epel-package-announce September 2026

epel-package-announce@lists.fedoraproject.org

1 participants
2266 discussions

[SECURITY] Fedora EPEL 10.2 Update: chromium-154.0.8037.57-1.el10_2
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-c4d340d432 2026-09-30 01:16:50.541939+00:00 -------------------------------------------------------------------------------- Name : chromium Product : Fedora EPEL 10.2 Version : 154.0.8037.57 Release : 1.el10_2 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream CVE-2026-95276: Improper input validation in Themes CVE-2026-95277: Use after free in Views CVE-2026-95278: Missing authorization in WakeLock CVE-2026-95279: UI misrepresentation in Omnibox CVE-2026-95280: Race condition in V8 CVE-2026-95281: Buffer overflow in ANGLE CVE-2026-95282: Use after free in Platform CVE-2026-95283: Buffer overflow in Tint CVE-2026-95284: Buffer overflow in ANGLE CVE-2026-95285: Missing authorization in WebView CVE-2026-95286: Type confusion in Bindings CVE-2026-95287: Missing authorization in Navigation CVE-2026-95288: UI misrepresentation in Mobile CVE-2026-95289: Incorrect authorization in Scroll CVE-2026-95290: Missing authorization in NFC CVE-2026-95291: UI misrepresentation in SecurityIndicators CVE-2026-95292: Incorrect authorization in Safebrowsing CVE-2026-95293: Uninitialized resource in GPU CVE-2026-95294: UI misrepresentation in Browser CVE-2026-95295: Information leak in Mobile CVE-2026-95296: Missing authorization in Core CVE-2026-95297: Missing authorization in Contextual Tasks CVE-2026-95298: Use after free in Browser CVE-2026-95299: Use after free in GPU CVE-2026-95300: Missing authorization in DevTools CVE-2026-95301: Missing authorization in Extensions CVE-2026-95302: Incorrect authorization in WebAPKs CVE-2026-95303: Incomplete cleanup in SmartCard CVE-2026-95304: Out of bounds write in V8 CVE-2026-95305: UI misrepresentation in Chromoting CVE-2026-95306: Type confusion in V8 CVE-2026-95307: UI misrepresentation in ExtensionsMenu CVE-2026-95308: Integer overflow in Metrics CVE-2026-95309: UI misrepresentation in Mobile CVE-2026-95310: Use after free in AdFilter CVE-2026-95311: Free of non-heap memory in Fonts CVE-2026-95312: Information leak in Passwords CVE-2026-95313: Use after free in Fullscreen CVE-2026-95314: Incorrect authorization in HID CVE-2026-95315: Use after free in Aura CVE-2026-95316: Unchecked return value in Performance CVE-2026-95317: Incorrect authorization in MediaCapture CVE-2026-95318: Buffer overflow in Video CVE-2026-95319: Use after free in Printing CVE-2026-95320: Missing authorization in Navigation CVE-2026-95321: UI misrepresentation in Payments CVE-2026-95322: Out of bounds write in GPU CVE-2026-95323: UI misrepresentation in Chromium CVE-2026-95324: Uninitialized resource in GPU CVE-2026-95325: Use after free in ANGLE CVE-2026-95326: Incomplete cleanup in Bluetooth CVE-2026-95327: Information leak in Networking CVE-2026-95328: Confused deputy in Mobile CVE-2026-95329: Out of bounds write in WebGL CVE-2026-95330: Improper state validation in Downloads CVE-2026-95331: Out of bounds write in ANGLE CVE-2026-95332: Use of uninitialized variable in Tint CVE-2026-95333: Use after free in Metrics CVE-2026-95334: Incorrect reference resolution in WebProtect CVE-2026-95335: Use after free in HID CVE-2026-95336: Information leak in Transactions Platform CVE-2026-95337: UI misrepresentation in Messages CVE-2026-95338: Use after free in PDFium CVE-2026-95339: Use after free in ServiceWorker CVE-2026-95340: Incorrect authorization in PictureInPicture CVE-2026-95341: Improper input validation in Desktop CVE-2026-95342: Missing authorization in V8 CVE-2026-95343: Use after free in WebAudio CVE-2026-95344: Race condition in DevTools CVE-2026-95345: Use after free in Actor CVE-2026-95346: UI misrepresentation in Chromoting CVE-2026-95347: Use after free in Updater CVE-2026-95348: Use after free in Bluetooth CVE-2026-95349: Buffer overflow in WebGL CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95351: Use after free in Views CVE-2026-95352: Incorrect authorization in DevTools CVE-2026-95353: Use after free in Bindings CVE-2026-95354: Use after free in Verifier CVE-2026-95355: Incorrect authorization in Navigation CVE-2026-95356: Use after free in WindowDialog CVE-2026-95357: Out of bounds write in GPU CVE-2026-95358: Incorrect authorization in Mobile CVE-2026-95359: Uninitialized resource in GPU CVE-2026-95360: Race condition in Editing CVE-2026-95361: Confused deputy in DevTools CVE-2026-95362: Cross-site request forgery in DevTools CVE-2026-95363: UI misrepresentation in FileSystem CVE-2026-95364: Improper input