The following Fedora EPEL 9 Security updates need testing:
Age URL
45 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9a55de96db
xpdf-4.06-1.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ea289f4852
proxychains-ng-4.17-8.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-07e9529772
age-1.3.0-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-82b238248c
gh-2.83.2-1.el9
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-8a88102349
kustomize-5.8.0-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-286b1c8479
python-pdfminer-20240706-4.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
GitPython-3.1.46-1.el9
exim-4.99.1-1.el9
fbrnch-1.7.1-34.el9
firejail-0.9.78-1.el9
netcat-1.237-1.el9
rc-1.7.4-26.el9
rpmbuild-order-0.4.13-1.el9
rust-curve25519-dalek-derive-0.1.1-6.el9
rust-ed25519-dalek-2.2.0-4.el9
rust-lalrpop-0.20.2-5.el9
rust-nettle-7.4.0-6.el9
rust-nettle-sys-2.3.1-3.el9
rust-threecpio-0.13.0-1.el9
Details about builds:
================================================================================
GitPython-3.1.46-1.el9 (FEDORA-EPEL-2026-82e95128c0)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.46: https://github.com/gitpython-
developers/GitPython/releases/tag/3.1.46
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Benjamin A. Beasley <[email protected]> - 3.1.46-1
- Update to 3.1.46 (close RHBZ#2426665)
* Fri Sep 19 2025 Python Maint <[email protected]> - 3.1.45-3
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint <[email protected]> - 3.1.45-2
- Rebuilt for Python 3.14.0rc2 bytecode
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2426665 - GitPython-3.1.46 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2426665
--------------------------------------------------------------------------------
================================================================================
exim-4.99.1-1.el9 (FEDORA-EPEL-2026-b2e37e7d22)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is new exim version fixing CVE-2025-67896.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Jaroslav Å karvada <[email protected]> - 4.99.1-1
- New version
Resolves: CVE-2025-67896
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2423180 - exim-4.99.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2423180
[ 2 ] Bug #2423183 - CVE-2025-26794 & CWE-122, CWE-787, CWE-843 in Exim 4.99
https://bugzilla.redhat.com/show_bug.cgi?id=2423183
--------------------------------------------------------------------------------
================================================================================
fbrnch-1.7.1-34.el9 (FEDORA-EPEL-2026-18adf86d8b)
Fedora packager tool to build package branches
--------------------------------------------------------------------------------
Update Information:
fbrnch:
rebuild for haxr xmlrpc to Accept: application/xml
use rpmbuild-order 0.4.13
[epel] recommends epel-rpm-macros
rpmbuild-order:
https://hackage.haskell.org/package/rpmbuild-order-0.4.13/changelog
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 19 2025 Jens Petersen <[email protected]> - 1.7.1-34
- rebuild for haxr xmlrpc to Accept: application/xml
- use rpmbuild-order 0.4.13
- [epel] recommends epel-rpm-macros
* Mon Aug 11 2025 Jens Petersen <[email protected]> - 1.7.1-33
- Rebuild
* Wed Jul 30 2025 Jens Petersen <[email protected]> - 1.7.1-32
- rebuild for http-streams update to new f43 cert ca-bundle path
* Wed Jul 23 2025 Fedora Release Engineering <[email protected]> -
1.7.1-31
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
firejail-0.9.78-1.el9 (FEDORA-EPEL-2026-83cc5d21ba)
Linux namespaces sandbox program
--------------------------------------------------------------------------------
Update Information:
Update to v0.9.78
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Artur Frenszek-Iwicki <[email protected]> - 0.9.78-1
- Update to v0.9.78
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2426909 - firejail-0.9.78 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2426909
--------------------------------------------------------------------------------
================================================================================
netcat-1.237-1.el9 (FEDORA-EPEL-2026-160e8ca86d)
OpenBSD netcat to read and write data across connections using TCP or UDP
--------------------------------------------------------------------------------
Update Information:
OpenBSD netcat 1.237
Disallow -T with = when arguments are not key=value pairs
Add SOCKS4A support to nc(1)'s proxy (-X) mode
Add SOCKS4A to help text
For SOCKS4A don't perform a local hostname lookup that we're not going to use
Fix HTTP CONNECT proxy support to not treat responses like "HTTP/1.0 200poo" as
success
limitiation -> limitation
Sort process_tls_opt[]
Add ALPN TLS option, so you can specify -T alpn=value
Document -Talpn
Use strtonum() instead of atoi(), and error out for bad numbers
Allow network programs select DSCP_VA for network ToS
Sort the va keyword to be in alpha order, some programs use bsearch()
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Robert Scheck <[email protected]> 1.237-1
- Upgrade to 1.237 (#2406149)
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
1.229-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> -
1.229-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2406149 - netcat-1.234 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2406149
--------------------------------------------------------------------------------
