The following Fedora EPEL 10.2 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-af9e67fa0c
gi-docgen-2025.5-1.el10_2
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-899d88629d
mbedtls-3.6.4-2.el10_2
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6ec36372bb
python-aiohttp-3.11.18-4.el10_2
The following builds have been pushed to Fedora EPEL 10.2 updates-testing
chromium-141.0.7390.107-1.el10_2
colm-0.14.7-10.el10_2
jd-core-1.1.3-1.el10_2
lemonldap-ng-2.22.0-1.el10_2
perl-Redis-Fast-0.37-5.el10_2
perl-YAML-Syck-1.36-1.el10_2
pyflakes-3.1.0-8.el10_2
python-psycopg3-3.2.10-2.el10_2
python-pycryptodomex-3.23.0-4.el10_2
python-rcssmin-1.2.2-1.el10_2
rpkg-1.68-9.el10_2
rust-anyhow-1.0.100-1.el10_2
rust-stacker-0.1.22-1.el10_2
rust-tempfile-3.23.0-1.el10_2
rust-thiserror-2.0.17-1.el10_2
rust-thiserror-impl-2.0.17-1.el10_2
rust-toml_parser-1.0.4-1.el10_2
rust-toml_writer-1.0.4-1.el10_2
rust-tracing-tree-0.4.1-1.el10_2
steam-devices-1.0.0.101^git20250927.d3f7cd6-4.el10_2
Details about builds:
================================================================================
chromium-141.0.7390.107-1.el10_2 (FEDORA-EPEL-2025-254f3b40bc)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update 141.0.7390.107
* High CVE-2025-11756: Use after free in Safe Browsing
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 15 2025 Than Ngo <[email protected]> - 141.0.7390.107-1
- Update 141.0.7390.107
* High CVE-2025-11756: Use after free in Safe Browsing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2403507 - CVE-2025-11756 - Update chromium to 141.0.7390.107
[fedora-all, epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2403507
--------------------------------------------------------------------------------
================================================================================
colm-0.14.7-10.el10_2 (FEDORA-EPEL-2025-c609846e5b)
Programming language designed for the analysis of computer languages
--------------------------------------------------------------------------------
Update Information:
New package for epel10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
0.14.7-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> -
0.14.7-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Dec 23 2024 Mamoru TASAKA <[email protected]> - 0.14.7-8
- Correctly use off_t in cookie_seek_function_t especially on 32bit
- Remove incompatible SIZEOF_LONG definition in test suite
* Wed Aug 28 2024 Miroslav Suchý <[email protected]> - 0.14.7-7
- convert license to SPDX
* Wed Jul 17 2024 Fedora Release Engineering <[email protected]> -
0.14.7-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <[email protected]> -
0.14.7-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> -
0.14.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
jd-core-1.1.3-1.el10_2 (FEDORA-EPEL-2025-68e409fafd)
JD java decompiler library
--------------------------------------------------------------------------------
Update Information:
Merge branch 'rawhide' into epel10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Jiri Vanek <[email protected]> - 1.1.3-4
- RPMAUTOSPEC: unresolvable merge
--------------------------------------------------------------------------------
================================================================================
lemonldap-ng-2.22.0-1.el10_2 (FEDORA-EPEL-2025-9d6a50b9b2)
Web Single Sign On (SSO) and Access Management
--------------------------------------------------------------------------------
Update Information:
Update to 2.22.0
See https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.22.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Clement Oudot <[email protected]> - 2.22.0-1
- Update to 2.22.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2404716 - lemonldap-ng-2.22.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2404716
--------------------------------------------------------------------------------
================================================================================
perl-Redis-Fast-0.37-5.el10_2 (FEDORA-EPEL-2025-7549c591ee)
Perl binding for Redis database
--------------------------------------------------------------------------------
Update Information:
Initial build.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Xavier Bachelot <[email protected]> - 0.37-5
- Drop conditional around ExcludeArch, no i686 valkey build anywhere
- Directly BR: valkey rather than valkey-compat-redis
- Drop duplicate BR:
* Thu Oct 16 2025 Xavier Bachelot <[email protected]> - 0.37-4
- Drop some useless BR:s after hiredis unbundling
- Escape percent sign in changelog
* Wed Oct 15 2025 Xavier Bachelot <[email protected]> - 0.37-3
- Add BR: gcc
- Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
- Unset test envars
* Wed Oct 15 2025 Xavier Bachelot <[email protected]> - 0.37-2
- Unbundle hiredis
- Review fixes
* Mon Apr 14 2025 Xavier Bachelot <[email protected]> - 0.37-1
- Initial specfile
--------------------------------------------------------------------------------
================================================================================
perl-YAML-Syck-1.36-1.el10_2 (FEDORA-EPEL-2025-b882a0a154)
Fast, lightweight YAML loader and dumper
--------------------------------------------------------------------------------
Update Information:
This update addresses a flaw in which processing a specially-crafted YAML
document could lead to accessing information outside of the document itself and
hence potential information disclosure.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 11 2025 Paul Howarth <[email protected]> - 1.36-1
- Update to 1.36
- Address memory corruption leading to 'str' value being set on empty keys
* Fri Oct 10 2025 Paul Howarth <[email protected]> - 1.35-1
- Update to 1.35
- Address parsing error related to string detection on read for empty strings
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.34-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jul 7 2025 Jitka Plesnikova <[email protected]> - 1.34-17
- Perl 5.42 rebuild
* Sat Jan 18 2025 Paul Howarth <[email protected]> - 1.34-16
- Build using -std=gnu17 since ancient code does not compile with -std=c23
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.34-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.34-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Mon Jun 10 2024 Jitka Plesnikova <[email protected]> - 1.34-13
- Perl 5.40 rebuild
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> -
1.34-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
