The following Fedora EPEL 8 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e00c3d01e cutter-re-2.2.0-1.el8 rizin-0.5.1-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-921342768a python-cairosvg-2.7.0-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-347df5dde7 netconsd-0.2-1.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-30fee0c2cb ImageMagick-6.9.12.82-1.el8

The following builds have been pushed to Fedora EPEL 8 updates-testing

gnome-shell-extension-system-monitor-applet-38-22.20230326git21d7b4e.el8 openbgpd-7.9-1.el8 unrealircd-6.0.7-1.el8

Details about builds:

================================================================================ gnome-shell-extension-system-monitor-applet-38-22.20230326git21d7b4e.el8 (FEDORA-EPEL-2023-92235e01f5) A Gnome shell system monitor extension -------------------------------------------------------------------------------- Update Information:

Updated to last upstream commits -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 26 2023 Nicolas Vi��ville nicolas.vieville@uphf.fr - 1:38-22.20230326git21d7b4e - Updated to last upstream commits - Remove patch for gnome 43 - applied upstream - Disable Python output buffering - Add setting for tooltip delay - Added the possibility to rearrange the graphs - Remove "nvidia gpu only" message - gpu_usage.sh: Replace cut and gawk with shell internals - Wrap into register class - Fix a small typo in extension.js - Add space before 'R' in disk usage string - Gnome-Shell 43 compatibility update - Continue running when screen is locked and optionally show on lockscreen, using session modes * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1:38-21.20220527gitb359d88 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Nov 9 2022 Nicolas Vi��ville nicolas.vieville@uphf.fr - 1:38-20.20220527gitb359d88 - Added support for gnome 43 * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1:38-19.20220527gitb359d88 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ openbgpd-7.9-1.el8 (FEDORA-EPEL-2023-c408e6e00e) OpenBGPD Routing Daemon -------------------------------------------------------------------------------- Update Information:

# OpenBGPD 7.9 * Include OpenBSD 7.2 errata 023: Incorrect length checks allow an out-of-bounds read in `bgpd(8)`. -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 23 2023 Robert Scheck robert@fedoraproject.org 7.9-1 - Upgrade to 7.9 (#2181220) * Sat Mar 18 2023 Robert Scheck robert@fedoraproject.org 7.8-1 - Upgrade to 7.8 (#2179395) * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 7.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2181220 - openbgpd-7.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2181220 --------------------------------------------------------------------------------

================================================================================ unrealircd-6.0.7-1.el8 (FEDORA-EPEL-2023-cc37fcff8e) Open Source IRC server -------------------------------------------------------------------------------- Update Information:

# UnrealIRCd 6.0.7 UnrealIRCd 6.0.7 makes `WHOWAS` show more information to IRCOps. It also contains other enhancements and quite a number of bug fixes. One notable change is that on linking of anope or atheme, every server will now check if they have `ulines { }` for that services server, since it's a common mistake to forget this, leading to desyncs or other weird problems. ## Enhancements * `WHOWAS` now shows IP address and account information to IRCOps * Allow services to send a couple of protocol messages in the unregistered / SASL stage. These are: `CHGHOST`, `CHGIDENT` and `SREPLY` * This allows services to set the vhost on a user during SASL, so the user receives the vhost straight from the start, before all the auto-joining/re-rejoining of channels. * Future anope/atheme/etc services will presumably support this. * [WebSocket](https://www.unrealircd.org/docs/WebSocket_support) status is now synced over the network and an extra default [security group](https://www.unrealircd.org/docs/Security-group_block) `websocket-users` has been added. Similarly there is now `security-group::websocket` and `security-group::exclude-websocket` item. Same for [mask items](https://www.unrealircd.org/docs/Mask_item) such as in [`set::restrict- commands::command::except`](https://www.unrealircd.org/docs/Restrict_commands). * Support for IRCv3 [Standard Replies](https://ircv3.net/specs/extensions/standard-replies). Right now nothing fancy yet, other than sending `ACCOUNT_REQUIRED_TO_CONNECT` from the authprompt module when a user is [soft-banned](https://www.unrealircd.org/docs/Soft_ban). * Add support for sending IRCv3 Standard Replies intra-server, e.g. from services (`SREPLY` server-to-server command) * Support `NO_COLOR` environment variable, as per [no-color.org](https://no-color.org). ## Changes * UnrealIRCd now verifies that all servers have [`ulines { }`](https://www.unrealircd.org/docs/Ulines_block) for Anope and Atheme servers and reject the link if this is not the case. * The `FLOOD_BLOCKED` log message now shows the target of the flood for `target-flood-user` and `target-flood- channel`. * When an IRCOp sets `+H` to hide ircop status, only the swhois items that were added through oper will be hidden (and not the ones added by e.g. vhost). Previously all were hidden. ## Fixes * Crash if a third party module is loaded which allows very large message tags (e.g. has no length check) * Crash if an IRCOp uses [`unrealircd.org/json- log`](https://www.unrealircd.org/docs/JSON_logging#Enabling_on_IRC) on IRC and during `REHASH` some module sends log output during `MOD_INIT` (e.g. with some 3rd party modules) * Crash when parsing [deny link block](https://www.unrealircd.org/docs/Deny_link_block) * In `LUSERS` the "unknown connection(s)" count was wrong. This was just a harmless counting error with no other effects. * Silence warnings on Clang 15+ (e.g. Ubuntu 23.04) * Don't download `GeoIP.dat` if you have [`blacklist-module geoip_classic;`](https://www.unrealircd.org/docs/Blacklist-module_directive) * Channel mode `+S` stripping too much on incorrect color codes. * Make [`@if module- loaded()`](https://www.unrealircd.org/docs/Defines_and_conditional_config) work correctly for modules that are about to be unloaded during `REHASH`. * Some missing notices if remotely `REHASH`ing a server, and one duplicate line. * Check invalid host setting in `oper::vhost`, just like it is already in `vhost::vhost`. -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 26 2023 Robert Scheck robert@fedoraproject.org 6.0.7-1 - Upgrade to 6.0.7 (#2181536) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2181536 - unrealircd-6.0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2181536 --------------------------------------------------------------------------------