The following Fedora 37 Security updates need testing:
Age URL
171
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
70
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c4718e547
containerd-1.6.23-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18cb340b28
xorg-x11-server-Xwayland-22.1.9-3.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f111d2f306
xorg-x11-server-1.20.14-26.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1458e23c3d
dotnet7.0-7.0.113-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3dba61ad8c
dotnet6.0-6.0.124-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-89e8f3efc5 salt-3005.4-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dde357b985
mlpack-4.2.1-5.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ed0ec0035
open-vm-tools-12.3.0-3.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8dd1a1a2e6
rubygem-rmagick-5.2.0-2.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-464caf9bb6
CuraEngine-4.13.1-7.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6efef709eb
community-mysql-8.0.35-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc
tigervnc-1.13.1-6.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6bf2453f
container-selinux-2.224.0-1.fc37
17
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c62ef568f1
mock-core-configs-39.2-1.fc37
17
https://bodhi.fedoraproject.org/updates/FEDORA-2023-de8c54c440 dnf-4.18.0-2.fc37
libdnf-0.72.0-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-273e516f97
libdrm-2.4.117-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f111d2f306
xorg-x11-server-1.20.14-26.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18cb340b28
xorg-x11-server-Xwayland-22.1.9-3.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7662bda6bb
smartmontools-7.4-2.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2afbcc2b6a
osinfo-db-20231027-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b9da12381 glibc-2.36-17.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5d87983e7f crun-1.11.1-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87cf0f48f2
sgpio-1.2.0.10-35.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e701beae49
p11-kit-0.25.2-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b255de5862
linux-firmware-20231030-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18010e9513
vim-9.0.2081-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b3a9cafeb
tracker-miners-3.4.6-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9001fbf2a0
firefox-119.0-2.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c1a262549d
redhat-rpm-config-230-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc
tigervnc-1.13.1-6.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8b6bc9ef2f
google-noto-fonts-20201206^1.git0c78c8329-8.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f2410e5f38
pipewire-0.3.84-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-51e3cb16ef
kernel-6.5.10-100.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fdf7d426f0 cups-2.4.7-2.fc37
The following builds have been pushed to Fedora 37 updates-testing
ascii-3.18-18.fc37
audit-3.1.2-5.fc37
drbd-9.26.0-1.fc37
fossil-2.23-1.fc37
golang-tinygo-x-llvm-0-0.39.20230924gite9707cc.fc37
libopenmpt-0.6.12-1.fc37
libretls-3.8.1-1.fc37
netcat-1.225-3.fc37
objfw-1.0.5-1.fc37
optipng-0.7.8-1.fc37
perl-Authen-U2F-Tester-0.03-4.fc37
python-adjustText-0.8-1.fc37
python-extractcode-31.0.0-1.fc37
radare2-5.8.8-2.fc37
rpki-client-8.6-2.fc37
rust-apple-nvram-0.2.1-1.fc37
rust-asahi-nvram-0.2.1-1.fc37
rust-deranged-0.3.9-1.fc37
rust-logos-derive-0.13.0-1.fc37
rust-powerfmt-0.2.0-1.fc37
rust-powerfmt-macros-0.1.0-1.fc37
tripwire-2.4.3.7-16.fc37
tsung-1.8.0-3.fc37
unrealircd-6.1.2.3-2.fc37
Details about builds:
================================================================================
ascii-3.18-18.fc37 (FEDORA-2023-149533602b)
Interactive ascii name and synonym chart
--------------------------------------------------------------------------------
Update Information:
migrated to SPDX license
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Didier Fabert <didier.fabert(a)gmail.com> - 3.18-18
- migrated to SPDX license
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.18-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.18-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
audit-3.1.2-5.fc37 (FEDORA-2023-927f3e9c4c)
User space tools for kernel auditing
--------------------------------------------------------------------------------
Update Information:
Make auditd smaller, aureport faster, and auditct not leak fd.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Steve Grubb <sgrubb(a)redhat.com> 3.1.2-5
- Bug fixes pulled from upstrean
* Wed Sep 13 2023 Dusty Mabe <dusty(a)dustymabe.com> 3.1.2-4
- Remove initscripts-service from Requires(postun)
* Fri Sep 1 2023 Steve Grubb <sgrubb(a)redhat.com> 3.1.2-3
- Change initscrips-service to a Recommends
