--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-a6cce4114c
2024-06-28 02:09:07.088417
--------------------------------------------------------------------------------
Name : munin
Product : Fedora EPEL 9
Version : 2.0.76
Release : 1.el9
URL : http://munin-monitoring.org/
Summary : Network-wide resource monitoring tool
Description :
Munin is a highly flexible and powerful solution used to create graphs of
virtually everything imaginable throughout your network, while still
maintaining a rattling ease of installation and configuration.
This package contains the grapher/gatherer. You will only need one instance of
it in your network. It will periodically poll all the nodes in your network
it's aware of for data, which it in turn will use to create graphs and HTML
pages, suitable for viewing with your graphical web browser of choice.
You must also install munin-nginx or munin-apache sub-package to generate
web graphs. See /usr/share/doc/munin-*/*.conf for example nginx/apache config
files and installation instructions.
--------------------------------------------------------------------------------
Update Information:
Upstream update to 2.0.76.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 19 2024 Kim B. Heino <b(a)bbbs.net> - 2.0.76-1
- Upgrade to 2.0.76
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.75-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.75-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update munin' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-1c3c1ec373
2024-06-28 02:09:07.088410
--------------------------------------------------------------------------------
Name : foomuuri
Product : Fedora EPEL 9
Version : 0.24
Release : 1.el9
URL : https://github.com/FoobarOy/foomuuri
Summary : Multizone bidirectional nftables firewall
Description :
Foomuuri is a firewall generator for nftables based on the concept of zones.
It is suitable for all systems from personal machines to corporate firewalls,
and supports advanced features such as a rich rule language, IPv4/IPv6 rule
splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulation for
NetworkManager's zone support.
--------------------------------------------------------------------------------
Update Information:
Upstream update to 0.24:
Remove start-or-good command line option. Add systemd
foomuuri-boot.service to implement same functionality safer.
Add block command line option to load "block all traffic" ruleset.
Add continue statement. Rule saddr 192.168.1.1 counter log continue
counts and logs traffic from 192.168.1.1 and continues to next rules.
Add time matcher to check hour, date and weekday.
Add mac_saddr and mac_daddr matchers to match MAC address. This works
only for incoming traffic.
Add ct_status matcher to match conntrack status, for example dnat or
snat.
Add cgroup matcher to match cgroup id or cgroupv2 name.
Add -conntrack flag to rule. This rule will be outputted before
conntrack. This can be used to count all specific traffic, or to accept
some traffic without adding it to conntrack (for example high load DNS
server).
Add redis, redis-sentinel, vnc, domain-quic (DoQ) and domain-tls
(DoT) macros to default services.
Matcher szone -public in any-localhost (or dzone in localhost-any)
section can be used to skip adding rule to public-localhost.
Allow using any command (curl example included) instead of fping in
network connectivity monitor.
Allow foomuuri { nft_bin nft --optimize } to specify options.
Fix: counter myname didn't work on prerouting section.
Fix: Restart network connectivity monitor command if it fails to start
or dies.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 19 2024 Kim B. Heino <b(a)bbbs.net> - 0.24-1
- Upgrade to 0.24
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update foomuuri' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-09c0e1499b
2024-06-28 02:09:07.088402
--------------------------------------------------------------------------------
Name : rust-cookie0.17
Product : Fedora EPEL 9
Version : 0.17.0
Release : 1.el9
URL : https://crates.io/crates/cookie
Summary : HTTP cookie parsing and cookie jar management
Description :
HTTP cookie parsing and cookie jar management. Supports signed and
private (encrypted, authenticated) jars.
--------------------------------------------------------------------------------
Update Information:
Update the cookie crate to version 0.18.1 and add a compat package for version
0.17.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 19 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.17.0-1
- Initial import (cookie 0.17 compat package)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-cookie0.17' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-09c0e1499b
2024-06-28 02:09:07.088402
--------------------------------------------------------------------------------
Name : rust-cookie
Product : Fedora EPEL 9
Version : 0.18.1
Release : 1.el9
URL : https://crates.io/crates/cookie
Summary : HTTP cookie parsing and cookie jar management
Description :
HTTP cookie parsing and cookie jar management. Supports signed and
private (encrypted, authenticated) jars.
