.3 to 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
