The following Fedora EPEL 9 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-862672cc3e
perl-Email-MIME-1.954-1.el9
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-38d250bafc
chromium-125.0.6422.60-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
baresip-3.12.0-1.el9
dia-gnomeDIAicons-0.1-24.el9
git-crypt-0.7.0-1.el9
hardinfo2-2.1.2-1.el9
icewm-3.5.0-3.el9
libre-3.12.0-1.el9
mlt-7.24.0-1.el9
packit-0.97.1-1.el9
perl-DBD-Firebird-1.37-1.el9
rust-byteorder-lite-0.1.0-1.el9
rust-camellia-0.1.0-1.el9
rust-cast5-0.11.1-1.el9
swaks-20240103.0-1.el9
Details about builds:
================================================================================
baresip-3.12.0-1.el9 (FEDORA-EPEL-2024-4bd8d142ee)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
Baresip v3.12.0 (2024-05-15)
video: stream enable/disable for re-INVITE/UPDATE
srtp: allow rekeying of running streams
audio: remove stop_aur()
HAVE_INET6 is always defined
audio: respect SDP media disabled flag
test: fix test_message()
avformat: do not use deprecated avcodec_close()
ua: enforce magic cookie in Via branch
uag: fix initializer
misc: cppcheck fixes
readme: fix lint status badge
video: enable/disable stream at common point
srtp: deactivate test_call_srtp_tx_rekey
g722,g726: use SYSTEM spandsp include
srtp: lock possible re-keying against usage in receive handler
mc: move multicast to baresip-apps
call,audio: remove audio start/stop redundancy
aufile: use correct audio format S16LE for aubuf frames
ci: bump pr dependency action
docs,core: remove reference to multicast
bump version
libre v3.12.0 (2024-05-15)
cmake: fix static library build (vcpkg)
h264: add STAP-A decode with long startcodes
sess,request: deref request and ctrans immediately
ua: enforce magic cookie in Via branch
sip/auth: SHA-256 digest algorithm support
ci/coverage: increase min. coverage
rtp: fix correct logging text
types: fix RE_ARG_SIZE gcc bit fields
fmt: use re_fprintf instead of DEBUG_WARNING to avoid deadlock
dbg: remove support for logfile
test: add usage of rtcp_msg_print()
http/client: add setter to disable tls server verification
dbg: mutex should be unlocked while calling print handler
Update README.md
http/request: reset body mbuf pos on re-sending
bump version
cmake: bump soversion
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Robert Scheck <robert(a)fedoraproject.org> 3.12.0-1
- Upgrade to 3.12.0
--------------------------------------------------------------------------------
================================================================================
dia-gnomeDIAicons-0.1-24.el9 (FEDORA-EPEL-2024-90ffde629f)
GNOME-based network icon shapes for the Dia diagram editor
--------------------------------------------------------------------------------
Update Information:
Network icon shapes, based on GNOME Gorilla's theme, for the Dia diagram editor.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
git-crypt-0.7.0-1.el9 (FEDORA-EPEL-2024-8b07b95641)
Transparent file encryption in git
--------------------------------------------------------------------------------
Update Information:
Build version 0.7.0 for EPEL.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 17 2024 Jan Stan��k <jstanek(a)redhat.com> - 0.7.0-1
- Update to version 0.7.0
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069050 - Please branch and build git-crypt in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2069050
[ 2 ] Bug #2077762 - git-crypt-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077762
--------------------------------------------------------------------------------
================================================================================
hardinfo2-2.1.2-1.el9 (FEDORA-EPEL-2024-712e5f6017)
System Information and Benchmark for Linux Systems
--------------------------------------------------------------------------------
Update Information:
Automatic update for hardinfo2-2.1.2-1.el9.
Changelog for hardinfo2
* Mon May 20 2024 topazus <topazus(a)outlook.com> - 2.1.2-1
- 2.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 topazus <topazus(a)outlook.com> - 2.1.2-1
- 2.1.2
--------------------------------------------------------------------------------
================================================================================
icewm-3.5.0-3.el9 (FEDORA-EPEL-2024-64b555ddd7)
Window manager designed for speed, usability, and consistency
--------------------------------------------------------------------------------
Update Information:
Automatic update for icewm-3.5.0-3.el9.
Changelog for icewm
* Mon May 20 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.5.0-3
- docs: Add README.Fedora.md
* Mon May 20 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.5.0-2
- Spec: Chores
* Mon May 20 2024 Packit <hello(a)packit.dev> - 3.5.0-1
- Update to 3.5.0 upstream release
- Resolves: rhbz#2282009
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.5.0-3
- docs: Add README.Fedora.md
* Mon May 20 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.5.0-2
- Spec: Chores
* Mon May 20 2024 Packit <hello(a)packit.dev> - 3.5.0-1
- Update to 3.5.0 upstream release
- Resolves: rhbz#2282009
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2282009 - icewm-3.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2282009
--------------------------------------------------------------------------------
================================================================================
libre-3.12.0-1.el9 (FEDORA-EPEL-2024-4bd8d142ee)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
Baresip v3.12.0 (2024-05-15)
video: stream enable/disable for re-INVITE/UPDATE
srtp: allow rekeying of running streams
audio: remove stop_aur()
HAVE_INET6 is always defined
audio: respect SDP media disabled flag
test: fix test_message()
avformat: do not use deprecated avcodec_close()
ua: enforce magic cookie in Via branch
uag: fix initializer
misc: cppcheck fixes
readme: fix lint status badge
video: enable/disable stream at common point
srtp: deactivate test_call_srtp_tx_rekey
g722,g726: use SYSTEM spandsp include
srtp: lock possible re-keying against usage in receive handler
mc: move multicast to baresip-apps
call,audio: remove audio start/stop redundancy
aufile: use correct audio format S16LE for aubuf frames
ci: bump pr dependency action
docs,core: remove reference to multicast
bump version
libre v3.12.0 (2024-05-15)
cmake: fix static library build (vcpkg)
h264: add STAP-A decode with long startcodes
sess,request: deref request and ctrans immediately
ua: enforce magic cookie in Via branch
sip/auth: SHA-256 digest algorithm support
ci/coverage: increase min. coverage
rtp: fix correct logging text
types: fix RE_ARG_SIZE gcc bit fields
fmt: use re_fprintf instead of DEBUG_WARNING to avoid deadlock
dbg: remove support for logfile
test: add usage of rtcp_msg_print()
http/client: add setter to disable tls server verification
dbg: mutex should be unlocked while calling print handler
Update README.md
http/request: reset body mbuf pos on re-sending
bump version
cmake: bump soversion
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Robert Scheck <robert(a)fedoraproject.org> 3.12.0-1
- Upgrade to 3.12.0
--------------------------------------------------------------------------------
================================================================================
mlt-7.24.0-1.el9 (FEDORA-EPEL-2024-2884f20856)
Toolkit for broadcasters, video editors, media players, transcoders
--------------------------------------------------------------------------------
Update Information:
Update mlt to 7.24.0 (#2277642)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 19 2024 S��rgio Basto <sergio(a)serjux.com> - 7.24.0-1
- Update mlt to 7.24.0 (#2277642)
* Fri Apr 12 2024 Yaakov Selkowitz <yselkowi(a)redhat.com> - 7.22.0-7
- Enable both Qt5 and Qt6 in separate subpackages
* Fri Apr 12 2024 Remi Collet <remi(a)remirepo.net> - 7.22.0-6
- disable PHP extension on 32-bit
https://fedoraproject.org/wiki/Changes/php_no_32_bit
* Fri Mar 22 2024 S��rgio Basto <sergio(a)serjux.com> - 7.22.0-5
- Remove workaround
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.22.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Workaround
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113205
- Rebuild for opencv 4.9.0
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.22.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 1 2024 Marie Loise Nolden <loise(a)kde.org> - 7.22.0-2
- use Qt6 instead of Qt5, otherwise kdenlive won't work with Qt6/KF6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2277642 - mlt-7.24.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2277642
--------------------------------------------------------------------------------
================================================================================
packit-0.97.1-1.el9 (FEDORA-EPEL-2024-fb3e44edea)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
Automatic update for packit-0.97.1-1.el9.
Changelog for packit
* Fri May 17 2024 Packit <hello(a)packit.dev> - 0.97.1-1
- We have fixed the behaviour for `dist-git init` command when `upstream-git-
url` argument is specified.
- Resolves: rhbz#2278839
* Wed May 15 2024 Packit <hello(a)packit.dev> - 0.97.0-1
- Add a `scan-in-osh` subcommand in the CLI to perform a scan through
OpenScanHub. By default, it performs a full scan of the packages and a
differential scan can be performed through `--base-srpm` option. (#2301)
- When running `dist-git init` command from CLI, you can pass a command to
specify a git URL of the project. (#2308)
Automatic update for packit-0.97.0-1.el9.
Changelog for packit
* Wed May 15 2024 Packit <hello(a)packit.dev> - 0.97.0-1
- Add a `scan-in-osh` subcommand in the CLI to perform a scan through
OpenScanHub. By default, it performs a full scan of the packages and a
differential scan can be performed through `--base-srpm` option. (#2301)
- When running `dist-git init` command from CLI, you can pass a command to
specify a git URL of the project. (#2308)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 17 2024 Packit <hello(a)packit.dev> - 0.97.1-1
- We have fixed the behaviour for `dist-git init` command when `upstream-git-url` argument
is specified.
