The following Fedora EPEL 7 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f0317a13d8 dropbear-2017.75-2.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

baresip-2.8.1-1.el7 jupp-41-1.el7 liblxi-1.17-1.el7 libopenmpt-0.6.6-1.el7 libre-2.8.0-1.el7 librem-2.8.0-1.el7 seamonkey-2.53.14-1.el7

Details about builds:

================================================================================ baresip-2.8.1-1.el7 (FEDORA-EPEL-2022-e595283702) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:

# Baresip 2.8.1 (2022-10-01) - `baresip.h`: bump `BARESIP_VERSION` - release v2.8.1 # Baresip 2.8.0 (2022-10-01) - opensles cmake - test/call: Add test_call_change_videodir - cmake: bump min version to 3.10 - zrtp: remove module, use gzrtp instead - Avoid gzrtp compile warnings - Update video in menu when `UA_EVENT_CALL_REMOTE_SDP` is recieved - http/https requests with large body - call: send reinvite after established handlers - refer out of dialog - remove unused functions in `baresip.h` - webrtc/demo: make https optional - Restored original working behavior in uag request_handler - uag: out-of-dialog REFER handler checks to.tag - Update media fixes - account: set 100rel default to no - avcodec: remove usage of old FFmpeg api (before 4.1.9) - rtp: Improve media synchronization - avformat: remove usage of old FFmpeg api - i2s: remove deprecated module - ci: migrate to CMake - menu: during early media switch on/off ringback - call, event, audio: send DTMF via hidden call - ua,reg,serreg: fix serial registration mode - CodeQL fixes - cmake: set `atomic-implicit-seq-cst` only for C language - cmake: define `-Wshorten-64-to-32 C only` - Cmake of webrtc_aec module plus remove of unused `aec.cpp` var - cmake: make include dir public - cmake: add `APP_MODULES` and `APP_MODULES_DIR` - Added cmake of gst module - Improved call closed message - gtk & menu: Fix potential memory leaks - call: allocate streams after peer_uri was set - dshow/cmake: fix stdc++ linking with MSVC - cmake: fix MSVC library output name - webrtc: add HAVE_GETOPT - config: ignore `dirent.h` on win32 - ua: do not duplicate request URI parameters - cmake: add netroam module - cmake: add portaudio module - cmake: add jack module - avcodec,config: add setting for keyframe interval - cmake: add sdl module - call: set peer URI early for incoming calls - cmake: Add options `-DDEFAULT_CAFILE="���"` and `-DDEFAULT_AUDIO_DEVICE="���"` - cmake: add gtk module - cmake: add opus_multistream module - cmake: synchronize behaviour of `-DSHARE_PATH="���"` with GNU `Makefile`s - cmake: synchronize behaviour of `-DMOD_PATH="���"` with GNU `Makefile`s - Move `docs/COPYING` to `LICENSE` and update content to match with re/rem - cmake: add ABI (soname) versioning - misc: Use example domains and IPs - cmake: symlink modules - cmake: add mpa module - release v2.8.0 # librem v2.8.0 (2022-10-01) - cmake: bump min. version 3.10 - auframe: `auframe_bytes_to_timestamp` use `uint64_t` - ci: migrate from make to CMake - cmake: install improvements - cmake: add static and shared targets - cmake: add win32 linklibs - debian: use `dh-cmake` - vid/frame: fix possbile overflow multiplication - make: add pkgconfig - cmake: fix shared API soversion (aligned with make) - release v2.8.0 # libre v2.8.0 (2022-10-01) - Update `README.md` - thread: fix win32 thrd_create return values - cmake: bump min. version 3.10 - cmake: add `USE_JBUF` option - http/https requests with large body - http/client: fix possible null pointer dereference - ci: test choco install no-progress - bitv: remove deprecated module - types,fmt: use `re_restrict` - refer out of dialog - Update bugfix - sip/auth: fix `mem_zalloc` return check - Update media fixes - dns, http: add `dnsc_getaddrinfo_enabled`, prevent reset of `getaddrinfo` enabled - rtp: Improve media synchronization - conf: check if returned size is larger than buffer - udp: remove very old iOS hack - tcp: remove very old iOS hack - Use CMake for debian packages - crc32: add re wrapper - ci: convert valgrind to cmake - ci: convert ssl build to cmake - ci: convert fedora to cmake - ci: convert coverage to cmake - ci: migrate to cmake - cmake: add `LINKLIBS` and make backtrace and zlib optional - C99 compatibility - pcp: fix cppcheck warning - fmt/print: fix cppcheck overflow warning - tls: remove SHA1 fingerprint (deprecated) - send DTMF via hidden call - sipreg: avoid sending un-REGISTER periodically - cmake,mk: bump the tentative next release with pre-release identifier - sipsess/update: Add Contact header to UPDATE - cmake: fix shared API soversion (aligned with make) - release v2.8.0 -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 2.8.1-1 - Upgrade to 2.8.1 (#2131453) * Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 2.8.0-1 - Upgrade to 2.8.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2131445 - librem-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131445 [ 2 ] Bug #2131446 - libre-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131446 [ 3 ] Bug #2131453 - baresip-2.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131453 --------------------------------------------------------------------------------

