Fedora EPEL 10.3 updates-testing report

The following Fedora EPEL 10.3 Security updates need testing:
 Age  URL
  75  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a5d0ca57c2   nuclei-3.8.0-1.el10_3
  10  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-e6d245c837   haveged-1.9.26-1.el10_3
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4f32178b43   tor-0.4.9.11-1.el10_3
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6e8fb57b18   betterleaks-1.6.0-1.el10_3
   6  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a087e5a86b   python-cramjam-2.11.0-8.el10_3
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6a8ea7a52d   composer-2.10.2-1.el10_3
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ee896c6b20   prometheus-3.13.0-1.el10_3
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-39de6c68e1   clamav-1.4.5-1.el10_3
   3  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-229e7ad5a2   opkssh-0.15.0-2.el10_3
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8c29a19cdb   jfrog-cli-2.112.0-1.el10_3
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ceb16b3114   log4cxx-1.7.0-3.el10_3
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-cc5650cf72   rust-fern-0.7.1-6.el10_3 rust-routinator-0.15.2-1.el10_3 rust-rpki-0.19.3-1.el10_3 rust-syslog-7.0.0-2.el10_3
   2  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-49e427dec0   perl-Crypt-DSA-1.22-1.el10_3

The following builds have been pushed to Fedora EPEL 10.3 updates-testing

python-absl-py-2.5.0-1.el10_3
    python-pytest-aiohttp-1.1.1-1.el10_3
    rust-html-escape-0.2.14-1.el10_3
    rust-num-bigint-0.4.8-1.el10_3
    rust-rustc-hash-2.1.3-1.el10_3
    rust-utf8-width-0.1.9-1.el10_3
    rust-zbus-5.16.0-1.el10_3
    rust-zbus_macros-5.16.0-1.el10_3
    rust-zbus_names-4.3.2-1.el10_3
    rust-zvariant-5.12.0-1.el10_3
    rust-zvariant_derive-5.12.0-1.el10_3
    rust-zvariant_utils-3.4.0-1.el10_3
    syncthing-2.1.1-1.el10_3
    weechat-4.9.3-1.el10_3

Details about builds:

================================================================================
 python-absl-py-2.5.0-1.el10_3 (FEDORA-EPEL-2026-c1b49b5274)
 Abseil Python Common Libraries
--------------------------------------------------------------------------------
Update Information:

Update to 2.5.0 upstream release.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Packit  - 2.5.0-1
- Update to 2.5.0 upstream release
- Resolves: rhbz#2496815
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2496815 - python-absl-py-2.5.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2496815
--------------------------------------------------------------------------------

================================================================================
 python-pytest-aiohttp-1.1.1-1.el10_3 (FEDORA-EPEL-2026-1b0fe36715)
 Pytest plugin for aiohttp support
--------------------------------------------------------------------------------
Update Information:

Fixes: [Bug 2486155] python-pytest-aiohttp-1.1.1 is available
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun  8 2026 Martin Wolf  - 1.1.1-1
- Update to latest upstream release (closes RHBZ#2486155)
* Thu Jun  4 2026 Python Maint  - 1.1.0-7
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------

================================================================================
 rust-html-escape-0.2.14-1.el10_3 (FEDORA-EPEL-2026-103084c665)
 Library for escaping special characters and unescaping HTML entities in HTML
--------------------------------------------------------------------------------
Update Information:

Update to version 0.2.14.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 0.2.14-1
- Update to version 0.2.14; Fixes RHBZ#2497053
* Sat Jan 17 2026 Fedora Release Engineering  - 0.2.13-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering  - 0.2.13-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering  - 0.2.13-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 rust-num-bigint-0.4.8-1.el10_3 (FEDORA-EPEL-2026-4f79fb0758)
 Big integer implementation for Rust
--------------------------------------------------------------------------------
Update Information:

Update to version 0.4.8.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 0.4.8-1
- Update to version 0.4.8
* Sat Jan 17 2026 Fedora Release Engineering  - 0.4.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering  - 0.4.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering  - 0.4.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 rust-rustc-hash-2.1.3-1.el10_3 (FEDORA-EPEL-2026-20c05efe7f)
 Speedy, non-cryptographic hashing algorithm used by rustc
--------------------------------------------------------------------------------
Update Information:

Update to version 2.1.3.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 2.1.3-1
- Update to version 2.1.3; Fixes RHBZ#2496670
--------------------------------------------------------------------------------

================================================================================
 rust-utf8-width-0.1.9-1.el10_3 (FEDORA-EPEL-2026-2112a4f1cf)
 Determine the width of a UTF-8 character by providing its first byte
--------------------------------------------------------------------------------
Update Information:

