SUSE-SU-2016:2524-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:2524-1

Related

Published

2016-10-07T13:29:02Z

Modified

2016-10-07T13:29:02Z

Summary

Security update for irssi

Details

The IRC client irssi was updated to 0.8.20, fixing various bugs and security issues.

CVE-2016-7044: The unformat24bitcolor function in the format parsing code in Irssi, when compiled with true-color enabled, allowed remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
CVE-2016-7045: The formatsendto_gui function in the format parsing code in Irssi allowed remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.

See https://irssi.org/security/irssisa2016.txt for more details.

See https://irssi.org/2016/09/22/buf.pl-update/ for more information.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.20-9.1

{
    "binaries": [
        {
            "irssi-devel": "0.8.20-9.1",
            "irssi": "0.8.20-9.1"
        }
    ]
}