Advisories » MGASA-2017-0216

Updated irssi packages fix security vulnerabilities

Publication date: 24 Jul 2017
Modification date: 24 Jul 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-10965 , CVE-2017-10966

Description

A malicious server could cause irssi to crash by providing an invalid
timestamp (CVE-2017-10965).

Undefined behavior may be triggered when irssi updates the internal nick
list (CVE-2017-10966).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21199
• https://lists.opensuse.org/opensuse-updates/2017-07/msg00044.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10965
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10966

SRPMS

5/core

• irssi-0.8.21-1.2.mga5

6/core

• irssi-1.0.4-1.mga6