The following Fedora EPEL 8 Security updates need testing:
Age URL
242 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-967543b33f ImageMagick-6.9.13.52-1.el8
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6b5cec4a03 trafficserver-9.2.14-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
efifs-1.12-1.el8
mimedefang-3.7.1-1.el8
radicale-3.7.7-1.el8
tcpreplay-4.5.3-1.el8
Details about builds:
================================================================================
efifs-1.12-1.el8 (FEDORA-EPEL-2026-1c8b9bd69e)
Free software EFI/UEFI standalone file system drivers
--------------------------------------------------------------------------------
Update Information:
EfiFs 1.12
Add XFS v5 support
Update GRUB to v2.14
Update gnu-efi to latest
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 Robert Scheck <robert(a)fedoraproject.org> 1.12-1
- Upgrade to 1.12 (#2434006, #2452299)
* Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2434006 - efifs: FTBFS in Fedora rawhide/f44
https://bugzilla.redhat.com/show_bug.cgi?id=2434006
[ 2 ] Bug #2452299 - efifs-1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2452299
--------------------------------------------------------------------------------
================================================================================
mimedefang-3.7.1-1.el8 (FEDORA-EPEL-2026-9926327e3f)
E-mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
MIMEDefang 3.7.1
Email Authentication & Standards
MTA-STS and DANE/TLSA policy checks, outbound connections now honor published
transport security policies
BIMI support, verify Brand Indicators for Message Identification for logo-based
sender authentication
Performance & Scalability
Mail::MIMEDefang::Async module, run multiple filtering tasks in parallel to
reduce latency on complex filter chains
Worker autoscaling, workers can be automatically activated or deactivated based
on current load
ClamAV
TCP/IP scanning on localhost, removes the Unix socket requirement, simplifying
containerized deployments
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 20 2026 Robert Scheck <robert(a)fedoraproject.org> 3.7.1-1
- Upgrade to 3.7.1 (#2500792)
* Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jul 7 2025 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.6-2
- Perl 5.42 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2500792 - mimedefang-3.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2500792
--------------------------------------------------------------------------------
================================================================================
radicale-3.7.7-1.el8 (FEDORA-EPEL-2026-3d1bc10884)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 Peter Bieringer <pb(a)bieringer.de> - 3.7.7-1
- Update to 3.7.7
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.5.3-1.el8 (FEDORA-EPEL-2026-e3edcd5411)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
What's Changed
v4.5.2 by @fklassen in #980
Refs #984: sendpacket bounded EAGAIN/ENOBUFS retry (merges #986 + fixups) by
@fklassen in #996
Bug #984 endless retries on enobufs eagain by @fklassen in #997
gitignore: share .claude/skills/, document code-review-graph MCP setup by
@fklassen in #998
send_packets: fix miscalibrated overflow guards in calc_sleep_time (#974) by
@fklassen in #999
migrate autoopts -> getopt + asciidoctor by @GabrielGanne in #991
Revert "migrate autoopts -> getopt + asciidoctor" by @fklassen in #1000
fix fragroute overflow on packets with too many MPLS labels by @GabrielGanne in
#993
tcprewrite - fix adding vlan tag with missing options by @GabrielGanne in #994
tcpprep - fix buffer overflow on truncated packets by @GabrielGanne in #995
fragroute: fix TAILQ_FOREACH_REVERSE portability across queue.h variants by
@fklassen in #1001
sendpacket: stop inhibiting libbpf's default XDP program load for AF_XDP TX by
@fklassen in #1002
sendpacket: warn when sending on a down/no-carrier interface (Linux) by
@fklassen in #1003
tcpreplay: fix --multiplier timing drift (takes over #915) by @fklassen in #1004
send_packets: bound and make abortable the netmap TX-ring drain wait by
@fklassen in #1005
netmap: remove stray switch defaults in nm_do_ioctl() breaking --netmap by
@fklassen in #1006
sendpacket: route "zc:" PF_RING ZC device names through libpcap by @fklassen in
#1007
tcprewrite: rewrite addresses embedded in ICMPv6 error messages by @fklassen in
#1008
docs: document autogen.sh requirement for git checkouts by @fklassen in #1009
tcpliveplay: call pcap_breakloop() from the SIGALRM handler by @fklassen in
#1010
tcpedit: fix wrong end-of-buffer pointer in TCP-sequence/portmap rewrite by
@fklassen in #1013
tcpr_random: fix signed left-shift undefined behavior (does not fix #1011 - see
comments) by @fklassen in #1012
configure: stop --with-netmap from leaking -I/sys into CFLAGS by @fklassen in
#1014
update Copyright to 2026 by @fklassen in #1017
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 20 2026 Bojan Smojver <bojan@rexursive com> - 4.5.3-1
- Update to 4.5.3
* Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
