The following Fedora EPEL 9 Security updates need testing:
Age URL
35 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-54c41ca693
singularity-ce-4.3.6-1.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-204f4ee0f5
gdu-5.32.0-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6a38045e00
gobuster-3.8.2-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-aec4175816
podman-tui-1.10.0-2.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a9a40c69d3
duc-1.4.6-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-bf01fd3ada
prometheus-podman-exporter-1.20.0-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
fluidsynth-2.5.2-1.el9
rust-moka-0.12.12-1.el9
Details about builds:
================================================================================
fluidsynth-2.5.2-1.el9 (FEDORA-EPEL-2025-21f7442648)
Real-time software synthesizer
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.2
Fix for CVE-2025-68617
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 24 2025 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.5.2-1
- Update to 2.5.2
- Fix for CVE-2025-68617
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424828 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in
DLS Unloading Allows Code Execution and Privilege Escalation [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2424828
[ 2 ] Bug #2424831 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in
DLS Unloading Allows Code Execution and Privilege Escalation [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2424831
[ 3 ] Bug #2424833 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in
DLS Unloading Allows Code Execution and Privilege Escalation [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2424833
[ 4 ] Bug #2424835 - CVE-2025-68617 fluidsynth: FluidSynth: Race Condition in
DLS Unloading Allows Code Execution and Privilege Escalation [epel-9]
https://bugzilla.redhat.com/show_bug.cgi?id=2424835
--------------------------------------------------------------------------------
================================================================================
rust-moka-0.12.12-1.el9 (FEDORA-EPEL-2025-31ed961ec3)
Fast and concurrent cache library inspired by Java Caffeine
--------------------------------------------------------------------------------
Update Information:
Update to version 0.12.12
https://github.com/moka-rs/moka/blob/v0.12.12/CHANGELOG.md#version-01212
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 24 2025 Benjamin A. Beasley <[email protected]> - 0.12.12-1
- Update to version 0.12.12; fixes RHBZ#2424173
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424173 - rust-moka-0.12.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2424173
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue