The following Fedora EPEL 9 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ab0fae74f1
opentofu-1.10.3-1.el9
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-72356603ed
node-exporter-1.9.1-2.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e0c2088c0b
perl-Crypt-CBC-3.07-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-3ad6d2fe5c
rclone-1.70.3-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-c0a44d2c63
python3.13-3.13.5-4.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b153890b5
yarnpkg-1.22.22-11.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
chromium-138.0.7204.183-1.el9
kiwi-10.2.31-1.el9
podman-compose-1.5.0-2.el9
rust-cc-1.2.31-1.el9
rust-serde_json-1.0.142-1.el9
tmt-1.54.0-1.el9
Details about builds:
================================================================================
chromium-138.0.7204.183-1.el9 (FEDORA-EPEL-2025-a13ed3b3fb)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 138.0.7204.183
* CVE-2025-8292: Use after free in Media Stream
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 30 2025 Than Ngo <t...@redhat.com> - 138.0.7204.183-1
- Update to 138.0.7204.183
* CVE-2025-8292: Use after free in Media Stream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2384413 - CVE-2025-8292 chromium: Chrome Media Stream
Use-After-Free [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2384413
[ 2 ] Bug #2384414 - CVE-2025-8292 chromium: Chrome Media Stream
Use-After-Free [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2384414
--------------------------------------------------------------------------------
================================================================================
kiwi-10.2.31-1.el9 (FEDORA-EPEL-2025-838ea77584)
Flexible operating system image builder
--------------------------------------------------------------------------------
Update Information:
Fix repartitioning for OEM images, handle device locking properly, and support
parsing zstd-compressed rpm repodata for image definition inspection
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 2 2025 Neal Gompa <ngo...@fedoraproject.org> - 10.2.31-1
- Update to 10.2.31
- Turn check section off by default
* Thu Jul 24 2025 Fedora Release Engineering <rel...@fedoraproject.org> -
10.2.27-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2381917 - kiwi-10.2.31 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2381917
--------------------------------------------------------------------------------
================================================================================
podman-compose-1.5.0-2.el9 (FEDORA-EPEL-2025-d458fcf581)
Run docker-compose.yml using podman
--------------------------------------------------------------------------------
Update Information:
Require dotenv
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 1 2025 Gwyn Ciesla <gw...@protonmail.com> - 1.5.0-2
- Require dotenv
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2385841 - podman-compose rpm is failing to require core dependency
python-dotenv
https://bugzilla.redhat.com/show_bug.cgi?id=2385841
--------------------------------------------------------------------------------
================================================================================
rust-cc-1.2.31-1.el9 (FEDORA-EPEL-2025-9e867fe1ea)
Build-time dependency for Cargo build scripts to invoke the native C compiler
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.31.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 1 2025 Fabio Valentini <decatho...@gmail.com> - 1.2.31-1
- Update to version 1.2.31; Fixes RHBZ#2385924
--------------------------------------------------------------------------------
================================================================================
rust-serde_json-1.0.142-1.el9 (FEDORA-EPEL-2025-cee1e042c3)
JSON serialization file format
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.142.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 1 2025 Fabio Valentini <decatho...@gmail.com> - 1.0.142-1
- Update to version 1.0.142; Fixes RHBZ#2385881
--------------------------------------------------------------------------------
================================================================================
tmt-1.54.0-1.el9 (FEDORA-EPEL-2025-1fe3c3e2fa)
Test Management Tool
--------------------------------------------------------------------------------
Update Information:
Automatic update for tmt-1.54.0-1.el9.
Changelog for tmt
* Thu Jul 31 2025 Packit <he...@packit.dev> - 1.54.0-1
- Update to version 1.54.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 31 2025 Packit <he...@packit.dev> - 1.54.0-1
- Update to version 1.54.0
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