The following Fedora EPEL 10.3 Security updates need testing:
Age URL
24 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3
12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-cc5650cf72 rust-fern-0.7.1-6.el10_3 rust-routinator-0.15.2-1.el10_3 rust-rpki-0.19.3-2.el10_3 rust-syslog-7.0.0-2.el10_3
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-af74150a7d perl-Crypt-OpenSSL-X509-2.1.3-1.el10_3
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-22c2f092d6 perl-YAML-Syck-1.47-1.el10_3
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f10b090d5b nuclei-3.11.0-1.el10_3
The following builds have been pushed to Fedora EPEL 10.3 updates-testing
bluefish-2.4.2-1.el10_3
efifs-1.12-1.el10_3
mimedefang-3.7.1-1.el10_3
opkssh-0.16.0-1.el10_3
radicale-3.7.7-1.el10_3
tcpreplay-4.5.3-1.el10_3
weechat-4.9.4-1.el10_3
Details about builds:
================================================================================
bluefish-2.4.2-1.el10_3 (FEDORA-EPEL-2026-86cc2c0d9f)
Web development application for experienced users
--------------------------------------------------------------------------------
Update Information:
Periodic maintenance release.
The most visible change is that Bluefish detects icon themes, and has built-in
icon themes for "Breeze" and "Breeze-dark"; this is a big improvement for the
visual integration of Bluefish on a KDE desktop.
The most important fix is for a segfault that could occur if a filename on disk
has a specific broken UTF-8 encoding.
Some small improvements are reduced memory usage when working with 100+ files
simultaneously, some translation improvements, and the author field is now
configurable.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 18 2026 Paul Howarth <paul(a)city-fan.org> - 2.4.2-1
- Update to 2.4.2 (rhbz#2501999)
- Bluefish 2.4.2 has a few new features and a few fixes
- The most visible change is that Bluefish detects icon themes, and has
built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
improvement for the visual integration of Bluefish on a KDE desktop
- The most important fix is for a segfault that could occur if a filename on
disk has a specific broken UTF-8 encoding
- Some small improvements are reduced memory usage when working with 100+
files simultaneously, some translation improvements, and the <meta>
author field is now configurable
* Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 2.4.1-2
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2501999 - bluefish-2.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2501999
--------------------------------------------------------------------------------
================================================================================
efifs-1.12-1.el10_3 (FEDORA-EPEL-2026-c96a00eb85)
Free software EFI/UEFI standalone file system drivers
--------------------------------------------------------------------------------
Update Information:
EfiFs 1.12
Add XFS v5 support
Update GRUB to v2.14
Update gnu-efi to latest
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 Robert Scheck <robert(a)fedoraproject.org> 1.12-1
- Upgrade to 1.12 (#2434006, #2452299)
* Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Jul 23 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2434006 - efifs: FTBFS in Fedora rawhide/f44
https://bugzilla.redhat.com/show_bug.cgi?id=2434006
[ 2 ] Bug #2452299 - efifs-1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2452299
--------------------------------------------------------------------------------
================================================================================
mimedefang-3.7.1-1.el10_3 (FEDORA-EPEL-2026-82093bc875)
E-mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
MIMEDefang 3.7.1
Email Authentication & Standards
MTA-STS and DANE/TLSA policy checks, outbound connections now honor published
transport security policies
BIMI support, verify Brand Indicators for Message Identification for logo-based
sender authentication
Performance & Scalability
Mail::MIMEDefang::Async module, run multiple filtering tasks in parallel to
reduce latency on complex filter chains
Worker autoscaling, workers can be automatically activated or deactivated based
on current load
ClamAV
TCP/IP scanning on localhost, removes the Unix socket requirement, simplifying
containerized deployments
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 20 2026 Robert Scheck <robert(a)fedoraproject.org> 3.7.1-1
- Upgrade to 3.7.1 (#2500792)
* Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jul 7 2025 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.6-2
- Perl 5.42 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2500792 - mimedefang-3.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2500792
--------------------------------------------------------------------------------
================================================================================
opkssh-0.16.0-1.el10_3 (FEDORA-EPEL-2026-881ac51c15)
OpenPubkey SSH
--------------------------------------------------------------------------------
Update Information:
Update to 0.16.0.
