epel-devel September 2026

epel-devel@lists.fedoraproject.org

2 participants
48 discussions

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 09 Sep '26

09 Sep '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ef4ca1433b mongo-c-driver-1.30.9-1.el10_2 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f37ac61468 pdns-recursor-5.4.6-2.el10_2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-78f8bcff8a roundcubemail-1.6.19-1.el10_2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7d7ac5f0f9 php-pecl-mongodb2-2.1.9-2.el10_2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-99ac8d2816 php-pecl-mongodb-1.21.9-1.el10_2 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-80df4fb4ea perl-Net-OAuth-0.33-2.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing perl-String-Similarity-1.04-51.el10_2 Details about builds: ================================================================================ perl-String-Similarity-1.04-51.el10_2 (FEDORA-EPEL-2026-ff3b5b67c1) Calculate the similarity of two strings -------------------------------------------------------------------------------- Update Information: This update brings a new perl-String-Similarity package, a Perl module for comparing a string similarity. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2026 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-51 - Perl 5.44 rebuild * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-50 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-49 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-48 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jul 7 2025 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-47 - Perl 5.42 rebuild * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-46 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Dec 9 2024 Petr Pisar <ppisar(a)redhat.com> - 1.04-45 - Modernize a spec file - Package the tests * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.04-44 - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530547 - Please branch and buidl perl-String-Similarity for EPEL10 , 10.3 and 10.2 https://bugzilla.redhat.com/show_bug.cgi?id=2530547 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 09 Sep '26

09 Sep '26

The following Fedora EPEL 9 Security updates need testing: Age URL 294 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 76 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d nagios-plugins-2.5-2.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-942d98e619 mongo-c-driver-1.30.9-1.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a841ec568c rust-hickory-net-0.26.2-1.el9 rust-hickory-proto-0.26.2-1.el9 rust-hickory-resolver-0.26.2-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-addfdae9ee rust-lru-0.18.4-1.el9 rust-lru0.16-0.16.4-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7bb698a477 python-configargparse-1.7.7-1.el9 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d6aefc999f php-pecl-mongodb-1.20.1-3.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing GitPython-3.1.62-1.el9 lesspipe-2.28-1.el9 qm-1.3-1.el9 Details about builds: ================================================================================ GitPython-3.1.62-1.el9 (FEDORA-EPEL-2026-d8f2957095) Python Git Library -------------------------------------------------------------------------------- Update Information: Update to 3.1.62 (close RHBZ#2529282) Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.1.62-1 - Update to 3.1.62 (close RHBZ#2529282) - Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529282 - GitPython-3.1.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529282 -------------------------------------------------------------------------------- ================================================================================ lesspipe-2.28-1.el9 (FEDORA-EPEL-2026-926a34488d) Input filter for less to better display files -------------------------------------------------------------------------------- Update Information: version 2.28 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Andreas Haupt <andreas.haupt(a)desy.de> - 2.28-1 - version 2.28 -------------------------------------------------------------------------------- ================================================================================ qm-1.3-1.el9 (FEDORA-EPEL-2026-bef2e304f5) Containerized environment for running Quality Management software -------------------------------------------------------------------------------- Update Information: Automatic update for qm-1.3-1.el9. Changelog for qm * Wed Sep 09 2026 Packit <hello(a)packit.dev> - 101:1.3-1 - Update to version 1.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Packit <hello(a)packit.dev> - 101:1.3-1 - Update to version 1.3 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 09 Sep '26

