The following Fedora EPEL 10.2 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-596d7a5bb9
fcgi-2.4.7-1.el10_2
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-384a4defc5
libwebsockets-4.3.7-2.el10_2
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-85c58e7712
imhex-1.37.4-3.el10_2 lunasvg-3.5.0-1.el10_2
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-0fa35909c3
apptainer-1.4.5-1.el10_2
The following builds have been pushed to Fedora EPEL 10.2 updates-testing
borgbackup-1.4.3-1.el10_2
nordugrid-arc-nagios-plugins-3.2.3-2.el10_2
php-extras-8.3.26-1.el10_2
php8.4-extras-8.4.14-2.el10_2
php8.4-pecl-rpminfo-1.2.1-1.el10_2
php8.4-pecl-xpass-1.1.0-1.el10_2
python-damo-3.0.7-1.el10_2
python-orjson-3.11.4-1.el10_2
ruff-0.14.7-1.el10_2
rust-asn1-rs-0.7.1-2.el10_2
rust-asn1-rs-derive-0.6.0-1.el10_2
rust-der-parser-10.0.0-2.el10_2
rust-lzma-rust2-0.15.3-1.el10_2
rust-oid-registry-0.8.1-2.el10_2
rust-rcgen-0.14.5-1.el10_2
rust-rustls-platform-verifier-0.6.2-1.el10_2
rust-rustls-platform-verifier0.5-0.5.3-1.el10_2
rust-tokio-rustls-0.26.4-1.el10_2
rust-x509-parser-0.18.0-1.el10_2
singularity-ce-4.3.5-1.el10_2
uv-0.9.9-1.el10_2
vsomeip3-3.5.11-3.el10_2
wordpress-6.9-1.el10_2
yarnpkg-1.22.22-14.el10_2
Details about builds:
================================================================================
borgbackup-1.4.3-1.el10_2 (FEDORA-EPEL-2025-12acffde78)
A deduplicating backup program with compression and authenticated encryption
--------------------------------------------------------------------------------
Update Information:
new upstream release with bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Felix Schwarz <[email protected]> - 1.4.3-1
- update to 1.4.3
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-nagios-plugins-3.2.3-2.el10_2 (FEDORA-EPEL-2025-1b0a5f9d4c)
Nagios plugins for ARC
--------------------------------------------------------------------------------
Update Information:
Add dependecy on nordugrid-arc-plugins-gridftp to EGI configuration
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Mattias Ellert <[email protected]> - 3.2.3-2
- Add dependecy on nordugrid-arc-plugins-gridftp to EGI configuration
--------------------------------------------------------------------------------
================================================================================
php-extras-8.3.26-1.el10_2 (FEDORA-EPEL-2025-c6a055d588)
Additional PHP extensions from the standard PHP distribution
--------------------------------------------------------------------------------
Update Information:
rebase to 8.3.26
enable pdo_firebird extension
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Remi Collet <[email protected]> - 8.3.26-1
- rebase to 8.3.26
- enable pdo_firebird extension
--------------------------------------------------------------------------------
================================================================================
php8.4-extras-8.4.14-2.el10_2 (FEDORA-EPEL-2025-23811e2a69)
Additional PHP extensions from the standard PHP distribution
--------------------------------------------------------------------------------
Update Information:
Additional extensions for php8.4
php8.4-pdo-dblib
PDO_DBLIB is a driver that implements the PHP Data Objects (PDO) interface to
enable access from PHP to Microsoft SQL Server and Sybase databases through the
FreeTDS library.
php8.4-pdo-firebird
PDO_FIREBIRD is a driver that implements the PHP Data Objects (PDO) interface
to enable access from PHP to Firebird database.
php8.4-sodium
Sodium is a modern, easy-to-use software library for encryption, decryption,
signatures, password hashing and more. Its goal is to provide all of the core
operations needed to build higher-level cryptographic tools.