* Sat Aug 26 2023 Steve Grubb <sgrubb(a)redhat.com> 3.1.2-2
- SPDX Migration
--------------------------------------------------------------------------------
================================================================================
drbd-9.26.0-1.fc37 (FEDORA-2023-be254ef7ca)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.26.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Peter Hanecak <hany(a)hany.sk> - 9.26.0-1
- Upstream release of 9.26.0
- Build now requires keyutils-libs-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2165406 - drbd-10.0.0a4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2165406
--------------------------------------------------------------------------------
================================================================================
fossil-2.23-1.fc37 (FEDORA-2023-adfd8acaef)
A distributed SCM with bug tracking and wiki
--------------------------------------------------------------------------------
Update Information:
Fossil upstream update: 2.23 (2023-11-01)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Sheng Mao <shngmao(a)gmail.com> - 2.23-1
- Fossil upstream update: 2.23 (2023-11-01)
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.22-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-tinygo-x-llvm-0-0.39.20230924gite9707cc.fc37 (FEDORA-2023-4c2c8f24e2)
Go bindings to a system-installed LLVM
--------------------------------------------------------------------------------
Update Information:
Update to latest commit
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0-0.39
- Update to commit e9707ccad600f53e0844c64256be978cdb4844e5
* Mon Sep 4 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0-0.38
- Update to commit 8e7ec80422a43886fe24b7725bb538ea39457944
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.37
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sun Apr 16 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0-0.36
- Support LLVM 16
* Mon Apr 10 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0-0.35
- Switch to SPDX license
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.34
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libopenmpt-0.6.12-1.fc37 (FEDORA-2023-dd1f904b23)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
Update from 0.6.11 to 0.6.12:
https://lib.openmpt.org/libopenmpt/2023/09/09/rele
ases-0.7.3-0.6.12-0.5.26-0.4.38/
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.6.12-1
- update to 0.6.12
--------------------------------------------------------------------------------
================================================================================
libretls-3.8.1-1.fc37 (FEDORA-2023-81347b7def)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.8.1 (#2243450)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Robert Scheck <robert(a)fedoraproject.org> 3.8.1-1
- Upgrade to 3.8.1 (#2243450)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2243450 - libretls-3.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2243450
--------------------------------------------------------------------------------
================================================================================
netcat-1.225-3.fc37 (FEDORA-2023-81347b7def)
OpenBSD netcat to read and write data across connections using TCP or UDP
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.8.1 (#2243450)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Robert Scheck <robert(a)fedoraproject.org> 1.225-3
- Rebuilt for libretls 3.8.1
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.225-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2243450 - libretls-3.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2243450
--------------------------------------------------------------------------------
================================================================================
objfw-1.0.5-1.fc37 (FEDORA-2023-a3e26b5c88)
Portable, lightweight framework for the Objective-C language
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.5 from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Jonathan Schleifer <js(a)nil.im> - 1.0.5-1
- Update to 1.0.5
--------------------------------------------------------------------------------
================================================================================
optipng-0.7.8-1.fc37 (FEDORA-2023-f3389245ce)
PNG optimizer and converter
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.8 Security fix for CVE-2023-43907
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Peter Hanecak <hany(a)hany.sk> - 0.7.8-1
- Update to 0.7.8
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.7-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.7-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2242461 - CVE-2023-43907 optipng: global buffer overflow via the
'buffer' variable at gifread.c. [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2242461
[ 2 ] Bug #2247874 - optipng-0.7.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2247874
--------------------------------------------------------------------------------
================================================================================
perl-Authen-U2F-Tester-0.03-4.fc37 (FEDORA-2023-a292f30f7a)
FIDO/U2F Authentication Test Client
--------------------------------------------------------------------------------
Update Information:
First Fedora build.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 25 2023 Xavier Bachelot <xavier(a)bachelot.org> 0.03-4
- Review fixes
* Wed Oct 4 2023 Xavier Bachelot <xavier(a)bachelot.org> 0.03-3
- Clean up specfile
* Thu Feb 24 2022 Xavier Bachelot <xavier(a)bachelot.org> 0.03-2
- Fix URL: and Source0:
--------------------------------------------------------------------------------
================================================================================
python-adjustText-0.8-1.fc37 (FEDORA-2023-32e2bda803)
Automatic label placement for matplotlib
--------------------------------------------------------------------------------
Update Information:
Update to 0.8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.8-1
- Update to 0.8
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.7.3-7
- Use forge macros (enabling Packit)
- Drop LICENSE patch
- Drop BR on git-core
- drop %license (now included in dist-info)
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.7.3-6
- Add Packit config
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.7.3-5
- Clean up spec file and use %pypi_name
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.7.3-4
- Also remove patch from sources
* Sat Nov 4 2023 Sandro <devel(a)penguinpee.nl> - 0.7.3-3
- Add patch to dist-git
* Tue Oct 18 2022 Sandro <devel(a)penguinpee.nl> - 0.7.3-2
- Add missing patch file to sources
--------------------------------------------------------------------------------
================================================================================
python-extractcode-31.0.0-1.fc37 (FEDORA-2023-fe2d4f4f3f)
File extraction library and CLI tool to extract almost any archive
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 2 2023 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 31.0.0-1
- Initial import
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2235061 - Review Request: python-extractcode - Mostly universal file
extraction library and CLI tool to extract almost any archive
https://bugzilla.redhat.com/show_bug.cgi?id=2235061
--------------------------------------------------------------------------------
================================================================================
radare2-5.8.8-2.fc37 (FEDORA-2023-f2a6d27239)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
- cherrypick from upstream master patches for known vulnerabilities: -
CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler -
CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 26 2023 Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
- cherrypick from upstream master patches for known vulnerabilities:
- CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
- CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.8.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2233321 - CVE-2023-4322 radare2: Heap-based Buffer Overflow in the bf
dissassembler [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2233321
[ 2 ] Bug #2233322 - CVE-2023-4322 radare2: Heap-based Buffer Overflow in the bf
dissassembler [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2233322
[ 3 ] Bug #2245329 - CVE-2023-5686 radare2: heap-buffer-overflow in
/radare2/shlr/java/code.c:211:21 in java_print_opcode [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2245329
[ 4 ] Bug #2245330 - CVE-2023-5686 radare2: heap-buffer-overflow in
/radare2/shlr/java/code.c:211:21 in java_print_opcode [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2245330
--------------------------------------------------------------------------------
================================================================================
rpki-client-8.6-2.fc37 (FEDORA-2023-81347b7def)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.8.1 (#2243450)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Robert Scheck <robert(a)fedoraproject.org> 8.6-2
- Rebuilt for libretls 3.8.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2243450 - libretls-3.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2243450
--------------------------------------------------------------------------------
================================================================================
rust-apple-nvram-0.2.1-1.fc37 (FEDORA-2023-7ec875a74b)
Library to parse and write apple-formatted nvram entries
--------------------------------------------------------------------------------
Update Information:
Update asahi-nvram packages to 0.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 0.2.1-1
- Update to 0.2.1; Fixes: RHBZ#2248001
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2248001 - rust-apple-nvram-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248001
[ 2 ] Bug #2248002 - rust-asahi-nvram-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248002
--------------------------------------------------------------------------------
================================================================================
rust-asahi-nvram-0.2.1-1.fc37 (FEDORA-2023-7ec875a74b)
Tool to read and write nvram variables on ARM Macs
--------------------------------------------------------------------------------
Update Information:
Update asahi-nvram packages to 0.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 0.2.1-1
- Update to 0.2.1; Fixes: RHBZ#2248002
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2248001 - rust-apple-nvram-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248001
[ 2 ] Bug #2248002 - rust-asahi-nvram-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248002
--------------------------------------------------------------------------------
================================================================================
rust-deranged-0.3.9-1.fc37 (FEDORA-2023-323568dd30)
Ranged integers
--------------------------------------------------------------------------------
Update Information:
- Update the deranged crate to version 0.3.9. - Initial packaging of the
powerfmt and powerfmt-macros crates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.9-1
- Update to version 0.3.9; Fixes RHBZ#2244139
--------------------------------------------------------------------------------
================================================================================
rust-logos-derive-0.13.0-1.fc37 (FEDORA-2023-49da78ac96)
Create ridiculously fast Lexers
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Seth <sethmb(a)pm.me> - 0.13.0-1
- Initial import (fedora#2245450)
--------------------------------------------------------------------------------
================================================================================
rust-powerfmt-0.2.0-1.fc37 (FEDORA-2023-323568dd30)
Utilities for formatting values
--------------------------------------------------------------------------------
Update Information:
- Update the deranged crate to version 0.3.9. - Initial packaging of the
powerfmt and powerfmt-macros crates.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.0-1
- Initial import (#2244276)
--------------------------------------------------------------------------------
================================================================================
rust-powerfmt-macros-0.1.0-1.fc37 (FEDORA-2023-323568dd30)
Procedural macros for powerfmt
--------------------------------------------------------------------------------
Update Information:
- Update the deranged crate to version 0.3.9. - Initial packaging of the
powerfmt and powerfmt-macros crates.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 31 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.0-1
- Initial import (#2244275)
--------------------------------------------------------------------------------
================================================================================
tripwire-2.4.3.7-16.fc37 (FEDORA-2023-af7136eda7)
IDS (Intrusion Detection System)
--------------------------------------------------------------------------------
Update Information:
migrated to SPDX license
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Didier Fabert <didier.fabert(a)gmail.com> - 2.4.3.7-16
- migrated to SPDX license
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.4.3.7-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.4.3.7-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tsung-1.8.0-3.fc37 (FEDORA-2023-ba9eefb305)
A distributed multi-protocol load testing tool
--------------------------------------------------------------------------------
Update Information:
migrated to SPDX license
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Didier Fabert <didier.fabert(a)gmail.com> - 1.8.0-3
- migrated to SPDX license
--------------------------------------------------------------------------------
================================================================================
unrealircd-6.1.2.3-2.fc37 (FEDORA-2023-239e87c78a)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.2.3 UnrealIRCd 6.1.2 focuses on adding spamfilter features but
also contains various other new features and some fixes. * The 6.1.2.1
release fixed a `spamfilter::rule` crash in 6.1.2. * The 6.1.2.2 release
fixed tkldb accidentally storing central spamfilters, a crash while booting if
you previously used spamfilters with non-UTF-8 characters in them, and fix a
possible crash with `SETNAME` when using the SPAMFILTER `u` target. * The
6.1.2.3 release fixed UTF-8 not working in `spamfilter { }` blocks and a
possible crash on `REHASH` if you have typos or other errors in the config file.