--------------------------------------------------------------------------------
Update Information:
Update the cookie crate to version 0.18.1 and add a compat package for version
0.17.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 14 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.18.1-1
- Update to version 0.18.1; Fixes RHBZ#2129682
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rust-cookie' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-cc1890e0bb
2024-06-28 02:09:07.088393
--------------------------------------------------------------------------------
Name : radicale
Product : Fedora EPEL 9
Version : 3.2.2
Release : 2.el9
URL : https://radicale.org
Summary : A simple CalDAV (calendar) and CardDAV (contact) server
Description :
The Radicale Project is a CalDAV (calendar) and CardDAV (contact) server. It
aims to be a light solution, easy to use, easy to install, easy to configure.
As a consequence, it requires few software dependencies and is pre-configured
to work out-of-the-box.
The Radicale Project runs on most of the UNIX-like platforms (Linux, BSD,
MacOS X) and Windows. It is known to work with Evolution, Lightning, iPhone
and Android clients. It is free and open-source software, released under GPL
version 3.
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.2
Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec
file
Obsolete radicale-httpd by contrib config from upstream
Fix group+permissions of /etc/radicale/rights
Create an empty file /etc/radicale/users with proper permissions
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 19 2024 Peter Bieringer <pb(a)bieringer.de> - 3.2.2-2
- Update to 3.2.2
- Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec file
- Obsolete radicale-httpd by contrib config from upstream
- Fix group+permissions of /etc/radicale/rights
- Create an empty file /etc/radicale/users with proper permissions
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update radicale' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-29a1daae59
2024-06-28 02:09:07.088354
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora EPEL 9
Version : 2024.06.11.git0153b38
Release : 1.el9
URL : https://github.com/ytdl-org/youtube-dl/
Summary : A small command-line program to download online videos
Description :
Small command-line program to download videos from YouTube and other sites.
--------------------------------------------------------------------------------
Update Information:
Update to latest snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 19 2024 David Bold <davidsch(a)fedoraproject.org> - 2024.06.11.git0153b38-1
- Update to latest git snapshot 0153b38 from 2024.06.11
* Fri Jun 7 2024 Python Maint <python-maint(a)redhat.com> - 2023.08.04.git86e3cf5-3
- Rebuilt for Python 3.13
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2023.08.04.git86e3cf5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update youtube-dl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-fd3d67fe2b
2024-06-28 00:32:24.890302
--------------------------------------------------------------------------------
Name : libre
Product : Fedora EPEL 7
Version : 3.13.0
Release : 1.el7
URL : https://github.com/baresip/re
Summary : Generic library for real-time communications
Description :
Libre is a generic library for real-time communications with async I/O
support. Features are a SIP stack (RFC 3261), SDP, RTP and RTCP, SRTP and
SRTCP (Secure RTP), DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with
client/server, Websockets, Jitter buffer, async I/O (poll, epoll, select,
kqueue), UDP/TCP/TLS/DTLS transport, JSON parser and Real Time Messaging
Protocol (RTMP).
