The following Fedora EPEL 8 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5682727d1e radare2-5.9.8-8.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
python-colcon-core-0.19.0-1.el8
Details about builds:
================================================================================
python-colcon-core-0.19.0-1.el8 (FEDORA-EPEL-2025-1bdb19172d)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to colcon-core 0.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Scott K Logan <logans(a)cottsay.net> - 0.19.0-1
- Update to 0.19.0 (rhbz#2352443)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2352443 - python-colcon-core-0.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2352443
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b3b0248eac radare2-5.9.8-7.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-745e054a6c fluent-bit-3.2.8-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
golang-github-facebook-time-0^20250314git532afb3-1.el9
image-builder-14-1.el9
python-colcon-core-0.19.0-1.el9
python-msal-1.32.0-1.el9
Details about builds:
================================================================================
golang-github-facebook-time-0^20250314git532afb3-1.el9 (FEDORA-EPEL-2025-406cb73d1f)
Meta's Time libraries
--------------------------------------------------------------------------------
Update Information:
Updating golang-github-facebook-time to 20240314
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Oleg Obleukhov <leoleovich(a)fedoraproject.org> - 0^20250314git532afb3-1
- Fix spec version
* Fri Mar 14 2025 Oleg Obleukhov <leoleovich(a)fedoraproject.org> - 0^20250311git532afb3-3
- Rename fbclock-daemon to fbclock
--------------------------------------------------------------------------------
================================================================================
image-builder-14-1.el9 (FEDORA-EPEL-2025-109174f359)
An image building executable using osbuild
--------------------------------------------------------------------------------
Update Information:
Automatic update for image-builder-14-1.el9.
Changelog for image-builder
* Fri Mar 14 2025 Packit <hello(a)packit.dev> - 14-1
Changes with 14
----------------
* build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-
deps group (#147)
* Author: dependabot[bot], Reviewers: Simon de Vlieger
* doc: fix typo (#152)
* Author: Simon de Vlieger, Reviewers: Michael Vogt
* ibcli: add new --output-name flag and predictable default names (#158)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: fix creating output dir for `--with-buildlog` (#150)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: show "success" message with output dir when build finishes (#154)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou
* packit: enable epel-9 and epel-10 (#149)
* Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
— Somewhere on the Internet, 2025-03-14
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Packit <hello(a)packit.dev> - 14-1
Changes with 14
----------------
* build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps group (#147)
* Author: dependabot[bot], Reviewers: Simon de Vlieger
* doc: fix typo (#152)
* Author: Simon de Vlieger, Reviewers: Michael Vogt
* ibcli: add new --output-name flag and predictable default names (#158)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: fix creating output dir for `--with-buildlog` (#150)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: show "success" message with output dir when build finishes (#154)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou
* packit: enable epel-9 and epel-10 (#149)
* Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
— Somewhere on the Internet, 2025-03-14
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.19.0-1.el9 (FEDORA-EPEL-2025-8fce670afe)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to colcon-core 0.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Scott K Logan <logans(a)cottsay.net> - 0.19.0-1
- Update to 0.19.0 (rhbz#2352443)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2352443 - python-colcon-core-0.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2352443
--------------------------------------------------------------------------------
================================================================================
python-msal-1.32.0-1.el9 (FEDORA-EPEL-2025-aba024ce90)
Microsoft Authentication Library (MSAL) for Python
--------------------------------------------------------------------------------
Update Information:
Update to 1.32.0 upstream release
https://github.com/AzureAD/microsoft-authentication-library-for-
python/releases/tag/1.32.0
Noticeable changes
New feature: Supports dSTS by ClientApplication(...,
authority="https://...example.com/dstsv2/...")
