August 2026 - Epel-packagers-sig - Fedora mailing-lists

[Bug 2424670] New: python-claripy-9.2.190 is available
by bugzilla＠redhat.com 07 Oct '26

07 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2424670 Bug ID: 2424670 Summary: python-claripy-9.2.190 is available Product: Fedora Version: rawhide Status: NEW Component: python-claripy Keywords: FutureFeature, Triaged Assignee: mail(a)fabian-affolter.ch Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, mail(a)fabian-affolter.ch, redhat(a)flyn.org Target Milestone: --- Classification: Fedora Releases retrieved: 9.2.190 Upstream release that is considered latest: 9.2.190 Current version/release in rawhide: 9.2.189-1.fc44 URL: https://pypi.org/project/claripy/8.19.10.29 Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/34905/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/python-claripy -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2424670 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 33

[Bug 2335128] New: kyua-0.14 is available
by bugzilla＠redhat.com 07 Oct '26

07 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2335128 Bug ID: 2335128 Summary: kyua-0.14 is available Product: Fedora Version: rawhide Status: NEW Component: kyua Keywords: FutureFeature, Triaged Assignee: jonathan(a)almalinux.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, jonathan(a)almalinux.org Target Milestone: --- Classification: Fedora Releases retrieved: 0.14 Upstream release that is considered latest: 0.14 Current version/release in rawhide: 0.13-16.fc41 URL: https://github.com/jmmv/kyua Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/16901/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/kyua -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2335128 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2411598] New: CVE-2025-58188 golang-x-mod: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2411598 Bug ID: 2411598 Summary: CVE-2025-58188 golang-x-mod: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] Product: Fedora Version: 43 Status: NEW Whiteboard: {"flaws": ["f5cd0890-0e9d-43ca-a9a9-2125ff49b065"]} Component: golang-x-mod Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Blocks: 2407255 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2411598 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2410702] New: CVE-2025-58185 golang-x-mod: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2410702 Bug ID: 2410702 Summary: CVE-2025-58185 golang-x-mod: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] Product: Fedora Version: 43 Status: NEW Whiteboard: {"flaws": ["2fa18d6d-4a63-4751-8449-0bd327aaa2c7"]} Component: golang-x-mod Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Blocks: 2407251 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2410702 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2409752] New: CVE-2025-61723 golang-x-mod: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2409752 Bug ID: 2409752 Summary: CVE-2025-61723 golang-x-mod: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] Product: Fedora Version: 43 Status: NEW Whiteboard: {"flaws": ["9e11f9fa-e3b3-4c37-a80a-d8516bd3a9d2"]} Component: golang-x-mod Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Blocks: 2407252 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2409752 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 6

[Bug 2408279] New: CVE-2025-58189 golang-x-mod: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2408279 Bug ID: 2408279 Summary: CVE-2025-58189 golang-x-mod: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] Product: Fedora Version: 43 Status: NEW Whiteboard: {"flaws": ["3315d28f-56bc-48ea-9391-3ff13568ea24"]} Component: golang-x-mod Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mark.e.fuller(a)gmx.de Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, mark.e.fuller(a)gmx.de Blocks: 2407260 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2408279 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

[Bug 2523594] New: Stop building cross binutils for primary architectures
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2523594 Bug ID: 2523594 Summary: Stop building cross binutils for primary architectures Product: Fedora Version: rawhide OS: Linux Status: NEW Component: cross-binutils Severity: medium Assignee: dhowells(a)redhat.com Reporter: sipoyare(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dan(a)danny.cz, dhowells(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, lkundrak(a)v3.sk, mbrown(a)fensystems.co.uk Target Milestone: --- Classification: Fedora The main binutils package will start building for cross targets through bug 2523586. Stop building cross binutils for those targets once that is implemented. Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2523594 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2398986] New: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-9]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2398986 Bug ID: 2398986 Summary: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-9] Product: Fedora EPEL Version: epel9 Status: NEW Whiteboard: {"flaws": ["82b592f6-3fef-4109-80a1-8023edc09049"]} Component: fzf Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: michel(a)michel-slm.name Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, quantum.analyst(a)gmail.com Blocks: 2396546 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2398986 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2398959] New: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-8]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2398959 Bug ID: 2398959 Summary: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-8] Product: Fedora EPEL Version: epel8 Status: NEW Whiteboard: {"flaws": ["82b592f6-3fef-4109-80a1-8023edc09049"]} Component: fzf Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: michel(a)michel-slm.name Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, quantum.analyst(a)gmail.com Blocks: 2396546 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2398959 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2398918] New: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-10]
by bugzilla＠redhat.com 06 Oct '26

06 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2398918 Bug ID: 2398918 Summary: CVE-2025-47906 fzf: Unexpected paths returned from LookPath in os/exec [epel-10] Product: Fedora EPEL Version: epel10 Status: NEW Whiteboard: {"flaws": ["82b592f6-3fef-4109-80a1-8023edc09049"]} Component: fzf Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: michel(a)michel-slm.name Reporter: jmoroney(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: epel-packagers-sig(a)lists.fedoraproject.org, go-sig(a)lists.fedoraproject.org, michel(a)michel-slm.name, quantum.analyst(a)gmail.com Blocks: 2396546 Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2398918 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

2026

2025

2024

2023

2022

2021

Epel-packagers-sig August 2026