The following Fedora EPEL 9 Security updates need testing:
 Age  URL
   4  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-869c4d896e   
easy-rsa-3.2.1-2.el9
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-18327b9098   
strongswan-5.9.10-2.el9
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9fc781d23d   
exim-4.98.1-1.el9


The following builds have been pushed to Fedora EPEL 9 updates-testing

    iniparser-4.1-12.el9
    libchrony-0.1-1.el9
    pre-commit-3.8.0-6.el9
    python-jupyter-core-4.10.0-3.el9
    rust-munge-0.4.3-1.el9
    rust-munge_macro-0.4.3-1.el9
    tmt-1.43.0-1.el9

Details about builds:


================================================================================
 iniparser-4.1-12.el9 (FEDORA-EPEL-2025-ac31d2cfcb)
 C library for parsing "INI-style" files
--------------------------------------------------------------------------------
Update Information:

Patched libiniparser to fix CVE-2025-0633
--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 26 2025 David Cantrell <[email protected]> - 4.1-12
- Patch for CVE-2025-0633 - Heap Overflow in iniparser.c (#2346474)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2346474 - CVE-2025-0633 iniparser: Heap Overflow in iniparser.c
        https://bugzilla.redhat.com/show_bug.cgi?id=2346474
--------------------------------------------------------------------------------


================================================================================
 libchrony-0.1-1.el9 (FEDORA-EPEL-2025-2800eece58)
 Library for monitoring chronyd
--------------------------------------------------------------------------------
Update Information:

libchrony is a new library for monitoring the chrony daemon.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 26 2025 Miroslav Lichvar <[email protected]> 0.1-1
- initial release
--------------------------------------------------------------------------------


================================================================================
 pre-commit-3.8.0-6.el9 (FEDORA-EPEL-2025-9da35cfc6d)
 Framework for managing and maintaining multi-language pre-commit hooks
--------------------------------------------------------------------------------
Update Information:

Add a runtime dependency on git-core
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 25 2025 Benjamin A. Beasley <[email protected]> - 3.8.0-6
- Add a runtime dependency on git-core
* Tue Feb 25 2025 Benjamin A. Beasley <[email protected]> - 3.8.0-5
- Simplify testing
- Always run an import-only “smoke test”
- Do not run language-specific tests; run only the tests that tox would run
* Tue Feb 25 2025 Benjamin A. Beasley <[email protected]> - 3.8.0-2
- Assert that the .dist-info directory contains a license file
--------------------------------------------------------------------------------


================================================================================
 python-jupyter-core-4.10.0-3.el9 (FEDORA-EPEL-2025-78b23c9500)
 The base package for Jupyter projects
--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2022-39286
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 25 2025 Lumír Balhar <[email protected]> - 4.10.0-3
- Fix for CVE-2022-39286
Resolves: rhbz#2138129
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2138129 - CVE-2022-39286 python-jupyter-core: jupyter-core: 
arbitrary code execution [epel-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2138129
--------------------------------------------------------------------------------


================================================================================
 rust-munge-0.4.3-1.el9 (FEDORA-EPEL-2025-89c1cdedd1)
 Macro for custom destructuring
--------------------------------------------------------------------------------
Update Information:

Initial packages for rust_munge and rust_munge_macro in EPEL9.
These are leaf packages now, but will eventually be required for updating the
rust-rkyv stack, once other packages are unblocked by a newer Rust compiler.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 25 2025 Benjamin A. Beasley <[email protected]> - 0.4.3-1
- Update to 0.4.3 (close RHBZ#2347567)
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> - 
0.4.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Tue Oct  8 2024 Benjamin A. Beasley <[email protected]> - 0.4.1-1
- Initial package (close RHBZ#2314105)
--------------------------------------------------------------------------------


================================================================================
 rust-munge_macro-0.4.3-1.el9 (FEDORA-EPEL-2025-89c1cdedd1)
 Macro for custom destructuring
--------------------------------------------------------------------------------
Update Information:

Initial packages for rust_munge and rust_munge_macro in EPEL9.
These are leaf packages now, but will eventually be required for updating the
rust-rkyv stack, once other packages are unblocked by a newer Rust compiler.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 25 2025 Benjamin A. Beasley <[email protected]> - 0.4.3-1
- Update to 0.4.3 (close RHBZ#2347568)
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> - 
0.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Sep 26 2024 Benjamin A. Beasley <[email protected]> - 0.4.1-2
- Link upstream PR for newline styles
* Thu Sep 26 2024 Benjamin A. Beasley <[email protected]> - 0.4.1-1
- Initial package (close RHBZ#2314104)
--------------------------------------------------------------------------------


================================================================================
 tmt-1.43.0-1.el9 (FEDORA-EPEL-2025-8343ceedbc)
 Test Management Tool
--------------------------------------------------------------------------------
Update Information:

Automatic update for tmt-1.43.0-1.el9.
Changelog for tmt
* Tue Feb 25 2025 Packit <[email protected]> - 1.43.0-1
- Update to version 1.43.0
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 25 2025 Packit <[email protected]> - 1.43.0-1
- Update to version 1.43.0
--------------------------------------------------------------------------------


-- 
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to