The following Fedora EPEL 9 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-6812bb3862 python-bottle-0.12.21-2.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-e3b62a5569 restic-0.13.1-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing dkms-3.0.4-1.el9 mold-1.3.0-1.el9 unrealircd-6.0.4-1.el9 Details about builds: ================================================================================ dkms-3.0.4-1.el9 (FEDORA-EPEL-2022-fa5f15ae7c) Dynamic Kernel Module Support Framework -------------------------------------------------------------------------------- Update Information: Various bugfixes. -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 18 2022 Simone Caronni <negativo17@xxxxxxxxx> - 3.0.4-1 - Update to 3.0.4. * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 3.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mold-1.3.0-1.el9 (FEDORA-EPEL-2022-d8f302157d) A Modern Linker -------------------------------------------------------------------------------- Update Information: Bump version to 1.3.0 (#2098316) -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 18 2022 Christoph Erhardt <fedora@xxxxxxxxxxx> - 1.3.0-1 - Bump version to 1.3.0 (#2098316) - Drop upstreamed patches -------------------------------------------------------------------------------- References: [ 1 ] Bug #2098316 - mold-1.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2098316 -------------------------------------------------------------------------------- ================================================================================ unrealircd-6.0.4-1.el9 (FEDORA-EPEL-2022-3ff0c03d0d) Open Source IRC server -------------------------------------------------------------------------------- Update Information: # UnrealIRCd 6.0.4 This release comes with lots of features and enhancements. In particular, security groups and mask items now allow you to write cleaner and more flexible configuration files. There are also JSON logging enhancements and several bug fixes. ## Enhancements * Show security groups in `WHOIS` * The [security-group](https://www.unrealircd.org/docs/Security-group_block) block has been expanded and the same functionality is now available in [mask items](https://www.unrealircd.org/docs/Mask_item) too: * This means the existing options like `identified`, `webirc`, `tls` and `reputation-score` can be used in `allow::mask` etc. * New options (in both security-group and mask) are: * `connect-time`: time a user is connected to IRC * `security-group`: to check another security group * `account`: services account name * `country`: country code, as found by GeoIP * `realname`: realname (gecos) of the user * `certfp`: certificate fingerprint * Every option also has an exclude- variant, e.g. `exclude- country`. If a user matches any `exclude-` option then it is considered not a match. * The modules [connthrottle](https://www.unrealircd.org/docs/Connthrottle), [restrict- commands](https://www.unrealircd.org/docs/Set_block#set::restrict-commands) and [antirandom](https://www.unrealircd.org/docs/Set_block#set::antirandom) now use the new `except` sub-block which is a mask item. The old syntax (e.g. `set::antirandom::except-webirc`) is still accepted by UnrealIRCd and converted to the appropriate new setting behind the scenes (`set::antirandom::except::webirc`). * The modules [blacklist](https://www.unrealircd.org/docs/Blacklist_block) and [antimixedutf8](https://www.unrealircd.org/docs/Set_block#set::antimixedutf8) now also support the `except` block (a mask item). * Other than that the extended functionality is available in these blocks: `allow`, `oper`, `tld`, `vhost`, `deny channel`, `allow channel`. * Example of direct use in a ::mask item: ``` /* Spanish MOTD for Spanish speaking countries */ tld { mask { country { ES; AR; BO; CL; CO; CR; DO; EC; SV; GT; HN; MX; NI; PA; PY; PE; PR; UY; VE; } } motd "motd.es.txt"; rules "rules.es.txt"; } ``` * Example of defining a security group and using it in a mask item later: ``` security-group irccloud { mask { ip1; ip2; ip3; ip4; } } allow { mask { security-group irccloud; } class clients; maxperip 128; } except ban { mask { security-group irccloud; } type { blacklist; connect-flood; handshake-data-flood; } } ``` * Because the mask item is so powerful now, the `password` in the [oper block](https://www.unrealircd.org/docs/Oper_block) is optional now. * We now support `oper::auto-login`, which means the user will become IRCOp automatically if they match the conditions on-connect. This can be used in combination with [certificate fingerprint](https://www.unrealircd.org/docs/Certificate_fingerprint) authentication for example: ``` security-group Syzop { certfp "1234etc."; } oper Syzop { auto-login yes; mask { security-group Syzop; } operclass netadmin-with-override; class opers; } except ban { mask { security- group Syzop; } type all; } ``` * For [JSON logging](https://www.unrealircd.org/docs/JSON_logging) a number of fields were added when a client is expanded: * `geoip`: with subitem `country_code` (e.g. NL) * `tls`: with subitems `cipher` and `certfp` * Under subitem `users`: * `vhost`: if the visible host differs from the realhost then this is set (thus for both vhost and cloaked host) * `cloakedhost`: this is always set (except for e.g. services users), even if the user is not cloaked so you can easily search on a cloaked host. * `idle_since`: last time the user has spoken (local clients only) * `channels`: list of channels (array), with a maximum of 384 chars. * The JSON logging now also strips ASCII below 32, so color- and control codes. * Support IRCv3 `+draft/channel- context` * Add `example.es.conf` (Spanish example configuration file) * The country of users is now communicated in the [message- tag](https://www.unrealircd.org/docs/Message_tags) `unrealircd.org/geoip` (only to IRCOps). * Add support for linking servers via UNIX domain sockets (`link::outgoing::file`). ## Fixes * Crash in `except ban` with `~security- group:xyz` * Crash if hideserver module was loaded but `LINKS` was not blocked. * Infinite loop if one security-group referred to another. * Duplicate entries in the `+beI` lists of `+P` channels. * Regular users were able to `-o` a service bot (that has umode `+S`) * Module manager did not stop on compile error * [`set::modes-on- join`](https://www.unrealircd.org/docs/Set_block#set::modes-on-join) did not work with `+f` + timed bans properly, e.g. `[3t#b1]:10` * Several log messages were missing some information. * Reputation syncing across servers had a small glitch. Fix is mostly useful for servers that were not linked to the network for days or weeks. ## Changes * Clarified that UnrealIRCd is licensed as "GPLv2 or later" * Fix use of variables in [`set::reject- message`](https://www.unrealircd.org/docs/Set_block#set::reject-message) and in [`blacklist::reason`](https://www.unrealircd.org/docs/Blacklist_block): previously short forms of variables were (unintentionally) expanded as well, such as `$serv` for `$server`. This is no longer supported, you need to use the correct full variable names. ## Developers and protocol * The `creationtime` is now communicated of users. Until now this information was only known locally (the thing that was communicated that came close was "last nick change" but that is not the same). This is synced via (early) moddata across servers. Module coders can use `get_connected_time()`. * The `RPL_HOSTHIDDEN` is now sent from `userhost_changed()` so you don't explicitly send it yourself anymore. * The `SVSO` command is back, so services can make people IRCOp again. See `HELPOP SVSO` or [the commit](https://github.com/unrealircd/unrealircd/commit/50e5d91c79 8e7d07ca0c68d9fca302a6b6610786) for more information. * Due to last change the `HOOKTYPE_LOCAL_OPER` parameters were changed. * Module coders can enhance the [JSON logging](https://www.unrealircd.org/docs/JSON_logging) expansion items for clients and channels via new hooks like `HOOKTYPE_JSON_EXPAND_CLIENT`. This is used by the geoip and tls modules. -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 18 2022 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 6.0.4-1 - Upgrade to 6.0.4 (#2090417) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2090417 - unrealircd-6.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2090417 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
