The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-66a01bfb0d valkey-8.0.3-3.el9 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ead5908650 python-django4.2-4.2.22-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-a36cdc1182 kea-2.6.3-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9c03a7aa1d konsole5-23.08.5-2.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing R-4.5.1-1.el9 chromium-137.0.7151.103-1.el9 faad2-2.11.2-3.el9 icewm-3.7.5-1.el9 pbuilder-0.231.1-3.el9 rust-cursive-0.21.1-2.el9 Details about builds: ================================================================================ R-4.5.1-1.el9 (FEDORA-EPEL-2025-4e5405e107) A language for data analysis and graphics -------------------------------------------------------------------------------- Update Information: Update to 4.5.1 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 13 2025 Iñaki �car <iucar@xxxxxxxxxxxxxxxxx> - 4.5.1-1 - Update to 4.5.1 * Wed Apr 23 2025 Yaakov Selkowitz <yselkowi@xxxxxxxxxx> - 4.5.0-4 - Fix flatpak build -------------------------------------------------------------------------------- ================================================================================ chromium-137.0.7151.103-1.el9 (FEDORA-EPEL-2025-549cb45f1c) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 137.0.7151.103 CVE-2025-5958: Use after free in Media CVE-2025-5959: Type Confusion in V8 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 11 2025 Than Ngo <than@xxxxxxxxxx> - 137.0.7151.103-1 - Update to 137.0.7151.103 * CVE-2025-5958: Use after free in Media * CVE-2025-5959: Type Confusion in V8 - Provide correct version for bundle librarires - Fix rhbz#2368923, Chromium crash -------------------------------------------------------------------------------- References: [ 1 ] Bug #2371649 - CVE-2025-5958 chromium: Chrome Media Use-After-Free Vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2371649 [ 2 ] Bug #2371654 - CVE-2025-5959 chromium: Chrome Type Confusion Vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2371654 -------------------------------------------------------------------------------- ================================================================================ faad2-2.11.2-3.el9 (FEDORA-EPEL-2025-3637b2295c) Library and frontend for decoding MPEG2/4 AAC -------------------------------------------------------------------------------- Update Information: FAAD2 package moved from RPM Fusion. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 9 2025 Dominik Mierzejewski <dominik@xxxxxxxxxxxxxx> - 1:2.11.2-3 - supply a valid upstream URL - move libfaad manpage to devel subpackage * Sat Jun 7 2025 Dominik Mierzejewski <dominik@xxxxxxxxxxxxxx> - 1:2.11.2-2 - convert License tag to SPDX - drop obsolete ldconfig_scriptlets macro - tighten file lists * Wed Mar 5 2025 Leigh Scott <leigh123linux@xxxxxxxxx> - 1:2.11.2-1 - Update to 2.11.2 * Tue Jan 28 2025 RPM Fusion Release Engineering <sergiomb@xxxxxxxxxxxxx> - 1:2.11.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Thu Aug 1 2024 RPM Fusion Release Engineering <sergiomb@xxxxxxxxxxxxx> - 1:2.11.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sat Feb 3 2024 RPM Fusion Release Engineering <sergiomb@xxxxxxxxxxxxx> - 1:2.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Nov 16 2023 Leigh Scott <leigh123linux@xxxxxxxxx> - 1:2.11.1-1 - Update to 2.11.1 * Tue Nov 7 2023 Leigh Scott <leigh123linux@xxxxxxxxx> - 1:2.11.0-1 - Update to 2.11.0 * Wed Aug 2 2023 RPM Fusion Release Engineering <sergiomb@xxxxxxxxxxxxx> - 1:2.10.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2370973 - Review Request: faad2 - Library and frontend for decoding MPEG2/4 AAC https://bugzilla.redhat.com/show_bug.cgi?id=2370973 -------------------------------------------------------------------------------- ================================================================================ icewm-3.7.5-1.el9 (FEDORA-EPEL-2025-1ca4697ffa) Window manager designed for speed, usability, and consistency -------------------------------------------------------------------------------- Update Information: Automatic update for icewm-3.7.5-1.el9. Changelog for icewm * Fri Jun 13 2025 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 3.7.5-1 - chore: Update to 3.7.5 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 13 2025 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 3.7.5-1 - chore: Update to 3.7.5 -------------------------------------------------------------------------------- ================================================================================ pbuilder-0.231.1-3.el9 (FEDORA-EPEL-2025-9e22afca86) Personal package builder for Debian packages -------------------------------------------------------------------------------- Update Information: Adjust mount dependency to util-linux. -------------------------------------------------------------------------------- ChangeLog: * Sat Nov 30 2024 Sérgio Basto <sergio@xxxxxxxxxx> - 0.231.1-3 - Requires util-linux-core instead mount, which doesn't exist as package on Fedora -------------------------------------------------------------------------------- ================================================================================ rust-cursive-0.21.1-2.el9 (FEDORA-EPEL-2025-6da98def95) TUI (Text User Interface) library focused on ease-of-use -------------------------------------------------------------------------------- Update Information: Drop ncurses and pancurses backends, ncurses-rs is archived -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 13 2025 Michel Lind <salimma@xxxxxxxxxxxxxxxxx> - 0.21.1-2 - Drop ncurses and pancurses backends, ncurses-rs is archived --------------------------------------------------------------------------------
-- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
