The following Fedora EPEL 9 Security updates need testing:
Age URL
68 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
dnscap-2.5.1-1.el9
kiwi-10.2.37-2.el9
rust-flate2-1.1.8-2.el9
rust-gix-features-0.44.1-3.el9
rust-libbpf-rs-0.25.0-1.el9
rust-libbpf-rs0.24-0.24.8-1.el9
rust-libbpf-sys-1.6.2-1.el9
rust-libz-rs-sys-0.6.0-1.el9
rust-moka-0.12.13-1.el9
rust-notify-types-2.1.0-1.el9
rust-rustls-0.23.36-3.el9
rust-sequoia-keystore-server-0.2.0-5.el9
rust-sequoia-sq-1.3.1-9.el9
rust-threecpio-0.13.1-1.el9
rust-tiny_http-0.12.0-8.el9
rust-tree-sitter-0.25.10-3.el9
rust-tree-sitter0.23-0.23.2-4.el9
rust-tree-sitter0.24-0.24.7-4.el9
rust-zlib-rs-0.6.0-1.el9
vkroots-0^20250716git51c3213-4.el9
vrms-rpm-2.4-1.el9
Details about builds:
================================================================================
dnscap-2.5.1-1.el9 (FEDORA-EPEL-2026-99bb506f96)
Network capture utility designed specifically for DNS traffic
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Fedor Vorobev <[email protected]> - 2.5.1-1
- Updated to version 2.5.1
- Upstream change notes:
* This patch release fixes `assert()` usage for compatibility with newer
libc versions and handles byte order correctly in cryptopan plugin to
work for big endian systems.
* Commits:
ac12e05 copyright
ed3ea49 cryptopan reference implementation
997f047 cryptopan endian
fa3cabb assert
* Mon Jan 26 2026 Fedor Vorobev <[email protected]> - 2.5.0-3
- Use upstream's fix for cryptopan's endianness handling.
--------------------------------------------------------------------------------
================================================================================
kiwi-10.2.37-2.el9 (FEDORA-EPEL-2026-f3a8b3de88)
Flexible operating system image builder
--------------------------------------------------------------------------------
Update Information:
Enable support for declaratively setting bootloader environment variables
(grub2) and various confidential computing target environments (aarch64, s390x,
etc.). Properly handle dnf5 + dnf4 in the same build environment.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Neal Gompa <[email protected]> - 10.2.37-2
- Backport fix for aarch64 and ppc64le tests
* Mon Jan 26 2026 Neal Gompa <[email protected]> - 10.2.37-1
- Update to 10.2.37
* Fri Jan 16 2026 Fedora Release Engineering <[email protected]> -
10.2.33-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Nov 14 2025 Daniel P. Berrangé <[email protected]> - 10.2.33-3
- Add ExcludeArch to remove dep on i686 QEMU
* Fri Sep 19 2025 Python Maint <[email protected]> - 10.2.33-2
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2416973 - kiwi-10.2.37 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2416973
--------------------------------------------------------------------------------
================================================================================
rust-flate2-1.1.8-2.el9 (FEDORA-EPEL-2026-f50271a813)
DEFLATE compression and decompression exposed as Read/BufRead/Write streams
--------------------------------------------------------------------------------
Update Information:
Update rust-flate2 to version 1.1.8. Update rust-zlib-rs / rust-libz-rs-sys to
version 0.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 25 2026 Benjamin A. Beasley <[email protected]> - 1.1.8-2
- Update zlib-rs to 0.6.0
* Sat Jan 17 2026 Fabio Valentini <[email protected]> - 1.1.8-1
- Update to version 1.1.8; Fixes RHBZ#2419182
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.1.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432339 - rust-zlib-rs-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432339
[ 2 ] Bug #2432342 - rust-libz-rs-sys-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432342
--------------------------------------------------------------------------------
================================================================================
rust-gix-features-0.44.1-3.el9 (FEDORA-EPEL-2026-f50271a813)
Integrate various capabilities using compile-time feature flags
--------------------------------------------------------------------------------
Update Information:
Update rust-flate2 to version 1.1.8. Update rust-zlib-rs / rust-libz-rs-sys to
version 0.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Benjamin A. Beasley <[email protected]> - 0.44.1-3
- Update libz-rs-sys to 0.6.0
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.44.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432339 - rust-zlib-rs-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432339
[ 2 ] Bug #2432342 - rust-libz-rs-sys-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432342
--------------------------------------------------------------------------------
================================================================================
rust-libbpf-rs-0.25.0-1.el9 (FEDORA-EPEL-2026-b909e749e3)
Libbpf-rs is a safe, idiomatic, and opinionated wrapper around libbpf-sys
--------------------------------------------------------------------------------
Update Information:
Update the libbpf-rs crate to version 0.25.0, the libbpf-sys crate to version
1.6.2, and add a compat package for version 0.24 of the libbpf-rs crate.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 0.25.0-1
- Update to version 0.25.0; Fixes RHBZ#2315791
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.24.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.24.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.24.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-libbpf-rs0.24-0.24.8-1.el9 (FEDORA-EPEL-2026-b909e749e3)
Libbpf-rs is a safe, idiomatic, and opinionated wrapper around libbpf-sys
--------------------------------------------------------------------------------