- Resolves: rhbz#2278839
* Wed May 15 2024 Packit <hello(a)packit.dev> - 0.97.0-1
- Add a `scan-in-osh` subcommand in the CLI to perform a scan through OpenScanHub. By
default, it performs a full scan of the packages and a differential scan can be performed
through `--base-srpm` option. (#2301)
- When running `dist-git init` command from CLI, you can pass a command to specify a git
URL of the project. (#2308)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2278839 - packit-0.97.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2278839
--------------------------------------------------------------------------------
================================================================================
perl-DBD-Firebird-1.37-1.el9 (FEDORA-EPEL-2024-1d3125c26b)
Firebird interface for perl
--------------------------------------------------------------------------------
Update Information:
DBD::Firebird 1.37
Fall back to sv_setiv when sv_setbool is not available
DBD::Firebird 1.36
Fix problems with Perl before 5.36 and Firebird before 3.0
DBD::Firebird 1.35
ib2sql_type: ignore nullability bit
Map Firebird's 64-bit integer type to SQL_BIGINT
Add support for Firebird's BOOLEAN data type
Fix a couple of compiler warnings
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Robert Scheck <robert(a)fedoraproject.org> 1.37-1
- Upgrade to 1.37 (#2281617)
* Mon May 20 2024 Robert Scheck <robert(a)fedoraproject.org> 1.36-1
- Upgrade to 1.36 (#2281509)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.34-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.34-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.34-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.34-7
- Perl 5.38 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2281617 - perl-DBD-Firebird-1.37 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2281617
--------------------------------------------------------------------------------
================================================================================
rust-byteorder-lite-0.1.0-1.el9 (FEDORA-EPEL-2024-086bdfa495)
Library for reading/writing numbers in big-endian and little-endian
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the byteorder-lite crate.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.0-1
- Initial import (#2281027)
--------------------------------------------------------------------------------
================================================================================
rust-camellia-0.1.0-1.el9 (FEDORA-EPEL-2024-ebb685bcb0)
Camellia block cipher
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the cast5 and camellia crates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.0-1
- Initial import (#2280325)
--------------------------------------------------------------------------------
================================================================================
rust-cast5-0.11.1-1.el9 (FEDORA-EPEL-2024-ebb685bcb0)
CAST5 block cipher
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the cast5 and camellia crates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.11.1-1
- Initial import (#2280326)
--------------------------------------------------------------------------------
================================================================================
swaks-20240103.0-1.el9 (FEDORA-EPEL-2024-1869588461)
Command-line SMTP transaction tester
--------------------------------------------------------------------------------
Update Information:
Swaks 20240103.0
New features
Added --cc and --bcc options
Numerous TLS debugging and verification improvements
Debug output contains whether a client cert was requested and whether one was
sent
Add new options --tls-verify-ca and --tls-verify-host to differentiate between
types of certificate verification (--tls-verify does both)
Add --tls-target option to allow setting of hostname to be used in hostname
verification; this is useful in some inet debugging situations and required to
do hostname verification with --socket or --pipe
Add --tls-chain
Add --tls-get-peer-chain option (analogous to --tls-get-peer-cert)
Certificate debug now includes all client and peer certs, it a chain was used
Certificate debug now includes notAfter, commonName, and subjectAltName
Notable changes
--output-file, --output-file-stderr, and --output-file-stdout now truncate the
specified file if it already exists
Documentation improvements
Extensive test harness improvements
Add new stop-point XCLIENT-HELO to address lack of specificity when mixing
XCLIENT usage with the HELO stop-point
Add new stop-point PROXY
Use IO::Socket::IP by default. Will still use IO::Socket::INET/INET6 to cover
transition, but this is deprecated and will be removed in the future
TLS session debug information is now printed even if we decide not to continue
the session (e.g. for failed verification)
Previously-deprecated functionality to allow some options to be either a
filename or a literal string has been removed; using the @ sigil is now the only
way to specify file contents
Previously-deprecated -g option removed
Notable bugs fixed
TLS certificate verification did not always work, it should now
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 15 2024 Jason Tibbitts <j(a)tib.bs> - 20240103.0-1
- Update to 20240103.0.
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> -
20201014.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed May 17 2023 Petr Salaba <psalaba(a)redhat.com> - 20201014.0-2
- Remove deprecated IO::Socket::INET6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2256696 - swaks-20240103.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2256696
--------------------------------------------------------------------------------