The following Fedora EPEL 10.2 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-1c8cbf4b36
tcpreplay-4.5.2-1.el10_2
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-022dea72d7
cpp-httplib-0.26.0-1.el10_2
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9c018331a3
rust-matchers-0.2.0-1.el10_2 rust-tracing-subscriber-0.3.20-1.el10_2
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f84ca818d3
rust-async-broadcast-0.7.2-4.el10_2 rust-endi-1.1.0-4.el10_2
rust-enumflags2-0.7.12-2.el10_2 rust-enumflags2_derive-0.7.12-2.el10_2
rust-ordered-stream-0.2.0-6.el10_2 rust-secret-service-5.0.0-1.el10_2
rust-zbus-5.10.0-2.el10_2 rust-zbus_macros-5.10.0-1.el10_2
rust-zbus_names-4.2.0-2.el10_2 rust-zvariant-5.7.0-1.el10_2
rust-zvariant_derive-5.7.0-1.el10_2 rust-zvariant_utils-3.2.1-1.el10_2
uv-0.8.11-2.el10_2
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-23446b9b74
maturin-1.8.7-2.el10_2
The following builds have been pushed to Fedora EPEL 10.2 updates-testing
nsd-4.13.0-1.el10_2
pie-1.2.0-1.el10_2
pipx-1.7.1-2.el10_2
python-txaio-23.1.1-12.el10_2
rpkg-1.68-6.el10_2
ruff-0.11.5-7.el10_2
rust-deadpool-0.12.3-1.el10_2
Details about builds:
================================================================================
nsd-4.13.0-1.el10_2 (FEDORA-EPEL-2025-745411c5da)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Use '(all)' and '(none)' for the socket server affinity
log output instead of '*' and '-'.
The --enable-bind8-stats feature, was already enabled by default,
is described as enabled by default in usage.
The --enable-zone-stats feature is enabled by default. It can be
turned on with config like zonestats: "%s".
The --enable-ratelimit feature is enabled by default. The
ratelimit value is off by default. It can be turned on with
config like rrl-ratelimit: 200.
The --enable-dnstap feature is enabled by default. If fstrm-devel
or protobuf-c are not found by configure it prints an error.
It can be turned on with config like dnstap-enable: yes.
Change default for send-buffer-size to 4m, to mitigate a
cross-layer issue where the UDP socket send buffers are
exhausted waiting for ARP/NDP resolution. Thanks to Reflyable
for the report.
Disable TLSv1.2 if TLSv1.3 is available.
Merge #449: Add useful logging for XoT transfers.
Merge #425: Add experimental XDP (AF_XDP) support for UDP traffic
Merge #455: --with-dbdir option for configure to set the base
directory for the xfrd zone timer state file, the zone list file
and the cookie secrets file. Thanks Simon Josefsson.
Merge #456: Spelling fixes in metrics.c. Thanks Simon Josefsson.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 3 2025 Fabio Alessandro Locati <m...@fale.io> - 4.13.0-1
- Upgrade to 4.13.0. Fixes rhbz#2392842
* Thu Jul 24 2025 Fedora Release Engineering <rel...@fedoraproject.org> -
4.12.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2392842 - nsd-4.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392842
--------------------------------------------------------------------------------
================================================================================
pie-1.2.0-1.el10_2 (FEDORA-EPEL-2025-55226510a4)
PHP Installer for Extensions
--------------------------------------------------------------------------------
Update Information:
Version 1.2.0
Enhancement
337: Ensure packages are filtered to match the extension name thanks to @asgrim
324: Handle sudo prompts better in non-interactive terminals thanks to @asgrim
and @Jumping-Beaver
319: Improve exception when using pre-packaged-source and a branch alias thanks
to @asgrim and @khs1994
305: Show if a package can be updated with the given constraints thanks to
@asgrim
Bug
326: Check gh attestation command exists before using it thanks to @asgrim
325: Use a portable method of copying ownership to new file thanks to @asgrim
318: Filter 'PHP ' prefixed notices from output thanks to @asgrim and
@cracksalad
317: Force tags fetch to overcome tag confusion thanks to @asgrim and @llaville
316: Format Composer additional styles properly instead of trying to strip them
thanks to @asgrim and @TimWolla
Version 1.1.0
Enhancement
303: Dependency update and bump thanks to @asgrim
290: 263: implicitly create the extensionPath if it does not already exist
thanks to @asgrim
288: 283: improve messaging when windows archives not found on releases thanks
to @asgrim
287: 286: Trusted root update thanks to @asgrim and @github-actions[bot]
282: Run composer validate --strict as part of the Static Analysis CI thanks to
@TimWolla
277: Added PHP 8.5 support thanks to @thecaliskan
275: 133: Add bundled php exts support thanks to @asgrim
271: Improve package not found messaging thanks to @asgrim
270: Use version constraints for php project install thanks to @asgrim
Bug
285: Fix flakey tests caused by not using GH token correctly in CI thanks to
@asgrim
276: 273: Fix PHP warnings not being cleaned from output thanks to @asgrim
274: Do not clean up for download and build commands thanks to @asgrim and
@icanhazstring
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 3 2025 Remi Collet <r...@remirepo.net> - 1.2.0-1
- update to 1.2.0
* Fri Aug 8 2025 Remi Collet <r...@remirepo.net> - 1.1.0-1
- update to 1.1.0
