openSUSE-SU-2017:1824-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2017:1824-1

Related

Published

2017-07-07T23:03:39Z

Modified

2017-07-07T23:03:39Z

Summary

Security update for irssi

Details

This update for irssi to version fixes the following issues:

CVE-2017-10965: A malicious server could cause irssi to crash by providing an invalid timestamp
CVE-2017-10966: Undefined behavior may be triggered when irssi updates the internal nick list

A number of minor upstream bug fixes are also included.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.4-28.1

{
    "binaries": [
        {
            "irssi-devel": "1.0.4-28.1",
            "irssi": "1.0.4-28.1"
        }
    ]
}