Update Information:
Update the libbpf-rs crate to version 0.25.0, the libbpf-sys crate to version
1.6.2, and add a compat package for version 0.24 of the libbpf-rs crate.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 0.24.8-1
- Initial import (libbpf-rs v0.24 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-libbpf-sys-1.6.2-1.el9 (FEDORA-EPEL-2026-b909e749e3)
Rust bindings to libbpf from the Linux kernel
--------------------------------------------------------------------------------
Update Information:
Update the libbpf-rs crate to version 0.25.0, the libbpf-sys crate to version
1.6.2, and add a compat package for version 0.24 of the libbpf-rs crate.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 1.6.2-1
- Update to version 1.6.2+1.6.2; Fixes RHBZ#2367633
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.5.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Wed Feb 12 2025 Antoine Tenart <[email protected]> - 1.5.0-1
- Update to 1.5.0
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.4.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-libz-rs-sys-0.6.0-1.el9 (FEDORA-EPEL-2026-f50271a813)
Memory-safe zlib implementation written in rust
--------------------------------------------------------------------------------
Update Information:
Update rust-flate2 to version 1.1.8. Update rust-zlib-rs / rust-libz-rs-sys to
version 0.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 25 2026 Benjamin A. Beasley <[email protected]> - 0.6.0-1
- Update to version 0.6.0; Fixes RHBZ#2432342
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.5.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432339 - rust-zlib-rs-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432339
[ 2 ] Bug #2432342 - rust-libz-rs-sys-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432342
--------------------------------------------------------------------------------
================================================================================
rust-moka-0.12.13-1.el9 (FEDORA-EPEL-2026-eaff13dee7)
Fast and concurrent cache library inspired by Java Caffeine
--------------------------------------------------------------------------------
Update Information:
Update to version 0.12.13
https://github.com/moka-rs/moka/releases/tag/v0.12.13
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Benjamin A. Beasley <[email protected]> - 0.12.13-1
- Update to version 0.12.13; Fixes RHBZ#2432737
* Tue Jan 20 2026 Benjamin A. Beasley <[email protected]> - 0.12.12-4
- Document and skip a couple of flaky tests
* Tue Jan 20 2026 Benjamin A. Beasley <[email protected]> - 0.12.12-3
- Improve notes on "test_timer_wheel_panic" skip
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.12.12-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432737 - rust-moka-0.12.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432737
--------------------------------------------------------------------------------
================================================================================
rust-notify-types-2.1.0-1.el9 (FEDORA-EPEL-2026-6bf317f5f9)
Types used by the notify crate
--------------------------------------------------------------------------------
Update Information:
notify-types 2.1.0 (2026-01-25)
FEATURE: add EventKindMask for filtering filesystem events
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Benjamin A. Beasley <[email protected]> - 2.1.0-1
- Update to version 2.1.0; Fixes RHBZ#2432630
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
2.0.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432630 - rust-notify-types-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432630
--------------------------------------------------------------------------------
================================================================================
rust-rustls-0.23.36-3.el9 (FEDORA-EPEL-2026-f50271a813)
Rustls is a modern TLS library written in Rust
--------------------------------------------------------------------------------
Update Information:
Update rust-flate2 to version 1.1.8. Update rust-zlib-rs / rust-libz-rs-sys to
version 0.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 25 2026 Benjamin A. Beasley <[email protected]> - 0.23.36-3
- Update zlib-rs dependency to 0.6.0
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.23.36-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432339 - rust-zlib-rs-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432339
[ 2 ] Bug #2432342 - rust-libz-rs-sys-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432342
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-keystore-server-0.2.0-5.el9 (FEDORA-EPEL-2026-0e3aa1d4ee)
Sequoia keystore daemon
--------------------------------------------------------------------------------
Update Information:
Rebuild with sequoia-openpgp v2.1.0 to apply fixes for RUSTSEC-2025-0136 /
CVE-2025-67897.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Fabio Valentini <[email protected]> - 0.2.0-5
- Rebuild for sequoia-openpgp v2.1.0 (RUSTSEC-2025-0136 / CVE-2025-67897)
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-sq-1.3.1-9.el9 (FEDORA-EPEL-2026-0e3aa1d4ee)
Command-line frontends for Sequoia
--------------------------------------------------------------------------------
Update Information:
Rebuild with sequoia-openpgp v2.1.0 to apply fixes for RUSTSEC-2025-0136 /
CVE-2025-67897.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Fabio Valentini <[email protected]> - 1.3.1-9
- Rebuild for sequoia-openpgp v2.1.0 (RUSTSEC-2025-0136 / CVE-2025-67897)
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.3.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-threecpio-0.13.1-1.el9 (FEDORA-EPEL-2026-a657b3273e)