New feature: Start to support POD Identity, configured by env var
AZURE_POD_IDENTITY_AUTHORITY_HOST=http://ip:port
Bugfix: Support resource with the format of "GUID/.default" when running inside
Cloud Shell
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Packit <hello(a)packit.dev> - 1.32.0-1
- Update to 1.32.0 upstream release
- Resolves: rhbz#2351778
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2351778 - python-msal-1.32.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2351778
--------------------------------------------------------------------------------
The following Fedora EPEL 10.0 Security updates need testing:
Age URL
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f3e455b799 libssh2-1.11.1-1.el10_0
The following builds have been pushed to Fedora EPEL 10.0 updates-testing
gram_grep-0.9.5-1.el10_0
image-builder-14-1.el10_0
python-colcon-core-0.19.0-1.el10_0
Details about builds:
================================================================================
gram_grep-0.9.5-1.el10_0 (FEDORA-EPEL-2025-0537fdba76)
Search text using a grammar, lexer, or straight regex
--------------------------------------------------------------------------------
Update Information:
gram_grep 0.9.5
Use boost::regex_constants::match_not_dot_newline for regex iterators
Another fix for -v display
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 13 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.9.5-1
- Update to 0.9.5 (close RHBZ#2351789)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2351789 - gram_grep-0.9.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2351789
--------------------------------------------------------------------------------
================================================================================
image-builder-14-1.el10_0 (FEDORA-EPEL-2025-5a134f83ea)
An image building executable using osbuild
--------------------------------------------------------------------------------
Update Information:
Fri Mar 14 2025 Packit hello(a)packit.dev - 14-1
Changes with 14
build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps
group (#147)
Author: dependabot[bot], Reviewers: Simon de Vlieger
doc: fix typo (#152)
Author: Simon de Vlieger, Reviewers: Michael Vogt
ibcli: add new --output-name flag and predictable default names (#158)
Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
main: fix creating output dir for --with-buildlog (#150)
Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
main: show "success" message with output dir when build finishes (#154)
Author: Michael Vogt, Reviewers: Simon de Vlieger
main: skip arch checks onIMAGE_BUILDER_EXPERIMENTAL=bootstrap (#155)
Author: Michael Vogt, Reviewers: Achilleas Koutsou
packit: enable epel-9 and epel-10 (#149)
Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
— Somewhere on the Internet, 2025-03-14
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Packit <hello(a)packit.dev> - 14-1
Changes with 14
----------------
* build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps group (#147)
* Author: dependabot[bot], Reviewers: Simon de Vlieger
* doc: fix typo (#152)
* Author: Simon de Vlieger, Reviewers: Michael Vogt
* ibcli: add new --output-name flag and predictable default names (#158)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: fix creating output dir for `--with-buildlog` (#150)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* main: show "success" message with output dir when build finishes (#154)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou
* packit: enable epel-9 and epel-10 (#149)
* Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
— Somewhere on the Internet, 2025-03-14
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.19.0-1.el10_0 (FEDORA-EPEL-2025-7da22c41cc)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to colcon-core 0.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 14 2025 Scott K Logan <logans(a)cottsay.net> - 0.19.0-1
- Update to 0.19.0 (rhbz#2352443)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2352443 - python-colcon-core-0.19.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2352443
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b3b0248eac radare2-5.9.8-7.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-745e054a6c fluent-bit-3.2.8-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
rust-cmake-0.1.54-2.el9
rust-signal-hook-mio-0.2.4-5.el9
Details about builds:
================================================================================
rust-cmake-0.1.54-2.el9 (FEDORA-EPEL-2025-d49373c9e5)
Build dependency for running cmake to build a native library
--------------------------------------------------------------------------------
Update Information:
Add a downstream patch to ensure -O2 and -g flags are not filtered out from
distro-wide CFLAGS when using the cmake crate to compile code.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 13 2025 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.54-2
- Prevent -O2 and -g flags from being stripped from CFLAGS
--------------------------------------------------------------------------------
================================================================================
rust-signal-hook-mio-0.2.4-5.el9 (FEDORA-EPEL-2025-082e1748db)
MIO support for signal-hook
--------------------------------------------------------------------------------
Update Information:
Bump serial_test dev-dependency from v0.5 to v3 to avoid pulling in old compat
packages.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 13 2025 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.4-5
- Bump serial_test dev-dependency from 0.5 to 3
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5682727d1e radare2-5.9.8-8.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
gnuradio-3.8.0.0-8.el8
Details about builds:
================================================================================
gnuradio-3.8.0.0-8.el8 (FEDORA-EPEL-2025-c924c331c7)
Software defined radio framework
--------------------------------------------------------------------------------
Update Information:
This is an update fixing license.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 12 2025 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.8.0.0-8
- Fixed license tag
Resolves: rhbz#2346825
* Tue Mar 24 2020 Jaroslav Škarvada <jskarvad(a)redhat.com> - 3.8.0.0-7
- Added requirement on python3-six and python3-mako
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2346825 - License incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=2346825
--------------------------------------------------------------------------------
The following builds have been pushed to Fedora EPEL 10.0 updates-testing
libssh2-1.11.1-1.el10_0
python-pytest-trio-0.8.0-12.el10_0
python-zmq-26.3.0-1.el10_0
syncthing-1.29.3-1.el10_0
Details about builds:
================================================================================
libssh2-1.11.1-1.el10_0 (FEDORA-EPEL-2025-f3e455b799)
A library implementing the SSH2 protocol
--------------------------------------------------------------------------------
Update Information:
This update, to the current upstream libssh2 release, addresses a couple of
security issues:
CVE-2023-6918 (missing checks for return values for digests)
CVE-2023-48795 (prefix truncation attack on Binary Packet Protocol (BPP) -
"Terrapin")
It also removes support for a number of legacy algorithms that were disabled by
default or removed from OpenSSH in the 2015-2018 time period. See the
RELEASE_NOTES file for full details.