09 Sep '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 76 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-52df07119c libmongocrypt-1.20.4-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-03de7cc5de mongo-c-driver-2.5.2-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-bb3aac9602 php-pecl-mongodb2-2.5.2-1.el10_3 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5f7576d774 pdns-recursor-5.4.6-2.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-75dd81100d rust-hickory-net-0.26.2-1.el10_3 rust-hickory-proto-0.26.2-1.el10_3 rust-hickory-resolver-0.26.2-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4797ddd9f4 python-configargparse-1.7.7-1.el10_3 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ffca0f924a openvpn-2.7.7-1.el10_3 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d623f0849b roundcubemail-1.6.19-1.el10_3 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a0e219c2a3 perl-Net-OAuth-0.33-2.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing GitPython-3.1.62-1.el10_3 lesspipe-2.28-1.el10_3 perl-String-Similarity-1.04-51.el10_3 qr-code-generator-1.8.0-25.el10_3 Details about builds: ================================================================================ GitPython-3.1.62-1.el10_3 (FEDORA-EPEL-2026-9b91575037) Python Git Library -------------------------------------------------------------------------------- Update Information: Update to 3.1.62 (close RHBZ#2529282) Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.1.62-1 - Update to 3.1.62 (close RHBZ#2529282) - Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529282 - GitPython-3.1.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529282 -------------------------------------------------------------------------------- ================================================================================ lesspipe-2.28-1.el10_3 (FEDORA-EPEL-2026-19fa3e6c61) Input filter for less to better display files -------------------------------------------------------------------------------- Update Information: version 2.28 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Andreas Haupt <andreas.haupt(a)desy.de> - 2.28-1 - version 2.28 -------------------------------------------------------------------------------- ================================================================================ perl-String-Similarity-1.04-51.el10_3 (FEDORA-EPEL-2026-105a8cd0e2) Calculate the similarity of two strings -------------------------------------------------------------------------------- Update Information: This update brings a new perl-String-Similarity package, a Perl module for comparing a string similarity. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2026 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-51 - Perl 5.44 rebuild * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-50 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-49 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-48 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jul 7 2025 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-47 - Perl 5.42 rebuild * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-46 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Dec 9 2024 Petr Pisar <ppisar(a)redhat.com> - 1.04-45 - Modernize a spec file - Package the tests * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.04-44 - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530547 - Please branch and buidl perl-String-Similarity for EPEL10 , 10.3 and 10.2 https://bugzilla.redhat.com/show_bug.cgi?id=2530547 -------------------------------------------------------------------------------- ================================================================================ qr-code-generator-1.8.0-25.el10_3 (FEDORA-EPEL-2026-4748d211fe) High-quality QR Code generator library -------------------------------------------------------------------------------- Update Information: New package. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jun 3 2026 Python Maint <python-maint(a)redhat.com> - 1.8.0-24 - Rebuilt for Python 3.15 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Sep 19 2025 Python Maint <python-maint(a)redhat.com> - 1.8.0-22 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Vitaly <vitaly(a)easycoding.org> - 1.8.0-21 - Fixed FTBFS after recent SPEC changes. * Fri Aug 15 2025 Python Maint <python-maint(a)redhat.com> - 1.8.0-20 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Aug 15 2025 Vitaly <vitaly(a)easycoding.org> - 1.8.0-19 - Switched to using the new configuration option for building tests. * Fri Aug 15 2025 Vitaly <vitaly(a)easycoding.org> - 1.8.0-18 - Rebased the qrcodegen-cmake to v1.8.0-cmake4 tag. * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.4 updates-testing report
