The following Fedora EPEL 10.1 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c702846a3a
node-exporter-1.10.2-3.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
chromium-144.0.7559.132-1.el10_1
gn-2324^20260205.304bbef6c7e9-1.el10_1
php-pecl-mongodb-1.21.5-1.el10_1
php-pecl-mongodb2-2.1.8-1.el10_1
rust-anyhow-1.0.101-1.el10_1
rust-arc-swap-1.8.1-1.el10_1
rust-bytemuck-1.25.0-1.el10_1
rust-iana-time-zone-0.1.65-1.el10_1
rust-jiff-0.2.19-1.el10_1
rust-regex-lite-0.1.9-1.el10_1
rust-regex-syntax-0.8.9-1.el10_1
rust-slab-0.4.12-1.el10_1
rust-test-tag-0.1.6-1.el10_1
rust-zmij-1.0.19-1.el10_1
Details about builds:
================================================================================
chromium-144.0.7559.132-1.el10_1 (FEDORA-EPEL-2026-f8fd439c99)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 144.0.7559.132
* CVE-2026-1861: Heap buffer overflow in libvpx
* CVE-2026-1862: Type Confusion in V8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 5 2026 Than Ngo <[email protected]> - 144.0.7559.132-1
- Update to 144.0.7559.132
* CVE-2026-1861: Heap buffer overflow in libvpx
* CVE-2026-1862: Type Confusion in V8
- Add BR on esbuild
- Disable devtool bundle
- Update scripts for downloading the source
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2436627 - CVE-2026-1861 chromium: Chromium: Arbitrary code
execution via crafted HTML page [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2436627
[ 2 ] Bug #2436628 - CVE-2026-1861 chromium: Chromium: Arbitrary code
execution via crafted HTML page [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2436628
[ 3 ] Bug #2436629 - CVE-2026-1862 chromium: Chromium: Remote heap corruption
via crafted HTML page [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2436629
[ 4 ] Bug #2436630 - CVE-2026-1862 chromium: Chromium: Remote heap corruption
via crafted HTML page [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2436630
--------------------------------------------------------------------------------
================================================================================
gn-2324^20260205.304bbef6c7e9-1.el10_1 (FEDORA-EPEL-2026-1044b5a525)
Meta-build system that generates build files for Ninja
--------------------------------------------------------------------------------
Update Information:
Update to version 2318
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 5 2026 Benjamin A. Beasley <[email protected]> -
2324^20260205.304bbef6c7e9-1
- Update to version 2324
* Thu Feb 5 2026 Benjamin A. Beasley <[email protected]> -
2322^20260205.7498ca2e5e24-1
- Update to version 2322
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongodb-1.21.5-1.el10_1 (FEDORA-EPEL-2026-fbe5429f8b)
MongoDB driver for PHP
--------------------------------------------------------------------------------
Update Information:
Version 1.21.5
PHPC-2636: Respect libbson nesting limit when parsing PHP objects by @alcaeus in
https://github.com/mongodb/mongo-php-driver/pull/1934
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 5 2026 Remi Collet <[email protected]> - 1.21.5-1
- update to 1.21.5
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongodb2-2.1.8-1.el10_1 (FEDORA-EPEL-2026-d7ad30375e)
MongoDB driver for PHP version 2
--------------------------------------------------------------------------------
Update Information:
Version 2.1.8
PHPC-2636: Respect libbson nesting limit when parsing PHP objects by @alcaeus in
https://github.com/mongodb/mongo-php-driver/pull/1934
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 5 2026 Remi Collet <[email protected]> - 2.1.8-1
- update to 2.1.8
--------------------------------------------------------------------------------
================================================================================
rust-anyhow-1.0.101-1.el10_1 (FEDORA-EPEL-2026-4e44124aa1)
Flexible concrete Error type built on std::error::Error
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.101.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 1.0.101-1
- Update to version 1.0.101; Fixes RHBZ#2437159
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.0.100-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-arc-swap-1.8.1-1.el10_1 (FEDORA-EPEL-2026-5a00ab9d2e)
Atomically swappable Arc
--------------------------------------------------------------------------------
Update Information:
Update to version 1.8.1.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 1.8.1-1
- Update to version 1.8.1; Fixes RHBZ#2436043
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-bytemuck-1.25.0-1.el10_1 (FEDORA-EPEL-2026-6eb3783672)
Muck around with piles of bytes
--------------------------------------------------------------------------------
Update Information:
Update to version 1.25.0.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 1.25.0-1
- Update to version 1.25.0; Fixes RHBZ#2435627
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.24.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-iana-time-zone-0.1.65-1.el10_1 (FEDORA-EPEL-2026-1e6f8c524b)
Get the IANA time zone for the current system
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.65.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 0.1.65-1
- Update to version 0.1.65; Fixes RHBZ#2433730
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.1.64-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-jiff-0.2.19-1.el10_1 (FEDORA-EPEL-2026-6c03119f2c)
Date-time library that encourages you to jump into the pit of success
--------------------------------------------------------------------------------
Update Information:
0.2.19 (2026-02-05)
This is a small release with a performance optimization (with respect to doing
heavily contended arithmetic on Zoned values) and a bug fix for a panic
that can occur when using %2s in strftime.
Enhancements:
Avoid cloning TimeZone for consuming operations on Zoned.
Bug fixes:
Fix a panic in timestamp.strftime("%2s").
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Benjamin A. Beasley <[email protected]> - 0.2.19-1
- Update to version 0.2.19; Fixes RHBZ#2437196
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.2.18-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2437196 - rust-jiff-0.2.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2437196
--------------------------------------------------------------------------------
================================================================================
rust-regex-lite-0.1.9-1.el10_1 (FEDORA-EPEL-2026-3af0feef0f)
Lightweight regex engine that optimizes for binary size and compilation time
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.9.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 0.1.9-1
- Update to version 0.1.9; Fixes RHBZ#2436330
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.1.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-regex-syntax-0.8.9-1.el10_1 (FEDORA-EPEL-2026-96bfff2d93)
Regular expression parser
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.9.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 0.8.9-1
- Update to version 0.8.9; Fixes RHBZ#2436331
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.8.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-slab-0.4.12-1.el10_1 (FEDORA-EPEL-2026-6e18908866)
Pre-allocated storage for a uniform data type
--------------------------------------------------------------------------------
Update Information:
Update to version 0.4.12.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 0.4.12-1
- Update to version 0.4.12; Fixes RHBZ#2435675
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.4.11-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-test-tag-0.1.6-1.el10_1 (FEDORA-EPEL-2026-4405c9c67c)
#[tag] attribute for convenient tagging/grouping of #[test] tests
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.6.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 0.1.6-1
- Update to version 0.1.6; Fixes RHBZ#2433453
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
0.1.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
0.1.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-zmij-1.0.19-1.el10_1 (FEDORA-EPEL-2026-944414e26e)
Double-to-string conversion algorithm based on Schubfach and yy
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.19.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 6 2026 Fabio Valentini <[email protected]> - 1.0.19-1
- Update to version 1.0.19; Fixes RHBZ#2428605
* Sat Jan 17 2026 Fedora Release Engineering <[email protected]> -
1.0.12-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