--------------------------------------------------------------------------------
================================================================================
pipx-1.7.1-2.el10_2 (FEDORA-EPEL-2025-a6af5c8247)
Install and run Python applications in isolated environments
--------------------------------------------------------------------------------
Update Information:
Add zsh completion
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 3 2025 Arvin Verain <arvinver...@proton.me> - 1.7.1-2
- feat: Add zsh completion
--------------------------------------------------------------------------------
================================================================================
python-txaio-23.1.1-12.el10_2 (FEDORA-EPEL-2025-8f0ed98c92)
Compatibility API between asyncio/Twisted/Trollius
--------------------------------------------------------------------------------
Update Information:
Provide package for epel10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2025 Fedora Release Engineering <rel...@fedoraproject.org> -
23.1.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Tue Jun 3 2025 Python Maint <python-ma...@redhat.com> - 23.1.1-11
- Rebuilt for Python 3.14
* Mon Jan 20 2025 Fedora Release Engineering <rel...@fedoraproject.org> -
23.1.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Tue Dec 3 2024 Julien Enselme <juj...@jujens.eu> - 23.1.1-9
- Correct build for sphinx 8
* Fri Jul 19 2024 Fedora Release Engineering <rel...@fedoraproject.org> -
23.1.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <python-ma...@redhat.com> - 23.1.1-7
- Rebuilt for Python 3.13
* Fri Jan 26 2024 Fedora Release Engineering <rel...@fedoraproject.org> -
23.1.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <rel...@fedoraproject.org> -
23.1.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2390260 - Please branch and build python-txaio in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2390260
--------------------------------------------------------------------------------
================================================================================
rpkg-1.68-6.el10_2 (FEDORA-EPEL-2025-392983569e)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
A few patches:
pre-push-check: bogus error - file wasn't listed
Fix mockbuild --srpm-mock specfile_path
patch: Execute subprocess in text mode
fix typo in requirements README.
install: add rpmbuild arguments --with and --without
srpm: man page generation fixed
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 2 2025 OndÅej Nosek <ono...@redhat.com> - 1.68-6
- Patch: `pre-push-check`: bogus error - file wasn't listed
- Patch: Fix mockbuild --srpm-mock specfile_path
- Patch: `patch`: Execute subprocess in text mode
- Patch: type: fix typo in requirements README.
- Patch: `install`: add rpmbuild arguments `--with` and `--without`
- Patch: `srpm`: man page generation fixed
* Fri Aug 15 2025 Python Maint <python-ma...@redhat.com> - 1.68-5
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <rel...@fedoraproject.org> - 1.68-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ruff-0.11.5-7.el10_2 (FEDORA-EPEL-2025-57ebb6a630)
Extremely fast Python linter and code formatter
--------------------------------------------------------------------------------
Update Information:
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 2 2025 Fabio Valentini <decatho...@gmail.com> - 0.11.5-7
- Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160
* Fri Aug 15 2025 Python Maint <python-ma...@redhat.com> - 0.11.5-6
- Rebuilt for Python 3.14.0rc2 bytecode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2391973 - CVE-2025-58160 ruff: Tracing log pollution [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2391973
[ 2 ] Bug #2392006 - CVE-2025-58160 ruff: Tracing log pollution [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2392006
[ 3 ] Bug #2392045 - CVE-2025-58160 ruff: Tracing log pollution [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2392045
--------------------------------------------------------------------------------
================================================================================
rust-deadpool-0.12.3-1.el10_2 (FEDORA-EPEL-2025-279677c9fc)
Dead simple async pool
--------------------------------------------------------------------------------
Update Information:
[0.12.3] - 2025-08-19
Add unique id to objects which can be read via the Object::id method
Add WeakPool<T> and Pool::weak() for non-owning, upgradeable pool references.
Use num_cpus::get() * 2 as default pool size instead of num_cpu::get_physical()
* 4
which should result in the same pool size for most systems with hyper threading
but fixes
the default pool size in containerized environments.
Cache num_cpus::get() result to improve Pool creation performance.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 2 2025 Benjamin A. Beasley <c...@musicinmybrain.net> - 0.12.3-1
- Update to version 0.12.3; Fixes RHBZ#2392530
* Fri Jul 25 2025 Fedora Release Engineering <rel...@fedoraproject.org> -
0.12.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2392530 - rust-deadpool-0.12.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2392530
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