by updates＠fedoraproject.org 09 Sep '26

09 Sep '26

The following Fedora EPEL 10.4 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b nagios-plugins-2.5-2.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-20b328f827 libmongocrypt-1.20.4-1.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9df5c5ffc2 mongo-c-driver-2.5.2-1.el10_4 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b4364ba946 php-pecl-mongodb2-2.5.2-1.el10_4 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-aff1d2673f rust-hickory-net-0.26.2-1.el10_4 rust-hickory-proto-0.26.2-1.el10_4 rust-hickory-resolver-0.26.2-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-aa36b10495 podman-tui-2.0.0-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5ebad042c9 rust-lru-0.18.4-1.el10_4 rust-lru0.16-0.16.4-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f640ba6385 python-configargparse-1.7.7-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7f69be3a02 openvpn-2.7.7-1.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-37f493ad5e roundcubemail-1.6.19-1.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6faf4f038 perl-Net-OAuth-0.33-2.el10_4 The following builds have been pushed to Fedora EPEL 10.4 updates-testing GitPython-3.1.62-1.el10_4 lesspipe-2.28-1.el10_4 perl-String-Similarity-1.04-51.el10_4 qm-1.3-1.el10_4 Details about builds: ================================================================================ GitPython-3.1.62-1.el10_4 (FEDORA-EPEL-2026-dda9087701) Python Git Library -------------------------------------------------------------------------------- Update Information: Update to 3.1.62 (close RHBZ#2529282) Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.1.62-1 - Update to 3.1.62 (close RHBZ#2529282) - Fixes GHSA-hmq2-w58f-27jc -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529282 - GitPython-3.1.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529282 -------------------------------------------------------------------------------- ================================================================================ lesspipe-2.28-1.el10_4 (FEDORA-EPEL-2026-191503d2bb) Input filter for less to better display files -------------------------------------------------------------------------------- Update Information: version 2.28 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Andreas Haupt <andreas.haupt(a)desy.de> - 2.28-1 - version 2.28 -------------------------------------------------------------------------------- ================================================================================ perl-String-Similarity-1.04-51.el10_4 (FEDORA-EPEL-2026-e87f977008) Calculate the similarity of two strings -------------------------------------------------------------------------------- Update Information: This update brings a new perl-String-Similarity package, a Perl module for comparing a string similarity. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2026 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-51 - Perl 5.44 rebuild * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-50 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-49 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-48 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Mon Jul 7 2025 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.04-47 - Perl 5.42 rebuild * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.04-46 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Dec 9 2024 Petr Pisar <ppisar(a)redhat.com> - 1.04-45 - Modernize a spec file - Package the tests * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.04-44 - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2530547 - Please branch and buidl perl-String-Similarity for EPEL10 , 10.3 and 10.2 https://bugzilla.redhat.com/show_bug.cgi?id=2530547 -------------------------------------------------------------------------------- ================================================================================ qm-1.3-1.el10_4 (FEDORA-EPEL-2026-49f02efc96) Containerized environment for running Quality Management software -------------------------------------------------------------------------------- Update Information: Automatic update for qm-1.3-1.el10_4. Changelog for qm * Wed Sep 09 2026 Packit <hello(a)packit.dev> - 101:1.3-1 - Update to version 1.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 9 2026 Packit <hello(a)packit.dev> - 101:1.3-1 - Update to version 1.3 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 09 Sep '26

