The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-432b5609c3
civetweb-1.16-10.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-353441fbbe
apptainer-1.4.3-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-fa10429956
turbo-attack-0.1.0-2.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-da8bc4aeb5
wordpress-6.8.3-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-c1a3189d11
libssh2-1.11.1-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
csmock-3.8.3-1.el9
log4cxx-1.5.0-1.el9
python-google-auth-2.41.1-1.el9
Details about builds:
================================================================================
csmock-3.8.3-1.el9 (FEDORA-EPEL-2025-8281bb1f0a)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 3 2025 Kamil Dudka <[email protected]> - 3.8.3-1
- update to latest upstream
* Fri Sep 19 2025 Python Maint <[email protected]> - 3.8.2-4
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint <[email protected]> - 3.8.2-3
- Rebuilt for Python 3.14.0rc2 bytecode
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
3.8.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
log4cxx-1.5.0-1.el9 (FEDORA-EPEL-2025-f007c8e719)
A port to C++ of the Log4j project
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0, fix CVE-2025-54813, CVE-2025-22838
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 3 2025 Till Hofmann <[email protected]> - 1.5.0-1
- Update to 1.5.0
* Sat Mar 1 2025 Till Hofmann <[email protected]> - 1.4.0-1
- Update to 1.4.0
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> -
1.3.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2393060 - CVE-2025-54812 log4cxx: Log4cxx HTMLLayout XSS
Vulnerability [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2393060
[ 2 ] Bug #2393131 - CVE-2025-54813 log4cxx: Log4cxx: Improper JSON Output
Neutralization [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2393131
--------------------------------------------------------------------------------
================================================================================
python-google-auth-2.41.1-1.el9 (FEDORA-EPEL-2025-1ee51a3f3c)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update python-google-auth to 2.41.1
Update python-google-auth to 2.41.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 1 2025 Fedora Release Monitoring
<[email protected]> - 1:2.41.1-1
- Update to 2.41.1 (#2400572)
* Mon Sep 29 2025 Fedora Release Monitoring
<[email protected]> - 1:2.41.0-1
- Update to 2.41.0 (#2400375)
* Fri Sep 19 2025 Python Maint <[email protected]> - 1:2.40.3-6
- Rebuilt for Python 3.14.0rc3 bytecode
* Sat Aug 30 2025 Benjamin A. Beasley <[email protected]> - 1:2.40.3-5
- Patch to allow cachetools 6; fixes RHBZ#2390999, fixes RHBZ#2391729
* Fri Aug 15 2025 Python Maint <[email protected]> - 1:2.40.3-4
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1:2.40.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jun 6 2025 Python Maint <[email protected]> - 1:2.40.3-2
- Rebuilt for Python 3.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2396790 - python-google-auth: Please rebuild in Fedora 43
https://bugzilla.redhat.com/show_bug.cgi?id=2396790
[ 2 ] Bug #2400375 - python-google-auth-2.41.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400375
[ 3 ] Bug #2400572 - python-google-auth-2.41.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400572
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
