The following Fedora EPEL 8 Security updates need testing:
Age URL
85 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5e10141457 openbao-2.5.0-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
sec-2.9.4-1.el8
Details about builds:
================================================================================
sec-2.9.4-1.el8 (FEDORA-EPEL-2026-d7b412887c)
Simple Event Correlator script to filter log file entries
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 12 2026 Stefan Schulze Frielinghaus <stefansf(a)fedoraproject.org> - 2.9.4-1
- New upstream release
--------------------------------------------------------------------------------
Dear all,
I currently maintain `rust-pore` across Fedora and EPEL, but
unfortunately development on the open source repo has stalled - this
was used at work but recent activity is mostly on an internal fork
(alas).
Since it's causing an issue with keeping the set of Rust crates up to
date (it's needed patching to either compile with newer crates, or has
to be compiled with compatibility packages), I'd like to request having
it retired in EPEL 8 and 9.
Best regards,
--
_o) Michel Lind
_( ) https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2
README: https://fedoraproject.org/wiki/User:Salimma#README
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
openvpn-2.7.0-1.el10_1
roundcubemail-1.6.13-1.el10_1
spatialindex-2.1.0-4.el10_1
Details about builds:
================================================================================
openvpn-2.7.0-1.el10_1 (FEDORA-EPEL-2026-9448b7cafe)
A full-featured TLS VPN solution
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.7.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 11 2026 Frank Lichtenheld <frank(a)lichtenheld.com> - 2.7.0
- Update to upstream 2.7.0 release
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.6.13-1.el10_1 (FEDORA-EPEL-2026-eea9bfd64c)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Release 1.6.13
Managesieve: Fix handling of string-list format values for date tests in Out of
Office (#10075)
Fix remote image blocking bypass via SVG content reported by nullcathedral
Fix CSS injection vulnerability reported by CERT Polska
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 9 2026 Remi Collet <remi(a)remirepo.net> - 1.6.13-1
- update to 1.6.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2438810 - CVE-2026-26079 roundcubemail: Roundcube Webmail: Cascading Style Sheets (CSS) injection via mishandled comments [epel-10]
https://bugzilla.redhat.com/show_bug.cgi?id=2438810
--------------------------------------------------------------------------------
================================================================================
spatialindex-2.1.0-4.el10_1 (FEDORA-EPEL-2026-293d2b16c9)
Spatial index library
--------------------------------------------------------------------------------
Update Information:
Initial build of spatialindex for EPEL
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Wed Nov 12 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.1.0-3
- Build as C++17 for compatibility with gtest 1.17
* Fri Jul 25 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Mar 6 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.1.0-1
- Update to 2.1.0 (close RHBZ#2283791)
* Thu Mar 6 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.9.3-14
- Remove macros obsolete in Fedora
- Use CMake RPM macros to build and install
- Build and run the tests
- Do not glob over the .so version
- Test with the system gtest instead of the bundled one
* Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.3-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.3-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.3-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2438966 - please branch and build spatialindex in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2438966
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
83 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2 xpdf-4.06-1.el8
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5e10141457 openbao-2.5.0-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
fedpkg-1.47-5.el8
Details about builds:
================================================================================
fedpkg-1.47-5.el8 (FEDORA-EPEL-2026-fcb33b407e)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
Add zsh auto-completion
Patch: Check the correct sorting of imports from now on
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 10 2026 Tom Hughes <tom(a)compton.nu> - 1.47-5
- Add zsh auto completion
* Tue Feb 10 2026 Ondřej Nosek <onosek(a)redhat.com> - 1.47-4
- Patch: Check the correct sorting of imports from now on
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.47-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
js-jquery-ui-1.14.2-1.el10_1
python-rich-toolkit-0.19.0-1.el10_1
rust-libc-0.2.181-1.el10_1
xrootd-s3-http-0.6.4-1.el10_1
Details about builds:
================================================================================
js-jquery-ui-1.14.2-1.el10_1 (FEDORA-EPEL-2026-9be28f7593)
jQuery user interface
--------------------------------------------------------------------------------
Update Information:
jQuery UI 1.14.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 7 2026 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.14.2-1
- Update to version 1.14.2
- Add BuildRequires /usr/bin/node
* Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.14.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.14.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jan 17 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.14.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-rich-toolkit-0.19.0-1.el10_1 (FEDORA-EPEL-2026-e7a8d2ed32)
Rich toolkit for building command-line applications
--------------------------------------------------------------------------------
Update Information:
0.19.0 - 2026-02-09
This release refactors our styling a bit, improving the visual distinction
between submitted input values and placeholders, and properly handling the
cancelled state of inputs.
In addition to that we also merge the custom theme on top of the base theme
instead of replacing it, which allows us to preserve base styles like
placeholder.cancelled while still allowing users to customize their themes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 10 2026 Packit <hello(a)packit.dev> - 0.19.0-1
- Update to 0.19.0 upstream release
- Resolves: rhbz#2438192
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2438192 - python-rich-toolkit-0.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2438192
--------------------------------------------------------------------------------
================================================================================
rust-libc-0.2.181-1.el10_1 (FEDORA-EPEL-2026-a93eab6ea0)
Raw FFI bindings to platform libraries like libc
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.181.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 10 2026 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.181-1
- Update to version 0.2.181; Fixes RHBZ#2438346
* Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.180-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xrootd-s3-http-0.6.4-1.el10_1 (FEDORA-EPEL-2026-a7544fafa1)
S3/HTTP/Globus filesystem plugins for XRootD
--------------------------------------------------------------------------------
Update Information:
XRootD S3/HTTP 0.6.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 10 2026 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.4-1
- Update to version 0.6.4
--------------------------------------------------------------------------------