09 Sep '26

The following Fedora EPEL 8 Security updates need testing: Age URL 293 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4f2d0d5209 mongo-c-driver-1.30.9-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing bzip3-1.3.1-5.el8 Details about builds: ================================================================================ bzip3-1.3.1-5.el8 (FEDORA-EPEL-2026-b1de5864bc) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information: This release fixes handling streams with a specific size. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Petr Pisar <ppisar(a)redhat.com> - 1.3.1-5 - Fix decompressing large incompressible streams (upstream GH#174) - Fix compressing streams of size being a multiple of bzip3 stream block size (upstream GH#175) --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 08 Sep '26

08 Sep '26

The following Fedora EPEL 9 Security updates need testing: Age URL 293 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db xpdf-4.06-1.el9 75 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71571c82db postgresql16-anonymizer-3.1.1-2.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d nagios-plugins-2.5-2.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-942d98e619 mongo-c-driver-1.30.9-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a841ec568c rust-hickory-net-0.26.2-1.el9 rust-hickory-proto-0.26.2-1.el9 rust-hickory-resolver-0.26.2-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-addfdae9ee rust-lru-0.18.4-1.el9 rust-lru0.16-0.16.4-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7bb698a477 python-configargparse-1.7.7-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing barman-3.18.0-2.el9 bash-preexec-0.6.0-1.el9 bzip3-1.3.1-5.el9 jfrog-cli-2.124.0-1.el9 php-pecl-mongodb-1.20.1-3.el9 rust-clap_mangen-0.3.3-1.el9 rust-coreutils-0.7.0-11.el9 rust-oxipng-9.1.5-7.el9 rust-pastel-0.12.0-3.el9 rust-sha1collisiondetection-0.3.4-4.el9 rust-sop-0.8.2-5.el9 sandogasa-0.23.0-3.el9 Details about builds: ================================================================================ barman-3.18.0-2.el9 (FEDORA-EPEL-2026-23c3a771ce) Backup and Recovery Manager for PostgreSQL -------------------------------------------------------------------------------- Update Information: Fix man page allocation between the various subpackages. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Simone Caronni <negativo17(a)gmail.com> - 3.18.0-2 - Fix man page allocation to subpackages -------------------------------------------------------------------------------- ================================================================================ bash-preexec-0.6.0-1.el9 (FEDORA-EPEL-2026-c55c47cb77) preexec and precmd functions for Bash just like Zsh -------------------------------------------------------------------------------- Update Information: Initial import of bash-preexec-0.6.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Cristian Le <git(a)lecris.dev> - 0.6.0-1 - Import rhbz#2297308 -------------------------------------------------------------------------------- ================================================================================ bzip3-1.3.1-5.el9 (FEDORA-EPEL-2026-e97102aaab) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information: This release fixes handling streams with a specific size. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Petr Pisar <ppisar(a)redhat.com> - 1.3.1-5 - Fix decompressing large incompressible streams (upstream GH#174) - Fix compressing streams of size being a multiple of bzip3 stream block size (upstream GH#175) -------------------------------------------------------------------------------- ================================================================================ jfrog-cli-2.124.0-1.el9 (FEDORA-EPEL-2026-b6fa9371b8) CLI to automate access to JFrog products -------------------------------------------------------------------------------- Update Information: Update to 2.124.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Simone Caronni <negativo17(a)gmail.com> - 2.124.0-1 - Update to 2.124.0 and update logic to exclude tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528151 - jfrog-cli-2.124.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528151 -------------------------------------------------------------------------------- ================================================================================ php-pecl-mongodb-1.20.1-3.el9 (FEDORA-EPEL-2026-d6aefc999f) MongoDB driver for PHP -------------------------------------------------------------------------------- Update Information: Backported from 1.21.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968 Backported from 1.21.7 PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in #2059 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 1.20.1-3 - Reject null bytes in namespaces and periods in database names - Fix out-of-bounds read when building BSON field path CVE-2026-84968 -------------------------------------------------------------------------------- ================================================================================ rust-clap_mangen-0.3.3-1.el9 (FEDORA-EPEL-2026-0d1609a1c2) Manpage generator for clap -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.3.3-1 - Update to version 0.3.3; Fixes RHBZ#2452331 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.33-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-coreutils-0.7.0-11.el9 (FEDORA-EPEL-2026-0d1609a1c2) coreutils ~ GNU coreutils reimplementation in Rust -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.7.0-11 - Update clap_mangen to 0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-oxipng-9.1.5-7.el9 (FEDORA-EPEL-2026-0d1609a1c2) Lossless PNG compression optimizer -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.5-7 - Allow newer clap_mangen 0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-pastel-0.12.0-3.el9 (FEDORA-EPEL-2026-0d1609a1c2) Command-line tool to generate, analyze, convert and manipulate colors -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-3 - Update clap_mangen to 0.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-sha1collisiondetection-0.3.4-4.el9 (FEDORA-EPEL-2026-0d1609a1c2) SHA-1 hash function with collision detection and mitigation -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.3.4-4 - Allow clap_mangen 0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-sop-0.8.2-5.el9 (FEDORA-EPEL-2026-0d1609a1c2) Rust Interface for the Stateless OpenPGP Interface -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.8.2-5 - Update clap_mangen to 0.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ sandogasa-0.23.0-3.el9 (FEDORA-EPEL-2026-0d1609a1c2) A collection of Fedora and CentOS packaging tools -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-3 - Depend on clap_mangen/env to properly document env. vars. * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-2 - Allow clap_mangen 0.3 * Mon Sep 7 2026 Michel Lind <salimma(a)fedoraproject.org> - 0.23.0-1 - Update to version 0.23.0; Resolves: rhbz#2529411 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 updates-testing report
by updates＠fedoraproject.org 08 Sep '26

