MGASA-2017-0216

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0216.html

Import Source

https://advisories.mageia.org/MGASA-2017-0216.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0216

Related

Published

2017-07-24T21:45:38Z

Modified

2017-07-24T21:30:34Z

Summary

Updated irssi packages fix security vulnerabilities

Details

A malicious server could cause irssi to crash by providing an invalid timestamp (CVE-2017-10965).

Undefined behavior may be triggered when irssi updates the internal nick list (CVE-2017-10966).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.4-1.mga6

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.21-1.2.mga5

{
    "section": "core"
}