The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-fc26d3885c
unrealircd-6.0.2-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-5b9785fc78
cobbler-2.8.5-6.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-225a030e92
phoronix-test-suite-10.8.2-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-d5db33b633
seamonkey-2.53.11.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
baresip-2.0.1-1.el7
hwinfo-21.68-1.el7
libre-2.2.0-1.el7
librem-2.0.0-2.el7
netatalk-3.1.13-1.el7
openssl11-1.1.1k-3.el7
remmina-1.4.25-2.el7
Details about builds:
================================================================================
baresip-2.0.1-1.el7 (FEDORA-EPEL-2022-ca37c9f71c)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.1-1
- Upgrade to 2.0.1 (#2068919)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
--------------------------------------------------------------------------------
================================================================================
hwinfo-21.68-1.el7 (FEDORA-EPEL-2022-bfec88283d)
Hardware information tool
--------------------------------------------------------------------------------
Update Information:
Update to 21.68
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 23 2022 Andrey Ponomarenko <andrewponomarenko(a)yandex.ru> - 21.68-1
- Update to 21.68
--------------------------------------------------------------------------------
================================================================================
libre-2.2.0-1.el7 (FEDORA-EPEL-2022-ca37c9f71c)
Library for real-time communications and SIP stack
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.2.0-1
- Upgrade to 2.2.0 (#2069304)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
--------------------------------------------------------------------------------
================================================================================
librem-2.0.0-2.el7 (FEDORA-EPEL-2022-ca37c9f71c)
Library for real-time audio and video processing
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.0-2
- Rebuilt for libre 2.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
--------------------------------------------------------------------------------
================================================================================
netatalk-3.1.13-1.el7 (FEDORA-EPEL-2022-711caa7d54)
Open Source Apple Filing Protocol(AFP) File Server
--------------------------------------------------------------------------------
Update Information:
3.1.13 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 22 2022 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.13-1
- 3.1.13 release
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 5:3.1.12-27
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5:3.1.12-25
- Perl 5.34 rebuild
* Wed May 19 2021 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 5:3.1.12-24
- Rewrite deprecated perl dependency (IO::Socket::INET6)
* Sat Mar 13 2021 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.12-23
- build against tracker3 on fedora
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 5:3.1.12-22
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Sep 29 2020 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 5:3.1.12-20
- Rebuilt for libevent 2.1.12
* Fri Aug 21 2020 Jeff Law <law(a)redhat.com> - 5:3.1.12-19
- Re-enable LTO
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jun 30 2020 Jeff Law <law(a)redhat.com> - 5:3.1.12-17
- Disable LTO
* Fri Jun 26 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 5:3.1.12-16
- Perl 5.32 re-rebuild of bootstrapped packages
* Mon Jun 22 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 5:3.1.12-15
- Perl 5.32 rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-14
- remove pam_console dependency RHBZ 1822216
- Exclude aarch64 and s390x on el8
https://pagure.io/epel/issue/87
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jan 22 2020 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.12-12
- BZ1793912 fix multiple definition of invalid_dircache_entries
--------------------------------------------------------------------------------
================================================================================
openssl11-1.1.1k-3.el7 (FEDORA-EPEL-2022-cf563ff92c)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
- backport from 1.1.1k-6: CVE-2022-0778 openssl: Infinite loop in
`BN_mod_sqrt()` reachable when parsing certificates. Resolves: rhbz#2067144
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 1.1.1k-3
- backport from 1.1.1k-6: CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable
when parsing certificates
Resolves: rhbz#2067144
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2062202 - CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable
when parsing certificates
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
--------------------------------------------------------------------------------
================================================================================
remmina-1.4.25-2.el7 (FEDORA-EPEL-2022-3079dfa5fb)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
Bugfix release. - Add patch: 0001_vnc_close_all_close_git_55e2324a.patch - Add
patch: 0002_rdp_possible_segv_git_3620efda.patch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.4.25-2
- Add patch: 0001_vnc_close_all_close_git_55e2324a.patch
- Add patch: 0002_rdp_possible_segv_git_3620efda.patch
--------------------------------------------------------------------------------