08 Sep '26

The following Fedora EPEL 10.3 Security updates need testing: Age URL 75 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837 haveged-1.9.26-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-52df07119c libmongocrypt-1.20.4-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-03de7cc5de mongo-c-driver-2.5.2-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-bb3aac9602 php-pecl-mongodb2-2.5.2-1.el10_3 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5f7576d774 pdns-recursor-5.4.6-2.el10_3 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-75dd81100d rust-hickory-net-0.26.2-1.el10_3 rust-hickory-proto-0.26.2-1.el10_3 rust-hickory-resolver-0.26.2-1.el10_3 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4797ddd9f4 python-configargparse-1.7.7-1.el10_3 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ffca0f924a openvpn-2.7.7-1.el10_3 The following builds have been pushed to Fedora EPEL 10.3 updates-testing barman-3.20.0-1.el10_3 bzip3-1.5.4-1.el10_3 jfrog-cli-2.115.0-1.el10_3 nfdump-1.7.10-1.el10_3 perl-Net-OAuth-0.33-2.el10_3 roundcubemail-1.6.19-1.el10_3 Details about builds: ================================================================================ barman-3.20.0-1.el10_3 (FEDORA-EPEL-2026-6801d2ced3) Backup and Recovery Manager for PostgreSQL -------------------------------------------------------------------------------- Update Information: Update to 3.20.0. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Simone Caronni <negativo17(a)gmail.com> - 3.20.0-1 - Import changes from Fedora's 3.20 version -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480184 - barman-3.20.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480184 -------------------------------------------------------------------------------- ================================================================================ bzip3-1.5.4-1.el10_3 (FEDORA-EPEL-2026-05ea7636ce) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information: This release fixes handling streams with a specific size. It also improves a documenation. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Petr Pisar <ppisar(a)redhat.com> - 1.5.4-1 - 1.5.4 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529582 - bzip3-1.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529582 -------------------------------------------------------------------------------- ================================================================================ jfrog-cli-2.115.0-1.el10_3 (FEDORA-EPEL-2026-da224eb425) CLI to automate access to JFrog products -------------------------------------------------------------------------------- Update Information: Update to 2.124.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 20 2026 Simone Caronni <negativo17(a)gmail.com> - 2.115.0-1 - Update to 2.115.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528151 - jfrog-cli-2.124.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528151 -------------------------------------------------------------------------------- ================================================================================ nfdump-1.7.10-1.el10_3 (FEDORA-EPEL-2026-d682a2abee) NetFlow collecting and processing tools -------------------------------------------------------------------------------- Update Information: nfdump: 1.7.10 release -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Denis Fateyev <denis(a)fateyev.com> - 1.7.10-1 - Update to version 1.7.10 * Mon Sep 7 2026 Denis Fateyev <denis(a)fateyev.com> - 1.7.9-1 - Update to version 1.7.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529567 - nfdump-1.7.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529567 -------------------------------------------------------------------------------- ================================================================================ perl-Net-OAuth-0.33-2.el10_3 (FEDORA-EPEL-2026-a0e219c2a3) OAuth protocol support library for Perl -------------------------------------------------------------------------------- Update Information: Fixes CVE-2025-22376 and CVE-2026-75589 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 30 2026 Emmanuel Seyman <emmanuel(a)seyman.fr> - 0.33-2 - Rework dependencies * Thu Aug 27 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.33-1 - Update to 0.33 (RHBZ#2517683) - Fixes CVE-2026-72889 (RHBZ#2519409) * Sun Aug 16 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.32-1 - Update to 0.32 (RHBZ#2517177) - Fixes CVE-2026-72887 and CVE-2026-72888 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Apr 4 2025 Xavier Bachelot <xacier(a)bachelot.org> - 0.31-1 - Update to 0.31 (RHBZ#2357243) * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.30-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2335501 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2335501 [ 2 ] Bug #2519562 - CVE-2026-75589 perl-Net-OAuth: Net::OAuth: Information disclosure via timing attack in signature verification [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2519562 -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.6.19-1.el10_3 (FEDORA-EPEL-2026-d623f0849b) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Release 1.6.19 Fix PHP Warning: Undefined variable $tmp_command in .../plugins/markasjunk/drivers/cmd_learn.php (#10294) Security: Fix CSS declaration smuggling via un-encoded ampersand emission Security: Fix CSS property injection via body background attribute Security: Fix email header injection via bare CR in the subject field Security: Fix email header injection via C-escape \r in the recipient display name Security: Fix email header injection via identity's organization field Security: Fix zero-click stored XSS via TNEF MIME tag injection in the attachment URL Security: Fix XSS in the HTML editor using text/enriched part content Security: Fix cross-user access in contact group membership (add/remove) in the SQL address book Security: Fix is_local_url() bypass via trailing-dot FQDN in stylesheet URL Security: Fix remote content blocking bypass via CSS escapes in FuncIRI attributes Security: Fix remote-content blocker bypass via SVG SMIL src animation Security: Fix SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4 addresses -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 1.6.19-1 - update to 1.6.19 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.2 updates-testing report
by updates＠fedoraproject.org 08 Sep '26

