https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md
Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518.
https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md
Fixed a parser desynchronization vulnerability when reading tar archives that contain mismatched size information in PAX/ustar headers.
This vulnerability is being tracked as GHSA-j5gw-2vrg-8fgx and CVE-2025-62518.
python-uv-build in Fedora 42ruff and uv.rust-tikv-jemallocator and rust-tikv-jemalloc-sys to 0.6.1.openapi-python-client to allow ruff 0.14Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2025-43a0bff5eaPlease log in to add feedback.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
This update has been submitted for testing by bodhi.
This update has been pushed to testing.
music edited this update.
New build(s):
Karma has been reset.
This update has been submitted for testing by music.
This update has been pushed to testing.
music edited this update.
New build(s):
Karma has been reset.
This update has been submitted for testing by music.
This update has been pushed to testing.
music edited this update.
New build(s):
Karma has been reset.
This update has been submitted for testing by music.
music edited this update.
New build(s):
Karma has been reset.
This update has been pushed to testing.
music edited this update.
New build(s):
Karma has been reset.
This update has been submitted for testing by music.
music edited this update.
music edited this update.
New build(s):
Karma has been reset.
This update has been pushed to testing.
music edited this update.
New build(s):
Karma has been reset.
This update has been submitted for testing by music.
music edited this update.
music edited this update.
This update has been pushed to testing.
music edited this update.
music edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update has been submitted for testing by music.
This update has been pushed to testing.
music edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update has been submitted for testing by music.
music edited this update.
New build(s):
Removed build(s):
Karma has been reset.
With ruff and uv now both fully up to date, I’m going to try to stop editing this so that it can go stable.
music edited this update.
This update has been pushed to testing.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.