Manage initrd cpio archives
--------------------------------------------------------------------------------
Update Information:
0.13.1 (2026-01-25)
Fixed
do not panic when writing --help/--version to stdout fails
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 25 2026 Benjamin A. Beasley <[email protected]> - 0.13.1-1
- Update to version 0.13.1; Fixes RHBZ#2432696
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.13.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432696 - rust-threecpio-0.13.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432696
--------------------------------------------------------------------------------
================================================================================
rust-tiny_http-0.12.0-8.el9 (FEDORA-EPEL-2026-88a9a07bef)
Low level HTTP server library
--------------------------------------------------------------------------------
Update Information:
Migrate from sha1 v0.6 to sha1_smol (project was renamed).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Fabio Valentini <[email protected]> - 0.12.0-8
- Migrate from sha1 v0.6 to sha1-smol
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.12.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.12.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-tree-sitter-0.25.10-3.el9 (FEDORA-EPEL-2026-7dc8f64e25)
Rust bindings to the Tree-sitter parsing library
--------------------------------------------------------------------------------
Update Information:
Bump bindgen dependency to v0.72.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 0.25.10-3
- Bump bindgen dependency to v0.72
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.25.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-tree-sitter0.23-0.23.2-4.el9 (FEDORA-EPEL-2026-7dc8f64e25)
Rust bindings to the Tree-sitter parsing library
--------------------------------------------------------------------------------
Update Information:
Bump bindgen dependency to v0.72.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 0.23.2-4
- Bump bindgen dependency to v0.72
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.23.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.23.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-tree-sitter0.24-0.24.7-4.el9 (FEDORA-EPEL-2026-7dc8f64e25)
Rust bindings to the Tree-sitter parsing library
--------------------------------------------------------------------------------
Update Information:
Bump bindgen dependency to v0.72.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 23 2026 Fabio Valentini <[email protected]> - 0.24.7-4
- Bump bindgen dependency to v0.72
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.24.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-zlib-rs-0.6.0-1.el9 (FEDORA-EPEL-2026-f50271a813)
Memory-safe zlib implementation written in rust
--------------------------------------------------------------------------------
Update Information:
Update rust-flate2 to version 1.1.8. Update rust-zlib-rs / rust-libz-rs-sys to
version 0.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 25 2026 Benjamin A. Beasley <[email protected]> - 0.6.0-1
- Update to version 0.6.0; Fixes RHBZ#2432339
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.5.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432339 - rust-zlib-rs-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432339
[ 2 ] Bug #2432342 - rust-libz-rs-sys-0.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432342
--------------------------------------------------------------------------------
================================================================================
vkroots-0^20250716git51c3213-4.el9 (FEDORA-EPEL-2026-ef6e56cef4)
A stupid simple method of making Vulkan layers, at home
--------------------------------------------------------------------------------
Update Information:
Update to latest snapshot, with header regenerated to match the Vulkan Header
version. Required for building the DXVK-NVAPI Vulkan Reflex layer.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Simone Caronni <[email protected]> - 0^20250716git51c3213-4
- Re-generate vkroots.h file based on the installed Vulkan Headers version
* Mon Jan 26 2026 Simone Caronni <[email protected]> - 0^20250716git51c3213-3
- Unfortunately it's compatible only with headers at 1.4.322+
* Mon Jan 26 2026 Simone Caronni <[email protected]> - 0^20250716git51c3213-2
- Package is architecture independent
* Sun Jan 25 2026 Simone Caronni <[email protected]> - 0^20250716git51c3213-1
- Update to latest snapshot
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0^20240429git5106d8a-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0^20240429git5106d8a-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0^20240429git5106d8a-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Aug 10 2024 František Zatloukal <[email protected]> -
0^20240429git5106d8a-1
- Resync to 20240429
* Sat Jul 20 2024 Fedora Release Engineering <[email protected]> -
0^20231119git2ceb105-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Sat Jan 27 2024 Fedora Release Engineering <[email protected]> -
0^20231119git2ceb105-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vrms-rpm-2.4-1.el9 (FEDORA-EPEL-2026-58fd7268db)
Report non-free software
--------------------------------------------------------------------------------
Update Information:
Update to v2.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 26 2026 Artur Frenszek-Iwicki <[email protected]> - 2.4-1
- Update to v2.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2433060 - vrms-rpm-2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2433060
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