08 Sep '26

The following Fedora EPEL 10.2 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ef4ca1433b mongo-c-driver-1.30.9-1.el10_2 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f37ac61468 pdns-recursor-5.4.6-2.el10_2 The following builds have been pushed to Fedora EPEL 10.2 updates-testing bzip3-1.5.4-1.el10_2 egl-gbm-1.1.4-3.el10_2 egl-wayland-1.1.22-2.el10_2 egl-wayland2-1.0.2-1.el10_2 egl-x11-1.0.6-1.el10_2 jfrog-cli-2.124.0-1.el10_2 perl-Net-OAuth-0.33-2.el10_2 php-pecl-mongodb-1.21.9-1.el10_2 php-pecl-mongodb2-2.1.9-2.el10_2 roundcubemail-1.6.19-1.el10_2 Details about builds: ================================================================================ bzip3-1.5.4-1.el10_2 (FEDORA-EPEL-2026-3609bafc9e) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information: This release fixes handling streams with a specific size. It also improves a documenation. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Petr Pisar <ppisar(a)redhat.com> - 1.5.4-1 - 1.5.4 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529582 - bzip3-1.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529582 -------------------------------------------------------------------------------- ================================================================================ egl-gbm-1.1.4-3.el10_2 (FEDORA-EPEL-2026-c43519b510) Nvidia egl gbm libary -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-3 - Fix library version * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-2 - Drop snapshot conditionals * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-1 - Update to 1.1.4 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:1.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:1.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ egl-wayland-1.1.22-2.el10_2 (FEDORA-EPEL-2026-c43519b510) EGLStream-based Wayland external platform -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.1.22-2 - Drop snapshot conditionals * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.1.22-1 - Update to 1.1.22 -------------------------------------------------------------------------------- ================================================================================ egl-wayland2-1.0.2-1.el10_2 (FEDORA-EPEL-2026-c43519b510) Dma-buf-based Wayland external platform library -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.0.2-1 - Update to 1.0.2 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ egl-x11-1.0.6-1.el10_2 (FEDORA-EPEL-2026-c43519b510) NVIDIA XLib and XCB EGL Platform Library -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.0.6-1 - Update to 1.0.6 -------------------------------------------------------------------------------- ================================================================================ jfrog-cli-2.124.0-1.el10_2 (FEDORA-EPEL-2026-4fdd73e71c) CLI to automate access to JFrog products -------------------------------------------------------------------------------- Update Information: Update to 2.124.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Simone Caronni <negativo17(a)gmail.com> - 2.124.0-1 - Update to 2.124.0 and update logic to exclude tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528151 - jfrog-cli-2.124.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528151 -------------------------------------------------------------------------------- ================================================================================ perl-Net-OAuth-0.33-2.el10_2 (FEDORA-EPEL-2026-80df4fb4ea) OAuth protocol support library for Perl -------------------------------------------------------------------------------- Update Information: Fixes CVE-2025-22376 and CVE-2026-75589 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 30 2026 Emmanuel Seyman <emmanuel(a)seyman.fr> - 0.33-2 - Rework dependencies * Thu Aug 27 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.33-1 - Update to 0.33 (RHBZ#2517683) - Fixes CVE-2026-72889 (RHBZ#2519409) * Sun Aug 16 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.32-1 - Update to 0.32 (RHBZ#2517177) - Fixes CVE-2026-72887 and CVE-2026-72888 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Apr 4 2025 Xavier Bachelot <xacier(a)bachelot.org> - 0.31-1 - Update to 0.31 (RHBZ#2357243) * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.30-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2335501 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2335501 [ 2 ] Bug #2519562 - CVE-2026-75589 perl-Net-OAuth: Net::OAuth: Information disclosure via timing attack in signature verification [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2519562 -------------------------------------------------------------------------------- ================================================================================ php-pecl-mongodb-1.21.9-1.el10_2 (FEDORA-EPEL-2026-99ac8d2816) MongoDB driver for PHP -------------------------------------------------------------------------------- Update Information: Version 1.21.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968 Version 1.21.7 PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in #2059 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 1.21.9-1 - update to 1.21.9 -------------------------------------------------------------------------------- ================================================================================ php-pecl-mongodb2-2.1.9-2.el10_2 (FEDORA-EPEL-2026-7d7ac5f0f9) MongoDB driver for PHP version 2 -------------------------------------------------------------------------------- Update Information: Version 2.1.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 2.1.9-2 - rebuild with default php 8.3 * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 2.1.9-1 - update to 2.1.9 -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.6.19-1.el10_2 (FEDORA-EPEL-2026-78f8bcff8a) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Release 1.6.19 Fix PHP Warning: Undefined variable $tmp_command in .../plugins/markasjunk/drivers/cmd_learn.php (#10294) Security: Fix CSS declaration smuggling via un-encoded ampersand emission Security: Fix CSS property injection via body background attribute Security: Fix email header injection via bare CR in the subject field Security: Fix email header injection via C-escape \r in the recipient display name Security: Fix email header injection via identity's organization field Security: Fix zero-click stored XSS via TNEF MIME tag injection in the attachment URL Security: Fix XSS in the HTML editor using text/enriched part content Security: Fix cross-user access in contact group membership (add/remove) in the SQL address book Security: Fix is_local_url() bypass via trailing-dot FQDN in stylesheet URL Security: Fix remote content blocking bypass via CSS escapes in FuncIRI attributes Security: Fix remote-content blocker bypass via SVG SMIL src animation Security: Fix SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4 addresses -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 1.6.19-1 - update to 1.6.19 --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.4 updates-testing report
by updates＠fedoraproject.org 08 Sep '26

