The following Fedora EPEL 8 Security updates need testing:
Age URL
44 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-89ad385971 chromium-103.0.5060.114-1.el8
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-00b4829e45 tcpreplay-4.4.2-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
baresip-2.7.0-1.el8
castxml-0.4.6-1.el8
dr_libs-0-0.18.20220410git15f37e3.el8
libre-2.7.0-1.el8
librem-2.7.0-1.el8
rubygem-rack-2.2.4-1.el8
Details about builds:
================================================================================
baresip-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference -
call: remember media dir for established state - avformat: fix ffmpeg
`channel_layout` deprecation - cmake: add multicast module - play: ring tone
fixes if `file_ausrc` is set - add peerconnection and mediatrack -
main,test: close re async before `tmr_debug` - http: new file for HTTP
functions - http: add `http_reply_json()` - play: `tmr_polling` has to check
if `ausrc` is used - cmake: use object instead of static for modules - [WIP]
import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix
modules install path and install share files - hook up webrtc to main cmake
file - avformat: check shared for both audio+video - cmake: add V4L2 module
- Omx remove - cmake: add directfb module - main,webrtc/main: add
`re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add
sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` -
ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface -
gzrtp: Call event hander when SAS needs to be verified - Generate also
`MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one
`MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net:
add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options`
and use re config - cmake/modules: build syslog only if available - cmake:
add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11
cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of
webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module -
call: do not set call state to answered, if session progress (PRACK) # librem
v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for
definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01)
- async: add `re_thread_async` - atomic: Add support for gcc `__sync`
intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings
- async: add guard - dns/client: add async `getaddrinfo` usage - async: make
work handler and callback optional - Add a state update action to the main
loop to unblock polling if another thread has affected the state - dns,net:
fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo`
duplicates - http/client: fix `dnsc_conf` initialization - tmr:
`tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with
URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move
definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add
pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of
`ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local
media format ids to match those in the offer - debian: fix prefix
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 1 2022 Robert Scheck <robert(a)fedoraproject.org> 2.7.0-1
- Upgrade to 2.7.0 (#2123475)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123475
[ 2 ] Bug #2123484 - librem-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123484
--------------------------------------------------------------------------------
================================================================================
castxml-0.4.6-1.el8 (FEDORA-EPEL-2022-dc77c422c8)
C-family abstract syntax tree XML output tool
--------------------------------------------------------------------------------
Update Information:
CastXML 0.4.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 1 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.4.6-1
- Update to version 0.4.6
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123195 - castxml-0.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123195
--------------------------------------------------------------------------------
================================================================================
dr_libs-0-0.18.20220410git15f37e3.el8 (FEDORA-EPEL-2022-dcdada1d9e)
Single-file audio decoding libraries for C/C++
--------------------------------------------------------------------------------
Update Information:
Fix SSE4.1 instructions generated on x86_64
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0-0.18
- Fix SSE4.1 instructions generated on x86_64
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0-0.17
- Update License field to SPDX
--------------------------------------------------------------------------------
================================================================================
libre-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc)
Library for real-time communications and SIP stack
--------------------------------------------------------------------------------
Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference -
call: remember media dir for established state - avformat: fix ffmpeg
`channel_layout` deprecation - cmake: add multicast module - play: ring tone
fixes if `file_ausrc` is set - add peerconnection and mediatrack -
main,test: close re async before `tmr_debug` - http: new file for HTTP
functions - http: add `http_reply_json()` - play: `tmr_polling` has to check
if `ausrc` is used - cmake: use object instead of static for modules - [WIP]
import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix
modules install path and install share files - hook up webrtc to main cmake
file - avformat: check shared for both audio+video - cmake: add V4L2 module
- Omx remove - cmake: add directfb module - main,webrtc/main: add
`re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add
sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` -
ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface -
gzrtp: Call event hander when SAS needs to be verified - Generate also
`MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one
`MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net:
add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options`
and use re config - cmake/modules: build syslog only if available - cmake:
add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11
cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of
webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module -
call: do not set call state to answered, if session progress (PRACK) # librem
v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for
definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01)
- async: add `re_thread_async` - atomic: Add support for gcc `__sync`
intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings
- async: add guard - dns/client: add async `getaddrinfo` usage - async: make
