Advisories » MGASA-2017-0190

Updated weechat packages fix security vulnerability

Publication date: 28 Jun 2017
Modification date: 28 Jun 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-8073

Description

It was discovered that weechat is prone to a buffer overflow
vulnerability in the IRC plugin, allowing a remote attacker to cause a
denial-of-service by sending a specially crafted filename via DCC
(CVE-2017-8073).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20756
• https://www.debian.org/security/2017/dsa-3836
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8073

SRPMS

5/core

• weechat-0.4.1-7.1.mga5