================================================================================
rc-1.7.4-26.el9 (FEDORA-EPEL-2026-23abc28b1a)
Re-implementation for Unix of the Plan 9 shell
--------------------------------------------------------------------------------
Update Information:
Add upstream patch for C23 compatibility
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Robert Scheck <[email protected]> 1.7.4-26
- Add upstream patch for C23 compatibility
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.7.4-25
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
1.7.4-24
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.7.4-23
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
1.7.4-22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> -
1.7.4-21
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rpmbuild-order-0.4.13-1.el9 (FEDORA-EPEL-2026-18adf86d8b)
Sort RPM packages in dependency order
--------------------------------------------------------------------------------
Update Information:
fbrnch:
rebuild for haxr xmlrpc to Accept: application/xml
use rpmbuild-order 0.4.13
[epel] recommends epel-rpm-macros
rpmbuild-order:
https://hackage.haskell.org/package/rpmbuild-order-0.4.13/changelog
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 10 2025 Jens Petersen <[email protected]> - 0.4.13-1
- https://hackage.haskell.org/package/rpmbuild-order-0.4.13/changelog
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.4.12-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Feb 23 2025 Jens Petersen <[email protected]> - 0.4.12-4
- cabal-rpm-2.3.0
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
0.4.12-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Tue Aug 6 2024 Jens Petersen <[email protected]> - 0.4.12-2
- bump release
--------------------------------------------------------------------------------
================================================================================
rust-curve25519-dalek-derive-0.1.1-6.el9 (FEDORA-EPEL-2026-fc5a1a4aa9)
Curve25519-dalek Derives
--------------------------------------------------------------------------------
Update Information:
Disable tests that are broken with Rust 1.87+.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 2 2026 Fabio Valentini <[email protected]> - 0.1.1-6
- Disable tests (broken with Rust 1.87 and newer)
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.1.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-ed25519-dalek-2.2.0-4.el9 (FEDORA-EPEL-2026-23dd3bd8cc)
Fast and efficient ed25519 EdDSA key generations, signing, and verification
--------------------------------------------------------------------------------
Update Information:
Bump toml dev-dependency from v0.7 to v0.9 to avoid pulling in old compat
packages.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Fabio Valentini <[email protected]> - 2.2.0-4
- Bump toml dev-dependency from v0.7 to v0.9
--------------------------------------------------------------------------------
================================================================================
rust-lalrpop-0.20.2-5.el9 (FEDORA-EPEL-2026-8d258825aa)
Convenient LR(1) parser generator
--------------------------------------------------------------------------------
Update Information:
Bump itertools dependency from 0.11 to 0.12.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 2 2026 Fabio Valentini <[email protected]> - 0.20.2-5
- Bump itertools dependency from 0.11 to 0.12
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.20.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.20.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
0.20.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-nettle-7.4.0-6.el9 (FEDORA-EPEL-2026-08dd2ac77e)
Rust bindings for the Nettle cryptographic library
--------------------------------------------------------------------------------
Update Information:
Bump bindgen dependency in nettle-sys to v0.72 and refresh packaging of both
nettle and nettle-sys with rust2rpm v28.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Fabio Valentini <[email protected]> - 7.4.0-6
- Regenerate with rust2rpm v28 and add rust2rpm.toml config file
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
7.4.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
7.4.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-nettle-sys-2.3.1-3.el9 (FEDORA-EPEL-2026-08dd2ac77e)
Low-level Rust bindings for the Nettle cryptographic library
--------------------------------------------------------------------------------
Update Information:
Bump bindgen dependency in nettle-sys to v0.72 and refresh packaging of both
nettle and nettle-sys with rust2rpm v28.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Fabio Valentini <[email protected]> - 2.3.1-3
- Bump bindgen dependency to v0.72
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
2.3.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-threecpio-0.13.0-1.el9 (FEDORA-EPEL-2026-84a83151fa)
Manage initrd cpio archives
--------------------------------------------------------------------------------
Update Information:
Update to version 0.13.0
https://github.com/bdrung/3cpio/blob/0.13.0/NEWS.md#0130-2026-01-03
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 3 2026 Benjamin A. Beasley <[email protected]> - 0.13.0-1
- Update to version 0.13.0; Fixes RHBZ#2426919
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2426919 - rust-threecpio-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2426919
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