work handler and callback optional - Add a state update action to the main
loop to unblock polling if another thread has affected the state - dns,net:
fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo`
duplicates - http/client: fix `dnsc_conf` initialization - tmr:
`tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with
URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move
definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add
pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of
`ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local
media format ids to match those in the offer - debian: fix prefix
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 1 2022 Robert Scheck <robert(a)fedoraproject.org> 2.7.0-1
- Upgrade to 2.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123475
[ 2 ] Bug #2123484 - librem-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123484
--------------------------------------------------------------------------------
================================================================================
librem-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc)
Library for real-time audio and video processing
--------------------------------------------------------------------------------
Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference -
call: remember media dir for established state - avformat: fix ffmpeg
`channel_layout` deprecation - cmake: add multicast module - play: ring tone
fixes if `file_ausrc` is set - add peerconnection and mediatrack -
main,test: close re async before `tmr_debug` - http: new file for HTTP
functions - http: add `http_reply_json()` - play: `tmr_polling` has to check
if `ausrc` is used - cmake: use object instead of static for modules - [WIP]
import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix
modules install path and install share files - hook up webrtc to main cmake
file - avformat: check shared for both audio+video - cmake: add V4L2 module
- Omx remove - cmake: add directfb module - main,webrtc/main: add
`re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add
sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` -
ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface -
gzrtp: Call event hander when SAS needs to be verified - Generate also
`MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one
`MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net:
add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options`
and use re config - cmake/modules: build syslog only if available - cmake:
add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11
cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of
webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module -
call: do not set call state to answered, if session progress (PRACK) # librem
v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for
definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01)
- async: add `re_thread_async` - atomic: Add support for gcc `__sync`
intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings
- async: add guard - dns/client: add async `getaddrinfo` usage - async: make
work handler and callback optional - Add a state update action to the main
loop to unblock polling if another thread has affected the state - dns,net:
fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo`
duplicates - http/client: fix `dnsc_conf` initialization - tmr:
`tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with
URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move
definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add
pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of
`ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local
media format ids to match those in the offer - debian: fix prefix
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 1 2022 Robert Scheck <robert(a)fedoraproject.org> 2.7.0-1
- Upgrade to 2.7.0 (#2123484)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123475
[ 2 ] Bug #2123484 - librem-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123484
--------------------------------------------------------------------------------
================================================================================
rubygem-rack-2.2.4-1.el8 (FEDORA-EPEL-2022-83ed996f1e)
a modular Ruby webserver interface
--------------------------------------------------------------------------------
Update Information:
Update to Rack 2.2.4 - Resolves: rhbz#2099525 - Resolves: CVE-2022-30123
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Troy Dawson <tdawson(a)redhat.com> - 2.2.4-1
- Update to Rack 2.2.4
Resolves: rhbz#2099525
Resolves: CVE-2022-30123
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099525 - CVE-2022-30123 rubygem-rack: crafted requests can cause shell escape sequences [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2099525
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-cf9b662b60 tcpreplay-4.4.2-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
python-apprise-1.0.0-1.el7
python-colcon-cmake-0.2.27-1.el7
python-colcon-notification-0.2.14-1.el7
Details about builds:
================================================================================
python-apprise-1.0.0-1.el7 (FEDORA-EPEL-2022-0d904edce5)
A simple wrapper to many popular notification services used today
--------------------------------------------------------------------------------
Update Information:
Updated to v1.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 6 2022 Chris Caron <lead2gold(a)gmail.com> - 1.0.0-1
- Updated to v1.0.0
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jun 15 2022 Python Maint <python-maint(a)redhat.com> - 0.9.9-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.27-1.el7 (FEDORA-EPEL-2022-84eca73e4f)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to `colcon-cmake` 0.2.27
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Scott K Logan <logans(a)cottsay.net> - 0.2.27-1
- Update to 0.2.27 (rhbz#2123074)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123074 - python-colcon-cmake-0.2.27 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123074
--------------------------------------------------------------------------------
================================================================================
python-colcon-notification-0.2.14-1.el7 (FEDORA-EPEL-2022-a8ad352036)
Extension for colcon to provide status notifications
--------------------------------------------------------------------------------
Update Information:
Update to `colcon-notification` 0.2.14
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Scott K Logan <logans(a)cottsay.net> - 0.2.14-1
- Update to 0.2.14 (rhbz#2123069)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123069 - python-colcon-notification-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123069
--------------------------------------------------------------------------------