The following Fedora EPEL 8 Security updates need testing:
Age URL
55 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2
xpdf-4.06-1.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-59cdc10842
libsodium-1.0.18-9.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
mock-core-configs-43.4-1.el8
rpki-client-9.7-1.el8
Details about builds:
================================================================================
mock-core-configs-43.4-1.el8 (FEDORA-EPEL-2026-5d68da0565)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
new mock-core-configs update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 12 2026 Jiri Kyjovsky <[email protected]> 43.4-1
- Disable bootstrap for riscv ([email protected])
- Add risc-v fedora chroots ([email protected])
- eol/epel-6: copy-paste ca-bundle from host ([email protected])
- Fix aarch64 configuration for Azure Linux 3 ([email protected])
--------------------------------------------------------------------------------
================================================================================
rpki-client-9.7-1.el8 (FEDORA-EPEL-2026-ec249caf6e)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
rpki-client 9.7
The Canonical Cache Representation underwent a breaking change after the
adoption of https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-ccr/ as a
SIDROPS working group item. Apart from several CMS-related cosmetics it now uses
a IANA-assigned content type. As a result, rpki-client 9.7 cannot parse rpki-
client 9.6's .ccr files and vice versa.
Support for Ghostbusters Record objects (RFC 6493) has been removed. Nobody
showed interest in deploying this and there are other, widely supported ways of
exchanging operational contact information such as RDAP. RFC 6493 is undergoing
a status review to be marked as historic:
https://datatracker.ietf.org/doc/status-change-rpki-ghostbusters-record-to-
historic/
Prepare the code base for the opaque ASN1_STRING structure in OpenSSL 4.
Fixed two reliability issues: one where a malicious RPKI Certification Authority
can trigger a crash, one where malicious Trust Anchor can provoke memory
exhaustion.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 13 2026 Robert Scheck <[email protected]> 9.7-1
- Upgrade to 9.7 (#2429390)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2429390 - rpki-client-9.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2429390
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
