The following Fedora EPEL 10.1 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5fd0f09216 mod_security-2.9.9-1.el10_1 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9c3b16e06c fcgi-2.4.0-52.el10_1
The following builds have been pushed to Fedora EPEL 10.1 updates-testing
almalinux-git-utils-0.0.3^git20240927.3a7c848-1.el10_1 chromium-137.0.7151.55-1.el10_1 gn-2239^20250530gitafd24ed11bc5-1.el10_1 image-builder-20-1.el10_1 python-fastapi-0.115.12-4.el10_1 python-pydantic-extra-types-2.10.5-1.el10_1 python-rich-toolkit-0.14.7-1.el10_1 python-starlette-0.47.0-1.el10_1 rust-av1-grain-0.2.4-1.el10_1 rust-cc-1.2.25-1.el10_1 rust-clap-4.5.39-1.el10_1 rust-clap_builder-4.5.39-1.el10_1 rust-clap_complete-4.5.52-1.el10_1 rust-clap_complete_nushell-4.5.6-1.el10_1 rust-cursor-icon-1.2.0-1.el10_1 rust-derive-where-1.4.0-1.el10_1 rust-hyper-rustls-0.27.6-1.el10_1 rust-prettyplease-0.2.33-1.el10_1 rust-webpki-roots-1.0.0-1.el10_1 rust-webpki-roots0.26-0.26.11-1.el10_1
Details about builds:
================================================================================ almalinux-git-utils-0.0.3^git20240927.3a7c848-1.el10_1 (FEDORA-EPEL-2025-18cb1cd9de) Utilities for working with the AlmaLinux Git server -------------------------------------------------------------------------------- Update Information:
Initial package for Fedora -------------------------------------------------------------------------------- ChangeLog:
* Fri May 30 2025 Neal Gompa ngompa@almalinux.org - 0.0.3^git20240927.3a7c848-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2368841 - Review Request: almalinux-git-utils - Utilities for working with the AlmaLinux Git server https://bugzilla.redhat.com/show_bug.cgi?id=2368841 --------------------------------------------------------------------------------
================================================================================ chromium-137.0.7151.55-1.el10_1 (FEDORA-EPEL-2025-b92d1d4371) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Background Fetch API CVE-2025-5065: Inappropriate implementation in FileSystemAccess API CVE-2025-5066: Inappropriate implementation in Messages CVE-2025-5281: Inappropriate implementation in BFCache CVE-2025-5283: Use after free in libvpx CVE-2025-5067: Inappropriate implementation in Tab Strip -------------------------------------------------------------------------------- ChangeLog:
* Tue May 27 2025 Than Ngo than@redhat.com - 137.0.7151.55-1 - Update to 137.0.7151.55 * CVE-2025-5063: Use after free in Compositing * CVE-2025-5280: Out of bounds write in V8 * CVE-2025-5064: Inappropriate implementation in Background Fetch API * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API * CVE-2025-5066: Inappropriate implementation in Messages * CVE-2025-5281: Inappropriate implementation in BFCache * CVE-2025-5283: Use after free in libvpx * CVE-2025-5067: Inappropriate implementation in Tab Strip - Fix FTBFS caused by simdutf and pdfium-png_decoder - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream - Refresh ppc64le patches - Enable system simdutf for F43 * Tue May 27 2025 Jitka Plesnikova jplesnik@redhat.com - 136.0.7103.113-2 - Rebuilt for flac 1.5.0 --------------------------------------------------------------------------------
================================================================================ gn-2239^20250530gitafd24ed11bc5-1.el10_1 (FEDORA-EPEL-2025-1612aba18a) Meta-build system that generates build files for Ninja -------------------------------------------------------------------------------- Update Information:
Update to version 2239 -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Benjamin A. Beasley code@musicinmybrain.net - 2239^20250530gitafd24ed11bc5-1 - Update to version 2239 * Sat May 31 2025 Benjamin A. Beasley code@musicinmybrain.net - 2237^20250525gitebc8f16ca7b0-1 - Update to version 2237 --------------------------------------------------------------------------------
================================================================================ image-builder-20-1.el10_1 (FEDORA-EPEL-2025-0d4a30ee39) An image building executable using osbuild -------------------------------------------------------------------------------- Update Information:
Automatic update for image-builder-20-1.el10_1. Changelog for image-builder * Fri May 30 2025 Packit hello@packit.dev - 20-1 Changes with 20 ---------------- * deps: update (#219) * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou — Somewhere on the Internet, 2025-05-30 -------------------------------------------------------------------------------- ChangeLog:
* Fri May 30 2025 Packit hello@packit.dev - 20-1 Changes with 20 ---------------- * deps: update (#219) * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
— Somewhere on the Internet, 2025-05-30 --------------------------------------------------------------------------------