php8.4-tidy
Tidy is a binding for the Tidy HTML clean and repair utility which allows
you to not only clean and otherwise manipulate HTML, XHTML, and XML documents,
but also traverse the document tree, including ones with embedded scripting
languages such as PHP or ASP within them using object-oriented constructs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Remi Collet <[email protected]> - 8.4.14-2
- fix dependencies
* Wed Dec 3 2025 Remi Collet <[email protected]> - 8.4.14-1
- build as php8.4-extras
- update to 8.4.14
- drop pspell an imap subpackages
- add sodium-devel subpackage
* Mon May 26 2025 Remi Collet <[email protected]> - 8.3.19-1
- rebase to 8.3.19
* Thu Jan 23 2025 Remi Collet <[email protected]> - 8.3.15-1
- rebase to 8.3.15
* Fri Nov 29 2024 Remi Collet <[email protected]> - 8.3.12-3
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
CVE-2024-11236
- enable pdo_dblib extension
* Wed Oct 16 2024 Remi Collet <[email protected]> - 8.3.12-2
- enable pspell extension
* Wed Oct 16 2024 Remi Collet <[email protected]> - 8.3.12-1
- rebase to 8.3.12
- disable pspell and imap extensions
- disable pdo_dblib (missing freetds)
- disable pdo_firebird (missing firebird)
--------------------------------------------------------------------------------
================================================================================
php8.4-pecl-rpminfo-1.2.1-1.el10_2 (FEDORA-EPEL-2025-b9aa036ae5)
RPM information
--------------------------------------------------------------------------------
Update Information:
Retrieve RPM information using librpm, from local
RPM file or from installed packages database.
Documentation: https://www.php.net/rpminfo
Package built for PHP 8.4.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Remi Collet <[email protected]> - 1.2.1-1
- build as php8.4-pecl-xpass
* Tue Oct 28 2025 Remi Collet <[email protected]> - 1.2.1-3
- add php_base option to create namespaced packages
* Wed Oct 8 2025 Remi Collet <[email protected]> - 1.2.1-2
- rebuild for https://fedoraproject.org/wiki/Changes/php85
* Thu Sep 25 2025 Remi Collet <[email protected]> - 1.2.1-1
- update to 1.2.1
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.2.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jul 18 2025 Remi Collet <[email protected]> - 1.2.0-5
- add more upstream patch for RPM 5.99.91
* Fri Jul 18 2025 Remi Collet <[email protected]> - 1.2.0-4
- add upstream patch for RPM 5.99.91
* Thu May 22 2025 Remi Collet <[email protected]> - 1.2.0-3
- add upstream patch to relax test for RPM 5.99.90
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Thu Dec 19 2024 Remi Collet <[email protected]> - 1.2.0-1
- update to 1.2.0
* Mon Oct 14 2024 Remi Collet <[email protected]> - 1.1.1-2
- rebuild for https://fedoraproject.org/wiki/Changes/php84
* Tue Sep 3 2024 Remi Collet <[email protected]> - 1.1.1-1
- update to 1.1.1
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.1.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Tue Apr 16 2024 Remi Collet <[email protected]> - 1.1.0-4
- drop 32-bit support
https://fedoraproject.org/wiki/Changes/php_no_32_bit
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> -
1.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
1.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php8.4-pecl-xpass-1.1.0-1.el10_2 (FEDORA-EPEL-2025-ef84a5af61)
Extended password extension
--------------------------------------------------------------------------------
Update Information:
This extension provides password hashing algorithms used by Linux
distributions, using extended crypt library (libxcrypt):
sha512 provided for legacy as used on some old distributions
yescrypt used on modern distributions
It also provides additional functions from libxcrypt missing in core PHP:
crypt_preferred_method
crypt_gensalt
crypt_checksalt
Package built for PHP 8.4.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Remi Collet <[email protected]> - 1.1.0-1
- build as php8.4-pecl-xpass
* Tue Oct 28 2025 Remi Collet <[email protected]> - 1.1.0-7
- add php_base option to create namespaced packages
* Thu Sep 18 2025 Remi Collet <[email protected]> - 1.1.0-6
- rebuild for https://fedoraproject.org/wiki/Changes/php85
- re-license spec file to CECILL-2.1
- add pie virtual provides
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.1.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Feb 1 2025 Björn Esser <[email protected]> - 1.1.0-4