--------------------------------------------------------------------------------
Update Information:
Baresip v3.13.0 (2024-06-19)
ua: simplify sdp_connection()
call.c: allow INFO requests with no body
audio,stream: video only call if no common audio codecs
ua: avoid empty IP in SDP as local address
audio: fix setup of audio filters
event refactoring
audio: remove cast to integer of sampv
auresamp: correct sampv size for conversion to float
ausine: add float format support
auresamp: fix size of sampv if aufmt conversion needed
test: call - complete test for auconv
webrtc_aec: Add support for extended filter option
ci/sanitizers: use clang-17 and do not recover
debug_cmd: command aufileinfo return answer
gst: set ausrc_prm duration
aufile: ptime zero check for ausrc
ua,uag: support SUBSCRIBE only if handler is set
uag: add Allow header to 405 SUBSCRIBE response
mixausrc: fix downsampling
ci/coverage: increase min coverage
cmake/webrtc_aec: use PUBLIC stdc++ linking
call: capitals for SIP INFO dtmf
test: call - reset max_calls to default value
test/ua: disable dns cache for reg_dns tests
libre v3.13.0 (2024-06-19)
http/client: use dynamically sized buffers for PEM setters
tls: allow secure TLS renegotiation
tls: always enable USE_OPENSSL_SRTP
main: remove call to openssl init
sip/transp: Allow ACK w/o Max-Forwards header
net: remove NET_ADDRSTRLEN
ci/ios: increase min deployment target
tls/http: add certificate chain setters
sipsess/connect: set sess->established immediately on 200 receival
test/cmake: add crypt32 linking for WIN32
ci/sanitizers: use clang-17
ci/sanitizer: add undefined behavior sanitizer
sip: verify call-id, to-tag, cseq of INVITE response
ci: remove one unneeded directory change
test: change GENERATOR_SSRC from define to type
tls: refactoring SNI ctx usage for libressl support
test: add test_rtcp_loop()
ci/coverage: increase min coverage
ci/coverage: use json summary and upload html details
sip: add host param to sip_send_conn
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 27 2024 Robert Scheck <robert(a)fedoraproject.org> 3.13.0-1
- Upgrade to 3.13.0 (#2293041)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2293041 - libre-3.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2293041
[ 2 ] Bug #2293512 - baresip-3.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2293512
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libre' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-fd3d67fe2b
2024-06-28 00:32:24.890302
--------------------------------------------------------------------------------
Name : baresip
Product : Fedora EPEL 7
Version : 3.13.0
Release : 1.el7
URL : https://github.com/baresip/baresip
Summary : Modular SIP user-agent with audio and video support
Description :
A modular SIP user-agent with support for audio and video, and many IETF
standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and
IPv6.
Additional modules provide support for audio codecs like Codec2, G.711,
G.722, G.726, GSM, L16, MPA and Opus, audio drivers like ALSA, GStreamer,
JACK Audio Connection Kit, Portaudio, and PulseAudio, video codecs like
AV1, VP8 or VP9, video sources like Video4Linux, video outputs like SDL2
or X11, NAT traversal via STUN, TURN, ICE, and NAT-PMP, media encryption
via TLS, SRTP or DTLS-SRTP, management features like embedded web-server
with HTTP interface, command-line console and interface, and MQTT.
--------------------------------------------------------------------------------
Update Information:
Baresip v3.13.0 (2024-06-19)
ua: simplify sdp_connection()
call.c: allow INFO requests with no body
audio,stream: video only call if no common audio codecs
ua: avoid empty IP in SDP as local address
audio: fix setup of audio filters
event refactoring
audio: remove cast to integer of sampv
auresamp: correct sampv size for conversion to float
ausine: add float format support
auresamp: fix size of sampv if aufmt conversion needed
test: call - complete test for auconv
webrtc_aec: Add support for extended filter option
ci/sanitizers: use clang-17 and do not recover
debug_cmd: command aufileinfo return answer
gst: set ausrc_prm duration
aufile: ptime zero check for ausrc
ua,uag: support SUBSCRIBE only if handler is set
uag: add Allow header to 405 SUBSCRIBE response
mixausrc: fix downsampling
ci/coverage: increase min coverage
cmake/webrtc_aec: use PUBLIC stdc++ linking
call: capitals for SIP INFO dtmf
test: call - reset max_calls to default value
test/ua: disable dns cache for reg_dns tests
libre v3.13.0 (2024-06-19)
http/client: use dynamically sized buffers for PEM setters
tls: allow secure TLS renegotiation
tls: always enable USE_OPENSSL_SRTP
main: remove call to openssl init