Update to version 0.1.9.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 0.1.9-1
- Update to version 0.1.9; Fixes RHBZ#2497051
* Sat Jan 17 2026 Fedora Release Engineering  - 0.1.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 rust-zbus-5.16.0-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 API for D-Bus communication
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 5.16.0-1
- Update to version 5.16.0; Fixes RHBZ#2462260
--------------------------------------------------------------------------------

================================================================================
 rust-zbus_macros-5.16.0-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 Proc-macros for zbus
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 5.16.0-1
- Update to version 5.16.0; Fixes RHBZ#2462263
--------------------------------------------------------------------------------

================================================================================
 rust-zbus_names-4.3.2-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 Collection of D-Bus bus names types
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 4.3.2-1
- Update to version 4.3.2; Fixes RHBZ#2462261
--------------------------------------------------------------------------------

================================================================================
 rust-zvariant-5.12.0-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 D-Bus & GVariant encoding & decoding
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 5.12.0-1
- Update to version 5.12.0; Fixes RHBZ#2462269
--------------------------------------------------------------------------------

================================================================================
 rust-zvariant_derive-5.12.0-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 D-Bus & GVariant encoding & decoding
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 5.12.0-1
- Update to version 5.12.0; Fixes RHBZ#2462267
--------------------------------------------------------------------------------

================================================================================
 rust-zvariant_utils-3.4.0-1.el10_3 (FEDORA-EPEL-2026-5391746224)
 Various utilities used internally by the zvariant crate
--------------------------------------------------------------------------------
Update Information:

Update the zbus and zbus_macros crates to version 5.16.0.
Update the zbus_names crate to version 4.3.2.
Update the zvariant and zvariant_derive crates to version 5.12.0.
Update the zvariant_utils crate to version 3.4.0.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 3.4.0-1
- Update to version 3.4.0; Fixes RHBZ#2462270
--------------------------------------------------------------------------------

================================================================================
 syncthing-2.1.1-1.el10_3 (FEDORA-EPEL-2026-ddefa409e2)
 Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:

Update to version 2.1.1.
The major change in v2 is migration of the database backend from LevelDB to
SQLite. This is handled transparently on startup by syncthing like any other
database migration - the only change should be that the first startup takes a
bit longer than usual.
This update also includes fixes for various security issues by compiling with
updated dependencies and / or newer versions of the Go compiler and standard
library.
Please refer to the upstream release notes for other changes since 1.30.0:
https://github.com/syncthing/syncthing/releases
Approved EPEL incompatible upgrade request:
https://forge.fedoraproject.org/epel/steering/issues/368
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 Fabio Valentini  - 2.1.1-1
- Update to version 2.1.1; Fixes RHBZ#2444191
* Sun Jul  5 2026 Maxwell G  - 2.0.14-3
- Require syncthing and syncthing-tools packages to be updated together
* Sun Jul  5 2026 Maxwell G  - 2.0.14-2
- Update quic-go to newer version that supports Go 1.26
* Sun Jul  5 2026 Maxwell G  - 2.0.14-1
- Update to 2.0.14.
* Sun Jul  5 2026 Fabio Valentini  - 2.0.11-1
- Update to version 2.0.11
* Fri Jun 19 2026 Fabio Valentini  - 1.30.0-2
- Rebuild with golang-1.26.3
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2398952 - CVE-2025-47906 syncthing: Unexpected paths returned from LookPath in os/exec [epel-10]
        https://bugzilla.redhat.com/show_bug.cgi?id=2398952
  [ 2 ] Bug #2407499 - CVE-2025-58189 syncthing: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-10]
        https://bugzilla.redhat.com/show_bug.cgi?id=2407499
  [ 3 ] Bug #2408951 - CVE-2025-61723 syncthing: Quadratic complexity when parsing some invalid inputs in encoding/pem [epel-10]
        https://bugzilla.redhat.com/show_bug.cgi?id=2408951
  [ 4 ] Bug #2409893 - CVE-2025-58185 syncthing: Parsing DER payload can cause memory exhaustion in encoding/asn1 [epel-10]
        https://bugzilla.redhat.com/show_bug.cgi?id=2409893
  [ 5 ] Bug #2410833 - CVE-2025-58188 syncthing: Panic when validating certificates with DSA public keys in crypto/x509 [epel-10]
        https://bugzilla.redhat.com/show_bug.cgi?id=2410833
  [ 6 ] Bug #2412498 - CVE-2025-58183 syncthing: Unbounded allocation when parsing GNU sparse map [epel-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2412498
--------------------------------------------------------------------------------

================================================================================
 weechat-4.9.3-1.el10_3 (FEDORA-EPEL-2026-c56ef56d9d)
 Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:

Update to 4.9.3
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jul  5 2026 LuK1337  - 4.9.3-1
- Update to 4.9.3
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2497175 - weechat-4.9.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2497175
--------------------------------------------------------------------------------