stable

ruff-0.14.2-1.el10_2, rust-astral-tokio-tar-0.5.6-1.el10_2, & 32 more

FEDORA-EPEL-2025-d12b62c436 created by music 7 months ago for Fedora EPEL 10.2

uv 0.9.5

https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md

Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518.


ruff 0.14.2

https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md


rust-astral-tokio-tar 0.5.6

  • Fixed a parser desynchronization vulnerability when reading tar archives that contain mismatched size information in PAX/ustar headers.

    This vulnerability is being tracked as GHSA-j5gw-2vrg-8fgx and CVE-2025-62518.


Initial packages for a number of new dependencies for ruff and uv, and initial EPEL10 packages for a few of their dependencies.


Update rust-tikv-jemallocator and rust-tikv-jemalloc-sys to 0.6.1.

This update's test gating status has been changed to 'waiting'.

7 months ago

This update's test gating status has been changed to 'ignored'.

7 months ago

This update has been submitted for testing by bodhi.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • rust-trybuild2-1.2.0-5.el10_2
  • rust-basic-toml-0.1.10-2.el10_2
  • rust-derive_more-2.0.1-3.el10_2
  • rust-derive_more-impl-2.0.1-2.el10_2
  • rust-attribute-derive-macro-0.10.5-1.el10_2
  • rust-attribute-derive-0.10.5-1.el10_2
  • rust-quote-use-macros-0.8.4-1.el10_2
  • rust-collection_literals-1.0.3-1.el10_2
  • rust-interpolator-0.5.0-3.el10_2
  • rust-proc-macro-utils-0.10.0-1.el10_2
  • rust-manyhow-0.11.4-1.el10_2
  • rust-manyhow-macros-0.11.4-1.el10_2
  • rust-quote-use-0.8.4-2.el10_2
  • rust-tikv-jemallocator-0.6.1-1.el10_2
  • rust-tikv-jemalloc-sys-0.6.1-1.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • rust-get-size2-0.7.0-2.el10_2
  • rust-get-size-derive2-0.7.0-1.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • rust-intrusive-collections-0.9.7-3.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

music edited this update.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • ruff-0.14.1-1.el10_2
  • rust-backon-1.5.2-2.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

music edited this update.

New build(s):

  • rust-astral-tokio-tar-0.5.6-1.el10_2

Karma has been reset.

7 months ago

music edited this update.

New build(s):

  • rust-rust-ini-0.21.3-1.el10_2
  • rust-reqsign-0.17.0-1.el10_2

Removed build(s):

  • rust-rust-ini-0.21.2-2.el10_2

Karma has been reset.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • uv-0.8.24-1.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

music edited this update.

New build(s):

  • uv-0.8.24-3.el10_2

Removed build(s):

  • uv-0.8.24-1.el10_2

Karma has been reset.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

7 months ago

music edited this update.

New build(s):

  • ruff-0.14.2-1.el10_2

Removed build(s):

  • ruff-0.14.1-1.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

This update has been pushed to testing.

7 months ago

music edited this update.

New build(s):

  • uv-0.9.5-1.el10_2
  • rust-reqsign-0.18.0-1.el10_2
  • rust-reqsign-aws-v4-2.0.0-1.el10_2
  • rust-reqsign-command-execute-tokio-2.0.0-1.el10_2
  • rust-reqsign-http-send-reqwest-2.0.0-1.el10_2
  • rust-reqsign-file-read-tokio-2.0.0-1.el10_2
  • rust-reqsign-core-2.0.0-1.el10_2

Removed build(s):

  • rust-reqsign-0.17.0-1.el10_2
  • rust-reqsign-aws-v4-1.0.0-1.el10_2
  • rust-reqsign-command-execute-tokio-1.0.0-1.el10_2
  • rust-reqsign-core-1.0.0-1.el10_2
  • rust-reqsign-file-read-tokio-1.0.0-1.el10_2
  • rust-reqsign-http-send-reqwest-1.0.0-1.el10_2
  • uv-0.8.24-3.el10_2

Karma has been reset.

7 months ago

This update has been submitted for testing by music.

7 months ago

music edited this update.

New build(s):

  • rust-backon-1.6.0-1.el10_2

Removed build(s):

  • rust-backon-1.5.2-2.el10_2

Karma has been reset.

7 months ago
User Icon music commented & provided feedback 7 months ago

With ruff and uv now both fully up to date, I’m going to try to stop editing this so that it can go stable.

This update has been pushed to testing.

7 months ago

This update has been submitted for stable by bodhi.

6 months ago

This update has been pushed to stable.

6 months ago

Please log in to add feedback.

BZ#2360699 ruff-0.14.1 is available
0
0
BZ#2402441 rust-reqsign-core-2.0.0 is available
0
0
BZ#2402442 rust-reqsign-command-execute-tokio-2.0.0 is available
0
0
BZ#2402443 rust-reqsign-http-send-reqwest-2.0.0 is available
0
0
BZ#2402923 uv-0.9.5 is available
0
0
BZ#2405468 CVE-2025-62518 rust-astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization [epel-10]
0
0
BZ#2405469 CVE-2025-62518 uv: astral-tokio-tar Vulnerable to PAX Header Desynchronization [epel-10]
0
0
BZ#2406135 ruff-0.14.2 is available
0
0

Automated Test Results