The following Fedora EPEL 8 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ad7d095358 rdiff-backup-2.2.6-3.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a79d31df77 chromium-120.0.6099.109-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
unrealircd-6.1.4-1.el8
Details about builds:
================================================================================
unrealircd-6.1.4-1.el8 (FEDORA-EPEL-2023-4cbae7b5bd)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in
UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at:
https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can
be triggered by users when
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a
listen block with `listen::options::websocket`). This was assigned
CVE-2023-50784. * In 6.1.3,
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working
with Chrome and possibly other browsers.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 16 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.4-1
- Upgrade to 6.1.4 (#2254828)
* Sat Dec 9 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.3-1
- Upgrade to 6.1.3 (#2252372)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce
https://bugzilla.redhat.com/show_bug.cgi?id=2254874
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5418332424 chromium-120.0.6099.109-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
unrealircd-6.1.4-1.el7
Details about builds:
================================================================================
unrealircd-6.1.4-1.el7 (FEDORA-EPEL-2023-33f7b7a10c)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in
UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at:
https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can
be triggered by users when
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a
listen block with `listen::options::websocket`). This was assigned
CVE-2023-50784. * In 6.1.3,
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working
with Chrome and possibly other browsers.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 16 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.4-1
- Upgrade to 6.1.4 (#2254828)
* Sat Dec 9 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.3-1
- Upgrade to 6.1.3 (#2252372)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce
https://bugzilla.redhat.com/show_bug.cgi?id=2254874
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7a05e8decc rdiff-backup-2.2.6-3.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b1b8b8b25 llhttp-9.1.3-1.el9 python-aiohttp-3.9.1-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0bdf9bf395 chromium-120.0.6099.109-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
libunifex-0.4.0-1.el9
unrealircd-6.1.4-1.el9
Details about builds:
================================================================================
libunifex-0.4.0-1.el9 (FEDORA-EPEL-2023-e75b559f92)
A prototype implementation of the C++ sender/receiver async programming model
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 17 2023 topazus <topazus(a)outlook.com> - 0.4.0-1
- initial import; RHBZ#2254853
--------------------------------------------------------------------------------
================================================================================
unrealircd-6.1.4-1.el9 (FEDORA-EPEL-2023-6a67ef6626)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in
UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at:
https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can
be triggered by users when
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a
listen block with `listen::options::websocket`). This was assigned
CVE-2023-50784. * In 6.1.3,
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working
with Chrome and possibly other browsers.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 16 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.4-1
- Upgrade to 6.1.4 (#2254828)
* Sat Dec 9 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.3-1
- Upgrade to 6.1.3 (#2252372)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce
https://bugzilla.redhat.com/show_bug.cgi?id=2254874
--------------------------------------------------------------------------------