The following Fedora EPEL 10.1 Security updates need testing:
Age URL
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1f5a2c5f39
python-python-multipart-0.0.22-1.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
openvpn-2.7_rc6-1.el10_1
perl-No-Worries-1.7-14.el10_1
python-absl-py-2.4.0-1.el10_1
rust-fs-err-3.2.2-1.el10_1
scitokens-cpp-1.3.0-1.el10_1
Details about builds:
================================================================================
openvpn-2.7_rc6-1.el10_1 (FEDORA-EPEL-2026-021d78b8ac)
A full-featured TLS VPN solution
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.7_rc6 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 28 2026 Frank Lichtenheld <[email protected]> - 2.7_rc6
- Update to upstream 2.7_rc6 release
--------------------------------------------------------------------------------
================================================================================
perl-No-Worries-1.7-14.el10_1 (FEDORA-EPEL-2026-13785ebd97)
Perl coding without worries
--------------------------------------------------------------------------------
Update Information:
This update brings a new perl-No-Worries package, a collection of convenient
functions for programming in Perl.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> - 1.7-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> - 1.7-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> - 1.7-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Dec 9 2024 Petr Pisar <[email protected]> - 1.7-11
- Modernize a spec file
- Package the tests
* Tue Aug 6 2024 Miroslav Suchý <[email protected]> - 1.7-10
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> - 1.7-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> - 1.7-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> - 1.7-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2433735 - Please branch and build perl-No-Worries for EPEL 10
https://bugzilla.redhat.com/show_bug.cgi?id=2433735
--------------------------------------------------------------------------------
================================================================================
python-absl-py-2.4.0-1.el10_1 (FEDORA-EPEL-2026-ed2fbc4d41)
Abseil Python Common Libraries
--------------------------------------------------------------------------------
Update Information:
2.4.0 (2026-01-28)
Added
Added support for Python 3.14.
Allow $PYTHONBREAKPOINT to affect runcall and post_mortem debugging.
(logging) Propagate **kwargs in conditional/rate-limited logging functions.
Changed
Dropped support for Python 3.8 and 3.9.
(flags) Change internals of absl.flags.get_help_width() implementation.
(cleanup) Modernize Bazel setup with MODULE.bazel.
(cleanup) Modernize type annotations using Python 3.10+ features.
Fixed
(flags) Fix duplicate flag definition when reloading a module.
(typechecking) Correct type signature of absltest.skipThisClass.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 28 2026 Packit <[email protected]> - 2.4.0-1
- Update to 2.4.0 upstream release
- Resolves: rhbz#2433802
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2433802 - python-absl-py-2.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2433802
--------------------------------------------------------------------------------
================================================================================
rust-fs-err-3.2.2-1.el10_1 (FEDORA-EPEL-2026-d8fd4745f5)
Drop-in replacement for std::fs with more helpful error messages
--------------------------------------------------------------------------------
Update Information:
https://github.com/andrewhickman/fs-err/blob/3.2.2/CHANGELOG.md
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 27 2026 Benjamin A. Beasley <[email protected]> - 3.2.2-1
- Update to version 3.2.2; Fixes RHBZ#2415196
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
3.1.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2415196 - rust-fs-err-3.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2415196
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-1.3.0-1.el10_1 (FEDORA-EPEL-2026-70efb8f770)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Add scitokens-generate-jwks CLI for key generation.
Add environment variable-based configuration on library initialization.
Add per-issuer lock to prevent multiple concurrent queries against issuers
without a known key
Add negative cache for failed issuer lookups (preventing frequent re-queries)
Add monitoring API for per-issuer validation statistics
Add optional background thread for JWKS refresh
Add keycache load, metadata, and delete APIs
Revert "Fix memory leak in rs256_from_coords" by @djw8605
Add CTest-based integration test with JWKS server and TLS infrastructure
Fix segfault if the JSON parser cannot parse the JWKS
Fix float time claims issue and improve error handling
Fix security issue with malicious issuer handling in error messages
Improve JWTVerificationException message to include the invalid issuer
Update usage on verify command to make the TOKENFILE explicit
Read token for scitokens-verify from stdin
Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
Adding asan value to the job name
Turn off building unit tests by default.
Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the
address sanitizer. Also enable this in CI, so that tests fail if they hit a
memory leak or other memory problem.
Fix memory leak in store_public_ec_key
Fix memory leaks in the unit tests
Fix memory leak in rs256_from_coords
Fix memory leak in scitokens_verify
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 11 2025 Brian Bockelman <[email protected]> - 1.3.0-1
- Add scitokens-generate-jwks CLI for key generation.
- Add environment variable-based configuration on library initialization.
- Add per-issuer lock to prevent multiple concurrent queries against issuers
without a known key
- Add negative cache for failed issuer lookups (preventing frequent re-queries)
- Add monitoring API for per-issuer validation statistics
- Add optional background thread for JWKS refresh
- Add keycache load, metadata, and delete APIs
- Revert "Fix memory leak in rs256_from_coords" by @djw8605
- Add CTest-based integration test with JWKS server and TLS infrastructure
* Fri Dec 5 2025 Derek Weitzel <[email protected]> - 1.2.0-1
- Fix segfault if the JSON parser cannot parse the JWKS
- Fix float time claims issue and improve error handling
- Fix security issue with malicious issuer handling in error messages
- Improve JWTVerificationException message to include the invalid issuer
- Update usage on verify command to make the TOKENFILE explicit
- Read token for scitokens-verify from stdin
- Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
- Adding asan value to the job name
- Turn off building unit tests by default.
- Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the
address sanitizer. Also enable this in CI, so that tests fail if they hit a
memory leak or other memory problem.
- Fix memory leak in store_public_ec_key
- Fix memory leaks in the unit tests
- Fix memory leak in rs256_from_coords
- Fix memory leak in scitokens_verify
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.1.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