Also fixing `::exclude-security-group` not working and it now gives DNSBL
lookups some more time. # Enhancements * Upstream now gives tips on
(security) best practices depending on settings in your configuration file, such
as using plaintext oper passwords in the config file. It is generally suggested
to follow this advice, but you could disable such advice via [set::best-
practices](https://www.unrealircd.org/docs/Set_block#set::best-practices). *
[`security-group { }`
block](https://www.unrealircd.org/docs/Security-
group_block) and [mask
item](https://www.unrealircd.org/docs/Mask_item)
enhancements: * Add support for `channel "#xyz";` and `channel
"@#need_ops_here";` * Add support for
[
Crule](https://www.unrealircd.org/docs/Crule) to allow things like `rule
"inchannel('@#main')||reputation()>1000";` * DNS Blacklists are now
checked
again some time after the user is connected. This will kill/ban users who are
already online and got blacklisted later by for example DroneBL. * This is
controlled via [`set::blacklist::recheck-
time`](https://www.unrealircd.org/docs/Set_block#set::blacklist::recheck-...
and can also be set to `never` if you don't want rechecking. * To skip
checking for specific blacklists, you can set
[`blacklist::recheck`](https://www.unrealircd.org/docs/Blacklist_block) to `no`.
* The [reputation
score](https://www.unrealircd.org/docs/Reputation_score) of
connected users (actually IP's) is increased every 5 minutes. Upstream still
does this, but only for users who are at least in one channel that has 3 or more
members. This setting is tweakable via [`set::reputation::score-bump-timer-
minimum-channel-
members`](https://www.unrealircd.org/docs/Set_block#set::reputation). Setting
this to 0 means to bump scores also for people who are in no channels at all,
which was the behavior in previous UnrealIRCd versions. Note: this new feature
won't work properly when you have any older UnrealIRCd servers on the network
(older than 6.1.2), as the older servers will still bump scores for everyone,
including users in no channels, and this higher score will get synced back
eventually to all other servers. * [`spamfilter { }`
block](https://www.unrealircd.org/docs/Spamfilter_block) improvements: *
Spamfilters now always run, even for users that are exempt via a [except ban
block](https://www.unrealircd.org/docs/Except_ban_block) with `type spamfilter`.
However, for exempt users no action is taken or logged. This allows it to count
normal hits and count hits for except users. The idea is that the hits for
except users can be a useful measurement to detect false positives. These hit
counts are exposed in `SPAMFILTER` and `STATS spamfilter`. * Optional items
allowing more complex rules: * [`spamfilter::rule`](https://www.unrealircd
.org/docs/Spamfilter_block#Spamfilter_rule): with minimal 'if'-like
preconditions and functions. If this returns false then the spamfilter will not
run at all (no hit). * `spamfilter::except`: this is meant as an
alternative to 'rule' and works like a regular [except
item](https://www.unrealircd.org/docs/Mask_item). If this matches, then the
spamfilter will not run at all (no hit). * New target type `raw` (or `R` on
IRC) to match a raw command / IRC protocol line (except message tags), such as
`LIST*`. Naturally one needs to be very careful with these since a wrong filter
could cause all/essential traffic to be rejected. * The `action` item now
supports multiple actions: * A new action `stop` to stop other spamfilters
from processing. * A new action `set` to [set a
TAG](https://www.unrealircd.org/docs/Spamfilter_block#Setting_tags) on a user,
or change the value of one. It also supports changing the [reputation
score](https://www.unrealircd.org/docs/Reputation_score). * A new action
`report` to call a spamreport block, see next. * A new [spamreport { }
block](https://www.unrealircd.org/docs/Spamreport_block): * This can do a
HTTP(S) call to services like DroneBL to report spam hits, so they can blacklist
the IP address and other users on IRC can benefit. * Optional [Central
Spamfilter](https://www.unrealircd.org/docs/Central_spamfilter): This will fetch
and refresh spamfilter rules every hour from
unrealircd.org. * This feature
is not enabled by default. Use `set { central-spamfilter { enabled yes; } }` to
enable. * `set::central-spamfilter::feed` decides which feed to use: `fast`
for early access to spamfilter rules that are new, and `standard` (the default)
for rules that have been in fast for a while. * `set::central-
spamfilter::except` defines who will never be affected by central spamfilters.