================================================================================ python-fastapi-0.115.12-4.el10_1 (FEDORA-EPEL-2025-c5e1668422) FastAPI framework -------------------------------------------------------------------------------- Update Information:
Starlette 0.47.0 (May 29, 2025) Added Add support for ASGI pathsend extension. Add partitioned attribute to Response.set_cookie. Changed Change methods parameter type from list[str] to Collection[str]. Replace import typing by from typing import ... in the whole codebase. Fixed Mark ExceptionMiddleware.http_exception as async to prevent thread creation. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 29 2025 Benjamin A. Beasley code@musicinmybrain.net - 0.115.12-4 - Bump Starlette to allow up to 0.47.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2369219 - python-starlette-0.47.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369219 --------------------------------------------------------------------------------
================================================================================ python-pydantic-extra-types-2.10.5-1.el10_1 (FEDORA-EPEL-2025-d59ec6c8df) Extra types for Pydantic -------------------------------------------------------------------------------- Update Information:
Update to 2.10.5: https://github.com/pydantic/pydantic-extra- types/releases/tag/v2.10.5 -------------------------------------------------------------------------------- ChangeLog:
* Thu May 29 2025 Benjamin A. Beasley code@musicinmybrain.net - 2.10.5-1 - Update to 2.10.5 (close RHBZ#2369192) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2369192 - python-pydantic-extra-types-2.10.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369192 --------------------------------------------------------------------------------
================================================================================ python-rich-toolkit-0.14.7-1.el10_1 (FEDORA-EPEL-2025-1552b6f15f) Rich toolkit for building command-line applications -------------------------------------------------------------------------------- Update Information:
Update to 0.14.7 upstream release: Fix placeholder when input is done. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Packit hello@packit.dev - 0.14.7-1 - Update to 0.14.7 upstream release - Resolves: rhbz#2368787 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2368787 - python-rich-toolkit-0.14.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2368787 --------------------------------------------------------------------------------
================================================================================ python-starlette-0.47.0-1.el10_1 (FEDORA-EPEL-2025-c5e1668422) The little ASGI library that shines -------------------------------------------------------------------------------- Update Information:
Starlette 0.47.0 (May 29, 2025) Added Add support for ASGI pathsend extension. Add partitioned attribute to Response.set_cookie. Changed Change methods parameter type from list[str] to Collection[str]. Replace import typing by from typing import ... in the whole codebase. Fixed Mark ExceptionMiddleware.http_exception as async to prevent thread creation. -------------------------------------------------------------------------------- ChangeLog:
* Fri May 30 2025 Packit hello@packit.dev - 0.47.0-1 - Update to 0.47.0 upstream release - Resolves: rhbz#2369219 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2369219 - python-starlette-0.47.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369219 --------------------------------------------------------------------------------
================================================================================ rust-av1-grain-0.2.4-1.el10_1 (FEDORA-EPEL-2025-d41929ae3f) Helpers for generating and parsing AV1 film grain data -------------------------------------------------------------------------------- Update Information:
Update to version 0.2.4. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 0.2.4-1 - Update to version 0.2.4; Fixes RHBZ#2367735 * Sun Jan 19 2025 Fedora Release Engineering releng@fedoraproject.org - 0.2.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-cc-1.2.25-1.el10_1 (FEDORA-EPEL-2025-bf04636581) Build-time dependency for Cargo build scripts to invoke the native C compiler -------------------------------------------------------------------------------- Update Information:
Update to version 1.2.25. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 1.2.25-1 - Update to version 1.2.25; Fixes RHBZ#2368170 --------------------------------------------------------------------------------
================================================================================ rust-clap-4.5.39-1.el10_1 (FEDORA-EPEL-2025-72140d2854) Simple to use, efficient, and full-featured Command Line Argument Parser -------------------------------------------------------------------------------- Update Information:
Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 4.5.39-1 - Update to version 4.5.39; Fixes RHBZ#2368827 --------------------------------------------------------------------------------
================================================================================ rust-clap_builder-4.5.39-1.el10_1 (FEDORA-EPEL-2025-72140d2854) Simple to use, efficient, and full-featured Command Line Argument Parser -------------------------------------------------------------------------------- Update Information:
Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 4.5.39-1 - Update to version 4.5.39; Fixes RHBZ#2368824 --------------------------------------------------------------------------------
================================================================================ rust-clap_complete-4.5.52-1.el10_1 (FEDORA-EPEL-2025-72140d2854) Generate shell completion scripts for your clap::Command -------------------------------------------------------------------------------- Update Information:
Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 4.5.52-1 - Update to version 4.5.52; Fixes RHBZ#2368825 --------------------------------------------------------------------------------
================================================================================ rust-clap_complete_nushell-4.5.6-1.el10_1 (FEDORA-EPEL-2025-72140d2854) Generator library used with clap for Nushell completion scripts -------------------------------------------------------------------------------- Update Information:
Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 4.5.6-1 - Update to version 4.5.6; Fixes RHBZ#2368826 * Sun Jan 19 2025 Fedora Release Engineering releng@fedoraproject.org - 4.5.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-cursor-icon-1.2.0-1.el10_1 (FEDORA-EPEL-2025-c791a0940a) Cross platform cursor icon type -------------------------------------------------------------------------------- Update Information:
Update to version 1.2.0. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 1.2.0-1 - Update to version 1.2.0; Fixes RHBZ#2368457 * Sun Jan 19 2025 Fedora Release Engineering releng@fedoraproject.org - 1.1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-derive-where-1.4.0-1.el10_1 (FEDORA-EPEL-2025-6f92aca3db) Deriving with custom trait bounds -------------------------------------------------------------------------------- Update Information:
Update to version 1.4.0. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 1.4.0-1 - Update to version 1.4.0; Fixes RHBZ#2363536 --------------------------------------------------------------------------------
================================================================================ rust-hyper-rustls-0.27.6-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1) Rustls+hyper integration for pure rust HTTPS -------------------------------------------------------------------------------- Update Information:
Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 0.27.6-1 - Update to version 0.27.6; Fixes RHBZ#2368156 * Sun Jan 19 2025 Fedora Release Engineering releng@fedoraproject.org - 0.27.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-prettyplease-0.2.33-1.el10_1 (FEDORA-EPEL-2025-5ce01c5a46) Minimal syn syntax tree pretty-printer -------------------------------------------------------------------------------- Update Information:
Update to version 0.2.33. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 0.2.33-1 - Update to version 0.2.33; Fixes RHBZ#2369523 --------------------------------------------------------------------------------
================================================================================ rust-webpki-roots-1.0.0-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1) Mozilla's CA root certificates for use with webpki -------------------------------------------------------------------------------- Update Information:
Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog:
* Mon May 26 2025 Fabio Valentini decathorpe@gmail.com - 1.0.0-1 - Update to version 1.0.0; Fixes RHBZ#2362543 --------------------------------------------------------------------------------
================================================================================ rust-webpki-roots0.26-0.26.11-1.el10_1 (FEDORA-EPEL-2025-25bddfd1d1) Mozilla's CA root certificates for use with webpki -------------------------------------------------------------------------------- Update Information:
Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 31 2025 Fabio Valentini decathorpe@gmail.com - 0.26.11-1 - Initial import (webpki-roots 0.26 compat package) --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org
-
updates＠fedoraproject.org