The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-cd95859e4b
vaultwarden-1.32.7-4.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-70d131bc6c
phpMyAdmin-5.2.2-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-dd34d33955
lemonldap-ng-2.20.2-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
distrobox-1.8.1.1-1.el9
memtester-4.7.1-1.el9
rust-listenfd-1.0.2-1.el9
rust-routinator-0.14.1-2.el9
rust-tokio-1.43.0-1.el9
rust-tokio-macros-2.5.0-1.el9
Details about builds:
================================================================================
distrobox-1.8.1.1-1.el9 (FEDORA-EPEL-2025-7a33a9e3ea)
Another tool for containerized command line environments on Linux
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.1.1
Update to 1.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2025 Alessio <alciregi_AT_fedoraproject.org> - 1.8.1.1-1
- Update to 1.8.1.1
* Sun Jan 19 2025 Alessio <alciregi_AT_fedoraproject.org> - 1.8.1-1
- Update to 1.8.1
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
1.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2341727 - distrobox-1.8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2341727
--------------------------------------------------------------------------------
================================================================================
memtester-4.7.1-1.el9 (FEDORA-EPEL-2025-03ae42a2ae)
Utility to test for faulty memory subsystem
--------------------------------------------------------------------------------
Update Information:
Update to 4.7.1 (fixes rhbz#2340842)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2025 Tim Semeijn <[email protected]> - 4.7.1-1
- Update to 4.7.1 (fixes rhbz#2340842)
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> -
4.7.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-listenfd-1.0.2-1.el9 (FEDORA-EPEL-2025-5094c382c6)
Simple library to work with listenfds passed from the outside
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.2.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 24 2025 Fabio Valentini <[email protected]> - 1.0.2-1
- Update to version 1.0.2; Fixes RHBZ#2338877
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Jul 20 2024 Fedora Release Engineering <[email protected]> -
1.0.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
1.0.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-routinator-0.14.1-2.el9 (FEDORA-EPEL-2025-f34b49ec4b)
RPKI relying party software
--------------------------------------------------------------------------------
Update Information:
New
ASPA support is now always compiled in and available if enable-aspa is set. The
aspa Cargo feature has been removed. (#990)
If merging mutliple ASPA objects for a single customer ASN results in more than
16,380 provider ASNs, the ASPA is dropped. (Note that ASPA objects with more
than 16,380 provider ASNs are already rejected during parsing.) (#996)
New archive-stats command that shows some statistics of an RRDP archive. (#982)
Re-enabled the use of GZIP compression in HTTP request sent by the RRDP
collector. Measures to deal with exploding data have been implemented in rpki-
rs#319. (#997)
Bug fixes
Fixed an issue with checking the file names in manifests that let to a crash
when non-ASCII characters are used. (rpki-rs#320, reported by Haya Schulmann and
Niklas Vogel of Goethe University Frankfurt/ATHENE Center and assigned
CVE-2025-0638)
The validation HTTP endpoints now accept prefixes with non-zero host bits.
(#987)
Removed duplicate rtr_client_reset_queries in HTTP metrics. (#992 by @sleinen)
Improved disk space consumption of the new RRDP archives by re-using empty space
when updating an object and padding all objects to a multiple of 256 bytes.
(#982)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2025 Michel Lind <[email protected]> - 0.14.1-2
- Restore license list; use shrink for easier future diffing
* Thu Jan 23 2025 Michel Lind <[email protected]> - 0.14.1-1
- Update to version 0.14.1; Fixes: RHBZ#2339650
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.14.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Jul 20 2024 Fedora Release Engineering <[email protected]> -
0.14.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2339699 - CVE-2025-0638 rust-routinator: Routinator crashes when
illegal characters are present in manifest file names [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2339699
--------------------------------------------------------------------------------
================================================================================
rust-tokio-1.43.0-1.el9 (FEDORA-EPEL-2025-17ab9640d5)
Event-driven, non-blocking I/O platform
--------------------------------------------------------------------------------
Update Information:
Update the tokio crate to version 1.43.0.
Update the tokio-macros crate to version 2.5.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2025 Fabio Valentini <[email protected]> - 1.43.0-1
- Update to version 1.43.0; Fixes RHBZ#2336434
--------------------------------------------------------------------------------
================================================================================
rust-tokio-macros-2.5.0-1.el9 (FEDORA-EPEL-2025-17ab9640d5)
Tokio's proc macros
--------------------------------------------------------------------------------
Update Information:
Update the tokio crate to version 1.43.0.
Update the tokio-macros crate to version 2.5.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 23 2025 Fabio Valentini <[email protected]> - 2.5.0-1
- Update to version 2.5.0; Fixes RHBZ#2336433
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
2.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
