[SECURITY] Fedora 38 Update: unrealircd-6.1.4-1.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-41f41fbb69
2023-12-26 01:11:49.759330
--------------------------------------------------------------------------------
Name : unrealircd
Product : Fedora 38
Version : 6.1.4
Release : 1.fc38
URL : https://www.unrealircd.org/
Summary : Open Source IRC server
Description :
UnrealIRCd is an Open Source IRC server based on the branch of IRCu called
Dreamforge, formerly used by the DALnet IRC network. Since the beginning of
development on UnrealIRCd in May of 1999, it has become a highly advanced
IRCd with a strong focus on modularity, an advanced and highly configurable
configuration file. Key features include SSL/TLS, cloaking, advanced anti-
flood and anti-spam systems, swear filtering and module support.
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in
UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at:
https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can
be triggered by users when
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a
listen block with `listen::options::websocket`). This was assigned
CVE-2023-50784. * In 6.1.3,
[Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working
with Chrome and possibly other browsers.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 16 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.4-1
- Upgrade to 6.1.4 (#2254828)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce
https://bugzilla.redhat.com/show_bug.cgi?id=2254874
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-41f41fbb69' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------