The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7a05e8decc rdiff-backup-2.2.6-3.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b1b8b8b25 llhttp-9.1.3-1.el9 python-aiohttp-3.9.1-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0bdf9bf395 chromium-120.0.6099.109-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing libunifex-0.4.0-1.el9 unrealircd-6.1.4-1.el9 Details about builds: ================================================================================ libunifex-0.4.0-1.el9 (FEDORA-EPEL-2023-e75b559f92) A prototype implementation of the C++ sender/receiver async programming model -------------------------------------------------------------------------------- Update Information: update -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 17 2023 topazus <topazus@xxxxxxxxxxx> - 0.4.0-1 - initial import; RHBZ#2254853 -------------------------------------------------------------------------------- ================================================================================ unrealircd-6.1.4-1.el9 (FEDORA-EPEL-2023-6a67ef6626) Open Source IRC server -------------------------------------------------------------------------------- Update Information: # UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at: https://forums.unrealircd.org/viewtopic.php?t=9340 ## Fixes * Crash that can be triggered by users when [Websockets](https://www.unrealircd.org/docs/WebSocket_support) are in use (a listen block with `listen::options::websocket`). This was assigned CVE-2023-50784. * In 6.1.3, [Websockets](https://www.unrealircd.org/docs/WebSocket_support) were not working with Chrome and possibly other browsers. -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 16 2023 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 6.1.4-1 - Upgrade to 6.1.4 (#2254828) * Sat Dec 9 2023 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 6.1.3-1 - Upgrade to 6.1.3 (#2252372) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254874 - CVE-2023-50784 unrealircd: denial of service and rce https://bugzilla.redhat.com/show_bug.cgi?id=2254874 -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