08 Sep '26

The following Fedora EPEL 10.4 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-811b088cf9 rust-ppmd-rust-1.4.1-1.el10_4 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8249fe4a72 perl-Net-DNS-1.56-1.el10_4 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1c4570b861 freerdp2-2.11.7-7.el10_4 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b nagios-plugins-2.5-2.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-20b328f827 libmongocrypt-1.20.4-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9df5c5ffc2 mongo-c-driver-2.5.2-1.el10_4 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b4364ba946 php-pecl-mongodb2-2.5.2-1.el10_4 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-aff1d2673f rust-hickory-net-0.26.2-1.el10_4 rust-hickory-proto-0.26.2-1.el10_4 rust-hickory-resolver-0.26.2-1.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-aa36b10495 podman-tui-2.0.0-1.el10_4 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5ebad042c9 rust-lru-0.18.4-1.el10_4 rust-lru0.16-0.16.4-1.el10_4 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f640ba6385 python-configargparse-1.7.7-1.el10_4 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-7f69be3a02 openvpn-2.7.7-1.el10_4 The following builds have been pushed to Fedora EPEL 10.4 updates-testing barman-3.20.0-1.el10_4 bash-preexec-0.6.0-1.el10_4 bzip3-1.5.4-1.el10_4 egl-gbm-1.1.4-3.el10_4 egl-wayland-1.1.22-2.el10_4 egl-wayland2-1.0.2-1.el10_4 egl-x11-1.0.6-1.el10_4 jfrog-cli-2.124.0-1.el10_4 nfdump-1.7.10-1.el10_4 perl-Net-OAuth-0.33-2.el10_4 postgresql16-pg_cron-1.6.7-1.el10_4 roundcubemail-1.6.19-1.el10_4 rust-clap_mangen-0.3.3-1.el10_4 rust-coreutils-0.7.0-11.el10_4 rust-oxipng-9.1.5-7.el10_4 rust-pastel-0.12.0-3.el10_4 rust-sha1collisiondetection-0.3.4-9.el10_4 rust-sop-0.8.2-5.el10_4 sandogasa-0.23.0-3.el10_4 Details about builds: ================================================================================ barman-3.20.0-1.el10_4 (FEDORA-EPEL-2026-18fd7e17df) Backup and Recovery Manager for PostgreSQL -------------------------------------------------------------------------------- Update Information: Update to 3.20.0. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Simone Caronni <negativo17(a)gmail.com> - 3.20.0-1 - Import changes from Fedora's 3.20 version -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480184 - barman-3.20.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480184 -------------------------------------------------------------------------------- ================================================================================ bash-preexec-0.6.0-1.el10_4 (FEDORA-EPEL-2026-4b82aa437c) preexec and precmd functions for Bash just like Zsh -------------------------------------------------------------------------------- Update Information: Initial import of bash-preexec-0.6.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Cristian Le <git(a)lecris.dev> - 0.6.0-1 - Import rhbz#2297308 -------------------------------------------------------------------------------- ================================================================================ bzip3-1.5.4-1.el10_4 (FEDORA-EPEL-2026-705544226d) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information: This release fixes handling streams with a specific size. It also improves a documenation. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Petr Pisar <ppisar(a)redhat.com> - 1.5.4-1 - 1.5.4 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529582 - bzip3-1.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529582 -------------------------------------------------------------------------------- ================================================================================ egl-gbm-1.1.4-3.el10_4 (FEDORA-EPEL-2026-433b532554) Nvidia egl gbm libary -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-3 - Fix library version * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-2 - Drop snapshot conditionals * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 2:1.1.4-1 - Update to 1.1.4 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:1.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:1.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ egl-wayland-1.1.22-2.el10_4 (FEDORA-EPEL-2026-433b532554) EGLStream-based Wayland external platform -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.1.22-2 - Drop snapshot conditionals * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.1.22-1 - Update to 1.1.22 -------------------------------------------------------------------------------- ================================================================================ egl-wayland2-1.0.2-1.el10_4 (FEDORA-EPEL-2026-433b532554) Dma-buf-based Wayland external platform library -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.0.2-1 - Update to 1.0.2 * Wed Jul 15 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ egl-x11-1.0.6-1.el10_4 (FEDORA-EPEL-2026-433b532554) NVIDIA XLib and XCB EGL Platform Library -------------------------------------------------------------------------------- Update Information: Update to all EGL libraries for currently supported NVIDIA driver branches including the new 615. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 4 2026 Simone Caronni <negativo17(a)gmail.com> - 1.0.6-1 - Update to 1.0.6 -------------------------------------------------------------------------------- ================================================================================ jfrog-cli-2.124.0-1.el10_4 (FEDORA-EPEL-2026-e46ce59989) CLI to automate access to JFrog products -------------------------------------------------------------------------------- Update Information: Update to 2.124.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Simone Caronni <negativo17(a)gmail.com> - 2.124.0-1 - Update to 2.124.0 and update logic to exclude tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2528151 - jfrog-cli-2.124.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2528151 -------------------------------------------------------------------------------- ================================================================================ nfdump-1.7.10-1.el10_4 (FEDORA-EPEL-2026-9acec40cd0) NetFlow collecting and processing tools -------------------------------------------------------------------------------- Update Information: nfdump: 1.7.10 release nfdump: 1.7.9 release -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Denis Fateyev <denis(a)fateyev.com> - 1.7.10-1 - Update to version 1.7.10 * Mon Sep 7 2026 Denis Fateyev <denis(a)fateyev.com> - 1.7.9-1 - Update to version 1.7.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2529182 - nfdump-1.7.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529182 [ 2 ] Bug #2529567 - nfdump-1.7.