validation in Passwords CVE-2026-95365: Type confusion in IndexedDB CVE-2026-95366: Use of released resource in Core CVE-2026-95367: Information leak in DataTransfer CVE-2026-95368: Incorrect authorization in DevTools CVE-2026-95369: Inappropriate implementation in XML CVE-2026-95370: Inappropriate implementation in NFC CVE-2026-95371: Missing authorization in Views CVE-2026-95372: Use after free in Chromecast CVE-2026-95373: Use after free in DevTools CVE-2026-95374: Incorrect authorization in Network CVE-2026-95375: Incorrect authorization in BrowserTag CVE-2026-95376: Externally controlled reference in DevTools CVE-2026-95380: Type confusion in V8 CVE-2026-95381: Improper input validation in Printing CVE-2026-95382: Improper input validation in Auth CVE-2026-95384: Race condition in Transactions Platform CVE-2026-95385: Inappropriate implementation in PlatformIntegration -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 23 2026 Than Ngo <than(a)redhat.com> - 154.0.8037.57-1 - Update to 154.0.8037.57 * CVE-2026-95274: Improper output encoding in DevTools * CVE-2026-95275: Incorrect reference resolution in MediaStream * CVE-2026-95276: Improper input validation in Themes * CVE-2026-95277: Use after free in Views * CVE-2026-95278: Missing authorization in WakeLock * CVE-2026-95279: UI misrepresentation in Omnibox * CVE-2026-95280: Race condition in V8 * CVE-2026-95281: Buffer overflow in ANGLE * CVE-2026-95282: Use after free in Platform * CVE-2026-95283: Buffer overflow in Tint * CVE-2026-95284: Buffer overflow in ANGLE * CVE-2026-95285: Missing authorization in WebView * CVE-2026-95286: Type confusion in Bindings * CVE-2026-95287: Missing authorization in Navigation * CVE-2026-95288: UI misrepresentation in Mobile * CVE-2026-95289: Incorrect authorization in Scroll * CVE-2026-95290: Missing authorization in NFC * CVE-2026-95291: UI misrepresentation in SecurityIndicators * CVE-2026-95292: Incorrect authorization in Safebrowsing * CVE-2026-95293: Uninitialized resource in GPU * CVE-2026-95294: UI misrepresentation in Browser * CVE-2026-95295: Information leak in Mobile * CVE-2026-95296: Missing authorization in Core * CVE-2026-95297: Missing authorization in Contextual Tasks * CVE-2026-95298: Use after free in Browser * CVE-2026-95299: Use after free in GPU * CVE-2026-95300: Missing authorization in DevTools * CVE-2026-95301: Missing authorization in Extensions * CVE-2026-95302: Incorrect authorization in WebAPKs * CVE-2026-95303: Incomplete cleanup in SmartCard * CVE-2026-95304: Out of bounds write in V8 * CVE-2026-95305: UI misrepresentation in Chromoting * CVE-2026-95306: Type confusion in V8 * CVE-2026-95307: UI misrepresentation in ExtensionsMenu * CVE-2026-95308: Integer overflow in Metrics * CVE-2026-95309: UI misrepresentation in Mobile * CVE-2026-95310: Use after free in AdFilter * CVE-2026-95311: Free of non-heap memory in Fonts * CVE-2026-95312: Information leak in Passwords * CVE-2026-95313: Use after free in Fullscreen * CVE-2026-95314: Incorrect authorization in HID * CVE-2026-95315: Use after free in Aura * CVE-2026-95316: Unchecked return value in Performance * CVE-2026-95317: Incorrect authorization in MediaCapture * CVE-2026-95318: Buffer overflow in Video * CVE-2026-95319: Use after free in Printing * CVE-2026-95320: Missing authorization in Navigation * CVE-2026-95321: UI misrepresentation in Payments * CVE-2026-95322: Out of bounds write in GPU * CVE-2026-95323: UI misrepresentation in Chromium * CVE-2026-95324: Uninitialized resource in GPU * CVE-2026-95325: Use after free in ANGLE * CVE-2026-95326: Incomplete cleanup in Bluetooth * CVE-2026-95327: Information leak in Networking * CVE-2026-95328: Confused deputy in Mobile * CVE-2026-95329: Out of bounds write in WebGL * CVE-2026-95330: Improper state validation in Downloads * CVE-2026-95331: Out of bounds write in ANGLE * CVE-2026-95332: Use of uninitialized variable in Tint * CVE-2026-95333: Use after free in Metrics * CVE-2026-95334: Incorrect reference resolution in WebProtect * CVE-2026-95335: Use after free in HID * CVE-2026-95336: Information leak in Transactions Platform * CVE-2026-95337: UI misrepresentation in Messages * CVE-2026-95338: Use after free in PDFium * CVE-2026-95339: Use after free in ServiceWorker * CVE-2026-95340: Incorrect authorization in PictureInPicture * CVE-2026-95341: Improper input validation in Desktop * CVE-2026-95342: Missing authorization in V8 * CVE-2026-95343: Use after free in WebAudio * CVE-2026-95344: Race condition in DevTools * CVE-2026-95345: Use after free in Actor * CVE-2026-95346: UI misrepresentation in Chromoting * CVE-2026-95347: Use after free in