The following Fedora EPEL 8 Security updates need testing: Age URL 44 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-89ad385971 chromium-103.0.5060.114-1.el8 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-00b4829e45 tcpreplay-4.4.2-1.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

baresip-2.7.0-1.el8 castxml-0.4.6-1.el8 dr_libs-0-0.18.20220410git15f37e3.el8 libre-2.7.0-1.el8 librem-2.7.0-1.el8 rubygem-rack-2.2.4-1.el8

Details about builds:

================================================================================ baresip-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:

# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:

* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 (#2123475) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------

================================================================================ castxml-0.4.6-1.el8 (FEDORA-EPEL-2022-dc77c422c8) C-family abstract syntax tree XML output tool -------------------------------------------------------------------------------- Update Information:

CastXML 0.4.6 -------------------------------------------------------------------------------- ChangeLog:

* Thu Sep 1 2022 Mattias Ellert mattias.ellert@physics.uu.se - 0.4.6-1 - Update to version 0.4.6 * Wed Jul 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0.4.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2123195 - castxml-0.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123195 --------------------------------------------------------------------------------

================================================================================ dr_libs-0-0.18.20220410git15f37e3.el8 (FEDORA-EPEL-2022-dcdada1d9e) Single-file audio decoding libraries for C/C++ -------------------------------------------------------------------------------- Update Information:

Fix SSE4.1 instructions generated on x86_64 -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 31 2022 Benjamin A. Beasley code@musicinmybrain.net 0-0.18 - Fix SSE4.1 instructions generated on x86_64 * Wed Aug 31 2022 Benjamin A. Beasley code@musicinmybrain.net 0-0.17 - Update License field to SPDX --------------------------------------------------------------------------------

================================================================================ libre-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc) Library for real-time communications and SIP stack -------------------------------------------------------------------------------- Update Information:

# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:

* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------

================================================================================ librem-2.7.0-1.el8 (FEDORA-EPEL-2022-929440e4dc) Library for real-time audio and video processing -------------------------------------------------------------------------------- Update Information:

# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:

* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 (#2123484) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------

================================================================================ rubygem-rack-2.2.4-1.el8 (FEDORA-EPEL-2022-83ed996f1e) a modular Ruby webserver interface -------------------------------------------------------------------------------- Update Information:

Update to Rack 2.2.4 - Resolves: rhbz#2099525 - Resolves: CVE-2022-30123 -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 31 2022 Troy Dawson tdawson@redhat.com - 2.2.4-1 - Update to Rack 2.2.4 Resolves: rhbz#2099525 Resolves: CVE-2022-30123 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2099525 - CVE-2022-30123 rubygem-rack: crafted requests can cause shell escape sequences [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2099525 --------------------------------------------------------------------------------