- Add explicit BR: libxcrypt-devel
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Oct 14 2024 Remi Collet <[email protected]> - 1.1.0-2
- rebuild for https://fedoraproject.org/wiki/Changes/php84
* Thu Sep 26 2024 Remi Collet <[email protected]> - 1.1.0-1
- update to 1.1.0
* Mon Sep 9 2024 Remi Collet <[email protected]> - 1.0.0-1
- update to 1.0.0
* Mon Sep 2 2024 Remi Collet <[email protected]> - 1.0.0~RC2-1
- update to 1.0.0RC2
* Wed Aug 28 2024 Remi Collet <[email protected]> - 1.0.0~RC1-1
- initial package, version 1.0.0RC1
--------------------------------------------------------------------------------
================================================================================
python-damo-3.0.7-1.el10_2 (FEDORA-EPEL-2025-d8cbef6318)
Data Access Monitoring Operator
--------------------------------------------------------------------------------
Update Information:
v3.0.7
sysinfo: support perf information.
sysinfo: support <5.15 DAMON version inference.
support 'damon sample control' feature.
v3.0.6
damo report damon: Support yaml format with --format option.
Provide wrong memcg DAMOS filter error detail.
sysinfo: use git-based damo version if available.
Support nr_stats and max_nr_stats
(https://lore.kernel.org/[email protected]).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Michel Lind <[email protected]> - 3.0.7-1
- Update to 3.0.7 upstream release
- Resolves: rhbz#2416933
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2416933 - python-damo-3.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2416933
--------------------------------------------------------------------------------
================================================================================
python-orjson-3.11.4-1.el10_2 (FEDORA-EPEL-2025-0a91ec29fb)
Fast, correct Python JSON library
--------------------------------------------------------------------------------
Update Information:
Update to 3.11.4
https://github.com/ijl/orjson/releases/tag/3.11.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 21 2025 Benjamin A. Beasley <[email protected]> - 3.11.4-1
- Update to 3.11.4 (close RHBZ#2406238)
- Bundling yyjson is no longer optional
* Fri Sep 19 2025 Python Maint <[email protected]> - 3.11.3-2
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2406238 - python-orjson-3.11.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2406238
--------------------------------------------------------------------------------
================================================================================
ruff-0.14.7-1.el10_2 (FEDORA-EPEL-2025-ed881fbb3a)
Extremely fast Python linter and code formatter
--------------------------------------------------------------------------------
Update Information:
Update to 0.14.7
https://github.com/astral-sh/ruff/releases/tag/0.14.7
https://github.com/astral-sh/ruff/releases/tag/0.14.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 2 2025 Benjamin A. Beasley <[email protected]> - 0.14.7-1
- Update to 0.14.7
* Sat Nov 22 2025 Benjamin A. Beasley <[email protected]> - 0.14.6-1
- Update to version 0.14.6; Fixes RHBZ#2416397
--------------------------------------------------------------------------------
================================================================================
rust-asn1-rs-0.7.1-2.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Parser/encoder for ASN.1 BER/DER data
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2025 Benjamin A. Beasley <[email protected]> - 0.7.1-2
- Better avoid packaged .gitignore files
* Sat Nov 15 2025 Benjamin A. Beasley <[email protected]> - 0.7.1-1
- Update to version 0.7.1; Fixes RHBZ#2338457
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-asn1-rs-derive-0.6.0-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Derive macros for the asn1-rs crate
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 15 2025 Benjamin A. Beasley <[email protected]> - 0.6.0-1
- Update to version 0.6.0
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.5.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-der-parser-10.0.0-2.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Parser/encoder for ASN.1 BER/DER data
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2025 Benjamin A. Beasley <[email protected]> - 10.0.0-2
- Better avoid packaged .gitignore files
