The following Fedora EPEL 9 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-8e5425643f lua-http-0.3-11.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-dcd0590d66 libmodsecurity-3.0.14-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-70ce865582 fcgi-2.4.0-52.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing chromium-137.0.7151.55-1.el9 rust-av1-grain-0.2.4-1.el9 rust-cc-1.2.25-1.el9 rust-clap-4.5.39-1.el9 rust-clap_builder-4.5.39-1.el9 rust-clap_complete-4.5.52-1.el9 rust-clap_complete_nushell-4.5.6-1.el9 rust-color-eyre-0.6.5-1.el9 rust-color-spantrace-0.3.0-1.el9 rust-cursor-icon-1.2.0-1.el9 rust-hyper-rustls-0.27.6-1.el9 rust-prettyplease-0.2.33-1.el9 rust-webpki-roots-1.0.0-1.el9 rust-webpki-roots0.26-0.26.11-1.el9 Details about builds: ================================================================================ chromium-137.0.7151.55-1.el9 (FEDORA-EPEL-2025-8e1939142a) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Background Fetch API CVE-2025-5065: Inappropriate implementation in FileSystemAccess API CVE-2025-5066: Inappropriate implementation in Messages CVE-2025-5281: Inappropriate implementation in BFCache CVE-2025-5283: Use after free in libvpx CVE-2025-5067: Inappropriate implementation in Tab Strip -------------------------------------------------------------------------------- ChangeLog: * Tue May 27 2025 Than Ngo <than@xxxxxxxxxx> - 137.0.7151.55-1 - Update to 137.0.7151.55 * CVE-2025-5063: Use after free in Compositing * CVE-2025-5280: Out of bounds write in V8 * CVE-2025-5064: Inappropriate implementation in Background Fetch API * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API * CVE-2025-5066: Inappropriate implementation in Messages * CVE-2025-5281: Inappropriate implementation in BFCache * CVE-2025-5283: Use after free in libvpx * CVE-2025-5067: Inappropriate implementation in Tab Strip - Fix FTBFS caused by simdutf and pdfium-png_decoder - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream - Refresh ppc64le patches - Enable system simdutf for F43 * Tue May 27 2025 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 136.0.7103.113-2 - Rebuilt for flac 1.5.0 -------------------------------------------------------------------------------- ================================================================================ rust-av1-grain-0.2.4-1.el9 (FEDORA-EPEL-2025-46c97bd1e1) Helpers for generating and parsing AV1 film grain data -------------------------------------------------------------------------------- Update Information: Update to version 0.2.4. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.2.4-1 - Update to version 0.2.4; Fixes RHBZ#2367735 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.2.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Fri Jan 26 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-cc-1.2.25-1.el9 (FEDORA-EPEL-2025-a43a884026) Build-time dependency for Cargo build scripts to invoke the native C compiler -------------------------------------------------------------------------------- Update Information: Update to version 1.2.25. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 1.2.25-1 - Update to version 1.2.25; Fixes RHBZ#2368170 -------------------------------------------------------------------------------- ================================================================================ rust-clap-4.5.39-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Simple to use, efficient, and full-featured Command Line Argument Parser -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 4.5.39-1 - Update to version 4.5.39; Fixes RHBZ#2368827 -------------------------------------------------------------------------------- ================================================================================ rust-clap_builder-4.5.39-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Simple to use, efficient, and full-featured Command Line Argument Parser -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 4.5.39-1 - Update to version 4.5.39; Fixes RHBZ#2368824 -------------------------------------------------------------------------------- ================================================================================ rust-clap_complete-4.5.52-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Generate shell completion scripts for your clap::Command -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 4.5.52-1 - Update to version 4.5.52; Fixes RHBZ#2368825 -------------------------------------------------------------------------------- ================================================================================ rust-clap_complete_nushell-4.5.6-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Generator library used with clap for Nushell completion scripts -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 4.5.6-1 - Update to version 4.5.6; Fixes RHBZ#2368826 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 4.5.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-color-eyre-0.6.5-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Error report handler for panics and eyre::Reports -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.6.5-1 - Update to version 0.6.5; Fixes RHBZ#2363850 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-color-spantrace-0.3.0-1.el9 (FEDORA-EPEL-2025-e3a40d3e98) Pretty printer for tracing_error::SpanTrace based on color-backtrace -------------------------------------------------------------------------------- Update Information: Update the clap and clap_builder crates to version 4.5.39. Update the clap_complete crate to version 4.5.52. Update the clap_complete_nushell crate to version 4.5.6. Update the color-eyre crate to version 0.6.5. Update the color-spantrace crate to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.3.0-1 - Update to version 0.3.0; Fixes RHBZ#2363851 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-cursor-icon-1.2.0-1.el9 (FEDORA-EPEL-2025-edf3c0d9a8) Cross platform cursor icon type -------------------------------------------------------------------------------- Update Information: Update to version 1.2.0. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 1.2.0-1 - Update to version 1.2.0; Fixes RHBZ#2368457 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Fri Jan 26 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-hyper-rustls-0.27.6-1.el9 (FEDORA-EPEL-2025-0b669bd6ec) Rustls+hyper integration for pure rust HTTPS -------------------------------------------------------------------------------- Update Information: Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.27.6-1 - Update to version 0.27.6; Fixes RHBZ#2368156 * Sun Jan 19 2025 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.27.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-prettyplease-0.2.33-1.el9 (FEDORA-EPEL-2025-320cd3f35c) Minimal syn syntax tree pretty-printer -------------------------------------------------------------------------------- Update Information: Update to version 0.2.33. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.2.33-1 - Update to version 0.2.33; Fixes RHBZ#2369523 -------------------------------------------------------------------------------- ================================================================================ rust-webpki-roots-1.0.0-1.el9 (FEDORA-EPEL-2025-0b669bd6ec) Mozilla's CA root certificates for use with webpki -------------------------------------------------------------------------------- Update Information: Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog: * Mon May 26 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 1.0.0-1 - Update to version 1.0.0; Fixes RHBZ#2362543 -------------------------------------------------------------------------------- ================================================================================ rust-webpki-roots0.26-0.26.11-1.el9 (FEDORA-EPEL-2025-0b669bd6ec) Mozilla's CA root certificates for use with webpki -------------------------------------------------------------------------------- Update Information: Update the hyper-rustls crate to version 0.27.6. Update the webpki-roots crate to version 1.0.0. Add a compat package for version 0.26 of the webpki-roots crate. -------------------------------------------------------------------------------- ChangeLog: * Sat May 31 2025 Fabio Valentini <decathorpe@xxxxxxxxx> - 0.26.11-1 - Initial import (webpki-roots 0.26 compat package) -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
