The following Fedora EPEL 9 Security updates need testing:
Age URL
53 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-151ddbd53b
wasmedge-0.14.0-4.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-13503a8eac
composer-2.9.3-1.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-cecc10e473
seamonkey-2.53.23-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8ec67a8105
libsodium-1.0.18-9.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8919df6bce
foomuuri-0.31-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8461f97b9d
helm-4.0.4-1.el9 helm3-3.19.3-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
R-rpm-macros-1.3.4-1.el9
rust-b3sum-1.8.3-1.el9
rust-blake2b_simd-1.0.4-1.el9
rust-blake3-1.8.3-1.el9
rust-constant_time_eq-0.4.2-1.el9
rust-gix-archive-0.24.0-2.el9
rust-libc-0.2.180-1.el9
rust-lru-0.16.3-1.el9
rust-zip-7.0.0-2.el9
rust-zip0.6-0.6.6-5.el9
rust-zip2-2.4.2-4.el9
Details about builds:
================================================================================
R-rpm-macros-1.3.4-1.el9 (FEDORA-EPEL-2026-0edd25f3fc)
Macros to help produce R packages
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.4
Update to 1.3.3
Update to 1.3.2
Update to 1.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 11 2026 Iñaki Ãcar <[email protected]> - 1.3.4-1
- Update to 1.3.4
* Thu Jan 8 2026 Iñaki Ãcar <[email protected]> - 1.3.3-1
- Update to 1.3.3
* Thu Jan 8 2026 Iñaki Ãcar <[email protected]> - 1.3.2-1
- Update to 1.3.2
* Mon Jan 5 2026 Iñaki Ãcar <[email protected]> - 1.3.1-1
- Update to 1.3.1
--------------------------------------------------------------------------------
================================================================================
rust-b3sum-1.8.3-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Command line implementation of the BLAKE3 hash function
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 1.8.3-1
- Update to version 1.8.3; Fixes RHBZ#2428096
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-blake2b_simd-1.0.4-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Pure Rust BLAKE2b implementation with dynamic SIMD
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 11 2026 Benjamin A. Beasley <[email protected]> - 1.0.4-1
- Update to verson 1.0.4; Fixes RHBZ#2428511
* Sat Jan 10 2026 Benjamin A. Beasley <[email protected]> - 1.0.3-3
- Update constant_time_eq from 0.3.0 to 0.4.2
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-blake3-1.8.3-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
BLAKE3 hash function
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 1.8.3-1
- Update to version 1.8.3; Fixes RHBZ#2428121
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.8.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-constant_time_eq-0.4.2-1.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Compares two equal-sized byte strings in constant time
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 0.4.2-1
- Update to version 0.4.2; Fixes RHBZ#2347117
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.3.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.3.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-gix-archive-0.24.0-2.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Archive generation from of a worktree stream
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 0.24.0-2
- Allow zip 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-libc-0.2.180-1.el9 (FEDORA-EPEL-2026-19ac8819de)
Raw FFI bindings to platform libraries like libc
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.180.
Update to version 0.2.179.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 11 2026 Fabio Valentini <[email protected]> - 0.2.180-1
- Update to version 0.2.180; Fixes RHBZ#2427914
* Wed Jan 7 2026 Fabio Valentini <[email protected]> - 0.2.179-1
- Update to version 0.2.179; Fixes RHBZ#2426939
--------------------------------------------------------------------------------
================================================================================
rust-lru-0.16.3-1.el9 (FEDORA-EPEL-2026-75ca846030)
LRU cache implementation
--------------------------------------------------------------------------------
Update Information:
Update to version 0.16.3. Includes the fix for RUSTSEC-2026-0002.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 11 2026 Fabio Valentini <[email protected]> - 0.16.3-1
- Update to version 0.16.3; Fixes RHBZ#2427568
* Mon Oct 20 2025 Fabio Valentini <[email protected]> - 0.16.2-1
- Update to version 0.16.2; Fixes RHBZ#2403982
* Fri Sep 12 2025 Fabio Valentini <[email protected]> - 0.16.1-1
- Update to version 0.16.1; Fixes RHBZ#2394055
* Wed Aug 13 2025 Fabio Valentini <[email protected]> - 0.16.0-1
- Update to version 0.16.0; Fixes RHBZ#2359224
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.14.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-zip-7.0.0-2.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 7.0.0-2
- Update constant_time_eq from 0.3.1 to 0.4.2
* Thu Jan 8 2026 Benjamin A. Beasley <[email protected]> - 7.0.0-1
- Update to version 7.0.0; Fixes RHBZ#2367905
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-zip0.6-0.6.6-5.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 0.6.6-5
- Update constant_time_eq from 0.3 to 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
================================================================================
rust-zip2-2.4.2-4.el9 (FEDORA-EPEL-2026-a2c1cd761b)
Library to support the reading and writing of zip files
--------------------------------------------------------------------------------
Update Information:
Update rust-zip to 7.0.0, rust-blake3 / rust-b3sum to 1.8.3, rust-blake2b_simd
to 1.0.4, and rust-constant_time_eq to 0.4.2, patching reverse dependencies of
rust-zip and rust-constant_time_eq to avoid introducing compat packages.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 9 2026 Benjamin A. Beasley <[email protected]> - 2.4.2-4
- Update constant_time_eq from 0.3 to 0.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2347117 - rust-constant_time_eq-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2347117
[ 2 ] Bug #2367905 - rust-zip-7.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367905
[ 3 ] Bug #2428096 - rust-b3sum-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428096
[ 4 ] Bug #2428121 - rust-blake3-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428121
[ 5 ] Bug #2428511 - rust-blake2b_simd-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2428511
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