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=2529567 -------------------------------------------------------------------------------- ================================================================================ perl-Net-OAuth-0.33-2.el10_4 (FEDORA-EPEL-2026-e6faf4f038) OAuth protocol support library for Perl -------------------------------------------------------------------------------- Update Information: Fixes CVE-2025-22376 and CVE-2026-75589 -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 30 2026 Emmanuel Seyman <emmanuel(a)seyman.fr> - 0.33-2 - Rework dependencies * Thu Aug 27 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.33-1 - Update to 0.33 (RHBZ#2517683) - Fixes CVE-2026-72889 (RHBZ#2519409) * Sun Aug 16 2026 Xavier Bachelot <xacier(a)bachelot.org> - 0.32-1 - Update to 0.32 (RHBZ#2517177) - Fixes CVE-2026-72887 and CVE-2026-72888 * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Apr 4 2025 Xavier Bachelot <xacier(a)bachelot.org> - 0.31-1 - Update to 0.31 (RHBZ#2357243) * Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.30-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2335501 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2335501 [ 2 ] Bug #2519562 - CVE-2026-75589 perl-Net-OAuth: Net::OAuth: Information disclosure via timing attack in signature verification [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2519562 -------------------------------------------------------------------------------- ================================================================================ postgresql16-pg_cron-1.6.7-1.el10_4 (FEDORA-EPEL-2026-b73a61ce23) A simple cron-based job scheduler for PostgreSQL -------------------------------------------------------------------------------- Update Information: pg_cron is a simple cron-based job scheduler for PostgreSQL (10 or higher) that runs inside the database as an extension. The extension creates a background worker that tracks jobs in the cron.job table. Based on your configurations, to execute a job, the extension establishes a Postgres connection or spawns a database worker. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Daniel Handzus <dhandzus(a)redhat.com> - 1.6.7-1 - Initial import -------------------------------------------------------------------------------- ================================================================================ roundcubemail-1.6.19-1.el10_4 (FEDORA-EPEL-2026-37f493ad5e) Round Cube Webmail is a browser-based multilingual IMAP client -------------------------------------------------------------------------------- Update Information: Release 1.6.19 Fix PHP Warning: Undefined variable $tmp_command in .../plugins/markasjunk/drivers/cmd_learn.php (#10294) Security: Fix CSS declaration smuggling via un-encoded ampersand emission Security: Fix CSS property injection via body background attribute Security: Fix email header injection via bare CR in the subject field Security: Fix email header injection via C-escape \r in the recipient display name Security: Fix email header injection via identity's organization field Security: Fix zero-click stored XSS via TNEF MIME tag injection in the attachment URL Security: Fix XSS in the HTML editor using text/enriched part content Security: Fix cross-user access in contact group membership (add/remove) in the SQL address book Security: Fix is_local_url() bypass via trailing-dot FQDN in stylesheet URL Security: Fix remote content blocking bypass via CSS escapes in FuncIRI attributes Security: Fix remote-content blocker bypass via SVG SMIL src animation Security: Fix SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4 addresses -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Remi Collet <remi(a)remirepo.net> - 1.6.19-1 - update to 1.6.19 -------------------------------------------------------------------------------- ================================================================================ rust-clap_mangen-0.3.3-1.el10_4 (FEDORA-EPEL-2026-a178bc5403) Manpage generator for clap -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.3.3-1 - Update to version 0.3.3; Fixes RHBZ#2452331 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.33-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-coreutils-0.7.0-11.el10_4 (FEDORA-EPEL-2026-a178bc5403) coreutils ~ GNU coreutils reimplementation in Rust -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.7.0-11 - Update clap_mangen to 0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-oxipng-9.1.5-7.el10_4 (FEDORA-EPEL-2026-a178bc5403) Lossless PNG compression optimizer -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.5-7 - Allow newer clap_mangen 0.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-pastel-0.12.0-3.el10_4 (FEDORA-EPEL-2026-a178bc5403) Command-line tool to generate, analyze, convert and manipulate colors -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 6 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.0-3 - Update clap_mangen to 0.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-sha1collisiondetection-0.3.4-9.el10_4 (FEDORA-EPEL-2026-a178bc5403) SHA-1 hash function with collision detection and mitigation -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.3.4-9 - Allow clap_mangen 0.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.4-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ rust-sop-0.8.2-5.el10_4 (FEDORA-EPEL-2026-a178bc5403) Rust Interface for the Stateless OpenPGP Interface -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.8.2-5 - Update clap_mangen to 0.3 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 -------------------------------------------------------------------------------- ================================================================================ sandogasa-0.23.0-3.el10_4 (FEDORA-EPEL-2026-a178bc5403) A collection of Fedora and CentOS packaging tools -------------------------------------------------------------------------------- Update Information: Update the clap_mangen crate to version 0.3.3. Update sandogasa to version 0.23.0. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 8 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-3 - Depend on clap_mangen/env to properly document env. vars. * Mon Sep 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-2 - Allow clap_mangen 0.3 * Mon Sep 7 2026 Michel Lind <salimma(a)fedoraproject.org> - 0.23.0-1 - Update to version 0.23.0; Resolves: rhbz#2529411 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452331 - rust-clap_mangen-0.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452331 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 08 Sep '26

08 Sep '26

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2026-09-09 from 18:00:00 to 19:00:00 UTC At meeting-1(a)chat.fedoraproject.org The meeting will be about: https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha #topic EPEL Issues https://pagure.io/epel/issues * https://pagure.io/epel/issues?tags=meeting&status=Open #topic Old Business (if needed) #topic General Issues / Open Floor Source: https://calendar.fedoraproject.org//meeting/11230/

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel September 2026