The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-1f39c6fc05 uriparser-0.9.8-2.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-811cbc0ed6 suricata-7.0.10-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9b4f4b88ff exim-4.98.2-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-7f793012aa yarnpkg-1.22.22-7.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
baresip-3.21.0-1.el8 c-icap-0.6.3-2.el8 libre-3.21.0-1.el8 perl-Data-Entropy-0.008-1.el8
Details about builds:
================================================================================ baresip-3.21.0-1.el8 (FEDORA-EPEL-2025-9629284265) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:
Baresip v3.21.0 (2025-03-26) call: use call_find_replaces for finding call to replace contact commands menu: return on UA_EVENT_SIPSESS_CONN recalculate jbuf number of frame after reuse packet pulse: add NULL checks for paconn_get menu: remove CMD_PRM flag from hangup command portaudio: fixed inconsistency between the device specification in audio_source and via /ausrc aufile: return 0 instead of err aureceiver: cleanup rtpext_find is moved to re stream,rtprecv: add rtprecv_set_srate call: fix cppcheck warning bump version to 3.21.0 libre v3.21.0 (2025-03-26) fmt/pl: add pl_strncasecmp and tests ci: upgrade run-on-arch-action to fix random segfaults test: add testing of RTCP FIR-RFC5104 rtpext: add rtpext_find rtp: add rtp_ prefix to member functions rtp/rtcp: add rtcp_send_twcc and rtcp_rtpfb_twcc_encode list: optimize list_count bump version to 3.21.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 30 2025 Robert Scheck robert@fedoraproject.org 3.21.0-1 - Upgrade to 3.21.0 (#2355005) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2355005 - baresip-3.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2355005 [ 2 ] Bug #2355014 - libre-3.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2355014 --------------------------------------------------------------------------------
================================================================================ c-icap-0.6.3-2.el8 (FEDORA-EPEL-2025-74c119d298) An implementation of an ICAP server -------------------------------------------------------------------------------- Update Information:
Upgraded to 0.6.3 release. -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 30 2025 Frank Crawford frank@crawford.emu.id.au - 0.6.3-2 - Add sysusers.d config as a source file for F42 and above. * Mon Mar 24 2025 Frank Crawford frank@crawford.emu.id.au - 0.6.3-1 - Update to 0.6.3 release. * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl - 0.6.2-4 - Add sysusers.d config file to allow rpm to create users/groups automatically * Sun Jan 26 2025 Frank Crawford frank@crawford.emu.id.au - 0.6.2-4 - Patch for GCC15 issues - BZ2339953. - Remove mv due to unify /usr/bin and /usr/sbin * Thu Jan 16 2025 Fedora Release Engineering releng@fedoraproject.org - 0.6.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Wed Jul 17 2024 Fedora Release Engineering releng@fedoraproject.org - 0.6.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libre-3.21.0-1.el8 (FEDORA-EPEL-2025-9629284265) Generic library for real-time communications -------------------------------------------------------------------------------- Update Information:
Baresip v3.21.0 (2025-03-26) call: use call_find_replaces for finding call to replace contact commands menu: return on UA_EVENT_SIPSESS_CONN recalculate jbuf number of frame after reuse packet pulse: add NULL checks for paconn_get menu: remove CMD_PRM flag from hangup command portaudio: fixed inconsistency between the device specification in audio_source and via /ausrc aufile: return 0 instead of err aureceiver: cleanup rtpext_find is moved to re stream,rtprecv: add rtprecv_set_srate call: fix cppcheck warning bump version to 3.21.0 libre v3.21.0 (2025-03-26) fmt/pl: add pl_strncasecmp and tests ci: upgrade run-on-arch-action to fix random segfaults test: add testing of RTCP FIR-RFC5104 rtpext: add rtpext_find rtp: add rtp_ prefix to member functions rtp/rtcp: add rtcp_send_twcc and rtcp_rtpfb_twcc_encode list: optimize list_count bump version to 3.21.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 30 2025 Robert Scheck robert@fedoraproject.org 3.21.0-1 - Upgrade to 3.21.0 (#2355014) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2355005 - baresip-3.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2355005 [ 2 ] Bug #2355014 - libre-3.21.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2355014 --------------------------------------------------------------------------------
================================================================================ perl-Data-Entropy-0.008-1.el8 (FEDORA-EPEL-2025-ed542e7452) Entropy (randomness) management -------------------------------------------------------------------------------- Update Information:
Prior to version 0.008, the Perl module Data::Entropy relied on Perl's builtin rand function to choose an entropy source. Version 0.008 does away with this need. -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 30 2025 Emmanuel Seyman emmanuel@seyman.fr - 0.008-1 - Update to 0.008, with new maintainer (#2355612) * Sat Jan 18 2025 Fedora Release Engineering releng@fedoraproject.org - 0.007-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Aug 5 2024 Miroslav Suchý msuchy@redhat.com - 0.007-26 - convert license to SPDX * Thu Jul 18 2024 Fedora Release Engineering releng@fedoraproject.org - 0.007-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 0.007-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 0.007-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.007-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.007-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.007-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jun 1 2022 Jitka Plesnikova jplesnik@redhat.com - 0.007-19 - Perl 5.36 rebuild * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.007-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 0.007-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova jplesnik@redhat.com - 0.007-16 - Perl 5.34 rebuild * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.007-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering releng@fedoraproject.org - 0.007-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jun 23 2020 Jitka Plesnikova jplesnik@redhat.com - 0.007-13 - Perl 5.32 rebuild * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 0.007-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2355612 - perl-Data-Entropy-0.008 is available https://bugzilla.redhat.com/show_bug.cgi?id=2355612 [ 2 ] Bug #2355706 - CVE-2025-1860 perl-Data-Entropy: Data::Entropy for Perl uses insecure rand() function for cryptographic functions [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2355706 [ 3 ] Bug #2355707 - CVE-2025-1860 perl-Data-Entropy: Data::Entropy for Perl uses insecure rand() function for cryptographic functions [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2355707 [ 4 ] Bug #2355708 - CVE-2025-1860 perl-Data-Entropy: Data::Entropy for Perl uses insecure rand() function for cryptographic functions [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2355708 [ 5 ] Bug #2355709 - CVE-2025-1860 perl-Data-Entropy: Data::Entropy for Perl uses insecure rand() function for cryptographic functions [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2355709 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org