* Sat Nov 15 2025 Benjamin A. Beasley <[email protected]> - 10.0.0-1
- Update to version 10.0.0; Fixes RHBZ#2339096
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-lzma-rust2-0.15.3-1.el10_2 (FEDORA-EPEL-2025-82b7d16e8e)
LZMA / LZMA2 / LZIP / XZ compression ported from 'tukaani xz for java'
--------------------------------------------------------------------------------
Update Information:
Initial package for rust-lzma-rust2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Benjamin A. Beasley <[email protected]> - 0.15.3-1
- Update to 0.15.3
* Wed Dec 3 2025 Benjamin A. Beasley <[email protected]> - 0.15.2-2
- Update deprecated syntax in rust2rpm.toml
* Wed Dec 3 2025 Benjamin A. Beasley <[email protected]> - 0.15.2-1
- Initial package (close RHBZ#2418485)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2418485 - Review Request: rust-lzma-rust2 - LZMA / LZMA2 / LZIP /
XZ compression ported from 'tukaani xz for java'
https://bugzilla.redhat.com/show_bug.cgi?id=2418485
--------------------------------------------------------------------------------
================================================================================
rust-oid-registry-0.8.1-2.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Object Identifier (OID) database
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 16 2025 Benjamin A. Beasley <[email protected]> - 0.8.1-2
- Better avoid packaged .gitignore files
* Sun Nov 16 2025 Benjamin A. Beasley <[email protected]> - 0.8.1-1
- Update to version 0.8.1; Fixes RHBZ#2339099
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.7.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-rcgen-0.14.5-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Rust X.509 certificate generator
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 14 2025 Benjamin A. Beasley <[email protected]> - 0.14.5-1
- Update to version 0.14.5; Fixes RHBZ#2375867
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.13.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-rustls-platform-verifier-0.6.2-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Supports verifying TLS certificates in rustls with the operating system
verifier
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 30 2025 Benjamin A. Beasley <[email protected]> - 0.6.2-1
- Update to version 0.6.2; Fixes RHBZ#2364245
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-rustls-platform-verifier0.5-0.5.3-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Verify TLS certificates in rustls with the operating system verifier
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 30 2025 Benjamin A. Beasley <[email protected]> - 0.5.3-1
- Initial compat package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-tokio-rustls-0.26.4-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Asynchronous TLS/SSL streams for Tokio using Rustls
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 30 2025 Benjamin A. Beasley <[email protected]> - 0.26.4-1
- Update to version 0.26.4; Fixes RHBZ#2396099
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.26.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
rust-x509-parser-0.18.0-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
Parser for the X.509 v3 format (RFC 5280 certificates)
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 14 2025 Benjamin A. Beasley <[email protected]> - 0.18.0-1
- Update to version 0.18.0; Fixes RHBZ#2342773
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.16.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.3.5-1.el10_2 (FEDORA-EPEL-2025-6e760d6083)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.3.5 upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 David Trudgian <[email protected]> - 4.3.5-1
- Upgrade to 4.3.5 upstream version.
- Fixes CVE-2025-64750
--------------------------------------------------------------------------------
================================================================================
uv-0.9.9-1.el10_2 (FEDORA-EPEL-2025-c004a56bca)
An extremely fast Python package installer and resolver, written in Rust
--------------------------------------------------------------------------------
Update Information:
Update uv to 0.9.9
https://github.com/astral-sh/uv/releases/tag/0.9.9
Update rust-rcgen to 0.14.5, simultaneously updating a number of its
dependencies and dependent packages to avoid introducing unnecessary compat
packages.