================================================================================ jupp-41-1.el7 (FEDORA-EPEL-2022-d6879e29a0) Compact and feature-rich WordStar-compatible editor -------------------------------------------------------------------------------- Update Information:

# jupp 41 - retroactively change jupp40 `NEWS` entry to reflect correct crash cause - `NUL`-initialise a number of allocated items - `jupprc`: fix bkwdc and fwrdc in the help screen - format messages with more consistency - gracefully handle `-mnew`/`-mold` argv macros quitting the editor - `autoconf` `--program- transform-name` was never supported - more retro compatibility���������HP-UX 9 (m68k) c89(1) - popen portability code: fix commands beginning with plus or dash - update to UCD 15.0.0 -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 41-1 - Upgrade to 41 (#2131420) * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 40-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 40-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 40-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 40-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2131420 - jupp-41 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131420 --------------------------------------------------------------------------------

================================================================================ liblxi-1.17-1.el7 (FEDORA-EPEL-2022-6450182a72) Library with simple API for communication with LXI devices -------------------------------------------------------------------------------- Update Information:

# liblxi v1.17 * vxi11: do not fail on zero length messages Zero length messages are valid replies in VXI-11. Do not return an error and prematurely exit. Reads should be repeated until EOI or an error is encountered. * Fixed missing VXI11 connect-abort multithreading synchronization * Fixed LXI connect error memory leak -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 1.17-1 - Upgrade to 1.17 (#2131162) * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2131162 - liblxi-1.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131162 --------------------------------------------------------------------------------

================================================================================ libopenmpt-0.6.6-1.el7 (FEDORA-EPEL-2022-de23d337b0) C/C++ library to decode tracker music module (MOD) files -------------------------------------------------------------------------------- Update Information:

# libopenmpt 0.6.6 (2022-09-25) - [Sec] Possible crash when playing manipulated IT / MPTM files with a T00 command. - MTM: In MultiTracker, setting speed and tempo are mutually exclusive commands. Still, some MultiTracker modules were made to be played with external players such as DMP, so they actually rely on ���standard��� speed / tempo behaviour. Decide which behaviour to use by checking of speed and tempo commands are found on the same row. - MTM: Ignore sample loops if the loop end is <= 2. - Echo DMO: Migrate left and right delay values in modules made with OpenMPT versions between 1.27.01.00 and 1.30.05.00 to the correct interpretation. - FLAC: Update to v1.4.1 (2022-09-22). -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Michael Schwendt mschwendt@fedoraproject.org - 0.6.6-1 - update to 0.6.6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2129642 - libopenmpt-0.6.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2129642 --------------------------------------------------------------------------------

================================================================================ libre-2.8.0-1.el7 (FEDORA-EPEL-2022-e595283702) Generic library for real-time communications -------------------------------------------------------------------------------- Update Information:

# Baresip 2.8.1 (2022-10-01) - `baresip.h`: bump `BARESIP_VERSION` - release v2.8.1 # Baresip 2.8.0 (2022-10-01) - opensles cmake - test/call: Add test_call_change_videodir - cmake: bump min version to 3.10 - zrtp: remove module, use gzrtp instead - Avoid gzrtp compile warnings - Update video in menu when `UA_EVENT_CALL_REMOTE_SDP` is recieved - http/https requests with large body - call: send reinvite after established handlers - refer out of dialog - remove unused functions in `baresip.h` - webrtc/demo: make https optional - Restored original working behavior in uag request_handler - uag: out-of-dialog REFER handler checks to.tag - Update media fixes - account: set 100rel default to no - avcodec: remove usage of old FFmpeg api (before 4.1.9) - rtp: Improve media synchronization - avformat: remove usage of old FFmpeg api - i2s: remove deprecated module - ci: migrate to CMake - menu: during early media switch on/off ringback - call, event, audio: send DTMF via hidden call - ua,reg,serreg: fix serial registration mode - CodeQL fixes - cmake: set `atomic-implicit-seq-cst` only for C language - cmake: define `-Wshorten-64-to-32 C only` - Cmake of webrtc_aec module plus remove of unused `aec.cpp` var - cmake: make include dir public - cmake: add `APP_MODULES` and `APP_MODULES_DIR` - Added cmake of gst module - Improved call closed message - gtk & menu: Fix potential memory leaks - call: allocate streams after peer_uri was set - dshow/cmake: fix stdc++ linking with MSVC - cmake: fix MSVC library output name - webrtc: add HAVE_GETOPT - config: ignore `dirent.h` on win32 - ua: do not duplicate request URI parameters - cmake: add netroam module - cmake: add portaudio module - cmake: add jack module - avcodec,config: add setting for keyframe interval - cmake: add sdl module - call: set peer URI early for incoming calls - cmake: Add options `-DDEFAULT_CAFILE="���"` and `-DDEFAULT_AUDIO_DEVICE="���"` - cmake: add gtk module - cmake: add opus_multistream module - cmake: synchronize behaviour of `-DSHARE_PATH="���"` with GNU `Makefile`s - cmake: synchronize behaviour of `-DMOD_PATH="���"` with GNU `Makefile`s - Move `docs/COPYING` to `LICENSE` and update content to match with re/rem - cmake: add ABI (soname) versioning - misc: Use example domains and IPs - cmake: symlink modules - cmake: add mpa module - release v2.8.0 # librem v2.8.0 (2022-10-01) - cmake: bump min. version 3.10 - auframe: `auframe_bytes_to_timestamp` use `uint64_t` - ci: migrate from make to CMake - cmake: install improvements - cmake: add static and shared targets - cmake: add win32 linklibs - debian: use `dh-cmake` - vid/frame: fix possbile overflow multiplication - make: add pkgconfig - cmake: fix shared API soversion (aligned with make) - release v2.8.0 # libre v2.8.0 (2022-10-01) - Update `README.md` - thread: fix win32 thrd_create return values - cmake: bump min. version 3.10 - cmake: add `USE_JBUF` option - http/https requests with large body - http/client: fix possible null pointer dereference - ci: test choco install no-progress - bitv: remove deprecated module - types,fmt: use `re_restrict` - refer out of dialog - Update bugfix - sip/auth: fix `mem_zalloc` return check - Update media fixes - dns, http: add `dnsc_getaddrinfo_enabled`, prevent reset of `getaddrinfo` enabled - rtp: Improve media synchronization - conf: check if returned size is larger than buffer - udp: remove very old iOS hack - tcp: remove very old iOS hack - Use CMake for debian packages - crc32: add re wrapper - ci: convert valgrind to cmake - ci: convert ssl build to cmake - ci: convert fedora to cmake - ci: convert coverage to cmake - ci: migrate to cmake - cmake: add `LINKLIBS` and make backtrace and zlib optional - C99 compatibility - pcp: fix cppcheck warning - fmt/print: fix cppcheck overflow warning - tls: remove SHA1 fingerprint (deprecated) - send DTMF via hidden call - sipreg: avoid sending un-REGISTER periodically - cmake,mk: bump the tentative next release with pre-release identifier - sipsess/update: Add Contact header to UPDATE - cmake: fix shared API soversion (aligned with make) - release v2.8.0 -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 2.8.0-1 - Upgrade to 2.8.0 (#2131446) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2131445 - librem-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131445 [ 2 ] Bug #2131446 - libre-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131446 [ 3 ] Bug #2131453 - baresip-2.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131453 --------------------------------------------------------------------------------

================================================================================ librem-2.8.0-1.el7 (FEDORA-EPEL-2022-e595283702) Audio and video processing media library -------------------------------------------------------------------------------- Update Information:

# Baresip 2.8.1 (2022-10-01) - `baresip.h`: bump `BARESIP_VERSION` - release v2.8.1 # Baresip 2.8.0 (2022-10-01) - opensles cmake - test/call: Add test_call_change_videodir - cmake: bump min version to 3.10 - zrtp: remove module, use gzrtp instead - Avoid gzrtp compile warnings - Update video in menu when `UA_EVENT_CALL_REMOTE_SDP` is recieved - http/https requests with large body - call: send reinvite after established handlers - refer out of dialog - remove unused functions in `baresip.h` - webrtc/demo: make https optional - Restored original working behavior in uag request_handler - uag: out-of-dialog REFER handler checks to.tag - Update media fixes - account: set 100rel default to no - avcodec: remove usage of old FFmpeg api (before 4.1.9) - rtp: Improve media synchronization - avformat: remove usage of old FFmpeg api - i2s: remove deprecated module - ci: migrate to CMake - menu: during early media switch on/off ringback - call, event, audio: send DTMF via hidden call - ua,reg,serreg: fix serial registration mode - CodeQL fixes - cmake: set `atomic-implicit-seq-cst` only for C language - cmake: define `-Wshorten-64-to-32 C only` - Cmake of webrtc_aec module plus remove of unused `aec.cpp` var - cmake: make include dir public - cmake: add `APP_MODULES` and `APP_MODULES_DIR` - Added cmake of gst module - Improved call closed message - gtk & menu: Fix potential memory leaks - call: allocate streams after peer_uri was set - dshow/cmake: fix stdc++ linking with MSVC - cmake: fix MSVC library output name - webrtc: add HAVE_GETOPT - config: ignore `dirent.h` on win32 - ua: do not duplicate request URI parameters - cmake: add netroam module - cmake: add portaudio module - cmake: add jack module - avcodec,config: add setting for keyframe interval - cmake: add sdl module - call: set peer URI early for incoming calls - cmake: Add options `-DDEFAULT_CAFILE="���"` and `-DDEFAULT_AUDIO_DEVICE="���"` - cmake: add gtk module - cmake: add opus_multistream module - cmake: synchronize behaviour of `-DSHARE_PATH="���"` with GNU `Makefile`s - cmake: synchronize behaviour of `-DMOD_PATH="���"` with GNU `Makefile`s - Move `docs/COPYING` to `LICENSE` and update content to match with re/rem - cmake: add ABI (soname) versioning - misc: Use example domains and IPs - cmake: symlink modules - cmake: add mpa module - release v2.8.0 # librem v2.8.0 (2022-10-01) - cmake: bump min. version 3.10 - auframe: `auframe_bytes_to_timestamp` use `uint64_t` - ci: migrate from make to CMake - cmake: install improvements - cmake: add static and shared targets - cmake: add win32 linklibs - debian: use `dh-cmake` - vid/frame: fix possbile overflow multiplication - make: add pkgconfig - cmake: fix shared API soversion (aligned with make) - release v2.8.0 # libre v2.8.0 (2022-10-01) - Update `README.md` - thread: fix win32 thrd_create return values - cmake: bump min. version 3.10 - cmake: add `USE_JBUF` option - http/https requests with large body - http/client: fix possible null pointer dereference - ci: test choco install no-progress - bitv: remove deprecated module - types,fmt: use `re_restrict` - refer out of dialog - Update bugfix - sip/auth: fix `mem_zalloc` return check - Update media fixes - dns, http: add `dnsc_getaddrinfo_enabled`, prevent reset of `getaddrinfo` enabled - rtp: Improve media synchronization - conf: check if returned size is larger than buffer - udp: remove very old iOS hack - tcp: remove very old iOS hack - Use CMake for debian packages - crc32: add re wrapper - ci: convert valgrind to cmake - ci: convert ssl build to cmake - ci: convert fedora to cmake - ci: convert coverage to cmake - ci: migrate to cmake - cmake: add `LINKLIBS` and make backtrace and zlib optional - C99 compatibility - pcp: fix cppcheck warning - fmt/print: fix cppcheck overflow warning - tls: remove SHA1 fingerprint (deprecated) - send DTMF via hidden call - sipreg: avoid sending un-REGISTER periodically - cmake,mk: bump the tentative next release with pre-release identifier - sipsess/update: Add Contact header to UPDATE - cmake: fix shared API soversion (aligned with make) - release v2.8.0 -------------------------------------------------------------------------------- ChangeLog:

* Sat Oct 1 2022 Robert Scheck robert@fedoraproject.org 2.8.0-1 - Upgrade to 2.8.0 (#2131445) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2131445 - librem-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131445 [ 2 ] Bug #2131446 - libre-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131446 [ 3 ] Bug #2131453 - baresip-2.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131453 --------------------------------------------------------------------------------

================================================================================ seamonkey-2.53.14-1.el7 (FEDORA-EPEL-2022-046974811b) Web browser, e-mail, news, IRC client, HTML editor -------------------------------------------------------------------------------- Update Information:

Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional distro-independed build available at https://buc.fedorapeople.org/seamonkey . So if you have friends who use other Linux distro, but that distro does not provide SeaMonkey yet, you can recommend it for them. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 27 2022 Dmitry Butskoy Dmitry@Butskoy.name 2.53.14-1 - update to 2.53.14 --------------------------------------------------------------------------------