1.34-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2404559 - CVE-2025-11683 perl-YAML-Syck: YAML::Syck potential
Information Disclosure [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2404559
--------------------------------------------------------------------------------
================================================================================
pyflakes-3.1.0-8.el10_2 (FEDORA-EPEL-2025-3e54bc9ddf)
A simple program which checks Python source files for errors
--------------------------------------------------------------------------------
Update Information:
These packages are required for salt3006 in epel10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 19 2025 Python Maint <[email protected]> - 3.1.0-8
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint <[email protected]> - 3.1.0-7
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
3.1.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 3.1.0-5
- Rebuilt for Python 3.14
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
3.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
3.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 3.1.0-2
- Rebuilt for Python 3.13
* Sun Feb 18 2024 Orion Poplawski <[email protected]> - 3.1.0-1
- Update to 3.1.0
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
3.0.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
3.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2313995 - Please branch and build python-pycryptodomex for epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2313995
[ 2 ] Bug #2388829 - Please branch and build pyflakes in EPEL10
https://bugzilla.redhat.com/show_bug.cgi?id=2388829
--------------------------------------------------------------------------------
================================================================================
python-psycopg3-3.2.10-2.el10_2 (FEDORA-EPEL-2025-70faa5f6ad)
Psycopg 3 is a modern implementation of a PostgreSQL adapter for Python
--------------------------------------------------------------------------------
Update Information:
Enabled cython features
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 9 2025 Ales Nezbeda <[email protected]> - 3.2.10-2
- Enable tests on EPEL
- Enable cython build on EPEL
--------------------------------------------------------------------------------
================================================================================
python-pycryptodomex-3.23.0-4.el10_2 (FEDORA-EPEL-2025-3e54bc9ddf)
A self-contained cryptographic library for Python
--------------------------------------------------------------------------------
Update Information:
These packages are required for salt3006 in epel10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 19 2025 Python Maint <[email protected]> - 3.23.0-4
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint <[email protected]> - 3.23.0-3
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
3.23.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jul 12 2025 Mohame El Morabity <[email protected]> - 3.23.0-1
- Update to 3.23.0
* Tue Jun 3 2025 Python Maint <[email protected]> - 3.21.0-3
- Rebuilt for Python 3.14
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
3.21.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sun Oct 13 2024 Mohamed El Morabity <[email protected]> - 3.21.0-1
- Update to 3.21.0
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
3.20.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 3.20.0-2
- Rebuilt for Python 3.13
* Sun Feb 25 2024 Mohamed El Morabity <[email protected]> - 3.20.0-1
- Update to 3.20.0
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
3.19.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
3.19.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Sep 24 2023 Mohamed El Morabity <[email protected]> - 3.19.0-1
- Update to 3.19.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2313995 - Please branch and build python-pycryptodomex for epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2313995
[ 2 ] Bug #2388829 - Please branch and build pyflakes in EPEL10
https://bugzilla.redhat.com/show_bug.cgi?id=2388829
--------------------------------------------------------------------------------
================================================================================
python-rcssmin-1.2.2-1.el10_2 (FEDORA-EPEL-2025-37bc6e6745)
CSS Minifier
--------------------------------------------------------------------------------
Update Information:
rcssmin 1.2.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Mattias Ellert <[email protected]> - 1.2.2-1
- Update to version 1.2.2
* Fri Sep 19 2025 Python Maint <[email protected]> - 1.2.0-6
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint <[email protected]> - 1.2.0-5
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 2 2025 Python Maint <[email protected]> - 1.2.0-3
- Rebuilt for Python 3.14
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Dec 20 2024 Michel Lind <[email protected]> - 1.2.0-1
- Update to version 1.2.0; Fixes: RHBZ#2333581
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.1.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 7 2024 Python Maint <[email protected]> - 1.1.1-7
- Rebuilt for Python 3.13
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
1.1.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
1.1.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2403356 - python-rcssmin-1.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2403356
--------------------------------------------------------------------------------
================================================================================
rpkg-1.68-9.el10_2 (FEDORA-EPEL-2025-7b2d7d5bb5)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
Accept auto-generated sources in pre-push checks
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 LubomÃr SedláŠ<[email protected]> - 1.68-9
- Accept auto-generated sources in pre-push checks
* Fri Sep 19 2025 Python Maint <[email protected]> - 1.68-8
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2403510 - rpkg: Teach pre-push check to ignore auto-generated
source files
https://bugzilla.redhat.com/show_bug.cgi?id=2403510
--------------------------------------------------------------------------------
================================================================================
rust-anyhow-1.0.100-1.el10_2 (FEDORA-EPEL-2025-7fdd8c7ca0)
Flexible concrete Error type built on std::error::Error
--------------------------------------------------------------------------------
Update Information:
1.0.100
Teach clippy to lint formatting arguments in bail!, ensure!, anyhow!
