The following Fedora EPEL 8 Security updates need testing:
Age URL
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-60f7d4fb00
chromium-131.0.6778.139-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d21693152c
retsnoop-0.10.1-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
baresip-3.18.0-1.el8
iml-1.0.5-37.el8
libcsv-3.0.3^20210820gitb1d5212-4.el8
libdxflib-3.26.4-9.el8
libpri-1.6.1-5.el8
libre-3.18.0-1.el8
trafficserver-9.2.7-1.el8
unrealircd-6.1.9.1-1.el8
Details about builds:
================================================================================
baresip-3.18.0-1.el8 (FEDORA-EPEL-2024-257c4ba432)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
Baresip v3.18.0 (2024-12-11)
cmake: fix clang 19 c23 extension warnings
cmake: install logo.png and *.wav files again
menu dnd event
ci/build: use GCC 14 on Ubuntu 24.04
ci/fedora: adapt workflow for RPM 4.20 in Fedora 41
test: disable test_call_webrtc in thread mode
debian: release v3.17.1
ci/mingw: use ubuntu-24.04 and bump openssl
menu: fix 302 Moved Temporarily redirect call
core: remove obsolete dnd flag
wasapi: Add WASAPI Audio module
menu: a config flag for SIP MESSAGE tone
mixausrc: fixing some type conversion warnings (MSVC)
winwave: remove (replaced by WASAPI module)
pulse: use default string as default device
mixausrc: reset mixstatus ptime if ptime changes
bevent: Add local URI information to events
ua: update doxygen comment
AAudio module
wasapi/src: increase record buffer size
ua,call: add API for rejecting incoming call
video: add picture update bool to vidpacket
video: allow RTCP FIR packets as payload-specific feedback
cmake: fix APPLE RPATH workaround
readme: sync with wiki
bump version to 3.18.0
libre v3.18.0 (2024-12-11)
odict: add odict_pl_add()
ci/build: remove Ubuntu 20.04, add 24.04, use GCC 14 on 24.04
test: vertical alignment of integration test names
sip: update doxygen comment
test/http: decrease test runs from 20 to 3 to decrease test time
sip/transp: allow requests w/o Max-Forwards header
test: remove unused fuzz mock
rtp: use rtp_pt_is_rtcp() for RTCP demultiplexing
aes: remove 192-bits CTR-mode (looks unused)
rtp: send all RTCP packets as compound packets
rtp/sess.c: lock rtcp_sess in rtcp_set_srate_tx to fix data race
Update Doxyfile
test: remove unused packet-filter
bump version to 3.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2024 Robert Scheck <[email protected]> 3.18.0-1
- Upgrade to 3.18.0 (#2331640)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331640 - baresip-3.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331640
[ 2 ] Bug #2331646 - libre-3.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331646
--------------------------------------------------------------------------------
================================================================================
iml-1.0.5-37.el8 (FEDORA-EPEL-2024-823bc9d77a)
Finds solutions to systems of linear equations over integers
--------------------------------------------------------------------------------
Update Information:
Update License to SPDX; minor packaging improvements
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 1.0.5-36
- Run autoreconf (re-generate configure) by default
* Thu Dec 12 2024 Benjamin A. Beasley <[email protected]> - 1.0.5-34
- Indicate dirs. in files list with trailing slashes
* Thu Dec 12 2024 Benjamin A. Beasley <[email protected]> - 1.0.5-33
- Update License to SPDX (BSD â BSD-3-Clause)
* Thu Dec 12 2024 Benjamin A. Beasley <[email protected]> - 1.0.5-32
- Per guidelines, package the actual license clarification email
--------------------------------------------------------------------------------
================================================================================
libcsv-3.0.3^20210820gitb1d5212-4.el8 (FEDORA-EPEL-2024-70288c1d2e)
Fast and flexible CSV library written in pure ANSI C
--------------------------------------------------------------------------------
Update Information:
Update the License to SPDX
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> -
3.0.3^20210820gitb1d5212-4
- Improve the comment documenting source licenses
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> -
3.0.3^20210820gitb1d5212-2
- Update License to SPDX
--------------------------------------------------------------------------------
================================================================================
libdxflib-3.26.4-9.el8 (FEDORA-EPEL-2024-f89cb4135b)
A C++ library for reading and writing DXF files
--------------------------------------------------------------------------------
Update Information:
Update License to SPDX
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 3.26.4-8
- Trivially simplify some files lists
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 3.26.4-7
- Indicate dirs. in files lists with trailing slashes
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 3.26.4-6
- Update License to SPDX
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 3.26.4-5
- Fix extra newline in description
--------------------------------------------------------------------------------
================================================================================
libpri-1.6.1-5.el8 (FEDORA-EPEL-2024-b2b12fc94c)
An implementation of Primary Rate ISDN
--------------------------------------------------------------------------------
