The following Fedora EPEL 10.1 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1f5a2c5f39
python-python-multipart-0.0.22-1.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
chromium-144.0.7559.109-1.el10_1
composer-2.9.5-1.el10_1
libva-nvidia-driver-0.0.15-1.el10_1
nvtop-3.3.1-2.el10_1
partclone-0.3.44-1.el10_1
prosody-13.0.4-1.el10_1
python-rich-toolkit-0.17.2-1.el10_1
redwax-tool-1.0.0-7.el10_1
xrootd-s3-http-0.6.3-1.el10_1
Details about builds:
================================================================================
chromium-144.0.7559.109-1.el10_1 (FEDORA-EPEL-2026-0123df77aa)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 144.0.7559.109
* CVE-2026-1504: Inappropriate implementation in Background Fetch API
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 28 2026 Than Ngo <[email protected]> - 144.0.7559.109-1
- Update to 144.0.7559.109
* CVE-2026-1504: Inappropriate implementation in Background Fetch API
--------------------------------------------------------------------------------
================================================================================
composer-2.9.5-1.el10_1 (FEDORA-EPEL-2026-2add0c7de8)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
Version 2.9.5 - 2026-01-29
Added support for new pie download-url-methods (#12727)
Fixed detection of 7z when installed as 7za on some linux systems (#12731)
Fixed warning because of the symfony/process CVE, 2.9.4 had a workaround already
Version 2.9.4 - 2026-01-22
Added active plugins to the diagnose command output (#12706)
Fixed HTTP/3 causing issues with proxies (#12699)
Fixed show command regression with long descriptions containing unicode
characters (#12704)
Fixed regression handling invalid unicode sequences in output (#12707)
Fixed git rev-list usages to support older pre-2.33 git versions (#12705)
Fixed issue handling paths with = in them on Windows (#12726)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 29 2026 Remi Collet <[email protected]> - 2.9.5-1
- update to 2.9.5
* Thu Jan 22 2026 Remi Collet <[email protected]> - 2.9.4-1
- update to 2.9.4
--------------------------------------------------------------------------------
================================================================================
libva-nvidia-driver-0.0.15-1.el10_1 (FEDORA-EPEL-2026-e7c1795fe4)
A VA-API implemention using NVIDIA's NVDEC
--------------------------------------------------------------------------------
Update Information:
Update to 0.0.15.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 30 2026 Simone Caronni <[email protected]> - 0.0.15-1
- Update to 0.0.15
* Fri Jan 16 2026 Fedora Release Engineering <[email protected]> -
0.0.14-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
0.0.14-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2435250 - libva-nvidia-driver-0.0.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2435250
--------------------------------------------------------------------------------
================================================================================
nvtop-3.3.1-2.el10_1 (FEDORA-EPEL-2026-9d4e0427cc)
GPU process monitoring for various devices
--------------------------------------------------------------------------------
Update Information:
3.3.1
Fix a regression that would miss-report available device memory of NVIDIA GPUs
Integrate effective/efficiency usage within the GPU utilization metric
3.3.0
New in this release
Target support
Rockchip NPU - @feilongfl
MetaX GPUs - @zhenyu-xu-metax
Enflame GCU - @QShen3
Improvements
More memory reporting in one-shot mode - @mintyleaf
CTRL + L will reset the ncurses interface - @cipri-tom + @claude
GPU and MEM have separate clock fields - @KaeLL
Effective load metric, i.e., the percentage utilization weighted by the ratio
(Current Power / Max Power) - @airvzxf
Fixes
Fix assertion failure on processing the same client ID twice - @Andrew1326
Application desktop metadata install paths and name - @michel-slm
New PPA maintainer - @QuentiumYT
Fixes for Mali GPU - @larunbe
Power draw for Intel Battelmage - @Steve-Tech
Unified memory usage reporting on Nvidia GPUs - @sbhavani
AMDGPU integrated graphics accounts for both VRAM and GTT - @superm1
Misc
Manpage update - @polluks
Fix typos - @oxyzenQ
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 29 2026 Michel Lind <[email protected]> - 3.3.1-2
- Drop upstreamed patches
* Sun Jan 18 2026 Packit <[email protected]> - 3.3.1-1
- Update to 3.3.1
- Resolves rhbz#2430383
* Fri Jan 16 2026 Fedora Release Engineering <[email protected]> -
3.2.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering <[email protected]> -
3.2.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Apr 6 2025 Michel Lind <[email protected]> - 3.2.0-4
- Number patches for EL8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2430383 - nvtop-3.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2430383
--------------------------------------------------------------------------------
================================================================================
partclone-0.3.44-1.el10_1 (FEDORA-EPEL-2026-84d75bb04a)
Utility to clone and restore a partition
--------------------------------------------------------------------------------
Update Information:
partclone v0.3.44
Fix --disable-xxhash compile issue
Downgrade gettext requirement to 0.19 for better compatibility
Switch XSL stylesheet back to URL with --nonet
Fix NTFS from 512e/n to 4kn
Fix and support both, static and dynamic builds
partclone v0.3.42
Update docs
Remove libtool generated files
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 28 2026 Robert Scheck <[email protected]> 0.3.44-1
- Upgrade to 0.3.44 (#2433151)
* Fri Jan 23 2026 Robert Scheck <[email protected]> 0.3.42-1
- Upgrade to 0.3.42 (#2430752 #c1)
* Wed Jan 21 2026 Robert Scheck <[email protected]> 0.3.41-1
- Upgrade to 0.3.41 (#2430752)
* Fri Jan 16 2026 Fedora Release Engineering <[email protected]> -
0.3.40-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2433151 - partclone-0.3.44 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2433151
--------------------------------------------------------------------------------
================================================================================
prosody-13.0.4-1.el10_1 (FEDORA-EPEL-2026-439d7e0034)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 13.0.4
Upstream is pleased to announce a new minor release from their stable branch.