This release includes a security fix for GQ-commitment PK Tokens
(upgrades the openpubkey dependency to v0.25.0), addressing a
vulnerability affecting GitLab-CI GQ-commitment PK Tokens. Note that
opkssh currently only supports GitLab user OP (not GitLab-CI), so the
vulnerable code path is not reachable through opkssh; severity is set
low accordingly. Also drops the now-obsolete go-jose
dependency_overrides pin, since upstream now requires go-jose v4.1.4
natively.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 Till Hofmann <thofmann(a)fedoraproject.org> - 0.16.0-1
- Update to 0.16.0
--------------------------------------------------------------------------------
================================================================================
radicale-3.7.7-1.el10_3 (FEDORA-EPEL-2026-cc726ed43a)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 Peter Bieringer <pb(a)bieringer.de> - 3.7.7-1
- Update to 3.7.7
--------------------------------------------------------------------------------
================================================================================
tcpreplay-4.5.3-1.el10_3 (FEDORA-EPEL-2026-f287d7024e)
Replay captured network traffic
--------------------------------------------------------------------------------
Update Information:
What's Changed
v4.5.2 by @fklassen in #980
Refs #984: sendpacket bounded EAGAIN/ENOBUFS retry (merges #986 + fixups) by
@fklassen in #996
Bug #984 endless retries on enobufs eagain by @fklassen in #997
gitignore: share .claude/skills/, document code-review-graph MCP setup by
@fklassen in #998
send_packets: fix miscalibrated overflow guards in calc_sleep_time (#974) by
@fklassen in #999
migrate autoopts -> getopt + asciidoctor by @GabrielGanne in #991
Revert "migrate autoopts -> getopt + asciidoctor" by @fklassen in #1000
fix fragroute overflow on packets with too many MPLS labels by @GabrielGanne in
#993
tcprewrite - fix adding vlan tag with missing options by @GabrielGanne in #994
tcpprep - fix buffer overflow on truncated packets by @GabrielGanne in #995
fragroute: fix TAILQ_FOREACH_REVERSE portability across queue.h variants by
@fklassen in #1001
sendpacket: stop inhibiting libbpf's default XDP program load for AF_XDP TX by
@fklassen in #1002
sendpacket: warn when sending on a down/no-carrier interface (Linux) by
@fklassen in #1003
tcpreplay: fix --multiplier timing drift (takes over #915) by @fklassen in #1004
send_packets: bound and make abortable the netmap TX-ring drain wait by
@fklassen in #1005
netmap: remove stray switch defaults in nm_do_ioctl() breaking --netmap by
@fklassen in #1006
sendpacket: route "zc:" PF_RING ZC device names through libpcap by @fklassen in
#1007
tcprewrite: rewrite addresses embedded in ICMPv6 error messages by @fklassen in
#1008
docs: document autogen.sh requirement for git checkouts by @fklassen in #1009
tcpliveplay: call pcap_breakloop() from the SIGALRM handler by @fklassen in
#1010
tcpedit: fix wrong end-of-buffer pointer in TCP-sequence/portmap rewrite by
@fklassen in #1013
tcpr_random: fix signed left-shift undefined behavior (does not fix #1011 - see
comments) by @fklassen in #1012
configure: stop --with-netmap from leaking -I/sys into CFLAGS by @fklassen in
#1014
update Copyright to 2026 by @fklassen in #1017
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 20 2026 Bojan Smojver <bojan@rexursive com> - 4.5.3-1
- Update to 4.5.3
* Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
weechat-4.9.4-1.el10_3 (FEDORA-EPEL-2026-c50865499e)
Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:
Update to 4.9.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 19 2026 LuK1337 <priv.luk(a)gmail.com> - 4.9.4-1
- Update to 4.9.4
* Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.9.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2502266 - weechat-4.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2502266
--------------------------------------------------------------------------------