The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f748b535ef
seamonkey-2.53.22-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
chromium-142.0.7444.134-1.el9
darkhttpd-1.17-2.el9
parallel-20251022-1.el9
python-pdfminer-20240706-2.el9
ruby-build-20251023-1.el9
rust-confy-0.4.0-14.el9
rust-jiff-0.2.16-1.el9
rust-sequoia-keystore-0.7.0-3.el9
rust-sequoia-keystore-server-0.2.0-3.el9
Details about builds:
================================================================================
chromium-142.0.7444.134-1.el9 (FEDORA-EPEL-2025-35c67d93f9)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 142.0.7444.134
* High CVE-2025-12725: Out of bounds write in WebGPU
* High CVE-2025-12726: Inappropriate implementation in Views
* High CVE-2025-12727: Inappropriate implementation in V8
* Medium CVE-2025-12728: Inappropriate implementation in Omnibox
* Medium CVE-2025-12729: Inappropriate implementation in Omnibox
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 6 2025 Than Ngo <[email protected]> - 142.0.7444.134-1
- Update to 142.0.7444.134
* High CVE-2025-12725: Out of bounds write in WebGPU
* High CVE-2025-12726: Inappropriate implementation in Views
* High CVE-2025-12727: Inappropriate implementation in V8
* Medium CVE-2025-12728: Inappropriate implementation in Omnibox
* Medium CVE-2025-12729: Inappropriate implementation in Omnibox
* Wed Nov 5 2025 Dominik Mierzejewski <[email protected]> -
142.0.7444.59-2
- Rebuilt for FFmpeg 8
--------------------------------------------------------------------------------
================================================================================
darkhttpd-1.17-2.el9 (FEDORA-EPEL-2025-b3b0d50062)
Secure, lightweight, fast, single-threaded HTTP/1.1 server
--------------------------------------------------------------------------------
Update Information:
update to 1.17 fix rhbz#2383212
opt-in to autochangelog
fix postrun scriptlet warning during rpm update
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 8 2025 Filipe Rosset <[email protected]> - 1.17-2
- fix postrun scriptlet warning during rpm update
* Sat Nov 8 2025 Filipe Rosset <[email protected]> - 1.17-1
- update to 1.17 fix rhbz#2383212
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> - 1.16-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jan 16 2025 Fedora Release Engineering <[email protected]> - 1.16-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Aug 28 2024 Miroslav Suchý <[email protected]> - 1.16-2
- convert license to SPDX
* Thu Jul 18 2024 Filipe Rosset <[email protected]> - 1.16-1
- Update to 1.16 fixes rhbz#2259096
* Wed Jul 17 2024 Fedora Release Engineering <[email protected]> - 1.14-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jan 24 2024 Fedora Release Engineering <[email protected]> - 1.14-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> - 1.14-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2383212 - darkhttpd-1.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2383212
--------------------------------------------------------------------------------
================================================================================
parallel-20251022-1.el9 (FEDORA-EPEL-2025-d6e0df228c)
Shell tool for executing jobs in parallel
--------------------------------------------------------------------------------
Update Information:
Update to 20251022
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 8 2025 Mikel Olasagasti Uranga <[email protected]> - 20251022-1
- Update to 20251022 - Closes rhbz#2397530
--------------------------------------------------------------------------------
================================================================================
python-pdfminer-20240706-2.el9 (FEDORA-EPEL-2025-a52b9deb70)
Tool for extracting information from PDF documents
--------------------------------------------------------------------------------
Update Information:
Backport security fix for GHSA-wf5f-4jwr-ppcp
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 8 2025 Benjamin A. Beasley <[email protected]> - 20240706-2
- Backport security fix for GHSA-wf5f-4jwr-ppcp
--------------------------------------------------------------------------------
================================================================================
ruby-build-20251023-1.el9 (FEDORA-EPEL-2025-2bfeb4c5ba)
Compile and install Ruby
--------------------------------------------------------------------------------
Update Information:
Update to 20251023
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 23 2025 Packit <[email protected]> - 20251023-1
- Update to 20251023 upstream release
- Resolves: rhbz#2406026
--------------------------------------------------------------------------------
================================================================================
rust-confy-0.4.0-14.el9 (FEDORA-EPEL-2025-9592b97f83)
Boilerplate-free configuration management
--------------------------------------------------------------------------------
Update Information:
Allow directories 6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 7 2025 Benjamin A. Beasley <[email protected]> - 0.4.0-14
- Allow directories 6
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.4.0-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-jiff-0.2.16-1.el9 (FEDORA-EPEL-2025-5e960998a6)
Date-time library that encourages you to jump into the pit of success
--------------------------------------------------------------------------------
Update Information:
0.2.16
Enhancements:
Add Serde helpers for (de)serializing std::time::Duration values.
Add Sub and Add trait implementations for Zoned (in addition to the
already existing trait implementations for &Zoned).
Add BrokenDownTime::set_meridiem and ensure it overrides the hour when
formatting.
Switch dependency on serde to serde_core. This should help speed up
compilation times in some cases.
Add new Zoned::series API, making it consistent with the same API on other
datetime types.
When lenient mode is enabled for strftime, Jiff will no longer error when
the formatting string contains invalid UTF-8.
Formatting of %y and %g no longer fails based on the specific year value.
Parsing of %s is now a bit more consistent with other fields. Moreover,
BrokenDownTime::{to_timestamp,to_zoned} will now prefer timestamps parsed
with %s over any other fields that have been parsed.
Allow parsing just a %s into a Zoned via the Etc/Unknown time zone.
Bug fixes:
Fix a bug where 2087-12-31T23:00:00Z in the Africa/Casablanca time zone
could not be round-tripped (because its offset was calculated incorrectly as
a result of not handling "permanent DST" POSIX time zones).
Fix a panic that occurred when parsing an empty string as a POSIX time zone.
Fix a panic that could occur when parsing %: via strptime APIs.
Update some parts of the documentation to indicate that TimeZone::unknown()
is a fallback for TimeZone::system() (instead of the jiff 0.1 behavior of
using TimeZone::UTC).
Fix a panicking bug when reading malformed TZif data.
Fix a panicking bug when parsing century (%C) via strptime.
Fixed bugs with parsing durations like -9223372036854775808s and
-PT9223372036854775808S.
Performance:
Parsing into Span or SignedDuration is now a fair bit faster in some
cases.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 7 2025 Benjamin A. Beasley <[email protected]> - 0.2.16-1
- Update to version 0.2.16; Fixes RHBZ#2413355
* Sun Oct 19 2025 Benjamin A. Beasley <[email protected]> - 0.2.15-3
- Fix a typo in a spec-file comment
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.2.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2413355 - rust-jiff-0.2.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2413355
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-keystore-0.7.0-3.el9 (FEDORA-EPEL-2025-e8de69fade)
Sequoia's private key store server
--------------------------------------------------------------------------------
Update Information:
Allow dirs 6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 7 2025 Benjamin A. Beasley <[email protected]> - 0.7.0-3
- Allow dirs 6
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.7.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-keystore-server-0.2.0-3.el9 (FEDORA-EPEL-2025-4edbdbbf51)
Sequoia keystore daemon
--------------------------------------------------------------------------------
Update Information:
Allow dirs 6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 7 2025 Benjamin A. Beasley <[email protected]> - 0.2.0-3
- Allow dirs 6
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