Updater * CVE-2026-95348: Use after free in Bluetooth * CVE-2026-95349: Buffer overflow in WebGL * CVE-2026-95350: Buffer overflow in ANGLE * CVE-2026-95351: Use after free in Views * CVE-2026-95352: Incorrect authorization in DevTools * CVE-2026-95353: Use after free in Bindings * CVE-2026-95354: Use after free in Verifier * CVE-2026-95355: Incorrect authorization in Navigation * CVE-2026-95356: Use after free in WindowDialog * CVE-2026-95357: Out of bounds write in GPU * CVE-2026-95358: Incorrect authorization in Mobile * CVE-2026-95359: Uninitialized resource in GPU * CVE-2026-95360: Race condition in Editing * CVE-2026-95361: Confused deputy in DevTools * CVE-2026-95362: Cross-site request forgery in DevTools * CVE-2026-95363: UI misrepresentation in FileSystem * CVE-2026-95364: Improper input validation in Passwords * CVE-2026-95365: Type confusion in IndexedDB * CVE-2026-95366: Use of released resource in Core * CVE-2026-95367: Information leak in DataTransfer * CVE-2026-95368: Incorrect authorization in DevTools * CVE-2026-95369: Inappropriate implementation in XML * CVE-2026-95370: Inappropriate implementation in NFC * CVE-2026-95371: Missing authorization in Views * CVE-2026-95372: Use after free in Chromecast * CVE-2026-95373: Use after free in DevTools * CVE-2026-95374: Incorrect authorization in Network * CVE-2026-95375: Incorrect authorization in BrowserTag * CVE-2026-95376: Externally controlled reference in DevTools * CVE-2026-95380: Type confusion in V8 * CVE-2026-95381: Improper input validation in Printing * CVE-2026-95382: Improper input validation in Auth * CVE-2026-95384: Race condition in Transactions Platform * CVE-2026-95385: Inappropriate implementation in PlatformIntegration -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update chromium' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 8 Update: libxmp-4.7.3-2.el8
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-0f2c2b8360 2026-09-30 01:02:24.306464+00:00 -------------------------------------------------------------------------------- Name : libxmp Product : Fedora EPEL 8 Version : 4.7.3 Release : 2.el8 URL : http://xmp.sourceforge.net/ Summary : A multi-format module playback library Description : Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker (MOD), Scream Tracker 3 (S3M), Fast Tracker II (XM), and Impulse Tracker (IT). Many compressed module formats are supported, including popular Unix, DOS, and Amiga file packers including gzip, bzip2, SQSH, Powerpack, etc. -------------------------------------------------------------------------------- Update Information: Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue: https://github.com/libxmp/libxmp/issues/1029 . -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 18 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 4.7.3-1 - update to 4.7.3 (resolves rhbz#2531821) * Fri Jul 31 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 4.7.2-1 - update to 4.7.2 (resolves rhbz#2509260) * Thu Jul 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jul 15 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 4.7.1-1 - update to 4.7.1 (resolves rhbz#2497098) * Wed Feb 25 2026 Dominik 'Rathann' Mierzejewski <dominik(a)greysector.net> - 4.7.0-1 - update to 4.7.0 (resolves rhbz#2442522) * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.6.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.6.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update libxmp' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 Update: python-pyperclip-1.9.0-1.el8
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-2bd6e39f5c 2026-09-30 01:02:24.306446+00:00 -------------------------------------------------------------------------------- Name : python-pyperclip Product : Fedora EPEL 8 Version : 1.9.0 Release : 1.el8 URL : https://github.com/asweigart/pyperclip Summary : A cross-platform clipboard module for Python Description : Pyperclip is a cross-platform Python module for copy and paste clipboard functions. -------------------------------------------------------------------------------- Update Information: Update python-pyperclip to version 1.9.0. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 10 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.9.0-1 - Update to 1.9.0 - Also fix end-of-line encodings in AUTHORS.txt and CHANGES.txt * Tue Nov 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.8.2-3 - Update License to SPDX -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-pyperclip' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 Update: rust-trustfall_core-0.8.1-2.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