sip/transp: Allow ACK w/o Max-Forwards header
net: remove NET_ADDRSTRLEN
ci/ios: increase min deployment target
tls/http: add certificate chain setters
sipsess/connect: set sess->established immediately on 200 receival
test/cmake: add crypt32 linking for WIN32
ci/sanitizers: use clang-17
ci/sanitizer: add undefined behavior sanitizer
sip: verify call-id, to-tag, cseq of INVITE response
ci: remove one unneeded directory change
test: change GENERATOR_SSRC from define to type
tls: refactoring SNI ctx usage for libressl support
test: add test_rtcp_loop()
ci/coverage: increase min coverage
ci/coverage: use json summary and upload html details
sip: add host param to sip_send_conn
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 28 2024 Robert Scheck <robert(a)fedoraproject.org> 3.13.0-1
- Upgrade to 3.13.0 (#2293512)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2293041 - libre-3.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2293041
[ 2 ] Bug #2293512 - baresip-3.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2293512
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update baresip' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-76d2223303
2024-06-28 00:32:24.890263
--------------------------------------------------------------------------------
Name : openbgpd
Product : Fedora EPEL 7
Version : 8.5
Release : 1.el7
URL : https://www.openbgpd.org/
Summary : OpenBGPD Routing Daemon
Description :
OpenBGPD is a free implementation of the Border Gateway Protocol (BGP),
Version 4. It allows ordinary machines to be used as routers exchanging
routes with other systems speaking the BGP protocol.
Note: Because of the requirement for libmnl >= 1.0.4, which is not in
RHEL/CentOS 7, this package does not have the means to influence kernel
routing tables. It is only suitable for route servers/collectors.
--------------------------------------------------------------------------------
Update Information:
OpenBGPD 8.5
Include OpenBSD 7.5 errata 004: Repair a withdraw desyncronization problem in
bgpd(8). Affected are OpenBGPD 8.2, 8.3 and 8.4.
Fix Linux TCP MD5 autoconf detection and improve the code to work in all cases.
Double peer description length to 64 characters.
Improve handling of bgpd AFI IPv4 sessions over IPv6 only links.
Sessions over IPv6 link-local addresses are now always considered to be
connected.
Allow operators to enforce the presence of certain capabilities.
Improve capability negotiation and remove announce capabilities. The announce
capabilities [yes|no] neighbor config option needs to be removed from
configuration files. Instead individual capabilities need to be disabled.
Improve negotiation of the multi-protocol capability and the fallback to IPv4
only mode.
Mark RTR and IPv6 BGP packets with DSCP CS6 (network control).
Increase RTR PDU limit to 48k and limit number of SPAS to 10'000.
Convert the remaining session engine parsers to the new ibuf API.
Various changes to autoconf and portable headers for NetBSD support.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 28 2024 Robert Scheck <robert(a)fedoraproject.org> 8.5-1
- Upgrade to 8.5 (#2294650)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2294650 - openbgpd-8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2294650
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update openbgpd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2024-1682369c61
2024-06-28 00:32:24.890257
--------------------------------------------------------------------------------
Name : python-waitress
Product : Fedora EPEL 7
Version : 1.4.3
Release : 2.el7
URL : https://github.com/Pylons/waitress
Summary : Waitress WSGI server
Description :
Waitress is meant to be a production-quality pure-Python WSGI server with
very acceptable performance. It has no dependencies except ones which live
in the Python standard library. It runs on CPython on Unix and Windows under
Python 2.6+ and Python 3.3+. It is also known to run on PyPy 1.6.0+ on UNIX.
It supports HTTP/1.0 and HTTP/1.1.
--------------------------------------------------------------------------------
Update Information:
Backport upstream fix for CVE-2022-24761.
https://github.com/advisories/GHSA-4f7p-27jc-3c36
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 26 2024 Carl George <carlwgeorge(a)fedoraproject.org> - 1.4.3-2
- Backport upstream fix for CVE-2022-24761 rhbz#2065791
- Run test suite
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2065791 - CVE-2022-24761 python-waitress: waitress: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2065791
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-waitress' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------