Update rust-asn1-rs from 0.6.2 to 0.7.1
Update rust-asn1-rs-derive from 0.5.1 to 0.6.0
Update rust-der-parser from 9.0.0 to 10.0.0
Update rust-oid-registry from 0.7.1 to 0.8.1
Update rust-x509-parser from 0.16.0 to 0.18.0
Update rust-rcgen from 0.13.2 to 0.14.5
Update rust-rustls-platform-verifier from 0.5.3 to 0.6.2, introducing a rust-
rustls-platform-verifier0.5 compat package for now
Update rust-tokio-rustls from 0.26.2 to 0.26.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Benjamin A. Beasley <[email protected]> - 0.9.9-1
- Update to 0.9.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338457 - rust-asn1-rs-0.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2338457
[ 2 ] Bug #2339096 - rust-der-parser-10.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339096
[ 3 ] Bug #2339099 - rust-oid-registry-0.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2339099
[ 4 ] Bug #2342773 - rust-x509-parser-0.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2342773
[ 5 ] Bug #2364245 - rust-rustls-platform-verifier-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364245
[ 6 ] Bug #2375867 - rust-rcgen-0.14.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2375867
[ 7 ] Bug #2396099 - rust-tokio-rustls-0.26.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2396099
--------------------------------------------------------------------------------
================================================================================
vsomeip3-3.5.11-3.el10_2 (FEDORA-EPEL-2025-63fce08d0f)
COVESA implementation of SOME/IP protocol
--------------------------------------------------------------------------------
Update Information:
Rewrite the selinux policy from scratch with sepolgen
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Stephen Smoogen <[email protected]> - 3.5.11-3
- Rewrite the selinux policy from scratch with sepolgen
- Remove the socket creation as systemd as vsomeip will not work with it.
* Mon Dec 1 2025 Stephen Smoogen <[email protected]> - 3.5.11-2
- Try to fix the selinux problem seen with CS10
- Try to fix problem with socket creation and systemd
* Mon Dec 1 2025 Stephen Smoogen <[email protected]> - 3.5.11-1
- Update to newest version of vsomeip3.
* Wed Aug 27 2025 Stephen Smoogen <[email protected]> - 3.5.7-2
- Remove i686 as it no longer builds and is not needed.
* Tue Aug 26 2025 Stephen Smoogen <[email protected]> - 3.5.7-1
- Update to 3.5.7
- Clean up patches to just two as others are now upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2417995 - vsomeip3 SELinux policy prevents container access to
/run/vsomeip/vsomeip-0 on AutoSD 10
https://bugzilla.redhat.com/show_bug.cgi?id=2417995
--------------------------------------------------------------------------------
================================================================================
wordpress-6.9-1.el10_2 (FEDORA-EPEL-2025-3c483cc41b)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
WordPress 6.9 âGeneâ
See the upstream announcement
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Remi Collet <[email protected]> - 6.9-1
- WordPress 6.9 âGeneâ
--------------------------------------------------------------------------------
================================================================================
yarnpkg-1.22.22-14.el10_2 (FEDORA-EPEL-2025-ff22419251)
Fast, reliable, and secure dependency management.
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2205-64756.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 3 2025 Sandro Mani <[email protected]> - 1.22.22-14
- Bump release
* Wed Dec 3 2025 Sandro Mani <[email protected]> - 1.22.22-13
- Refresh bundle, fixes CVE-2025-64756
* Tue Sep 30 2025 Sandro Mani <[email protected]> - 1.22.22-12
- Regenerate bundle, fixes CVE-2025-59343
- Patch out eslint and commitizen devDependencies to reduce dependencies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2418529 - CVE-2025-64756 yarnpkg: glob CLI: Command injection via
-c/--cmd executes matches with shell:true [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2418529
[ 2 ] Bug #2418532 - CVE-2025-64756 yarnpkg: glob CLI: Command injection via
-c/--cmd executes matches with shell:true [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2418532
[ 3 ] Bug #2418538 - CVE-2025-64756 yarnpkg: glob CLI: Command injection via
-c/--cmd executes matches with shell:true [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2418538
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