1 0

Fedora EPEL 10.3 Update: rust-toml-span-0.7.1-2.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-13ef80b459 2026-09-30 01:01:37.956335+00:00 -------------------------------------------------------------------------------- Name : rust-toml-span Product : Fedora EPEL 10.3 Version : 0.7.1 Release : 2.el10_3 URL : https://crates.io/crates/toml-span Summary : Toml parser and deserializer that preserves span information Description : Toml parser and deserializer that preserves span information. -------------------------------------------------------------------------------- Update Information: Initial package for cargo-semver-checks. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Jun 29 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.7.1-1 - Update to version 0.7.1; Fixes RHBZ#2437301 * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Thu Dec 11 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.6.0-1 - Update to version 0.6.0; Fixes RHBZ#2357181 * Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Thu Jan 23 2025 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.1-1 - Update to version 0.4.1; Fixes RHBZ#2332604 * Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Dec 2 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.0-1 - Update to version 0.3.0; Fixes RHBZ#2295580 * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update rust-toml-span' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 Update: rust-trustfall_derive-0.3.1-2.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

1 0

Fedora EPEL 10.3 Update: rust-trustfall-rustdoc-adapter-61.0.1-1.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-13ef80b459 2026-09-30 01:01:37.956335+00:00 -------------------------------------------------------------------------------- Name : rust-trustfall-rustdoc-adapter Product : Fedora EPEL 10.3 Version : 61.0.1 Release : 1.el10_3 URL : https://crates.io/crates/trustfall-rustdoc-adapter Summary : Trustfall query adapter for rustdoc JSON data Description : Trustfall query adapter for rustdoc JSON data. -------------------------------------------------------------------------------- Update Information: Initial package for cargo-semver-checks. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 7 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 61.0.1-1 - Update to version 61.0.1; Fixes RHBZ#2511920 * Fri Jul 31 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 61.0.0-1 - Update to version 61.0.0 * Fri Jul 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 60.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Sat Jul 4 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 60.0.0-1 - Update to version 60.0.0; Fixes RHBZ#2496740 * Tue Jun 30 2026 Benjamin A. Beasley <code(a)musicinmybrain.net> - 57.0.7-1 - Initial package (close RHBZ#2489105) -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update rust-trustfall-rustdoc-adapter' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 10.3 Update: rust-trustfall-rustdoc-adapter60-60.0.1-1.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

1 0

Fedora EPEL 10.3 Update: rust-trustfall-0.8.1-2.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

1 0

Fedora EPEL 10.3 Update: rust-trustfall_rustdoc-0.41.0-1.el10_3
by updates＠fedoraproject.org 29 Sep '26

29 Sep '26

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce September 2026