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Benjamin A. Beasley <[email protected]> - 1.0.100-1
- Update to version 1.0.100; Fixes RHBZ#2396906
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2396906 - rust-anyhow-1.0.100 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396906
--------------------------------------------------------------------------------
================================================================================
rust-stacker-0.1.22-1.el10_2 (FEDORA-EPEL-2025-59711e1f99)
Stack growth library useful when implementing deeply recursive algorithms
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.22.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Fabio Valentini <[email protected]> - 0.1.22-1
- Update to version 0.1.22; Fixes RHBZ#2401189
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.1.21-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-tempfile-3.23.0-1.el10_2 (FEDORA-EPEL-2025-1cc1f5dbcb)
Library for managing temporary files and directories
--------------------------------------------------------------------------------
Update Information:
Update to version 3.23.0.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Fabio Valentini <[email protected]> - 3.23.0-1
- Update to version 3.23.0; Fixes RHBZ#2394110
--------------------------------------------------------------------------------
================================================================================
rust-thiserror-2.0.17-1.el10_2 (FEDORA-EPEL-2025-8b761386a3)
Derive(Error)
--------------------------------------------------------------------------------
Update Information:
thiserror / thiserror-impl 2.0.17
Use differently named __private module per patch release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Benjamin A. Beasley <[email protected]> - 2.0.17-1
- Update to version 2.0.17; Fixes RHBZ#2400023
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2400023 - rust-thiserror-2.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400023
[ 2 ] Bug #2400024 - rust-thiserror-impl-2.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400024
--------------------------------------------------------------------------------
================================================================================
rust-thiserror-impl-2.0.17-1.el10_2 (FEDORA-EPEL-2025-8b761386a3)
Implementation detail of the thiserror crate
--------------------------------------------------------------------------------
Update Information:
thiserror / thiserror-impl 2.0.17
Use differently named __private module per patch release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Benjamin A. Beasley <[email protected]> - 2.0.17-1
- Update to version 2.0.17; Fixes RHBZ#2400024
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2400023 - rust-thiserror-2.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400023
[ 2 ] Bug #2400024 - rust-thiserror-impl-2.0.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2400024
--------------------------------------------------------------------------------
================================================================================
rust-toml_parser-1.0.4-1.el10_2 (FEDORA-EPEL-2025-23f0ee6352)
Yet another format-preserving TOML parser
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Fabio Valentini <[email protected]> - 1.0.4-1
- Update to version 1.0.4; Fixes RHBZ#2396580
--------------------------------------------------------------------------------
================================================================================
rust-toml_writer-1.0.4-1.el10_2 (FEDORA-EPEL-2025-8863ca770c)
Low-level interface for writing out TOML
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Fabio Valentini <[email protected]> - 1.0.4-1
- Update to version 1.0.4; Fixes RHBZ#2396581
--------------------------------------------------------------------------------
================================================================================
rust-tracing-tree-0.4.1-1.el10_2 (FEDORA-EPEL-2025-d1e194c809)
Tracing Layer which prints a tree of spans and events
--------------------------------------------------------------------------------
Update Information:
Update to version 0.4.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Fabio Valentini <[email protected]> - 0.4.1-1
- Update to version 0.4.1; Fixes RHBZ#2397590
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.4.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
steam-devices-1.0.0.101^git20250927.d3f7cd6-4.el10_2
(FEDORA-EPEL-2025-b8971bd658)
Device support for Steam-related hardware
--------------------------------------------------------------------------------
Update Information:
Update to latest snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 17 2025 Simone Caronni <[email protected]> -
1.0.0.101^git20250927.d3f7cd6-4
- Update to latest snapshot.
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.0.0.101^git20240522.e2971e4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