By default it is: users with a reputation score of more than 2016 (7 days online
unregged, or 3.5 days as identified user) or having a host of *.irccloud.com.
Spam matches for users that fall in this ::except group are counted as false
positives and no action is taken or logged. * See the [Central
Spamfilter](https://www.unrealircd.org/docs/Central_spamfilter) article for the
disclaimer and all other options you can set. * [`set::spamfilter::utf8`](http
s://www.unrealircd.org/docs/Set_block#set::spamfilter::utf8) is now on by
default: * This means you can safely use UTF-8 characters in like `[]` in
regex. * Case insensitive matches work better. For example, for extended
Latin, a spamfilter on `��` then also matches `��`. * Other PCRE2 features
such as [`\p`](https://www.pcre.org/current/doc/html/pcre2syntax.html#SEC5) can
then be used. For example the regex `\p{Arabic}` would block all Arabic script.
See also this [full list of
scripts](https://www.pcre.org/current/doc/html/pcre2syntax.html#SEC7). Please
use this new tool with care. Blocking an entire language or script is quite a
drastic measure. * You can turn it off via: `set { spamfilter { utf8 no; }
}` * Via [`set::spamfilter::show-message-content-on-
hit`](https://www.unrealircd.org/docs/Set_block#set::spamfilter::show-mes...
content-on-hit) you can now configure to hide the message content in spamfilter
hit messages. Generally it is very useful to see if a spamfilter hit is correct
or not, so the default is 'always', but it also has privacy implications so
there is now this option to disable it. * You can restrict includes to only
contain certain blocks, the style is: `include "some-file-or-url" { restrict-
config { name-of-block; name-of-block2; } }` * A new `~flood` [extended
ban](https://www.unrealircd.org/docs/Extended_bans). This mode allows you to
exempt users from channel mode `+f` and `+F`. It was actually added in a
previous version (6.1.0) but never made it to the release notes. The syntax is:
~flood:types:mask, where *types* are the same letters as used in [channel mode
+f](https://www.unrealircd.org/docs/Channel_anti-flood_settings#Channel_mode_f).
Example: `+e ~flood:t:*!*@*.textflood.example.org` # Changes * The argon2
parameters have been lowered a bit, this so the hashing speed is acceptable for
upstream's purposes. # Fixes * Temporary high CPU usage (99%) under some
conditions * UnrealIRCd has watch away notification since 2008, this is
indicated in `RPL_ISUPPORT` via `WATCHOPTS=A` and then the syntax to actually
use this is `WATCH A +Nick1 +Nick2 etc.`. In UnrealIRCd 6 there was a bug where
it would not always correctly inform about the away status, that bug has now
been fixed. * On 32 bit architectures you can now use more than 32 channel
modes. * [Set block for a security
group](https://www.unrealircd.org/docs/Set_
block#Set_block_for_a_security_group): was not working for the `unknown-users`
group. * A leading slash was silently stripped in config file items, when not
in quotes. # Developers and protocol * Changes in numeric 229
(`RPL_STATSSPAMF`): Now includes hits and hits for users that are exempt, two
counters inserted right before the last argument (the regex). * Several API
changes, like `place_host_ban` to `take_action`
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.2.3-2
- Build upstream's bundled recent PCRE2 version for RHEL 7 and 8
* Mon Oct 16 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.2.3-1
- Upgrade to 6.1.2.3 (#2238031)
* Sun Oct 8 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.2.2-1
- Upgrade to 6.1.2.2 (#2238031)
* Thu Oct 5 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.2.1-1
- Upgrade to 6.1.2.1 (#2238031)
* Thu Oct 5 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.2-1
- Upgrade to 6.1.2 (#2238031)
* Thu Oct 5 2023 Remi Collet <remi(a)remirepo.net> - 6.1.1.1-3
- rebuild for new libsodium
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.1.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2238031 - unrealircd-6.1.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2238031
--------------------------------------------------------------------------------