Update Information:
Improved spec-file comments
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 1.6.1-3
- Clarify license âbreakdownâ in the spec file
* Fri Dec 13 2024 Benjamin A. Beasley <[email protected]> - 1.6.1-2
- Break a long line in the spec file
--------------------------------------------------------------------------------
================================================================================
libre-3.18.0-1.el8 (FEDORA-EPEL-2024-257c4ba432)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
Baresip v3.18.0 (2024-12-11)
cmake: fix clang 19 c23 extension warnings
cmake: install logo.png and *.wav files again
menu dnd event
ci/build: use GCC 14 on Ubuntu 24.04
ci/fedora: adapt workflow for RPM 4.20 in Fedora 41
test: disable test_call_webrtc in thread mode
debian: release v3.17.1
ci/mingw: use ubuntu-24.04 and bump openssl
menu: fix 302 Moved Temporarily redirect call
core: remove obsolete dnd flag
wasapi: Add WASAPI Audio module
menu: a config flag for SIP MESSAGE tone
mixausrc: fixing some type conversion warnings (MSVC)
winwave: remove (replaced by WASAPI module)
pulse: use default string as default device
mixausrc: reset mixstatus ptime if ptime changes
bevent: Add local URI information to events
ua: update doxygen comment
AAudio module
wasapi/src: increase record buffer size
ua,call: add API for rejecting incoming call
video: add picture update bool to vidpacket
video: allow RTCP FIR packets as payload-specific feedback
cmake: fix APPLE RPATH workaround
readme: sync with wiki
bump version to 3.18.0
libre v3.18.0 (2024-12-11)
odict: add odict_pl_add()
ci/build: remove Ubuntu 20.04, add 24.04, use GCC 14 on 24.04
test: vertical alignment of integration test names
sip: update doxygen comment
test/http: decrease test runs from 20 to 3 to decrease test time
sip/transp: allow requests w/o Max-Forwards header
test: remove unused fuzz mock
rtp: use rtp_pt_is_rtcp() for RTCP demultiplexing
aes: remove 192-bits CTR-mode (looks unused)
rtp: send all RTCP packets as compound packets
rtp/sess.c: lock rtcp_sess in rtcp_set_srate_tx to fix data race
Update Doxyfile
test: remove unused packet-filter
bump version to 3.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 12 2024 Robert Scheck <[email protected]> 3.18.0-1
- Upgrade to 3.18.0 (#2331646)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331640 - baresip-3.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331640
[ 2 ] Bug #2331646 - libre-3.18.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331646
--------------------------------------------------------------------------------
================================================================================
trafficserver-9.2.7-1.el8 (FEDORA-EPEL-2024-1bd1e3e59c)
Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 9.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Jered Floyd <[email protected]> 9.2.7-1
- Update to upstream 9.2.7
--------------------------------------------------------------------------------
================================================================================
unrealircd-6.1.9.1-1.el8 (FEDORA-EPEL-2024-8af7a8a948)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
UnrealIRCd 6.1.9.1
UnrealIRCd 6.1.9.1 fixes a bug in the TLS ciphers of 6.1.9.
UnrealIRCd 6.1.9
This 6.1.9 release fixes a number of bugs such as IPv6 hosts not resolving in
UnrealIRCd 6.1.8/6.1.8.1 and 100% CPU usage in some circumstances. It also
changes the SSL/TLS defaults to make things a little safer/better.
Enhancements
SSL/TLS:
Change default TLS ciphers to only allow AES in GCM mode and no longer in CBC
mode.
When using cURL for remote includes upstream now explicitly sets the minimum
required version to TLSv1.2 and sets upstream default ciphers and ciphersuites.
Note that by default in UnrealIRCd 6 the built-in (non-cURL) implementation is
used for remote includes, which already used these defaults. Also note that most
distros, like Ubuntu and Debian, already required TLSv1.2 or later effectively
in cURL.
Regarding default ecdh-curves: upstream now tries to set the curves list to
x25519:secp521r1:secp384r1:prime256v1 first, and if that fails then upstream
tries secp521r1:secp384r1:prime256v1. The former could fail due to SSL library
restrictions (old library or when in FIPS mode). Previously upstream was also
supposed to do it like that, but due to a bug always had X25519 turned off.
Fixes
IPv6 hosts not resolving in UnrealIRCd 6.1.8 and 6.1.8.1.
100% CPU usage in some (rare) circumstances. The IRCd is still fully responsive,
but of course high CPU usage is never good.
Crash in STATS S (IRCOp-only) if having vhosts with autologin (and no
vhost::login).
Changes
Added HELPOP EXTSERVERBANS to explain Extended server bans
Added new UnrealIRCd PGP release signing key
Developers and protocol
No changes, other than the SSL/TLS changes mentioned earlier.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 13 2024 Robert Scheck <[email protected]> 6.1.9.1-1
- Upgrade to 6.1.9.1 (#2327604)
* Tue Oct 22 2024 Richard W.M. Jones <[email protected]> - 6.1.8.1-2
- Rebuild for Jansson 2.14
(https://lists.fedoraproject.org/archives/list/[email protected]/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2327604 - unrealircd-6.1.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2327604
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
