The following Fedora EPEL 8 Security updates need testing:
Age URL
176 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3f6bf23440 apptainer-1.5.0-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4394a54d4e valkey-8.0.9-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f90771ac28 coturn-4.11.0-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f027656c88 zabbix6.0-6.0.46-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2231087f23 zabbix7.0-7.0.26-1.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-423f2faaf7 perl-Net-CIDR-Lite-0.24-1.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e4d7315140 editorconfig-0.12.11-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f4f7a26f7a proftpd-1.3.6e-10.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
gtk-gnutella-1.3.1-1.el8
perl-Apache-Session-Browseable-1.3.19-1.el8
radicale-3.7.3-1.el8
Details about builds:
================================================================================
gtk-gnutella-1.3.1-1.el8 (FEDORA-EPEL-2026-c7f8bfca42)
GUI based Gnutella Client
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 13 2026 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 1.3.1-1
- update to 1.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2476807 - gtk-gnutella package very outdated
https://bugzilla.redhat.com/show_bug.cgi?id=2476807
--------------------------------------------------------------------------------
================================================================================
perl-Apache-Session-Browseable-1.3.19-1.el8 (FEDORA-EPEL-2026-43206961a8)
Add index and search methods to Apache::Session
--------------------------------------------------------------------------------
Update Information:
This update has improvements to generate more secure session IDs
(CVE-2026-8503).
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2026 Paul Howarth <paul(a)city-fan.org> - 1.3.19-1
- Update to 1.3.19 (rhbz#2477392)
- Apache::Session::Generate::SHA256 used a low-entropy seed (time, PID, rand,
stringified hash ref) to derive session identifiers; use Crypt::URandom to
generate session ids from a cryptographically secure source, falling back
to the previous hashing method only if Crypt::URandom is unavailable
(CVE-2026-8503, similar in scope to CVE-2025-40931 and CVE-2025-40932)
- Fix Redis indexes: never cleaned before
- Improve resilience and reliability of Patroni driver
* Thu Apr 9 2026 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.18-4
- BR: perl(DBD::Cassandra) to improve test coverage
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.18-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2477392 - perl-Apache-Session-Browseable-1.3.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2477392
--------------------------------------------------------------------------------
================================================================================
radicale-3.7.3-1.el8 (FEDORA-EPEL-2026-29e2d26012)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 14 2026 Peter Bieringer <pb(a)bieringer.de> - 3.7.3-1
- Update to 3.7.3
--------------------------------------------------------------------------------