Upstream encourages any deployments using 13.0.3 to upgrade, partly due to a bug
that was introduced into UUID generation in that release. Upstream is not aware
of any direct consequences of this bug, but it may cause compatibility problems
with other software.
Although not strictly bug fixes, upstream sneaked in some configuration-related
improvements to this release which help make configuring Prosody a little easier
and more reliable. Upstream is highlighting them because these changes have a
chance to impact some rare configurations.
The first change is to prevent mod_pubsub from being loaded on a VirtualHost
(easily done if you accidentally add it to your global modules_enabled list).
Loading mod_pubsub on a normal user host can lead to unexpected behaviour. Now
it will log an error and refuse to load if you do that.
The second change is to simplify configuration of archiving in MUCs. Practically
all modern clients now use XEP-0313 to synchronize message history. For
VirtualHosts this is implemented in mod_mam, and for MUC components it is
implemented in mod_muc_mam. From this release, things get much simpler: loading
mod_mam (globally or directly on a MUC component) will automatically load
mod_muc_mam on the MUC component. This means most people (e.g. who have mod_mam
loaded globally on their server) can now remove âmuc_mamâ from
modules_enabled
in their MUC component configuration. It will be loaded automatically.
This last point does mean that if you have mod_mam enabled globally, but do not
want it enabled on your MUCs, you now have to state that explicitly by adding
âmamâ to modules_disabled under the MUCâs Component. Be aware that such a
configuration may lead to missing messages in group chats.
A summary of changes in this release:
Fixes and improvements
mod_s2s: Fix traceback when outgoing s2s queue is full
util.uuid: Fix padding of group 2 of UUIDv7 to use zeroes
Minor changes
core.modulemanager: Fix shell commands on components
mod_s2s: Explicitly prevent sending recursive error replies when queue is full
modulemanager: Allow component modules to specify additional inherited modules
prosodyctl check features: Use modulemanager to calculate modules that will
actually be loaded
prosodyctl check features: change recommendation from mod_muc_mam to mod_mam
prosodyctl check config: Fix traceback when zero modules are enabled
mod_pubsub: Fail early if loaded outside of a component to prevent
misconfiguration
doap: Add XEP-0486
mod_pubsub/commands: Fix listing item numbers along with item names
mod_account_activity: Handle authentication provider returning no user info
mod_mam: Automatically load mod_muc_mam if loaded on a MUC component
mod_muc: Inherit mod_mam if globally loaded
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 29 2026 Robert Scheck <[email protected]> 13.0.4-1
- Upgrade to 13.0.4 (#2432633)
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
13.0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2432633 - prosody-13.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432633
--------------------------------------------------------------------------------
================================================================================
python-rich-toolkit-0.17.2-1.el10_1 (FEDORA-EPEL-2026-7201049c42)
Rich toolkit for building command-line applications
--------------------------------------------------------------------------------
Update Information:
0.17.2 - 2026-01-29
This release fixed the color detection function, mostly to fix a bug
interfering with forked worker processes (e.g. uvicorn with --workers).
The color query now uses a dedicated file descriptor instead of stdin/stdout,
preventing issues with logging and signal handling in multi-process
environments.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 29 2026 Packit <[email protected]> - 0.17.2-1
- Update to 0.17.2 upstream release
- Resolves: rhbz#2435328
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2435328 - python-rich-toolkit-0.17.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2435328
--------------------------------------------------------------------------------
================================================================================
redwax-tool-1.0.0-7.el10_1 (FEDORA-EPEL-2026-2a11d67238)
The redwax tool
--------------------------------------------------------------------------------
Update Information:
Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 29 2026 Graham Leggett <[email protected]> 1.0.0-4
- Fix test case in spec file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2435060 - redwax-tool: FTBFS in Fedora rawhide/f44
https://bugzilla.redhat.com/show_bug.cgi?id=2435060
--------------------------------------------------------------------------------
================================================================================
xrootd-s3-http-0.6.3-1.el10_1 (FEDORA-EPEL-2026-d6768ab130)
S3/HTTP/Globus filesystem plugins for XRootD
--------------------------------------------------------------------------------
Update Information:
XRootD S3 http 0.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 28 2026 Mattias Ellert <[email protected]> - 0.6.3-1
- Update to version 0.6.3
- Drop patches accepted upstream
* Tue Jan 20 2026 Mattias Ellert <[email protected]> - 0.6.1-1
- Update to version 0.6.1
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.6.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