In addition, there are a large number of bug fixes and enhancements, which again
are described in the RELEASE_NOTES file.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 16 2024 Paul Howarth <paul(a)city-fan.org> - 1.11.1-1
- Update to 1.11.1 (rhbz#2319104)
- This is an enhancement and bugfix release - see RELEASE_NOTES for details
- Note also that various algorithms are now deprecated and not built by
default, which affects this package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
[ 2 ] Bug #2254997 - CVE-2023-6918 libssh: Missing checks for return values for digests
https://bugzilla.redhat.com/show_bug.cgi?id=2254997
--------------------------------------------------------------------------------
================================================================================
python-pytest-trio-0.8.0-12.el10_0 (FEDORA-EPEL-2025-aa2e464f4e)
Pytest plugin for trio
--------------------------------------------------------------------------------
Update Information:
First EPEL 10.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 18 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Sep 4 2024 Miroslav Suchý <msuchy(a)redhat.com> - 0.8.0-11
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Sun Jul 7 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.8.0-9
- Remove trio.tests imports (removed from trio 0.24+)
* Fri Jun 7 2024 Python Maint <python-maint(a)redhat.com> - 0.8.0-8
- Rebuilt for Python 3.13
* Mon Apr 8 2024 Fabian Affolter <mail(a)fabian-affolter.ch> - 0.8.0-7
- Ignore trio.TrioDeprecationWarning (closes rhbz#2261596)
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jul 1 2023 Python Maint <python-maint(a)redhat.com> - 0.8.0-3
- Rebuilt for Python 3.12
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2345503 - Please branch and build python-pytest-trio in epel10
https://bugzilla.redhat.com/show_bug.cgi?id=2345503
--------------------------------------------------------------------------------
================================================================================
python-zmq-26.3.0-1.el10_0 (FEDORA-EPEL-2025-dbe748ae12)
Python bindings for zeromq
--------------------------------------------------------------------------------
Update Information:
Update to 26.3.0
This release drops support for Python 3.7; there are no other significant
changes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 12 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 26.3.0-1
- Update to 26.3.0 (close RHBZ#2351542)
* Thu Feb 13 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 26.2.1-3
- Work around a Python 3.14 testing path issue
- Fixes RHBZ#2345510
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2351542 - python-zmq-26.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2351542
--------------------------------------------------------------------------------
================================================================================
syncthing-1.29.3-1.el10_0 (FEDORA-EPEL-2025-925f38306f)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.29.3.
Release notes:
1.29.0: https://github.com/syncthing/syncthing/releases/tag/v1.29.0
1.29.1: https://github.com/syncthing/syncthing/releases/tag/v1.29.1
1.29.2: https://github.com/syncthing/syncthing/releases/tag/v1.29.2
1.29.3: https://github.com/syncthing/syncthing/releases/tag/v1.29.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 12 2025 Fabio Valentini <decathorpe(a)gmail.com> - 1.29.3-1
- Update to version 1.29.3; Fixes RHBZ#2335781
* Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.28.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------