Aggregator

• iperf3-3.22-2.fc43

Update to 3.22.

• iperf3-3.22-1.fc44

Update to 3.22.

• iperf3-3.22-1.fc45

Update 3.22. Fixes rhbz#2543656

• xiphos-4.3.2-5.fc43

Patch to fix CVE-2026-79079. Ensure that basic functionality works (installation of modules, browsing through modules, searching), and ensure that the PoC at https://gist.github.com/lggcs/c1f98ce55ced44472651b9590d9f199a does NOT work.

• xiphos-4.3.2-6.fc44

Patch to fix CVE-2026-79079. Ensure that basic functionality works (installation of modules, browsing through modules, searching), and ensure that the PoC at https://gist.github.com/lggcs/c1f98ce55ced44472651b9590d9f199a does NOT work.

• kernel-7.2.9-200.fc44

The 7.2.9 stable kernel update contains a number of important fixes across the tree

• kernel-7.2.9-300.fc45

The 7.2.9 stable kernel update contains a number of important fixes across the tree

• kernel-7.2.9-100.fc43

The 7.2.9 stable kernel update contains a number of important fixes across the tree

• baresip-4.12.0-1.el8
• libre-4.12.0-1.el8

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.el9
• libre-4.12.0-1.el9

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.el10_2
• libre-4.12.0-1.el10_2

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.el10_3
• libre-4.12.0-1.el10_3

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.el10_4
• libre-4.12.0-1.el10_4

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.fc43
• libre-4.12.0-1.fc43

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.fc44
• libre-4.12.0-1.fc44

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.fc45
• libre-4.12.0-1.fc45

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler

• baresip-4.12.0-1.fc46
• libre-4.12.0-1.fc46

• Feature: Send Custom X-Headers on Outbound Calls
• audio: thread-safe usage of psize and ptime in tx_thread()
• jbuf: safer jbuf_set_id
• audio: add mutex lock for aubuf statistics
• test: add testing of peerconn and vidfilt
• audio: fix format name in ausrc format mismatch warning
• ci: remove brew fdk-aac package (discontinued)
• test: fix peerconn and vidfilt
• cmake: use variable for libdir libbaresip.pc.in
• aureceiver: stats cleanup
• rtprecv: tiny cleanup for startup
• rtprecv: add stop flag fixes race condition
• auresamp: alloc for implicit format conversion
• aureceiver: fix decoder sample format and cleanup
• audio: use RE_ATOMIC for muted flag
• gst,play: fix err handling

• OOB write in AV1 DD decoder template_fdiffs() via unbounded while loop
• TLS certificate identity check is skipped when the peer is addressed by IP literal: any CA-issued cert is accepted and reported as verified
• json,odict: optimize memory and lookup performance
• sys: add sys_exec, sys_texec and sys_cexec (UNIX only)
• sip/transp: verify WSS server identity against the target host
• fmt/pl: optimize pl_strstr, pl_strchr and pl_strrchr
• cmake: use variable for libdir in libbaresip.pc.in
• sipreg/sipreg_unregister: call response handler on error
• tls,test: add strict IP-literal SAN TLS verification (no SNI)
• dd: implement out of bound checks
• base64: fix not detected base64_decode olen overflow
• httpauth/digest: fix MD5 default hash handler