The following Fedora EPEL 8 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ad7d095358 rdiff-backup-2.2.6-3.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a79d31df77 chromium-120.0.6099.109-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
unrealircd-6.1.4-1.el8
Details about builds:
================================================================================ unrealircd-6.1.4-1.el8 (FEDORA-EPEL-2023-4cbae7b5bd) Open Source IRC server -------------------------------------------------------------------------------- Update Information:
# UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at: https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can be triggered by users when [Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a listen block with `listen::options::websocket`). This was assigned CVE-2023-50784. * In 6.1.3, [Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working with Chrome and possibly other browsers. -------------------------------------------------------------------------------- ChangeLog:
* Sat Dec 16 2023 Robert Scheck robert@fedoraproject.org 6.1.4-1 - Upgrade to 6.1.4 (#2254828) * Sat Dec 9 2023 Robert Scheck robert@fedoraproject.org 6.1.3-1 - Upgrade to 6.1.3 (#2252372) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce https://bugzilla.redhat.com/show_bug.cgi?id=2254874 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org